Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 18:47

General

  • Target

    2638d62298a954d7871158ba1a75d32b_JaffaCakes118.html

  • Size

    120KB

  • MD5

    2638d62298a954d7871158ba1a75d32b

  • SHA1

    da841bd0c572a09d8d8bd8cafd76533d02fa9832

  • SHA256

    78c52ffa725351e597f9c4afbbb388f5342daaf8348fa26334a482d28ebe9fad

  • SHA512

    27726cdabe1e2891338ff7d8c5e8f4c0728977d0e1a789aee259254dfb479e165f97d948a7bfe9c66e70c9afcd552e430182b9b3fc366369d439d1d4c8618c5d

  • SSDEEP

    1536:SImHvUyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dK:SqyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2638d62298a954d7871158ba1a75d32b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2868
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2868 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2564

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f647306ef920b80446d902745df61702

    SHA1

    89469d3376ad471a43c94e6ce2fae146f99e9b55

    SHA256

    2bdb97be36d7dafd3eb458bef0de65bfdd52a12c7d0dd48054742f9359409ba6

    SHA512

    5cd1ea2de53b6e331453443fc4929770d0e92a13f67ae803748a80ce0f64bb59a57ee9b814c27a228f5ff8d3cd5c592b96d146e80297383dd7d5ca18480e745f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0075ed98167a605492d1f8ce6522541f

    SHA1

    8175b1a93d58da9c426968766dbe1dd039605bd5

    SHA256

    3bd09030dbd378234a9ea3a6983ccbeaa481b2a856576a4518454cc769e52d93

    SHA512

    8e8139f214d80fe65a8045c436c34fe2c2975a7a63b0202f8191f9ef6272c7773c97fc0374709a6bb981be3803cb86c19aa8559043c46848dd9add099bde72e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2618c4b80bde5369dc69c665779442fc

    SHA1

    8004fd4106f2ac94bb22d9cb9946401d595b7654

    SHA256

    815aa9b3e669db75b7be771ae8474dd8ff09ea0ed5ac05945f7a3a9956af7e45

    SHA512

    d1db36a5d5feb049ecdadbdae5dfbc36705aa7aad571e7be57da7d614bb38a84e658548d3be1d8ed6ba79694dec1f864533895491cb6be78e8fc1621e77b51a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b94a7b65e982a6d6e7c5a349ff883c4

    SHA1

    8294de9d43a190464399a524ccafb613b16596f1

    SHA256

    e3a10b638b775b9d64573798b5b0e5d29dd31d6ed7d65f767010414f58e0abb9

    SHA512

    dcc81ec0a8e0204a54d03134400d150c9e178dbb02cb12c019dab6bff3a6e0c3beadbfb8713270543be5e17a6ec805b18742158a2dea7f0281da3afa6f53cbfe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9672b54a5ec284759047ad5adf5a6f9f

    SHA1

    ff7fac1402f6d59ae03c9134a4b28ad89806ffbd

    SHA256

    ebcc341d1eda0c15b46b04c12ac5049dee16c609529fdc30aee731e4a279a58b

    SHA512

    f69e81ce5e88c61e34d475f76a603c92df3480ef7c1fd806ba1de3dfac4994838594031a4b878a8b0ea89f087874898817f8fbd18fd1da00e2796ea9b6fe5e10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1dcc440fb53eb5ad7d7b4abd3e82965c

    SHA1

    48261c770c3c56273cf09d4b35d607d40d7dd4e0

    SHA256

    07e1f06851e9ee74f43e6360f157f4565336497385a3aec444c093f0a723783f

    SHA512

    8fc505778ce9d75a567a54d073efb72691ea7c2de5617e86fab734d2cab559731e50c716874215169e33019db3bb613c5e9aff7d7ed9bc5487a1caa2a16854c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    237f78bb09dbe2a36d3948feecafabf3

    SHA1

    77dc3b7c3d92268eb5afe8165f3f0e09a7a0d6bf

    SHA256

    2ca0e20b2de0ba6fa1a05c60b75308e6da1dc29480d93440c79fd1f3821ae7ac

    SHA512

    009d54b03fc155179e06ef2030c035dab055dc134152f837bc4b3d2f06ee392fb79039ec8c8d4998a46ac58bca7048fb288cb891be8d3e1ae55a6bde852d2fb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    998584f6aa12f514bd7dfe4ef2ede773

    SHA1

    83b5276b7fb4ceea989499cb9859a9c67c8840b7

    SHA256

    9c8c87ea34da7cd56b19d84c46d616df5aa6e6f7b026ef1753832d7c4d8052ff

    SHA512

    4fba96b5d6a566abc8521aedb68877ffa459c69df63f35f3b710ed4c8632b4617e47acbd078b6de0e9d548e06620b5f81e21bfabea15b0dc578e540f16218460

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9e9e45c09e584f5e840577266662dff

    SHA1

    a590b817ee4c06b3e3dbf8cf2e4f55a19034605d

    SHA256

    ff5372747a0bcfefae8c83fcb8f9eaf4e14240bd929ae49fc94b42d000a2e863

    SHA512

    aca9264fc0e99f1e3f4c4ab1d2425f671fec6f7e3054d54eeaa2b4c476dd6e87ebe51929bc68fa1e54b56b52269d9425b3c7952b9a91c6e705bdfbc2b392a5ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4f0e064bcdd60f6921e7264cf71ca0f

    SHA1

    01ec7c04d14b0d0a139316e6722dcbc630ef8d30

    SHA256

    1f0e4f4fb9267db2c9582fd67f30b98f1ffc5bd883dac8760618cbf0e33fe2f4

    SHA512

    60a9c9c0b9b814e74394f7f5d288ebbc8d66a60958da9930258e2fd145e9d919b18d427c6b7d9905af0c0d7702256809a7319d0d1a72ccc535b6368b1ce171fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b42a799d8b102adb46cbe8c2946c1fb1

    SHA1

    3a3f7451bf5ad11929725e8cebc1dd75715187fc

    SHA256

    752aab1b9561e618d79bc80d082633914ed749f015bceefca3d27a7e67b625df

    SHA512

    9a94e8496637e2fbbfc665cc7c81c22d0191e6de35d0ca7d3788fba43efc451f9f30252f8e0c4f03242cfef14f253d489783d4563ab7db091bcb855ff3dc7d3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca4b62a1b8557d62ef62a7e37945493c

    SHA1

    f784b20c195f5f6b34fa6a3f6d23c68e827586ef

    SHA256

    005237b63770d19d41d55cb79f7c8e94d073f662c0ccb39620a06d4ae7011777

    SHA512

    f586833811e869360e115fec053bf4161e2ca13db73e824f52d270a6e09e689ae24f7c6b4a030c3d1721e5d01904ce6f637759c9e59b59e678df52cf54c296b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60aac96b4dfc49888de9714f3783c92e

    SHA1

    7dd40577f73a8e1a06d8270b446b3233f7fa1651

    SHA256

    95f03742f3a3aa677f04d995126b4313b1e1b8600ff87c17e0d5e3192aa07069

    SHA512

    44e5984534ec0510f1a2cfae46fec4ccc80bbb44be288f626e0d48fa3e58db7e7c6457b4c77e6ad06596cfe771aab38bf2c512d01e0a1325d3dae0a0db737933

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    26ef2817fd82c7f0eff039e39cae2f69

    SHA1

    a206cec48732e87f843ced9ce1a996a47897006f

    SHA256

    49b950914c945c90880fb5d2869b95ea1e3a73be490e5c4f182aa67f92ba3178

    SHA512

    4d681cea3576f89a8d06c3a38f4dc285363a2d1a18763d3ae3b73c79d8a13e484c80c64cc249c957a6b974ab56fb310863b9bcb94e2cca13422dcc9df4b5eb58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1708112d65a374b4acc13254fbf2ac6f

    SHA1

    b0a583cff2b53bb81a7d1dbf3cb050d027abc28f

    SHA256

    2b376ac733d35afcc30c89ab1368cf5a9a552890b194995c3285da84392e2792

    SHA512

    a218a18499920111828d60105ccdd83c999874f0d0aefd148c6016ea2dfbd52aebfe452e4e527b82b572b4b0b0333fa7da92fda1e08caedfe43ea10022d163f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a062ca66a43e0f476fea77c804464f2a

    SHA1

    30f81899e2e7a8d76a5621ddf37489220a0385b7

    SHA256

    ee90986ef5aff970066b1d090b7dc88c717122f7dfc7486b95958c6d55c6cacd

    SHA512

    01094f9127c6260fcf9f51ab8632fafd7b15354b44c5184f1bdb28573519e5b99588f2d9fa42836b6562380f6d277144952a0bfc3d1f7953990c82ed32c3a3c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59a5f8ba312e11647ba08b1bb1b3faf9

    SHA1

    409581f856f4b8e993b6f6180280e53e08984d24

    SHA256

    6f50219b840e0ba9329580db46102d74da029097d33c0b0a15e0fbce58a1269a

    SHA512

    7ce379f7f1862bc7239a44934d0209bdfa61e7bd7ba369934e5f0ed7a5364663116f0bfb9d5543f329e2153e08dc1bd7eb96e77e47c1b67c7f41e306db620072

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    039aeaf9f6cfe80bbb0755ad3c282c0d

    SHA1

    1d68f6d8ad686fd440969df33a0e3553ad5e5f08

    SHA256

    7274d36b940420ab9d77dc2c0aa3ff860d38c86a7cb0f1a8b9af719efa5f6558

    SHA512

    daed8ecbc552437fcd5deb300a9c413a76218b9f809e40d9c155474cdaf89d3feb9b1b620aa7cf768c13a787e3f8d1ae477ccf3a4e72ae86bf53c76f234d2d0c

  • C:\Users\Admin\AppData\Local\Temp\Cab3DAF.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3E81.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a