Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 15:29

General

  • Target

    258172d67c264c0a6d2db782d12729bf_JaffaCakes118.html

  • Size

    27KB

  • MD5

    258172d67c264c0a6d2db782d12729bf

  • SHA1

    b9df3827c6388fc161601591a876b2ed047f18ab

  • SHA256

    21f520daa68deaf5ac9abe06dcae92526287cd30d677a0b2ae6798104611fb4d

  • SHA512

    29891b5c56a8cd995ce3c3a0d4a0e62f45a0d4be08982ae2ec448c83ed548bf966c5323b4286940d5344f7945d8c89c03d29d1c8f366cef072284026e5ee5553

  • SSDEEP

    192:uwMWe3G+Ezfqb5nLr2KiOvPcrV+bPunQjxn5Q/p+nQieNhNnVsPnQOkEntXI6Jn4:AQ/QOFg9SS9W

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 43 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\258172d67c264c0a6d2db782d12729bf_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2392
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2392 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:3060

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    9f5afe71792c09711769f3797b6ac8ea

    SHA1

    b3db36ffcced2a28793768db1cbab6dedd06ad02

    SHA256

    f62faf606d39b12592970316ee87da900035057597b9fc156894dc19e7c9b805

    SHA512

    8c70547b97a1b5883db97a4db8784691980fd1d9f7ac7659a03ffa2fb786f9db08144713ddb010e74f5d420ffca8f1d05b79aae34d3259af9dd66e96b92080d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dfda6b32c1a79458e5a566b99ba0a252

    SHA1

    6edb4a12c1c71a359236f288c7894a34193fd103

    SHA256

    235abab5513eb84d82df634077ce9a61581ac32af0edc521cb2e6417da4863aa

    SHA512

    6ccba7481f44acf6aaa25cbbc44a3ebfc2ef8ed05010704aa51767cb2bd4460143b9c7f2582d90543840a59f5d3080996a2f7dee26561248fc76813c6d034a07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee59be6149248a2ea5f68c471703d2f0

    SHA1

    9eb7772e497224357c11adbfec8f67805af19a64

    SHA256

    bc7d6d222279030fb96bd9fedd40f94520ac00b109f5d36c7c8a29472393f639

    SHA512

    2851fa9e2cb0b86bd4f41a654c06def6198884def74fb067726c33492395c1b06afbe769dc5659bb3a215d36e40fa055e886a51f01a4a72f6a14e1f30f139943

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    294b7c8af21cbe1267c6dded98ff824d

    SHA1

    9326e3c86dc158826024c0e5873bcd796f68c942

    SHA256

    2db12ed8d10f7b32bb6b1f1d830e4291d478ad63ad2c18111bf9cd62b6387039

    SHA512

    239c030261e445f0c8794f193be193880110dbfdf41d78dec2df75fb7f16c759d766b06fef4be64bdffce377e428572423a9ecc2b99bf5cd526bd514cb36c345

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9bcaee405b5d9fe6f2823422192b2ac

    SHA1

    7526facb5142d4a50bcfe0737211993ac4d94e79

    SHA256

    35a87d7d799cc2234a6e869bdb2547f6f4b4708dda99ea47668f6122964e510a

    SHA512

    c6dc434ed434c0881a0e90e34728d64d08628c8cc0df3091ae33660b8749340b0d5c973b982c96b7a12918a22548379aef3e788c996caaa19ed618e4265c0c00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03192658957dab6beb8bac9e8ec9c5c8

    SHA1

    fb6ef6c76b3d8da345708f229d7e7d4271200363

    SHA256

    d84471129a2516505a37c521184c7838ae1366e690aac98eb5460dad066b317b

    SHA512

    948d659bfdaf750748a40b11687570846fb2f7617d3e1101136f2654b467029537f4c085a1631fa044313eda1e97a0e32f61369b6aaadb1ef9dd2383b27f7b99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c52cdabe2543c16ae73f4179008f10fa

    SHA1

    fb5c5053b58c7d8ee95e3135460739b3f0dfe934

    SHA256

    dd26ec95ffc08bc0f36bba242bf2913ac2bfcf6139b92a06ce8505fddbc15b45

    SHA512

    b95356f0b447e5fd6bb8776942b098dc29cca10b7d9cf510da7da302f5f7fdb0af655e60d20fda749b6f6426f0988ef5d489f4cad329cb9f6322ef092afe0c59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb70afbc9c910d7003e83153f901bdd1

    SHA1

    c737956aff7f1f1e54318c9dc7d20cd04975dd5b

    SHA256

    bccbe38b1c82c71c96d863226cc0cc99c35114dbd01d79dceac28981c5a3a7f9

    SHA512

    570c50fa1aa04e5efc304ace82fb301f26b5382c5dc894d6dc593f4293d4724e04ce09020ec690110ac269dfe82fca321b797d85259f1f91539d6e5c2e28dca0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    239a9c39f15539398fa5351af9fdf7f1

    SHA1

    2c07a9b60ed64a3873ccd312fccf5160aefd3ce1

    SHA256

    2943e5d48d1676c907027338f5186fa57ff69e2d40588de88bd1e6bb974f3aa4

    SHA512

    955ecf7168c65d0a401673ebb3a35d9e7c7f22adb29dd99b0aafa4ec0c5b9ec848f627cdfdab27e55a5f3eb5d51944b6d505ffb2042f8d80494d01552460f78a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    017120f11e2de901da05834a2e282669

    SHA1

    aaf05f1feea4150f06c6358abc4dd18ed3644708

    SHA256

    3f9a4c21a0b68e051e29f8868b69f09fdc4b8709487ee3768ba7bd208b2eb9fe

    SHA512

    8b684d4a79c1e25493aef403a0979f2ef1fa303fbc89fea6e6b83b527cebe0499496b884f7f35b936a5f88ca564c18f576817e057113980d214e3505dea02c3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    abfffe45b9dfeebba2c04f2b34bd2a8c

    SHA1

    1ecf67763b2dbf6c71c9c5f94881471bef86a575

    SHA256

    abe885b30411f57bfadb3fc72cc18ed7e387e6c87e1e363009f1e34405a39292

    SHA512

    00806271a2d0f5ea219e42a32be3d5ff5a3dfae97cf8f477f5d7f3e11819f9b095848e999bdd29613c4941d1b6dc9c675ccfaa8ffbb55f8dae687fb411c5890d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    206ac0935958e2942885302cda34ff70

    SHA1

    ebcecd1653469c604a3de6d86650827fad70005a

    SHA256

    3c8714f2533f4a9c3bbf6df7a1aef9f93f4a00a84ad525217c384255b866b8f5

    SHA512

    bad359d79c8c5f39d77daf029d189220261b372fd4ea1ae16430cca82de41364fcb8478c9c91f9805db66bf687558cdd54715fb1cfcd47849b17897ab5df510d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8dc2a679ad26b3e672782d71abf46a58

    SHA1

    b98cdd96ad2111ba6eda14e6a874a0498f3f31c9

    SHA256

    f3ad9246272d2b2b111dd6a437f1f3331f280cc8265f836771ec2dab94b9a48e

    SHA512

    d082fe87f05b6cb0b7ea5f2b5307ecb06be6ece7ae15494c408c5701a050de4bf75dfd2f75a31beb49a352ee2014ce2b240173e1b8aa6d879ec3d0d3a0492a63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    937688691afe6485e898d1118da2cee3

    SHA1

    4b0be10c2eb1ecd74ccecb635fe895cf14cbdab2

    SHA256

    9654eab3ea7a455203ea9297469326a7d0ae02700cb07d1e839d72af8ae4499a

    SHA512

    ed1268fdfc9ea63c5be9e9ea3d467bd625992a63e5d8e0735115972e03b2254166edc293145b8433bdb125c5facfc0a4aaf02be623f5ed6ec33f69e5910470a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    76a410d80c6f65500de1b089ecf13ab6

    SHA1

    5d8d8243607e10c36d7c9c497aa6de2296489d12

    SHA256

    835a588e933b1e09f0caf5d60e6e868b26e5e09de423d767a9aa279742544f88

    SHA512

    21857f69bf38ed0ff8bfeb7d3ee20c8a40d467fb8df5fdd802d2185b72fbe19ec831e4cae794476bc8ae1d0110fa3f0301c5aa123c480478ec7d5d51bb1a1cd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8d7d97edf3969b896a28c0d632d1c0d

    SHA1

    5227c250d743a0e9cb963ba2ce56ccdbf000fc1e

    SHA256

    8cae1921d6b86c1beb97e20db8f0655e1f8b60d2af4d58000a1416de9b6f5d7b

    SHA512

    dd6046acdea9d75a1db3b549554010d6a5f40876ed95960f5226c4a4ecbe4472c85407046a3aa77ddb7f07ea826d29efaaf99694d53fd42d3be35000ac86b2c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90819cd01afd57eefd07209cc1e24a86

    SHA1

    4aaf97b09ae88a181f975ccbaeabba42fceafb90

    SHA256

    54fa75de435fe3b5a12d7494f91b101fd695c51742f273e438a134058cd4ae5d

    SHA512

    0a1dcb4ea4346f49a21b79191a130624dd231579082a8d77a1370ec387ac182a06fdd508282a3573f63f1876c63655c662b755bffd01d1276f8035cfda61f199

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ecbaf4495164cec4e197623fb88a2fe

    SHA1

    4e3c22d7597b1989e2caa0be0c67186b4eba737c

    SHA256

    8edfd46fdc94b239091241a91b11b985d29a1cd1e80faf07a6473b02a17e212c

    SHA512

    9d02d685c46edb9d31b3e654a5bdfd1f7b1e8fa46debb41a1e2647ec8b0b455a2499a7b5743001588aeb636f334665a278d2df691ca9ff139124a57ac157b3ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1886b9931f455f9b3740e8877dfb5ea

    SHA1

    ceaf6725b18a7444a58b7065d06328ddb381199e

    SHA256

    07639e3f1d54287d2f18f1af856cb2e03fb9747a4c2cde165abb7aaedb1fbfeb

    SHA512

    7df1c67a97cf25a6cccd7ff797a015ff634379dbe522fd3eb34b92e61ccfb69e7aa599edeace3ef0e5d3aca3c294209ce90dc1eff5e171f3d855b980f6720adc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    c0a1ade7eff7b6656bba0b6c29651c1b

    SHA1

    63ad0c070a23aaca225a718d35f8943fb748d1e9

    SHA256

    c9920888703c702734d96664c2e15d2aa783f21f5fb982f6a5d1b6a7275093e4

    SHA512

    f259674db1a9cbd93b94bc8df6770f67f376be53c329edcbc91b0e8774574bf882c2a21f4ad8d64b9eae58f4e78d83b6ba6d1fe9ba0c49d6bb9d60fc27f6276d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar2DAB.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a