Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 09:35

General

  • Target

    396f024df72d5d04c53a89f49a650afd_JaffaCakes118.html

  • Size

    13KB

  • MD5

    396f024df72d5d04c53a89f49a650afd

  • SHA1

    7d6f9109e6cf361bc847b5d328a48e61a1d0b323

  • SHA256

    1dab66a16b75bb0629a9fd2d81dd53c22a269a75b3e1edd4ff1b421fa2a083db

  • SHA512

    cff8bfa0ea84d0dad9aa04ddc86afe7fddf0baf9e1212a1459871ed227ac2e0740cf0c9a6440e3e19d98b7059efff61d6752c0079850005ba6dc852c37485b48

  • SSDEEP

    384:3HBXS6uiUo5fhxDM/jIBDk5dqB13dR3kGCOTZGQU:xCUH5fbDsjI3YOTZGQU

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\396f024df72d5d04c53a89f49a650afd_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2056
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2056 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2648

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b329f98fbcfb81cd8136cc51caa8f344

    SHA1

    26cb9fbdf167d5e3417b659951423d7fea59fa18

    SHA256

    006a8b1d8019afef14fa495515b41d93e6b6f840abc485b995f6b48b5dcdf1b7

    SHA512

    abc59ca5dda909ed9204b1e7268a8c36f6334867442a862de40067f8f0cd8339ee97c345d29baa63ba177dec95de1a7140dee6f958cec62975338bfe8aeaa746

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    613b6ee955fce2599ba3573c7013e445

    SHA1

    8233ec6b5c946bf6b77eccf10148b8aa9557bce8

    SHA256

    7e0179939235aa94ac462fe1221c94a423e3899a8e31f963f062adb98f638c63

    SHA512

    90a962a1a3bb39dff0e19dec9fd02e47f6e9847fc8cf6ee7461cbb36546931ab6b1bd397f75fdba5390170cea229289b7d84948196fd1c5a1a79f27c37d554f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    006768c942fd6889e19cdbb2c2e8fd28

    SHA1

    57ef1591c850a377b26acbbce7ec4824217de029

    SHA256

    4a45a61f34e471c6870a66e202cfe10e2881f4add05ded65866ad7fc5d3b4439

    SHA512

    8d322c1525ea8dab040aebefa9417b92d517f82e64990813ed15d5fa9bd54aa626e6c86ec13009e0d8b9a46fae5277378bb6552a6834d295c759c146ebd5f8cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    716dfa2385138e58a68c0a87a45f52ea

    SHA1

    a2b9ca1b5fd0331e3996977c00c27620521378ac

    SHA256

    33e60fc5644ee118b1af7001205e8c15268f5e4d1ba9254cb570d3e358bcb7d6

    SHA512

    83fcea9b8aacac5d99f6fb86adfaa07d0313f21bd8d5ce6ae17e3be4b73c503e6a33a9027018d14de4dbd13c691b4696f60e97e81b1c2dbfa3aeea05802b7a83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d70e3bd6710e7cf18548667ceb6cbb8

    SHA1

    54fc3a3f49d04626d0198bde3330fd9e783dc50d

    SHA256

    261b123106645bb5ab11582f55d9c60e85f6fa6ea045c2fc818ab88b844d9de8

    SHA512

    8458a8371f7dd28eef877f1c2ccea1f51f044802e6470b9a46cb18d3120866f7205b6d02ff773b4b0cd34e4be437a0d518183a83dfbc552be5601df17025e976

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd9fd93d96d31012b5aa918113807e89

    SHA1

    39fc2d728da4e6147983ac653fdf30ba8c25ade8

    SHA256

    9aeab6be12369dc6dd4162d1a7868fc4eaf053a0460d0ebfbf5108b932a9a6da

    SHA512

    e23f1768470cfc6e5ae40a0f36637144c651058beda03e12759e459794f4ac08e41adbd7c68c30f285dfc41dc3d4b56f683324fa4a30f7e07690cf8a4c6638eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b69b81cb306505e007e2e5f62ba96a2a

    SHA1

    079c09b36fe30640a521452e36bd32bf8c407ebb

    SHA256

    3d19954eb7d3f6efee1d7c20082232ceb1ba7d7dac2a7df0217e3cff269cca86

    SHA512

    ac8fd69be148fa7bf465b2f34f604f93c139c34e6f52965874622d0401182812e6b83fd6e43fbb8b1631c3b14be16c45e03e543bc5ba35e8e7401745792e161d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    74318c102e2118713347c2df9bf8014b

    SHA1

    2fbf1f66c3b22096ededbcc326a2ae5e363a631e

    SHA256

    3ae57d013fa02996ee25db5d4d49a0e5a52cb1b53917345f325cf1f951b000a1

    SHA512

    579f31ab91fc664820cb2a5b02addf5d128d9549641a102c1611a80c42f4db4f527de9098a32ad4624fde53e34b0522e72619a03bb00ac786c01ee9e6c67e16a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a016ef45e3db4d18b0d21e07d5949ed

    SHA1

    ef80e40302f9f2599fb0abe947cd0fcbaddfb743

    SHA256

    2be61b06f4112faf31956028acef3cbfafc3434a93a8284c574c21219042a1e3

    SHA512

    bd7b116919b86ea40ebafd49ae798abf0bd7ce01816996694e4fb413fc43adf581a7c6a912276c86d845abf55aefae5c9d320265194fa5ead49fbe7714a837e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    468866a222907e193d011b89ebace999

    SHA1

    f6fec923118f2414b15d7e2af81148659f740663

    SHA256

    dd7190a963176e51b36cb72867b13e9feae792bfcb13704f62493a08ea0e21ef

    SHA512

    32a573d3473e09b6b404054e102f8999d6ef116b6dc3348409b6b3921ae43de934ebbc6f31a5da1ff2a530a2f7653da174cde8c32c09981572ed0ab3a376e9f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e33ea429020e5389552571a20f3bac7d

    SHA1

    0c6cb2463fcbe41fde9edfb76d2c1351c88c4d55

    SHA256

    46e39a5befb5f0af0fca070b494f054379273ab11727d40969d9d355dae47a7c

    SHA512

    a337cf76dacc03528a77ebdba0ba89a49f085a503e1a35cd823ed4d4b15cf9d37c0f23a1880c9444ccba0df793ed655081d6a73575b973f21188b5d7b4b9520d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd1ab616b13058ce7f76c73ab741392a

    SHA1

    25d49ec056ba7be93e9c0a03cf8807eb89a9fcfa

    SHA256

    e1d21874dfe4b9bee5280cd5f7d1d741a76211b8e785379ab0a44181f1e82f1c

    SHA512

    3e932b3c96d3e98dcb1e54c9da02778029553617338f0d350dfe3aa1d3201303607b8e9c42f1d2779bc0afaca9822558f4f2d3344394e7968bd6c8e2401f64e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d90ae094b772e62bd4f8fce4564c7944

    SHA1

    b168e9d2c6188793ae4d2cdb6d1f23ca89495ecf

    SHA256

    91351726ac5d9a9a7419559ecdb838e63dd223dbde992c618e4b1873e17d7b7e

    SHA512

    7fc5d59e83626c387f339428e7ce915deaf68e704caaca903c9f30da468065231b79ed86474b756198286c6961141fa3d9fb0fa8d1d6c4425a3dbb69b4819830

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff7b90767e6a9dfbad22438f6288e6fd

    SHA1

    ff605fbabfa31399dccf6a1575f1c1c52af2afb2

    SHA256

    d00ee9871181e27232be92d8fa37705b6b57a1213bea1bb5f7bfc3d58daf0937

    SHA512

    6f21f4329d0ae14a2e2549fe4c4d3aff6950f38f77e10689d84084a97c37b018ddddd9cd347b890d129f2e3bdb7489594f5f0613c99d1f583e89a11cf281db19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e0ca17aa2eb41079b7db66dc900d0036

    SHA1

    898beda4fd4ab5a8e5b08ee5a908ff35168b482b

    SHA256

    524026c70f0cbba8dd001ef65ac5855df54adc68fb7e85f498465757989225e2

    SHA512

    3f3aaf9384c0fcb14d9818cb09d140ac665ccc8f0cb0d072dc0d38ea6ffc1e74831b7fb29be3aa5292dd6932edf90aafb8532f0d274b0d8fe0c6f10a108667f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    624826b4c382d7478775ada57cdf633e

    SHA1

    c8249f900ad4f60e0208c3460b9654a27b8015fe

    SHA256

    e4d4c3b1a45c029aa589cd1c05cca1994a9d0ade3c824d5549a36681addc5945

    SHA512

    b959ffd1d088255e2e69aa99858ed1e867ea39941add5794e9e371c20f2a392d5982677a5454208e7ca5b9e642df16fd1b50bfc4c00c579fe032d962d02229c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d21afbf4fc42085b156b1808c60f0e54

    SHA1

    d7ace3da3977480a9c9533fb0d0ed6e5d322ec0e

    SHA256

    8be5bea71df1360b7bb76c04f7a4bf6ac16a5ac0f5676885fa0b1e3d27b80ce1

    SHA512

    dc620417cf0a2406cad41a09a4d77077ffd2816f5078973fab10c3b8354bb2832855208ca80bbf603cee6561e19f7a7ee5004ab366cb8c52a2478b9b9c717175

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bad48a9fc8000f8f2199c478ee7584f1

    SHA1

    09dddf6e0acdc50d2feefa448f894bd75d0bd710

    SHA256

    abf28af1fda2b9d904a5a02b542a64b1300678e3fb70206c9429f36870406683

    SHA512

    d6f3477d626053b8c384318fe9bcd15720515c46b065eb50355bb5288bf6ed94a202ba36c904928149f993f57735ee8f9ded5daaa1f0a9b44c7e3cf5f6a445b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aca9d7db59b311aa193eff79468de324

    SHA1

    27892805f6501c15d0e79cefc9cabafedddae3a6

    SHA256

    5861baa4b3f44bdf48eb3e41c7db01d196bda339a6477f50d6277259f6722efe

    SHA512

    5649c165241aef24cfa3fd74005cf72ab1b0e3e09744591420313a50a7ca76e131eb45dccaa2f778a9c59f2e5a9204d98a1b6dff58c1d16bd161e953f8e413e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b58e094230c2c9e2b07c01768e862a94

    SHA1

    396939acdae468480ce60383a924e2f53f05ead0

    SHA256

    187568194188d1547c1111705f612a27bf9fa221ec4944050864aabe7a5ffb58

    SHA512

    dc9bcd4ac797b7bd4462f7971b96d9d7319e7f38ab326bc234fd527835ed2a0ee2aaa38c4d9fd7ebf3817a196f623dd057d64a6420d5c6d829b108a2eaa67c18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e2de6922d206a08acf172eb8a94210a

    SHA1

    80313d240f80cb27c518428be836df253fd4f79a

    SHA256

    7615a8e10ea5d4984455180234695d422a1af930281d973b1b35b7dd62b9c327

    SHA512

    a9e4e83699132a9753f57f8e2a1b461750c1257e959972ac6c3ab099781a261a1b05c2177c57a32ce405980042bd23964e3953341e209a9d2678c714136d7d56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a79df5ab34803e715762fef36fcbfd8c

    SHA1

    fc78263b087bedc2d80f764260e68a6eff4aacd8

    SHA256

    48bea346413c1509d146134fe1561a35c5f7e31aedd88cef4753d8dea193b932

    SHA512

    b6a469bc44265f54a6248172ecf6990c019077ff2c2ce5231943207cbde6f811368724a233f0743901b85f45f1837d9d3b90087ea442608034f6afcde0822b5c

  • C:\Users\Admin\AppData\Local\Temp\Cab38DD.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar38E0.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a