Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 23:22

General

  • Target

    438899ac7d88050a5d82be1e6323b93e_JaffaCakes118.html

  • Size

    132KB

  • MD5

    438899ac7d88050a5d82be1e6323b93e

  • SHA1

    c59f806fd1d7fdcae34310ce78745185f42ff778

  • SHA256

    43effebbb339fb799925435990160fd5f73e69036e4e03bd2e5f59709e69c865

  • SHA512

    8701401107f78a680f84af0a683fba93a48bd5053173d93503d808e4fc67fc6cf6cdb3e6a22df31ca73730be03118fc91acbdd4619796d5f3899d91e991e5936

  • SSDEEP

    1536:SNYMWyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGL:SIyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 43 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\438899ac7d88050a5d82be1e6323b93e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2244
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2244 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2388

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    012ebeac6e589eb3e6154f9a1f683217

    SHA1

    84ef892908744e3833bf7ec5696d08c71653bf8d

    SHA256

    6d1428aed933747437f9122132f017df08612fec959cf517d43888c23642a17b

    SHA512

    bec9d0ad4b001954325f59bc34cec6bac25d1f228cba7b8f5303b132775d0771571fb996365448a306142e2e3b3fdadca1b5464cb011ff6ebb928f339e5711b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12dd48d4f90e627c84ba6470f83f6dac

    SHA1

    d30478e370fb695e248f53b5e64adc601bba3bdf

    SHA256

    9d72af63a0e8ff0890182cc95579f0768336a26e65f597a4a259bab61f64354e

    SHA512

    3cc53785aea077ca1d1a81bc73e7d6feece574f6620daefbc06fbc3e4e0dad7a75ad9344268203c430bc55e0c76c2c0e3b6a55d7c34172d2d7ef913168e22e32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5c01f3f808f796dc0e35649d0130cb3

    SHA1

    e8e1b0c3276aff88947d8ff69f12955c836e3d79

    SHA256

    ebee43e0510f1352e057aba2002a3ab3386adf37cac042134777f7b492d43c5d

    SHA512

    33beba67391729a369ebd0d6209d81fb275b1192475c10159bcb9614ef43695ff98e683f7f78a893c267c5d5bca38c72d0bb3001f2b68fd4a79ef7049ad07c9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4adb0526c574868da44f38c135e79ad

    SHA1

    a502277769612753829673ad70219aacaf3cf055

    SHA256

    2c5baee0695042754425501a1fb3acf053b227b3775db8a6820d397cbd7c6443

    SHA512

    4bdfad120bc25b3d1a614bef577f902f7b2f3b7faba6fd4379bb4a440866b6e3fd43d6f5d04d51981f15a9626fd8ca39ec019731438883c4b27274408d7a95f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d949c0e157be2e27aadb7b9e2300f76

    SHA1

    dceda7a7ad59c7ff6716ca3fd6222452b87f0869

    SHA256

    c36716fe39031378bbad393e0266f944a3c893c058c60f8ebb952b5ec054602e

    SHA512

    f099ac04696ac96980b7adc57cb175471ae3a1644dfd6e9687c1bab40378ad3e62a9191fb6498c95b82aa12f0516341bbe916d98955c790859eb32c80b911edb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fadd070b6b8c6706563dc30467f50ed2

    SHA1

    37cb267bac060475f94ceeec7874cffae6aba3a5

    SHA256

    3a85d27544a226c91738dfdf57c0fe581e65161477e9ffe1d66ebb0badc2dbe6

    SHA512

    6800627a8ca44d28c3c133b7a977e558ae0f3012330ad5733188b6ec96fa859c7fa82d15ef3b10473aed73f7e8a42e3a71c09245f5c907d4fc6a85167fa1fd63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1bc412e822c93ecae2dd4e4409e30476

    SHA1

    42859ba7f6ae96c93023fca993034d04e85b4c88

    SHA256

    9c4405a933d77c1eb37d944d589ad1922b5cee2095dd3539f368718c7f75a710

    SHA512

    ad2f19dabf784f1cd7ccaf807459b5a356c809ce290c0992a640e3a18f3dbfedd4a240bf857d4a136a679d5a4fb32355b418077950692d3e012069da444dfd8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19bba2544cf5d1b441dc156642ca2e72

    SHA1

    644f9c1d8678d69edf203d0eda5bf2748def712b

    SHA256

    e013de761d22928534697b06c6ffca6c5215a52da4957468e5981cca2f0ef8cc

    SHA512

    580b81fe687316df541232743ef98c292c82c8b462f81031656fa6e3e1f2abd64dae2f4c18c402d5ba0481caa9709ad4a78a7d976090f4f77022ad343909a9de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2a11905e5f9da4216282f1d696370b8

    SHA1

    0c01d56128cd846effdd4dead4e3465a7d985e4d

    SHA256

    8938f4c07f306a5d2b57a8f5f7f0a4e1e732e90eeb52d37159d8d81c2bd52e87

    SHA512

    5afad4f79e48f63497ef50c9ccf34ebde2ad4a4ba73a885710f0fa0ccaa226702dafb92f13676f5098620e444864b9455883047ef8215124ee73be127aab0fc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed7b998dd3bcc40f2f5b4bf9e2afb190

    SHA1

    0dc8b2e9d60d70b77c836078452076fc61b43c31

    SHA256

    5b5a8832d55d157a76f579deedecf9f5ab0d4a99aac6582a878398df53a1212f

    SHA512

    68039d815f8247b77658679c6371246aa249487cc70ea75ab2a2ef709808fa0e7ce84489fb201ca6678fffbbcff8c8366770d14f9c514e6ea2065084fdbaae8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b7cc7a3ce2c1c1f1740e5b63aeb533c

    SHA1

    72e355e62d22e3960d177a036177031c83304f6a

    SHA256

    b83ad087ea537407c887b78e3d245260f578ad610718fb6da7b84c267690fb84

    SHA512

    d8b58124dca63a2cf4e628c8f5d0620b66a01f2b06b14cedee93fefb2bdb7ffed7089ad755fe2a7847d45dedd5880ede3d76e5a7b1329d876da9169ea8506ebd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58601547bc07ada667c7d661b7079d7f

    SHA1

    6f457e43b947958a7e85ac476b409b91ed5dc2dc

    SHA256

    e42e0a270addc627cb52d5578b165fef967f8d34c8967a5a0b4c026570f6ea92

    SHA512

    dc25057c6335525f41b8fd0f17377b1f8b5e02abeb8e7a2e329c226bf50152eb3c453eb3433ea514ce502eff14b3752dff222c65fdb8038fe044451955993443

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71cd89963f03d219771e7df4eb209741

    SHA1

    61272c78174031d4e4d219d18492bfeace0e3553

    SHA256

    c805156aaac6277b71a5a279f895721893bd303305c73c169bcbc89a24aebbab

    SHA512

    41fc9fdc98b1cabfbba384eb09e3589368e1c1f3a495031228e95204e448a773ef6dbeb5a1f1998130f823670cb01857c5124fc127812f5fc7b7f41c828b8625

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f007306cdda69a666948e196d0b8770a

    SHA1

    eb0779d952b5cabbfa38fd0035efd2c483f57555

    SHA256

    d08cd54381c9d429f245b38141332bcdccfef6ad9f6baed496d88d50a92e03d6

    SHA512

    f3861651cd7271e9300bc7c5e83a2ca058e91bbcb69c44d2de773122199df0c5e4db0ad501d1481dd080319d27b2e21154e9935b711ebd1d2e420770653ba574

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5df768122fbbc0d701ef6be905ff35a2

    SHA1

    11fc6c676ae9833bc79b6dd17c375de5f21a1e98

    SHA256

    09af226605caef47ac4db7a6c5852ea7508935c4d41aa2072b3ec19716c98386

    SHA512

    ed511c8c97fe856869aed24f17ea1ace5da6c70c54a039ff750feb1bad79fd453a523ed2bddd497c30b5241f0a7ee14b8e4af553bdce36b42df1cbd800e83920

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a41c0a49bd06b6f16270d29e6574161

    SHA1

    5bf698785d2606201033354a916f676a905c4041

    SHA256

    826eb29b76b209534f382a2702295f927b4c6678cc3d13aa37dfe5660ca45b2c

    SHA512

    30b51cd504cf6600f3b1774260f522798c7ae56d0ee8bb1e82237dea63b12c8e5d1bd1956184b46560cd7214f28ee406c5872a61b4e1cad557a4e9b1361aa8b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e75914d95132390afccea99e0c5569f0

    SHA1

    88fc5d92d95ad7070fb412f14cf9a07a82ed5c4d

    SHA256

    1e980e200c9195f73d08f10d8871286cb0105bb281703a43146b15169651cecf

    SHA512

    27883dd1a5221e89f27c55cd69931ba11880fc408e192fe47bdfff92ac271603fdb2919fafbb5f2b018f9feb0f66d31adbb718b2036b2beb703e858ea6435fc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc80edaac9deb37220ec2aae9c3e5d07

    SHA1

    9b0ce30467d12c70893bead44abd507bb09cb757

    SHA256

    ca17b1cb52855199878537422a83a1484afb1d80e64a01ccff21099913666f0b

    SHA512

    98d0cacb15ff59ff1111ac42181df32e3ccdf48149741c995c597a5abe55cee8d233ac3d84d285689b9763d80c3fb399ff1122ac1cf2be272005825467092845

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b891356ff73cbe92f080f5799fdf1e10

    SHA1

    3f9be8acc2f1832ebbeb4eab8ab59ab58e119540

    SHA256

    adfedc0aa90915b5fc144ae20de06d213bb43a4468f9a4a5c74db5448c97f176

    SHA512

    87c08f61d1c6d02265ce72b8c23a4ca255f75ade205c9636e40a76c98dadec715a61e8ade7ae6a3978c340a67f0e9033cd95bb49c9d00405c220c27d34f352a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e76e05dc3eabea8e8ba2ef9425d959d

    SHA1

    af8b1035859cb0cc6de092dc43501f27cd5d40b1

    SHA256

    99ce4ed07a4ace61cefc751da84f9da04bb93eb15b02d9954124d800fdb60467

    SHA512

    7f389c890a95e2e9d26019f957a866ad9ac92437730fc242a9e19bae9df2af8c45cb406483253f35c95b9a1818c6484176c75ea7565223f5a400e1395c57bb17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcbe5854831044f762713be51480a4c2

    SHA1

    2f1d4b142cc0f474e3c7c6a31f6ae0bb5f54fa36

    SHA256

    7db53a10319a5e111f679203dfe84bac3930b9ce27eaf00f7a2e514e7a0d4b18

    SHA512

    b3a1d6d9c6643c56e8f1eb282097a88d90f46d7cb82004f90faf2ff118b7d395145feb3a7330e6879d84e241c4a731e1c843b740a2392ec5f9a8d22fa1f2da4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf5269b3c4b1d0d56d0cb261be2062b7

    SHA1

    c344e1ea348843a98f76efcaf3d36988d6a64485

    SHA256

    f2dbde12675bc5fe249c5637846626762ec032cbc1e3e5f992e0bc66f136ebdd

    SHA512

    19219f8ce965417f15861f245b8862cfbca6ed71f2c28e5169b0110ddbf3fbf9355a88f3fc523b4c2500912b4f3f07aaa47caf0b83aa22cfe3a6ba57a97b7f57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    168801a5937aba9a3d3e3f9bca5536ca

    SHA1

    1596f766ad7bba89fc0ba005c3a2d94d5ac19358

    SHA256

    c546e6e4639953c78254a3af065632111c4a8c6807072a6a8020ef553aadcf09

    SHA512

    4bf2c2658603728ba8d2d32f0499f58f5e0feaefec4b942ac49b0b349008e14ff9ed20b84e5a65179886c3ff9d5d42f7be736a3d3bbb79c2a31b41193f191909

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar14DD.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a