Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 17:54

General

  • Target

    79fe7501a1d1a4758dad75d12c49fabe_JaffaCakes118.html

  • Size

    21KB

  • MD5

    79fe7501a1d1a4758dad75d12c49fabe

  • SHA1

    119f42db4433c10a13e818205e8ea43cf4b0f1b4

  • SHA256

    06b6fc37fb37f9d8231acb60a8e5cefad473458c7dfe88957d6f39d82fda19f5

  • SHA512

    88a228f85cc3dbd5925e06c92abf3986b177c7204fe0df0e1c3a15465473066f84443fcbf2cf69d7a813429a9c1545c3ba29fb6749fddfc58e79f940394e412a

  • SSDEEP

    384:SIyhgiokW9TlJZn6r5qZr4jNkUOj/swAL:SdKhhAr5GrOClAL

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\79fe7501a1d1a4758dad75d12c49fabe_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1200
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1200 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2636

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e41a5b3c18a86cad0da71920579e899c

    SHA1

    d825aaf5890ce9152c01678e4b467a10049ec328

    SHA256

    5b875809c4e2916b0f0670d824506193ee29dc821dc4d448e6e64e1a4152f5ff

    SHA512

    3d08ed9fbc8fccaca207d88628264470375acdf9b4447c587fb98cc435a7640a58b7903169c0c5d30bdc9f5e79c16cbee35de63ca3f872431845283e56151619

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    995834d590ff74c83e9faccec30b85f3

    SHA1

    2d1c7f6d205ca3c1f69eab685ecf500a26202111

    SHA256

    49446db6de7eb43c7b2e04d7d315b4f08a10cdf23f242d112ec429add40215bd

    SHA512

    47e75702cbe11509bc10589ce416564a04bb0b383f0aae03138330c873f96f08811a7242ca11a144184faba70941a25ab946e5d21f374ec6c3e51ecad989e098

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a7f95044632d84b98014b9adc1ce42a

    SHA1

    c534fc95a5fd6e26cb05d8acd059c8c5ee058a81

    SHA256

    bc7eac5c2e3666eb73c96fdb65cfbe69b641d4de4c933f525e2d599834f99a2b

    SHA512

    15f03ba5602458bd4fadc00999b2c9cff8a40c675fc15f380c76d6e1c270162a1a72c1b073db83ee9cbdb9b93a91ec970b1f6e586e5708fe856d2a0e8907ccbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b60a8092878d24b3e977273bac57a4dd

    SHA1

    5ed92f56aea27265f160ad48af5b870c4232175e

    SHA256

    619353c85b9e810b5fef9b31241e6b47a3824025e391b0c49f797ebb9b308007

    SHA512

    905fc19d0564e9f8574312e5478b3d75d9ee33a8df553dab77cee6a59c578cfc14aad1e9b5c7a40e493197fbb5dc3b888844cc09b32c61366e5ab3da0a090cec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c02977d8957dafab7abfcf37a9bf53ec

    SHA1

    6c8e681daab970c89973888c4b598859017e187e

    SHA256

    f28605571a71aa2376ade0b70213b47139e49c6677273a9169727b301c78c885

    SHA512

    a68a99fb353876e969a4c996a0c580350f526cb2fa8a8466b452c709fe5accfe5ca9aa7946f6aabd763b0cd454a22d5d6dd54d59f977ae5da7997c5f6e90446a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d57ec492b44ab8271f637123e1d1013

    SHA1

    2ae30f1c4ac89df5d47c5c426960e66159e031ad

    SHA256

    ed6aa01c3b35ddfa25482f2600eb74da1fc5487026e971a0cfc98aa7c5b1e992

    SHA512

    6f081d1aec512d288bf7c309120e0d39fb24fec60680856cdb7c2c58bae92b05362a6a477432ea7a6f274647977d6266fda2ccadc83fe13e1c679f133f55c319

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d561ecb0e01ec3b0e8fb568daf2ee684

    SHA1

    f36ce37388e4d3f8013ad0da47fced482d4c782a

    SHA256

    3bae64e6ccb1c15fea7feb2a091ea82b87d34cee7555f9816a31593ed766621b

    SHA512

    118fb97995fbce4909c3ba7c8c9a61047822ed6f3e311e0f23967f1878cc05c449cac896deefb57e0a648009c61f798938e57ea815a04cc9548e39737fff5525

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8bd5f21675dc7fd35cdaffe72246e164

    SHA1

    522d42ec3c7b1e7519753bc2fd04b3a60831e227

    SHA256

    57b9ca28a08f77336915447630786b9eabcc1660d6becd4ce45b5254346a72c5

    SHA512

    4c4fd927160bd699513a00e727c934d114c64b335e6576f6fcc1be4b0553387ea6425f7e895d21bbd089d7a34f036a9c9b20ef39e35073a03df2103e745e0bb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b34d5449f6742b0d27768489140709e1

    SHA1

    cb8a5dbb570edc672b84b0d89199066f289c9a61

    SHA256

    f082bad35b42c343a20a6d59ecc109d83c353a101f656d2d697688b852cce00e

    SHA512

    e95bb401e87304f031796d3e761b593f8b21855e0e6dd54bcd78529ece0e2190686dd57dd32effa546bad487bab046654365081b8c61dbe5fa0eb03de9388b23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fbb214b980a7dcf177062b7c94938345

    SHA1

    e0dc6d37a73a4d505c395f33544dc1ce913dbede

    SHA256

    79dd2415913a53e55e5898dd74ff9ebae2ba5a614c77e8d4728bc851e11f9b24

    SHA512

    2e6e74fce5424d82cb061b301bb3dc88dac9997c5608cb32b75be9f454dd62948300ef1c759c48306f60c3594b1dd2ca7af72f6313dc312f4e606eaa3a732756

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8692d2c449ffb2b07b69ac5379cd1a86

    SHA1

    210449ad5e24db596c7971654044c2370d103a16

    SHA256

    b928fea122f05b32a30e8151e898e190f6d623a3402ecc6b55bfb993a009538d

    SHA512

    4a088a5de5c5babe662d08fd2c61ffa24fd05c5310a703c5733533de432516d59c9c7fa03915f5f9eeb85148191a26af9572d17303ffbfc6e47686ea785e0bcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ae9e48eb1e0012463eccce21921db1e

    SHA1

    3a910fc652b31767dbe955ab7c1a79dc22a32683

    SHA256

    39f567e991470d0cfad621148b9f5dc05800b5018745cbb4d86fb49ed04f0fad

    SHA512

    cbdb2245c2f212c7eacb11ea12e5da58ffbfc746523876d23ae963261be6fc09b5ea233184d289c9be40b4d3d64ee6f1d27a45b849de53fa2ca1287c3f05116f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb523252a80914f1cbafbbf2234eb796

    SHA1

    339e372432612b6c281d8facfdd2722b0b79c6f1

    SHA256

    3b4ac266b551a58bb935f7fb62a080f220c9e41ee1a03f4b76eb3dcc97f971f5

    SHA512

    57bce9d0be684f6168674891f724cd041246b54e9c903297e9098f68b7300057cd2e8685bf6e0e66e5ddcb59ab450debec72c3ffeae38e14cd6cf8ac4cc7d185

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b32f38942db0c911fc342ddabc64f75

    SHA1

    60312c821edaa0c11a839aba0924cd21ad98b5ee

    SHA256

    e8ea02f83dcce1257389b2b40625412625a1077598c23536c53d309d9cc48633

    SHA512

    5a35f7d4a15de80fe28a21c2827178c42305a24fb676282a7df09d73cc85acbf2ad5ac3280fa36fc04d8da72443bcf4cf94e6778ee3f76a381ef83750fa57dce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cacb17cdd02d1ba3ea1c3a6403d51b92

    SHA1

    e595683e6a0bf7b86b225780c3a03ff9568dc444

    SHA256

    7d4d6463cf5ad4bf8336fe10c9463ef5e8580545f916bb68d38ddc196b00834b

    SHA512

    4977570344dacd5a3f0ce20503e97f66027cb5de5ebb6482cb2f7445bea02cee90fe943989d16e621a7dbe92d09c6884a15a35dda8af6f71fe7166a8e32fdce4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    812369f8d9a7f35f8debf5095106f366

    SHA1

    6591c635a83191aea6899c9af74c24cf2c17b8e9

    SHA256

    e11606d21874d4c8eba2de332d0f594a92798b87182526d2f4023b5f5827cdc9

    SHA512

    68933d3215a064c376930e4fec3d01aebe34dcc87ae4bbf13d9e63b1d78946b01fd948649f1b60081222c2f350f31863c181a81bd2b75252f6ff36c2c91dc5b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    949c2f173dd63ba7977b75832faddd22

    SHA1

    00abdf86e4d78f83d16913f5aae328004080b15b

    SHA256

    bd6ca8af2264211b31cce79ac9672a4bfdc75fa8badb4518ddb10f0b763d71bf

    SHA512

    0caa35f0279754580c2253fab3a38403603e1d9cbf32d9e78a401bb0222a864027db831e5264ced5343bc9c1dfca28aede1c14e9584a99c8a1b8e564bf1d9170

  • C:\Users\Admin\AppData\Local\Temp\Cab3BAC.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3C9D.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a