Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 23:49

General

  • Target

    15077e179117cef9bcd72fc5e37c69c4_JaffaCakes118.html

  • Size

    23KB

  • MD5

    15077e179117cef9bcd72fc5e37c69c4

  • SHA1

    cc6e565a0efa3915245c530b30791faf9fae130a

  • SHA256

    bcc1b60f9c430ffb2b5c4788ec2fdd1b49e2586f3f4265f03e0264fd2bafe5f1

  • SHA512

    f01c23365f1d98851ecbe510aa725f80897fe039e51d2d345c85d4f0e9711e79a4e4148ce8563570183c78e2d14a26ab53055d87193994cd24d78f2299ab117d

  • SSDEEP

    192:uW3Eb5nbIxZmnQjxn5Q/7nQieSNnAnQOkEntttnQTbn9nQyCnQtowMByqnYnQ7th:HQ/k7

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\15077e179117cef9bcd72fc5e37c69c4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1664
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1664 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3004

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16f567f71dd8b3e041757146ffd5ee21

    SHA1

    1f5a8c37db86ad79276326efdea784900c1a187f

    SHA256

    1483673ec68ddf97feef633607b384eda629104e7359ae5cee73ec9021aa4a25

    SHA512

    de13193b6efc6290598a8b5e1a2bb015bb7d9e8900bfa1cb1e74b79a5fa39613fa91b5e75f2af901e7cab331d960e086e47a09c8295b2343518bb6d2361784c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0ec65379fcad3bd838cf8ca0491c3f4

    SHA1

    cf75101e8f260f76b32361a19d4f05557510aecd

    SHA256

    af989cc8bfe784ac1d9f2921debd8227328a26fc414953b3d160db63659492fb

    SHA512

    3dac0500aa69df4b05b8328ea3406e10c43e40f887ac5fde5820b329ddce2c3f2c49214f4e73048ccb805a404d4ff588508405185ccb661e893043b6f802bffd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3c8964dc3f0ac6282863db8100e997a

    SHA1

    03ca937ba2c79eb43ebcc1badd17c8cce0148eff

    SHA256

    073e8086d5cba5a5fc750eb2e2930ede252e7acccc56d5ba6a0492724c53511b

    SHA512

    4d588b92079d0a2557c2030de4de3831b925f7f907c98f3f08fdcd192f19f49fadaee20eba04713782dcdbfd3f7aa4998c7fe36b2a3bc639ef0315f14fff6bb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b51fae11e0e95bbf16b89f3ae8ccb23

    SHA1

    59d4958919f554e1da55e188f1e2bf74628a72a3

    SHA256

    a969e9f19cfa1c2ea7c68652414ba119e53f4dd5d710ae303171f59eb17c36e2

    SHA512

    6f2e06f3fe97904a52e9d7e6b3cc74301c7e2a93e8c386a7c4c4b601e43b0bf6befca56ee7d2f7cfdca2f07f39f74c1017d662e97027ca2a65e5c697f5abb545

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12b842983b8e3d826a5a8237b798aca9

    SHA1

    ea829b9a0f72bd0b08a755cd2696b5f90e7cfebe

    SHA256

    c1d3a73b415ff2c5945d5ba7850717e6d7ddcce5199d213f070ceb0c4cc429fe

    SHA512

    a83ebd093afc68e12d77a2809efed6107660caca9d4adee88754075fa8751ad69d1889d61fa7858bbc857720788d8dbc71dfb7a00eab31d1753a3c14e95aaee5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07066c87acffd38391588911c942c585

    SHA1

    bcd1c969cc4791b1b9613319388978fecfcd7e06

    SHA256

    4c3641190965c3920a838e50f930d60b843fec01c398bb1397c13e1a7751f6ae

    SHA512

    5faa16cb8afabbe1cd795673d4ded1d6ab879a7178f795da790a60ea238d40bdef53f6a702abc6b94835ebe54e1b14093a9f28d35e6de05e36463583865f96b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f613187faf94fc4c7984e958c243e15

    SHA1

    dc0a9702e5c5db1b2344d8906e69f638a68b674e

    SHA256

    4cbc5196e9ccff38acfef4a8a370bcb18591da574205a44bc5c99fe8678dea3a

    SHA512

    eeb26ffe1f9dcb0afb6ec5e29cfdb7973612e936a388ea109a81b3e0854aa1fee6b8ee82fb6a52a13d44aff343cc3a9c1f022fef27cdccecbfeb5882c466111b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a22ee195e124a6591930f324247327d9

    SHA1

    045d3860f5c5855bfc196153b664ad42c848ed1d

    SHA256

    9ab8a9aa2e94123c6c675df5b8654281334dcd6d71e54c5dba12a6cdf502500e

    SHA512

    74becc534e77ff28321772f4727d3e1353b1f6e733282993d4e4aecb354f7d9337bd880a20b3e79ee59fbd5a65b42d75013ffa0d8d085974925e509838fc9b9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f8bda74eba0a6fc02986d1f8f059d6b8

    SHA1

    8878413ac49b7d2c533d22da687be6c9b8430d26

    SHA256

    8a0bbd6827c4df0ce28f6fe0436a7e464b39d8e9375a43052524c35b70b82444

    SHA512

    d5deab6e05b544d9abf83cb4ec766ae223333031d3344d79a83c4464e8f48de04db7fe916e59d582d664290b864f2ed436ed10c24ec8f2c8c4c88f4e6826149c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72582f4afd5015052efa7cac38793c3e

    SHA1

    6dd58adb422ac948b4838100b4aa414e6891c952

    SHA256

    8f47909a1dca8fb6e22fdc4a80d4be0c46439816573a71b9cac5ad4fdda130d6

    SHA512

    43a0aff81c773dfcf69d7d24e9bd4b8cb17390220df43c167cb1e6caa669d0a734249f40f2146f62f59089815904a87231cc7c7003b2ffe12ee362587256cf7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fff987060a5a5d783e731ae9eb7845b

    SHA1

    4b9d2d3d5e629efaf61d4aae6d9af5d8994f9521

    SHA256

    b2d78c662cc512d7152526bebf43dba6dd7d05c7889025568e76803b3f81d856

    SHA512

    1fb48a67ba85deb18d3f3cfa4921ef90b769ee373f5b9bf5715359b0b606590adf9a02d2481362f01084e9ecf76c94d7b39021e10da09522430c3b5f9cb11a42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de96ab7f332d38173625e9e79a7a3283

    SHA1

    2c8f00116a307eff0d24d7794c7404d1e30c9e7d

    SHA256

    3fb6e3d9cc0c7837d4afd84230972a9f59e4c29a480177d9dfc1f2d6ffd6183c

    SHA512

    241c30b5e73faabe02258fc84c7ddd0182c0ed82344553d71d91ae0fc2e4957801ff017f317bd5239b5bfc005baf9152bc6de782bc8557749f52acfa6c363e58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f424bf03025701e649593aeeec4d560d

    SHA1

    5f3431a6ff188453d7a2feac4895c99844bf2610

    SHA256

    3ee485eabaa33c7ac58334c818428c292d06edb06119811dced9ff5f6f342eb9

    SHA512

    dca80a0a6faf3e4ae1e6ffe8d502079b7082e90f3741263883248bb993ab757fdd32db57a322abc63b8e7802cde6ae7756ccd844552e8e4a6ff84d77ea4821e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67f177475ce3419290674bb1257b4aae

    SHA1

    4cd87d0432120dc0fcaecc9193d2ce2cbc4d56c3

    SHA256

    fa211e85a9238f1bd086fc99316aba60e379e52acb1a9397478545251f09265d

    SHA512

    db5985e31e23df3a609f10053068d2c04c56324017ceac067a5fefeaa4c5c2f1187539f5faaa9bbf8047e698056f623a33dcf832547c4d7ce78a82bc454539ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ffbd625bd78c8583def6cca267b7f3bb

    SHA1

    e2cd12bdfaa03871eba51dc22b31c581c058bac3

    SHA256

    bb0da98f38c1a8b10e30aa07efd2ad686c5b121582d7bca7195a877132265fbf

    SHA512

    508c743dfc2e5a20ff6d05b2834a766a6ab2aeb28fa4ac8611042f65fa734fe43d33154f02131af487b61eedc5ae6a6dc3d8413f9a267d5f6420d7f7c2ff27b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd40450df27684f8fed20832dd770876

    SHA1

    bb10f2cb88ed4dd41622352b2d1d3b3b49ad598e

    SHA256

    acbcc86d963fd0625fe609f5d1771c8ab14668732b1991f032c5ffde07981930

    SHA512

    3da42c587988c4346380d50f3eb1a1f4e618690821182b709c8e98e552bef259535d9e18a24b9270d1275390abdb6dcecd6a1a90d4d5fb66d6522db1757e440f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62766b134ec010d918abf460e1f32692

    SHA1

    8284d8c13e60175a9559e41a8ade657bb2c1de7e

    SHA256

    12f659c0ad348c8196b1f4636b54a310292144d1cf9915468680cdc72ea0da75

    SHA512

    2523c16674e08a42626906e7f700b049e317ece27205599d0c8fbd9f275f2eed74afd1840fb20ac30ceee71cd55a1593acfe6f5b8ea1db62bbe0ae7fba8d8a0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f23a6959f7b610d571a6886e0a875760

    SHA1

    f8ea153fa1c16fb43dd38d73ad6e7a9b5a3fd19f

    SHA256

    bd2b3701903ea78a42e25149379ddadf8f02b2284d2690136d0bde81b10a3404

    SHA512

    1b0762f779089034e1710c576f0734d7eaedb110aa23e18b09cb770ecb496f59d8c27fa722b541608aaa2e1cf275bf82def94afa70bcfb13b646094f47b58fe3

  • C:\Users\Admin\AppData\Local\Temp\Cab2262.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2332.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a