Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 12:07

General

  • Target

    461bc041906919876587183aec5010e5_JaffaCakes118.html

  • Size

    157KB

  • MD5

    461bc041906919876587183aec5010e5

  • SHA1

    62c77f80dbb7483824c04497475e61d7697001d7

  • SHA256

    5eb690f28725d6ffdf4d5a1092b1dad990e8c5e95b22782e454ab6a639013b43

  • SHA512

    5116d3143353d4f1dbf7d4902480ea7a3272d48bbd7466950c683e53f1d8593cfdff496f70ce3148e42f6a1ab1a9a07753a9bf23c15404a219a784fd11e7c72f

  • SSDEEP

    3072:uvEzAPKm3WlPNUgPyCzyfkMY+BES09JXAnyrZalI+YQ:8EzAPKm3WlPNUgPyCWsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\461bc041906919876587183aec5010e5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1888
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1888 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2380

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36b1e363c25e0bd801e9546ef23e3189

    SHA1

    00caa683c6d89632f36de93fc69f15e18a0ebeb7

    SHA256

    efe03ed65ef3e91c3f4be6269405fa73cf49e1a5e6b9a50816e749b9bfad5907

    SHA512

    98c3545f0f1d6a7b0174f8ec4e9f06ecc9d6821d93f9618e94adc1e06bf473010ce07261b7fd4cc64341ca7b8ead347b0f5b945354bad96fdab00390ca758fcb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18ea84337b243bc061931c70f3ee670f

    SHA1

    07b96f14ff17f530018cf064f2f1d06457d43e2c

    SHA256

    ad3ac598699f18de4f1d809e188feb63fd4b102350015235b6f7af2e78e04d5b

    SHA512

    c3616d8aaba9e063a32b4d6649e517df7dd586a94e1ffad5fdb34f13e584fac80a5bd2d2244c3951fbc9cc766e35298baa0a5af2f740a768b83d7194ed3c438a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e5b24b4c1f55520c5a5ae86afe30c51

    SHA1

    f2b130475a556dbbc943586e840be8969f047dab

    SHA256

    279e53fbe43c3dbdc7f2a39cf25fcbc84d47a7021ecc2c00e875cd895366031c

    SHA512

    2af9f1ff39b5338357b40a8c46f6d8cd805366ccc4f5b318ef46b69d7bd52b2c93317b218a97d6df9ac0b5b362b4c8040b918bc926f71772f24a049fbf37445f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6537736b759482b40f89933a35e94580

    SHA1

    a261918cdfa8b1415e366a77637a44e88262e343

    SHA256

    be0618abe4d50feff4aafe047dba2725f7baf5e8754aaf72a022a121b2d5a823

    SHA512

    183ae213abd3eaac10e21c12b7eeb4d2bb116334372bd680f28d719396035e6c04d3ec874848a7692f9448b699b18da3f786a674739365099467c85918b71116

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d772a2089aa9450cca050554f504af6

    SHA1

    882335944064dc226548e753d698227628171841

    SHA256

    7f5050c5d4cd827860da83e8e7f54086d870beb4bdc9248ccb0307e9f2a70650

    SHA512

    04fbfeb527fb10f73949711c5b10a2ffa7ebe07c2774efc2ab476742c0cd97baa98b4ba986976286d96852881cbf102405e788d559b24680f18733e4877cd2f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    328b310df4ea270477d64c4da7abf6f8

    SHA1

    95127b8af6416f33f4c8ab61bf2ff78010429c5d

    SHA256

    6e1968442108f0f19f7bfc53bb584f1ec7191485774f824bded5ba3b2c5a17fc

    SHA512

    d834bbbf3fc7c4908508d0135ad7df8d7384d7b8fb328696a037998f612f327d8dd5927451130d79feb2b7e038a406bfa0d0eb440e63d0cf3f0d086b885d9238

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3ae408f721f657efabb0014c25b46f0

    SHA1

    9b80d4486e7f7c5d175814f78a70eb18a0a839b7

    SHA256

    b18abc9655897ee34505d4a5dff89be2da2ce49633bfa22eca230d4bbf4c9d26

    SHA512

    59b4ebda8578948c507bdc9667df72abf6686c95cdf6be2a00db86dcc97bef3d86cf28fc489517a28cd77490ce83212ffee5cf2172f9cc252b47c6a448b70292

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d4d3ca5301b0bb447e51839da8a4e01

    SHA1

    7f88092311e5be356fb05f8595a91edfbc671483

    SHA256

    16b02b7426b0bd8857cfc148de3f9df7f5a76c967053f04af831431f657e51f9

    SHA512

    3a32cfb71a7687a871b1dde3eb3e3cf691c7e66f2fdcc05c35e2098bc160b1c869c6e2757de9dfa5a87ae3addaf5944c692b7a5397a7e7ca0ae795f6406c84b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10eb72489a3d643044681a1b0e0badbc

    SHA1

    f58c8da3ac65eaa0b7a57190842556aea604c1e4

    SHA256

    69ea015ee1671e92dc45a585434586c56b4daf06afb761518e9f92e8003831a2

    SHA512

    4c35a273951cf887e708675fe0625b9cca30e227941e8b5b49d47c6e9a94b6700c9502536ad0149ab21c3253e2b9e1f3afd3fc5cd4abfb2110958e280501faa8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50cee6d870191647af2f8b1fe36c6ee1

    SHA1

    1586653d9ab9fa8cfced525ff1363f6586581537

    SHA256

    869abd5c3c5a2742e69759056bdd9f5118e8c2505e43ac90e47d1c305b25f4ec

    SHA512

    eb6f4efa0093f24d24d2656e7e9ffb4739528ac2921384014e5d0f274899dbd64b591686a179d766b3feddf9de85f09e934589908cf0a980b6adf57ed4532a55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc3b53b473b131a3ca426d904fb52518

    SHA1

    631eac7303485a3ae76cad47cfcb7228ee9d9f99

    SHA256

    6e1e7146bbc45ad80b5242be469af79bf979690ebea93cb3d5a426975b879258

    SHA512

    8b6398a44f7513b76ce05b0c23dd7764ccbb50b09070d7e04854559b7141f885634a1770573b356d180ce8786a3f6755c7a65ff76566cfd7311dedaa2cf966ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    233ad9039de94bcd8a530571deecb529

    SHA1

    780a45bf231d7fe54b79a9abe9fc9f3748437a1c

    SHA256

    cfe8eb5b905a1c640a1977cbb912becb56600c1bf2e037c37b923dfafb821da5

    SHA512

    b33803b906feacfa75ac8d322c3e7d3f80b556c8bd8d54dbbff0f19c395cd3b1260951127a399a115b85dc2ca95d80b09468d20541f09902c9da43a373733417

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    053d7a4dda2180f928e861a90196cf7c

    SHA1

    70345e754773e94f22b50ffd2507e6e4ab877e42

    SHA256

    4e3f26afea21eae70bd5a58d1d780fbb39eed2f1ff7c9dbb7586f1894b37268b

    SHA512

    526e863d9bba1e29819a541ac9368571783851adbef2dda75fdc4de405e1ff0cb9baf076ac7b35020ec1a490ee668449e6226a329dbb2adcd564327f6138958e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    adfcbb808d6adb7ec9f25a2221039e45

    SHA1

    a2f49de0b788adb89903e22fc8af6d890f438e8a

    SHA256

    9c48260e88e4ac92c04b45569aeec969460aa2434febf7471295dba16d4985d0

    SHA512

    35fcb40fb0f0373e0e4140ecc9f04208748124ba13e90186dd2d0508d02b41681ba122fd4178e83f555e0d8407ed84962ba4fe886a0db643f7cd0f26dc4ebc85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f579536b4e9eb619bc563920d1b57710

    SHA1

    583d68e806bbc21fcb8973cea7000ae3a71afe7d

    SHA256

    d13ae418d939ef8a0d494d25b754e7a0a087a3e5730fd008bb400f822f47fce2

    SHA512

    a4a8f2d82735a2ea55d218ec0d53ec8ccb93e969bc7d893e9ab68df1958ee2dba8e699bb8b1e908abc8f7f1304053f9ca0af2c87ea12818cbc3e5203468e1bf5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55ec54cde56d2b5144724f966503521d

    SHA1

    b3d2d9aae59581c69f3b8f54e59279ed1ed96839

    SHA256

    ac0f11a7aa19daeb9e38ce05b63e135b8b91ea55702af3760a45068ab445db3a

    SHA512

    9d738706bfd6de0ffbc00252f556e353c263752e17fc378d237bdba50a7c109c42b06a754cb4d548287aded383944ca5e216e3fe3c4ed19dcda34b1982601487

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d7a39377ec475b3ec9a0e89f6dce002f

    SHA1

    219f2af51095da514c6fd2e932228b7791cb0630

    SHA256

    92ac9a280efaf7a231a8950f6d37e4e61bbd087bb8a8b04b79a1e75428c8ac74

    SHA512

    ebb29159a1438190d74779f47aa614c7286b6828dac67a2acda8850f1fe6f2306cd61191914c1ac53fe84b2038954d3cdd2f7a77341e58f8e2d412856dcf25c5

  • C:\Users\Admin\AppData\Local\Temp\Cab48C5.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar49B7.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a