Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13/05/2024, 09:10

General

  • Target

    3ebc2a4c7bc19754d8195ef7f9e53701_JaffaCakes118.html

  • Size

    32KB

  • MD5

    3ebc2a4c7bc19754d8195ef7f9e53701

  • SHA1

    fe59884c70aaaa3e5714c0d6463208512e303bfd

  • SHA256

    18033c7adfef648347987aa867482aaa6710f4f88689d1a3d21a51c34e2181e2

  • SHA512

    bc24461bcc1b5169a54136f3a984081eca530a23da4a1c461952fb944eed338e1fcb189ad10b086676b0e86658cff80f812bbb1ee38a69c9a14882c86e3e80f4

  • SSDEEP

    192:VWCk3GDG7GSFGNGeWqGUpGtqhyjUb5n96zEnQjxn5Q/tnQiegNnmfnQOkEntLnn9:ACk3GDG7GaGNG9qG8GtfQ/wMWSJEQ/jg

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3ebc2a4c7bc19754d8195ef7f9e53701_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1812
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1812 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2540

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    84fb8128ebc543de22fabb9d39132d6a

    SHA1

    14a94d3c9db9da709c9fb5ecbedb47cae3a2af5c

    SHA256

    a04dafdd07e3a8a782e796d339460919b678787123776394f88838b7745f783e

    SHA512

    0c09c88da20e646de78696a51287e675bf070663a5c8322e61c942682dccb75edfa494d2691fcde6273decb58e062d85ff99523ea68957b984e2196e2d226d83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9f6bcc2ec442905426c3a350558755c4

    SHA1

    4c9bb1065aa3d1d0930b768ffd3b1f59078b70cd

    SHA256

    8fb17150dfd200736c83cd0ee15c16145775ed154c3a31a563a043078fac08ea

    SHA512

    7bed22c0fdabb180ae333f2a8c3dd08304a5ce315ad36d7ea77cb8a96a584426505bc14fce3972b80689f58fd91f93e0017b494cb544aa16e2511a3b35290434

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    bf3b2b53b4afa1a6f1dfe0da0f9d39c0

    SHA1

    8bf9e5d1b474f699339c3c81b5029ad70eb4208a

    SHA256

    eb173a9253437874adb662a9938c7160a83dec95eb91bfe10a37e2b99036543c

    SHA512

    bec69068e3d73c33ae03b16e0f2bdbc36adef866a8758fcc11b2b4a0d4fb48194e64fbb130065a245f16e0b907f403ec2e076fcf49c7bfce305d32816377948f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    caf941d6eee4bb832719168bf27ff0c5

    SHA1

    108061398d62f3aace4eec7206ae8f47662f37e7

    SHA256

    d2062a86f64d2f1f18a22e0b7b2db3d2abc6e550a8e9456c9b07405904a083d8

    SHA512

    fb3209a629507aa3cf04842f16f7668a977e2e5da5c42ed6d6be6144d642406d0169145c87fed1cd8d8f2ba6eb8fa2141c66ad6c20ddd7d3836d5475b1188d6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ca2dfc6964a9eb3e9477819ae2b91457

    SHA1

    cd4a2c629a889b79f338408044148ed5bd08522d

    SHA256

    13db0ab577bf77ea20979f3b8b84999f5d356110ff13decf2b726f45989d1710

    SHA512

    a7731bbf126315972b33633ce357240d6e7ef022549ba830b5138d84518e4a43e6d23bb2f909d77b27a9eb31214209d58ab39d25abae179aa4267bdf295c698f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    dead21f8286e330dedea57ee486ef315

    SHA1

    bd55721fe7c7dce32264be10a66da28d48852571

    SHA256

    a2bd43ddcc9f0abb3c092c8d7e1a598e7e0bb4ee5a90c21d5ed6ce35000dda3d

    SHA512

    24625ba0a8d59a11401142d7747ecaef79a6b98e50ac3d74a152755c62331eaa437a8f4a6b60bab259d572d61d63cca4db8545c83bdce9dea2a1340fe969e2c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    87018bd4e60e6e5cd578835848406d95

    SHA1

    b6198fd8f5fb1eb23184d3bdb1cb496c8a16427d

    SHA256

    dc605c1ef689b1c280021c7c8d1087bebf9834ab747e08e031cf8685b96cc582

    SHA512

    63a850c1560078561a4317d1a5114d2276b735d87e0fe71960746576f25f9a6485234c335fafe4ed3db237c25210de310f0cd47ea4259aef5c0c453e4907afd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    18d381008bc87cea1b8f351178bbe02e

    SHA1

    38280dae9002cf877fdb90354061fea5a2c73b33

    SHA256

    ebf11ddcb33d0c9db9a1a7776df16940c3604d17abe70cbc84136afd18b07e2b

    SHA512

    c3440f2cf0e24fa169cfa9c49ee0bd266543d4b64b1eb782d96e3eb75ed8230bca67ab2c7d15c7ce451ae1ab6f867b6cc5dc0cdf5fe74b60ebcfcc049e542a8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e7a20ab1c07a8fff95273aabb97d3a2e

    SHA1

    0310db6e2cf9dfe63a88bf1bff0394e85a5f1684

    SHA256

    b93da1fb6e68757d42e4a7de56cbab346f98a252d8f276cc8c4356ebce6a1c72

    SHA512

    109b2bc9fff726f8f6b90b5c0738420718edd749064e65207a640ec6412c1a677f7166e9fbd99f3782de4498f73cb7204e819e47bdb2de2e3421817532335737

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7a6eb57d2b17198c970566f410a66447

    SHA1

    ebad52a95166d7396d9b423f9e565b3d8e119ed6

    SHA256

    2bed1423d087c3e50f6116daceab9be3970e926487cd3ccee88ca0905597cf50

    SHA512

    d969e4f4f0c24f7b9070e00c65d727162a0100385fcff54fddbf8cf1b7d296f044d4c91ac282b418870ff2bc00f4013cc0b9d099ba8509dce73152ba0d8cb35c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5e65e5544227da402b8c007b2c980768

    SHA1

    2fcc497524e7ffdfa5611e72e7539bb08e94f637

    SHA256

    875894f458c80562ec8728adaacbb101b349ddeb45a0c95bf2b5b996810f5df6

    SHA512

    a401ed78ec9f4dba29028e3ab73c9bcdcfbb04f6856f1ede2c13367b45d21d56ded7376efc93b7332698ef52f3e026375c5bf772e394cfe51e0f2dc28729e229

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    912776dc5eec651f72c201fef761f7ba

    SHA1

    d4db3c02536df0246cbf37b8a7ae76d2e639e3db

    SHA256

    5640b6d37644cef5a850dd5ea696b0419ef669ae03090ac7b89bdac16c615ec1

    SHA512

    812a359c9962d101df11dd0fa1e954c8ea9030cf41e0234207f9644053116da71c6265aea92ac5e91c4d5e4b2f0bb1d87a3d8c1f7ea30c5ccae5aeac1237f5a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    73e9a412c9081d41080d87e9097f638b

    SHA1

    3aa1981666b59b698bf3919003e5668c773b1b32

    SHA256

    131a81508ec3539391f63796212b3a6a63054e08d7dc006f95dedb3a05a3f2fa

    SHA512

    3c0867f4aef0cc917870f9cb5bf5cd572739906df1d5d695a8fb27abfb0b0e293aa3623dd34f2a552071a63a93997335ca6a16e626c91b789519baa7c4583041

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    4d749799f849b421c25cc4d6b5c7f34d

    SHA1

    2414ea68fee00e69eab015580443b3f1240501ef

    SHA256

    b03947a609fb71aa7c221a218022a72e1feab49bbfcd06010e6cbd7b903c2748

    SHA512

    8fbcbf26b4562eec971326d7a248df7fbb3a892c148999b675bcf2a7614d0c17323ded4db0cd04769e358daefc699a198cbb30bcf7c6bcc7cee78f67293ef7c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    198a25cd35e25a7c31128686cb0725fa

    SHA1

    24f425542023a15509960d41b5121b66a6dc66c5

    SHA256

    54ec49dfb80dc9271a5e17a5c3dadfa852bc84b8f73bf0d7e4b86e373894c1a6

    SHA512

    1e5f6923f164b0089ca6c8ff6ec7f50bb2b3ed5c873d3959438885de89bdfd05717479370937294021388c26f62996c39158879602d1daf3888fd09fce6c80db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    c4539254a002f06c1202a0f3ab01bfe7

    SHA1

    3c13305d80d53ce6fe7b4e8855482daaec582d1a

    SHA256

    900779b7d0d2b618459250939820b409f4c8862b388d40c2570adf083dcddb30

    SHA512

    a7a833014b90b968b4af34f85e35c166c451263980d38863c1bb72888c65cad731c8e958ce359ec942421b04769a50f03dfe27f6b6e6e296c2381a8dede45680

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7a7cbd15c918f21a5ba5c76218e18e62

    SHA1

    b129c1eb799a75e6ee266090116899347ebe7d1f

    SHA256

    d936deeac887b7a90cbe10cbc08bc8f68740b5eca0e35057f6b40b33a28eaf5f

    SHA512

    ee3f3057ae85d9d40adc238e586fd1bca3fea5418fc8f184fc983fd323fb98b742249692727af1e5a3570e874001ae6048c25c8da8075e440f401a9eda630dec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5c161dc0da6886bf7617d7f016112e0b

    SHA1

    00441bc7f9fbdc12731d419bb5a9a6d69da5927c

    SHA256

    14bf2a4f8de4428952618520bee88cb933a142a1ca64569806fbe907fc6593fc

    SHA512

    650e5458df38db53c3448fec5c977715d751a63778d745ebeac244ea6885792f8bafe34a63606f2d6ffbd76968d79ea49c3858a893655e20783ae44385452bee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9993b270640af5e9027cf7aabcfc7ab6

    SHA1

    69c8aaeb6a608efbb96e7996a9d74cb15ec5d470

    SHA256

    0e3961f6871057d34bf54e77d135907f97e3505bec4d21d518d8926a58b859ac

    SHA512

    0c82f224957c8463a0dfa7553b26a65bf5e186e555c3afa11b82fb33057168fde90d4c45a7a62404442cd3287d37a2825d5785d130f56074525bc06aec6744e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5a6cc61c198bc59521b78fbdaaf3837e

    SHA1

    94e7915f35bf15e9212b732ffa1e2a7f0b1283b1

    SHA256

    c20db983f8708a4a33ec35892b900a78f3dbc6f3963e716c80d6266ab2256dd9

    SHA512

    76878b7eab59153dd0800532ec937a60b467bbea897b120d9d977cc0aadb7554df44568a683ffe5d013eb30b0f448b65989e725ed0fc1e3640f2a901ece47506

  • C:\Users\Admin\AppData\Local\Temp\Cab40DA.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar41CB.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a