Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    17/05/2024, 09:33

General

  • Target

    4f5d40a9de3225370c5456fa6ccf0364_JaffaCakes118.html

  • Size

    496B

  • MD5

    4f5d40a9de3225370c5456fa6ccf0364

  • SHA1

    586d8997cca617730827bfc195edc6564d94c244

  • SHA256

    34b64cc0556a5c5e5ab10921992844f58068d9fb00845594ee85ea6f718c835f

  • SHA512

    79a2da33f888851c178e4f8f6f04789ce1daa139bca8ef9b82ca4fd8a3ebdddb5a3d5155868fbd99985831626866dc7a4abcf790d9c341e2a7ca0116ddafaef0

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4f5d40a9de3225370c5456fa6ccf0364_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1232
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1232 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2372

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    448aecd213ffb0269f27ae18756cfc71

    SHA1

    66ad7599cd483ca75d9dd23d322fa9c927773cf3

    SHA256

    32166ea0fe5a89e2202f9edaa4815ad70f60d36e9023eabdbd706515820de0d3

    SHA512

    3646107bcb86ca3c923cb5b0278d90e6b13db9bc261847fc53e5f848ba974ec5f91afbd4a671628aee504952b0f9f94057fdfd35c4ddaa7961b2254174ae2446

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b4e5364ddb46c6c047049288e74f9e7

    SHA1

    7b7432f00d7b1100258aed4e7233b97c31685c57

    SHA256

    9b92cd526d11127df6c390fe44baa08163c18b1c5becac8c2689728165937409

    SHA512

    dc0e031429b37d702c955cc3e825e1fb4c83db6194a13f4496c03bfaedf8458b3fd5e4d60084fabc4d3b7dd91e3234661ef777cf3aed95c361c86461d1c103c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e9427755c042b905c5719cac1023e95

    SHA1

    4878e2c0d62e3c8b4ab0e5ed9683108bff60f3a2

    SHA256

    1871fcb5aeb3e20ca3ccf457d5549f1fb8be1bc4f378d112570ffca5b9b73c0a

    SHA512

    c3c833ba9861661a496ac604134f7c64f5a07fe95989fba7eb982b67f218cffbd468c36438a983ea170be58be566b73e22e334fffdc05ec8e4bbf2e8eff81f27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1619d9d5dfce5b8ab4ab2267f901d46a

    SHA1

    4030926f0750fe8d9810fb4397552debe22c35c7

    SHA256

    549ffcf3a40f7d0cccd1e88b370faa9944c2690e645623d82612bdf1d2ed42ac

    SHA512

    6b4eaf413092a2a9b75d4eaea312d3810bbdec7d73eb3045fb5b63ee37ce2acdc6c9ebb2ec52c5240886f647ef34eb72f8acca840c6fe21b1c4dedbb3787b625

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f29fdb086de619f73b3522785a1c29c2

    SHA1

    f60a227f8ba64a13258566606c39ad861bf42880

    SHA256

    d5dbe24269e1573678412abc29305560b02a64c7b61300256ca26531c0cf8739

    SHA512

    4610dbda1967179ac8f756b4428e817dffd7bd2a591d662c649cc2f9d62f1123c7137c36f01cbb4899900c33a9a18a782f4a4c4defeb22fd3517479af63bf5db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e37f3d87a55b8d151da27f66635e5660

    SHA1

    2c7dec1ae5e98bf159eef7d9af01b7899cc01dc9

    SHA256

    858daa7acd30bcf7a557e0f6d53446cc43568b9eebccdb25f0ea173b04e852e8

    SHA512

    173ba9da147c88c34f67d99ccd1194e796581804d993840ce6085405131ab0447b7ee345ba6e019d20d055dd78f2888a1f242231971f7dd2fdcb0cb47b899b4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c41a8706d7f537fddceedcb9b3589e42

    SHA1

    c4f76978fe5c6b049bb9be7b419c956f9ff2a136

    SHA256

    e3f35e7a56f3d21d9eade49f413516a1c9e5527d3a48d2c3cc4d512a3c0c1e95

    SHA512

    47b9e6c3dcd06099f45635da8c1c049bdeda39bace7a45cc53e74be17be620ba350ec5678000f0ab2aa38fffca01cb43e46accd7ec63c4869ea749b4310f231a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef2e89aa23a89d4acd03461d3ddc8597

    SHA1

    5b629ea0b538fc9397fa187d788858f6d407e542

    SHA256

    ccc60f9d9f6609086d469b717352b42eb5fb52dc3733edb45149146b9639f11a

    SHA512

    57a200afc1ccd1cae903cabcc4b7b91beb3bfdd8dc1158710e94c4cbc7063b6caedac5b628c6200e23fdc822be78f0ddbbf84575694475f2314f1ec2493eb3cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa111c98dd5bfbbcd138d3aebda8a7b8

    SHA1

    ded4fefde061b30e7daf64cf347781edf461808a

    SHA256

    3f96291576a2294bcbfb137c849513c1579744c5b851e2c7c307e8da8152d8f5

    SHA512

    4d81fc4b5abf9bfd0d8bf81350ceb25d0f4ec2a6d31ce785db8a8fa37ed172947cfc3c8b257bac759ace85c1610a38e3a6aeb5dbb969432af3dd05618baba992

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f3387c342057cf47695fd33fb8ac101

    SHA1

    70e60575b24ef3416285478383efb099a1d8d8a9

    SHA256

    5be9a066cf03e8b58b99ddfa64804a2f32ad6fec9650473e9655c2a8911d97bd

    SHA512

    bf09c19b21d5f9e57ad36eb95e18a70ddb651e2022b7a91cad276a922bca5efec8364858e96d12d5076b3e865862ca753646ae41fe74016a763c508631c44fee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a847034cb3a4b6c585dfb64941370bdd

    SHA1

    b830674fcc2e9453395e248e30c60ef5edc86664

    SHA256

    6202e0abb2a2dad455c20efc084e63545e377a76a4fb88c7a670c4a9f73af45e

    SHA512

    29130b50c7f472fc88ab5f736cc7f2f2645ddd5a55cbca3f84c1f2a7e38302d1c25fcb9a37339fb642ecad1fd832ec4b48173f14202d6ed76bbf7e03c171cbc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee2c0373a29b5325383c11a49e0438a4

    SHA1

    9f6528211a679a221bd3e7ad392a2788b515bc30

    SHA256

    cb4c796196db5fcff6bb9f1e08e619ba44ae85ff41852fcd775acd31bcb30b93

    SHA512

    110681992c3d205322877b8793c68ad517affd79280c81c3012b49ac96b0c053c3d8f350a7b749c8ed81d05c0cbf69399d26a2a1da107294793482efd4cbc5cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f2b3de0e07ac2a42d4610cfc5c94f76

    SHA1

    ed5c4e8d04fe37a498eab88810a0d0b4a83bffd2

    SHA256

    42ed3883dff2a89eeef59ff7412a431c484036716d0a4e5b998b4a199b964f1b

    SHA512

    781474c652c6446113d2b6181c8676dcfd9280dc5eff370cb682ee22f878e65052e0b91bbce9af05cd476604de244db36bcd09c3bd71b930ddebe7cf5297a0d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bcd9e82f5c257010cb6821f4df5fef07

    SHA1

    9428ef3a95e0a05e05f23ba041d3a6510e484b3e

    SHA256

    2d793eb5beb714fc48c56509673fbed1d8a373de230c03abd2b9239132844a2f

    SHA512

    518d190315e7851265639b9d3ec841935830100713eec01bfd0e38b9e168bcec63b36d4b3cf896f71b2ccd19072136d1ffa458f1c3b730cd848244ceb15b58a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19d15e0adc9c0f81a1fa3df6f1a4f849

    SHA1

    0f60c3b06ceadf2d4f96156e221af3e6135bb791

    SHA256

    443db45109e845ffc57a7d7a3d99237002802cd9b2b7078def0e0b304675b75b

    SHA512

    751dbc91c80f17a82cbe773fe65e49dc2a6e38d87224eee4d07029029db29a5c3175ae5bac37c8393e41d7f0b9c36e0370560a99275e6b1c91478a325ecdfb01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07c8be19a676ef7c4773309430bfe93e

    SHA1

    e9f6e234c8e58642cc12f877628baf6d49c7fc36

    SHA256

    ab4a5100a1242cfc6374e8021381a818951a04f7ae9ab78d44d39703cbf92211

    SHA512

    18a1502bb1be486bf4f861cc6267e2ef7d4675bcfbf273d83b20dad209bf0158f035fd2a054a442cbe7cd825b3e24364be4f6b0adfc2a53576d5f10e2b58e7d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42b0ff77ffc6aacdc8098f85b116ec45

    SHA1

    771a4722327ca619cdb6854a0f4edb6da560f19f

    SHA256

    fbd40eadb696ba54d2dfd4174c39c04411f6786b6d73548bbf59adf852bc5e50

    SHA512

    f70ead0ee33c950f0c362a7c5c57bce83f23d8e9c316cea2e94e46a58dfc60243b5f6852877764d568106e65c46e2fe3ca92f5fc50b7ee2f03ec022bef194f89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb3ffed4c704eaba4cd03bc25910d5c4

    SHA1

    1380e43e7812fcc3c1f6036e14b1e7b700e09b0a

    SHA256

    705bca4e4c10c63133e2dc50a8d9665475e401c9603aee0df9ba77e6323d7232

    SHA512

    1f51e43ce51f1bbcc46d81ac2dae5299fca3c17a2b6803636042df0179d8597d8e83c5d33abc819a0a5cfb8a850d45cc1d61f78ed101b84e4f95e2648c200d44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad788ebc912ded6ab52e85024b21811e

    SHA1

    8592be432c36949aa14c3988af96d421444356f7

    SHA256

    277064dfe44ca04595fa5aa8dbbf8369edff98fd77a67c5a29d310b8180b854c

    SHA512

    11b1336f08150c78f0521d7e00250f02ac7b4f3a5a8893855b82e39170a86d0f4f6f8f041e0e5e1f21d211ab6402b3deda39f4dae770429299b8cfb6481e3b54

  • C:\Users\Admin\AppData\Local\Temp\Cab28D8.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2938.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a