Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    05/05/2024, 04:02

General

  • Target

    15e3fc683fd686c6d75f674cd11bd74a_JaffaCakes118.html

  • Size

    461KB

  • MD5

    15e3fc683fd686c6d75f674cd11bd74a

  • SHA1

    c85794fdc1325004891351d004ffab318868672e

  • SHA256

    24649dd4be8cc66ca37146d5263f53f8355a0b6a820f35cc275f000efd5bbb3f

  • SHA512

    afd08ebcd6b2121ccbd501acb45829449457e78dbfa3c4df92a7fa899c536b99dabc52c7bf72beef8a726b5ec0665d01d4d10b6f51688806ebcaae5c04bff4e5

  • SSDEEP

    6144:SpsMYod+X3oI+YHWsMYod+X3oI+YHsMYod+X3oI+YLsMYod+X3oI+YQ:s5d+X3+5d+X3B5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\15e3fc683fd686c6d75f674cd11bd74a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:840
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:840 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2744

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e50955c60fe51e3085dc50693ce66ebb

    SHA1

    17db7a7962436a8ca7f5ff0381c5e68da38d6bb1

    SHA256

    1c554962a383f95b0755c894e653b77b92cbc0e05e60935cf386dc18fe07abe8

    SHA512

    4c00da1d72500da4648307d582065af238e5af515fd3d1029c39316f56b2babf750c7d0ff41c8b2a599a3cb5e998263cd358c768085cbf363a084803361c3dbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98227b3b796ca21871bae7961f9f2996

    SHA1

    bcb7b5030402ec6b65bdd836792f54f2d3c82dfb

    SHA256

    06d6f0672d3b1f8e1684b82fc9e2dc19615dee11469d4977868853841e3fefaa

    SHA512

    d6b8dc293407f36c365f47ce2b7255af985709d2812f7897ba698299c509d2bba6c02e3e4832e4c71968004bd87936b068f06d8d6e7b737bbd88a1f905adf97f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    def09af0f18e3cc0fad17ff62df91e9b

    SHA1

    f7b85c533d3f05d017a197085f805d04a5b9b5d4

    SHA256

    7c3a202b85f44713ed7df138152975aa07d744b3f55bc995398cb57585451609

    SHA512

    2e693bb13a98ce061e99099272efd040b69d8e0633aed19e3852ca51569bf082f1008a4784f8a9f520a60b5aab1d8c7e58df6cc44359bb1a8f023b7e822ccde9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9b8b2d9e482ebfbaf3a05afbbb48cdd

    SHA1

    156b2a5f875f4d57eba829da8642a10bf6f95688

    SHA256

    cf0ba55c796e154590a810946018518a092a049c5354333d8fb84a84f146714f

    SHA512

    8730872ff5e01fb2e1c72b747ff3dec4f6fd5a9153fb73e4bb444f59e91e77371297545d8fe0df4223bbd58fc136f2180a366fbeb24a96905adfc0ecd3d562ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a15675aa7fd53bf8587bae90ad628a14

    SHA1

    2739c9feee8578fb222462e339b5962c4ce6eab9

    SHA256

    966a4bff0dbeba19bf81cbec1fa0ca2ca32b208d275b2d9233469987c81fa2b1

    SHA512

    88999c6490cec37f637e6af375e3747314f6ea076cd318557414bd7ba0c65149306c79a31cd1f26325544982510da5c5f6ce148de4b07d33293b9498cb300b88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f354e984364e3604cefbd3ef15f364ea

    SHA1

    1f68454e9fc8db05de78ed09d9e0cd95c4096bc0

    SHA256

    6affe2af4da0fcd3c0365946a956e6bdfa9569fd8baee1b7f0aa3cbee5b7db85

    SHA512

    14efac0edb1f4e0fc796196a98143e43353aa40b5f0cdfbfee42864c018d6d95e4057117e9d9babc11ba68b0049bb2e3f9828c940e5963b71e5b87563fd44047

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33ab4da8be7ac73755098cface1e68a2

    SHA1

    237070187b9e897b6a0f8cf17911f0f8e85abf74

    SHA256

    95d74455df1a159e02401d13a49ff244cdc91bdb965cdb5a98aef0a516fee5eb

    SHA512

    47f3813b921886ade6f3d6ebb97067021768c418b6e9aa590b4996cbed1b8abe9c6b042c7bfebbb56207b268d599d05e1b081c12d62128300ce8421e940daf05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    202738861e01f58f95681853fd559f90

    SHA1

    05a20052b49bd530feead8f8d63fe5294bd89a9b

    SHA256

    29bc83287cec839bdbbe0ffbefe142a908ab6ded8fcb5b1d57643dd20e2e496d

    SHA512

    40ae38f4eda4ed4e13f08f887fd0ec048031af24081d372ebf9d8ff1c4fdb5b3f01258dd91006dcb6c70902112eaead3f244e37a2a51341a262672cda712dabe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fdacc7ba07827dd8363cc7f166d7f9ea

    SHA1

    5d1c81c2283a0433891b268a4ce09371c6dff383

    SHA256

    e4eaa13f170e98105c32d489acb5716456bd32518941e33a773ece420e885b88

    SHA512

    290895b69a78e16d71912c533aa2fe1461d7b32e87e6afde24b112261b0da4eff5a86e8999de099dea4184e4b3f94803b0ff655a70ffdfdc18a5511e9055f40a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3004bdc31bc4fc0b830c4cc578e8b428

    SHA1

    91c9e501a3a86e4294ec6a48b509d9efaab3a5c3

    SHA256

    4d234d28b7b127910c892c566ccba48045822e36f9bf41263283c8c72a5d9d89

    SHA512

    a59980a43f8bff7f762bdd3092380a28682ed9fb8e7343ad7a429c256e0602f8b22f2499564cbb025290104c7f54ce689945ea7f5c9ac60c46e4ddacefee7197

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    68205d1b90ccb7e85800e1c263486cd4

    SHA1

    42e4d275bfc89b1f7cac37f25333bc9625fcfd74

    SHA256

    d9b3412d840a41ad58cdb3c410c4740eb969c34e5efe8520024e11e01c5e6242

    SHA512

    ada968be130ca399ac5b198cfeebe729531bae5474a3bd1ef20fd401ab1e15a6ab74eb00415b1b219eac63248b5c9699f05fb3b3afe524a943a30e13c3811c6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4dce33c0686d6fa60e00080e6ab6728

    SHA1

    35f5bf22236028edb3db1ede6ce1eece2645f880

    SHA256

    b37c62806c91ca2faf3ee664711c4adc2b803a0ddbda30858a63e1341d697d19

    SHA512

    84f1fcbfad2b39a2a9d35d781c0283f5a4c7529185147ef95f90680f5eeb2cef37b6ff1bb6a3499a5685d2582d25b742a30f5c95dadfd5d62c2492d65fe1683d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    089246c19d80563fb3c38f83cdc4be9c

    SHA1

    ea8e7b2c4221e0cd0a66ca25024ef2c97d269ce3

    SHA256

    1fe75670a4517aaaf639ce4074c104ae8f6d314d1b1cf4768d2f1955a522e25a

    SHA512

    b53e044736104cdbeffe6f427a792ec131b269548642f3e7b41db8dc6710675772dfe2329134c77af39810f22f14c25e5f184920f34b242fc6b948fcc88e1052

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f22accdef43af5e36e2a188fe3dbfcbd

    SHA1

    4640ce934638884e239ab187f3e8b0d6bbced716

    SHA256

    1a51e7a03a46aeb69434e5e44d6236e4b3967654eaab13e3a17dcd5b35b4ca0e

    SHA512

    9a22ab3da8d8b3f173cf98d4f7ea6733723f9181750421d432119fb983d411d95b58a88c2e06c12cb37057dda18a4299a2297095bc6b5a1632c9400bc68a30cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    599fb46b111df71d10a3d2feb85203a7

    SHA1

    05ccc2d2e1f2cd19171823e59730cc84aedce741

    SHA256

    1d6f638a70404dd2dad683bb02911b1c3273c3c7dfa992f2a7be77ab1456959a

    SHA512

    ec6fb42a2d276d79a9d457f82ef6bc50c1a58fc83f7186251258798d03ff56274ff4392a1ccef4ea075c8b059ce5eeccfbbaf0a7d234b87f803a15fd447616d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c9b9f78a4e2fcc4f2ea35ed9a3f2967

    SHA1

    0445c1ce48ab962585dc8b709cc16ecd868102f9

    SHA256

    4fc2282c76d6ff3356ba82927fa42fc1096dc9d83bb0684a220306f40b257211

    SHA512

    30cc67a0290691832d17467227eed4a75402ad385832beeb7f2ee601b47482ce5703505c7e2052314723ab520d620c06b725034b2b903396fd01e4a08b77ecd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c03d643821ee8b5ca1868e70006ee3d

    SHA1

    a5256e4e5fbd3ec34798a6571fc2e78a45b11895

    SHA256

    c0f0744e65098390fe68a6abe323662b2cd63d7b5675ce262cd31d26ab676e8d

    SHA512

    73b2c6b52e2c5e61ebed136b2d32ba5b930d881a0b518fb60d955c70571585ec551338c2f88b2caef1f6d268fc2f5fe4d6da4760691c94f5504f5de775d72e6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    874a3ba0e25ff1d6847940e4515075ad

    SHA1

    00b2f54027f57c3009e6a5c930b944ab30476a36

    SHA256

    2e504bf2e48903410356d5ea5abcba87032d07a1913ee11df682edae471e05b4

    SHA512

    1101f226a83fa41eeb486320aba346c8ced6714e6cb1df00294aea18ee561bbaa57361e671580fd9b73364aadc5d27c6683ddb7ccde9356c5f6eb1877dcdbc6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b41640533625695043af55ac0b4653b6

    SHA1

    72ef4f6ec2be190b30a7ba47610a7fac5f6a83fa

    SHA256

    67e541939cc1e6b02a75ccbb38c245e610a57b054e3491989f5a4aa8279b0ea4

    SHA512

    1bcd4ac614c03c73a87cd58a9bf8b2bafbcfee617302be74c3b018e7062f7d5c7e1928dcc952ef1dc3f046a7015d20145d0f2066ac48e41da147e22beb43e731

  • C:\Users\Admin\AppData\Local\Temp\Cab428F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab434E.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar4361.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a