Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13/05/2024, 09:24

General

  • Target

    3ecb42d0cc9c8d7ddad8bb26d8e9177e_JaffaCakes118.html

  • Size

    94KB

  • MD5

    3ecb42d0cc9c8d7ddad8bb26d8e9177e

  • SHA1

    5bcba85c31c4ab0d60622b6c2050a4f2f4e4371b

  • SHA256

    9b544843af8fb576c6b765559f1825bdeb5fcde45c73830d3939e592a1e3cf72

  • SHA512

    4d4c4d4877cc2e8ca42a36766f02309767effb411328925d1e2ea22c5b7140ea751c21b36627bbeb4d726ef19c8d1c34d04b9d41839cf2843571bdbc73b2a761

  • SSDEEP

    1536:WMLiNj6rZ/4Pxfrn5FLXZ6rlLf7LIQaHmyeCaZHBdkrY8mgHC+qpEyW:WAi9jGBdkrY8mgHC+qpEyW

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3ecb42d0cc9c8d7ddad8bb26d8e9177e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2308
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2308 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2780

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea18ee963cfab6e62771418a39d2a5fc

    SHA1

    bb68bc05e0c7a7315834c4a153f446c6641aea6a

    SHA256

    d62590736a0fd50de083e0f00b14c9334d70f5fbf1b979bc23f1e5d32cc56a79

    SHA512

    b057427543b1d35d1490a0d6b733afae5711b57ba796a5359618de97f2a2630bfc26d1d77d106585e5b1148baf4ea0d1d1cf4b65e8a0d758169f293603e702c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    74ba97cbfe69036aca409a1949532e1b

    SHA1

    1ddd3422a8907809bed30ad112b457660ef96f23

    SHA256

    84342c6039a76ee155447aaa050ac3fffa50501be7d1f5604adedfb5530deee0

    SHA512

    29128ff48cdbb3702202d940f4189c95b05c4fb334c9d48cc3cdde417c6ab46db9f006e5a75631a075423ea47d30f1a524fb6e500251a78c4d52917043fb5762

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f63510d520fa1407bff4578cbbcb121

    SHA1

    68cd4bbd8a979f8917b4cfb91a870173acb3541a

    SHA256

    a1ca5541589297f41200d2d320d27869906a9077269d80688cb7b7980eac5add

    SHA512

    3351635370d7665bf3de35af30e0d0f943755c511cc7e403a3d66108178aa34b1f7e671863c036a8e8f4348d4c68920b3a585cc0ff14f46efca175a0a068f4ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1dab6a2e83d9b5aa07878360e6e2bc63

    SHA1

    a7fad433c0d585c8244ae332de1962fd5ab21bd1

    SHA256

    56c7431710ab42c449450f3930da48a18b2fd115a9381c4f65f1efdea8024893

    SHA512

    38c5317a4be5a36765a2e7a5511bb810e4ca9e5c3056080ffbfce6cc71214731be46b6ddae35c1579ba36edac7e5afa9a6061a36ddd0ec3251c9f2c9ba4ff86b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ded85851510873d8c2ccbd0a2622cce

    SHA1

    68a269e1bbe638505bc5f06cb66de4cb0d22edb2

    SHA256

    3779b458fc86a88391ac7f5534f5971ee206fb99f4de1dc5084a689dd771a1a4

    SHA512

    39b41dd626032a01991f8826325cc906d965931e74bb4a3a36c4d7ca1d5e302ded5c918d2b2eba91cb263d22df669bc630a39806a266d1aebe75364e3c921503

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0cfd15321db63989fab88b00e1b95256

    SHA1

    a7fa9684d13d06cbcfcc6904901ba95b7a792347

    SHA256

    41cbedb6943372d2e41655e42062d83a838f9265f5c46fd699bf1f2234e0b028

    SHA512

    5cad882a935ba2f9bb385e463c5399f0cd191382ecb651d58d5a09ed9a0d3e56a2af1077502c9ae7a8a047a2b48e6a2a513f2129a10021c80341ecac8b7fc69d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1427ead7ce193d91b4f7912538ebf60b

    SHA1

    82736503c0e57dc92ec64739a8b13fbbeb062cd0

    SHA256

    f251e01d1be9c19072523e9bae4d3ff89056c8b30b49d61d3401e13fa244f127

    SHA512

    9cff8c1d625fd95db058465de964e13e1ba8e767739b207aaf69b0d0498b5b2a18763b57ac8f73c1ae5a11833d1d52d6702f55bbc626acc4a1994c50ced505b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f88f49e2f0cbfad093a137e5f14b3020

    SHA1

    34be56aa6d4f26dc89acc258a4c4657c0c83fe51

    SHA256

    b9faea1070ebffc19eaff602d270fd0f36dd1a773536555f021e63768fe67939

    SHA512

    89acdedbea987717f5bf480b1b25b5e9e4f2c2ea186d5976330f32647e3c2e4bd632606c52ccc141d4ed54470842b701075251199d31232bfb124494abf577f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5639302ee11599ae6540b3bcad4eb89

    SHA1

    5d6c422ccf691f4ea90f8019a241df8d59069024

    SHA256

    8368ca143a87587574d824309049cfcfa31e0c9adc694d0d3b8aa95241e2d8a7

    SHA512

    4d018de975da4687ce8ad90523220cbc727ac9c414f46e6b0df44d278bc9accb1590b8353354bf07a60bd1f6cb6ef470df4cbcadd7141ae460267cb2a74b8c70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01f8fd07055989dc10d282ae9dba2bf6

    SHA1

    78ba2ce21d436ca7a68d732553517754da50e714

    SHA256

    dfc6237b4ffeee9b655a56dc37568f26114ed2bc4a1f5b1a41a48589237462b2

    SHA512

    98cc352cc99cefa650a3170824b69f6f4b900926d0dcff1b16cbd7c6d39248186e38b8f22b0c95b752437195820b5ad270050d24c4e7d0819e50a64de3bd89c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1ed8ccde3fed0b7d68d9d66b510df16

    SHA1

    99e22921bc5114c91c03fc0b9ff887e1a80948a4

    SHA256

    8cdcc1722bf4ea152fc22c79edf581e7443da5b532f54e26a41244fe2980a37a

    SHA512

    68b4c13ca4326494d48ac8cad1264727e953da8fa176751c507bfcbaa4c97335357ac3503421588722449ffb41afe10600453153a17e2367a587ccf6af17cabb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7785b895390e46a6279d4f3485cbb53

    SHA1

    3cd7266aab4d5df7ef1a35fd68e8f9c29953b3d9

    SHA256

    484711940a01c058345206417ecb70377df5ced7fd460edb5b8b7d74df66853c

    SHA512

    cf862c13cb23e2455accff37d2dad6a4d1bb489ebabb93c60f718aa81294fc2468fb69f518612eee4ca02f76262d6eeb165c02291b7150d5013acc6821f9cad2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ae78f6aed30137f1f455328028813df

    SHA1

    96d6d35db483355af2ac68312d9490df71b11dc7

    SHA256

    4f1ce0f61f60db3c3d2427c80c4edde3321764c9383b84040c549289a07f1e55

    SHA512

    a939ccde9ee9120a8e33a3845105cdb566d394bdbca370e6adc42f5fa97bcce5e9640884dbf531781276faaf4681f04fe8bd9f8c5ce48b16a898721b22e88af3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0160057f9b7a5e6bd8114e5d511ee0a7

    SHA1

    414d2b3bc40426721e75af9fabb4915dc791fb3d

    SHA256

    6b59176b935022f5f1dc6946823617f506ed9d3d4fee006aea497d87056ed24c

    SHA512

    1e90857acf7935a3b9963d4b8d1a70a07d47db270214e29496e0e28f93e13c7c1cace69c9bfc445fcbb8b1fdba3942a93a6634d1d4ce37950d1401f9eedda24e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e463e48e56b4d536ff18aa6d17a6d53

    SHA1

    1fb702f618bbab1834a1230034271f3459e1d127

    SHA256

    c95529271151ff8d36a62e293af2e1f3460ef671639570a71f163b9f8117b2e8

    SHA512

    889a9ed9554fbf0d46ce6bdd0eed99346870cd8bded7512bb67b09df7a3d1ebca27000834923092e1282d940a8fe21cb21f2fc6d9ba0423f8e0004125f3da396

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d94e91a75043162bdb3a7abcc9451fac

    SHA1

    fcdaf64d6a37e9705bfbc753a82600a62f5359ef

    SHA256

    0bbccb632a5b6f064aa2a8f6ac09cfeab1a12b92f15e9211ca1401e6a117a03b

    SHA512

    ab6aeca42f5dc1fc9bb04fbf13a595684ab56c59e59b0b8a72ffe691bcda4b84d78de2e250f000dedf4daf5473dda1b9f86694a02b3815c46adfe6ff1e5c419e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0be93f3377bf6301b8a712c5cf9e1bde

    SHA1

    4408b6396afd0d3e814eba7b7308f8d7c516307b

    SHA256

    b8b54e2811698ea8bf890d6782022cb566a171dc426159b95b0b7c20c75a3651

    SHA512

    9fdfc1e0499898dd069456af6bf6dd6365ffc22caeb7ab6677fc41fc0584b9292d27b5d827742295b0f4b2d88dfa0972855917e13e8d676abf2647e111e8318e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1103abb7851b0c01914b491aea7b4158

    SHA1

    68dcf124ffaf248d59f193a0d4d2b19ca4223e04

    SHA256

    034d737dc4209c3a3486c86d49785a1c0256ac07765a5bf6bbfad9cdbe054538

    SHA512

    7ca9f0e2399e3f3498e40c5b5fb02613a9e6430ab4f6569fa7e656e36b3cedb0a35c8079ca3f4d03d65fb8ac3f71fecf9d18b00c9e9b775afd957a335aa7abd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49a68df11ded7350b4b7c33ee735afb3

    SHA1

    40331713011f9d1ef3135f618465c2102a1a9809

    SHA256

    042aa67f1432699a1a902e605a7619f016aec1389e8e369505d735f32b7d7de7

    SHA512

    dc73aff0a4fa928016f188a3cf53c58da54bb5aeacb329da7c1e688a987d8004516e198524cd5ffc013339052c195045678824f4176efa89d7550303f3694e7f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MPR7YYBV\coming-soon[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\Cab367D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3760.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a