Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 03:53

General

  • Target

    744005f578346a66068aa239cd0d0f7f_JaffaCakes118.html

  • Size

    2.7MB

  • MD5

    744005f578346a66068aa239cd0d0f7f

  • SHA1

    225f77d4db0f885bd0250279e1fe0e54d9eb876f

  • SHA256

    285a3e781e424b2878b3f3af08c72ad81a624264e0803ec2926f9da5df84d1db

  • SHA512

    8320d243389149743ca68836c8d2e29244045765f969f2def9eb9cf27f8ab9914c7d65d09463494b3c6a2c94e1c3aefdf37848eb857a6f63f2318ef7c84e4710

  • SSDEEP

    24576:k+D+i+l+f+d+2+n+q+3+5+H+L+2+B+B+k+t+0+T+++c+D+F+K+u:h

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\744005f578346a66068aa239cd0d0f7f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3068
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3068 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1272

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b6d567b0e3bc2d737df36fe4f2e8cb3

    SHA1

    5df07d8141755a6d98b05eb8349d84ea89226626

    SHA256

    e87a3fb6eadbe0496de718cf3d07ad0d299fd5503e053b66d9a9da8d769971ed

    SHA512

    892fcc1018c823e29a9d802aa2412efa61f0517a723b855328679a12b60b99ed49b1a27cb4cb5bb232e63d9148aafea1f59151a20ad54ec7a172350201fc483e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a67d59e4e3249f17f7351baf4498ec48

    SHA1

    a66cf9fb021aee2fe54bf3ab5027063a4a51b8a7

    SHA256

    d79a8a5f933e99c400401f9c7580fac964e82006c5837d15fbc8987adba0ae4d

    SHA512

    7825a2bbe7015b82d5e7570acbe127e1d1f1d3ac9a0859f5fb9fc27c2121a7527115d9da9c46a07953e4b67a91f2de45d47b982135b6dc21354806b755d3ad30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38bf216728a682043e9d3a91a9630739

    SHA1

    a4ffd133b3355f30a9d0508c15410ca65929ccee

    SHA256

    ef5042e72740262b5470f4a7a5307b28e0337af65c82eb8e6a4c0827bb4b054b

    SHA512

    8dcee67fa77db96ae7fab50660c2bfcf87c7743d1ef3dc0eae53024211e1f273bc31cbe35ca7e70e79753ba351c2ae0b52df3784245d629df24d72889d8f5b7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61b40fcecdc500b362a500c01c68addd

    SHA1

    7f5020f45a3515077dcea8061eaf9a406fa621a8

    SHA256

    884eb1561c67a75961fc1602344ab7a6b562bf78c35d14f011f44527554d7812

    SHA512

    8d1e28fd4f7f1e0369cc18831e84481f6fb9a208c6f55f4d408526dba4d7822c643aded2004f419bf6478a042fc7033e3692bdfbb5ad386281205be2ac67d98e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9fcfda219b57aa9251fa4e35fec0356

    SHA1

    a7055b4888cfd73e5409c8f9938582396fcfe7f0

    SHA256

    d487a7733c0ec41807d4e7f1b83bb63dd1d83c976226070f5266d2f97156db2e

    SHA512

    43accea15aac9644ab69055c85922fb98df4e799dcecabda3dfc5bdf0f9be806875fffd1b278b8cccae7f9b162a728374d2b88d934270f24949a2ec075848643

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91758f7f65fa40666da89661479e4f23

    SHA1

    6cdbbb21b6679455caa54ee813946c8239faa25f

    SHA256

    9575a2b6a59a3b6912a656273a3b1658cc46686dbf6cd833ed4cd4684cbf8f10

    SHA512

    624d53e9ba3e2ce5b305245423a5050ec298c4adaeec01f254bc82f6adbd33359f10d416d5eec4f9f65fcc724dd1cf6ddccd7d2f24c2ae6b21a96a4865be58ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    315298949f1c1a883139a1f4a9b327c2

    SHA1

    038302946691d6f79706b6c87384354781fda6e4

    SHA256

    c35d684e1561747633fb3152796f79a63ddcec8a0c926cab1269c2e263bc4279

    SHA512

    6b5a512cf017dea529d06de454193680b58b4a8d781765e2cc3638fe7161165c6e0260dbe26420d9a3ae6d5ccce260ad3ead64e530bad641d44b813f18faa9fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4eed49f4b389f2b345729777c530c740

    SHA1

    e7235d7e38ed23f783710b4b5cec68d019ea8260

    SHA256

    a8c7d63e2be2216e431e3f60f6a9d746544c096c47eac7574cde643674c59bc8

    SHA512

    b1460e20fa896d3647cb60979b53c8ecba2fb16fed58d596df4cd100be037cf2699164cb5a3d14c618cf324387623214613deab631909ecbd685f561e33bb260

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f5a0d621a24f779458dd0a23dcbb5b8

    SHA1

    740d015200a52062fe591c34f8c22e2a515f9573

    SHA256

    f46c76f732d9873aacb1c33f75818a8ecce508d2582e5b2728c1de06b45ce9b4

    SHA512

    85a0185ee04a4cd40985743de6168cb8108e0a079f87133d18bca3eca1acbde4ef554f85e95e44bc60d61f2039af40fa447937cbfaab32c7edd8d16adfcaa311

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99b4f5d62c2b63284c29e0c88ee3deba

    SHA1

    76c2b620472ce650d1e6d27e883f4091796c746e

    SHA256

    0930837a674eeb551c8318bcbf0c174628ee3a5c6645edc55ddcf326d79b031f

    SHA512

    7351e18b432e904fd3d11406b97687820bb28d9e3b1df28882ed871d5fa6891ff9d436cfabb343c62a51f18ebd6c006d40aac53495b35739151cfdc1f2d409f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9d37a0aaf06839f93f505edec5d8af0

    SHA1

    33cfd6557f5e805383ec0049a725bf6dd9541951

    SHA256

    2e42a15406b43b1de6666fbf562644fcfe2f6c960a383264511b06e6a3e77915

    SHA512

    fff0693a41656e145c16a02543f3ce1a6135a2e569401eda1998d9231239ae0fd4ad44e4fe2d5eeb85439a15ba8691f6368087952a03533dcc9c2d59183f3ef3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    929fd6a925e1f780b217400aa0fceaeb

    SHA1

    c4a50fa3613edc2bd31877866b5128b2f139b93c

    SHA256

    4ea061d9e966db8f9a3560dd6aa03110681c2a3798d29f16dd6a3c8e535bcdca

    SHA512

    11890d9df4377318baa64cbe9377b794547abda3a1667b5db67081a0cf3bf11a2f96bc400ca3fdf805696db2280df0908f72e35f1088ebb43798104ba440f4ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c2d67e0c591eba76176971f47157e1c8

    SHA1

    154019e0c38dc570deb94355b2d10879db940869

    SHA256

    c22f865cfcecbdface41ca3cbdd95f5772fca5532ade9f40a75dbb5958519a3f

    SHA512

    d527392d5b2cec30abc96d429d2ee22f6eb1436024246a7eed7f2289c3426d97d547d1a1db88e9f110d8dae9b2dae5a0aea3a907bfc32bb2c81e3a1e44878db0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    95c6fa84e37d00ed7a683cae32226ee2

    SHA1

    e65e0132e7bdc24d15266e6dabf8cfd185d38b54

    SHA256

    8f560e811963a8a0507a0b8c08abec7fce0f1dcb87ffff0b3c18ac62be8ec5ef

    SHA512

    78df3c30c4d82f0e91601a99ab8d0ae52e6f09fbf78eab7803435d4113826e0a421f85af162e92a3b559d83ae29e46381ce02f465892853acb1a222682e10c41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f040f91fcc11c2143e4b7bd457a23359

    SHA1

    b5b3770823b8a2039f8ff686023b4125d7b3228a

    SHA256

    d14c802686705dc843b0717b79d2f70e3d05aa05f296a4fd5d2f6fee269c1827

    SHA512

    888922845c48e8a8d9c42529f01d277c9237ec8c893fc532016e52500c3502ab3418afe14c3727afc79795ebbb679f76f0d594d9d5b9210e06824e594943e049

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a0ed1e2475a8b4f0709f064bab108b29

    SHA1

    2899a9d54b707fe2046d4d83aa83837ea0a42f3c

    SHA256

    8c2a23afb58d338ab8a05e78988c1dbdd93a92309df1f9510d18014c76b8cb2c

    SHA512

    62cb5e1f782fd7ed8a3bbd3fd7978193877d2ae7f502856338846ff10e03962a0e054793c26f7636ebd7719565bbf3adfc8a70121164d65c0308d4081d364d42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a9ba9f28821c6250bdc8c97983ca71c

    SHA1

    51ab2dda456930c19f4b909db1027f86f5bf9636

    SHA256

    afe6b05fac3a8e0c6b88aab317f2a29eda22acc908dd0f4dbc695de41560edb8

    SHA512

    00458e2df91c4aa3e35e6806a4e5012b199a2ffe0a38f607b6f7718746fa6176b4ecfa82f4ae958b66ba770f23ee671eb0e1b785fb41e3e169b69adca4e9df27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fbcefe5d9cad4f8c89293c8f863ff7a2

    SHA1

    b0148a0f7291f07ead525e7f0f0f7217221f9bcf

    SHA256

    cba4bd0343feec70c0beccc8addbdc76cfc8ab11ccd654612bc05317f7147606

    SHA512

    b4822e08c58f34f7912ed74e2cd2f13d893588c191fd86ca4f9e5139d21f919c6887106d3a1979cdd07b460d7b27728c6eb738c6dc1bdf309c119092b3240645

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a70d3a60d004f737f552aff7764c7b32

    SHA1

    a35df7949faa2dbf153ed3036501c26d64b558f9

    SHA256

    8bea1129ca7e894f2b05d82f86426f39d0e8e7d00e6e63eeb32e8598d4afb927

    SHA512

    212d947cf1c5e9dbecac9913a31e1e6e6e179027080b2ecc11979f891f0363a989b72702bd66ab51894907a8beecd163dd613ebcf30da0847ae87f41cec401b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a50e9da3a9f793be5e7e47ba990d3cf

    SHA1

    22cca2397fe47f2622e58556378d12065746460a

    SHA256

    6a23ac20626fbc784ba83fc0fec7b9a0e6e8f476ded0d299639d2154037e9ffc

    SHA512

    45bad00dd49677162a8bb2f4d07afb457069e5bd6980e9a16ac9688965230d54d2577a1ae407a550370f32d0cc581c43fa043d7a66bdfdb1e89637516e732b5c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2XHJXO3H\common[1].htm

    Filesize

    1KB

    MD5

    d75349db4c308d78c7f2734e8b96b493

    SHA1

    c31d7389e22cc156d10a61e9fbeebdbddbbf5598

    SHA256

    9186a87e4b9bef041ad2b2106627fab8cdd9ff55c658aa52338bf9d1b40d644d

    SHA512

    beb42e2c34dd64eeb3c555053f0d5dfc0b6e1e3b92112fa7e672bdd9e85bf7e80dce52291a2eb0ce310bddbecce39ad0e8a45f82afdec7952773fad67bd41ee9

  • C:\Users\Admin\AppData\Local\Temp\Cab3DCE.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3E1F.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a