Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 20:53

General

  • Target

    7a7e64d79abfe51cf0f30e94682b439d_JaffaCakes118.html

  • Size

    10KB

  • MD5

    7a7e64d79abfe51cf0f30e94682b439d

  • SHA1

    327b46ee56586774b6d28bb090a030e40b631aab

  • SHA256

    17b4734431e0160f5669dbda7ef8abb09aff67e59cf17912cc68d153cba0ae7c

  • SHA512

    6eccfec1e2d337524a549447b695bfc362e5b3ec35588978bc650a734af42522b7527766182caf6d93b2ee993a8e9c96d6a9f6bdfa506a63156fa3558479bc13

  • SSDEEP

    192:Pym2rdZ6vHmJmA77qgiCNWnqrranokDVBRAnXjNvNWnM/LYl597MTANmcK/TU:Km2rdZ6vEjPqgiCNWqP+oWVBcXxNWM/s

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7a7e64d79abfe51cf0f30e94682b439d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2168
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2168 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2876

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    70824ee02f9c514de3d26f68d27a8233

    SHA1

    eb6613e1df8a9dc6ad13e899c29c3aa9ee25c198

    SHA256

    1e2026cd9bcad533a4c0b80a8c1922fc8d77f805290a02f42bb4c60528909ac8

    SHA512

    35ce48bc33f4da2d8e2f86b936e9f6724ed5672b035dd0e22204b5de4753393421878503f61a9e545ab42f67c9c0e1cbd168243d9a1375c369636401ce214877

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53c204cf7a0ec79b3f1400a748a9acc7

    SHA1

    12f9818ea032f21a14c82fc4b90b08d3bdcdce67

    SHA256

    bb97174c7baf06ed76fda36d877f347cf95257efc79679df9bc6e4754b0feddb

    SHA512

    830a181b93bceaa5e86c083c564900433237460aba2085626485a0dc4c68c8c3d21fe705c69ab37c6dfd0aafa919a14610b0d1b31ea7ebab54644bc547394b57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fa5aec1daae85f36f2e001f4fde5d7d

    SHA1

    6287bd43e243f3301afde64d64f6c100f8e680f6

    SHA256

    d56636f95c1508dbbbcaa2ba1a26cf303de74970d834d177ffc3824847fadae2

    SHA512

    4a9048591696bf4cdd01aa9a435002392fb1b0700bd8994e9d229f1015e89d612ba150852abef1fc75934de1a25d653d92063c4871a96524e4d12de526bd2cb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12caca2def578f577b87824d7bcd4382

    SHA1

    cd8d540d2480e420201a0ae1c61821914043c246

    SHA256

    1f75c5379d186f2459b24bcfbda75d1cbb181e0d22cb892c1242fd6d4481dc86

    SHA512

    11c20ffdfe8f59ffe4c50dc267fd27e50fd91665e8cc154b3eaa5d8ff6be6defb83469ae711be975459fb0b475e9b6dfe2f61dd57352db6b2630958149a81102

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15864cb3c5412b22066195fc30d5ff1f

    SHA1

    735138b33debe1deb432d115b4a88c32b0c49015

    SHA256

    d533efc39ff8cff9893409c61b4b53e9390810d4177759820189d05412883fd1

    SHA512

    a4519f8b0e6b7ae26cc1127e6cf1ebaf025410c029c9e986413ea06123c9ff34a9fd5af8193b0f9c1db6ae672e1ea06bff64f0fd5727f65fb66e5355f1c178e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2363357b72a561f9424a5e28ad059859

    SHA1

    de6af604daae07784b1dee35313cff55cae7230c

    SHA256

    78ae56dc4eab841bd9d6972af9b532f0840c07defea82cf459db12ac6edd10cd

    SHA512

    e48a88ca91586e1e7064f95f4a36008ce0a15e9ec3c3f0e654b8fadc0c9dcbf2ae947c9fd7c28c66a1753560879138b0dbda08fa6391be6e156224a5f119ab27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6a36bfab95c33ef71f91f8708b3627a

    SHA1

    7e0cc5d9ef1485d8af11883795020c443c78e8ef

    SHA256

    7c6439823cab520d9149519c67b9722980557c96d244171c06be37b4313a1afb

    SHA512

    fc806b8771f193b231c84f45550efacc36dcf4ed5cf1920ee42a5bd0d6155bb78be75c3c493c8e16c0818a702cfee23e71f75f98113ec7c95e20ae7e28bdc088

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bba2af937d267599e591491066c0fc3e

    SHA1

    2f1ee9b736704f33d3a14af028911f01c0e47c22

    SHA256

    de01a23c22c550a593747b8731794098ff893e9b37c1302441c1daea0d8f4f81

    SHA512

    25b37d23e48339f0f339a9c5e0accf93fbef882b5e89cf47e89fcfe582e8547803e2b5f0b03dca5ab8f5884dcdb3f6dae2c0fab7941f58031156e6179d4fb94a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71ac848e547943b6b318b905ea68b487

    SHA1

    113efce1885a68f8ea502507b3697cf3f9a2e4ee

    SHA256

    32acb3f1859d1466a31d2e3015bad43ea2e8b8f483af580c4762f30926a48c13

    SHA512

    839d7386e987b1a00d4b072d0d6dcc4aed4dbac8923c4d4261f1fc82706135a9e700af8f1653cea4114fbd2c57c4b8802a987be4deb71aa4691796c4d9aa824f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9fd8a7ee47d9fddc3575a31fead9cf98

    SHA1

    f06713437a5fbf50fe0ebbf99f7c17810a62b929

    SHA256

    7f1b638c7734a96b69155d470cdd9b580e036e32eea400994e8bc74bc2c4990d

    SHA512

    31ef7d8b962bf35664b4274ec35b59783c93c9437d9582ebaf38dc450b763f5248b908f4eac91aecdbbf8056f08f2092fef32c3b4d577223502ace4f7ce99180

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df20993927ae5343e7c21e32ad0d8b4b

    SHA1

    f5041e0a11119b29b56633660fb792b6a0d4fdfd

    SHA256

    f8fd0aeb5148f3c9a8682ba5924c903504697fd4d87b45452f511900ac45ee05

    SHA512

    f2bd9ef184bf4329e8ef6ae8ae78b27adeb87fb3ead8d79e7c278626237e0af9a2a57545baa52d9c8bd438589ceb45c16b3ba5d09e8cca25df3a0cda9d9986ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd902aa42298edec62ea8468106f76af

    SHA1

    d9b3968e151a171fe90bdf49b4fa22f64f44317d

    SHA256

    97dcbeaddbedef9264695bd0007d74a6359e0802a3c476cd3474e0e8524553e4

    SHA512

    838c0d3b097c00cfd332d181b7ff8effea081900adf226de1828d45fadaf9d4bfa49095c8925282797d562623403a446ed1375c0e86d2604033afb7c2da8229d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cbb814641cb3854ad9b37461430927fe

    SHA1

    7c422b629dabd0717436c21cf3cfeb9345be5672

    SHA256

    23c98648054089cc99de58806ba2057a316ffe0b10c9077b16444e7d6f79acea

    SHA512

    8cda12c8f22b8980b8df3339d05069782eb88c8b90af69eb7e041ae8ce1da06f68ce29694a6ac22870ca2ec069aa756f17754d7e3560afe088ca432277c4d18c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    822d390ba95604d30b3dd8a554a06528

    SHA1

    3262524fa78a2e5cd6a8191cd30124f54703b94f

    SHA256

    16e3417d7bdd047698e49801c68eae02c695306d68a2fbda48660b67364eb9ee

    SHA512

    5ea2aef61594e8e5bf6117d08f90b6375a4a889f8780484bbf543060d2497ffa6d4dfe7560433c6dedf140bfc73b6ad640c0738bdec790e1ee2d8b5e90dc6eec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bba9d54ff0391aa1e259f23f1984fa3a

    SHA1

    4879b740edf071fce59f50b0facaaefd72ee778c

    SHA256

    394ffbc219f0a3ada5e23d86c70767d1d8237201cbdce0babb9704c9506c4f51

    SHA512

    d8738932f57a3e91ae8f29798609fef361477cb0eddaf5e2e59ad9e3be4241adea8ce54cc66a235b65a7f5a96ff16b43370516dfc915f57fb1d40359dfea2010

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80209420a6d3a9380719aabbd9de8a78

    SHA1

    42a6e7448deff97bc6bba62f767abbb1c8de3e0b

    SHA256

    ff5390d71ab500adcf298f3f03e70be54dd460a9ae1a12fc6395d5b689c7baa4

    SHA512

    95eef22245343c60f47c2f917d98c040f7592df64e813fd2b19c3558dd71dba20a2ad3bd962837293bbb161cef1ca1b8cf6eb21040e9c9ec6730f8808918bab5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56f59c2096d6b108432a57186606f65d

    SHA1

    94674242be05e8630d9bbbb62523fca9fcf8b8dc

    SHA256

    a11d0b027cefd331e98f01e99d551221386576fdf8835d96aee9ea1ab9238373

    SHA512

    300ff42d7e81e59660beda844aa416a1e3ea98c3a45289ca22925219ef1ffc2a679e56d6f8ec1de2c64fc5a996a4067978807361ea4d14f2fb6ff77a80841715

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a63d47032a5933deef24de41dc43fe0

    SHA1

    e33c3a852a4722dd2067af2f1997c60b6b59706c

    SHA256

    69e19c1f60b86e2254d34c0cbca000a225f1fa0d486151e8a38b6117a17b94ae

    SHA512

    a6d6790e7bb32a00432dca5e8346a3b74c87d0483277e67f780a8f2dd9f1959fc652365ec15390872d3dfbe008b8ff04977ca70dfd73eebcbd6afd2734559bbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57e6ffb9440f3e29c0862f6a0cec5253

    SHA1

    499c2e9b7b24195a6047b561019f75c77e5507e9

    SHA256

    46109a8c3932eaaf51ebbea7e63235b1520e61c39f4c7a8d22126cb2584101fd

    SHA512

    db92e48ca89eb208f75bbd3dacbe39723de1037a3906441d99cd35b1a8186cbc46219743d89ff070a033ed84ae03548dd240c46b1d8d8c17a2ff9adb268f6ae1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c26fe5e9e404fcfeb5d914db899eae8

    SHA1

    f21d5acc4459344c2724ae2e3192cdaf02ac3c25

    SHA256

    d360585e288b7fc6a0415a59cb30d3d5e9a9c078c0faa132ce3f99353f0d37cd

    SHA512

    14ba82b4747f1dc25bb3fc2f9263785656610f75d086f81e97ca8455e5fc1f2e66e1567fb0f8e01b2a9227046f06e1de1b79eafce4d2dbf06df0d08f61e2cfd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    7045dce125cf364b2d3ac87a96b357d3

    SHA1

    fe2c4bd047fa2c64a918471e437f8d40c9ab224d

    SHA256

    cf3dfcd2740ba2f18cb3c631729a76bc86faffd9c7396ae3ee9fe4ebe4ba10bf

    SHA512

    1f0e6499854023a2dd2c2e25a0ee1ba437891c5086eafd7b8b523af60e3039455482441bc19fc785a2a6b8b11e78d30058419a9aa520b9858371adc1968cc9ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar2C06.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a