Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 20:56

General

  • Target

    1473cf7b332cc141e40def383ef6403b_JaffaCakes118.html

  • Size

    460KB

  • MD5

    1473cf7b332cc141e40def383ef6403b

  • SHA1

    239d8d250ff36e59a9d56a668e44592431c753d8

  • SHA256

    caf38a00cbcde86fb6a3175f82ad7839b743bed9de20908f0e10b38acc442b0b

  • SHA512

    ab672baa399dfd0ff6d1bdb272f14fc91d32df7c2892647e89cc540aeb5c5925b907f8691d574172cd4f9b194917d2e24c146fb66f807d09808031fd4907e188

  • SSDEEP

    6144:SBsMYod+X3oI+YHsMYod+X3oI+Y4sMYod+X3oI+YLsMYod+X3oI+YQ:C5d+X3x5d+X3M5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1473cf7b332cc141e40def383ef6403b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2412
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2412 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2900

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    9bde685d43f60ca9fc725563c48f5a8f

    SHA1

    c890e43c203596814a977ab9c1c8429c6842831d

    SHA256

    6c2a453795d54c5e6e98caa9eb9ee3244acdea1f27caf466d2470b2010be5682

    SHA512

    5b52e4bc71d434a856fe8cb818506398afcbb7a5af70efd9b70289adfc20e3fd6be29be4d470a6df34be4f291a37b2ef885e9d0762fa379f129547a28fd83589

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3dea247e4362e322d59916ce99ef36a

    SHA1

    e7bdc41838acb2373d5694a934f4ce3e1e35e47f

    SHA256

    81f9d96184cc2489faae954db44a03411f50ab720cb3a7f185fe030c1060f59e

    SHA512

    6cd9b99421f2afcb6002ee065b9a27f715f9f4e975bfd78599d0d0bf148e6b625d1eaa072cf17579f89c2c61d3b0f1589269de21060e0791a422e90b82eef183

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc8beb488e3690e3a1b134f7085bb937

    SHA1

    312885c2cda644a449f0dfd14cc180f6ff100252

    SHA256

    a60369e7349dce318609c9594b28ba0d6e5a2dc61d6af9166f709712fd86aba4

    SHA512

    30d381a5c3f178a922b3ee4c89fe830c8e2ba8c0e533018b0a742a9080447ca4cc20af97e4781479484e6b0e43d36bfc99345799e962bed30e7f53b5e9f70237

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9ba03afe32e1252c815cd93ee997158

    SHA1

    037e276b2d6de354e2684f18578fc18c34419c71

    SHA256

    c4d956348b3dd4a12c46c7a069eceadddc9b066368d9c96ca57fca5d9fbcdc76

    SHA512

    3780ca8eec1bdfaac1db3c5e73f0e61912e8c53c10c2e531460acc88f947956642f52d11661d1266cac04333e3eb02e3477a9895fc27ab4796fb3f45093bbbca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff2251007b2f3105b6e4ddb957cc8d26

    SHA1

    69fb775d8f873c08b92db0812ffbf0e006597eb4

    SHA256

    fc7f9f8d35b4b1eeb5a1833af06c1ffa3c9708599d14508a742c6c7272cee13e

    SHA512

    797ea5610636c1ba6c3b9edd4d58d4d3c1666d4b610fc8cce0238ebddbc8a6cb18f0efb2059d4ff003fb8bc5948ec81af2317f031f61f08837c4af34e904e868

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fc76b6984e7ade0995d7fddadaad7c7

    SHA1

    1c39db4555f228d57b86ff2ba6dd9958e06000fc

    SHA256

    d06acabc623771c552161b8ef1130ce5d1e01395c6c752d959dedb5556f617da

    SHA512

    af546596be9d8675b55b32a1223c23aec8cc07faec9f6ae553f7f5ce3d699c50708866a3d48b3aab08c2d8c7ed07438d73db6db9695e4ac22b5525ebec73185e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c985defaff6eed8fc72d08ad6c5df8cf

    SHA1

    33ffa1ebe45057950dc4c5c04ec0567bca8102b4

    SHA256

    0f8e69b8776a0077f07f23cba0f7f6619cd5f74e7bba925b5fbc0f951d86f61c

    SHA512

    ac756e5d62c96f896b407205cc2767fc3ffe96d3947ee8fef0891a63317e85bc6fcdb38a93dc05717f5b727edc4f3c5db6175111c2bc3c9eeee8361111c2974f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d5f0e712d54854f0d2373acc948ad1a

    SHA1

    6fb4aa79bc7f4d44ca5ac29b791edf7f4bd00110

    SHA256

    a25bdf8d7b7c65329362e049ca4ff44eb0e11350267455576a861a89e5c94296

    SHA512

    b048ef23d9b7bc14415e6f33f14ea80fcd627ceebd19aab57c7b4e1c388f625015f7e74684046399fbddd0d1f68a2cbbc42325ee2e63dda406c6f66b9b1b5372

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f225cf3b8f300947c7cff7447392a0eb

    SHA1

    00f0d0358706b83c909269bd23d4594a1f1d7623

    SHA256

    4537c4c01fa91181c796453c691019e11e9e07e4448593015141d97dd6406875

    SHA512

    6ba748a866f0b942149fb628ba9e8d11c943e39ce2b4f1d11c5daec19d73486d5d95127f4b45f107786ccacf4bddf4226b22a0f538a745a335e8e6505e6752b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ec6e1da5fa1d15da73afcaa207f8a30

    SHA1

    c9c333c039a3baed8f8d505b2ff291b9cbf88ae2

    SHA256

    7480ec1acd69379d55f231e044acb607429a739d709f3045f2072ca53af27343

    SHA512

    a98b83e7ae808981569bf8ca83bdfc755a8b321fe53b68614a064a6764dbadc4d372e4a8cb221ae8a1382929d6126b93387e7c9a6bfa9ddf6f00b9ffb2661005

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e37884c262a3ba9ad2e7a6ac1e30407d

    SHA1

    209e58511346846617b6fd473ee585959bd77a30

    SHA256

    0865d1dbe0f5cc2560f7cf1480548d2ea3014b9fe4bab772f11dc2edca0fc55a

    SHA512

    7446a322f95f7d539f58550ddc7292277a8d433d03e8e4c1f89757e4f11804a4224c566429f2285afe2594efe41a05573bfe04400abbac7bdc85a014aec36c1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ecd8e8a4741841ff96c34942d7372caa

    SHA1

    d9031c97fda28553e126801f2e4eb80c8614a68d

    SHA256

    34abccdc4a981d87e4361ddf6f8a28693d6cc1bf8b478ec22df1862a9dafb990

    SHA512

    14c8c16101a83f8dec58c333d09a08eb723154231272da62fef96afd372e8bcd2517f9da974d9498b50b822095e6277092fc3fd04012c2f6e893eaca52d26ca0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57479f3bff6097dc4034cec05119d92c

    SHA1

    91152be8f61d19c3754b64c546405d15ebeee847

    SHA256

    15566a088e857401260a048d3f69f13af539ff0cd45dc2bc020db3df2f5fa73e

    SHA512

    764d482d1e80b461c5ce55642df80535c543bcb3bbf8afc5bd5593fd35c8830ad80d1a597733e08abc93d6900ee378f6fdfb98ea8d261f7625ac4d9bf1419157

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c940237988e66d3ae06a3cbc04487d88

    SHA1

    294c414115c1ffccef22076e4aa890557f0e99d5

    SHA256

    efb5b4cc94abce74224ae02149bd1e6f53172f2e5c7d9d8f4eaef06b4cdada68

    SHA512

    69fdf18677097fd73c95bb8ebbf471316309a541ffdfb6130b7f628c04a8f7302441c56a85cae9036a40096338230e6b6565b94003db29bf8f9833f47b196176

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    855afe3dca1594f8f7aab2f4393ed87a

    SHA1

    f01d5a003ebc2a957426c75a884497666ff8d8af

    SHA256

    1858bc27c088206d58cf8923d7b7042fd1ccfc0123e9269a5658d3b2f822f818

    SHA512

    0770ec856e076e90c8473e48f9e27866d895998476554e544ae977e467ecb3f6be90348d77106696b30439f454256ebcaf3415c01fa9c8ec967e92c051246cd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a014fa6684a5c76820f0877d1e9e3c33

    SHA1

    02cea1d2f7606fbc6baa7f74f3cb0155b9a5c203

    SHA256

    772449cac47679e58702a74352bdc51a1fb8da188949589319b136c9946e181e

    SHA512

    da6981e7eb64f4d306a205f3ee759013f89652fdbf8535110ffca5cfb508a80529040f6d4263fb054ac547c8fc9fd98783ed766ba10ff35013767cad46fb0ca2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ad15bbdff4a86fd136695377c0fc535

    SHA1

    3cea9d0a3ccde7b8648b6e1bbc6ae4e33b561876

    SHA256

    2916241c7116e33a446ef864cec7b4506695b14ecdd7bde2c7fec06703d60873

    SHA512

    01678bb6c39ee9f39c659f3d9ae8540491fdb37e05c100ec50e4a9186b8efa3c88fb7efc230bb0c0305164913e90f36cd2835f49d0f920f5a741a822e1fecced

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23d178b842aff882dcb8a85c1f9c30f4

    SHA1

    8faf54f1998b48196cb40008d18c76b95f3b5d5b

    SHA256

    be0361bd5e9d03c91f9653681f2e7a03c4676f0fb25380f3deb0e477385ab54c

    SHA512

    5f2eb3e5cb977d060630c4c5cdd922af1ceb421b10a04d5b7fe8f3f11c13fdd06de8af3653928e6135a8f22bc13fa58a6fdfc7c88b6a8688e8ff8b99acdd5015

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25424bb101a9157cd2e347b5c05cbbd8

    SHA1

    871f32f24a977121366048a15b0bf25c34eed73a

    SHA256

    9b22e7efc457851d1cffb470eb412072ebae70053987bee31521e55318f4530a

    SHA512

    3b3b042644c92929f916451b320ffcf1a71fc9d0f9eebadcf45e24f9543b386dd3bfdb30a1ca7eccbf2ddb117c4c3477b3f3aa7907564301f885fc63a71ac215

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    3fa6b457c0fdb506e4c49712a0ec250e

    SHA1

    1636a358eba5e6f3b808c8f173f37154b24caad3

    SHA256

    f492cae38e9916b467884bba1af1e330876444861683ace5952723a5b554b5ee

    SHA512

    e8f232aafbf7ec8f4201c9c5068baddd657df28dc37e26a9345d0f44a16ac3cf0efacb5a91a88640cea1a6d9d41e05d5cfe8c8a77d01829611abd4e5d44ba9a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Cab32C5.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3411.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a