Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 13:14

General

  • Target

    465733755151fb07a346c2ac7d025995_JaffaCakes118.html

  • Size

    45KB

  • MD5

    465733755151fb07a346c2ac7d025995

  • SHA1

    fa40f96b3d4f7ffa6ed48d2a4e8a55ee10af6332

  • SHA256

    9332b00c4d3aa546c235cee755b66ad3f69444e747186ec162a0b26b97360881

  • SHA512

    b4bb3b8afe43aeb94d2497d94950ea78adf94bc46d976a522f1d42d8756a52c96087417502b411f3af4a2ba65a2019c9bcfdca6bd5e480dfc6d0370e9840bad4

  • SSDEEP

    768:xQlxzatHusTpdgCgLiwKgSHW9hkny0+wn9A:xQlxMpdgCgLiwKgOW9hkn1+wn9A

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\465733755151fb07a346c2ac7d025995_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1808
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1808 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3012

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    8198bad27620e3380a17757c6bee1530

    SHA1

    d277542ea7b168b4e63363b444a4410e7e5d21a2

    SHA256

    7634cd1a80fa6e6bb0a93dbc85bc81bfdc50c574910ea27b63de54e1cc933863

    SHA512

    6f2ecb2ee0009236f785d626e8d76d080a5636f8faa1de1feefcfdc1ad3350af1d9d3d61a450f7e02936c068786eb98e1b7f57d1e663f337098f2b169fc9a9d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7dc1b7cc9eb48d128841f6a5c0a1d46e

    SHA1

    1923189751b56313550a7cb82bd31c8d4e5bbd11

    SHA256

    8057954ed633564a4b263114695e296ac0af5d9c89bd1520c7d982920542a785

    SHA512

    8f2c26e9edbbec47ddd9b663668c4410460b896aa90a10d7e761d1aff939005fba44b337ba16de2765fbe6f312139c283f93075b83e67bbce174387c5bbbf066

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00c5f7a8d1da862c0cb6a0e0a3bffbb6

    SHA1

    dadfc9b2d2db71f73c1a4a8f078c849f7ce343dd

    SHA256

    8fd1eff34280b16a536e27c5d572af192a34ad666a2747d7c2d906c196a932b6

    SHA512

    416d149050243c7e6ce4ffc60b8b7e5ca730b0c9d6a48b4f4a791051c4a6edfc88b9c4e0e2efef8cfff8b1f2217b4ac47ffc753d9168e36cc25cdb101e85f01b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29c93270f422c2322ca65f2fa3a3260a

    SHA1

    d5fbda0c921ebac1e6695f1cc9e2ceadda4b388b

    SHA256

    786bbb74d9f6b55f718058d95b388849ff60bb87effc06c402e429ab94150478

    SHA512

    e51d21b6d614197726f8d3e4de3bdd0237d34b4b14cde394c5fd185594028e2e82552162fc56fc6244dd28536a83dbb6524f6e0a1928dee561a5458711f67c13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29c002b0b83a71a1e7a549ae9c3529ec

    SHA1

    b01ba25ae02590bec36c45d6b523fdb10e1d67af

    SHA256

    80bb94d9ddc2604fb00d8ab1c0f335c208e187f1759fa2b0b48ca636aca29dbb

    SHA512

    8f6caf9a52ca4f3f37792c099273603a58155e8bebc399f0324a6656416549870a443da53d3e16291c33dcd01186676c0988c6ac4eb15c9cde485fac9ef4f437

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e56a2c2c9d7fb3c087b7877e7848ca0a

    SHA1

    86b1b73c43f35a10c47ba6b3afd945108b074382

    SHA256

    4dc9211bb13568df9c4cd5d1974090e35da05904f3defe5748fcd207bca10896

    SHA512

    4ae0156142103adb98c0f2fa9c5e6cd1e1fc2d99f1f82ae3ac42fb4b92d74f9e013b5d8a6afc72fc007405e91e1802ae61e064f159fb73007bc1b8958ab47005

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    624d37f97edb858c3ccd4fbd6ed08fa5

    SHA1

    a8c64a55c0f8edc85c150e3978d52d741c2778d0

    SHA256

    6e085a3a3688aa23bfa2e5ffabb7360fc8e263615270c6bfb2e12fb42927c328

    SHA512

    26f18f4478dc3b31a0f9bcdfc488fc25fc52486f48f29935a8a3545e8e6033d50d4cec1b6862870e586aea395313fb45b09fac1ffb6b33aef164a736a3c3fcaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd8947558431994a41bd8a4a94ef945b

    SHA1

    5b7c4db61e124e924681eb0fb4b8e9edde514466

    SHA256

    bc31ebcd90387590f6a8f792f8804a939222a702bc828c41f8ab235b0e71a579

    SHA512

    45970b69bed575d1d7c1e18ccbb84af3fa374527aa49e40ccaf8468b957560bd1b02b73b2571e82cb15c52b67999d46dbcf2e1c2c2b7e399426371679cbc8cbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e20545d1afd0b17ff9ec64300dca752a

    SHA1

    61f03083851e60b65d1e0e0b155dba8f7be0dd31

    SHA256

    470c8aabebabeaf998daee37c4ac5aca864c816af970ef3659760299ab138b46

    SHA512

    94759eaac1cf291b9b2bdcf208bb1a945aa1249c3f3c8d401f732d6f063380805e19c0bc41b38b9bee28accef805566de15cb610e1c795349e8788f3b6375eb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    474e6edf09a9bce2d8759949747b7b92

    SHA1

    1520421e06af8317194fa35abd8ec63cfa9a5f8d

    SHA256

    839205231a6148d2e9e2b125b890d0f90f0c6578871a6cf2b80cbacf2ab106f1

    SHA512

    4c7ccc8362f8f1247fd13a20e4baae1fd6c71b60b17d92e715b6e20df23a193651f5189362293890025cef2824fda5578b44b01afc131f731f7d61f43e8a6463

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c83f2b26c91bd905243014872095774a

    SHA1

    93995ed5cbc68390170e59ebcc166b8af4d6017e

    SHA256

    b45259b3613f89d996d6a18014900c56378d1cd363770d0e5b1e9be644f067a7

    SHA512

    16275b4f7669409946b0634a638c12ac47b927f6323dfae6433d6cf77884940808cdbed6b0510a14677bd47f6001a83c78996aa5117c117f4be02f4f8fbc94c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45536b18e706138e68b301327d627934

    SHA1

    e1d2cbfc45aed7158576f02cf4abcc98f7edb386

    SHA256

    1ff499e493d9a956b5a627d0ebc4da65adcd442ec91b035107420a31c1fbbbee

    SHA512

    4a8938b0b6c49731232f632911c47a9de7f5408c1760fee0c86eaca264da06b030fffcf257061c891d31fb6e071096578ab8f0946f16744444e8d494fb986013

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71cd0d76fb0697fc44114a9b7bbef730

    SHA1

    874d18a2af82f3870daba845b4d4c8c214c557c5

    SHA256

    37645861466fed20f57481e9c766a8cb0d9dbaf72bbc860114560fc558eac85b

    SHA512

    1d7da8a484f7096692b9e034fba50abb258fba3f821a3277bd33cd7a32ed2765291e5d744c6f4060e30b334978e0dbc0dee04a300ec6adf9d80291adc2f676b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c4eedb6ed35a185d57a6bdcb556ade1

    SHA1

    e8c807bac875ea279adbbc717d433c1a14870e34

    SHA256

    9b5a5507443ecc6c09c0266576ffac8233a0467ca9173c403083a79b25e31565

    SHA512

    a8d1b0ae2bdd81bf09962ebdaf2096ea8680b842db813b460f75e58357365adc81790a6cd38da10b7dd0f66686f1c94769521f20522a360eb58baa181ed1097e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c97d05f441bc6c86266c164d016e911d

    SHA1

    3f0b16ce02999aeb3329b485eae3a7c2929f2115

    SHA256

    122a2b57ed1639cc62845101fedacdebec7ea9b5a21d78bcb2609d7aab3bebee

    SHA512

    ec3d73f371e9261ea96972e2030b69092c9d3e20cc9f2d2adc1b66cc459885bbed26c838deced8045886661df8d81a76d98fc7de7ec23c72ea0a8862462daf95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d511d079923e3b26c372df099fa7bab

    SHA1

    5007f7a6de63d6beece72193221d0ce2b136f801

    SHA256

    686f6cb6f4ccbd5325572d96aed4ae27d4bb1042ef4ec25f256b6d1f10054206

    SHA512

    3cba1c90e756ca39d291141d4f70f3115e55f38315a20c262db4a31afb96778efe3501b6bb4188eb2cd4b5f720937254b9858b86143b65033fd23d93598af9cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2249e427ad29943730bebcfd05009a7

    SHA1

    4d05be100ece92748d97b568093f9e8be607824f

    SHA256

    e6ddbb3de58df481da092bbdae2389adec0f80a40479acffc07a3b5d30c5a431

    SHA512

    46aa05f62c1818c36997ae3aabd15496c4898f3f900aadf63265a1214e036721d83bbb38ba7b0b63f5d1fb454bbfa4aad119ded290a1acc73ca76d2b6fdc172e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2b3409cc109f31e1420e8c79eba0dc9

    SHA1

    d6ce8eb0fbc52e44a96b8cfc99031534438f2774

    SHA256

    1e3a53e445cf966d256ca902b0bbea7d358c5a60271f6a5286e9fcc38bad857a

    SHA512

    e51ee64924d487581f3f5bf13037c5237dd99032ba33780ba6eda105220eeadcd8e1bb80d180f297ab5655f02cbc5a40c23fb99e2f3769c4516fb9cd2e128f05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d09c476ee4e90802196387342624cfc

    SHA1

    a8395da5a007a5c55cd6de0a47081b067a60e112

    SHA256

    9f5d77abb28b746cee0e3c8a4bbe60c71ec5110d3bfacda2028a25b060bd48e0

    SHA512

    bbde4290cd6b5aaa178fdebea70e3291e1d6cc3d6ac2068f9c7096908dd3d44bca98944684055d3eaa2fff3a29522705cafb931541180a58c3fdf073e33ca5c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    572b410064680b471dfc1a1faa78a8b8

    SHA1

    8e10ffbd7f5e4708f5b36a714a359495eef168ae

    SHA256

    4ba0bdda16401a863b12d8bb25fdb19c455e84ec918fe05a62dd9f338b2c864e

    SHA512

    d44b4a4c59cdde5f54d41be173b72f813f11144d1e7c041dc324e894a680682be8f65f8f0a19a259819e59d93425a09fca48a382a5efcbed41fd18f337045f68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24d5a1a495455e3060afd1570687af2b

    SHA1

    32a53d8c64145da41af6c46d6aa4b224da3831a0

    SHA256

    4309d50c338ccdca60660210d62b29d3c43e9e0b2c7cbea0b5b3b9d699df21e9

    SHA512

    b73f16155b554b08e7d11aa09284c61f9e2e90ecfdfe040dd42afe85f1045d4654bc9b451f5c0a1bf9c6660d42a84b5d6301e232b3da5e1755fd8b605a1b66d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac90ab238b5a97d8924fe81f48af03af

    SHA1

    83b221c5e38430ac9f7f3bb4ed207550781d6ab7

    SHA256

    91f9e4ba66be302fdc547872931de7ecc4981cf39f6332baf9a4c0b73a5b1315

    SHA512

    018e748ddf230dc04c34835a93a5afcbacb387f566c367fc7f31b120b5efcca78edc404866edb58d017a9e8057441415fccf0461f81176cd1d6d8d784e022bb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    5e47cb8cb33bc8d04d4c7109632f131f

    SHA1

    03a7445749a779ccc3b8541c64c9111d0842ef3a

    SHA256

    f44870c7394aba721171f83a84878062bb78771152d343e087824df7c2b02318

    SHA512

    b81eaafd628aa2257b7938d90a2bf972e7336c59a60452622300230724c516da972dc0455f792a8887b6164f89c6a8718ecdb8d334ae092ec217463b9334e163

  • C:\Users\Admin\AppData\Local\Temp\Cab9FE8.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarA109.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a