Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 02:19

General

  • Target

    4425620cfb98ae2ad64a0905a2214a57_JaffaCakes118.html

  • Size

    460KB

  • MD5

    4425620cfb98ae2ad64a0905a2214a57

  • SHA1

    3d018a94deb529e1de86d1e3bbdec048fbe29afe

  • SHA256

    ee93975f722e59978453613e66bd9c809aab359eed27ece0c63f4f1ab0ede632

  • SHA512

    5c89c81cbb1270b52f20ac0474e94a7998f308e795e7e1f78053eb549450ff8f594cd80ecbf4ff56cd2559119862cb523b53e36d6a75fbf0e6d8e12acdaab6ef

  • SSDEEP

    6144:S5sMYod+X3oI+YSsMYod+X3oI+YAhsMYod+X3oI+YLsMYod+X3oI+YQ:65d+X3C5d+X3y5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4425620cfb98ae2ad64a0905a2214a57_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:848
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:848 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1780

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0dbe1eb4e7c0581fa976cd04917bdbfa

    SHA1

    827e1298ab3f327bb4ffb35d05fba8bd6f56f0c8

    SHA256

    49fe2200e59831461a0bf798180040993c6dca40ff9dd58fb59a7279d364c2cc

    SHA512

    581db5612817f95bb743ad81f712c25ef73aa9eb51e78bfd3a2d162ca48126bcabdb46d0afe8ca447c0d96cdc339f092ba5ff6947d51abaec5cb549515e0f50a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc162295107122c1cce84b0d373d06ac

    SHA1

    fd999172df1a3f5daa036cdfb5e26844c8b952c2

    SHA256

    240653c7fdbbe24801a26e94f6a2993e993a0a083a5d4aeeb069c9a1080142c1

    SHA512

    e03273c98d855e7d849ca1c88b3dce98a6c11363e9b575f614232be898bef48b995bb9fc4731a58225bd170df5cb356a93c81787e2293d8689418f612fcb9edc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed1187d6fc022906edb0749b9c146be2

    SHA1

    9f91c9e9a5e71283bbee0a01b12ae90c08d8a4b4

    SHA256

    d9424b22725817df30e2515f5ec2cf7de713e60fca5e4137e45db7ebd777626f

    SHA512

    80349fedaf9272a85fa1d32ad7bc64953765017bb484f561a6749eea70eb186f3744ab7278629bc64db8bace08fed8e1a1dfcaecad2901fa0fb3f3020c3542b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c127740130b5b568902f787dd4e9056

    SHA1

    e31a64b7a751aa7189261ee8ecfe2b14e8786ed3

    SHA256

    768b5879aab6923b03cab0ae4cec18d95058d46ff157cc0fc157100ce2738f00

    SHA512

    4e7c827cea446c01926a426ee96506b974b8a2aa77a0462d290291dd1916fd85870d728a1b103c06879d41c3ccc5b574f2b551fac5b0953fc8a2c931e0d3276c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a95d7964bd6d4bde79fbbd84bb390916

    SHA1

    394524f2a8ca77b647bc76d6c0fab64d027efd90

    SHA256

    8a66091e237197c51908c3aa20c688dfc69f41eee905328b9ba6ee5c83329c7a

    SHA512

    40fe160c40c081940ea20ed7532e7d503b1076059c32d8754c51823beff4e4955604f06ffebe7acea4e3556bf309cbe95b9631c8fa06fe2abe36b6bd973957ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc969480e982d44a83e7f0beba5d8bd0

    SHA1

    b748e87b98085dfefa1518dc18ea77bf954af62b

    SHA256

    c60449a5b5749b0ac588b5bec21c66e8af49a8684ea8b8f728ff8d9aaefb27bd

    SHA512

    262b764e63392b5be251e386db0f302a230d8ad7258eb67cd0a24aaad40924be2ab3f2dca76a97b7f99e454deba2e9e49993309673be6eac40a44bb3be7a9ab1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5377fb2dca8208397bdac1849782b018

    SHA1

    e23b01537b4f01dd7b558c8424287f75c6ab4218

    SHA256

    ab75ad5a0d38d0a6c4a1a038d97e4d36cd4be533154a4b37aeab9ae6a3196a92

    SHA512

    cd92b14c2dc9216bf070f4864a3c4f18cbb1de15c1f2fba3faf98049fd7a45202b92a3a021ebf05a72b58ecd099fcd7161fa11dfdbc35ee67fc71bc15307ab23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    616914186029f5dba5cbd73de16e3fd9

    SHA1

    376e0f902230c9fda117912ffa7a5efb0049688b

    SHA256

    72c6be1afa7831599743730bb8e1e4b4e82f3454fd061292f673d509cbdd9258

    SHA512

    f34bb1198d9e1217ddfe5487f7e1529c49ab53b01a9d9ada75a889955eb9b1c08aaf44dd5ff5040292861046b0b342ef6a800fdd893c988d7ceb4528b3236a2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f0965b2510685e2502f0e68d77cde8d

    SHA1

    7ef912c9506de9407fc62aeca212f8d28c744389

    SHA256

    43d0795d6a046a77f63eb4d0d818ee199f48e27fb1634bc930875999bfe796db

    SHA512

    027e0079fb673794913dad28a8a8cfcbfb2a3e9e396c03b6eb51e884592329481fbdf25631bebc0cb1a4b10669d538e9e452b69e44845701958d4cc642f18c71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d580bb0b95595e02b7c017520afa38d5

    SHA1

    69514522fdcc96e0934ac945b230666b325012ce

    SHA256

    c69885b25421707166f05b8d4230cb288ef38f02f279a44b84584e738b8c348c

    SHA512

    eceabfa95dc3af9c48b111e15792a0ffa613d8f55f3c5872f06c629f0947738454fb009e1347b52af956fa4a58d3a3a2c73e3f7ab4b9296b218ecbd3c8d378ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51f4f24822745555cc60bfd907c62121

    SHA1

    51737d6f95ea84fc9fd92e032e4e0cf106630719

    SHA256

    2b3e6ef3785419a157c506ece3ab954c6437784721cc5e5fa5bf057e4bb4ec30

    SHA512

    5ed28378aaf1261442f8c26f045b546cf131df7c04446bd5508d65212c54a5033b64be4ba20f8644dc83dbe000253c29fbd80e13eb9f65e16b622a791cb23635

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    192037cb27cddd6dac9f4ed361cb11be

    SHA1

    5fc337442b9dc4a81f12e3b5cda05d9f759ce846

    SHA256

    1b14f385f3319451af371593c58a98a8341322a96550d8a338f8e8481d818b8b

    SHA512

    4cffbe01c14b384720d56efa62e768adf604415d0134886b6edf5b19db15825f2da6a203be4cbc9c261ce0c40f423798f1946d244e746c3f95ab75c2935e5785

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f2808c9db791ab2b3232944f7269721

    SHA1

    4f8fba7d055f0f90232eaa223cf267befa35538b

    SHA256

    2aa0cdf5d92cf09eae6d4461a3518cce5e7b493113d624fcb011427f66ca7638

    SHA512

    4cdb54a2ea106cf4186015ced5002a4282980269f21a19e002a4ca357f75b7b2f003cb82cbb405cc04dafde2a0db33a6d08078f135b35ae0fd736dd2813db37a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e110bc7541eff4a0dfa4d038d8acfcbe

    SHA1

    3aa875e3f7e151486ee5102e7857eb94533441b8

    SHA256

    abcd3cecff3095d083b2eac74169a25a40a2eb1b820ab4446bdeb0dab671e585

    SHA512

    a41097868f20fecbef35d1c119ce34870ae2b8572572618c4faeb1e8fcb9b1e50e766aa6087abd035baa57be46fe53bafd62dc6c8f13e3c725ca2662d3e18a2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af46bcf1568312811f6f988027471cb4

    SHA1

    62b710d9a2a05885d8d1320d9cdf466f693592f5

    SHA256

    2a5a19cbe08c5ad7ebbb3135971b53b1b3caad4f56dc287b716ec291696a7f6f

    SHA512

    398fc109699f5412bd337478658900b006410cad6e7cc2b12a7f9606a72e58ee490967929db0bb59968f2d8ff2e1208f54c157541001fb54b98e25a828e0cba8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e23b69e42bef177e609353789cc7d03

    SHA1

    f6e5ea276fb0a1f454e751a5a919bc53d5f62ca1

    SHA256

    b7305a2aceca66a3ee68f4009a8ef5a6aa738bd5c4a891594b81b9049366fa87

    SHA512

    dbeb71ebf78a5ac8fc30ac6cd0189353d897e55c06358279b05bd86d479f9be25484a0041c31b054ccf26030ff24a79cd00ab96ac1e07f77bc0052cb542e9fd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6893ae0958ed22ad3490ccef4be3db97

    SHA1

    a3227b6b7344568333525c660aeedbdc6006fc86

    SHA256

    6926496eab8f4c896d01575908d660267fd801a96e49df0823ada062d20906d0

    SHA512

    dd3e4727c58f0ca0ce12a1258721dfc0abdbef4311a6c9d18cbbf7b931d8befc5c7d0cf859fb9249eb4ac224825332967f971774a56f6fd1ef40433bfd40c0c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f52d6ec4140ce524793b961c295e826

    SHA1

    5c8db8c7e772d27713c34da4d94b34f89650bcaf

    SHA256

    688e31424a6f7586da2d74655d1c7c9671faffd3f2b744674821f1a20d3b9448

    SHA512

    727d18ae5704cb0f59981e7e35c7c91e7321cc8a9d279723be5bc17d637e5a8690626b445875516e3788dee0079953ca34f8ccf17e6f56ef309bc37cb556d1bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c67495ec3ad67e7b88dad610fb64a48f

    SHA1

    ea117023dc7f29c2da79227a7c80c99983aa11ce

    SHA256

    858b4b8f4af7f5802e26a094bd851e52ad93670e780a0e7173c11dc48860f2e6

    SHA512

    9697ea5c8ab5dc79cc0da0c223aaa257e81b32d6d95845b836c7d6836f7c3e3cbfaf4b001c6e73b07d2b49f3097de15c3b7b0c72cee68e1aec4e2c7fcf980334

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b37f5615920008dee711bc25cdb25ac

    SHA1

    f2876e3a875750412e7473b3c658b2c09745fa34

    SHA256

    ad160b24d8c0724bfa6068f02d24098d28c3142cbc738dbff9674f0aa95d9802

    SHA512

    8eeef0fd9ddf15e339082e88aae16481445cdd12cc3e9fb7547a94a0a683d8f6c330842648a8e04cc956efe1be1d828b6d9b09171c9d74de5eab8b3abec92d00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    455498534ae7939828bd96d6d92cd8d8

    SHA1

    b05e79a7b33c1bd1ace84ac59b53c8e7cbaa34cd

    SHA256

    a996ea1dfdfa2ecd9ce510c5f6e717265a7d5c8fbe42848e9730d769ba3c14b6

    SHA512

    0addee1d43d92fa805b8546c48ba647b2725367d6d1e300a8c96791a1249d6c4ae9368c0bf2b4dbec328aad6d6a301ed9d00063eb32904f9ee7797aa278c87ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4c490bb82efdf4731a39fab018d7783

    SHA1

    9d73730c40baa3c7b8eb2bbe77b8bee496d393ad

    SHA256

    d8a470d7e416bd591dc5548cbbe8bfec4d071863ab5642e6b200b869f306bfb0

    SHA512

    a5cba7599ad27a26ba276a23e4605cfccb0889acfaffb10acb0deff57959b0ba2b9ff263a5fea6f46ec46e471c6e2cd70fe24d9b4cbe034a76678e2c13a92dc3

  • C:\Users\Admin\AppData\Local\Temp\Cab50A3.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar50F5.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a