Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/05/2024, 09:11

General

  • Target

    16f8a79f0dc61cedacf6e04b77d93308_JaffaCakes118.html

  • Size

    70KB

  • MD5

    16f8a79f0dc61cedacf6e04b77d93308

  • SHA1

    a8f3157fe4e4392752666ab61eb211938446d0e2

  • SHA256

    a9a94dbc99d9fb5ba462135084a43cb337a1c5598b209cd4552becd89aab8fa9

  • SHA512

    a0f0f50c7cb931fd72c9b36c900e3ae3b13636cc82cddb60a59e2af1b8057cb0d8beaa22134f8f6dc054b540732fde9c59e21d2893c75fb44b3ef8974fbb2682

  • SSDEEP

    768:Ji88gcMiR3sI2PDDnX0g6sE6VHFYoTyS1wCZkoTyMdtbBnfBgN8/lboi2hcpQFVh:JdHrTzNen0tbrga94hcuNnQC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\16f8a79f0dc61cedacf6e04b77d93308_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2956
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2956 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2132

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8381d6a2bf07b8f1941e9bffad05f407

    SHA1

    0fd07eb0602ac22a6a5fb61d8eb57139dc11636f

    SHA256

    447571623186ab161ccb9b2fcc572c7f0445d4f267911377ad003b7fea8ba2c5

    SHA512

    89680266182b9f9fa8d657f2c6e04f86b28f9fef26336c63db88cbf9c5bceaa35d85b3b85cbf7ea7760ed0c6640f7689c653c734a1bb35f7ed2dbb23668c96ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed49dcc9782e874fbfa041cb8020d3a6

    SHA1

    b064795867632aa0b1adb75c1b38d035790c3b05

    SHA256

    164e4d58e5ab728172ca276afe5a4d420328c6461d2f94ab47ef02c9b1247f74

    SHA512

    651c8c3c505dcb7fd9c36d96e12e535526720b03194fe0e9d0eac252d09fda716441505d9508aa436a1212c4800e26ed59d868b9daffc2f454cb7a7b8123b854

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5aaad04cb8e7610e8ab377b01792b1bb

    SHA1

    d8c00d3788464a5e580758b6c8742c1cb14e704e

    SHA256

    675e74bbcf17c6d479d64553147bd3438d7c02bd4f6d2573e3df73fae7280168

    SHA512

    3da28951c0ed5afab32c9f603cc7f454ab2ea964d7f8764270a90e21899670c2503a0a55f7f2603589346dc64696f54ff502a19a0e6d83f62b2aaa67b548346a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e67e7c454289353016dc5f0e212a1cd

    SHA1

    fc69b9ae75f6dd5d18301fee782cfa60cec1a9b0

    SHA256

    90ef9392d6fa89ffd3fc644f76af4b3b3f367f1461573e3ca12403a9147b9509

    SHA512

    331e411921b64718a228d6538e77c2298312de579c579e265208004baab0f005a2f133c9a94282f7baaf3e08e6190bc5b86fa5f7817c16e6f5fe378a60510ed0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    321c972a215209baedae2e267133c33d

    SHA1

    463569600d5ffc6de614a237c0fb2fb63f2d9752

    SHA256

    fbb7bf6654af06b7fa8096415290b9525abeb7cb24cb3e19dd994b89b5cb6876

    SHA512

    86a9b26614dbd231d0a0641cb18963e4b2cd93fbee68884390df184d94102eee69304642ecc0b0076c628e30b5de59bda182c7fe39dceeb75d7daff09f096e0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb3a5aa6fa28c13743d7abe5bd12a74c

    SHA1

    8bb9400c2180bd5a19576fb323a7f098fdde4dd2

    SHA256

    be597f5bb417358fda016896a0767bd7f0d2e32476dc993320a3d17466d0928e

    SHA512

    f550b2b9e8314407b5358a4a2a646e6d16b277036f7712e9d8e32493a63ae0c7a92df3cf63f2ee81371cdc8a4db1e8a50946011ce1713c23859c97d72771adc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3961299501180cd8bcfccbbb935b353

    SHA1

    7e5be3157047a91ad23c5e07c7756768cf4d0ef9

    SHA256

    e259b5f62f4d3ce08beb318cbc87c1a7512a786f3c55d8ebd1a9b62249fa33c8

    SHA512

    66be4d58f5ec1087f8c0f5852c79bf2072fb58bbd3a23a0c0d97eec373b863b4576cb87493e03931aca283418a0405e1fa2cbd4d8097b5fe921d91c98ba2e479

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    031fac58580a1c9c602a88d111f19fe3

    SHA1

    5607c5f1826fe8d8b0d8349275c69f50e720f168

    SHA256

    bd03cdb7a24a75e195833d5a8a1ae46284374ebd41e652a0ec7fd67442585665

    SHA512

    3442b4129540bd51535616f2cd2bb51fff96956460d719f661ac51feed3e28ef0da4b85e0ebe0e129c332743680de146eecc59e761f7be6e08ae3ac5810f8c22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    200f4c8700b9711ea3d04410719fd8f2

    SHA1

    9126a7eff8160e594986408345f21c7ca9fb71c2

    SHA256

    c38e6daaba92df6fe6fd10bf708015dac296634cc40a24dec25bbbadbe03a00e

    SHA512

    21089823f2020984c72f0ec668d4e88e0c4744416ee2ec20cb9caffe4dd4b170ba7cbeec253d615a6fa595cb4de4b42fc75caa1e04e82d6c5c79c94aa0cb9064

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96a7a219dded13b6abeb06438f6cf85b

    SHA1

    588dd8e4b73a6591748e89f9a64abef29b96f128

    SHA256

    f092da5b2316e44bf8d73d2b4a334a3331c1d6e9ec83e8ad858aaf3d7e88863c

    SHA512

    c0e46d3a6758999d4818a5ce00ec56388cfc21b3d695b7f7703cdf9bc5bc6200a6823ee7bc55cb7a34111ba4ee539ae9d7e40cbad514ebdd3bb02a52436be656

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11f23d79ed6f8b58c7c6aa8e03ffed75

    SHA1

    fc878af46d5e9cfcef0ef0aa9f38f178bf2aeac3

    SHA256

    28c82decba03690a150b651e0ad8c9187b35d96e86a3002c932051af32287e1b

    SHA512

    62ee5ed232d55891d6e2d6efdb24b843e7c4cd00ce996bd6b140b14216976ce658e06fdc40459a21802ca423c71b0ae839d2af6efe053903e98144f4cab84e40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab4170786a96a639700d016fde99eae9

    SHA1

    f27337597935c514998a4d6dcf4dff6b8fd414ef

    SHA256

    63978000198ee75b6564f03ff96fa169b108259bcf9aec554333b941fade503c

    SHA512

    346ae7f066fd17fad68ae3071d8ad883877ef8f3e09cad7c7c8450fa2902172b68e586e3c3b8daa50f7ccf2e5b296d5098c81ecf4e79fec709ffe28d7c1ae318

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99e4e797724a047a315efe8971be1b54

    SHA1

    7a0fc5c32dd69779d20809a498644ff1a1ece20a

    SHA256

    04a9e1f8bd7f13dd845fe5b80f35ee9e1d4cf6c01fd95e84b378b2e4eaf711ae

    SHA512

    89a7f01ea37a745523347d9115f7089f3000f6cfe74941806842716670feba358453fd53a80c33f53d95709efea70c45d70c0e4b857b02a1922603e81d5288c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b655551d7bf12d0f2b56e8fac3eae549

    SHA1

    1b7f5650b95ba0af50a282b3c402db4e881179ff

    SHA256

    4a1ebb211935d39389829124c6cc9619fdbeafe216b7a544dd8d081f961f52af

    SHA512

    2e03ec38bd06c38cfd02f83556557def29e8963316a20efcf1bf377aef3802f9477f94af28a0370d56a44b72f55f67614fe28af4c0c839fe49247687f26b1183

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3517edcf9f1404153915aeb4347c604

    SHA1

    6fedb780a6825559a90ac9fcc34be7e7f80d8ce0

    SHA256

    468bc435d37f8a06b9cb5b5755098342c2d497e90037f72e664f73923eb9dd73

    SHA512

    d8bf0bc94e2917287f72b31b29c0121dc97117a491bde0411e529865da25ad5e10fe0593bdbab4e75422722ae911931216b962707bf2ec35c65ba95ea6f3d275

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d4a2b085145bf573fa435ec0e4ab8a5

    SHA1

    010f118091a68a5e7ef82a9d76ff25f2a8ce5652

    SHA256

    21a0f9d8a82ef5d8b8afd1b4e3974a6857104d195971c68ec40089b81e1c1a85

    SHA512

    501dd9d0c76b2bcff4d424c610e240f91c97b1eeda708ab40e2f4dfb3db00aa0cf9ffc0fc7aeed4f5fa7090828c0d4ba8bc628b81180980d2d0e098a301309f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d22588b38195b749c55303ff0448ea6

    SHA1

    de9f50f7fb6f9d01f2182ada63debb9d25072f1f

    SHA256

    668e2d251ad1a407d841e8eaad72f49b1b896966708c5a3589b7884a35a93bbb

    SHA512

    9737e80cb7ef88e092c4ea528d05bbdd9aebe0b79cfa564743ff0097748353558e7e7463dbc7ae37f68339f405587ce45ac7d147448fb76ce4e92e6e91eb6a87

  • C:\Users\Admin\AppData\Local\Temp\Cab36CA.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar378E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a