Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 02:51

General

  • Target

    443e9140e67bf54e6b99589a1b0fe8af_JaffaCakes118.html

  • Size

    154KB

  • MD5

    443e9140e67bf54e6b99589a1b0fe8af

  • SHA1

    4c2f0851acdac77780540151110158559ed22a01

  • SHA256

    769e7354e7a91e0a0fa9702e3970a5038f42edc99bfa134bce88d8d37d36e519

  • SHA512

    9c9f2e8f082b0f9026d956fb721ee54853134bca525bfc87656a88038aa35b74d060dbf6b90981823cde88b21b085420e9b605a7f17f0f337a8c0e3fbbc7c138

  • SSDEEP

    1536:S7ltVMmml16fYyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJruH:S7hJ26QyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\443e9140e67bf54e6b99589a1b0fe8af_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2104
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2104 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2624

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    488fb0dd5821895febd01c013772f16d

    SHA1

    ceeed4533ec8c3354c07ad4aee4ca04db192bafc

    SHA256

    928a2057116d85e1a1723d7b3001421dec3b55f5d9584d2fb7c1f0fdda37008b

    SHA512

    2abd16f3ef1630853a9f5835c5a78e4fbcb9c0f5b9027bba602f05f8854d2962f7d87ee0f675e2616970b1f242f078dc191738529d4b104593c416a685b77eae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b74fc9ea1f3f27d8cc5e369657a0af9

    SHA1

    994794da1cb8e21fd848d44ede7d5cedefd10586

    SHA256

    6700fa561cb8e24c0f404dee19d74da1b9af6dd668cfa79d97e3fefd6ca7d607

    SHA512

    11d8459d8f9442a40e534558c9f10cfc313ecace22f1fffce47102ddc57d32105feadf0942ee60f8bedb92b40ada33e2c8767c4061cfe26aee5bc325061d1bb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f16264cb42ed2f7e7b33419e5f6b04ee

    SHA1

    c1bd6d8a6a2f26b641dc083ad0c39169f6de1d49

    SHA256

    3735263be6c8b86b0740d68a27bf18a84c2cb619d12cb431ea36dcc0c23acfef

    SHA512

    373e132918265201075d0bd1c8cb32ac26660e730f94fa1c8815c6a37c3f5b8bdede3dc0dd5c25515847a5c88cce570b6a64c9f282fa4e88ebc588b600fbc14a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    212c37892ed8f3b26b36f67eb24b4de9

    SHA1

    3b898fe2c6447ad4f72668deae98a1a83f3ec8df

    SHA256

    3c3180adea73a017aff885c22fb53cfe63cb82eb37d01297fccd55d70051d839

    SHA512

    8640a42dc306780c4d7c9107e97548d9e3c40b7a1b99abc2418ca23f6ec38277b4d5e3e7cd7d87e4476f3cfac07c49ac994d50614ea1e93c50f8d88005cd9e3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ed39029522aa24e34e76f3d951e95b7

    SHA1

    a8af7b7c72bd22700a4f8f1a0fbd84f61817875d

    SHA256

    a1942281439b5a879ddde6c70063b680590f58554448c8c4d927b51f53dcb7a5

    SHA512

    dc1d3cb3e005601f18b37578b7bcefb92d2323c4a5e93e6db41bc67f0487be223bfea8be331a253c80ffa137759d72f436e2c8be40ab320de8b9563eebe259d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a29df9fd4563346c96f2b222c3c76a50

    SHA1

    528c20f727129969ec0916afc47f7bd63d94f21f

    SHA256

    ae987a90462c1c07d0e66f0c332dc754c1f73d2ef011bd96d7ba9ea2ca7a7350

    SHA512

    c6a724bbc6fdda88a2ceba979c5c8937e060b104b9c03f385c1c51af00f8165d58e275fb7d7f761f872ade0afcf1bdb04f22358fffb76f25b0bd9cbbed4a9457

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80945fb5bc4b75274f28e4b4a6df1e65

    SHA1

    150bafd06a98a30993271deb6f608f6ca1599aaa

    SHA256

    c8301dc3c4b025b52b765ddafb6258d8f8dbaaf42d98adec4f48de4a5512c3d4

    SHA512

    99265a411905e9fcd7871ace1d450dc92831b69cdc8b62e5ff351f4ef0855fb1d0143d4f595c6a063f90ee9578e99c9663223c04d0f58bb15997cfb16ce3d120

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19081c27b142fe7b605957bd52e9f96a

    SHA1

    f225186ab630dc1e9163897a3e0e692c234dbc0f

    SHA256

    ca7d49c12dd19a48a1a3289a3fbbd1a3c3b592a93e61a1499f1dd8b56980fc89

    SHA512

    d7906bbd1adc2f51212d24819ab74c77ff8949e58e3fd945048e1404f5b1bf8e48bed947d63b2b9345ebf7106870a9e8155c211c270e800818bc060ef2f86deb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04cd0961dbfc1feab9947b1d9f811b56

    SHA1

    1ab58845f9c94e6daaa8c9ea69f0e0784a3b1ee9

    SHA256

    e527dbf5ba317afae268cb0386a9656348abd0605bd0d0ebe8f21a2cae6586ab

    SHA512

    5e86e2ee58e7e635e84025ef8bb3ab134ddefe83c4e6c6346d6f499cd6891039aa80edadf17a4abd646c59fb56d05970ce0ad49f5906ce57a929e96bcbfc9e0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3001b54ef1b28d8feec5c81a4b24442

    SHA1

    20ab7083d292230f173d31abb66fa2b29b5dab2c

    SHA256

    157519a37358e1b75943e7af701f99b044276e80d6a4b98cc215bd072030e0ce

    SHA512

    5e6a950935596d71b408b6fabb5726a97056d1ef483914493ab09e511fbaeace1d35fe06293d9c2a0085a77127bc6612f450a407a6d84dfd92eb05eaaad6c340

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5587ed9ad0cbf3219dace044caf5944f

    SHA1

    bf0c606242b4f80d84984686c45957afb5dc9e6b

    SHA256

    7088b6e7c80ae07c8d79d00533208da000d82abc65f9074be894575d0958baf9

    SHA512

    a400f3cdf27bbdcd2255725289985580ff236ef6d05ae75652d8a7f2b787fc8b31ecc81aa6be5f12462a70aaa1836fe09e927b4c7de564b2ce23d7ef8df96889

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0f7b25e0335787f3b61203205e9c5e2

    SHA1

    e14ae4be0d403b70c53eb4c28d940129c9edbbcf

    SHA256

    e848fdc31181092790fa591947a13090d728f857d2adde1cdcd212b9b76056e0

    SHA512

    86b4aed38a55267b00947ab514c0191a110233701fcbd3d64ac16547d0579d6da2abe591a683b787ff7f799f119dbdd728d30639895dcabe3b6b59667b82d415

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5fd604303a8a3e8406fe1b13c305eb09

    SHA1

    e659c783c83a08990cb803efdeaadf0398eff032

    SHA256

    414ba145e97668ae08e70f740eda5cd83f2f314f7a4d30d65243ae9a160d429f

    SHA512

    282b9f42f046aa55996936b9d9d3eecd03aef2632ca69fe7c604d144c1d6fec12981ac20d9fafe48efe7038db0ba454fc83b5ab6efc993d488dd8c214b17683b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    958411381a02e050c58b4b61a3a179df

    SHA1

    2dd138aeec5831d7e153e8c00371ab7a9ef86f65

    SHA256

    c168bcf4a18e4416c0f3c1b8b2e37d8ad54ab8da50bbb5949cb780c7ead2e4ab

    SHA512

    134e3770b121094132a8b70c97fa8f95329a75cb50766c3eed0f04da3f18a03eb0a342abb408c21e2ef99b36bb4ebf0cafc341ebf5d0c6cf4fe37fcfea748c0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1585e7603bfd47acd47eaca6f6f7398a

    SHA1

    9e4d0da6009e6564c172a5cbd8c104ff78ef683a

    SHA256

    9699c4d5d4dce459bb453e39c2c177b630451bc990090987a5eda82e18c38df1

    SHA512

    1873b6f929a60c2b2969ab930d7b48fa697545015e48507db395910790bec6506b12b127e6e565371515bc9a265e3634c388b608add44b3d0a2820d0bbc4f819

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c60ccd4eb3a3c967e39c77e216506a2d

    SHA1

    641228a02f34ff9cddf4ca7ab64f090a3845647a

    SHA256

    68323ed3e9c5b5cc962f8828de8b832fe3a4d76aa8b3251e9e9b059c5eb51851

    SHA512

    c2571e6397ce7ffb7fe38c2f60b3c46c4f2e287492138d469fcc1c475824538c3d37e4750935ba63a6effe45004b65f874ff33e4b97640573bf75948c39959b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c7396f70ae9cf3b6cf8ec0629fe5926e

    SHA1

    cd52d1b0c954da5ed2c10ef4dae4dfd590419be2

    SHA256

    bcc2de9bcc9edfaa03864773673cae5b53632be0b8ace0ee724be05baa7d2a2c

    SHA512

    7ee5187bf13419a3dc738850246db5571c081f8f8ede9fe681f2ab8d665730f93c6e0cca97519c7a70263b930b618831cf5d27432f95e9108656150c822a7f40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1f5e0f567a3016a45b8c21773d1a68d

    SHA1

    c321b28a428a8da5d7cc2026640b7285167a1518

    SHA256

    b7ca96f09952173f35826232dc634fb991bb5c1e4081c088a9d66427e0e646b5

    SHA512

    59549d6558a54dcdb0bab325ad18421ee0636e52563db67534518c52733ad51536c64223e9e66e165d58b83584ea5536f72ea6cd042ff1d35215a5b92c535000

  • C:\Users\Admin\AppData\Local\Temp\Cab207E.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar215F.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a