Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 15:07

General

  • Target

    2a8b08ed96f3624e2e267c8d571e19d1_JaffaCakes118.html

  • Size

    23KB

  • MD5

    2a8b08ed96f3624e2e267c8d571e19d1

  • SHA1

    a697da6ad7972ccb4af30ed68ee8acc5338e6f59

  • SHA256

    7d5ed49310536d27b811c3e2351f9de9db2eac888f4c37ef8c0eefb39345d805

  • SHA512

    12f6527a533a2431d1f8392549e84365bde9756f41b0c03b8ed9c4c13252706b94b66de250835a2d522a95b9d4ccdef266995b4396151fc95a4413c6be1bd680

  • SSDEEP

    192:uWvQb5nT+nQjxn5Q/inQieRNn2vwnQOkEnt6QnQTbnJnQLCnQtFwMBxqnYnQ7tno:OQ/YvSbT

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2a8b08ed96f3624e2e267c8d571e19d1_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3048
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3048 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1984

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcb03c17103c34c7e49ece9d55f53bd5

    SHA1

    36790878a3716f299be98889b2d8500df2f1ff21

    SHA256

    c995f062ee4d8592f41c7c77673d862666b77253c209551246f38c51bc17f74c

    SHA512

    8a06ee3953f7ad1835c01de5ae251a2c4362eec6125f6e59a33122e066a50e704b7b87ed34bde23c447254391696ac5617388c39ec42371890a105bc4d87691b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf93a24ed92545bb9d50c088c2402cc5

    SHA1

    422ffd4bbc75b8a20d539cd95811fcce49b13a6d

    SHA256

    fcd08e8718e356a34336249eff40839d2e65bd53d6f4bd7d5fdc0535c1c9fd22

    SHA512

    20d8dc0b434b76d113271eb70fe05eea63350e332538ba2a11a3c42ef611999089b67b58e76b47ec375efd2aa6210474536951db8ab5a1a7bf8d6f839583610a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9894123108543ac55ad3a046f66b4ac2

    SHA1

    6afda20bb8688dd82fe85945683f2d66d9d49028

    SHA256

    d6c4164a7f9fab55f4f2b3e9afbea32acd2e5a628625f3322f77c52c31f2323e

    SHA512

    351f2d5c63c76484485f9c5fd6e6830daaa5f2cf263fded54ade31b0f6588dd8a262dd7238b6d3ab6b45c170d463d801bb304d9340a6fcb34cfb061e1a4b4d62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1cd11c226c817c3fec747f5dac4ae27

    SHA1

    112ec6ccdd53f014f4ebc3c9724c5cc0391b348f

    SHA256

    63165ef5f488f171a72c1746cd2f32b5785ce4d919e45b73324ddf74fa42e08c

    SHA512

    a8de565aeeaa88f844477509544422fbc1339a4ef5db3a58c810d70d7ea983611ecc01517eaa6e055c2f549f5ae4a4b50e6bdebdf336d07f86c740ac4c9f2110

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fbbc6d88b023c84c5323c7e4a6839270

    SHA1

    82b40d4399c48ad8a5e7fe5ee126b88af51337a8

    SHA256

    f97b606b1bf8d937f9b6450eb8f672b5fbe035864926a9d7ca7d4ea508464675

    SHA512

    3a1771c2cb41eea95134d13d13a9a39eab2f6c33b1b6ae6bc75ec3e021b6865bd712fa3a35e3027cff836f6477aaec43472fec1d3591d24c6e48a610c8730f45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39b4d80ea669af140783259cd5343962

    SHA1

    38328389d64de0d6f2e897f71b935bb2f643583f

    SHA256

    433b8be352c1b689f380b8780c255db26f16ffdb99561d63edc0ca396fc3fac1

    SHA512

    a4cb7cf3f1f61b48a2250e40c877dbd172f4398c7134915b51a1ec52abafbbe7e761053a0c3a3656cf3873aaff2876fa32440d5a1b55bda4b6a667203e269981

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9bd91b5fab4e788aa5d8544115d152f

    SHA1

    fde890d925aa68405a8284433b3edf55b3c6bfb3

    SHA256

    40b561cda42151ec17b8a22e54973c93050037c24ea4cb9822698d2ac8d147a5

    SHA512

    d7761cd98e48f67bfac67b41e449c638fb80dfa5139cf2b41e1506b74e959cda05bdabe683430ebdc151c4acee2f33a50aaf33baaf0b54af31afd8cb9cf19c1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d4be695b5de332769e4525e8dfd6ec9

    SHA1

    78687cf37c1011c568ce42a677cadbc5b2846380

    SHA256

    468d7bdbf57a94ede7bf2128d5bcfebf34068b3dadd09759edf517523538fd94

    SHA512

    d278e293107a3e161c071f6635b5b1ab22d8c7c84ab94f69e5fa3699361159065c1709ccb5455f89d989668121278fecdd1af32c41da3c49a25b80568068d7e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d85e7c3f41e1f1056f57d6dde657871

    SHA1

    c7bc6754f0ae5399ea3d1897f0e7d02c4f4d9a2a

    SHA256

    7339dfc95059791a6a7e0bc19e7b683a7d3b3ea4b3af7144510fb790fbfc31fb

    SHA512

    44427d3d65e5fe8803763fa15023c998127df862867ecaf1e18c5ce0650bff897916cefce454fb5aad7124c635b1125ff71b24d6d99a4ed29010ff9ea8e128bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d081b094a0c98d382ce447299caca7f

    SHA1

    5046c7550101537e0148856d67492677cb5ab58d

    SHA256

    1398903c8d7a46b8dea3fa9dccd17e7e7f7f6985c47d101d8a3bee2361b86a3e

    SHA512

    18f921b612f6df89eff01505d0471814cea8001629da66f1ada86c10d632bb68ef70ae15c67cd277e6ce231feffaed9b44e66c170fddb7f009b2490d4ece91d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c501a9f4e282a54a4075bc27c7c0019

    SHA1

    784bb47835e752f1901a13df6c5739eea734d8c9

    SHA256

    924418485305995bf55657bb5d5ad2ed60799de1c17257a2ccc73689075c3c3d

    SHA512

    6a479bb21e92a335ac8d11b9e5ea6a26392dc9488536c7f0d4fedbc1abf24c42b0dcf21b9ee282b8bfa356117728c7dfd7619e9e415da2401c2a258884b17ab8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb84c614aaccfcd6a74f08042566c6d7

    SHA1

    13334ce53d0fd4694ee87cc8da71e104178e3c4c

    SHA256

    f8cb10fe4451c87401034d96fab81056463504dec8b9bf5bd6b7134d20fa6163

    SHA512

    47e35d38ef17ce12b84aac9711bf5530b8baccfc47fcf250547bdd7b876793fbbb76858d0526c17bbc63aeba526689915330f50223667f21cf8a05123c963f19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3bfe80bdae6f75450169cf236543026

    SHA1

    4ec0ca314d280f566b9aea76768b1a1911d081f6

    SHA256

    86d708919d4d682abbd582cc5d1eb41e6a703828fb99e3a5b2be2460c0336c8b

    SHA512

    4c932a1466945dc41439dbf0025387f6aa0d28abd13996670435e587c6c4c3331caea0060e4840b4b81da63fe9aa4a5dc9176aed8ce7cd8c4de0f90f0e0b3dde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8947390ed17192fe1edf827ee769da4

    SHA1

    69c3fcc084ec66d465e2ce48a7a568d3cca290e2

    SHA256

    f9a0f236a5847fae01d3f7ac1b0e7a234f6ed83681789ac379ebff56282aa347

    SHA512

    be44cd6f7fae1bfaf934879bc6a47f30a1f427d5e03da8c60d926490955a6d0298a88e438c0bdf688d769c814891859e99e68d0607b9f451f86ea371460633ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21704cbcb8a602e736ca43166727e78c

    SHA1

    f9b9ac2a542214809f2207560831084f2953695c

    SHA256

    1939bf3ab8fa45a70d5dfefadc882e5cb09a69bd7c2b25d728157685abfec2bb

    SHA512

    7f195a2df65cf051642bab3de21d1fa062ac7e182286441057e4743645d88a47ea7e753c9ed6cc0912ecc7144d693a99556fc43a1e8325b49a36a4e8701375c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ff25ee5db7043233c0eedf5106fcf24

    SHA1

    deb8ef2c5a347e1c3f5a6c43ba70cdc83df27fcf

    SHA256

    279ad3e5075861be5bf3617792a71e10d6c3f4271f19fbcaf4d6506270d974eb

    SHA512

    6c6e9655c56baa5b38380e51123a98e9c03c6f135762be37a9878b304939abf0acab8f01970733761ea41a4bedad94948ecaa9063cdfe78031cb5a92ed20aa0f

  • C:\Users\Admin\AppData\Local\Temp\Cab3545.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3628.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a