Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 11:07

General

  • Target

    5ec0186558816aa375facc7e229b37d6_JaffaCakes118.html

  • Size

    32KB

  • MD5

    5ec0186558816aa375facc7e229b37d6

  • SHA1

    311fa10993647102dedcccee739d38b5cd43ab94

  • SHA256

    7bee66296d9eaa7f1c2531ae861cb8de13979f78679e7f48d6ba62d1eec0c9f4

  • SHA512

    2bb60b295c5228e64fd55286dd1cfe1d6fcd118e2a26a221397ff21af1719e77c8e93db75b3a584e4043ffe40b010dc0afd0d149d1100d304a9867e968bcbfc2

  • SSDEEP

    192:uw3A0b5nkkoinQjxn5Q/InQieTNn2nQOkEnt4WnQTbn5nQmSoxSdQL9Ae3KsycAU:2Q/FPxPNKsyXTvBQp

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5ec0186558816aa375facc7e229b37d6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2348
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2348 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2712

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bcf3e113dec888ca534850e19c4e521d

    SHA1

    fd6c738e3722eeacb92cad91fdee97a5ee61fdfc

    SHA256

    64694169c5fc7462eafa00a51a86ec0563d91c83f83a9b1e62cf27e0eaa128c4

    SHA512

    2747fd9ee138526fc87afef5eaf8b4f8cde89ab3bdf14648f3f176f7f50fb1da6ea33df9cf4d0406e0e55fd294843bb2f6b78eaffd110b927091bdaf6f730e96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8423b0bae3f7ca4afce772e891cd48b8

    SHA1

    059e847b4c3508fef96ba916572ffaf899be1a97

    SHA256

    9fea7c0c9beed448ab04a69b27b77e878648014669884f15802081f4b7ff3a07

    SHA512

    18aa48829e07d80eb4fb207511ad0619569620b084d0df0386d411c9574ca54c0b1b8eefc26caf2dc35c8647d03a48233ed70c49f8eaa6949748b6d5ac638adb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b17933122185f4c7a70e5880e1eb31ff

    SHA1

    b93d44364f222db444c24aaf8a170e7c370a4a36

    SHA256

    82b18860e1a0723f6774b8148ccf74700f352f56e026daf82dbf87cef4a3a4f9

    SHA512

    79a54f61b98f85bb90f9c02c9f59dc008d72cdf3e63a2a61d376b2a0a4991083766a14ff312c7aec7e874f0bfa5933112c22344f3b981cde258341fcf093828a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a27b07ae1bdb334332b3ce3a08e1aec

    SHA1

    3fb910bd20c729814649eabbcea11f845d1d8ea4

    SHA256

    62d5c3f381eb475294f68d09f052955f7d3f1d1d78c7cfd1aa8eb1a387659390

    SHA512

    f084ed603a7c4dad71b0e3eef6a74de1378291c57bffeccfadc1acc0ff6b28e67b6043919ff6b74b4bd7cc492ebf8e6551412e4dd94bddc3461f9e18508f29b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ec6bf7db5d0680f50791eab4cf52e49

    SHA1

    119141fbd49c4fdecb32d849080d269e32822380

    SHA256

    bb8c6ae03562d286b31a4d9a4d00d78e50bfbda6b0efc3d81b7b19c516c800a7

    SHA512

    808f622319761622076fce442eefc80a03022232f2325352e80fe3c3d3806de6b21c87a1822589a2ebb426103b1a36fa2f60fd6b420aa7e2b3ce4d229d196acc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf69180de765cb5619584c806bc8bf8c

    SHA1

    d27f2262e41297b5a15b66ab2f764c300f041411

    SHA256

    2b58fb00506f77a0cc93d9a445dfb19c44397944cd99a19efe3c888b63afc6d3

    SHA512

    e653bf55cdcb23fd9599c31b13d727054e123d621d13f5ffd76ec0bfeef666364a577be2d9e124e5644589f1525718175d80b8b0780341ab47d364aea34bb339

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c19cc3ad957bd4dec44b21f887a8020

    SHA1

    73e592ade729cf809ba18b9ec891069dcca24463

    SHA256

    390ca901cc4b151952cb0c85a6e55d48da91e79967ef3fb5afe268c5da2a637f

    SHA512

    676a66779e0853c2c01b4eecb38f68a0dd96762d65731bb488e12f8e25caa06ddb4d8c26e1b88ef9ef1877bd9ee5651cffadc58347892ed2bdc3ccf456c06d22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39806db460dc6d42d38a16532a99b3e8

    SHA1

    625592ae244741d3441a55e62f150de170bd3c9b

    SHA256

    1700d6dbd5ef31b28cc76c89ac8950cedf9063153a19b3fc3c9ae17e2dd04862

    SHA512

    d7c59b74e8cb4eb700a50e96f5e17dc6cf6a4f76c62961d30e1c625f367ebfa69ce9b6db43101165aa0da4c02d7b470f0dbb1ed2efe87a6efb64523dc05d615a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9aa2a3d895738d2c21a75fee98523ad1

    SHA1

    71fe1d2df8a3af8f5cc2c2f7d6293d8d66770b0a

    SHA256

    c433239ef104216a51a66816777854283a00290ab45108e7b963c9f148ceb89f

    SHA512

    01255c0d637a09dd598b07cc1bf534721a35e4b222cc1a2009e1948475923fa335f8e4cfc5ab7e40623b56edcd0ce4556dce3e46f6281fd225ee995c2dbfcaae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    06af04a93a2e399809c4e6aeb027fdca

    SHA1

    34965c31f60375b95a3393bd18974716eaf8a71f

    SHA256

    d3bfabfc372696608512a6bce4a19070c5ee6e9041f220bb88b12eb86904c223

    SHA512

    468569c4e4bb367c764e05826f3d98683232434590a0f11b9508a0c6968723e76165862006d42aefa89526f249d0411c782cfbb037ef4e42aac8987dfc86c2da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da55d798bfa4849cd2cdb94246788907

    SHA1

    2b1a605958f9b2f1bc8c84746d2769afa786ed2e

    SHA256

    dd81d128d7e4875a824d4286b7390c78374e410d8c47231b9cf6917cf2c133d5

    SHA512

    67eba713c3f41e82a33203414aed4e5396b8497563cbaaff4eadd48f4085fe45dde52703b23a4ee23bcdf70809202678650881ed4b7bd5d15146e32943ab3f0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8156ef00bdb10f413a044a8cd466b9ae

    SHA1

    ac1d0cb38db259803c016855dd1265786fe55801

    SHA256

    daa1177cfbb3ebee3cc0056189d3a080ac39450f21d55eb96b6e792b25bf0ef0

    SHA512

    94939fab26a83d88f75ce25c0eb61ca541eed54e65000e1e1625aa2d8e1da4bc336eeeaf9e17545936a6f4b4dd403974288ecb11df76706365bfc51d3508f727

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ac909d1bd35aad1ddf4b73f71c349cd

    SHA1

    e041107e22168600c7e9cb7691a491ffd65d5fce

    SHA256

    5069d0b1e8a45d96ca5cf897e5fc41223319c2837273b303a5e47e4abd806af3

    SHA512

    b9ad5bb9a663725387589d32b51763a99e6126877ce0455febdee27832c563d0ae00616fdd1a5d38313a1bb5d44edbbe4ec192755a6d679d99840d0a9bb0082c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f4e7010989490890d26fa328d0d5eae

    SHA1

    5dc82cc0ade52525ec483c85f864852cfb0e7f27

    SHA256

    db82dac3c5805d71c7490802aff4609496d5cc17e966391a2ba5a83d0d201de3

    SHA512

    3bbb06b2176e3df56285f63cf6ee74b7e2595608c65b27f006aac2d5f9861c7d35ea8fed4592b821d04a2d647b7e6ef0707cd3a51f79af01e8c2553f8e70257b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cbd6418672ce3ca4bc312560679812e9

    SHA1

    b2cb17432e419181bdcff45c83ab1675d68eb21a

    SHA256

    129488b48b9e5a207b011aa7049a501b475b5d976a86315d36647c87e413c486

    SHA512

    aa3c0fe98c933b149b679e058138aaa49f82135aebbd6d5e05be102b9f40156d7da8dc2145e9e87dcf5168de3b92c1d91950c9aba66c104167f3525f0145a8e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c2cad9139c681def2f4f76b28da9d7b

    SHA1

    006cdec5b70261850d43190e1ba795b65cb95b5f

    SHA256

    8c3b79879d70e34c730676fe097ce61c6aa833bc58e443db520d6e37cb3e7057

    SHA512

    7011d59fd2e7fdd94fe210fd31aa1dc5952dccbe0b4576465a9b417cbc8c188af282797d068f82088c57d2792b2f83769d692bdaadf3a7e56579251face91e56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    160a38278e251eb9283b336e01d38380

    SHA1

    e96e375b6b6a6d0ee603b32b036b267e80b4e7f3

    SHA256

    c9b01d4d556e7afffea85b012d8fa95f737e5a8e53eda084244509211fb89913

    SHA512

    64d2db30e30ca056e2e0b0f173d85d96f75c26d8489908473d77eb8944ba0d300ad47ec5a88ec6bf0e8ae49dc8fd43a358756019a954bd3b10db94be0cf802bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b93ab6bcff10155296fac734050db09

    SHA1

    043dfdbbc5dcfb44b5e488f4653e2762398808cc

    SHA256

    d5132a2cd582955b292c943c89016aa102ade556f8004ada8329d08345610c9c

    SHA512

    f9a7bf3a3b424ccb071b41d22c91993575f306cedb5e71f551a36e5ae456665554b54fc59ac7bbdadb50f220318da954e09b987d5bcb5085f4654d8def783dec

  • C:\Users\Admin\AppData\Local\Temp\Cab25AD.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar260D.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a