Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/05/2024, 12:59

General

  • Target

    80d0e87109829d9d211ed39fe21af082_JaffaCakes118.html

  • Size

    139KB

  • MD5

    80d0e87109829d9d211ed39fe21af082

  • SHA1

    3493767e320387a1ad7df2bfa8f69a04fbbd308e

  • SHA256

    b73d7ce8a4c705959393e65c61439ca51173c9f3ee2e088809ead4d9c35b3bc2

  • SHA512

    5a84a1dc57052b07ef27fae3d682d4b7ff24ea381eaa7f72b4cc556a185bc2eecfe60f1af02684d1368f3b3d250300cc2a09bccb663e9229064399b346e3d3c5

  • SSDEEP

    3072:SWat8jX4/yfkMY+BES09JXAnyrZalI+YQ:SW28nsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\80d0e87109829d9d211ed39fe21af082_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1152
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1152 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1448

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2a726100a8a5ec90f0ac70a2ee89be7

    SHA1

    572fd64fbfe987654b643d058f1f057453c339de

    SHA256

    221607000e53b500b92f53079a75900c5aef3544ef856925e3f24ab2a6abce88

    SHA512

    2290a517f7d44fefdeb672ce50a69e2f165e92cb194977fa3160355f6ff2d8bcd65c8ac15c1bad902c63443b5a1eaabf8dd08faa26071af1ca4146f246f993f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ede8c43939cc4018ec827d418b15398a

    SHA1

    b5d7d43eccead0d9c5f82d261c5a9536ac487732

    SHA256

    269c4fe3e32a70449d531ce1927888b642378b7fbadb2348cf29e848b2ff8e29

    SHA512

    fb692ffd8709bd9be4cbfee1ce4685001fd2e3698c48ab5f0422c2aae178f6687ac2a7326d43d384e0d86522e3cbb8cf9d5ae364b289eaa65fba7a591cf961f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    441337c828a3003f287ff9f0695484c5

    SHA1

    44d59523d27b26005f13808616dafc517f88cee7

    SHA256

    bd248456a50a8981377da1fefdebd950d7082cedf8a046e1cc51a26dcf195037

    SHA512

    1163510f48249f50cc7804999b79003a6da00828d0b6da50dc9d5b871f8268d00433f7653b43f0bfc748559c1a340974f22bcf06c6d4b76ac5a6aff827e8d51d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b5036eba3036bbd34a5d90ba23e66bd

    SHA1

    df9bc5db4b051bec3d84fdaae4e1bbb2b81d2dba

    SHA256

    6d55d1e202ecf47931aa49eae1816ff8a4fe64cb7691e569fb3ae45b4cf04e54

    SHA512

    8ee3d79f1c0fe3b8fc727032fac400dfa96796afd044e242dcd94d2caa4f1bda5b4ebaa25498756215d639485736cea018dc31a4313b44133d6bb53d1edf07eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    42dca3cdb13bf1b24f104da769d6a666

    SHA1

    63f585a0f3a8a0dd624089c6503b5e0c6310685d

    SHA256

    54e8745da1f05c9b7e6519d1ee4f5db1a9d7e101f1132ba572901975c36a1c01

    SHA512

    53749271e45b122c3d0824fa8a7d60abf6d0ff949bc1cd98ed1856269a3a67837ff7521b23d341f416301b5aaf004012f9bf9b5d44c3355e308689211d2812a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d9015fd8e25826d58a77e7116ad0dda

    SHA1

    1fe12f787dc9480b33b2acb9cc277ebe6adec649

    SHA256

    7be82249dc7b7794cacc5c9cf141ba1f36dddf07a99037a58f76b541a46edb6a

    SHA512

    5000be3749acbfd1e6e8c8a802b3d06d173f2c56e4416f6ac30950817f1b30a777703dd251cef33a0b636a7268db38fc8ba6dc4fe505de263a18469bc14d16f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c7b0525d0a2e37e47dde6143819f0bf2

    SHA1

    61fe85cb6f97472044e123a25c3f0181ff8b2594

    SHA256

    5422dccc20b3f75a8a4c8b511dbda64f1cc48826f1fcecb5f0c570279e06f278

    SHA512

    19824de51527ecc845a9e54a6e2feeac4648c604b6c5cc2024924cc2119dbbe9db139dc163755d4fd0662f8d80371718e84d19adefc8dc296b7c17899c99ce8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8a62389deac654d786374847214701c

    SHA1

    12fcb66f34d9ab44ea3aaadd9b6d4e525ea9cbf4

    SHA256

    198cc931b9f923f8375381e77ab6d386cca75956b568122308b0a0d33e2a6a56

    SHA512

    3c1d98b411d07744d24cd689ba745dd941d82c0661d6f70c4e940c7d6b990b1226e642f046c58af1f2aebcc8fbe4be7b6bbf28ad2a0abc38023a0ba1963ecf54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f862d7bdc98c1b8f2dbf92a1b2d8b397

    SHA1

    cff1e79bf953bb641d2d06e534c3d826e899cff9

    SHA256

    420f28c9530759de76ab0bf3ffa21e3fa82f0171cf51fada38bcd16dfc2d91a7

    SHA512

    7fec15a86907e833041645af28cb5a699a7de1c8646b4f78dc7c9156f75d9cc6255f244bda2f4ffe68a4b85b9db1e4aa2721fe143a7b39b4952cc4ddfd05c6e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff9465ee8fb64fb7fe45d6df43c7bcdf

    SHA1

    0e5a9a9a6f91bc3f6f5a624c0fc3237cb6f6d3d7

    SHA256

    ed14f8cc9d1b336d1f1f2ce156df170e509a5396bb79ded1bb981f0a9a135603

    SHA512

    28520a2647c059a397cfa8cf4ed1b9c82ac0540dbe94502ed48fd64d149daad9116f4b00e71b9c79e0a3ec522db6e8c388ec8c4af58169074377770e90efdcad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c87aeb3724d37c869f29e63e66218376

    SHA1

    d7bb18855f56bd678b41246c256add959b39565c

    SHA256

    e4cb9d6d3f3b076c30069643fd109b2fc183d3364a901ea28ea0841f871168c9

    SHA512

    dd0726b91c655f7ae2c77f8ea4ff7fe55e3663673ef6033915dbf3c1810d1e42a3cee6c41266c46766c0839e0a906d95e5df78e6c46bb205647f9cedd2e73fa3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f4e4337cf9aa07ddfedf6eb1ebe9329

    SHA1

    e2ea9d89015a1be05d9df2d5fba27c687363f5c6

    SHA256

    2811b219b049378759d1791917517f1d6aa2275b9183152478644f6589735085

    SHA512

    808babb434e02ec11c5fe02a9918b35f0c007455ce1ce61a0ee487de5636e499b7dd68fdf28a6a1479bcf16d7f85242f533fa5e353a6f728acec09cf955a04c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d7fac17dcc43f3d51c7015cdd339387

    SHA1

    4e80170365f6aeaf5c6aa634c8b1c344042f5b98

    SHA256

    c19b2b78bf1d49b30634ec5db7721f9fdbe095a58d847ff1aacfd55f798ce1f3

    SHA512

    d8cdd0066c0536a9fab1d5b1f21145e853b4e90aa20fc497a24e0eafc8c44efcebfbc3aa514413a38335fcb8cac9514e15823cf432485560385688d97246f713

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d2fa7fafab697caeec4e24ba0604e19d

    SHA1

    b8c3d3a97a6a55f2dfec3918f813c424f013d411

    SHA256

    117d26297fed7d4095866975dfadb5607dff9ddd0f01c8c39390aa98ace2cb44

    SHA512

    c976b407d472772b20b224bfdcaacd3de97158c8b3d06c0c14429d152232cde6c902a5cda31b180af980e2e788bdc74c8f5aa6eae9cc4ad4d59e686a77dc9c6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ca584de874f711818bae9a48e8b7050

    SHA1

    156de61342bc22b4bb351ef9d7c80ff8fbe9e325

    SHA256

    5857b837991f12aad76cd92a52cbbad533382dbe128f497f30c3d82708eb76f9

    SHA512

    b6f3f17bd1b2459ce83d840f454f48ba648eca2d3655737a6724542bcf902d4a4b6bbab9b7cff1fa7fdce74caef37458b9dcf09a4f28d524fc54d3a26eeb844c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ffb56c7670cd45496897ef508e91a23

    SHA1

    cac4f356ca6c6326e3b837329e20d8041ee4891a

    SHA256

    8e024c47878cdd3a9ef21378c8d58f517b54567b3a5ee88caafb52583b9aa9a0

    SHA512

    f8d438c9fb1a14e73854800c7aa21a0a00bc762cca2ad19eb63d02457bd5a21f12ee9b297e2406b0d7deb33409c18f0381837a50251734c2c577d2a3491f08fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2566ff41abf7275071ad31d8234d75d

    SHA1

    ddef89320ed8872d4ea78c12cd9c13fad02fca2d

    SHA256

    34c3d52cd128a9f04335d9a807458e24c26bbb7301a2addbc07ce23c8771dee1

    SHA512

    2f3e4afcdb16e386013b70fb1bbf47831c8b698b796cd04f033a5ac5189364c193398ed8fece9b0740ae9e10fffb5243f84a66673c5b19cfb1a9291b2e205f15

  • C:\Users\Admin\AppData\Local\Temp\Cab77C1.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar791F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b