Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    30/05/2024, 04:20

General

  • Target

    83027810e4ad1462d6ce339a2ddbbd47_JaffaCakes118.html

  • Size

    140KB

  • MD5

    83027810e4ad1462d6ce339a2ddbbd47

  • SHA1

    48c732454329c07aadb21da4512f6b6cefcfad8a

  • SHA256

    8d23609e5a9ace78d3ee5cc8133043c1775848f2a9d3f3e12a30a2770b21784f

  • SHA512

    d797cdf5faec1b278f0907f44b00d9e30a57c27919c16e93068791af4f7a9d96133bd4ecf9aa2b865cfea38c0b72b1600b601085bcc7ad6914e2bf37c0033c55

  • SSDEEP

    1536:SS19KIYeeI/rcS50lV7yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXu:SS1ES6yfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\83027810e4ad1462d6ce339a2ddbbd47_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1736
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1736 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2072

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    62c3d94789cf4427f87112e1da17ef80

    SHA1

    e83a76a1dd710badb572c6574ae14881539ed159

    SHA256

    50336d47ad85dbe308fbdb87922da0061f4af4e428a35305a7aa1f633adea54b

    SHA512

    202f402bf160c559f30f3532531729d72c6f80c831f6efa22b42962393011c8145bef0bfdbc628193bb5440e53de002743f5145944842d796fc1857395dc251f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea198d2cb00f765680d066eb0a80a75b

    SHA1

    4e12caaf2e05ae4da796ba674e256b2289a8b4fe

    SHA256

    00843b497af1b709a060719bc76268e82df08719d04c8b7d39afc8c65a63b595

    SHA512

    18a2c9e9584b71637d662b6b89912f249679e3aee616d01b6629db635517bd2090bfc660769bdc99e1a19213489492b838478fdcd1af3625014fbdddcce06284

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a04b7d7342fdea68f8b813d8dc749fb

    SHA1

    db384506b91359a2c4fada491e28ce56381211f4

    SHA256

    f481076ee07a646fc48d512a163b3adde4d802171db13749839b64475e47ac12

    SHA512

    43e25720cb9973680925f1a766ff4d7c15b86f77629e7270cacce4db0a1a10ad977466ef653ed60f4eeffb803b5bf9a5508887f093efb2e3d49756b3b4c226d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    93030d3a9269e2af0607acff4114bce1

    SHA1

    d4421d2210164c5228e2098d09e118955b8089da

    SHA256

    264cae6f6bab203c80f86145fba8cf0e5bcd07e1356f915494c8fada213c1e4e

    SHA512

    f35b98e8b4443f252f7fe917422da95ca258de4fe7369698a028dd986e4e3d55a0df0bad635f26a0905c8de471baafb5449014d828c010db01b3c8f6ba80cf83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    72652e1ba1ad2202eb48b92cfd9c488e

    SHA1

    c83b35d51d06117aebcc0234c10ab8bb4fc04b81

    SHA256

    b19fe9cd4535faa96ce1e17b5985c4b1c84fe9d6a6d85a203ac6c4430698f81d

    SHA512

    8182ecb1381f1083355133b6eeed656976e617d6ac4a860bda2e3c0b74a8c5dc7ffe88cc01e614eea62903d436f9db4dd66d0580b971efac96a4d8b5bc36d930

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    24bf1091111317dc86deed617f04781f

    SHA1

    e4b2460aaaedc149535460d29f9e7f53631c345f

    SHA256

    124215d73c7e89c28970f15b39d888cc017680b7c5b212f3175347e0543da2e1

    SHA512

    fa77cc75be3c5ded814d5b862488f4f76433062f111849f2813a29e6dbef32360252eef9b60d305e6b950dea32ee6ae64c7a2202969612a24179724922b7a2bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9fe9b3a8db61acc71499173ef2f771e2

    SHA1

    29b6496087190330bc5fab7a1840090bd15ff961

    SHA256

    627b7145b79d85671500b796afb51f9230337c4c47e6fccf419a32977b7c4b88

    SHA512

    6b982fedb3ba93842ab67114831c41541da102e15e0a606071e25e8d5d5bc0c0d73e22f7438f257531c61d1a0cb1cb890ac74dca6942e891759a4a9ea48f2905

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    39d9b2ecc2c1deec5ad76762281e7817

    SHA1

    2be7bd205dd10e99a0d53b9c0b1a1cd2e9523594

    SHA256

    67403ff61645e112cd5b1729afa4e8c2ca7e0b6e2557611f08c18606b292c495

    SHA512

    6192b9adff89e5cdf34c9865e852214afc37a22ee8fa9172c11ca00c8776c1a03cbe1fe2c92c1f60636f17984ad2215291be97a7a51e58b223ce04e2938c9ef6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ef26d6cbbaf4c787f44358047b5065e

    SHA1

    6df8e1148e3dced80b41a1afc5696ee1e9d1d48f

    SHA256

    979229d499ef71685673a24efca36706506a013cf226c0bec1faf22962d23aab

    SHA512

    9ae021aba828f1c2addaf7067937cf2b59643eaf2fbb3c04f3e8980cf2a674b8a90076de8c3d6dfd389d382c44796ce8e6b8713adf3f69f31fa796db23bb0d30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f77b1c8dd37cbc22f28d30320f9a56fb

    SHA1

    f067394983fc31d64e4d0aa99ef42ce15b0644c5

    SHA256

    7e43cc9dd743eac161cbfbcd6dd1fcc4aa8d4635d92ab8d8e5e17b426b309303

    SHA512

    c292393ef1caabd0eae2e54dc83f68c864d664b15dafd0b7d1ec11a14916123b8ee6eaba017911f30300f1bd82c5946b10a35f1217171582e9bcba489d5a4735

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    32400978da92b30528bf9a0108d73c94

    SHA1

    d56810945be0c4fc2f47226474970e6a77bd1c30

    SHA256

    ebc5ef012d67df13342d7ce09097c2e130b57e97765f17eb7d9266163a571bb7

    SHA512

    4fba025f1060d562a5817e46661ee7dd2dbfcbeb268d6e4a34268c4db40f11a61ffbb01c5568d2b98281329ef6ca241a273e77f9001e43ed35d2296658986026

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a7679428ce3d6ef0e52fb4aa1a69bf1

    SHA1

    590f968385904ae024e406c4c2b70cb01acf5b6e

    SHA256

    e1e954b105fb9fbb58ca2332065d41bc9af8cdea94fe00d83a771882b47f6fc7

    SHA512

    01c4462f198390987b05e4c759d8f083659e3525ed86a161666ed188008bd545450341ff3337d3b3288fbd92b12cf2f9cb912af5cafbac0ca411f1cf663b6a2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    64805043f4588a258b743bf93c04010f

    SHA1

    ac2841a62328c60558bf8252413689f36e1b5e93

    SHA256

    e27009419e83432f535ec483d9ae9df955f239c3dd946ab3492d4062296069ba

    SHA512

    9a46d6e8d48ecd95057724c4bb96b93c3185e27671b4d1c3839557759be8ff34fe547b0ca2ebef1d135bbcc0e107e9e69e9638d76f159c7627692ca10e08d02c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0afec2a5ce93d4dde89f2dfead5b1d3d

    SHA1

    132d40f4031341e1d1d1af19ce78eaa84990b4e2

    SHA256

    fafbcdc963947252d3f8f4aea94339a8a2a684e9f705888296e76cf3cd502ed9

    SHA512

    49ce14366aefb6a370d9e8ef730f5a5d462906fc3329a57d5f47c76feb2d5b2d27d5d9dddaddc9bbe5be9d6a437ec40d9a253022739cd5cfd40ad72819c1d1e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0686bda5b81dcc6ad2df3d3538ebd6a4

    SHA1

    4e4376c81c1c9460018086072189c718baec142d

    SHA256

    e424e07d76616a4b172b15dd1b00c5270aa2452d6b9558f98ec0f0a0ce9ab67a

    SHA512

    4fff8ce6e82e59fbfd134b122731c1892e7f90331ecbc344c1ad7822804104d58bc30102ceb6d17531999c0d841b2c725beb0841864f81e6ecedf71d171f6b9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5291377259aa41950df02f4765e66d8d

    SHA1

    d8ecb9e858de82da4c1a67b0a8653c0d10dafaeb

    SHA256

    0e66526271124db984a3fab34ee7e1043da4c65f8034211c5efb5a6cbdbe4dc6

    SHA512

    668829637c7a679082ba8452b11b7cf7a66b4e93b114d36b0e97a6563c99103f8abae8749541ccb24225200872304c52f3959332a2337a276262c6c27f807a14

  • C:\Users\Admin\AppData\Local\Temp\Cab1F07.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1F9B.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b