Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    04/06/2024, 04:42

General

  • Target

    93a531ef23fbf3a967b4c72ce7d9a195_JaffaCakes118.html

  • Size

    139KB

  • MD5

    93a531ef23fbf3a967b4c72ce7d9a195

  • SHA1

    39f7cf0984edca4261a866643f163ecc3ee94a69

  • SHA256

    513f1522898839c8fa88e2108e3ee6d17a2d0a26e506795d26711f97f9c84eb9

  • SHA512

    8527e2072d7df7c3ffcb34b1319b9682923ebea30e0eb4db56e95f04fcdc240902f0fad3ed040b1c74c16bf0ac0b698515215d1b6d2cf0a7e0b06b07ab1c8463

  • SSDEEP

    1536:SUwRoYdVip60U+Uzepc+oQF/lGayLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EXe:SUwKWuuayfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\93a531ef23fbf3a967b4c72ce7d9a195_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2576
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2576 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1632

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3d9319266344b5b38a9ee4a5d2206ee

    SHA1

    f9cdb47f9bedee58a88092b9f56d3b4a276256e0

    SHA256

    1cdddc20c98c5c876ffd3911c4fbb2d6b601157cc4ccca7d5f390338b2188847

    SHA512

    bccd558d79c15d6d0cba1dc474fa22ef2152b8452a8423baf45c7a63c8e2158ef7d15c2dd90631ae69593f997840b9a1f72f94e899087a0da1eabbb0068ee682

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc0d2b49c04bfecb11acf605cbc4a22e

    SHA1

    7e7ba7ed04e29f305a9f9d96f831a7650a4938b0

    SHA256

    83f42aad26ce8ec6616aa747aa16530424a64d718cebc6523aac1b482921aeeb

    SHA512

    4a686b4e4bfecdd0aa2e99f599ffcd99e8f2f05add8fe66d703370665eeaf76ca5d02f6e3c15ab4cea8bd30c94f75361e029ac37499be797daf9d0445331850c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f2af0e83e6f6c49eed9bd062cfd2866b

    SHA1

    11260b8d8c7afabf15131dcda1f4c293c33e8e6f

    SHA256

    7c04a80ddc0935928248383b3d627d50ecb7aec73a96e39b2a5994532c0eacf0

    SHA512

    8ae10e70a7486be9ff0906228507f59b7160f9b2037f50c132a260f3f449eeb87db7287493e2d6da8fb39a9b78d12e48049573b775ba3c9e427f03a5806216eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    289f6b4c3b30faf8644aff623c80d31d

    SHA1

    30f1db1e2744bfc49cd944c82b6b3d0b3afba883

    SHA256

    44324a42b5f5446bc35dd2a23e6ac6048b29918a1d62aa3992301e5f8c7bfe41

    SHA512

    0fda2ccff3a65ff5ceebf5efd1a9d4a9b7b073e6bf67e9df16468e956b48a88c4fb7d9bb8681129ded775ac4d09d5e876cc7dd650b4054cf51bcaa296d9a4403

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc23e3e2c48c32137c2bc1bb48fc4aa6

    SHA1

    3363febd471ac811637fc464d5769bbf47904123

    SHA256

    18f44c7bcb631c6ef67ea0c749806deb1c0386482ae9716f0d077113e0bda579

    SHA512

    df1ccc5180d59eae809d0be3db657a5566ebbcd4c2de399fb6660c60f31777579fd731564cfad1523e75ebba428a0af483fd7b02198cb3b266e8df79d0679687

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d3cfac2c141039798670ea06f3eb140b

    SHA1

    e57119f67022ab78f48dc57879da978b06f20cf7

    SHA256

    aa506a75c88d224ec7ff6e2abcdf25148f6bf48088a149db8fd9581d9bb104ae

    SHA512

    a56d7c1c2b0c64d27625b4673947890fab595223920856c9d8022f753cbc81f32cbb8ef1c87d0e00296b36097a29801b14fdbfe0572114eadedb7e681f85018d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e6fb5cd5bcb4f4eabe842e039e123a0

    SHA1

    088f643433e508e6a145f3fbea4f7fb85c7302d3

    SHA256

    e57d2053b4650561909801f72b78de638401a2222d5d96d22d3c7fb12c04f057

    SHA512

    965f18987ad6ef6725320ecf2022d4bb335a4a013d5081c256660dc4fb0319375c1d8be159eeae015cad4057896d91f05db67f944cbfc87870d2d54d0a83c20d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    33ab20620c9f568c0ac0ccbd8ee0d597

    SHA1

    60c473892625ad69fdd0819b28c26a207ada92cd

    SHA256

    c1303b08a2b12d44d1bfe8cf297dccde7b1ffcdf1425e846a84c31bb11b24ef4

    SHA512

    54e9c259a1c5a24c9f5aa52f30c9f1ad01d047d0ad393d14e833bd2ef28a340a08ed9c2d3a17dbd57631aa458b4fa25f2703784fe959b9ee5f98ba6afa5947c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd1a7d0674c9469b441de4400dea81af

    SHA1

    ea1ddbed140699e067b978a20735e1eedf196a9d

    SHA256

    7e82caa46aade9ab664132c00207c15018c2accaa7c5eeef84887060c32e1478

    SHA512

    9d0b6d1913d60a122310329aa860d307a3c0fd75b3bf3d243d3d3b21fd625043f9245940bfe6e1eeb87241774cdb2ad7ca5864cfad63f7541c55d03c5860b145

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    061e6075073a97e7ddc0dfe7f46441b9

    SHA1

    55de08bd687e033ccc3f147a45fb4944dc4f1c69

    SHA256

    e0a5619e33c6c38c97809754d49a782b9b250027aa50c91400f3ee9e1d55684c

    SHA512

    eadcc2f00c40db4395b1c1cf579d9a3f2fa6be8f4c9b5a26ca546dcc9b323621eae0234a4a926baa4754a6512d3ab11c869a32f7134283ec0b6a0c6324fb94d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5d2e28a008655c6dde23adf5f1d88a9

    SHA1

    5bcab7e840d675c84d06eedb7a32980d772c804c

    SHA256

    c2e3cd20592b2d69e43fc865c9fabeb84a9999f34738c22c5781f15ef3fa0263

    SHA512

    ae209429a678439b60638b00bcf261adec422f78803e87aa4b5ca184335868fc6688b6696665591beceafc51215dd42b869cc1f56a6b2cd3debb395c10c7c474

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae43844707cf1ba4abf33dc6df221889

    SHA1

    d82a9de8f1732db780020fd644b974b361ee530b

    SHA256

    ad52f38630bb1d373856aa577795888fbbd6bd502102592ffb21735827a8fe9f

    SHA512

    ace489872f0d91535f5916a6e4379bc0248af5f467b3c4931e5f7306767b2ae78190cb8dd0e5dbf980ac714067c33960ca6a6796b3be9a9995aebad2cf8c6596

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0883440fc3d0baf32db3142c6ecbb407

    SHA1

    16b7674639805bb0c23a6f5cbd25d1eb3c264a73

    SHA256

    2130a2a58b9d0ab95c9f4742e08f109dba2e958758af30ca29ab101ee7b1310a

    SHA512

    8c49238f2f351d6357cc85522e602cf2de90a1549912f4f034699419b8e10258973e4aa29baed7bd82a4e5558d04f087d6a9aa881d387f3c9673f656a7e4023e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f311578b3d6c5141ac0be5b8d912496e

    SHA1

    931517be40b825347e321fc43b10d3ce6f3895cd

    SHA256

    0202fea0f3e0eff4392229831a52c67a20401c52787b6a46d9cd8b6649cf376f

    SHA512

    58f17740b2d374cc2eecca9b47d5291419a3dd154702af3acb984f1da4a8815e3ce9c74182474442c4500b9d891649aefba4486d90b39eef07fc4702abc9b896

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5c32894d6fe971aa0453bf2f53b3dc9d

    SHA1

    ea11bf9a5a9d3fa5f7f587568987954dd999e542

    SHA256

    4043a173b556b7a7142bbc07eb6e2d85b86db208636a745279dfb098f3b8f9f6

    SHA512

    05b4ed97a87c91f79407feaed2d64886438f2b2a2212da2749c5f4ab9792e561dbd5dc383e02a5eddb09c1ce6d323ad2bca41f6f584de682184fee07fff97a77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e6afac2e355c019c5d1c0cbf79fae39

    SHA1

    437f3b9c95b92e51f115c2600ad2498aa15d9f5c

    SHA256

    c0ba5bc60d1ecd75f61575ffe5b52e63715d66eb054830181c22434624226c8a

    SHA512

    38d10333cd0b5dec85670112f9fb92adf73f8d484db5b58cc32471c0c02077a7d547caadc5fa8a46c8745ee094c4f034290ec56671c85f78dc584d490f6199c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d7ebe01426ab16930c0092410e5aec5

    SHA1

    fab84d16a7d0fc0b87cec116d3d8d3f298b3bb94

    SHA256

    991ea3cbb5317ab1624fc30f36f97b59304d892e891485165515ef6c5e97a986

    SHA512

    2dc3702a679800f078a8caf63066f101c859ca301ebbd8914f4b9c6c15ec82929b1716a21470049dcde529e85c78190cc61ea6c2ffcdc4e27687670623ff135b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5d7d392b8d9d808c582ee4f549682a9

    SHA1

    9429eda9c075665291d3fd56b86410a7afc4e0f7

    SHA256

    7211e23b91a2b0bc1364c31ce214e01085ae3885d235d8b70638bede6392e91d

    SHA512

    01385dd33cc35d87477f6ea0453dc778d0114b81aa031c37a4e69ecaf0070f191bcdb3e5e942e69fc093a4cce3a2b919f9a136194fd9ed33490f522600755a8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41165a2a7171ca13992e511c137c9f5a

    SHA1

    46c55e0320894f0b6342ba297cf2efc5a06a4984

    SHA256

    1c7436e13f8a58f318ef8aaa5d7294f5a669f0697b0414153de771b2dd419895

    SHA512

    d1d2137b0551f700c4b38dadcb1c2da77fc20c31e856e38543669df1a5064e12c2d14ed5f98f52bd9bc93c9711347d8a970f6a2cbdc23bb812c224c2031cb697

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    991e55f0621c5ba232c20884d9ba31aa

    SHA1

    02ae94779ee5e8a8810c1ff912b57adb948579f6

    SHA256

    e9b73f29d55506e784d04411a2ce2c7c4eafc4c81fce45cf9649ca29300e3dd5

    SHA512

    ad0abeb6c8ba260ed7ab7571a35739bf1eedfc77bf4f0ef53ca1dae163c2f5906373d6f901e8f52b98449682382f23c7193b24cf25dd6bd21d1929608aa2765c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e0520ed54b8b627b1393ae435ab65430

    SHA1

    8dbd755277e096abe6d6db96a7e6db9aa1d20dd0

    SHA256

    f739e7633a3b38bd78e7fb6ae1aea7022d82ecb3635628b0c512fb5cd0515a74

    SHA512

    ba0038507ebc45a9abb606b792d97f98282fe8ae5f6e2c5fb2434b676712f47985035a5fef6e2c1e8c15d6e328e28e2522ba3fb746ff3b6651b509f9b15fc561

  • C:\Users\Admin\AppData\Local\Temp\Cab1A84.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1B09.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b