Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    137s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 18:11

General

  • Target

    47668bf393ed55c2c4c6426b0200ebaf_JaffaCakes118.html

  • Size

    218KB

  • MD5

    47668bf393ed55c2c4c6426b0200ebaf

  • SHA1

    b5050b6575216687ae05c8b190ade9bb0c9b6523

  • SHA256

    2c7563d3d395400fe70004cf2d57cf94fa1c6671280dde6afe705f8bd879b506

  • SHA512

    19d75e59e6f17a1de8df2b23562104448b30531a8711a81f46e95238a1c2e9240debdbd0f8f4c863d0c1592fcaa482894d626216ac5da0d1330a374ffc7be871

  • SSDEEP

    3072:Sx/Ie6K3OVxGHyfkMY+BES09JXAnyrZalI+YQ:SxABK3mESsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\47668bf393ed55c2c4c6426b0200ebaf_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2612
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2612 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2516

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3a894a30d76ec72bf82c5c341790e25

    SHA1

    fc3ba3032c303023824cd26c1f48da5a400953af

    SHA256

    f3ac72e5f80cf9f3a974c4255aa83390731503c1d77088296da24a6e625c24cc

    SHA512

    862c99e25b1c58ddcff2399bfe658729c5a1f975d0275e29ab6e79aa6cc2eb26f6c372bbad4a710abf8b85d799b6b8d1f6275ff8fe1ae972a324d661a5696554

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ebb92785a631bb3e317009990899df8f

    SHA1

    429f52262faf022473b8330d82d8d3fc3b32ac9e

    SHA256

    afe4f416a4c84d72e1d1ebdf69d453989d24efd0cd5470ab75efb5b41d9f7b0e

    SHA512

    0c3185c6f820cdd3f48100d3a2f24d030356ecddbe47abc4fb235137cd64f925264a4499d7c63dbaa90c57a587d1141cb04e9c6e620c4b2d1491f0801dc0eebc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb83b87292236f1260fa236a3a3499bb

    SHA1

    1ad388bd14f8b2fcdb5756b73afd1a4a52f06e2d

    SHA256

    4cd500cebae7d709a8189ce23d9c8214d6e1dc7147b9538c7af68f57db53785d

    SHA512

    1eaeb24df3854cae8d642a5d857d57b782d702fc3cbe6bb5e4ac423b974410c4a924b2916841d32537b33710570870f22323ef8f08278b77c6733f471b402a7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34b6cce6e59e4ecad5e67bf167c361f2

    SHA1

    369c5a1d1b7a9158134e3b9ea58dd07e736c8b1d

    SHA256

    61b900c94672382799717ce5d89a74365fe069c8c3e88061b878906b0f5729f8

    SHA512

    b15158c0a58939965769ba2598c3424efaae8984e5663666aac2c892d657c85713d84e14492eff569aa0bc2e647e5b9038e2dfc004f9efc3ffca71c231ebb8c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a22e8d190c93af435d2646c9c56b5a98

    SHA1

    02890e6fe3cbf3399ea971bf4442647e1aa56fef

    SHA256

    adf578a807a6537658fd4c39ce440a40ebf29207b698efa0ff3a912b05afe1eb

    SHA512

    559cd7884f18f2297e1d0ebe73be9d9efa1af79f3fa81464b79f6ff37524163cf49f96a6dcfbb08829352f9217b01697e1aae6a55691567106f973330c66ef7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7d6019fdc5ad4765ff3cfd7624caf62

    SHA1

    aa4cf95d8597756aed7d3567b85e94a01a2d05c8

    SHA256

    f00172d705e8fba04726e59bb9c11811acdaaddf39af241c5139979767c2f34d

    SHA512

    5c4c435419d990d59709ff8bffa5636c534f155c1fe537b42451266b58f4a41f5de5b465f9746cdb039064f53495d0382581ad76beb003c19a4916099d9edd37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f6fedf9155aa087a9a0caae03b6baa5

    SHA1

    45f4d1d20d18bb05087f363e95018d41caa4946e

    SHA256

    30cc37b71349a5d6cd2acfbd1568b0654107a595b9c2ae974e44aa2197770e48

    SHA512

    935e0dc8811f073e13ac80bd00a1b9180316260cfd3490b05f5801c1090aeb10f95fcc85990fd6241753a85d4d20c24b7a80be09fa050e7a7277e5b8b0b8a06a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff687cfbe218d06be35456d10ce298bf

    SHA1

    9c219af0f479de32335590d7d9b337cb67abd63a

    SHA256

    bdf40319afd00b73d17b12367494d54a602b07a29c221307fe47db8dac1601d1

    SHA512

    b23e61fe8837ad23ae235f21c9da50364cb4562c632cedf176ea4d4d92c2944f583bb860eff38118f133408aa59499f2e3514b02a2dad51cceff26e716d2cb4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eeee8a5d25395453a5dcfbe544052b32

    SHA1

    69208fcda371e938b0f719acd4472f991765d293

    SHA256

    f94d0ae6e6ef8d6d73f06e177154022b46eb7feeabff5a24fd4d015e11d25052

    SHA512

    f8fc7c8e864b57d8d5dfc7c0dd13cea0ed31f9a05f1daacae17bd4502fce7e0c8e0ef83a8a251674636dd63ae43f702d604534ec8a1d5b2246c0e733431e42cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5173ae9a186476e91578703b3a790be0

    SHA1

    61958d9c2ab4ec761f9eeec6d167f2202cc512e4

    SHA256

    0e1a353e583f723b490b92b6e7dea2dd17bcdce5a024c35cfe0a232dfaaba50d

    SHA512

    442bb4c0a8f8b58e39fd81a72e8e5235b56f3f4826e99aacb4c6468baac8768a70a73d862b16e77be20c5c5b9377180ece26da5c35ee18d095a8cd03b92bf6a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b350490d8a1a77444932a0d52aed738

    SHA1

    2ff69f6bfacb12a63fbe7c715fc5eaa1c4afe161

    SHA256

    b3ed8521d5e5d5892231ca90c20e7d96f38482655ad716b8df3f7c6bdc16b2d6

    SHA512

    1e603aaaae68cfab19368f86221478237d011ef98a13cb6ecb0451274053d53538a3d87118214b722d24a9c5a9a0cd272b6a55da5e2a4fef65aa4f29aea580f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    70dc6d0f4f796a0443fbff1aeb0153e1

    SHA1

    ecdd7f33695bb8b5cc218b486c8c621d13c4bc36

    SHA256

    d5dc6817932b65bc485f6396feb641abbb73de20af46fc663d72fa44a87dddb9

    SHA512

    e93974966233c42e3dcec778a3616102f726e0d3d608f48ae56ae16225cb40bd3899f7fb46e0b14b20c40bc0c8b0b00c6041a4d69429691095e9d9ffc79aa1e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16d3de67fb70df8208bd58071e3ac850

    SHA1

    6140e51acfac0f0433665b9030e68c9905225c9c

    SHA256

    aca069cfa15dc5def0c0dab275d0bdd7f9b106ac58bf4edbb0c9ce87db6bb271

    SHA512

    2c0f0d27e88a1fab682a2fde060afdf2ffb0383d6fabb3da7d2617323783cbb9f3875f05c257e2ccc6aca575c82ea8fca4a7a0335a71524658293aea6b5e4bad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dfe6505f3dad366884237e4e283a3bdc

    SHA1

    18213500a9c9ba6c4bfccee4f5d648bda3f55303

    SHA256

    f113f181ca141b03056acfe8e84756077111cc0f1c7297099b4b449cb00dcc71

    SHA512

    03503269fbf2b1799c4788c108ba93fef6cbd6dced0771f5df04879fdba942b59fa92e8c07b7dc9c67a1547a0e3495bd52dff5603cbcf23f7630d8dc909c099e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78812152f76493cc6cd12b2d7af45fb5

    SHA1

    d0eb100914547516a4e50e7b50fe327bf09f3fb1

    SHA256

    062a7372e8bd7b601b827d3ab41ad8b3b70908454b61b79baf598d52bd6b30ff

    SHA512

    c8940ac4e5419b2e689542e6addf38658e84e4976b2fb35bd276161b9ead6807dcdab5775644001c6910a5b2cb3e54b740fb988ae9c45c5e1134581558205604

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b2a90535b7c1b198eec1f738c1bfd05

    SHA1

    0c75bcf17c6a311748b8a9053668868296304488

    SHA256

    626de27d33966e849465716dc4ee89be5ff94297703c70c4bff09ade440005c4

    SHA512

    c67b66cfc8883f0feba6ef254caa4c6a6fcb195cb872ff24131628c50a7aecd00616e7f724ac4aeedad507f79e10f8ca9badf55b21af70edfe1f109b1f72916d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd65da9dfdfc03018f6be3e1ddee9021

    SHA1

    ff590279f54486685d3940c800b17e0b4527b2c2

    SHA256

    bee35cf6527e3c851e36112fa6099359899fe4cb7ab036c5cee6c7633669b6ad

    SHA512

    4fde9932b778e40b689fe49fbb2ed1fc032bb31f7ebd3d7186d306eb628ac55c3d726090a54b05dd9ea33b60ec30b3a109cffc8d791de3e78e7e8c51f27a64db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab54fd627f6d49599f26124c3853d8b4

    SHA1

    0c01b2df2ff193774a906ef50eea2676447da3d8

    SHA256

    3c515dda81b9e22bc50a74e452d1707e1f4b9b302a076cd3b20df948ab90440a

    SHA512

    95ad897f6aa5c9a9c4217fc5dd511408f9e3a9d8f65b91f92e9d397375de38cbef08033e92f6508383bc4f9857b4334cf83e6e35c4c257f8bf103ae52c5870d5

  • C:\Users\Admin\AppData\Local\Temp\Cab92ED.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar943D.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a