Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/05/2024, 22:25

General

  • Target

    36dc85452ffc3e00edd4fa84f48c3c61_JaffaCakes118.html

  • Size

    461KB

  • MD5

    36dc85452ffc3e00edd4fa84f48c3c61

  • SHA1

    7210306586b47fa434e00dd0f79187d4f0b64769

  • SHA256

    efb9c5379f4411ecbd0afbea7cbebbd2437214ae879734b5be709943c1da1e66

  • SHA512

    71993ef843ae3cc51f18ac98b238229adf7e4b0e00213a8b0b7921083b23c3228f9a1ec4fb91509881d1e5302bf445f9291020167abcc7cb1df1fe038abdbd65

  • SSDEEP

    6144:SdsMYod+X3oI+YasMYod+X3oI+YKYsMYod+X3oI+YLsMYod+X3oI+YQ:o5d+X3S5d+X3f5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\36dc85452ffc3e00edd4fa84f48c3c61_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2420
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2420 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3060

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b24e624fee668eb5f3729bf68dc6885f

    SHA1

    fcaba06afa7f1c3869f56f58424c964d2d515142

    SHA256

    3304101eb320f34c705cd41cf3df5e1bb9f468808f9f7205becb75696e935de5

    SHA512

    c6ea933efbecaa6a5e9566e5b12752a5b5e0ea10ca20af9e4c1ddeb1ca3253f80aa07f8a6b08c1fd8dcfedfb2fbbdfbfa416f9a7224517cbe7e5e738149e236c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b94661f30c4b31e460409ef78f37f0a3

    SHA1

    4856f51b7c09df9ed0abed0a07b4f45676ae2cb7

    SHA256

    116a58b6dbc0054d82cf680051dc6909a912d03bfccf3c00d423ea3ae5aefb52

    SHA512

    0442ee7d9264dfae7c95f0675ce8f3a9d48716cedaa43f87e7d1fb6ed5552002409eaa6313cb23fd78785e5e41de1b38314ee9ebabb626673cf088489cabbe8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3913c00f7640d9a23328bb2668dab5b

    SHA1

    5f40a15eda9411a33a58a456a48e6f70fda34292

    SHA256

    3f47db9a89dd482fa791fb22d14720297319164b1114cfe5904983fc878604e9

    SHA512

    b694199488a2305c9cab833e9c84b8c045bc67847cc323bd027f431a7d6e9285b5ea2324bf0e847f3ffc8307444e8c332414576d7efb65e02a46d3a76549e416

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c828c26504894b1946f4f13af77cdee0

    SHA1

    9ea3a134ba7d51350ce6ea58bfca24ec91799437

    SHA256

    e3e334b72e93c8ddc15155daba0bea7f4828c789dda0be7ae338e88dbe7f979f

    SHA512

    2a2cd799103bb1fd0ae0c638ba89125c92a170e2b74a1eb6a7fb44eeccbc70b6002ccd60b315704c8d7b641bb47ed1d757951e2102d810587af4b878b04b596e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a32e7a87a646a4b4cddc9ff39cf2bbea

    SHA1

    c4f28ad1cc1af6cba98e02f8c1512995145c41f3

    SHA256

    a8325741e6593921fd7ec2485de51be30b22437e6993c196fc2395c00c142cf9

    SHA512

    3fafac30fb220379285374eb2bea13e1a0be3bb426a5ec67430b20116ffc931d9a63582305bf9a5c26b13f5cef7198516a8209591b404ab402ad043a6aa7ac30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24cd31f34ceaca6efc29498ae20a6f78

    SHA1

    09e758a35c0e0098a7c1abf9414487471a427ff4

    SHA256

    969aa884b5072e35dc9ad2d197b07c4e2b576a6479b95a3f27760b4532c0d8e3

    SHA512

    1c7c9d3aa83e296004a461e2a3398194bfaf2e3db89b2ee2399cffcd677f6a8bc9e618a2ebeb662ff0591eb867ad3c88521c5954491db75cc676e0a0724cf2e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4181deee068065450e35180feedb7902

    SHA1

    23b893595621e949b1f7ec253e4d6f3f36b50e8f

    SHA256

    8798ffdcf9e70f07ffe493293ce61bb31dcad523be977daf3bbacb0848fb1b70

    SHA512

    01bca3155774f4fab505677ea31130fc5fa2495f5936f6d1a53bf03131d4833d90bd14380f2b41708e7da1c5c55ff078d89b4d3da2eb5842163d7aca5b8d4606

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b33c7c601b25e7231b58fc74861b6d5

    SHA1

    c961f094992d9b6139c31e71d326283859997e73

    SHA256

    ffc835530e5b03055a0f51e62ecd15bdfcd3b8fe95e5f70502915db3c6cd01d5

    SHA512

    25afc75c5778de91c984d12667244ce533cfd58a3cb40f6191a4520b8d48953184027e1020c34389dd575ae09a7c0a0741de3314180c75ceb7ba40f27a5c6ea5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a61441015501a681126e751b7ea93450

    SHA1

    b7ed29ace8b4acfd3e55af40f538011d92a8d31b

    SHA256

    ed645cf3cd6928651c199c621cc25c849558a4c4ee83f0d74f1960ab34935d57

    SHA512

    dfba066e6a9a20ce7f1675022de8a4a59583d35f50c85e5c06572fd3e02828b696f9fbeb4023eb16881d81ee3ed40753d260bfacf80d9ee3285f9f149c661aa6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d178bc558c6df40cec86d79b37521c43

    SHA1

    f3676d089544a35a81dba09289fe58878a07522d

    SHA256

    c18f4ceb3f49e5063d2f2300d85f324f163327403bd4a82c25b0e4daf8384cf1

    SHA512

    17540e0cbaf2447ff451a088054dd6f76b04096db4bf0b0062e1db283ddbdbdf9229bad8e36a12449b449e4f15e30c082084c04ee408c955bf8606e470660ceb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c378ae1ba8cfbf6ee6952dfddef7b8c

    SHA1

    99c361aa6ce0bcad12671395b669d0ea2d82b2e9

    SHA256

    e4b89e8d4df64621d81cc55f14a291e567f9cafa7d5dffd232cb431d2edba1ae

    SHA512

    0bc6c26307508fbd00d30b40ea51aa64cabc6311bc53b583835a1b30f2a406fabda9807ff0fbad69fa4fbeab67840d0a2ac5de5eca925a1f8133883bb06f1153

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1cb0a5f9b093c208095d6755a68fe1ae

    SHA1

    938c7b71e4d570ccd8965d7eb4779c49fdb8ee66

    SHA256

    cabe31a1c122b3a63c88336d38351fe387fec7b1cd30a0c2711b826012f5f658

    SHA512

    2f67d42446670ce29f8fb1e26d72ffcb30c32266c00cb6ff95ca6cdad5ed8ed8a7c225f63e189d41f751e0d78c1304db8db51dc08af1640f843a0371631d9393

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8bc5b9da91802b150493851639355b3b

    SHA1

    1bcf4ed20ae6d8a2d4a7af428602d720fc8248c6

    SHA256

    466339f6a711df7b667e3f6ad930eb8e29e6cc19ca8a1dc4200ed41cc3f7d98e

    SHA512

    564f682514ad1f1cac30043d9e38d48b9a86a0971e0c6084fa75be4dd6f02c329b04f2685d3722abaed31b11d95bd57f8322a0ff76471ec774d163e7d6d34b4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e4985c069f5b7734d74d934ab42bd89

    SHA1

    06028583b5ab68700941244c89fc2de3e1146811

    SHA256

    4effbe668f546b284caa854752f4f4bacb7defb209b311e3196ad3968b7e5a0f

    SHA512

    d405366786b06dff4ef4ad1fceafaeea2f6705a248c0f163586ebdb20c3317a7a5f9acd81f6852763638e8b937705660abad210976972fcbbba0ebb60ed24910

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    240558ea27c8d93f436c23931744319d

    SHA1

    3c9808f166b57d3b603823bca3afcc322fd4d3e6

    SHA256

    0ec42570c120892374c63edbff6161f4a4cef005208b9eb828819cfaefe572cf

    SHA512

    c1d879d06b7e5548f969ce9981dd638fca6f19912f9c589a45e479e623ae294011ae45c53c77bb93928bd4f994e6fc161f36bb4c97aa862a8141ee34903a8847

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42d83d70bd44220124889745f6b43778

    SHA1

    e644f89ab78cbe87d93474fc5000104a0919fa76

    SHA256

    e547cc02f9ae6253f4fc62d65fe9eeb7ad71f2e85b493d1946f428503148c5e6

    SHA512

    d929983ec66df5d00b03dc522e12e716e75c9d97e0ca7f9ef6cb7b277491add80b4bb24352adce4e6c7acfe77504dd5cb3470a1918de5f8e928a3d4d4c0f354a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83b5d08de829f09328e6c69f164df35a

    SHA1

    f0c48ff74248661e97411e075da715442a938d22

    SHA256

    df48aa1698799ceda1da878fa2cf7a8f7cd7f4d982878b613ea679331c2d1119

    SHA512

    06c30f1e320bd532a848b31e5f226c36192820aed72483d494e800fca7c0b2c95faa37580ebb520ffc0a5ceaaf93aeaaecaae5dcff2b3f10abc87acddce2beaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f565821e1adbb4089625afa24515b7a

    SHA1

    9ac8a00a89578d5a9ef5bbabddd7930e00805df7

    SHA256

    af3417c18053ca0d62ef1acd6ce2cdc6b546eaabeb6ed011d39cd12a99b48e75

    SHA512

    976ed5467d3da02e81f4a2ada6fea3cbde46d7968864db2d5b5fd86a00c03ff4c9e92cc6ad38418dd21154e394ee450b37088e34e0acf06e349be2e97d1f14d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6bf305b59b3d36cd973936f3e2733d60

    SHA1

    5f6ab43b6c5575e058a785c7e4e356fdd5022f50

    SHA256

    ae92f9ad495aa953e478a1f6641b896715cd0e528bceaa69962a26e3606e9bb7

    SHA512

    f3badfa22373cd0c3d726988b8e97b1786e836ba0a446fbb07314b08556147ca39510a12bfb32262b9c0f479ebad6b8e1ee733c0d915cecd9c3aee8058eeefe1

  • C:\Users\Admin\AppData\Local\Temp\Cab455D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar462E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a