Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 21:10

General

  • Target

    26c15b89ade92884bfed2364676830da_JaffaCakes118.html

  • Size

    40KB

  • MD5

    26c15b89ade92884bfed2364676830da

  • SHA1

    b5c67772dc4f079a90362b02c43185d6118ee506

  • SHA256

    fb1c76072049155e7f1dfe82383fd09dea610c53f53c9720d038c6cfb6e276f6

  • SHA512

    793a9ead9571e77781d134ff70ec8afdf16ac633780c24503f435d374e4d0a7fdf3e6dc9e84e9a68e5573d3a55d630f22363b1b8b467ea664944c58e1eb3bf6c

  • SSDEEP

    192:uwbMb5npunQjxn5Q/pnQie0NnUnQOkEnt7vnQTbnRnQmSTaxtLU1gVschMspzUoV:WQ/B1xKYray/D

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\26c15b89ade92884bfed2364676830da_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2412
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2412 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:292

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3bc82ee48ce00ade4a31af61d3ee46a

    SHA1

    403bae9520660143c1ece756fadb3314aa5c1471

    SHA256

    bc68f98a056aaf41e91eb1c77c6efacc27c0fc695e43761c0ff24984b2813404

    SHA512

    69a90e25a0957f802cf53839d20e0d1637fd9b8d36dced1aca15a8219aca0964c4d1ccb63265f588429b130c302890d737b616d75b36fc48f563049a82b95712

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e479e8e86911a827aeac476988601059

    SHA1

    262053e86c50a9692cd2a9271562f798a89dd296

    SHA256

    699f1ce440f7a673c4b5c5ad51404ff07169794c3adcdc4afeefd9c4ac4a7fc8

    SHA512

    4cc743e8053645b8df2d0e849f6688a7921b46bd99fc3532ee7d40e76a087f1430ec27e6fc55bc3ae3d721c4631a7a85a507b6cd3dc7c25e2b5482ee57718136

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7119bb8c2ea2f6fdeb084df2d479c140

    SHA1

    b2adc0b2286c35d70f28911ccc3e287cd114f38e

    SHA256

    e82667a0bad24298d2a43b4cc50890e1340c58138e722afee50fb9a10fe72673

    SHA512

    7e61403128fb57304cd0b0bd0364375483656c63503e49de468ab815f35d25d1901e63bbc8bba457d169240536756cec5476338e1aebd7ccacdaf8d59d4e075b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d347fca2f783f85896502ad34fab7eda

    SHA1

    ff9f1189116bb6977c417c05cec02c569db5a649

    SHA256

    7cb796556cfd62a8f719ff6aa37bfeccfd4fd4e52ea4c44150137324a8af2095

    SHA512

    2462d2a3ca07c00981c4abeae7e678bc66f6f3823aac30c5d703b71844ffdecee92874621c45cd589d7fe1cb1123747ff0740ea59e1afaaeb89dc3abe2555f40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a2eb31d3894b88724fe5e2a5ad96d0a

    SHA1

    e4199dfb75a3916cae7f5161f0abedc15172eda4

    SHA256

    d1b1ad816320756b8691fbee678948780b4de7fbc44ad227b54dd2ebd073011c

    SHA512

    18f0122321dac4d852c2e9037aa1c655a1cbc1475d8936b3f395b5b88d9fc02e297f39bdc45701e3471cb749c3883e16911fb21c3d3de114c27381cf8abfe99a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bdb431f180bfc07f9dd23cf3fdcf4a05

    SHA1

    03a6d44e633b7a79788cf6c37d4ae443656c8481

    SHA256

    40d334adc2877792e80388df612f112eedfc8b69f3f1353614ebad42317db8e0

    SHA512

    74f04458f32cf3528ba72f348e1dc590a082b94eb387ba68a34fc0047c8477f71a55ab41ffc6145345afddb2450f088420f1b2bb1d4a7d2d8a201d7e77597ae7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36862ddd42ab7d1b3170dc5ad8853674

    SHA1

    3c718d7785058133e7ad11c8140ab2ec64668e62

    SHA256

    2db10b90bb3a8cdd2e6b60a948a58e95ebf9596977bc5cbd4a8a2884836d029d

    SHA512

    f88c1b4924ef7df40b5fa30a5f4ee2feb9daa1646883dd0f358d999ace784b2d3e51761ebba58f1c3c04eb312555344f369129e2f28c090d9ecc3a4112ee46f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2537b66a54167418f621d23c704e26fc

    SHA1

    0b7f01fc04bedb79c526acd774899cf2638bbf3e

    SHA256

    7e988e6e39ca80b8a3d0602203f304a78afa5ead50a32f0faa759b3950e92839

    SHA512

    e40d89e0b87f197127d60545413fb8715e0ad0d5601c101d70c905be83d71f1c7aa3ccea3c51407f1444c982432258511287e7798aef0e39ec87614aa05a72fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd3e0b04b05113f4a1eb09243e793ec2

    SHA1

    774e03863081cb5d3c9095cb82ce409b86d1c0da

    SHA256

    1e68e323573190d5f1eabdf5b99cead1963aea36576cbc843a0d25d5c303bda3

    SHA512

    60b5b7b511252af4b8db1425a446add60ca0653cb6c85ce25e8208602bf45270c622cfe70d04af7b08483af97e58c450199b4a626f318ae474a853000fa77bf0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd5922bc108e8904518aebaaca151044

    SHA1

    1f9dbdb2eba9139ae79155ee727f8e90add0bfff

    SHA256

    519de7ebb010b1ca995edaa7050f40d48a5539138506b769fe0e422e289efa6e

    SHA512

    f0d6e9ad29b68e7c3fcb2d15e98946e45c63308b94308c9efcccaa7a3359f8acd4115229a19355a00b6dc3345f7f344642c0d95c42e6d06a8de82ae1857dfa85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5bc317735a65f18df8c7d76dddf1c13

    SHA1

    0f1161068adfccbac3e4c4a7355086924c5b6072

    SHA256

    80b7abae7489e71ff240f7d9a370d6aff4148251fcccd1bea786bdd763e6ee66

    SHA512

    62f7efd729eca0c80e63dc4f115a0e822d9bddc8bf591ada70cda5904ef07f208946b75891de5ae346a2f1a0d0aea8a4f3efb630b04ac73ed754386b63ffbe89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8fd0a3eecf9d4a17896a60861a168c1b

    SHA1

    140a6acf7879c9cc94621615dffcca3f8d3eb66e

    SHA256

    e211f81a827eb5b2253c720157b95d874ee7593418623443d7772984b60f99a4

    SHA512

    603cfef2cc9cce4bc92cd72dcd04ff6417b84d90ec1e74cdd0dbafb7ea07ef328abe36971dcdd569fc26e2af4342010e404517e7be185a5cf1f6935302f0a841

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a8f03bfe69be56d1e4ab9a33e3a8526

    SHA1

    eb2e818568d7f1703d26ce66c85761292be481dc

    SHA256

    664551a81839ad1b54a8db3c3030f04c78cc6c4d39257eb4fc993f9a8ee8d7d3

    SHA512

    0c95d85e78bc0da41b77b621711673b08757ae0116cc737dd8d5cff2edad7e11bbfe7e61e6ba9eb357eaf52f7fcc8240cc90c12ccdef089e21ea48b87f3b2d78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b517006bae33c3d53571728331ddbc8

    SHA1

    9536fb13233c32f681f4f084f765724582d038d2

    SHA256

    321d3a9c518ce27ce03201ab1df9e177cd4476d8638494b130101159dc9fdb17

    SHA512

    f5a97b9a5193b38bb859d3d300fbfebe46c2453880eeedb6581b96c21cbd84a96f4e9cbfdf16f523ce952d0e9e5ec198d05145bb8b3f58924030001947c9a66e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f395fd896d7ff93f5241e4b6abcb93d

    SHA1

    5b622c2c4e77e046347331b98417fcc71057eaa7

    SHA256

    a8ad86d0a310037021c2b814dce0be2b91a6595249d27bd4f8e5ff5bdabee48b

    SHA512

    3937b0f762ccb87358daf26646405c36e06ca5d82768dff6f7d51fcbd7dee7877df1816c6b93f30251c050985e007fbf8332542cc93f66daaf0b8c7d9de9bba1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a25706c107942935d8f9af26b533e0e4

    SHA1

    895839edcc321b9020be1a1f1c1f92ff69cb50a4

    SHA256

    48d87d2e28bbbe0481c67595963324db7ecdb1ff170404c38712df0ee954c58e

    SHA512

    33d2b8e98ec700d54a780a53c0a0488849f8162f2653884068986a8416c8b06588f984e4877653b36e1c5e5ad3b8283c032d963e1e17b80898c489d9d61d9d66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2367c0b7e1d62c30acc107cd4be02b94

    SHA1

    44517121ed3983efc2e9830226d0181e4058c550

    SHA256

    370c13fde505a3d65449df2edc1d3a989106b378224981b6948e5378cac95536

    SHA512

    10730b2d2462615505f78fb9e1f911ed26c66d0a69cd81365e27eaeea0558ba96320862148b82ba71d148f911f806cb8e593604eccc6cec8139fe69e18f44794

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c64490667616d2f4d7ff7ddef142bb4

    SHA1

    3e3f03b7e0e1b138592f22a56207cd319fdf83a8

    SHA256

    bbc77408ec9a0d53b6ca7587ba4fe03a107f112952fccdb05787b5c94465205e

    SHA512

    e5960fc99781d4c4f5ef35d9bd0a2daa3974ab5afbe481f6ecbc3c634a49893ead7fd89f900b991482235648a6daef6e34baf11ab99dfb46ddbc6a54a173d6e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd3de71658e7ae1a8f624640042e7479

    SHA1

    043ce1586c2b795bf088ab7b78525ea978f7d431

    SHA256

    cce815ea1c7a385bf26d9ddb7a2c289a98611e3ece3d72b43ac02ceb7a4d5539

    SHA512

    c43f8d29e0dc4fc888f59a12d427517e8f318c5ddc72c2e16df015450546807849d02b36814df5fe6838552f5595def73686b8ce79313208ffbd6a023f2bb136

  • C:\Users\Admin\AppData\Local\Temp\Cab38CE.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar393F.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a