Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 06:25

General

  • Target

    49c9453e4ebba0f3130e2d374281b17a_JaffaCakes118.html

  • Size

    23KB

  • MD5

    49c9453e4ebba0f3130e2d374281b17a

  • SHA1

    859d77342a7ed1edfd97d0523335a95f0bb6e13d

  • SHA256

    35acaca01524757a275be53cf7e1f38bdf82dfdf5e155ee2785b35ec710c3998

  • SHA512

    34f8db5d9d64913b5f1faa13e5031dfbd55e7636e41f2059a4809a316c78a65e3ab22503108ace54ac0c2a7d806429f14d0ead4e77ae62f7377a0f8985f88499

  • SSDEEP

    192:uWbIb5njSnQjxn5Q/SnQieBNnenQOkEntGwnQTbndnQvCnQtVwMBhqnYnQ7tnYYb:SQ/iHO

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\49c9453e4ebba0f3130e2d374281b17a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2356
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2356 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2108

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c85842ce3bdecd8de37804aa0552c8c

    SHA1

    d6f0a69b3e7b6b5820083d6c9c4e41ca214efd9b

    SHA256

    6727f7d4d76aaddbb2299aba6edab7090ba25be1e56cda1618696f162231c71b

    SHA512

    e3b5162f5a422f82ab230c33ec6d7da1e9f7acd3f6717142e6b40ca0a615e6afc0c73406f67195d1e0e87a2de7e72d480ff594b448754eccbc87554a842558c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3f10cb97b5e0e9b0d2f66ecd86a0dc3

    SHA1

    8d45fc452a6136534b87421fbd6db8fde25ca350

    SHA256

    0d9ea3607fac282a82369d07eef6d485b6e0053fad7528df970d348abe0fd38c

    SHA512

    7f75ecf2ec8ac53a88bbfe9300f531a162dc8bbe2c8f413e873968b7953fc0744519dbdd329552a3e56c53f0c7083cd676d2c14b48c1bf2befaba0c2b176c2a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a445b12d01bbefee0a5f40b4945f9be

    SHA1

    c9c725ec19614fb1a9b7a8dcc9f7fd61a8b6858c

    SHA256

    86ff45b19568a8383cabaf207283aa8b22ad17b443c5bae993e72c10de47770e

    SHA512

    737a2d9a770f9eff98703b49ab906d39e03c4516b6fa3a28916536edd9c0334cc90c32fce98eb31fa8685045c21f1d69ce32e283deec88f04f652f990e1fede0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    105fbdf0e0efd95dfb058ebd12b46f9b

    SHA1

    391463de89483a4235c2cd5c796d2de5695d8d15

    SHA256

    2606cf3f0537363fd31ef4ec894ea9cfabcbbd7057105b462aba82f7451ef9d9

    SHA512

    fa8f635767214c1227199b300645f7cf68ab79f0eea41091ec262b327b94c08475ba40e1e7ebf15e5f24afb94453cbbec481e9210398fedc967b5dd27c12012d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c468a4c64b018ee93f99a0f61530772

    SHA1

    1061f4f544fc39c254ca3b8961f2b945e41632f8

    SHA256

    54919d21b56990881dd22405d7cc5803f61b248c4963237b48b897fb6bb9e4fa

    SHA512

    cf31dcab8c2738ed836499a425f6732fc8846b26bf9fbd6e848d9dc6776891f53b182cc22ee63278036adac216391c4581461e7d38f5e777fe4b2bb9e20b301b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ae8ba73b2e2e5eabf78c15f2ebe556ba

    SHA1

    7521e981e5b952d807f00c688e23a4cd7a88c599

    SHA256

    bf6061ab98ba0260b89f58f69ee8daf9e6845490c9eb512a22ec8102e9400378

    SHA512

    8ed1da3fbeb996dabc5e8af93f9e18947b4bbc42333b4f5c69f3416687c2bea9e8c78cbcc10534c248f8b1e8297aa9056c8a1734152c43ce53decddd46214da3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e68d87471287688c76610811caf0390e

    SHA1

    59d8a9bcb15a02c9419e4f931a247768e2572720

    SHA256

    9bb514eaf8ddfdfd3f8346595e07036961a05997a254ae96e127b49f771f9be7

    SHA512

    58a85cf2c06148cd85cd37687c4ee60661ba0ed145d54c091f7c9ad477f73ade8601b5d96e97e51eeae0b0e3ba8e8c9cd54c0331725198f4261c016256bed023

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44264ceb2354558dcb5efabde8999f06

    SHA1

    fafca2d3ce22acbad161476805d69f2c684de6ee

    SHA256

    58ff334ac0a327a6e71d051fc038eb8b3b3ff6e260f2379b5e7205c9af1f1425

    SHA512

    aa88ab24875afc6c529beee5c9ff6f27a2516fcc433b61a593225883197c77029e6e605006ec6a7178cfe8ef7a8c9e9b5b5e5b68c794e1b2d3004843334f0d7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8dc5266405d4c8b228299099b7b08803

    SHA1

    669c7734614c58491708238cd47626f9eababdcc

    SHA256

    4dbf4723b08e719c136214dd74db6bf3538ff088bb0533be7b75949e7f5b48ea

    SHA512

    137575a757b89ca346057519c18d4232b84f6120783e8c0cf292445c66b3836fccc3f4ea103db8428f58433db0bdb31df4ec16e84c6885853d4d38c8a898e2b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c20ec59a7a8b64c444fe6bda1379ddff

    SHA1

    d3c596a2d0f5e3f7f68b719d64d4c853a730bb77

    SHA256

    05f69da674bfd0749856bb1b6decb16654b4cbc4d520a2ccd57ae73b825f29e0

    SHA512

    c83dc6e1af9783390aa0dd6854f37a309c174251a49448a803cef9260ebad39f4213f6af19b419cc9aaecabe456c3069f0ebc70ca4080bc945f81e69e54a3098

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5aaf576fb60a888da8cd1ec669f3cdda

    SHA1

    9122b1cfcb8ca34b4b19c8252c0c4056b4ff9c83

    SHA256

    7f0bfe354a8fd03e31ef807da8b369867225a0c03bfbc267eb15dc552920381e

    SHA512

    bb067ab472944e11fa83144c3333859b3d10b9ffaa5539661c9a691b7ed4fca99c12f4433efc56459fc62c9ac41c1aaaf86c55f05a371fda998e45e9d8199812

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    936e1003127d0f1e0fee88ac9d5edf88

    SHA1

    baa5b670610c205b703ab70cde24e9093f4ada02

    SHA256

    d5bb303956ae45946305d0dd2393fa2ace919f104cba2bb707d62afcc8c17f06

    SHA512

    b9d7adf1b477b4daecfc2df20b2c5965807548d7535fa244ce0a8f3f1b264fabeb939fc176471c9dc81bbf27f9239e958e0c7b2e94d6f97e658f029a8e91e398

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01aba8566fd6427fe7f0fce062d94803

    SHA1

    db5d62c8c87109ed36568a8269183a0a42038bf9

    SHA256

    7b3008be9c3765a15b3c245ade897f462a127f7dc8a3c0621da5f03601872b9c

    SHA512

    c24800183ce7b0bfe6be4b1aae244eccce88ac818df236fb8b4565465bf74087252829d75b51b8036ae1489004198c7086ab0377c419776472058c57576e2513

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5778a451d761826996e011763a2e04f4

    SHA1

    1fc5d26adde1596b8b06eb1031a66122a3bca533

    SHA256

    12ce56f56858cd6905a299c4204d3db3d1db6abf89a06e3077d5fecd0286f3f4

    SHA512

    fb6cdb2488d643822b833db2f866b1537927719ae43a7bdc6fe4e8ec977b6cd230b38eba6073687ffc2c70abc57f865655bbb1451809695f76a06ceaa1e29c18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66930a1699f97fa69a087fd6fa355245

    SHA1

    fddbd0877c94d835772fb0fd8c915e039d111f34

    SHA256

    f78c21f944ff2fac1dd1a3dc9960dfd33c81bc5d2dd1313b455a090213d75974

    SHA512

    f540e423066831406c5442261b544011738de0c84c3788f6fb00805661169317539d6cd61f84c219ca373dd721ff23acfe360bca360196409bb8e175c78cc918

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    579f5725eb8842c00cc519e85faa803e

    SHA1

    68259127910d5d88e0427d2a8551d0e7ebb4d439

    SHA256

    8d5e2542047d69c077f73bab17f6b498de4c8ca2f6c05a9895eecc8fd692639d

    SHA512

    c93f2dbf4f62394eb44842f21ba1e91d477349c38a71e88d81ec58b66b9163d57fc63d1efa94d1dc545ffab9aa635756e3a4e61c7732a964af7f1e8f7cc3652c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b313eafc8f25cd661e7ec92ad89f010

    SHA1

    cc47adbae027126254d02b9d2713b0314c32a185

    SHA256

    87634bffd9fffcd035676c6e044010a666f5ead2c6aa5eaecfdeaa485f19d9d3

    SHA512

    4291bfd152d4858348ea86de25551a95c8ab6ce9fbe7a9d3b683eab3e59609212e01b289fd1a078abd216fc7ee9f4bdd7a48af754b3c3963c3b16bc8023d46c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcc1e54aaff4ee003e3b904f5bb13812

    SHA1

    7662ea60adbe278b0aa3702e2f564fb966593c5c

    SHA256

    0b3e21fc237c99a73c15f6b2846726bfe494fe06fe979381b378e6770ef689d3

    SHA512

    999a2a83ddfbb78848a5775c6885abaed5162beb12e1627a5332a423a731a55d02c756c1608adcc81abcb3621355521a760c30b7c328767db15002449e70d2b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36e82d315183fa253b1cc96bcad3db32

    SHA1

    9ba68b97f96ce762f44b406d8e4b94f551afcf3c

    SHA256

    1d4faf7216fdf54a4d168b53ca0420a77522e8e37e6b51eec54a509d90abdcf7

    SHA512

    deaa63115ebe41c4e21eddbc18a251b911228defd670738572530b8ff50e5d92dbe661724612ef1682c54c93f2475cdc7c76ef8557a9fb8abf9cfebc798bd147

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    352c3ed2b1c59fddd073511187157dd3

    SHA1

    8618e35d0575ef4fe3b2558fe9ca6f3a07274987

    SHA256

    80531390fae2714826da50067b891aabbac5bedbc0229979c7097801b7bd8211

    SHA512

    d670996003fbfbb7dae26cf9e0f64fabfe32e92c357c835135a545c105a16ff53d75870311c6461c56252cc140bdb134edbdbe7ba088e073cd2a59c1d14bcf65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df5acb77f0f75b6ad0ebb838869541e8

    SHA1

    6c9fb455ee50605a6a7f768254ad6690467e0717

    SHA256

    d2d107cec7d2955c1e44c12aa0ef623d403b261281a751475486772544a480e6

    SHA512

    dcf7532950eb7872a17579106c3b73a32098a7fd6ccb8ecfbba5012d79b4b04a7d6c37e8ddaa174f3039f78d73aa17c12d2f582a4c1aa73f5c9b9ac17ab9d410

  • C:\Users\Admin\AppData\Local\Temp\Cab2DF6.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2ED8.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a