Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 01:49

General

  • Target

    2cc1c3a9be5ef4be2a04c4c33704c0de_JaffaCakes118.html

  • Size

    75KB

  • MD5

    2cc1c3a9be5ef4be2a04c4c33704c0de

  • SHA1

    3fff9ae3539277191953f74271879dd23fa4366a

  • SHA256

    8c59d7fd287873575d17436472c948905657e2c59a5cc9b0a5474fcde56c6445

  • SHA512

    ec9f68fb2977df8a3e46ee118b9533b58dfd2ca872265df7274e9eba4ebb93a37a49392805c982a18273d2e8bede88ccaf844372354f1dda5d019378a8508a3a

  • SSDEEP

    1536:JubYh5uV6QfR6I+v/TzNen0tbrga94hcuNnQC:JGYh5ukQfQI+v/TzNUq4hcuZX

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2cc1c3a9be5ef4be2a04c4c33704c0de_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2008
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2008 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2236

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f13ca791c7d579a1b1c4ea4dd037a46

    SHA1

    f566ff140a9abb0a2b0f57ccc3b1e5869d732050

    SHA256

    aad46fe321b4aebfdcabcb3fc6c4a790b3e23b26fc23177b48c4fc8896f32a0f

    SHA512

    9ad95a4588750f6600de76162c68c212fd5766672d83abea93928c35e2e45f839e0f89a15851d0d712fcc7fd263793250254f1b051010f495ca40dc5889897bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b43ba980637c6d8112d18b2a8d24c9dc

    SHA1

    4e214cb410199bac2d89d332c069434d7194f553

    SHA256

    879ce18efb087c662fa0de665f1feebdaf9e1eeddfddd20075cb3830acd45269

    SHA512

    ad08c3db6e64e8a351495280d995fb124b0b202d0ec45d8eacab3059d9c3b114e27b96ca669de2017c64566d2bdc344fb9e9a513e2beb9d6a9215114dcf2ff44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a15ca43ba5b3c26dc51bee86d7b3e417

    SHA1

    f98882bdf85e4d312e7b04cd0372f587eab39c67

    SHA256

    da3963429a0042cd17c5744cd877ad85ce8ec644875fd0b002c2260bbd522e5f

    SHA512

    5b41d9642dbe954f5e30ee8bd9b6aa20f41eb5dc68b7477efc60b8d769aab80a1009d998e6a6a94783593e419e833b23fc63c8ffc3fc8b2bcb150e53925ae345

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3516fbfeb9f1b1e288ad8f9cce58ba9

    SHA1

    1447d1c41858a41869d580479dbd81af00a10f6a

    SHA256

    8c07ccb0e776b6b3aad41c1ab4f9d712e48038b09545fa4db64a3e159b965e0f

    SHA512

    94ef7595d1465121128754430388736764847d354044beb94429024d834492c592b8f569d7e9c9ab111641edb0777156188b616c2fda8047948532be4e53217d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    402d9a1c135a84c5c0c3dd499739de96

    SHA1

    8850d14f07b64bc78f627f0c8e1128c3fe650e70

    SHA256

    9b137bc3e5519f30219c63ce6d99a51461ee9397e9c959b52c55d90f6885e386

    SHA512

    adbd1bdeb71dbd0b76f760513c2da0781a3a432e37db16362a39eaa31fd6f9e00c8e8dd5675fffcdaeb001dd9b8d3b74a6bb80fa8ead10938e5a2c949f63d81d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2ba7e808800e9f60fa89ec07935bb99

    SHA1

    4b22df947e617878b28e21e70527859fe8f9b608

    SHA256

    f9025814bcffb6a38e473d6603557ad720f1db12dcc48dfe3b5fcc76d4353498

    SHA512

    1cf8a1fad7553f3984b5b4cf657754bd0d31e26a45deb5d8c52e18e0a1b23459854d5c7b649ad2acdc8cca9cda5767b96ae55435ccc2c2bb72a0da4ea045c8f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    faace738a2b1701249e72fbb3ab032d2

    SHA1

    b5efe3fc9372e89f7cc22f007d76367e6574ec74

    SHA256

    4f21a393a13536a2ac666395761a857046ce33075bfe5f4065051d8e732807d4

    SHA512

    d6d6a2ae257b6d200c7ea8ea06920f3ab6ae0c9097c59a5d23325e22b69f25314c85b6cffb6320f73d8544c0bcadeaa9034063e417dc694834128c6498c57740

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41f7f0c17091f56cd71c67399d2517f0

    SHA1

    3b2674adb0784b2f9f2cbee539c167374d7acc6f

    SHA256

    ca32364e4eced11db627c91445edfb4461f4d708f9827b5cae9e6bb39039bcb6

    SHA512

    58272feb236875de20b6e549991207878fed874c360698ae0a3bd195a27f359cdf5a4816d48cd8dc060363ddb32770d2f0b6edf32f06f48f638f7ac2602d5675

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b2a06061c2830e465e30bec2b40b9a0

    SHA1

    757edc357fabfc2a1b8fea23d0a7a0f95c71455e

    SHA256

    5e3d1aa160bcd439cc14660c6272e64711fad59601ef37bfc3fbda006f65bb4d

    SHA512

    684ff1547539d2246ec17f0c30d6d8def0023444f234b662802e58fb18530b3200c2a8d59eccad157d30338eb588b8a671a32ad6bce6075374c6305c5bbd3139

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6adef9d3e51d0fee12324b2ec8fcb7a7

    SHA1

    3dd5fbd1f517e7857bbf5df6af043831c4c620b8

    SHA256

    cd5261aff9ad679a969d0485d44a2de6e4ef58d8dd29bc2fe21b26f512f9e4b6

    SHA512

    cc5e0796d3f1761c3985d14c2deb126393557c9ff7a8c986dc449905d3bf7a703158e7f5f5fd4dc80731ad87209dfd1aa2eba3e6219b4ddcbf7d66b475963b19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97a6a8477ebb6990288cbc3666586058

    SHA1

    8cc254d94f8574cb248192f6279131308ec55344

    SHA256

    63ab27c94998d9e322206c95fc1b5c49b826a87bca25e902e73da216d1b54364

    SHA512

    9fb4d588f1891d6f85c6cb65f7457caa7493c4a12c7391da8d1ecaa24e196b034d1587c4013c8c5fe01574c742bc5d57c6c2532162bb4fe4417bc373d29f5744

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    22bffb18845390555f1c47ecceec57e7

    SHA1

    a1d230bcd966f4ebb0de98cc224dc310d728fc02

    SHA256

    e96b044f07c8d071409b1b7347ff1e17469b3ab8ec1618ba89b5df4aa67988af

    SHA512

    16e3f85099812403e49fdffd9b9c31745acd6cef60419550bf55a0be8e6df636a9a9460c30e90bd4b90b380ff5c346450b43e2803b74c39b2ae034f649ad9140

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    142ccd2d22b6471165d8ac88e4b6ae0c

    SHA1

    48d1caddf4f39f06b31b63b541386db89c38ddc2

    SHA256

    e35f134fd05a262abbcc97eb62927b11bf3a4014cff910aead791646e84c4d09

    SHA512

    fcd45413d127b89fe5ca68f0c134dc8b3e93890c1878f5328fbbdfc203005b82adc9ee42eb0fa6de9b8137334c79b969a321d766cb9c9f383aa248c656a91996

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f427b803e68449809bdc7843321dd83

    SHA1

    d041b37a5c521fac25218dd4fc7740833ee0f1fb

    SHA256

    3d06d98826e126741f1e548886823d982ac54a4bc0ae3a58c596633b0ffb2052

    SHA512

    9c433041738879ab272ccfb6cff79b6e0dfb46d9e8473f29a6b25eea3a84b58d634e80b8378d3b814fb687ede68265d38c7af6171f9986b513ec9888c87fa4f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    080e2e4836cd8202822bb5b448641c41

    SHA1

    1ebdd2673328d4095c0e08ffd7bdef0743af465d

    SHA256

    0df1329f861ab95824e3b165729a69143c1917991a9759da2a29f58cd3561734

    SHA512

    84f3f025f638acc605d7d0b7e5f750a6f936d0b3f8b4aeaf427690c26d7ea34cb61eff51257f6bf74f0cc7d6eb299a6ad5d2714943fea5aa359923844ba64488

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e249d8047d73f8c08e3b8bed54ff28a

    SHA1

    9b50f72070f512f3aea78cd22d346249c45e3eb1

    SHA256

    3e8583bf19118e26c489c2353f3e44cbe56f3452b935b5cb819c0b9e09bacab4

    SHA512

    e71afec2dc5963d25544f342e750562b210f89e391f5ead93147e4d2ba65bc01b127a73413dbdbabcee028d4a5443ff4703340e54099fe9834939b4ec492ea96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c90770f8444883485c50f145bd522da5

    SHA1

    fdfce690ccf038d381e7d3b3e8e94b25e6b6a4b2

    SHA256

    4ed33126329aea405bb8607e4ab8e62054c284cb52dcfaa272033e9c25f218cc

    SHA512

    37251877802557d87da178d2feefab01334ca0e562d0e806c0e4ed44802150af0bda7851d801af43af25b813dd359ef3e00c01fb854bce3ffe8086f57d6ef81d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df7cb98eae59d3724264c6b7fbc81d00

    SHA1

    1e455f91a02e4a25e2957b0e7ad38b2a5097b409

    SHA256

    6308d6f54c70af789aed8600e7c836601050544b27f3c106f47998f49ba5a7f8

    SHA512

    7e002adc88c378800a465b4b11863c91c894e17934a10e67c453357ff82d62dac59fe5e2c2cc80f2a613f3b16f96fe8c1b8cc2ff46108f01e191a7ba5acfdbc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb34b231468838e5d2fc53ec1a0bcd28

    SHA1

    063eb3224fc7fa4f93f3ada3b073de07941e06f2

    SHA256

    730ce95d0a85afdc11c0185967da403dd080f9cb46f54ef7f5584708540f7f01

    SHA512

    afc8ad3c5635e2f41e848a9f3135359d16939bb4731bca07e41b06e014cec2afd82907cbce3e21eee5cfdc5e516e275fe2307c1804e55e0823924638a150fe68

  • C:\Users\Admin\AppData\Local\Temp\CabC6AC.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarC80A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a