Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    07/05/2024, 01:56

General

  • Target

    1f0e308be65632eaf45e53a20655a7cf_JaffaCakes118.html

  • Size

    22KB

  • MD5

    1f0e308be65632eaf45e53a20655a7cf

  • SHA1

    d0348df90deeacb8006913beff5a4e53db97b171

  • SHA256

    29166a007626880bfc3518dcd8eaaba693e38bc6e6f93032c036d5e2319c0c6f

  • SHA512

    afa30ef5b7c35bc1406a442e083fb940a39e177cfc4edba3a603c13616c0da7af477519d23074a0d82888432d21adfd7d00dc03b96acccabb1bad138c83cb710

  • SSDEEP

    192:uw7rb5noDSBnQjxn5Q/KnQiexNn29qnQOkEntOYnQTbnlnQmSyxD5xHMBRqnYnQZ:KQ/M9vdxyu0u

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1f0e308be65632eaf45e53a20655a7cf_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2792
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2792 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1804

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    382de493a87f21bff607dd798eeb8238

    SHA1

    c64e31e3d1de26e511d84bd332c2105ff67a6efc

    SHA256

    f01b89c03000b454244ede2f87ededba9acd4e2c18382552b2b2c4976ec502dc

    SHA512

    72493c8c59b28acf68d00194bfe49dc14a33c732c860ccef1d93cf6c4d85acfbe0743e17ec1da15a321000e84ae32d74180f1805004d345496d5d6618c0e1bf3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    946131de1460335ee04ea22ebd6a3ab1

    SHA1

    2a4437504152fa2bdef675bd4ff86e0e25274690

    SHA256

    f649f3f4ed36f394f07563bfc00b6939bef1931c9b363b7a23bb7701e8e3488c

    SHA512

    0af05a4594de7becf0893594a3822fcb49f5b5bb28b80a96679768afb00df507579c1e21ca16b0778577a87e6d53d48d679c2a79eb6778c1b09a607025ec9340

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25d0ef690d841ce2a8ff3906d0e6900e

    SHA1

    25abcce1cd2054b9d7052162ed995a67e76b247e

    SHA256

    aa2c095eff04f10fec506a05e63dffdb7b79944f99a7285b7b2638d7b08117df

    SHA512

    f13e466ee815153661a122c4caaf44d9c78d0b034cf331f81a5fba2ad52024c6dd7558fcdede98be51eaa095c9e02b8b7fd51a90a221228c09737e0238952696

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e03cb3ce4dac87415f35ecc9f35b7cf

    SHA1

    6a11905a0a1c4083f9f526d4ae71ec243de302bd

    SHA256

    58a3ba7c309a1ec5450965ceb5552b513dce502177266c5378d35c55aaeb4190

    SHA512

    16acbcd8f1711b072db2e3c9a4e06ae6eaafeedddb8080fd25211d05e1f12cfb3570aa8c5c223664cc10f8278690f9f5d244d9cd56648c73d4725f37653e3021

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c48b7fb74f5ef1ac48fb497c614404f6

    SHA1

    fc322e811039fb54c0ff63b45bf654bf6df223ee

    SHA256

    267d455b7145da867944f81ee706df158eb9bf16a1bacfa9d3fd7f84364b7f2f

    SHA512

    a990d2c008978dc09dd19de60ade9abe918b5f4551baef93cdcf0f6cd8c10529b99a2a53dbefeb12e178d75af1ba1ad60d45d5c05cf108e05d8d1088f8c217ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ba26c620f20973b52e8708e24fe78ad

    SHA1

    2e2e19f0d5b51ca097f2b5c6fdec61d25d04b62d

    SHA256

    f4216c98ba5703f44b4361ad0cfa82b647a55c55de67590d185262e660d1095e

    SHA512

    a08dab851268ee7bbf898cb3132007cac9d21189fccb4f9830c244d4aeb02436181f4e7d94c399078fa27a7c5c705f7a5c3872b6e30bd73289a647e0225936bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    336ce7baa75ca6fa85fbfb37bedcecb3

    SHA1

    b9f0f27135d95ac132ac6c60f9f559008f262ed9

    SHA256

    a8d2b471d3d7022ed1af82b18b0c4d56d7e3cfec8a13d900167be00b55b34baa

    SHA512

    be66668fa5ce7ffa0a59253652c1a570fac1036901e7908ad7458363bb55749a7305cff03dfb8107510df33c8eef8d526ed58bbc59245b013dc302b2bb918819

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62bb4e56251fa3ab861861a38e861ad9

    SHA1

    c94bd350119ff7c42a77f4d2a6b426531e03422d

    SHA256

    15886ce7ff834411c9ebd28f2dd15a550d767ee031724f5700d7a49d5ebf1aa1

    SHA512

    4589e37ba04f496fe1ec1afba9a597e40631bad7dfa3cce269d59544c8ffe23391769a592ce565ef4846a465cf1d03893e2ea7778cd0bf755d0fa917d9a9366e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d990fc7c7cdc8e070a71e10416a91a98

    SHA1

    38fd863f662d5a26d0b16575ccf7a47301f83863

    SHA256

    f70a36085fdc58a97411a1bc8582c6d0fc78dcf71c3d1a567a50b593cb43c876

    SHA512

    9064cac3b8c18d8d9fbafffef56353ad9160e21d3efdd24b610fed3ad3a54916a4dd3ae152dc8da2b3563d058dc94cff4b433df708c460114c21b61ad2e34533

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ac5aabd81fde25fd88964c10aa1934a

    SHA1

    e3f3523fd2b014eb57bddce982f0ac14e6847b8f

    SHA256

    2114225062fca4bdb2eec357932d2c106129a5f47e551610ae6270a67644bc95

    SHA512

    c868bcb41f5041f5f5900d6b53d4bb8cf5177ff4d308b6ae6b81f99fb2d787e7cd5e91e7e6b4381787ea45badb1e96c92b38643bc8045f6829ac0a69ca9b4b38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc705d5a2300db500418a7c9b7e04480

    SHA1

    a2a0d017fa2c9f771b84718d24baa2cd499daadf

    SHA256

    0683bde9615a0fa2b3f197bc9221693ccce74c5c6d158653657b2afc48a3d6bd

    SHA512

    608ab25f5b1ce3344962892a14910797d6818f6b59b8ea66e150ebe383793d048a7c53c507afa0adc0f9038bd191fcabf30ac5b306ea9aef7d20bde50812d280

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8210bcf8106d38db905cf00c6434bc53

    SHA1

    193b9cb44206ef504d76a16cd88dddb0e99e3a86

    SHA256

    8f4ecdb14f977a8fa9ee1ba374dd5eca825c1ac0832c6261f6e0eca2d7815eed

    SHA512

    ecf483f1ef888cc92702e9f17b84b53432098d61510b3130bf96be54c7485335809ebc00f7ae2c4d1ea7d4a7cc0bf5c2bf4e592ca03e48a210fe64dc609007c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11df5b4fe55e4f6145bdf260dbe7a42c

    SHA1

    21d161397e62fe307df5641cc8681a174ac4c93a

    SHA256

    15e886ebebcdffb61455af0aebe8f51621f1874121347bcd82b5e4ee6db653fc

    SHA512

    a4b88af483d2edd0e271e6f39876c50b79eb0a51a7ed66d779fb08059c50dd75750b48d94efff81b2254c367f9aba1755c03359e9fd0edbfd2e36fc825014b0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb478dcdfb9a09e811c8adaf39a903a0

    SHA1

    ab88e62edbf42cc22715c5fa062cc78012083fab

    SHA256

    eea251dcde7054d984f47fbb7ada668bc4cabfce1a4b7a2abf0933c55edd2c26

    SHA512

    56402afe9185bea253305362d44cfaa862f652da5455bb430825a5b31952ad11c407cdf853d02b078e01c2bdc669735e998099819c086632f7ef5e3495c2248d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19782afe647e5be1f34109d62cb91b55

    SHA1

    b09e7889ffd0a3162560c22b584d1ebdf9163b1f

    SHA256

    d2dfba6f92dbe946221b1ba98017e17e662bfc9a7c4be0edf0b3a016fd643f14

    SHA512

    8f500d4768cec81fd043142bc62352622b468fa49f0af997a09bf68110c4889c42ec833805bb2cc0ac1b2fe97208aa4d35027f0dd7a1b58608fdd8cadc46a886

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7c19b606835290eefd8717c66c1db23

    SHA1

    7e46185b4b80ff3f03b25fad001a11d0145ec1ae

    SHA256

    6bb1e780b2742afb9a44b44808fc97b97c6a4a3e339597f1e0f0f1a4b173a076

    SHA512

    e97d1931f6b6e87081c402cd9ab39a73db74c37fb21081a497f2d9f3b71c5c13bb2fc760b8ebdd07846da99f1fdeb63bd5809b8cc6b67fef8673756d3170d545

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da96acb46f21958d8db61a7f87765351

    SHA1

    f595838cc812a83c92a91bfb62d53f1e5373c331

    SHA256

    f2e78df99cb39213f60be9465da29439730c003b3084ff2c9cad5aa9c1ae6714

    SHA512

    98102a504ba0dffd2224dea0b71f62ec9d973062b0fe108e0c8ade9b33ae225b7e76ee5559834276d52d8cb59350a51f3922e2f4dc241264718b2868469c36e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5f2dd59e3945d966b6703600884f30a

    SHA1

    2cc45c35bcf92df7f21619455d135c386677c747

    SHA256

    4c05bb4a1aa1897e034d0deeb261488449e9e6e6b8f87714f3c555f80675a54e

    SHA512

    03ebd8bad53660fa924f282f10e06ef4dd2bde04e0e9f6e9ae98c65a69dfc4ea3b7d7e94ee52d8669223f67402af0c4ed89a8449d5e6a25eceafd84b5bb7f5f1

  • C:\Users\Admin\AppData\Local\Temp\Tar23DE.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a