Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 06:24

General

  • Target

    44e09f84866be6b2e3c949c88e15be8c_JaffaCakes118.html

  • Size

    23KB

  • MD5

    44e09f84866be6b2e3c949c88e15be8c

  • SHA1

    efe1b2d8f79eb8352aa8ebf283d67fd1d6a9dc4f

  • SHA256

    5209ac3eb18818af85b8f4c14228e69758f15bdc9e1aff487d5c1d6d9dd13dbf

  • SHA512

    d0154dc3e91e5c9d2f0563474864b1d0187a69df62f8472957adc13c7f6c441f72e4b889a0df81125f6b553e6711d57beed6f15a9aa4d05cd47d783c4cbc6f18

  • SSDEEP

    384:SUqvh0eQBpjLamPe1WD4xSWSIWLXhspgTX5PMSfsmb/DiO+SiM8HHmcFh2DVl0rt:SX0e2sKRhspgTNMC9R+P0VlgFfW+Z

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\44e09f84866be6b2e3c949c88e15be8c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2156
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2156 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2120

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a4a78f91d3400cb76581c558c7e4a00

    SHA1

    241377394d3059b9715233173d450d1ecfdd5d5c

    SHA256

    c3a1442e25ea74b261109002ec608f99262ee856c86c51a7a6780e08afa2d106

    SHA512

    5d036ab445f1846addaff5779164ca7d39ffcbfe4d3fed20ad3a49803b91f12d19c3098166b4b42db1d8108c4206e29fec69572c2ff7d5cfa515ede193f17185

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b023c37db06bab2e108d1e51143da2e1

    SHA1

    f4eb601b69acd1635f7fee34320931ca4cf9deb0

    SHA256

    6a500d8565c29f05f0137beec02151854071ada9d09a695544400bce253a455d

    SHA512

    decf1fdf1716c1cbe38f1a208e2f0a30943199a77fce0ccd8f4b1db949d45326e1bef94027f2aa2b49b07a09b652e4efce529c3df7503f12a48ab126951f5fef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d12b927cfbadb16b519c669eda889ad3

    SHA1

    67a769d6256d9c3e652c3ea162d6fe0b5e9c8433

    SHA256

    8ae829beb0f46cb6bd8992091bd1f8cb5d50cdbc8bb7c24bdea5a2b78a5dd9e8

    SHA512

    6d29e96eb6f8a869333c89528a412eaa9547fdb1ba1283ffd3b7b645196825f87b3404aefa3a61a06009b79633c36696a5ad810129e96bca471902abb236b1e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b6862c13f7c2f42d9983b8b0b87ef68a

    SHA1

    c3f713101797000a7a7bc5b7b339ba441597a4d6

    SHA256

    4aef56c9ee801e734fec86ae75f7e9328a30807e2dca1f31d10d8ee50e28af24

    SHA512

    1001e7fd6f123fc38f5ec03033df9d29c35e0aecd13188dcc45d182fea8aef14fe603d142878a617a506bdde4229934f4147e54f955dd06b07de4ed629d9f14e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65c43818848c06babc39edf68195a930

    SHA1

    e021c21e747184f090ef15d4c9f94cd0624749a5

    SHA256

    22eb96d0b39639a3c573a26ef7d0a1eb1c5a6b010f484efdb9663e06658c0e2a

    SHA512

    af5b84bfe033f566579cc56da4fb6d5d50d9f9514e673f9d47220d4e05c0a750bfb77e7a7977878172579b2b4a554a9d8742d5faa2224d9467c82544c32bb242

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de5f6e442930d45d4e9fe453ec086f36

    SHA1

    d4611c91bd256e350f0a7dc14b38e8e84588eebc

    SHA256

    bb6a3db20fc32b047b32db5965821616a24a3fd397ac9c4847e8f9a0427d5c02

    SHA512

    206c8e0062aa6be0ad9892a7701626befb75e28a395d1b091fccb8ea0421d3afd8faa50d2f155cbe829a076211f9b4e6ba9637ca2f09270fc8744d857db71a86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    334067aaaa80611f7d0d191443b34eef

    SHA1

    0b7f07177ef5e1b6120c7a53dd3dd39c5a8b0098

    SHA256

    7774afab8494d6c9fecb6735f2b734fc806dcc9499ba9770ec3397d83b2c9981

    SHA512

    5610d6b7c34391b9e68fd7760f5bd9906a430b67dce551b2631c57349c28e25c405430f99f5213e65125c54f2151c1c69e77246ae6beef7dfc709f5f578e1d03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16f63a5aea4d3a1aca54398e495da21e

    SHA1

    1d97d34385f6584e67f02ec088346b24bc0c4cd6

    SHA256

    fd7f35c6933552f6f6d4131b05a28c1d0a80b474ec340d86a651ea45130abdb1

    SHA512

    e0e851c75afbccf1239e73d68c94fa1e426d0e4f91cefa7c026d5a34de5fb252e169e63c4512c7f1559b2bbf49a3dde417830b63a9b4b45a7ca7f42f1a730c33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86b80b3778dcdf3d534c11ad61bf2162

    SHA1

    8333e9b30733195632b9e0d6a2e03cf216d9ba53

    SHA256

    e48b89246bccca5478bb4192336b772fd322e0badf36083c2d177df17d0e9b0e

    SHA512

    f275c5ae41c3a3d47ba38cc6e68bbf3fca39e5f5362f1b302f109254621a56cb7bbd71d37d5962f8192c94f3fef4bbc5ff09e5f36095645c1f65514841f4aca9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    135dce83837f692f0b7463eecfa526fa

    SHA1

    a048cb7e40e34c0d0b534bf041bbe859b0e04887

    SHA256

    eafbfee643176c84d0e838a09129a99e8b486d901bf259bfb0e2415ddbd8519e

    SHA512

    1094eefe7fc4ced14bb59bcb24c451b2b951aca01f82b029c611db7d3b0bd8f3a610fca8a5d02e1dfa31174fc70e8d66664e93123a40c54b08f85cd2ad5a04c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1afa8117dc6faf6cf30c2b4f49fd43f

    SHA1

    1e01d50b00e09fe4e7b028a887062600ea849682

    SHA256

    2d21dd70a7a15cd4a9532359b497ac28568a41d379a81526a81cb19e26d0653e

    SHA512

    2b937df70ddfcd190ff65fd3c91bf4a12c2fdaab4d7bc7386d3283a66d108b645fba3c07ee1a40b5fba05f518901947738cd5879fc91b839303d5e59b84bceb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b30326c5cda696bbe4b11c91b0bce316

    SHA1

    c4a9c486644f13f4de74e72ed6687500754c8f47

    SHA256

    6340fb0aca93591ab85e79327f52203dac36efb2caa7c889bac35664fcbe793c

    SHA512

    418e69458484f059daae864c1a5af1b7f40c8034e9b9ccf509b7fb8cca73deb9aed8e5bee8bf23a4975bc686346b48d9a401c1c150b118bcabcf9b7569836eb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9c541210a3544f20360871e1589a417

    SHA1

    ce89f3c61882def93db5f8009a9af969e5b2d371

    SHA256

    344324754770863c0785f51c694208f17818dbf4064c6474654eda3383e7d6eb

    SHA512

    968afe328d4726c10cc2052900bc46fee89085d8cd2519d30acfdbe0c96cc13cf69d9ae73187292d329e93a9f9ac527c4a9532aeba01ce87366ebb32f16d4270

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17b30b83f7720b3115221442ef761003

    SHA1

    926b1cd604c802949f550150d9e131cac243b22f

    SHA256

    cff221424adff374211d62a0f57895845bd82bc112e5abac81b6f43586432b96

    SHA512

    657bdadddc6ac497d10dadf0b718e8d4f6814f02b41c56cd73179a0728e521565bf034d5eea7d00313a86cbeb1cbaf679bffbc7ede90927259ab1cb81ddeb4b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8aee937585a7e75a07f35fe234dab27c

    SHA1

    bcecfe2beca58e5c18747a4800a35ebb8fed64b7

    SHA256

    749456fb30831740f6d94e189a8b2c1faa1080dcbd96b39db06a6c927813ab80

    SHA512

    ca65be52dd972805ec5e37a811ed6dc580d2da1051934bb20542c647da23aade3626c03b2087381e30f14c6454d8f21ddee93c2d297e20ff82f6759b7be212f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a930d07ad23b78c7ffe7876fb22693d

    SHA1

    bc96cd4f525fc6494fc03ba18bd25037bbed00eb

    SHA256

    876d0b47376eb4000fe3d516c2851cc0eff95116d8f8a3ee726ecfd6a279f815

    SHA512

    a5004ad3f6a247e1782949b5f5266872d4c464169b1e96a662b729d0bdac9eec15c61cd0ad530d7535a0eac8cbd86e2535a963db8b1cb93db65666892f0f6297

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8fd069404fdb838964b689d97684509b

    SHA1

    cb471eb65a3055106581b17b601d5716c6993833

    SHA256

    3bbe488a4ac2ab9a8b6ff0ea604d714418d0bfa4f713ad58ecd09f9af5608f60

    SHA512

    840812af55257271291b483d45755ba732860af6b475247a94041ffcb5e295ba16c5f317fd161cffd2ecddfd265edc0ec8c1a12a49daab15577d7680dcaae6fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de1fe08ad5218f8fef75fa01dd6b202b

    SHA1

    0851a7bc01c652e9776cf50735cbc8ad7f86230c

    SHA256

    b5c33d47dad1da5ece3e612a3c85868fdde3393e09195dc001ba9845230194f6

    SHA512

    235e7699f408026ec497ed6136f4b6adf6a1ca2ea7408258414a37196de6f3a6335274360ce80e1ae2eccc4bc8cadf92ff2cee9e61b270a1c4f7d583eab8c31a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    742c831bcf6875011f3869055e9a18ed

    SHA1

    286a2135b10bedc47857a939e0f9096b5eb4e179

    SHA256

    2f62af9016e07ee4b845e91c043faf72e7d8ce71cb65058c0be72d525add513b

    SHA512

    4ba2579928477dcdb2752ec9985eb67c2e4070e4fe42cc11eafd095def7e2ba3ebbadeaa2bc349dde920696d218f5e99e26614c70da747a76f7721fd476fa8e6

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I819HQXH\yuiloader-dom-event[1].js

    Filesize

    32KB

    MD5

    f48baec69cc4dc0852d118259eff2d56

    SHA1

    e64c6e4423421da5b35700154810cb67160bc32b

    SHA256

    463d99ca5448f815a05b2d946ddae9eed3e21c335c0f4cfe7a16944e3512f76c

    SHA512

    06fdccb5d9536ab7c68355dbf49ac02ebccad5a4ea01cb62200fd67728a6d05c276403e588a5bdceacf5e671913fc65b63e8b92456ca5493dae5b5a70e4a8b37

  • C:\Users\Admin\AppData\Local\Temp\Cab253F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2611.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a