Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/05/2024, 02:50

General

  • Target

    61cd152e312d98c110471dc970616b0c_JaffaCakes118.html

  • Size

    135KB

  • MD5

    61cd152e312d98c110471dc970616b0c

  • SHA1

    f471ab02bfb520c6fde361f0dabfaee85cdda739

  • SHA256

    d750f962dca65cf524974df30d323c3ac9b16d2f611a9c079dacb402f52cf693

  • SHA512

    edec0c114fe36514cb866396ccc0cebe777abfbe53596523755f8b5dd2e5a793575bf30a66fe349860cb3430bbfb5322263f30d4a1eba6e8104a8b20e033b12d

  • SSDEEP

    1536:S50yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsn:SeyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\61cd152e312d98c110471dc970616b0c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2352
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2352 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3020

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4932976333d9c8ca9eb206c0dca13bf7

    SHA1

    caf67194ba3194c3aa9437cc9591621ddd10f272

    SHA256

    0c432a321af5abaa4cfe2eaeb369d5bd47f661be074546cd9960575685f49d59

    SHA512

    6c1bbd756de6b8982866c859ca29c65ca3f0984359add5e61a9642507a03b97c806aeb13d5c0c5cb939ab3163d9b1205e2b810081efd7ab38af390145a5123f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e4137d1bc96fd201777bd958b72ed10

    SHA1

    a84d02ba7ad8b631fcbede50738bc32c467c899c

    SHA256

    e2a7ff7356afef18f1a81b5aa2e27a587f14d44868cb28c0bcf111078f23a79c

    SHA512

    6ef61513c734149b93984bc44c8ab50ff2f0cf092fbdd79927a38f19ea05015994de825ab8fa2f9e35a002c285c107af37062224663ff06f72b25ae4a05a7680

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed0c14d09e34e90a5b550024805f27f5

    SHA1

    be79130f202b260495b911fae9b21c23d322d6a8

    SHA256

    cae77288f74f5701c8c461c2449243a392eb4f0e7dde68e48517c6b755c78fa1

    SHA512

    00475e269071f3354a681c9a8b9cf048b0841b48059fec8ce705f543fd3c0fc4f1594f932275eb636c703efd62e6e19a3cd3dfdf32430ac114a15b186ed99d82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e42860a43e16c067fc5ec63d3acaa67

    SHA1

    5e7d7995e5c8eb4ad6a1b836640ee5a33ea43d7c

    SHA256

    38458e112e7a019377e7e7489bc786d23df2c0d992d7a76b6ab7da0c06ef4527

    SHA512

    ba125728e2ec1d7bdc552714b25863b3ca0c805b7b3e57c359ed8a9491b50b89f03e06da5ab0590e87303e36064d0152b191856b07c61fc72cfdc6d5b4e5de75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86b49b01dc0d3d28a4bf0cb073ab2b7b

    SHA1

    68a456b117064549276b2b0ccccb2fe402a65d7a

    SHA256

    51155781a87f2349dd066648b3aa092a956abfdf636a5c4134d0f91169b00c94

    SHA512

    499f6147e4d349d60f7a7fce97a3db72091c1ee720cb61308fb09c70c54ee6a497ea3bcf9d5efe2ce9f17e78cb2fa7036766ef2779b29efdec71dfcea11ecacf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20655fd0c5cd85fab42ba864f314c962

    SHA1

    15286b4718c07d125797f20606f72205b94ab4b0

    SHA256

    bb8e8e44c398a0333cb96a2ee2c0b0c3177d109eae4c78f6d4637084e8111fee

    SHA512

    f6654e681cd1d7fd2e40deaf986eb3054ec28d7e4152109e8ef714caa6edd5b4bd94547cef501930d6d9e5a3b99abbbbf2501c7aad37b4190abb569e420f77c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    521d1ba7481f3226fadec9634ba84297

    SHA1

    8ff82a08e38112ce4ce2d707006e047fd70d3800

    SHA256

    6a4ee29531da38202b3cb3b65747c25443a04a051e3f8ec71e1eb65e84bb9575

    SHA512

    2611237fa56a1ddd2a5e560aa97a05b229811f35b1c4f43d65f9c4ae829ff544eafc7bb6df38a65a376f9b020208a5ec43ba2e33dc2fafd24af325df1d507aa2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62d77f2dd96f9cb1817701d4d2a4d642

    SHA1

    309df27eeaab6d779cfa1be964b22127fe62fccf

    SHA256

    e0c5abfe12f5b3e7af8efa017d2ab45f7166d62a0c7b07fad87fa3ecc887a6df

    SHA512

    37e9fe5d8470c5859eee17e2d52a9261e641383b2ad787c0ee841a9d12935293e3fc0fb15becc6f8e0ceafc89c7aa978c22c1a98d052c41b5c09ba47158f7bdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    74cd71066b2f0332fd25ed87a55c76af

    SHA1

    caad7739b8fd944a8aef6b34596ae8e86adbc501

    SHA256

    a18ee743ce099bc7d3c292348375394e561c66db273d813e30788b65959b9bad

    SHA512

    d9f5b8e9692b22f721314bcbb859939bbc1875138ac48976485cfd9ad4aa3a6f6f05d74018d9a4f24ab435d07153a77478943bf9c28eb5369e2f5f3d1459cbb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5cfcb75d574ed4719255ef453176c6e

    SHA1

    a68e406ee37510280e3dca238abc57b5cc959bc5

    SHA256

    63fcc275aa9f96a47704b6d3a16871713c82916e0c53caec2dd5b4d12f8e0f21

    SHA512

    4634ad749c1c140472599824a165cdfec2bad3e23d2189818d811f3d57ef75d29a6dffd7d14348f15527cb37f040516616ee36684c72cad160fd003f66efb6b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d6c128a4f708b0ee3ee76f786cb0ce4

    SHA1

    6ded57f1be684aee3f82b4d3346d3282211e43e2

    SHA256

    e97e6b9df03d900991dae19f1a56a42d42e057c95ac84cbe3ab3af5bea4052da

    SHA512

    ca2d1fa7ec4bd555b86f87ac7862041b03903e325105b49285a8995eb2a416afb7513e4a78d741b54683b5a5116311e916176317a4868089eb6d4882f5a48d04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    164ed6bd9fd3cf71b5de3f41b28d88be

    SHA1

    2466e95a74f3da6d03dbccac2c19878c57fc568d

    SHA256

    01f5c98e9129d6ff8df179ce29711f2346a127a5be8794330783f3680498e1a0

    SHA512

    54fa1e6c0e11d35574d4d60da7fcb2835f2e254273940c9351ca86fc267754a872e2096b02bfa5178a5963fe5d617040a8f9add7157074aa0997b66508661781

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1da6bd4ff1a1906e6cde9c7a8535665a

    SHA1

    dbc53baec4d51fef56c5bd4e7d171523a3a59a5e

    SHA256

    658872a816aafe9373b7897a3485af8ae3b218f0eb5c5209e4d75158ffd07ea7

    SHA512

    be734c4066cf90cb497fc3d232e3af1ae459dbab47f9cbf63c440d7e8cfde3bc8e498d85e237cb98ba563c341cfe67eeae3676af82de9d8a5da9ac9f94cde30b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94a5d634e51d98e304d96e76f81fab0e

    SHA1

    97d55c80fc016d29e931e9842d8bfa7fa4397765

    SHA256

    67263283703f8353f8f682383c828786365ea6583a14445a5332b1a518a5b5aa

    SHA512

    bfb092e86f9e21e9b20654a5d8ddab002a0ef14b98e577964dcaefc3afaad155e77b553c0a8e5cf3bbbd36408b3ba79873bcf138676d7bb180643a600e6eee40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    84b1ddb2f87ae06d33283a67379b64b5

    SHA1

    5cb881d0f65232d2c51d3c55254763f05699b508

    SHA256

    e77204be235e749fb89673baf874c3d4a1f46541b8e7e09470269b2f00958cb7

    SHA512

    297a5de9b798c948250546c8958f2e5276b29d8420b218515b062d2e7dfc55cd23a545b9b075a38eafc0d89d8016a4867e90b34ee2d17e68cbe5ade62008bd3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41a2ee62e06e03d6e539c9893e90374f

    SHA1

    47d7dd1f96919e1e858ed6857781b6b624c3bae4

    SHA256

    ec7a3a459e99dca879a4969cd029f38707612146c1be4cb103f02d72c3d4d1a5

    SHA512

    b6d3e931cb3db3ad52a7d2fef7d2a2246f46b9bf80dacf7dc0054a2820704072e10bc67e38356ca19aa9e61f714dc00ac49be6786434be093d886d321fb38e72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6eaf124d302c05a73620f827aafd16a6

    SHA1

    e80d1971d770da61ca37db938608f2c69f10292d

    SHA256

    266fddb7ef7aa9ec1d48da0266a4336c9697787b5153ec188da0187774ed8842

    SHA512

    2dc8f65ac3abede6fb76e4d437fa07c5b457be60374aba379238878734d7f5677ff987c03190a6bac7d502be6e226c09999edfa7a61726a0ecb4b810a4d241c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53a897c04b1fde63cc9f2b80785e27b6

    SHA1

    4987802482d157ae02af31760ffe1917de64a310

    SHA256

    6dbec71c5187156e9278faeb0293d148284aa1ccc72593cb558545a3cb57d60c

    SHA512

    81e98aa91dd7863d63a387ad0fe1c0df6d0929962c7d26bdfdc0fc279a13a19dc4c22bc9917375ef29ea2e25ef259156803ddde5d39052a13042f746be92aa33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42ec241881527bd569550cb97aadae50

    SHA1

    e55c4d7d8f22a474e167d46b35185f6011996fc5

    SHA256

    d9f17ffc03b2e5f7461df8b75798dc1cab734188c08ffaef41edaa051ff748a5

    SHA512

    21a6eea325b3e4bde7eb406923bd0c7a02ec203827afdab527631725619174dda392742dbe40a69b7357d1f06b7567d0a8a686bf230b3fb63a26ac593b3692a5

  • C:\Users\Admin\AppData\Local\Temp\Cab279E.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2881.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a