Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 10:11

General

  • Target

    5e8634c8ba2d3530aa742d3788a102b0_JaffaCakes118.html

  • Size

    212KB

  • MD5

    5e8634c8ba2d3530aa742d3788a102b0

  • SHA1

    f78f723e5dc79ea3a1b38731ccb819535d2aa3be

  • SHA256

    71a59f525d002790e4f99e3d67827d54efe174148ac93ed16a7151d72ed79131

  • SHA512

    3ef4876887bd5b43ed13025f90f496afd8b9e69a3f30fd5a741ffba65355d8bb1bab238871c3bf0d3e316dd208502170b4315a4aada00dbb1f1c431fba50c0b3

  • SSDEEP

    3072:2Gb/qbMWvvu5u5E89RDDuRDJcfM+rh/+MVSnWq8D5SpQFrXN3AtBAgG:Yvu5u5EhcfM+rhfX5Atu5

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5e8634c8ba2d3530aa742d3788a102b0_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3060
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3060 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1300

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8acfbc41e5f3cf9f4164cc02161907f8

    SHA1

    36e8b39dd07bf98559c19e0812ad86dfd9cb6d7f

    SHA256

    5e5700a7d59a3d72456b38f9bdd45308cd4285ca52938182668b1ad1a9d8161d

    SHA512

    e8a8a71a3d613abe563559961a64630466b80024f2939ac9307249b9daef645b33b233e6bf05bb59e864bc03f3fd1b8c8f94eb7f3019b828f1033a65d42625e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d88c193537b48b43ab84eb4552b2898

    SHA1

    27829f453c8d4d6d443361589c622e9c8f202fb0

    SHA256

    23138ffa1855b98abb82837d08fce2dd0a1a61d5bb1f817ba06317b98fcc9fc9

    SHA512

    7d936d357b0de0894acec994bc67e87456b04383b87f4e9bc45643da3fd5ca756dbaa8f182ea2e6a3ea713bdc246e4c3b103c2c61b559cef627f6d8edb6748c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b54f08a9fe390023c31239b038e6797c

    SHA1

    431b2e63696f588b7fd33f00814e260d27a0b58a

    SHA256

    b945bd4b861b675d0aa4708997c14bdf6b33ae22a44ba9a07f1ecbb3a3811a61

    SHA512

    40d12ab97f5599d43a9f905d01ba9f566218e49e326a32fb743d8b38a1d5e600539089928c04a67914249c92b9455f8bc4fdb936a054814bc56035fc110dfad5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a38384acbe6f73e8cf22db72f1814160

    SHA1

    39a97336d7d612878e3b9ecd5be88f119041e78c

    SHA256

    6913eb15fb66e88701178183a0058b77c14db83d5147e757e9d73023d4e8e00f

    SHA512

    707b401d50bfcbb74ed5549cd35e767980e63c6ca88fc7f094b8a7c855ebd10f15482ad29d8e317abe5fc1a805c28c54f3c79be5ae1c3d8f18da49eaeed79541

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ce3bdaf35e85657ec84766cf24b1de2

    SHA1

    56b5a8e7440c9ea682583960abc8f04fc3cf7669

    SHA256

    05432d1faf4bca7c336758c2aa74502b0c8fcc8c569d5f193af24a13b473682f

    SHA512

    66fdbd75119f310d35884265eeaba035b4d326cbd6397577501ccdc5dbfd12aabaf7edea7bd3bbc8b407e421f07fe96834ddda9e9ec96893c9e4c485215d4e04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31a70fec700d4eb61be0652243e426ac

    SHA1

    cffc879312026e261c5a73c1753da43915e8f95f

    SHA256

    4b79d3d691c61625a0aa7e1a9d8834af5d9d7633681cf782591cba2b1789351e

    SHA512

    d1ec4612a32ae426682e7be777737d6eb4d6be02cc390cd8cae583cfe5aad94804892c82165a5e94abe46d22714393866d5d074969cf5941e38ebca15783c20b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed79f69cf65722776c8c35bf1b91e15f

    SHA1

    cd0d1e391c94b0de68d02cc46d9838b317dccb64

    SHA256

    74527d999a3e0b3a595d9f5fc275b95bcf8fc66e1d699eed52c4a8b436223d8e

    SHA512

    dbb74476ca16d69e9eb15cea1ff13d16b334b2158c82356ddf0385a5a266a1ba40725309c7aa256ce4e739fcfe9d36209e0aa2a3409c4b55034775b97ddad95e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a7800a34cb76273ea974016c64a1738

    SHA1

    2e8c53bfd1ee87873bad8ad9c98bef4e6d38b119

    SHA256

    494dacff285abe164ddd42f12bfc936be717f434d81ca5650ca03433d72977b7

    SHA512

    1eca3c2ff9dbb6cc831c523b00a95cc2685f1ece6d61bf12bc23a0b56900eaa8d9c988b36cd91c81debf2201bb262fc7d22ebc33b0268adc8a727c4eb2b3eee1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44fe4f67856f2790df4be2de104eb1bc

    SHA1

    02dc0a14a7afaf7f7cfb72894f4ac2d509fed470

    SHA256

    efdc758f65014130c534caa42a9837340067dbfad747f19fbd2282a736f301d0

    SHA512

    c3f0ad8694daaa1f21ac246c69ae48eebc28dca16b52450051261a92703dfe5c6abbcd4a58afd3db010594a97cd24c8961537e31b8ae27383ce2d399ef8c3f1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0ac373f414cdc93cc7c16f8ec88af47

    SHA1

    c135d7757e93055377c331c9d4e9cc40164bb50b

    SHA256

    36e8cecbbdb6f3b2bd5ddce2ff7b904d0639a108ebd1943df5d8c2dea5f0db3e

    SHA512

    3daa4388dcfcc9adb7f014ff2984d1a9d8bf8dfad7123e15fc920a747287337ad1a9d01cdfbc4f0d0a0058e552128880d9d794e0b0d5cef41e347e5862b64e7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a54c36a9ea1a4e4f010333f6f78afc9b

    SHA1

    77a65d21ce74438b9f1874eac0b2efc7c6a79d66

    SHA256

    ab3b3ced11ef4db99dd0a57f4c15244670b2a49d3376df184448b92941396f68

    SHA512

    2048155d9fdcfa4266fb8f8324ae2f68e4c9d6509ff17cf2771c19a82bc34f287bb6646786251a58a4cb20789e331078e7c1fe35cbcc4540fd7444fbe00b349f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42292cbb959f2c8700adea7b974e7698

    SHA1

    df63a618ffbc3b317d7bd916fca64729682be9e6

    SHA256

    0a542d8930722facbd659980c4ee26bab83c4789b8461e8307d2f47131a95e5e

    SHA512

    f54450f8b60433f27b47721f6cfee6b90ab4ee9d6d5e1d288de15b11eaeb11be047d5e2c65bbcb83211efa2f7682f6cb71c5e5369e53da43d1139212020cfcee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    95c6862d246c09845db4edc4fe0c4649

    SHA1

    b2964eaa8dc5d9624b38468f7964d0ce19dc9aa1

    SHA256

    e6ca95a37dc5ca30db9ab99a3df00cb97088c8b52660c4c5e9820944356fab8b

    SHA512

    e05c5373fa6d4ba3f9e52891e731968a6d52fde38a04662c75727ef7087f451256f40c044e7c56a6049c3f06a45819c2e7fa068fe7809bb25e34e991cafc1bad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e47a0965c3fbd43da51f59742ace812

    SHA1

    71c85f646c43c71c8c274818e61ebf1ee19609c1

    SHA256

    30fd0d048e194eccab0e33cb14b682358c186a08d713ef8081b0380eef179bec

    SHA512

    eb0032654d9d915af554e3e5c5a917f72755c9daa8454775eafea5c94715cba4d4461e0267595dcb6a1499187e0f51097952a7875e53aa37224f1f85f55e484b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2XHJXO3H\errorPageStrings[1]

    Filesize

    2KB

    MD5

    e3e4a98353f119b80b323302f26b78fa

    SHA1

    20ee35a370cdd3a8a7d04b506410300fd0a6a864

    SHA256

    9466d620dc57835a2475f8f71e304f54aee7160e134ba160baae0f19e5e71e66

    SHA512

    d8e4d73c76804a5abebd5dbc3a86dcdb6e73107b873175a8de67332c113fb7c4899890bf7972e467866fa4cd100a7e2a10a770e5a9c41cbf23b54351b771dcee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H09CVCL3\httpErrorPagesScripts[1]

    Filesize

    8KB

    MD5

    3f57b781cb3ef114dd0b665151571b7b

    SHA1

    ce6a63f996df3a1cccb81720e21204b825e0238c

    SHA256

    46e019fa34465f4ed096a9665d1827b54553931ad82e98be01edb1ddbc94d3ad

    SHA512

    8cbf4ef582332ae7ea605f910ad6f8a4bc28513482409fa84f08943a72cac2cf0fa32b6af4c20c697e1fac2c5ba16b5a64a23af0c11eefbf69625b8f9f90c8fa

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NVDR4C1U\dnserrordiagoff[1]

    Filesize

    1KB

    MD5

    47f581b112d58eda23ea8b2e08cf0ff0

    SHA1

    6ec1df5eaec1439573aef0fb96dabfc953305e5b

    SHA256

    b1c947d00db5fce43314c56c663dbeae0ffa13407c9c16225c17ccefc3afa928

    SHA512

    187383eef3d646091e9f68eff680a11c7947b3d9b54a78cc6de4a04629d7037e9c97673ac054a6f1cf591235c110ca181a6b69ecba0e5032168f56f4486fff92

  • C:\Users\Admin\AppData\Local\Temp\Cab35C1.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar35C4.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a