Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    03/05/2024, 05:25

General

  • Target

    0fc461b4e6bb56388357461dc7547a84_JaffaCakes118.html

  • Size

    461KB

  • MD5

    0fc461b4e6bb56388357461dc7547a84

  • SHA1

    b537047f47383803e5aa65eb70f6fa7889a80f83

  • SHA256

    ba550d3a713de053bde3aefbb21766c8f14c4bf694d78de555eb5898613a8224

  • SHA512

    5a41e30635f546af249e19a03987ef37b840325dc30ee13d3ca8095ea5aa9a62fe398eac249ce5d8076e9b47b5a78b687d15d1c5db13d4454342499d0068f6a3

  • SSDEEP

    6144:SJsMYod+X3oI+YCsMYod+X3oI+YwsMYod+X3oI+YLsMYod+X3oI+YQ:Q5d+X3u5d+X3s5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0fc461b4e6bb56388357461dc7547a84_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2380
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2380 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2416

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    d312cf16d707d5ce98bd8141b778b6d9

    SHA1

    5dc21d3d68196d6db36d0fb75addb07d4a99f2ff

    SHA256

    76d0f0ab3af7b799f9ffc699d2f05ae9f9a1d94a30b3fccfd0f91817f04d5e43

    SHA512

    64359955d84fbe2d44b0193d6fccc9134a070733fcde37bbf21f4d958591b53505b47c537a42547704a789fcb850071e112b2fd02f26614599a0c0313a861c4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    139309eadaf751831cc5ee139c70f992

    SHA1

    c51c79c8e8219e2a06bfbcefedce4523871930bf

    SHA256

    c8d491ea85712e23a19b2896a1538b39b7ac3991fbce257a6714e1297ac63f70

    SHA512

    6b74f28a0b8bbf4f68e512d4bfa7dcae05a11d95c6e176d96f54dfce13f586cf73e5c62f29bda8ec7df99050516080c6d4a84c8405506b8af469ed190c768232

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f9cb84d1d9046e247023da9337ae5b9

    SHA1

    4a22abed54b4365f6b4f0a8b28927fabd696998d

    SHA256

    2a88110981b2108e3c3b85c398c9b68f86dcf6808c6f367203e9c349fd3121ec

    SHA512

    4251d54979c3cd376a0520a5f67da1f4c76223331b6982027107effb7689dc0d15453f7b55b4e692c40f1e9baff5c5fd5816de99f23a6bb4baed83eb9f086a8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab6ab3adbe09af36ee0e3a799e17f042

    SHA1

    ab7077fbf699b1669927f55893116922a13d1f34

    SHA256

    77d0260f0a293b779ae9911663ff03d12ba8336de42b05bfa494efd54e8598b5

    SHA512

    0ad953a78f7a348be6ac30f89ad278f74effd557bf11bbc805acfeb8ea40cb2d000492e5d19e0c15c18b45a764008e4a3626efe8ce055272f0c9530abf1721f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa47a601a57b0fbd0b7168129b35152d

    SHA1

    4bc25fc16b82edd1adf75a957bc90017e852a874

    SHA256

    17d55988659055b82cc432ebf16536862a297e1d1afb5154c6ca267cced437ed

    SHA512

    90e1e28f9fa6943431f032abc6e4738944044674ed5f1313b92e6be59fcb31ca37c24af60c4c50ed5accb45c549ff2a7e4b4b2003ffabb337111fc410a65c8a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2501b8030c220c4475d0805c7b5ec7a6

    SHA1

    fbeabf8f7162f8d2dc56f80e081f0211ba8d6fb4

    SHA256

    ad1d5cc8e283e513f4515d2d1da001f571951389ac4f424649880b218c788415

    SHA512

    584f3e62f3a9b4c0833f8ac6855c2c510d05fcc6bc8f010fb78d1fe3f9c2c269917a9bf44f9f294d125ff9a76522a599b0edca443772c47b3f257032ac66e252

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0643896877f262cfcc13c1a00b6d3c2f

    SHA1

    756259af596cf64e046a482cc6d0497603b91715

    SHA256

    e7f00fc4c292a41f159013cb413781ded6f0ac80b76e527f1de1a42ac94a6788

    SHA512

    33d4c72f902969f6e8851939206a32e8038053f5abbce81bcf3c437c6edf8b1ed22592770498f550885b4682bea75bd7f5ffc9c14f0e07361ffc1a7a03be4c7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6fe123e9d4169ab86d3607d56bc48a3e

    SHA1

    ffb26a94d51b562e936118cc75e00de41e19eaf1

    SHA256

    4b578aeb7e7aa6ff78ae5bd6ce2dc2c88074f1d9c7a2f123a0d71581f88f0d71

    SHA512

    3249965252d47808684eb3fd2f923566b0109610e7c0777975ca3804a296a8432974dfece4f0360a9992a63fc59f81164c31c6bd8e9b125426a8b12fa96098e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57260570670ea5e9c958a34488f39771

    SHA1

    55910181f377e1e723693911edcb6d1f33a1291e

    SHA256

    5696897ffabde45155b562541983492bdc772b135cebc9561b1c722b7611ed8d

    SHA512

    ba9dbf091847fe5b51ce39b7ea2e37c0cf30ea334ebcba129d71a345457fb6816cd8babf0ec3f768ef29559c7eeaedeae5f615e13f4bba4c2ac68e7069d0f1b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23134f65e1cbae7b3c235cb38f879a4d

    SHA1

    8f2421922bf71e996c2d0040b319e7c9919022d1

    SHA256

    39b1047ec3b7718a28cad41ca1d269b152582edbdcaca18f6315e8b133c707fe

    SHA512

    ad76cb633b8868eeb461f30abb8c89553e0030af66d940f06664340f4268f7693979d8bb46da6acaa60f3efb77f9f3b605b06d9ac02ff9819dc8ae6218c9480a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d1410a9758f2af071a3d096098b3ffd

    SHA1

    5fd2637fc915657baf93ab92c3bc5e7bf95e580c

    SHA256

    52c3d81d12b3da1ac9770db51822b3ba83b2eb74e9e2f54cb43f9c6500170620

    SHA512

    65c8cea1a900d7705c47f3393822b88183d25e8047909c84838b075f037278f027ee82f4d6f0daf9dc7583e152986b84e38e5f17a3cb195a282ff840b3f24128

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53df5d71c2fccf69c59bc37fccd7094b

    SHA1

    a4a316302e86f8b078c0ad0bf083a63a6fb358b1

    SHA256

    ff943d8d77e852b2495f193873ec6b1119070ea90b7c6236cbc4e54c2fb1cda5

    SHA512

    cd64330f93d7dfdf5d35904e7d414e5433ee778ef732cd6bb7e867d9a4002465315e569c02b897013f93d3fbea53fdd6438568ee75edc88f1e05a38967fea22d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15ccfe23467851dda7b26216e079057e

    SHA1

    e5d6e41c35d7fb89bf7ff8ef1b8efae37f55cb59

    SHA256

    df2ed9ef90c0a7b7ec03ebf582ec253fd6e841170e6a64ca90121f4ea20e663e

    SHA512

    2d233f937a99a63599aa1c897b53bc9127c0fc5ecbb93e7daa3664cc08af0c785b6be41c12b6c140b23150b20232db1578a5fbd2839263e051257b837ac52e55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    06e4d2ce113074fabf5eaa9195ea54f5

    SHA1

    c3774c9cc920fbc61062e1e541f4c5e915b8f15d

    SHA256

    63089c24925ba8545897ad1e338178ae50bd35e64e25fcabc0e93fa6f539a0fe

    SHA512

    2515bcab42b3d017baede81ff38e6a7bd5a09f80401160daaed9eb0b9c8ae9c7251f552f4e2dfffa64da8eeab0f44f6a3e2b397b16bd0f6ce6f63800d0b38638

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db24dba4fb8a7fe499ccd212b4af0f84

    SHA1

    c5afcecc8618e368a59b29f51c491774663e9e06

    SHA256

    db55a1656d1ae0aa3263f63addb4db7efd29dee24c1e98da63a82d3cf8b21002

    SHA512

    676e5adba795f9ae11855387ca737542c9c1c6acb421d59a7279166823280d2d243f2322fca7afd3a454386374e78aaccb68e4b765327043a7bd48abbb584a8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86997b86ab8f87d2dd4c1b3ada82eb50

    SHA1

    d4439dbd629e648041c78886f4da99ccf0ed6ccb

    SHA256

    9852dcdbb8feaa9b0fa7ba4cbb55abab6666452d735577f64e0fe6e0de7962df

    SHA512

    497d3db227a2bde3203e4a82a57691c53b36178d526821a32680a5cf42221592de26f6e2644deb71878a18de9d222326de2c6bf6403794ca3b29f9d5d8effa34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd1ad71f4253920491bda129b50d09b6

    SHA1

    89f2676e781d04a96105fe2f83bdcc7ab6460bb5

    SHA256

    482d3a186f67336677132c36f7513eb69a3c3c7aa985e19489ed08039228167c

    SHA512

    3622f01c6ac8951a0a6209f04bd6448f21ad9257cb586a36b5a4a59a264e370710e05e957885860b8bf4b1bb3884eb3d7025911e7609c0624722a0387ae18942

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b865a9272a422ede45a29fd599d4e21

    SHA1

    99478c820668e312b4e3faffcb7a44a216560472

    SHA256

    eb1bad46e5f3306aaec5e68c044a0d9c838a7109c8553325a7a049b91c7d4906

    SHA512

    f15eb4d7c0a24b231ee2cd323df91d2f97d7b4991ce0a8ed9faa447b30b2409cd9819bf558b2aa4cc0d2e418c5531c7b8f69bc17c8b87d53d9420d46e4a1d208

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4d2bb7667f80d891d59b7fa8e9ef3a3

    SHA1

    b38480b6378e1ea4c698af8848f7782a370f07da

    SHA256

    645e84273c0291da3c3875a7d0cc5a3adca91c0ee55a70ed013873f30476821b

    SHA512

    06535f013718c163287667a523b202ad20b0bad76d4b7d310e7f6d66e1a3575a679964807bf8214492840669f3768eb4c49920063755378d93cedeae6f95fb79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f8a2d5fe7f58296d3de9e13c87296ec9

    SHA1

    520b5efecab2e599b51d07e3ed91c3f52ab61ddb

    SHA256

    fff40408ff42baf57fdf679af52a11f5817ee7c058758782720018a416e7b8e9

    SHA512

    912509273751c43adb9424a0303cfb63ab735372a98bb11ad7dd8fb0eed0816ba9ec218862f900b6bec28aba0cd30e44dcc9c1e753845af7926b7415b4327d08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    58e8dcfbcc9bd3b72c99174600a4542d

    SHA1

    7ebddfdb31e7b4d321807050cc441bcc2fe58201

    SHA256

    4ca38e7b9d14e2887c6fd3f55491a7ab1cdc4688a6b7b631729131f0dc9d2dde

    SHA512

    574dece44ea92e25645e1e0b75a7f6bb93f6a41432ba0cdf9a4a7e772f61a0a022e4856f6975892c3ea9c85714a893880184f8c23b3ebcd96cf3fb70ced116f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Cab36E9.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3836.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a