Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 04:44

General

  • Target

    77f199a3360b3ffd626197f42c216c77_JaffaCakes118.html

  • Size

    461KB

  • MD5

    77f199a3360b3ffd626197f42c216c77

  • SHA1

    52d0202bd29856c4d30615623ea83722b7b8406e

  • SHA256

    186bb772adddd3251af2f3e2cddbcd4fb7922794cdf03aac52d4f21b8e554b9c

  • SHA512

    adc8aec8cce6adc894e79203fafa49668183ca1e6b56ca5ee6cd14aea470acc8b0c5dc9f57c18ead9651649fa329cf11401309bfcbcf672ca2a89a8fee77f7b0

  • SSDEEP

    6144:Spy0sMYod+X3oI+YGo9yQMsMYod+X3oI+YKsMYod+X3oI+YLsMYod+X3oI+YQ:I5d+X3Q5d+X365d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\77f199a3360b3ffd626197f42c216c77_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:328
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:328 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1684

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9f7a92a3e514ea16078322c61e5cb5f

    SHA1

    f6ca31c2d1bccb068f2a0cd1f0a524859b2d6fab

    SHA256

    a3aee74501786617fbc895109e66b41b6cf109443ce825f3f080ba29b7c493f1

    SHA512

    40f1f72e1e971c386f27039cb5bae9a4c677bf08257dc0da975565a6690d86064ac966a2f6e827f303f68ccc6152f2e677f10fc19674b2c2332e6877c7f697aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1852a54a7440491dab7f3c9dd08a797

    SHA1

    bb92c909ade5e2027f041b3445656e4611a28fa6

    SHA256

    1461312982218dd60e8c290260a6775c813028d55d4bb189c7950f22ad4ce6d2

    SHA512

    da777ba4b78fadb1b8c548647e0ff9c7627e69c742a1fa0e590f855cb71bc9144b896587b8a3d6eae45bfbf6eb57719f920cbb0b9733c3e1a16ced60951b7e4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce4d72aed8cfe8e78b1f8f98abfb5729

    SHA1

    6b4f3b9d9553940acb84dfa27a40a11a8b4a7ae4

    SHA256

    b6f2f42d6add7565735a9564c57d55c2a2f00bc3736f8efc8b6884ef87717684

    SHA512

    75b9cb6d531123ea9600dbaf6beea9b3777d28fdabbf31c03a9c774769093e960c39ff60eaa337f4dcf4ec67091bd30a62be95cf2465f8ca16ca95f9a08fd7b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92e54858a3b7027729e60049b753abf7

    SHA1

    841911a5b9cb2925bd6cccb3fa31b8600ebd3500

    SHA256

    45787460df5ef31cf715c4fd17c0b92d192847bf0c1ba0db5b5fa0925e932cf8

    SHA512

    4adcf9916b15ef6866a6074d7afce1fe3c23e4c87b087bbfaaf1e932b067c2d74dbd6e5f58eaadc224a9ae7c407b5576df88cc2ef584ed7addc5e2177e9f42ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da37a6f08e487cf3b3a04df2499bea52

    SHA1

    f9a640172ef9926c5d532ce2a24d7d1585052084

    SHA256

    712180189e5e39817268c7ba008efda114273a4938ba7688b72e9ed52d4d8ba1

    SHA512

    106571812aa8913665f729280021216fd16fefb727b1cd3487b5416df46390205a92fffa64ee48128a5accd18119321ad01844aa060334bac93085e0a9e12abe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    016a5ac387eaf76c9f5c199be68252bb

    SHA1

    94598a24921efa3d61513f0d56de4ca4633df3a2

    SHA256

    10894fec32d6e4da45860d1dfb79eb53ce13ac36d6c3301d753ec25fd5f9ace9

    SHA512

    26be69e81e4fcd2f52843217a4be4f38db93540b7ac4f511fa019f5ad0c9a2f09b16801a95be7481d17da802b153e52fb2aef20e8d2bae29414e4b37df47a085

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b73f4a4e441feabfba28d2d9b4768e7

    SHA1

    2ab762ce3265c3f7583231cc2f8f7836b3c2d9c7

    SHA256

    ab8e17693ebf506fa9f841a3b3ace623ce40a256ff0532f4a74233f6d54b04e4

    SHA512

    af3a17ea84ede517dda3dfe9682ab1d6b67103a6bfc1a65d187f45a7279be65b17b86f584348a75c060a195a5718af41cab92def6831835f306e77f71443cb42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e11589e4a27d261bba2346d6cf8692b

    SHA1

    689931a06d4054f1f63f2467e5bad3dc856aa116

    SHA256

    ffb21b7ee873c86cfd7e61a66d31ee614ac2fa9df2843f14ef7e6bb6a90ad044

    SHA512

    033bbbde883ea6e075a328127ca08ed956f7fd44a73b4c8a796f1dd58b77d278554147e89b52067b0efc111c8e526891897d7757929bfee69b165cfbbc01bbb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2050905dd2b49f3ee0646a28bf58ee14

    SHA1

    babbd0b440f1fb17f68d8fc94188685252920c43

    SHA256

    b60f730eba2f329c310ceaf19659c467f619c3ded7749a996a7946da3ebc36a5

    SHA512

    2b5a0b9a2d80b26ac860e4108ab2e941de0409c0b9873100239d752cc02a61eef3a630ee319bd570a51875a872114d8f145c78f044e65155af548a6da9b658e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed8a79436068e5c148344a846c1b96e5

    SHA1

    e38d8e191455b79eb072f5f385d8d8d209058ab9

    SHA256

    2751b7521e545652f21f22ba3528cc7b4f3fe872d44d448d5cec8d8e80fc34e2

    SHA512

    80daf56b0c8d56fb2813afe7cf6ae455a5890932da27afb2464b60e9951b7163ad005b7fe44408e0d05e2e9500debebbe47e69d961450ac027f5f087d0c7644a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82bd7f67fa226242c808e87bd8d0e34d

    SHA1

    ac8ac91efeced705e168343d2bbf224de257c3d7

    SHA256

    ae030c223d13c99423d8b445b110ae2c86947f23f520a0a6b56b7b7df12fedb3

    SHA512

    c62dcc2401ca3777156edff87f7a10dbf8cf1d3387a2b9cc3d2c65875f6ad7126de876487ffc2e30367e631847b6f3721f09fef155c0ca32dcf24016cd08d380

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    143ae76799dc693d156925ae9e833ee7

    SHA1

    a8b8a6b64dc74953ff386a98d71d7803587a3b4f

    SHA256

    ddeacc8ae0a6dbda5ce10e698ddaf0b8acca35c787090d54e2c01209b4350131

    SHA512

    3ce31b7a97f2094659aeb21104a82c1ff214273ed7b8c73ae3af5002bc7f22d1b678922ff7a99b239d88c4190d81910ce2718061d27d3415171964ec74c38f76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99ffc91860824da6c2b5c4fb69a01fef

    SHA1

    b0d39bd1881e484065ffb1e40c4c9e59c50f7c5b

    SHA256

    d610b5f145b4c4e2deeaaee2a6b8a77314d8b8e11b60746cdba0e20b92a8a1de

    SHA512

    b1f12cb23af58be32301b26f0042c3ee53de07ceaf108d95888b0c3a6fdead80ea96a9cfb605aae39b5b1fba0f3d5a081ba4a262e9b258378ce36b177ecc6ba5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2850e4413b6fd944fa284d323a6ba02c

    SHA1

    7ec0c7ba56422697146dc368724d8a3498dcebd5

    SHA256

    03f74c219f0efdf19786450f77f90cf7ab58bb494b8e22974dd3d0ea3f098f9b

    SHA512

    9357b6ca2879523da76a7ba62f336446574f5a94039a347df545b6a7a8ac49c2ea8adf89b731c284c2e6877f7f384d1e2cabeead635da43aec3ec796f84569f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c709d909877cb6898ea8b90e5ff41ba4

    SHA1

    6b7e5ae107fc696ee3a5d27a2f9b4009feb71a52

    SHA256

    2529ec747a60086a9554f49a13022048c10b15f104d17f253e2daeaf2b1a8a91

    SHA512

    12676b2fb6a040897d4329d017c35b7a48ca3d654fc418c5bb1014862bcbbcaba120ea5ea2834e44bbafa6f1a9c1badf97f14198e13a5c920f9ab9fb73136d62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    420c59b4aaecab9ad8fcdc05f9438f66

    SHA1

    02a7b8a3a52c75eb7f67cc4956b2c1a229aa9879

    SHA256

    0da76b461df303275a293f52af3651fdf91999b4ef7bd478c6cf6ba10b3d3aa9

    SHA512

    6cd193126eb1410436b22c5212dcd57e9433280a83bcfa2bc2365e88652b8134288652dec14905d5b6100d569b0bd58db745e289e0da6c042e5f113153589782

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e7a9919f3880df755bd567678ecf798

    SHA1

    6d0630916958b900be3e1d2ebf3a1a0b87041585

    SHA256

    3428bfa1d9908a35455127d2c9e08b57ab221a8b941ccd2adc4e24e306a379c8

    SHA512

    6d2c86027521f3a7356df91d989bb5739b90e0d9bc398517ecfa23cb6d5d89328d56352f885f9add72759651a53d1a77197014451e4300142766b0182a818c7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed6887b391a665e2e5e25ad4c4b370bf

    SHA1

    a2428c593438fef62d8b5ed13e5bfb975c8a0d9d

    SHA256

    1426d151bd193032eee0015891d61906452ad85741e45cce951eee3fa49b81cd

    SHA512

    db366b5543658b018625cdbf40a1006a1e235f7367ed060d903544e012a41f6d57eac6e49861805c1f8347c274cc2d51ab5bb4d6b4c0cf846ae692f99eb1dd4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80988ee0e2a7928f3d3ec5390a091c6a

    SHA1

    440197c8f6eac873076f8f7ca8d5f639af6d56b1

    SHA256

    ec0fdca82b62acaf4abf4b625603b70dd1f66cf7e00a305e415efb24c9971959

    SHA512

    f61fc3dcaa247f6938134e92558761d835e5a2fecf003568d63f571c84f66b34d55965fe38b7990c0eb67f05fb6b2a7f5fea1883af248d5d336f031b4a59c22d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d053917c5ae92f713d65c0d7671c12f3

    SHA1

    bf134eb79b599db2843663a5055c4aff95d091b8

    SHA256

    8759a92a71a59c16b5edbf636cdcf9b615d47f31da9f06028e587a37e3a087c2

    SHA512

    800cd54379e251760b9cdb2765f7b4ed36324a4cae16bc3e15661f4a067b25914d9fb7a8a859af9681c18926bb9b4175270aba543114c1a87436883e3e2a11a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4d502fe6eee9d774709f085edb3d5af

    SHA1

    883041f5f2a463e3ddda9f78bbbf99be6a17db27

    SHA256

    37ef21c0c44972a6039d20c4ba89feea96fb02c80072fe1b41e612fe97c04e80

    SHA512

    0c18450ca7c812a697edcc77053b386be3851d0768ed619cc1969290703ccc59b5190e26b90d5bf924a3a86b64a1e1155a85023d3f2070ec7c77a2322fca36a9

  • C:\Users\Admin\AppData\Local\Temp\Cab543A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar552C.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a