Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 23:06

General

  • Target

    2c27893b8153745406ecef2cdb2749b8_JaffaCakes118.html

  • Size

    34KB

  • MD5

    2c27893b8153745406ecef2cdb2749b8

  • SHA1

    9066db763681025f501e898ba6bc2d01b148e18e

  • SHA256

    47722a36c43d54e1e6b021002a78f7eaf4f62b441fa29dcc5b86a6edf74fc604

  • SHA512

    2f743eb5591b028d19984c44046d3b0a4d0dc415a1e7bbc66adc620176ca5dbdf5c196d56b47934593bb56a525341da6e0926d07af197d86f2b4070fdd906829

  • SSDEEP

    768:BlZ6uhDD6yQQVQPjW5/ixOmyq3i4sOwMQNSAIV2riISEVPgOrM68:BS+DD6yQQVcWuwNNdY2GoI68

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2c27893b8153745406ecef2cdb2749b8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2784
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2784 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2848

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    854e62483ff0b2e881afe9874ea4e000

    SHA1

    0a6a9883a7f8b8a075298b6315543d2a10619d21

    SHA256

    a94e4bc7195a236baa74c17d7f1244cd818964e41f2ffd673bf3d84e7a4bf320

    SHA512

    b79978571151946eb35d4af0939b68b67506c36748e2507ef54a9cedcd6b0d3fb93d59209cafe789f0119b7f68096b70109cb4bc9e09dceadcc51bd7a99d2b45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba63076b48c5bd43ec30ec5ade660b7f

    SHA1

    21852fae5f66c200f93aa3b8db473f25dac3a813

    SHA256

    c2a8c4e7d9ab8acee89ec80c7a5d9ad09609fcd41264d2c3e16c6106a6028788

    SHA512

    f8b09d137f1575b04de9c263d054da8a72d63a16466f5b5752b5fbe46080536deb918ca6a8f8700712aa1b45a10c01eaf945e005278dd63c8400eee3884137e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b2024aba9e1471dbb199cacbf9803bf

    SHA1

    948c96c505d858999dfc08e4d43a059c86b1a21a

    SHA256

    f6857f2102acc5dfb31df7910d477119c35cc78385613defabc6f43a7ac74acf

    SHA512

    4ff39f99c66dc3762e34b33f4b723f597c9504b1940389353a2bd2808d85e269993ec9d0003b1cc4d7f770c64c245f177e99836dfcf1348a749557b7832b6354

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    473c00d04c235d0a17960437538f216e

    SHA1

    4f2e91a31e55db32880784d2b2816dc22a8a4eb0

    SHA256

    d4f5804a8977fa2c2c5bea06acbc91785a7fe4e013208a3fff4b4ca938201cc3

    SHA512

    5baa569e8e5d19abb53b224979ab29c8d90099d209a6aa3b35a1ea9058983f3d84e507662ed593ff1aa307b3c6558886062ff15bd81f388b9a6f5393c92c3edc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f492cf83e3e73cbab4e41a6306d6138

    SHA1

    9e0b5c850803d39d3d928618e71b32cc3d8ad715

    SHA256

    a5fd7f9eb184b1cf68415165ef4b87c1c7966dff95f9616b094b40edd0121d3f

    SHA512

    bd738963c93f141ed1784e771c62df39dedc52862af45f4091afa1361de628c3345a6129c81fe8ef14219e7e818548145186f535f46436684e4417fed1d8fe46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49dbcb751d2895358bcaf827dd2db296

    SHA1

    1fbd7e036bee7eacd3119c3b428e737b2eb72383

    SHA256

    b0d622c3b886fd1553fbb50a4ca5beb4ff58f08c0a1c4409e024cf7733c1f80a

    SHA512

    020fd3e9583400d089a599b4f8cdae358f2cc24711cdab1dd1194c6760bb3297c64d29b2bd695d95aff5e77ed3beff16d94b5da2b1800b3ff312092b30cba3d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9a44619e9c1db6e7bf3f047ce493d27

    SHA1

    0a531aa7eaadee9243dff9761e2a0b019dccd314

    SHA256

    7da88d1772aa9fe731ddb502f6cde61269a493a54549c9e1f63afca0f01389b3

    SHA512

    726cf2f75a0735a198a551d7eede2d31190a1ce8c6692d4953496118beff409b84582efd42519df1951999af9b833af152cba5367f60b6d31636a0517d3a0f92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fa547eff1abfaf3741fcaff72c662f2

    SHA1

    d1e2b26516d53274bae4437e8fba21116b77e23d

    SHA256

    7b85819c3eae5cca7f660d017285765ecc3dcf21c8a541b0abac24223b2c1699

    SHA512

    3894cad94f445b130ba91d69431661c4164fe38fb4df87b0328f2e1dc2a8a284263284f9d88991776ab5ba3f9ccd04a33bf0e0ed0dfc431ed83acabdc0150eef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07825fe604d62e7b4eeeef766f463a02

    SHA1

    73861adc41c2f5fdc679fa39b5c42ed11c7c8f61

    SHA256

    dcd20e0ce3f8ff00bb065ee8146bce141a2ee990ea3b72b59ea746c26b4997f9

    SHA512

    ea617da475f3d45cbdc1f882f4e81594dc0718f4dba51d4e59b710e56a4c9edb180d2f9c67ab171e5828706d97265b8f2aac59bdf3962a923665a3023aa04668

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c48aa611e6a557fd59544f76519783b

    SHA1

    78c2b334d49fc160a32d394fbdf7ee3ab1fdad97

    SHA256

    309314f212fdef461e8c6a56c1eb12681dd7be23edc2bb52d6a2078290e232c3

    SHA512

    e1264e739827f7b6f2c3d960dba9e6fa2eee141935578d0b97f643a6758198b702eb650fee716ea3d6dbf0e9b8850957897931b76200a39d73f895fad44e4a27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bdbd99629aeaf5e18a0c3e3db370f851

    SHA1

    df9d515f0107cb737b02cfeaf586817928af5f04

    SHA256

    d3b2f642bcc96c87c5622f122f6c48932f4bd25ccc1b8327e88d62053025907b

    SHA512

    ed4e3bebbace4f494b75c2d489e1599be4bd56ea4b79ca9a979dd78bbc4b6d99a30aa572c691e761679d328db962c3766f34766313c23bab792a7276d4174318

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65b1134286ee275b9f315d6488b55112

    SHA1

    7ecffc9ce1edda90182c4d1a94f66e04bd584ba0

    SHA256

    01f1d7b9294f5465e36205556d08ff953cb6221e3de6172a164a9b90b8080a5b

    SHA512

    04a84f6662bece5b567667e1844df3d82bb6aea2862cfea36a075f3928c11e202c0dcaa7528fe81f53be7a5066d6b9b8207dae539c794254c2073f8849e1fbb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6590c743475beb6a026df2e5ba1f6a5d

    SHA1

    2365b07f383397351043a1518165639d3370ca46

    SHA256

    89dbb64e0b8115f95e601eca36c95f2f73de3bcb23d8bae609a0f4077f25191b

    SHA512

    cb5adf48fe556e8a4aba583a005d0a8f679d0a7d852b0a08e0d451a8fc8d6b63e674ef62e4e5985e8390f68005fff7891a0619d36cc8b8dc5d55056c6108de54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e2dc0dd953646a5d6e5aaec44445d62

    SHA1

    a82d28c06053046da3c8acc87edfa7f8196534eb

    SHA256

    f81b0bd7b3f2e30e7edb7a73034a7eb2534add29dd024a649d82c05040a15104

    SHA512

    c4231606d1102e8a870d37e9d5cd47890441bd1dc2ea2a273d6a02a2a5ef80c56727e1c914ae80f42561415107ebb27c1b88f4754250aa67e7612a148080e97d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    84ad542e99b627d465ff7012e4d58ccf

    SHA1

    fa6f279bf55ceee8c87a51c81e61380c1f76b2c4

    SHA256

    2a9952259c56fc2bb4b46577437957d8fe6403944377bd2775aa023589adeb70

    SHA512

    305c9521c46c4eb052c1e1fafb1590633c4ece438554e3f6e569e29d76cbe39f7af7e6c6ee076c75059ecad5f64303de8e1fe4e24815039964eb996a2fba76c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f22af9e0f8fb95d1e59114e2ae3a2a5

    SHA1

    21912cbf8c3c9104c5539a600e68269e4a1884c7

    SHA256

    2c0017917023611a230e26b6ce25dcaa6e0799017a7a5d45b1c1e5bf015c3ebf

    SHA512

    b50354155773cfa6a6e8cc29401306df0ed228fb7b80a925cfc85a6ff72485356ced77d083a349a53edad907a374057cdec7b0234d6ddcbc6bc07039f095998d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8bdb886b003a4c3e18c8a23b22e51c06

    SHA1

    4e6843131144918d66527afb56758b98e37e49bd

    SHA256

    8da0404b6e08b98bd825965dc00c35564137c064d09eee4faf55343a42e04f78

    SHA512

    c296beea0821696f6f28d343d99859e99cbabec78797c2e1f2fc0d1de4f39553e6abf96ba5bb593e62cd3bb8acea8402eb2dbf099ff4b8d53c9f8489ed8a7072

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d0649eb65515a7ffcaa7f2cca16392f

    SHA1

    1093ca0e180791ba056fd33b1bd9858ecbd7c6b4

    SHA256

    d602cd9ca248f7fbe8b6849651d48f2234fa816ad728b5e8a57be4ab9e5980ab

    SHA512

    f67992603da6874dcc0c27ea95b75e9701dab35ab1b3727b0559dc28899a2750bebdbac53726d2235c8f27216f48909ab5389d0b0680e769f53ea95f31821fda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    895d66d11b174dd70b78713b84043e31

    SHA1

    a6d17ade6b12ee93d96efbfc607974307ce34e16

    SHA256

    493f10650ee0d48f0001c567dd92cf3883083a0c08e5716d7564af11d8372adb

    SHA512

    cf88b0877a7d4650bdce6dc3b63f2dc53fd39abda471c6d9844419d187bef5686a4c12e659d9fe7346208be8e54c363eb12a5e7d5a7c0974ce3ee10c5c693dd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0fa6b74ed632ee0d5fd7bc4d3c63097

    SHA1

    52bcb0708aa43b0868e03744b509a0edac93b006

    SHA256

    a6900a0bd1baabdbc3b003b3bd82b2d62351118ff4ec222e09ca66c813ba1aaa

    SHA512

    549a128fb110fe968bc7b4b25cc1d523e122d87a0dacb0b2d237d21197731d0c4b6d7dc33941916d7ca75ca45d5436c08ce602c27d004d6720d5a3d80da45d45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fff07f4fe4823d579c95b733cac06119

    SHA1

    e952a293e481f6908581713cdb15a0f9ad3e18c1

    SHA256

    838f903182d2b9054c9dacd220f9bc58c3b4ed29b4e9da8b360006f27f95358c

    SHA512

    716e982d012054dc5dec3349bc3fb91fdfeaf5e3d17981e7f9fbadb82e291345b6038effeded1433168b98c9f0434e6a48272e7d429b77d5627fe7a5a8ff35aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    628e72a85d952dfdd3e41bd8db6bdd50

    SHA1

    f2da510e135cc18c82a36f35eb81861214c8a4ad

    SHA256

    27247718a9155dcf1a2249da5b076eff7e8bca10499eeb130d6172d4e8de2770

    SHA512

    7d21e50d6588c3b03262794ed6836a5a183841ed2965d81fb20d9930b6094142d990ffa56bb16f3f7bb8cabd80cbd2a123f65f2cd3100564b1cc6d440d8b1a8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\TarE0A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a