Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 10:08

General

  • Target

    123e2901da3a75cc0b7d102a237a7c27_JaffaCakes118.html

  • Size

    94KB

  • MD5

    123e2901da3a75cc0b7d102a237a7c27

  • SHA1

    574d9240903a967c680d883df55be344aaea7e9d

  • SHA256

    215bbc44f15d8c6f23bc2f88de86a27135aa69b0ebb92a7997530c7f654eb030

  • SHA512

    691f7f151eaff0033f681adf4393ecaba0401470b806cb4b467bbe87fb72d0f3cb12e2f6573c3bf3a9012fced57fdc3c785f3c3fd6c0648ce3ae22bc6eb9c7d2

  • SSDEEP

    1536:WMLiNjHfuQ+kBKN7LXFLZ4ZHZb4JvPtLjgZ3ybFBdkrY8mgHC+qpEyW:WAi1ebBdkrY8mgHC+qpEyW

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\123e2901da3a75cc0b7d102a237a7c27_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2180
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2180 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1136

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    c843bf2ef64e18498a1eb7c9ae86cb72

    SHA1

    6e8a2d97bd3393d086b69a83e14ab92fbfaad383

    SHA256

    21add126a0115f40ec0ed2c6fb601d403f786d48022a480ee4cf979029127d4e

    SHA512

    6fdc35f874f5345e573711386cdfee04cd21f78f437437cb0cbdb31fea193dc371da090d03b9a601113f0a0a21c82391e15b00b403e8d5ce208e44e8362ee69f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3dba2ea521b9c12e90cf1152ea27a770

    SHA1

    7d6879476dab012b82c6dc5a39a144f4217b9da7

    SHA256

    36aeeb6e5cdc2628c0a5ae71ec1d7129145835784eaa6dd8c9079cfb36984f4d

    SHA512

    7892f3d18cf9b3a5c6df57f0e9db7f4f5209441a7392c4c52997492a618701eff7a8928ce7a7c432ee85fdc76e58964f92d19f68d95dd4d1667067e325c73264

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0bdb56c188044403e265c57eed1d9bb2

    SHA1

    fe49be2dc84b58b8999aac108fe100d51579d8db

    SHA256

    6c07db8db87bce9f2992c21948fe8c404f320552a9ac829dc198f25de9c8f78d

    SHA512

    48430bf265524c9f54c6900a06cb37a31913a911ddbcc785ccc7c52e640d054a4b3733f1cd88d62792631cdfba0e20bddd21af911aa5e2a5415185c3e1ae84f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80334678e025d41a17104db57b010fd8

    SHA1

    3ee152786902f062149ebf6e828a80da295aed46

    SHA256

    cc83664be6fee4e71c091838ddc25269df084fe3929722c238abc6b010f0b7f1

    SHA512

    d1e586e73d93d6b96e65f5f83e5efe4948a2915061d90f44601aa347848c1381c1d1726ca7725449aad3ebbad9f7b104de34add6d9b199eae2dd668384caf825

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa75912c41a8c79e357097b0d8ab5453

    SHA1

    3e1aa586020f05cb74a6fd7c083a52b031a5b4a7

    SHA256

    896bc0a5a091c157205c5eea053b1e729cfa0222ddd21685cf68696112fc683c

    SHA512

    a0f5037bb5b7fb9ac9b8fd4b84622f354d031349ba03b93840363dec3cb10ff011afbfe6cdc5052af9859a00fd3dbb2232af49a425069a00b34a463475b84d48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1fbef2ffd0903b76e558c03088d357e

    SHA1

    97ce2e144e065e7a873932f29ea6cbc7a52464d2

    SHA256

    75eaf8333e4f436723fca1f0e3d7faec681c4c0e79fe59c3e5229abd1b850722

    SHA512

    b45595d7f51947b993e5e8fbda387a19524266922140c651ba70a231950b2a918c7fce6f45b3623a80bdd6b5a3ef4eaa17e0288ce48b4edb11b36a0b2d7170f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6596077af7463dc89b8e9ddaa486c735

    SHA1

    59222c18f515b9b8bccefcb06ea993c6fad3fa78

    SHA256

    360bac1b1f7663d8e4f9ac0498284042a4ff0eb4a11d59527a2869a687b41fcc

    SHA512

    ce70459be676e1b1e0ba649cb3bd2f358c47ad534a8babb511d17e649101107a1ced77350ffdaee9b4368568b583d9d4e6afecd38a6bc71ccd83030bf68463fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee1cd48856b367b498c7ee35d127511e

    SHA1

    18e069a7b1c7539bd0cb7d9f5596900acacc9f4a

    SHA256

    74d51e1e11093a8302da7de80b291f0e3a8bef3cc7b98db362a6181f73fa7813

    SHA512

    b58c6559fb899da747db0d451b5ae3ba291eef630973904da4dbfd5fd84f91ceacc62ad655045c5248b37bd2afea450bcfa00384d046c8b1648f8936eaa1d2c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1c90d6d939503d657055969c159593b

    SHA1

    358e80b25537310652fbe477dc35df62ec8c68a1

    SHA256

    7ddfcbe4db95af6b3937e881eed18760a61603352ec7614325253a51ab84e477

    SHA512

    a689eba7be0ff3d3741395260ee28e48583d66faa03c4045b4007cd8730dfe3b5bf68d0e890035334c91f913d59f3a89ed1f153720565d9c2c3237ebb52311f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f888860436ddb0797edb3aad29c9a2cd

    SHA1

    5c5a12cddddd34944a289a20db178a482c6dd8f7

    SHA256

    fa40cb0fb9d862fa29dc89a62328cba2a5e8468202dc3d3ce588b0cbcfd685f4

    SHA512

    2b753896eb9d6a1df3a7d0464de9de35cadf7d4107bab9b7fb597b0420829428c5f6d72c2ffc759a781ec6a3ccbf7606719db8feec2b0df7d13398927ad20514

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80d85c9afbfeb005db830be8179e0511

    SHA1

    6c18360a5a4b01e6d194341beca646d389859f43

    SHA256

    fcc28373cd46d2a408ef611ab12e6d450f96844189044bd709be288d1ce7b808

    SHA512

    188df626b34aa21e1db65963669a21e8952ac189c181ebbeacdb955e2863d05806bb6ce9f8aea619db32273b199e421a110f9ea2fbe6f3da9e5228ce97eddc2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0aa496cc815f1002332124b906cc1965

    SHA1

    76be2d67674834cace2cc30694c58b9306c16973

    SHA256

    f991e1987f7a08e43d448f7676f33790f189386832f08d2709454807f44c6bf5

    SHA512

    eb13d12fb60b1062395973093e23d9fa32c342525ef04493628b761228e4b112ce11c43fcb36cd94f53abafe933f49e57491653d10fdca9babc689067309762f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d8fd2220af92da79b48eac9322977b4

    SHA1

    6229728a4354e69908f2d990cfe0632c58ddf221

    SHA256

    d5e90d8885ad0d42d3687326f07788564f221b569c5bef91d431327ea279a22a

    SHA512

    7a21ba29ae41619eaae69b9fd908761ff954391aad9add62dcccf24a9bace8f5c42c038bc92903ee2c58188f794154d0ee9a0f8a9f0b5e7fbf3a9a02c8e00bdf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c2361b22f38d7fed8965aeb01f687e8e

    SHA1

    ad340cf274589510c4ce4bbfb5657def463889a4

    SHA256

    deff96b990c98c93a4f5ebccdbb69c843445a7d918679859357ea462e2c8507f

    SHA512

    a8960372689993700489597a3e67a8e39e81c220d2cd13efe4f105c639c1c999003296791b5aeb35d133dfff2d86f73696fe4539a7c833a278ac2b3e087a4507

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bdb4ced6a57e834e77f36b649d91cbc3

    SHA1

    a3e23281155be9393e30015d826ce6d064930a27

    SHA256

    46f5989f6c0a39cbf4d2c5495208be481464135cb42d1d177326a6f2c5745dd8

    SHA512

    fb2497feee1bfaeb420cffcfe6de97a419c5f8423924b9ef5950c1e82776b55a2c237460d0d799f6b45a9d8e4a839e070da003c8dc6b14dc27008cae8f7368c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    483f919837719aec8ee7505b7447c627

    SHA1

    9be13fa66125a47868f474cd2280c320a9786a89

    SHA256

    70132ad37013633938db3055edcccb8b5f3d402ecfb4a9e9489794d4cb5b9050

    SHA512

    2853c4a51cc3c19c50d853d3b68501108fd18a744655435f2f9d13815cfdd7fc78e547829d02730fd7d4512e6dbead511b1bd6a05d032870a64a08d77401908d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b6d2a5ca393a5fc7f44bf34032ba58f

    SHA1

    5a15c610293f28103cfc3572c03e903702e8fb1e

    SHA256

    7f396f6decfde6c1f7f9aec622017d478db7b259ffe718a7b53ead1ae2db5743

    SHA512

    cec0156d1cf57f9e41ae9af3867243025c2c89f93524d699485360b5cfcbfe40d2b3953f6c2eae6a38a27cb87f0671cb244a83a00c7b01637d8946652c0310a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b332ba6259ba703278daf52763effff5

    SHA1

    bbace0952839c6b887f070b8d35edc5b38e073c7

    SHA256

    4290f5850144598417e22a3ed6ece7ad2764d9a2dbe5c48025f3d385ad6717a0

    SHA512

    56be00a3f4b8514415dbcd36f0f876a0c127305150d6c58b279e54dd6ddad122bb95e37244ac221ef113e8075e72a7dfceced454c0dd4dc9df11da6eb1bcd888

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1618c915b9441ba3e400fb4c354a247c

    SHA1

    2475c589e3d3647d79cb3925b51b47e86a39cc60

    SHA256

    67cef131f3fb226ece01795a234d6fb18c88cfd21287e200d58df914510bfec7

    SHA512

    040eb562e8d912ad2e5783547d7a075ae33b59458f48c515ba9def4842d431bd3fbb4784dc23fe973ea53caeda23177c1c4c49bac297c3275058f560fca61b8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07a957e8495a5d56302351680f9b1eb2

    SHA1

    86cdef2a195411b1997f0e56b2df00c8986259e7

    SHA256

    53ef62b4f67f7a5fa78bbf8fe3cde14d58919ecde629933a6445b04d418e952b

    SHA512

    a3ce8b3374328cdd8fb2e7e97d4e6d04c8bcbd0b47e11e53742b573e593d4abb78ab4b43942c0b616aeb9e1e18d918e70c07c7e18a8775c2d6d92e8dffa09b0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    ffcfebf17f7b5325a9b5ae92fdaee224

    SHA1

    2f41ca3f403e9a56b39ec3d927ce89bb79b6ffa4

    SHA256

    2a859da318059bde985c7ea1b200bd5b46765647ec95d3bf0445601809e2bf4c

    SHA512

    5591133829492d5424928d1b169c59dd57a208a3233fbddda48f4d280e7b44492fff1d231151a8d414165d0ff647a96294d8a8dcea47c313cf65ac2a89c8fcba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6L8OFEMC\styles[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\Tar28CB.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a