Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 19:01

General

  • Target

    684966964fef63d29dd1a0cdff12af56_JaffaCakes118.html

  • Size

    18KB

  • MD5

    684966964fef63d29dd1a0cdff12af56

  • SHA1

    36295c8b26c024ca1504043ec83e226b3d4c9311

  • SHA256

    93b598f92b08b190ff22f40128d062c3079774af40ff980ac9a729a3690fb3ef

  • SHA512

    ba29f58c47d724b08e4fd4662fd8ff144bad44917bcd5db7caa17d95ba4088ef5859dc865a659fa7d1222684c41d852e1991bb66c5e448ff8a736dabb3303885

  • SSDEEP

    384:LJfyaQ5yz9zWWDfSBCNVSYPbjqZ+MtS9iFX6:LJfyaQ5yz9zWWDfKh0buWmK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\684966964fef63d29dd1a0cdff12af56_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2204
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2204 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1332

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62fe977ae2594021444eff3517b3ec37

    SHA1

    1c3e9fcc37173e265e50e9dcfb22c72babc10fd7

    SHA256

    174d7bffdaf0929d45041cadeb3757cdcd6c3ca03a41ab1d0987c97bc5ae87eb

    SHA512

    45cb721cf90cedfa36159c6f253af462a341d3b3d39b515611b5953296456a561b9e0f308ea92815ea77ef486e15e7b3a7baa1516fa4d46a29d2730d82ebf1df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ebed85cf64e36b3a8552d31715a3bc8

    SHA1

    b50e8faaa7746716273b2989f748f52e5d6405fb

    SHA256

    caad364605f79c4b18d0c5efc12b3a709fd8b062adb31af4652b351fd057820b

    SHA512

    387d49fd2a0d0e61dc5075408d7ce3aa599fc2d8b58447397d28eb34a7646dcb8fabf64e077ca54dc737a8fad3f71ce7b7933a0c4eef5358e6439e1b7e2fa578

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f453385ef2ba3679e5ce967b69ae62dd

    SHA1

    b790370bbc6cc09259fafdf777ebb308449feb5c

    SHA256

    a1b94281aa2fc35365b6b3fe2916fac849cd970d84af353baf70587dc91a3523

    SHA512

    5555cf108b5edeac34ee3b46a654f14045514da8deb8b84ff77660d9e95d278f4df498fb546cb1348aeb79b402ad2b02c719ab7637e2106693bf4b07d79e8431

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ce870d85518156afed84a8b8f2acf87

    SHA1

    a66d15797c924c4f2097e0acb8d7b97d03ca7bad

    SHA256

    7f226044dda63a6d8a16035e5fb67a859560b9f416585047b5a7d429fc857c78

    SHA512

    b1023f8b99758d82235fc8fdc50879d49209267750e64792d2815c900118569889b9c02cfa30175d903d916d30c4757bc3804aa5cb77fe13b1c0016d6a634173

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da05e2c4a13a53d8af96cffa862f739d

    SHA1

    e5a7755cba774996aa72684bde3d6ee533a2f7b5

    SHA256

    b1f7ab211adb9ad2a948f82dfa4c9add2bb97e228a91a2af18a07ec1514e5359

    SHA512

    6519a572048392967c8fc83509615d830212392b85631a96fb4dd2311c15c80173f93ff16d12437ab3f02fe1d3363c8f7557db93eaac1420f100781986339e9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fdf1f4387b13245a76e3760490a68f22

    SHA1

    62c2caa2cfa53cbae4796cb537bc16bad8b207f5

    SHA256

    a2dfed15cff92dc6ae3ed6834df18d89f977093546c01a852b789078f481cc34

    SHA512

    65356033fa752bd2416e952b9822cba2f0db55fcd2a577dda4c1a378bc0848e437f5dd629856a0707b8e74aeae9cf827be00800368222a80c41873bcfcbba0ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e2033d108c9aac4f700abb35345a9dd

    SHA1

    ac29f74b1b0777bda70202e374316c149e10a0fd

    SHA256

    45ce75783a0b314c1e6b23a1caea155411c16a449199c3b2274cea62a819937e

    SHA512

    698d6d89e3e7fd4b5f3804fff2d91ee4e7dcd39df8dcf5853f8e122d88c37b3ec0e8e72ebf2a214019de13d6b4205667aad1bdf7e2db328fdbe1acc7e1ea614c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f44db12d6c3ac71de73bb6059caaba16

    SHA1

    1e18762c864f0e714fe871e7d67bf0f11961604d

    SHA256

    517031ffbb77659413e0aa4919dd04088b72d843a3364d52afeebe70997d837c

    SHA512

    f80e40acec55f4055a3a307ecb108868cc60c02dc0916a1fd9e341d87bac8d194f87421793f56f3f35ea30b7b849e96ce525fd99c4e6cd01192f664cf24b3bc2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35a6246f13b1f70b35e5cb2925d2dc63

    SHA1

    f8ddedd75d51a4a1b76b98bde26fdacfcb7e8e7a

    SHA256

    0de66a182d674512f81027e690b9fa6327947e24aba476dd6fea4c03457d7a1a

    SHA512

    5eb57445ba08bc8ecca6e043375c2d55c6346af4173bb87b3f3008f8944b0f6353a891fb517e1fedfda238a6a84e032fecc065d9ac16cbd5f018f2f3362d4286

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd4923d84023ce86c0719377daaea57b

    SHA1

    358a691efc0a042d2b00e6ab44b616e98ce1a769

    SHA256

    57d5e8d13a4d8a8e8fa993bf93e1ace0a4beed5fb07be6c805b504b25c4e2995

    SHA512

    bf422787248ed66a59e265c46581a7a5ef96dc374e00091e166e3d321b939b3f868d811ab90c2aa0b30ce713cf22a15e8c3ced2b04611da5aba158b2f802e9a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03349f96820cec54bd30ef8a1b1c6339

    SHA1

    ceb015eddf8c6a87bdf7075eb634be1bcef3b731

    SHA256

    054aa3fa92222581932198638873a3b638c7f6ec85626f6abbf59d22fcdd85b6

    SHA512

    bbce9407453c7525bc32185bbc327372e00ad3d886f162723b90392bf308a896d0bb026e059f17c1ca5cc8ea86f771026682e755cacec5e8dae9497bb2191e26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a36cb50dbf828b92f996d90cd6bfaeae

    SHA1

    f5658fdd2232dd64780a28cdfbd2dfa339882307

    SHA256

    32cd3121ced92505078750a63040b48c93834b675cff09f4ab57b9cb480671e2

    SHA512

    3675fe93477d13143cb329ecae9a5f31c1f9d0b8bdd179a95245b1c3d3635791e0d6b08e3bdc41630b8538fb74fc78d0d7cd520c2fd5cdc3c7364c973cb2cc26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c56cfc15fe19a6b05ba32ccb6bc70822

    SHA1

    2aca6bd576dd594e2c606823a200b2c1727ff14b

    SHA256

    3bf8a08fb3baec92a266f90486d858fcf4357e2a1b224134960efc3ea9fb45c2

    SHA512

    a3b069b26369acef91a416e6300c57ad255e092804cb64b6fdbdd7dad6795b2efb22331f5869acc94a81c14e5b12129b185af336af27dc4bac7634807676ffd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad61b1ebe5793c91e3fafa35c4c3b12b

    SHA1

    014d3fae14b32c58893e12f9cdb7fcd0bc907c59

    SHA256

    bc09734b4bd9485b15be3678c6210413f1eeed5eee45057b56c4668d11f3d4a7

    SHA512

    5c3ffa58af7100861c321617b2195ed72cac9e5afc533374bf78a0d1b54937979a662d3a93844760590f9239435aea5c397415a16565b194de9f6a12ab3a18ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3560e5e1620f00d5edd1d0d6065e45b2

    SHA1

    7d70d13017a1a0f9143f209ddef43b825b95d5e9

    SHA256

    1ccfe5e85598b01060e6266a5826e21153021801e191329ad41c5b97bb4efc3e

    SHA512

    335728d554dfd56fa486f11d67198d034c0b911013e37d5143d1087ae40632c79edc20c64759014e8d29e3e1e7cd0e6e59e8c4c7b15aa9165ac147d5a553b494

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    011c36fb5519116cbfc7969ff3585acf

    SHA1

    67503094afc110882d4572441cc0d041c495b2c7

    SHA256

    09af0cea648e324773752ff790e3f4736eaa9ae8798330366144299b79228099

    SHA512

    3c908e7ae0031c2195444281889685a668e0b23cc5a726266188b4950d0096185e5c3f5fe0ee30b1a308fa680282f3a10f353f0e8a02ac0da5b852e468f53c66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba571c3ff01e6dbb05643e533673d749

    SHA1

    caca475baf04ebf314696583afa0c4052f272fc7

    SHA256

    eb3d62e9aaecc774d9ea1cba8f18d85cc96b036c166e5fc72dce880ce81c387c

    SHA512

    247ccb195fa13da2e65dab5f0d84ba65468363651a491403351025a355860c76bea8ac830beb7c30d0d22731a0d45813632ea52ee3071f3a8c8573948afcf1b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca36ef6074d66f913815f88b981a7f95

    SHA1

    c994c7cfd46f9aed2fbf5ca32be02a9d8b9622d0

    SHA256

    3f1d95029a7d94c45b7555ba71b5595d6222d6e10b7a69dc51c732a6b5463742

    SHA512

    2d199bbca9429dd29b6a67a11ac43459cf0faf3d3a1357bfda0b6f0b0bdcba9b8da5bfb238c0637dda0b6de6188f437cce766816ddde1e2e212632624559fe05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f0827c2cd8f1103f64cda2dfaca4877

    SHA1

    c61afdf04fe4f31a00f7d6c92e74aa3bcea774a5

    SHA256

    90a2dfabf74720947514a00188a8ad2a786e3e56896762757b77431706e1804d

    SHA512

    ba93e02bcfe801c22654cae2be3fe5428bd8d9fd3511c703374cc2e0db5fed7e31051ae3cd6f1e4497b7f6c464434e6723534fd99c06dfe0bacaeea83d3bfd27

  • C:\Users\Admin\AppData\Local\Temp\Cab41F2.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar4263.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a