Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 04:06

General

  • Target

    382ad285e26e641f9a553a3351cd72e0_JaffaCakes118.html

  • Size

    460KB

  • MD5

    382ad285e26e641f9a553a3351cd72e0

  • SHA1

    707edbd87f43559090b4e69a72679c076b531259

  • SHA256

    52337f960b81618483fe8b77acb99d37d56e7ece30edad90c08dd32a17ccdfd4

  • SHA512

    807d3b3056fe674eda6d00df33d8609d18e609fabe07aab64ba4c6da792bb57e32392ff87382ba5111a48a421561729d72d645db9bb820a9d4f85b21b7e27d44

  • SSDEEP

    6144:S2sMYod+X3oI+YksMYod+X3oI+YQsMYod+X3oI+YLsMYod+X3oI+YQ:B5d+X385d+X3A5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\382ad285e26e641f9a553a3351cd72e0_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:492
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:492 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2856

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    237a6c957d4401938dcd47b8431db55d

    SHA1

    0df905084d664ce6a3ca8f88fff07f5eb1e64078

    SHA256

    d5f3b924558e18d82ad00e3dfedc39534a33c6f856bc6b0273ef65ba72cb02c8

    SHA512

    c559b5e49e31a12026cbeb329d6b44b272691b9138532f50c0a6b4b97a468174442ac38efc654911e9488a8b07460f612c946c1890f83f7f6e861db08605368d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7995d8904f9e2e8619090c4db79bcba7

    SHA1

    94de85b75a5067f6374eeb66949b3a724cb5c793

    SHA256

    9fbf173b61a38308e6a60dea54288f970241560183ab72bce6f75f5d751ce45e

    SHA512

    5c1c3d0567ed5abdcb9f7d4a64a116bd704c604548a7a0432a06820f0b2e9ea809e36f2f324479424c71aae46c62c9d14acfc0fb7de785e23e4486201514be87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc97e9bad828890610eb3ebd3d4b8d58

    SHA1

    a325ce2ba87ca8b0553b315032643058c85feca2

    SHA256

    16c1179ba7c26efd9c6559a2c5e0ebbe7709c74b89b5d7cc4b23ff8f4725acc5

    SHA512

    05956a07d7c97bba3dfc12a97415dd1a8aff5ef32c731f288a78b52e17dcdb38e1cea9ad4f788d6e1d893e83c3b1a1af006a8f2d52abc61e5ab70ecda61e7987

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a2926a0d33508e29fe6fa883ba5fe45

    SHA1

    62a411473de2ea7bda9c9c9dff04bd7971b9901a

    SHA256

    877e43090297b8260c6d0813a0ace695d57fc872da095ca0b5424444315e70f8

    SHA512

    0bee6b1d77ad6cc09e07bc29b9ecbc1d13488d07792c62ac75442fa151ee9725bcc9ff8982f6d4c0e21a63f13989d531b6d53f9056ce98c92afb06333d3b91a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17535c5abc9d2879b38216b9fcf25a9e

    SHA1

    616c8a34b46d030ab5b8a6456aa7b9c1dc4d3c8d

    SHA256

    357fa3eab281e74af1ac23bd5bd25a6559f1f594588cc93d848a42d4a2d8b824

    SHA512

    1844ed846165222a5d714400249a58ff4161f3f17adb727be92b55bee860b3974e98b7661ce7d6c74c25a8f191c78aa229e28dcb8d2c9619bb5d1301e1bbd8d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10233563ce7fec6e4946af956e199a93

    SHA1

    50e20b44cc01245e1505fd8bab3867040b659ef2

    SHA256

    6fbfc75e6cd9f0803eb8bd87d9ccf088fae1c982117f7c1e0cdd816bd96f1ff4

    SHA512

    03fc3c91254c89f63a0ddac4cd2ac699e0a47ab5746a299122487e8918fc18674527f821c930837546bcc5e01422035ea3dbb794f09c5777e1b2bc2e002d964c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fde926919ff16825ddf1e3f970813168

    SHA1

    d31321aa20395e41184f72408e22ab004f5119be

    SHA256

    cbbe3e5086fa8310ee7418595dd3ae214160a6e7d2d43a86111288e691a4106d

    SHA512

    d6cdd16748190f0037d12c1f53496511a5e0286ba97daa4f419068aa686aaa88dcf3437808561749793b6f04e204864d33712ee11da487ca3171b8463a99194d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f534045e9460422abff5a2e441b051c

    SHA1

    f8bf4836946837417b621bea571ad002aa9f62bf

    SHA256

    ba40a0f0a65d9760d4af65887f39bce0addb78b5e15f070d69ac0b01bdbb5535

    SHA512

    7ebc388c161fb53680c0ab9fe186a307eec83f09fbaff1ca00cd99f0e3606af07d73734f32a7b855bcb76a2f42e37e685f68ebb6f6c7d1ef6c35200c2b1a5504

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    005cfbf8e24bde7b3c0ad725aa56fcc4

    SHA1

    983006823389fe4b212f8045d88ade6ed1823710

    SHA256

    6863e55216341c41949098c35fbec085c95cef3b0e291da21cd168ec2b271747

    SHA512

    59b7f77240b2dec8d3d7f1d053713b654bcc9789b7f1c9f939ead18ce211c6e18ac8532e54e793ffec1f0c73cb37f70c27ddb523427116e4a83d48cb0d35a6ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4bdb17a771b796453ba721bf0e8bec5

    SHA1

    2d4918215975158046a093f9ba120ae755988824

    SHA256

    f7ef3370a8c3932a75ba1f7ceeea831d4ecf9be9ab175702ed3a60116a07b3b6

    SHA512

    817ef08115b13747d8184aaeaae71fb53d599236f26e2030cba9929402579b9eb1634e9eb0673a25fb798e00dc8721e352cb3bb35ce9a4d24d6902d707e7125a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b5d1a0788ab48773191d4eb9cbf4636

    SHA1

    096c88cb6b1e874c3840d4ebce68239fb0f731c7

    SHA256

    7d746c0855889bce9fa73e2e9f45e8868f91be09cbec181bfd18c53ddae6e0db

    SHA512

    81c543aa2df49d6df50ea7faa8682b79bf8d68551fa0415ae758ff32742fd600bbaf1c7f0c110ffb468cae7809e0eddea38d44d31c53f72dea8419ae07c3b68e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb6e0a4c1cd7e019e7d481ec6a2f6dca

    SHA1

    30066dd7c5d150660d18625adc6bd630fe69983f

    SHA256

    aa507102059665d472df1050fcaf3c9221d2b052a0d500e569c137b710474636

    SHA512

    920bd54898bb1d625c964f340bf043ab73464f0c1791f5f41c4c24b5d7d99a1ce93f3be663467708a2ca6dd240a0f30cfda38237960263b8ca3b7a3d91f59a81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6a224ad76dc19d035f2004d5d48b348

    SHA1

    8b2db2225ff05a7f186628b6b8f8e4f705c60b58

    SHA256

    1d4a22b843fc2e0b500fa7b9469b4273754bd9a5e3ff7655abde6e067e39e83d

    SHA512

    ce9c5770fd770728d20db91389abaf187de55f5fde6ea4e062fb0007ed281421be662ea1befb86be22b8c64c66db1ce34d947233bbe655a1edfd09a39b0ba473

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23aa12ab88a8e448cc5678801085e4d1

    SHA1

    dd9eb785f00b3d02b101015ac0e807a9c9b62dbb

    SHA256

    6ef32b68d83e774b9ff76320e015ec197bbb3f8180fda58b39216c8a494b723f

    SHA512

    2bd6e78c364281ab7f8edc660301fd0f08a56fdb790e9fe85c974e353f79ff90d55f5c15f70ea4add465eecf692a2c2b9236a615e78d76e615210902c77db316

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f547f491893fd5cd58e757187a4d429f

    SHA1

    62d47d0a61d2ffe4b7c5f1336ae0d5892a65071b

    SHA256

    1236ac049ef1b8a70b9e562a667a1534f81876e6b25aab043123da184c46ac6d

    SHA512

    f9bcbd3ed04331758fb9c566d3991bc536bbe750e2870151844236a1eba1c0f1b83e5fff5cc924a7191f5c655ef86bc73e59c8e3b538e0fd1cc2514348574c7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a1adb739d7ad0f4562347c8eaa2d069

    SHA1

    437abc4196f429ef7ba193fe88e6c093ccba4370

    SHA256

    4acaf762ed0858d97c009f6d45be008db66755fa789fc6150c9ff2016ed7f17f

    SHA512

    93ff4d97b4d57126e73658f118c05e2ce032e8f754c341a289d6c87761a7a626911271391ee72411e393a16df95be2c1b87dd873264a19ae033e68882b9b626d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88ef74bdc378325850ad7ea8f2eae3c1

    SHA1

    b3f344d3220e7cf6c6c1a460fdf67983d0ebda4a

    SHA256

    79a816412a31cfc6b4c56907ccac9e207e04b895a0ecd0466aa730ab69a003c4

    SHA512

    c7f8c3a349fc9e4d836a160dda31eaa60927300edec19a657bdc0cf52619d0be95ca326b245c76811fad6a54588ea0afd45ad0df2734c152d65be37dd3b8ab04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    455517e769ec6db9d511c87da6e3db1a

    SHA1

    abd766a023dacaf1c5a4a30464424c7064dfd1de

    SHA256

    1f6ce30b9d07ae8aad81ea0fd6771b8858d22b2ef7e15c22854c1ca9d12308ce

    SHA512

    ff3d43671f2b8c4879e5ebc7889ff2ddb9cbccc70ba1683f094ebbb405124fb340763cfccc012ed6513750417e28a6424688a885904b6cc27c340a939ca8c7f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c47d67d1e84e7fdde0b6874a31e9467

    SHA1

    645ed3b0451fc6103ed46a6406d79db37bae76ba

    SHA256

    2426a49bfabdb8e8994163914f709f352b716845bb8a228826c8d533afd7c98b

    SHA512

    cc94aefe953266cc8207c8c1f5ccf44d4c19f7fe0c98f98e1a0b80475bfeb7d35e6e5e0e1e7409f644beddf5444ff790d011c34dd5f3659db38551a2d7ff30ee

  • C:\Users\Admin\AppData\Local\Temp\Cab46B4.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar4705.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a