Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 18:17

General

  • Target

    87e53872f55bf4349a22daaf435104a2_JaffaCakes118.html

  • Size

    109KB

  • MD5

    87e53872f55bf4349a22daaf435104a2

  • SHA1

    15040a78a5bcbb897a97f1217614cdd41be8cafd

  • SHA256

    833f4d7669be6a12ff423dc456680d5f4a255086a1f9b4850c16167fb9cae24a

  • SHA512

    577fa03240d490226d66343159658d02711fbc854f7b079512d4f11a5c8a5d300f269b2dcc9888e018243a68266769ecc4470d486ef153686054e10ff7e2e4e5

  • SSDEEP

    1536:2pwpUZ0LmN5ANPOptzk5tD/pL8b/oVQBddfsVRtw8WH6FLryV082FNL4MgOzkfFI:2pwpUZ0LmN5ANPOkJBWs

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\87e53872f55bf4349a22daaf435104a2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3012
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3012 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2984

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f20b410b106607ae2e62ca94ca656f5e

    SHA1

    2d5474a304b63655f1ecaece3493803141035ae9

    SHA256

    5ef2cd1073051f338d229fea7fa127aa5be7700bc83ac9986bfc2fcdd67c8fe2

    SHA512

    cec2923a3e460d3fde8bee7d24b300ed000818b67a1b7efaba33a65fbea950e165104eb5ee850d5379c6b0548d2372128391d508617f3678daa1c8a5cdd80527

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4013f8a22d310a5cede93f05c1327110

    SHA1

    d29824256395d41e6f8153816680d72daa7fcd91

    SHA256

    766155aa13d5e522c8a1c758d809b010329c1b125038bceea9c3dd71cc1479b1

    SHA512

    fd17baf84cb151cb9e0f0542150962df8cc37a209d4e212556035ca70ba9bc0b25b35430d6fea310676166bdb9c05448f8313528a7a8a13f1a37ae863156d5bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    154924efe8baddb3549447f8ec3e9cdf

    SHA1

    7161c1493f2ba0496a8a660d76bffe2f2b97cd66

    SHA256

    4b3d59ec824a93ea4fa964a66a6dbf297a5e4cbced26f8291442a0aa7ee6df9b

    SHA512

    7501cfc224c73fe3986bf8258f9387255f87afec839a2a4cd2ad1769ce0240d87497b706698740951cc1c3bcbb2f9778aa929b2d2529c2dfd8c18f60d458e51f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68f2e42eb7f44bf9be35e44a2ded76d1

    SHA1

    b971a7e83d3de6bf332c731d229ee11426653577

    SHA256

    bf6ff518ed2b3ddd7418346a33603fa870eae8461e76e81dfc6ebd9f53e33e25

    SHA512

    2fd79d342589b085376e16fc6d6cc90930d72076e415087796d9d47518475799e6c3c9045d14d57b024fa7b92edc786f986a904e389deb9994594c81a50e9e90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06fccfc71a36985c112bc2496a2f6ab9

    SHA1

    72dc1b0497223975f988900f6929dd2b72cc3690

    SHA256

    c3818960fa74d22b8a4c816f72e7ee5c0a73f240914a93e604d253b12e2a32c4

    SHA512

    db85a11ea4262477387ce1ddff2a9acdee3e9f63f1d91ef80c61428446db741d842aa56fbbaf674697d17c0c08218a6739f5e9ed1571041fcf3675f90a916f4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea367612c97cfddd5c16374e06805fb6

    SHA1

    0903042a467f74c199c125a9a70e874dcc036f0d

    SHA256

    e2af8ffaba2e081f50d1ac30d4e5ed5c53b793cb9724e88fbe3a75b9e0e837af

    SHA512

    c5682264d24880c583f2c3fec18dfcc48cf79a4750319c0ca5ddbaa8dedb87ba6f2f182ccfb54dae1ab072d4698f0d89dd86f4dff57bcba8a3b927ab3f1457ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9723b337a0a7da6b2c0bf356f93ab13c

    SHA1

    1a58a2ac0d7d16d47503b3418ac45ca63c6363eb

    SHA256

    6e8fad166e7d027ddc1739a06a19319fb04d1b17d625e1e27048c2982e014893

    SHA512

    f4732305f3e0dd480ef2c942714e90f751550692f53db6875496beeced9e7454ee11e6d33b069be63bce88249c467ee051ad7eecdde6085438bd70dfbc8cd489

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fbb64ee6733843ef0a3ea5d5d96fd6e7

    SHA1

    d0b03bd1939250252509877d10f0897b41735a19

    SHA256

    0cf60a3b638a27ab2192806a2ddfc5fcb4a9b0751595dff3b829e86f0ee1816a

    SHA512

    514172405f8e4e4f915fc76d2dc641aa46aec6d70b709283eea229e743f3e4e5956b37abb0635d5ae9048b66e7bf64f5cdb7ea53dd0e50f031c3f07f98edd5f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c916e0b9cef9f7963c035c376430471

    SHA1

    31aaf14cd3a2ff4211656495ecd74908e5bccb72

    SHA256

    6d4b995e892f74effdd3dc1276f016da87ddcc97f6b9fd750120662518b4d8e9

    SHA512

    c3a7a6467446b32ee75be1f50b2b9800b47ad6733220732bece2033e94cb8b3b3a67cbdefe44c5c84c0ade34a8f26d565a9d8c5e2f28c06a31f06050251f4043

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d42927db1b44d36371ea179170b72fa

    SHA1

    651977d44c3669e2effa606b29c4cf1f7180b196

    SHA256

    a751eea538249990306a43bc04ae8e28ebcf6dafffa65fe0a279bf957cdf2034

    SHA512

    be22850299212a71a7da9ad39c2f3f0a97a8932d8e5d93127d91b4453446ebd1173768d41b23a8bf43ab6c7589422ddf412c8d91271fe8ccea57da12aa9bdfa3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7927601a6b912d998df9c2b184b3708

    SHA1

    61bd01f58a06e5799e81a1a2f845b282b6d4c371

    SHA256

    e388d18d0ad74161832490101b1d045f2a97046c794a97d1d18896f52f191b79

    SHA512

    16abdaafa40601587501c582fcf0e49eb08b9e23971086308f201b3e5e547663eac714af8ea89091fb13eb538ed876ce5f23471b0a28b76975e8d60c2e88695a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0af32ca16c76000ee03a6675090e7aeb

    SHA1

    9171a2b648c0fac6d100c740d56eac3a2467b9ea

    SHA256

    d1a79da9f976d54566893683fad03dbb5401ff515fe3cf1d71d6903fb10ed0d1

    SHA512

    02c82a1f743b86f00fa6d504ce97c6a28f57d75deeb334897650cf0c4bdf5ceec79489d7ead968ed26bcddc4d200ab895dd9c27ab100a1c2b6de0025aed47621

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ac15a98e96d0a91af8e91d5ff8fba77

    SHA1

    006b4ff826b44892a342a6260415fdb18fd9c80b

    SHA256

    a733f4e8b29444cc091c76e071aa0c7b2f4638c5851fabb49c066f1e658219ca

    SHA512

    1e95c2fd6959b7565c558e72178f03c6a5b6894b080be5bd4b9902d9dde7dcc56584b6b39e41f9e8eb32b28bb28ce27ec48e21560be6d8632f4ef373371ed6e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1559e25f7842503d2792f8320f806b51

    SHA1

    db8b2aca28fcadfef0ef2054219b8c2d32b619b1

    SHA256

    96460f6b4053da8f3317e70db33a77089fe9b87390976c84bbba22b1f5f46d8d

    SHA512

    d400f3e9f75c742302c19bd5c687b513b432f2693dda85a2812bb0ecf4e36c19d724b6b67ee45bf0be623c9a89d968d536020672bbf25da92f36e83d50204b5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    439def6484af2b1116f29b8c8dfb689a

    SHA1

    ce27c60dc26ce411d6b9359e241bc752e2677d36

    SHA256

    e47be4e6bad0b33fe710c4e0492e52227697aff634938a290945896726efd62e

    SHA512

    2adf9c16177fb80198196187a4cfa133dbf347b5e41eda42b2d2c6fd28d5e2d4431eab2933c150e5abc4d880bbae3ffa09f1293648ba3e90049af43d858b7f50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d9f46e99c35ea2bff4ccce498045d450

    SHA1

    7f2aa6efe06b28ecb951f7e2f7adba1e772da7b5

    SHA256

    a6dc17fa6701843c2ae8808162d97821e1925f544efdc4cb259d44af9710c625

    SHA512

    9f9d27ce94b29717980e59b76a63d0ed11f71ba483cb8003101a0e78fa1e497dc760b4e793b3be94acd36a33e8fdc18ca3ddcb5c2773d8dd10bcf34a3ea97abe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    157a9b4090c7f1fba283d19fd803b37d

    SHA1

    3787fc927a37bb2c223c15ecebc3132dd3695760

    SHA256

    81996151ced910e7b068299cbc731032d05cadf4cc3c921d1cbe398e07a6b2dd

    SHA512

    7a64378584c8aa4082327b1aa16cddabda25dc795c290076419a9ea004a7ee2ba95094536b99d5ca089c3e84eb0ae2dd34463da612b587e97bad88dee20f2b0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b3a3bf0c45048e904c6a6f765d99974

    SHA1

    cb55b9a5d5f8813629329c60b09c4f8c607ab126

    SHA256

    ac61a3c070abb219a299ef623d0616bccb1afe1dc4435822c46a61d32e9a4ed0

    SHA512

    663e605162a4e0d58fbe07a848eb98c9bc4838ed9032d586a1a886ca5d0c77054756f53fabbc6a6a8992d6755663d258f73dc817fb92f39f154a1a5535c147fd

  • C:\Users\Admin\AppData\Local\Temp\Cab3C87.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3D1A.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b