Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    17/05/2024, 16:58

General

  • Target

    508596b22bcf9e3a5c6ce2b33352e35f_JaffaCakes118.html

  • Size

    226KB

  • MD5

    508596b22bcf9e3a5c6ce2b33352e35f

  • SHA1

    ee6575031deedecdb276bd6a44bd27397e7325a7

  • SHA256

    f3231be96560bd9acc06a4bd4b2441c131e27e0e5247abfa312e2de532f046d3

  • SHA512

    f614283039cec4da16978dafdca3f62c4ae6a387b439c2ec03d9d95a6a911f6e37fd059a6a6c499b632bb5a1b014bafdb0855d5931b8acac3ef547cb5667c6aa

  • SSDEEP

    3072:SslyfkMY+BES09JXAnyrZalI+YuyfkMY+BES09JXAnyrZalI+YQ:SsQsMYod+X3oI+YLsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\508596b22bcf9e3a5c6ce2b33352e35f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2836
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2836 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2760

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5aec6c9b1dca52d2ff7d194336429197

    SHA1

    1763a57e5789c03414d354c4227ec3556fe887f3

    SHA256

    25bfe3b9f2042dcd60ee757e019912e1bf2dbae61b7ea7fb2e099468c12723a3

    SHA512

    cc8b717c384bf0de90494248975d5b964476ca8299e7d5de3e1ddcb4a581e2400bc3614e99ce80e0fabbfd5b7b9208cb37af7d6105d374123b7b4b8df4d1dda5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7d789e60adaf263d9b8eac9cb4119430

    SHA1

    d5b1eb4f4927eda2daa8284ffe7228e45692b30c

    SHA256

    528e2c546c0e2c6a222541d3e2ab0a367bca182310ac6d774bdaa40d8ac637eb

    SHA512

    f05138d8c155c16043ae0a1b9f92197f3a328a4a20b89cbe580222f42346d70201b11bc13cc4c770ca85fd00d801696ba5a720468625fbe5e72203f614b5e970

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    691654ccbd1d3509cd850b34001b4e6c

    SHA1

    d8981109604fa94c38807beee7996b27de1079ff

    SHA256

    2ef564957548bf41e2a6efe9b3d5c48550c598517c28986fa44cbcdbd2d3e257

    SHA512

    aa9657e8d5b5869567b87dd69b3bae7e1444d0a82ce366b87d87ba8cdac33bc9e6e6988098ea22ebf0850169544460e903e831454322a80a2b1c9e14f5c7aa05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    55a59c96f5df72dd45e87d0b0663b738

    SHA1

    7414ad6934f9cc1f4c500f8490ba0e366ab3cc65

    SHA256

    1729136b39fef3d10d2a849ca61e3d49e0a608e3587143af77eaf66499edf37f

    SHA512

    0cf79178b5f35cfa8cc20a1d99245a86266da1cc71e9f8971a3de06fb73ff687871a50b20abfac61cae11e7a762445db7baf7fccfbf0057ab037251331fe0373

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    afc28210d1b3ffa826582d72ecd8c615

    SHA1

    b2187dfb8164b2bd81f90b06404f6ef69792fa74

    SHA256

    0981348a1277af2564a8e7feef4d0e1fcb0e5e3e60efd069e216135e125dadaa

    SHA512

    224edd1cd93fefc8ff9723e93c46f6b7fd1193ba529411b823d84edd575cedad6d1b53676dcea724801fc525fa84fca09ba081ddf18f0c58b1079de3530e6132

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    13e8a184739fb0ad8e94c7d556a12b25

    SHA1

    71820403779c52b5be740ae9b8b1245cf382b942

    SHA256

    46930072932a1e30c221cd8490ea6472c1362df2e183e3af04f05ca28e14f1b5

    SHA512

    a5adcf2f93a039ce3bb29e3dcefb0352f62ac3e0624964732d80c437552e6098ae63ccad171b080e07a325e0e27486b7f88ee2c7937f719255670d2ba38fec92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    95dedad11ead3dcf70e31510bdf70843

    SHA1

    138022a935cd1cc4575bca0fe2715584909d1d29

    SHA256

    0ad0b957384919f703bd2c4dfa09d32199592fbefffa239203ee457468255404

    SHA512

    08b74ad611754aaace154cefa64d975729246e7db0782a5df69710caaad9a73ee9cf25bf5a2abd06751a0d1e464f5a461de5407337fdc2126d4df9da29dc8c7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    d8755d9ec293cd8c42b3231acc15dd5a

    SHA1

    c6f79a74e641d8048b9e682f7134da13ea50d27e

    SHA256

    d848966ae27e5c14d65e8a79b0a598870c25a9eea4223cd08affff8d012c9c05

    SHA512

    c1ae330e93a592413d28e0c42638233bc27c41b08982f41375b3b72986c80da57875c5667a6f35c945a0a7a8273e4c528161601988978e636b226efa341fbc1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    d4687e25f705707dba91ac3cea46c28e

    SHA1

    d71e3e71a24a9a5c2dc1e12b80c39d7f9c879e9d

    SHA256

    a94877c07ffc321cc48680df0d9e6b8d0b38125bf8d2881d187c7eb97e2589af

    SHA512

    9bd6a91d5977e7870058519a0411917ac18129e380a31278e0024aabac039505c2c6db8e1adecb5fa0dbbb347e1a46333cfdf4e3141faf353a37e344c86d0130

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    1367aea3a9eddb2f216ecf2aecd0eef1

    SHA1

    fab562dc7662580745a286afd1719c3dc7411df2

    SHA256

    3063ec5d25b68f456755ce4eb0a9ab563e29c113e60f72115ad55f1a5eb94ad8

    SHA512

    41822758372aca8bd7eb176601105fb95d305a84112d3cfd5a1d31e980a7d16934783cbf110c4f9076b72d63348b6af126d0ec87486232e5b9eef394239f9da6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    fbef9c6ae44b69a1308904790f89bc4a

    SHA1

    ac4059d0943806c334932cb30fd0e140c622e36c

    SHA256

    8e04d2792bf1933c0a50a1f619fa899940bfae21b35f4dc59504f09fe0b6d292

    SHA512

    0179af3a88da874b805dd04dbf5d07c77bfdcbaea02d6921c7f5d8da622f7d48840bba6fdcbfedc8ef4852a374800dec4dd541137ba1893755087e27f6c6d1a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    738f3ace0eb0713e0ab716151e2d3e3b

    SHA1

    04971516aec6fa2faa9bfe6ebe794a38b62fe8fe

    SHA256

    56a40c253bd610d87fb1ad6845720aff083024e569149121f7063d89c653f8e8

    SHA512

    36f16686b39ad45cf2aebe37d1fac8eaf9957cc4e10e7e3dd09df87ef94392d97e873f9befa697bbad4b920ac8ad3219bf30536f008a335e53f1b0ce17ae6894

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    54771904f7eed5da2b0b1b9ed0857a21

    SHA1

    09f65e0461777cfb5ddaa447eac20ee41570e816

    SHA256

    33aebe39a36b24df3699a598efab42eb498771b1483c8eda8cf951b1dfdf8aff

    SHA512

    600e76633b26ce32493486ce7737efe7426ad22b2b501a6992f4aa0d16d6f152c66be51813518774a3d6837b80db2b1d64bb52f6b9dc3b9efae57a166ccdcaa1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e41825dc90d624ec495783fdcd66594e

    SHA1

    86c7408ff7b8d730249b6bdd63335e2ba69bad66

    SHA256

    ef8eeb4acec610a18e793e14cd2ba72f8bfc4574399553f12a3c433bd8cca8c9

    SHA512

    d4346199a083f47d66366f066322ba14328833d024bd6f5c027034ef6f9ba86df5fd071b9b2ed5fa29bbbdbc227c57a995ebce5893f4bf39889e840d67a86b01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b3bcc89c7e24adcfeef3b6ec03ca22e9

    SHA1

    80203fd5ddd035213bef96f69629f116c549b946

    SHA256

    ea95487a9c36d0f4e23f0b3cab8c60168320d85af781b69dc4d9f9d0b3bc3074

    SHA512

    f3ae9ed33f235fd9c99df4e28cd7ab07c6dcf3cd2136d9e586ca16de818c0c40fc7e294cd13b668b8a544a2aa882dea179f94c3e164203c8904dfb497a6c2718

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    eb37e7aed7a8a3bfc46cdaa179af0333

    SHA1

    ab91847cd4275f70b2fb63ef41cee521af54b9de

    SHA256

    99faacb6cb0476ae5702c501ca09d7d0c60b97384ffa19913c6d7bfec03d3493

    SHA512

    5649bd539c8ba82d2a05716bc8bfe9b94a2a7f77d2180dd736db91962ee841c532eef4444a091e10d3f657ccc86ab12f9ac1993b6febcfe9c97d3eb9ea25dce1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    49e075a73b9e80f057dfec96eabc21f9

    SHA1

    9ac29441127d970d53ebab573e790c7e15e17c4e

    SHA256

    6d2d71e5dcaa3061b5f2d1b98c792ee79594cfffec363ff48b7cacbcba70c6b0

    SHA512

    425ee1afe226ef447c0744b36b52da4090026d18337c88076da82e41567bf0274cd6bad90dfde6037a90452f407d2b243980822bc3b5ea1fe40f9ba48ab84000

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    132e06a0316e4cdcfe65fad7a59b83ac

    SHA1

    fb978541aa655853602d832dce8fa27c461ab6b1

    SHA256

    bda9489edf7d489fab7038cbc25a7e4bbecd8362267664a1270c40510a183c69

    SHA512

    32ee6fc760ba723c9628adeb03cd73a3a671bb9bf28755ca8dac6f83d08fa2b908e5c3ec0a529d9e404d820b7ddc7302b281c4a98e2c1de4f9c49504d7becf5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    01617e63a561eafe37bf1fa78f2720d1

    SHA1

    6ce0ca4d902f6f68ae22452bc673e0b2ee8e221b

    SHA256

    5c90609ca12094b6ee57a562c3fdcf0a08bba78ff410eebd5ddd726996784ad3

    SHA512

    26fe353f74010284af150724ec6862fa8757a8fca3b2d903d69affa0e00951ba2051ca8f5049adc481f6cc50bf3a24cf58eac4ed674aa004c3e6fcadb1564c73

  • C:\Users\Admin\AppData\Local\Temp\Cab3028.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar34FF.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a