Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/05/2024, 21:13

General

  • Target

    5b80f1c2def78b1e6b1b9198630a1d49_JaffaCakes118.html

  • Size

    39KB

  • MD5

    5b80f1c2def78b1e6b1b9198630a1d49

  • SHA1

    120e21acab65ebc82eb71684a8bf28a183e0295b

  • SHA256

    ed417a3ab8924a818a273f292ebe0062d1ead737c19de0734877565265de4c57

  • SHA512

    5a49166f09c0b9c2523a64f8e4b121fac825eb61eab493c14500df7fbb0274dc5e5653104574fc7dbea96b98f4bfcb27668fd57c08aeb86fd483cce94f1f5d78

  • SSDEEP

    192:uw7Eb5n1WnQjxn5Q/RnQieENnJnQOkEntfjnQTbnxnQmS6xyzUhXhAgbF+mU8OP4:CQ/ApxAAXoWJV

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5b80f1c2def78b1e6b1b9198630a1d49_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2924
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2924 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3064

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af0cd60a1985ae489b8e12db4129d7b3

    SHA1

    e3a1864bf20e3073eea9e6d5f123babc0dbf82c6

    SHA256

    ae5ac99ecbfe4573c0f043d71c0ea1964491326b0864b881f4b5d8fd38ae3a8a

    SHA512

    a22b8c7a53694a7b2119e2b617b9fb27c5d924a8aa70d58ea41a8c8f1e57be53f14ae227cd4fcb5be9bae06284a068708a134205d5873d8a6f342ee849970cf4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0dcc5e9a0b508f8f9deb8848da09ca91

    SHA1

    f7c33f2ff69f08a3fde13652ae7fbef7974572b2

    SHA256

    84f08a58335d39e0fcdc6795651745a21ed22bc05449587b91b623dcf5d0f99b

    SHA512

    b66985dac3592626b93c22f9203942558679eec381911b67cace0cb86dd8045698bc7776d4ae7996252b427b325800e3617123eea57a12949c0822cb21de8330

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98c55dd5a051678d76e8e691c0cb4463

    SHA1

    8a7491b5b5b5c0e0a241ac45b2a340596669e8a1

    SHA256

    421908c717b8342607e91bb027d0fb43cdaf0fee533c4a75a63ed1152f2c9e93

    SHA512

    c04aae72c57860bb6b8028955753ac1ab4417655184de0245df27e72266d4597290de04eb908d1d319224a38460726869ed7d68176d3783f62de64a1ca2bb267

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3de5fc4c5252c6ba66acc97ad112824a

    SHA1

    1dad295313abdce828d15916c0a69a76fe6b2b50

    SHA256

    2cb1ea5675f5ee7c2b25bca8faa4f42794fe3e998626b5444a2dbda02b69726c

    SHA512

    3bf70182c1dfb4e088593ce12060014754101925397aec8e506cbea1989b62c748161aa26d83dfd82ac70d2ca9750e88e241b0c0c39d292e78051d8b7c8c97fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b499e906eb9e12d94ebdea04ae57b84

    SHA1

    facb71739b139340e8afbe8bce530b1872a4c499

    SHA256

    3e13033be186fa43083f53a128f29899b596bf45aced8514d0bc059835ba2ea4

    SHA512

    b1c6babe913237529685d4289c3afbadd9aad0692edcf20ad17773f59ce93c6e1e12f7c1e2f6f0fb6d86b13daed77fa0515c055ded3b5c481ee06e3174466590

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75b5198b7e6fd063291e7353f86b6515

    SHA1

    0cdebbd1b664803ff4c13cb41be50bc843306151

    SHA256

    bee695c612f16e365cc7ffead5583a76fc92b8d083c64737428e96b52147ff0d

    SHA512

    3adc32d15d48086a9012e1f01ccfea2b8767b6973bff8fb8874b47eb22ee9ca66dc4b308f464ede03516c02e47e9157805ea55db14e8d0894077e487cb563e51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d0e4ec1120f848a9b531145091e6a6c

    SHA1

    19709c0f5c68e6a6602c5568ece86852d1753146

    SHA256

    2010177e38e8af4e4d6d45f24c7458ca54863ff0d05eb97c22cd30055d1cef90

    SHA512

    fa170478f67ab30e64315f02a23a4901b1b99d6de2cc4ac1bab7f79e1f492ff790609a8eeba582f14a9fd6260c323ca92af58c2923960087aab6f4cba9f9e99b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1b006a82ecbd6408a72dc4b87bf3cfe

    SHA1

    c88de5c40722a470355e2d077f1b6de52f25c9dc

    SHA256

    d6f0d85094a17f898d7989cd97bc7731e2ced6c7b15ea9cabf5f97d1db21ed66

    SHA512

    8c36ed35f4febc475d50ad19dac43e90c946b49865013fa021c44c9b25d887b0aa2413bd4c31a50118a80b7f9354e47d1a94894818a52fd5b09758ccf4b86994

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    975c61f47522c236a8e1a54b794d50bb

    SHA1

    20b21c8cb8a21cf92d60b530c7f9fa6d103fdbf2

    SHA256

    fee20f27138e604e5b91f47f9a8672fb90095346f3461c0b3c81d8e76ab62253

    SHA512

    a7754a7f2b71d580e6c30398959ff99aa23e650697817841189cb720857d05b6534c35e1012b1e035bece7cda0318d7e489d1f82048fb1432bf49583efeb8ae1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f12d9cdf6364a48ceb9de37ad5278b0

    SHA1

    86a7feee347b51edfaaefb127965dc61fd615789

    SHA256

    65d8030414a99dea0842967390c655ff8db6d60005b07c94666c80f809f7a67b

    SHA512

    bfca6482cb828e2cb75125920177bd9f234989e302d977cff58847ad1b51c058445e4d28b1bbab1a4f7a0079789b90418fdae18a7a9ee753357ae09ded9d1dbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39c4b77d86e9e1072cf8ab5f91b47d48

    SHA1

    70521816e8781e5ba769dc2bd78db42763274752

    SHA256

    1237ef93d7425f74587f3d350772aab0169f209b8871569d36034ec25124931d

    SHA512

    9ad570a5e49a9b6b661ec366d9da18b6b2810439f49412c69ccff8e089e22263fa86c75b22816a2d69374481e6b99744e58c8e989d729132d164ce0050ebe339

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1eb10c3689ee9e55b8393f59663d92a

    SHA1

    8eaa05cc770814fef2f1198c874a880dd1eed852

    SHA256

    de488d9f9e270508aa5b9a61d72dedc632680db681ff3d7d7d796c5b12a28e3c

    SHA512

    d0cae87e683c966bf72bf1784c3980574f155ca0c6398736403742f5e9fe3f0972e8c132868f0eb0c848af2fae404c0e07cf9075d80c9fd7e5dac5d1c0967183

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c2c2abb512fa501c189571d61b0091d2

    SHA1

    b7a9b7175c51ebb4645da3abcb5370ade9ea0137

    SHA256

    03dc1204be9b89d887aa5faf655116a812ba08a44f5ef2ce7373e8eea0d63ed2

    SHA512

    147ccf3648af2df048aef52fa4749e3eb97fc152fc1293c19a9b3d67ee324b7345c6bf17e65806c712e91f07dccb8b6471a9d2d3e4d7b213712c4c1ac6b8d354

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6544d0e9a2b91380f9940ecb348564ac

    SHA1

    499b43cc5fc46fc00b4f3d66db895bc7138fe7a2

    SHA256

    7a6ecedd1a69226742a76f54dd2161b031518ca89d53078cb0a44e3b1e7da944

    SHA512

    1f64fbaa2f8b0ef8a5ba067c65099c359bf0205dd4b1764328e29fe1b807674e9c81e9b33fd9b173afaf15a76796409a3ecc0aad853e921d1371a05b13d1b5e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    026137abaa8790cf8e928bb272f73608

    SHA1

    d15559da1ce2d3da738be31a7b8a14f02d5e5c7c

    SHA256

    34c2cf61c13ec145392eaf1c40ff62e9ba893a4f8548173f5422ac5636753982

    SHA512

    c977b5bb043d5ba75bc3df67bee6f89792c3bd95e76b7f2c2b7fadd9ecc1260c2690e02a6b1ad375d6669f9750148ce9a9790ee32fac8e688421efd9d808d5ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ec293c9006c36cfcb11359cbb79aad8

    SHA1

    acdbf50784fb6d5f926d3d2db071a35d410cf3ca

    SHA256

    561aa2a9ac98a5f8f7e5b4d109382899b7a5a4820441737193ed99f881302cd6

    SHA512

    cc90cc67f7c8615d32f80c6122e50b6149227f8b4cb7ace8dc70ffa013eb1b8d0bf55a6e31a1951c6efb26263c712ca5daec865df8dbceb06ce649120514b56d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8fe03b6643afb560c2596dc5be331e1b

    SHA1

    24a3043762ed2b998e1d32219ad6ef5cfc0e043e

    SHA256

    c4453401ee5f96c3c343e5be47a73b61318a9ab5bde3d6d264056ed21e864721

    SHA512

    e758e9b6c0ee11c369c2b1521d74f3d428bb5a43bd740808f86c5ccf9d702b86e6659586c841ad90838d23de9ad1436127b4bf47aa66b08296aea5e251b9b2f1

  • C:\Users\Admin\AppData\Local\Temp\Cab253D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2640.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a