Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 19:59

General

  • Target

    1442144deeb85c28ca86aa0e1c223ccc_JaffaCakes118.html

  • Size

    463KB

  • MD5

    1442144deeb85c28ca86aa0e1c223ccc

  • SHA1

    081f87c712816b0849e00724b6b0c5ee6c0e1e44

  • SHA256

    ee430567c5616e87aecbd19fe5a29094d4fb7ccac63273c79c1d091f0cd30099

  • SHA512

    07885f72c9e0455f1f3fc8e21ff4aa3b548d6b87d853163e63fba0d0dbcf49612456f0f661fc0b6a4cdaa7415869baea073904512a523e0cc8da045afced432c

  • SSDEEP

    6144:SjsMYod+X3oI+YJsMYod+X3oI+YJsMYod+X3oI+YLsMYod+X3oI+YQ:w5d+X3D5d+X3/5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1442144deeb85c28ca86aa0e1c223ccc_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2228
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2228 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2924

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b39bd9474762d738f28e99d0e05ea75

    SHA1

    8363e16250259260bef14d2bb7f896d034f83659

    SHA256

    5c0cdb578eafa7b91fc572c54fb69ba1d57d41042a3dc092fa44fd25d03f11f9

    SHA512

    a060dbc01af395eccb888779a70deda70dc1e5705bc5670d77d8af352f581ab0342f68e7e9409cc97c6e2aa5daef441ff9e396bc2173eaf741ce7d5ca69574d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11ba5cb4cb48ec4c1fdf64543105c5f5

    SHA1

    839442434912c43b5985e246bc71e075b675e4f5

    SHA256

    6e2ab6ca6bdb199f2591a4c5135768e41611b34a90d7f228bf91bbd415f3219f

    SHA512

    7e351ec0cf1b11db15aed0b3a280042c88cbee40ee45cf6ef04800065104ba5aba8709eab0e9a8b9b5e9e57831ab6ee4f6a1bf46211998e92624d9a685397579

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2cbd0c09f10597f605200453f19c587f

    SHA1

    edfab9cc0f3ccc514ffa00eedf2b94d6c06ec0cb

    SHA256

    c06ae2159fc3ab2b0c020ccfd1f9f6ce46a8e2586c13d96ddee44dc1813ee7de

    SHA512

    f4b0f59e3a77429b99445372131674a2c9ba78e785180f0f8efcc45be5ee726e5226fc5d42ee67b85e249771ff9efa166ded36821937136be4141343f3b821f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a0ea15573869ebe2b032a5e9b5d6d17

    SHA1

    8365071c71c1b16c6046ab842563fcc48ee997fd

    SHA256

    e1aa9fd63b2c1d92c1673a034c986e34e2914138ec4f4eca186c7827ab98cf1e

    SHA512

    22d130c48932897e411b94644975dbb465649f5541c27bcfe0aaa52eca7772a2795abffc246a166eb6bad1ed291c64d08bc08e4b52e4b7fbac4fa838dc25fe5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79af250887cbfdb8e46455cb2af9120d

    SHA1

    e6861ad10450881afe926d896f1b0d1a6958213a

    SHA256

    d69f1cf48766d735d3b7bf7e4a8a825ac9cbe7d6eeb9c5793beec228b2d0a129

    SHA512

    9d833f8f8cf8f4b5dc5b8415f1a01abf6acc25b810d33d6563247d78847ddc4bccd88fa0b94a2ffcf6c95c24d06a254b4febaee239fa6c33560880ce2375e55f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9fa85be1645f79ac264bd5aa28a45ba3

    SHA1

    c8c3d452de7b00014ab79be5cf0aa2a781fb5e1a

    SHA256

    989f8ddd0da34d5ead81a53704f48c6e613116d40e201c41ca985b35401bd966

    SHA512

    466983320c8a514a99e31f943a69d8a41eead5296c5907c3196ad754cbd5c0bc606fcb1af2431df73f4c0d68cda24b8d07f88dcdffbcbdf0b11ed8ab077f3bb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    85e7ad9dcf8deb5c4e92a8fc6e513332

    SHA1

    b8de54dded02fffc2096b52da49a1a29f77ea13d

    SHA256

    40929ccd48bc07483602b7d62a2f7492b5119ae590cacbcfd7239891aece7bc0

    SHA512

    b69f2db60bb77bad29e26bb5b09464101c82bfc086751edeb80d3eb0b0435bff65c4a09e2008f460a9cb21a0be45a8aa495a4e9b2d10199b75243c91cc0ecaf0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4100762cc36ecd201b11d237f4a4e64

    SHA1

    5f845577feb8092696e233b9459ce0cd11e20860

    SHA256

    0e5b215e543becb499e31813123b868943b3557ebcf595554b4001bc47f44f12

    SHA512

    dab92e738b883715d5c21af8b78d353cff8fc7d51eb2453ba9b86d752094f90c3e59bdf8bbfe66db687ead31ba3bf532074c2b9ff9a101ba3fc2d54e3171266c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9bc8b2e9d8a0a3a981c8a844cfdaa1c4

    SHA1

    f3196ba9faf59ff665f13dada8739e0b31055f77

    SHA256

    ea0bb5f8fbfcb31bb15348de8548652a144a38fae0af69834b901680fce0147f

    SHA512

    f90bee0c19729e92ed474199b2f02c49d9c2e43741ffccf44abaa884d2e40e500f3e8da1c014b87c6722d10a722cb11399af8c73979ec43004609d913b9fb681

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d93ef9ae8fbb806eaff623289c7731f

    SHA1

    070700bc0de9a9e929657775b3c2148a0000cf0c

    SHA256

    2a7d890ee38393ef3cab7ef3cc848cf667a336858a32d4ca5123f72677278c58

    SHA512

    c5afe2c67e9feb50a03f26f8f24302e079c80bc2bb6e6209d828400fbe889c8eb47d090f37ce1394b541b04443e7d57938a631d70f727f1ecfed2791aa3971e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b63ac285ded432a91756b5df6c0dbec

    SHA1

    454ecc3c397d943dddd404b5f45ac1fcd34c88af

    SHA256

    7edd54840ba47a0f43964e28e745fda682e812f1e9e0bc7dab39c55b82d61c94

    SHA512

    516f13a8de5412f63a1486aeb63ffce4e512f2126f70244e48782303ca3b626d816b2757b83ae3e7522f3d53dc895a3d81a44a67c773f0ced3d91d2cad0c8041

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21adb5c34a2145399d0b8ab5fbc8284f

    SHA1

    317ed6855631677d785a5e57e744f3087da54025

    SHA256

    86f625a3d2a59e6d674ee6b8fe9cf7c22b8880bda6ee3ecc076be121e82b4da7

    SHA512

    3553951b941c8de5a7cf5c953175bc9c72a589e62272b4caaf2d80b2b4272b10f7866bf57240ad5b585e61e487458c54a65b60f8a19ab4e8180db2a1d0bc6209

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6183774a3db49906856d6e4d0bbe9288

    SHA1

    1730c9549c51d08f8eeef7b9a8703635fdfefff3

    SHA256

    1b6224a41487b4341acb97751cabf5d415aef802365ddff95db0942e768d4a99

    SHA512

    cb13ce1be60175485d304594dd6d7f36a74f495e29ab2e2774bb1425c9e9afdf1b74079a2b862d385c1830184294261cbe3f82d082ec8199cf7fbfdd21dacab5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f80652bbacf78fe33d34420e455a37bf

    SHA1

    65e1f7a69e0633190e3540d6399fb6c328310976

    SHA256

    65d5e82b322f6ad2fd77dcba009e7ec1550e88fe27a8899ba737d3d0d6d2152e

    SHA512

    c93a2d735e907bd488a91e2ea7ddc9ed55447c43282f5b76b27725eccc4ac26c2bc5771a166ea7665e325aa041de0bdc0b9c7dc31f21c209a5df588f51ae607f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f02c742000c1783419caff388f55fad4

    SHA1

    e4816805d54512b442f3fe4cb7e252a90b029520

    SHA256

    14fce465928ec938b2f4af92e643f20e826306dd7435a6f351d3016d2fd13b07

    SHA512

    dd417d443a6ca060be180d86685a9e3eecb28d911592a530c9d7ccd2da429aa2b58960b4f94e30f052eeaca594a9ebf130d083b5cc67f1f49a22f956e67a1bdc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    266c7d7988f5b01e62de1a556b488202

    SHA1

    6faa6570b1f077e8b0b2504df8ce4ed6b85ee793

    SHA256

    32d9d58cf6ea60acdd9f2a1bfe81bd0731e03179f676419e0e2f49bf694d6148

    SHA512

    3cef3b1be57668b89a21b9909f1d6115e67846ab95747b25ed06a985003b1936352dbe9b612eb504ac5892303b5b302bbef1ba69b11774196c06a00769ce79e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a23eb62ba6d5268ce9d291c41bdd77ff

    SHA1

    cefbb26c1f4222968584b9fc0bea1e199758ca9e

    SHA256

    9197c5434440cabc9ca1dccaa59f2e2b0b3188ff4f4df79bc819be7ba303afb6

    SHA512

    773e03a0705f1b69e154341c943e0a7c5c0dcd2f1168b786ee1997fcfa6d0fdff23a348e946ff1cc007e64bc9cf69f70c514ed3c670cfb95ac32451d17467b4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd8f051877e02ec512ff88ee6d7a87c7

    SHA1

    9fec0c51fea0e10ba2ed1f10512676e6a5c3d80a

    SHA256

    d8d295526c1c3295d00d7dc204d2460f500bfc920fda9a3e86727831d48ac87b

    SHA512

    d5df70a82c12433b73839524ac714fd3ba8f088dc06f28d59fafec2ec9317a1a87045db368189231cecd1df10e33229968b0d4dd91b50ac47e2ae129c738c4ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cee00971c6a7009aee089b0ed56bb550

    SHA1

    a6c5ba3f544d22428c295ac989dd95bf13fd25f2

    SHA256

    e735ed54b52a16e78727a1c55e470f541816d58b391322af37233f954a2b5f85

    SHA512

    b91b19e608ae550f157bb7a1076bcc136f299cebc44f68a7b1be4c2f08d648c5835dd9aabe5f375953ec2a768a7c1c9e5e26a3060fbc23b5db849c4c6b2d6c8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f56df03b4acf2ef4d98b7ec8be82bb5

    SHA1

    83ae89b1debe9c2f60af4cec4076f78a69b48f7d

    SHA256

    070101daf91df3f2a6e3a8e06e683060b881fd237f6f54eca11d77f2835562d9

    SHA512

    ae4db3e2c5905698784cb584851f9411821962c9c8f2c57baacf443cc876c08ef1771b1606b6a228cd3caaf9bfb18c74249bb0db5c5fd52609ee694352d13d00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8770b8ba11e19200bfc1643f4b359ade

    SHA1

    1cdf87f91ca87942db55bfae60da2730237d7641

    SHA256

    e601e1851148e01ba1dce3cf96cefacc1464f2765ab45650f534ff8d89b4986a

    SHA512

    b79ae64b2b1f0c5160427a5bc4f5a724513f2b244edf2137d8fcff9f31fa70404a0a4939c019e1f4ac319d4ee03a1ccfea1c00bee148d73d4c8e58672e012fec

  • C:\Users\Admin\AppData\Local\Temp\Cab4675.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab4733.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar4747.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a