Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/06/2024, 21:59 UTC

General

  • Target

    9c12adb1f883c40ebe3ec35512001a7e_JaffaCakes118.html

  • Size

    12KB

  • MD5

    9c12adb1f883c40ebe3ec35512001a7e

  • SHA1

    29932b61fb9aced7c839b0cf59c454a530c2efba

  • SHA256

    c0b310527c3ede0ac8b708d893d2efc4ca64b2c288e7ae1244c42da7053a57b0

  • SHA512

    53697a806e18a16a17aa84442ba65944f24e7d6d81fbcb84f5b00a43e481dc2d634f464aa3f3feaff3db7f3c2ce4067cfdf24706799f0b82f596659bc8538d3c

  • SSDEEP

    192:C80qMgBEOks1QTxE6av//X7/pMe/i57xEINxKGKppwqsrOycqsDy3HMz:CPbOkjHav/T/Ke/iwAEL0Zyhxksz

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9c12adb1f883c40ebe3ec35512001a7e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1700
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1700 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2944

Network

  • flag-us
    DNS
    d2bfa0zlmvk3fe.cloudfront.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    d2bfa0zlmvk3fe.cloudfront.net
    IN A
    Response
  • flag-us
    DNS
    micasafoundation.org
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    micasafoundation.org
    IN A
    Response
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    747 B
    7.6kB
    9
    11
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    747 B
    7.6kB
    9
    12
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    779 B
    7.6kB
    9
    12
  • 8.8.8.8:53
    d2bfa0zlmvk3fe.cloudfront.net
    dns
    IEXPLORE.EXE
    75 B
    142 B
    1
    1

    DNS Request

    d2bfa0zlmvk3fe.cloudfront.net

  • 8.8.8.8:53
    micasafoundation.org
    dns
    IEXPLORE.EXE
    66 B
    148 B
    1
    1

    DNS Request

    micasafoundation.org

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fbcbb87bb91631924aa57555a2880046

    SHA1

    f12665d2d0655d2c7e8e3f13e067290fb4f54bd8

    SHA256

    7a5f6bc27a4ecf5a1c03e3b61bea07b9512b6d93efcfe06e5d5148917b17b18e

    SHA512

    107c0cdc6723857b07c552e3b94086d1130f1d7dfedc0ce452b68a5b3e1df6e87b33d4c509f2bc0d991b6c3dd3f20944f74c74b3cf3b02c7a138a6ec83597bdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2dfac7719e8a7b5d9c0c75e59116a7a0

    SHA1

    3274115ff235deffde65396e12cc9fc6952253d8

    SHA256

    95a91cc2c617b6161f81f41c7f4b21c42f46870b91aeb06a485fe9356ae526d5

    SHA512

    e3e3a1c9aede23128d3f3a30c7e3647fec41f4873f5f82364a16e49b0845d4d4ff62ec1a91e9b9edc598d6e4d264beb8b6f1cd6bd3e9dc86c4f310b0b873f1d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e924bad53dea8341d58a6b6c909516c5

    SHA1

    1f3fb97871387134f5d9af00b3596ffee1c124a5

    SHA256

    7b3c427ca2188a4f295eaa519ae47ead00eaf01ce67b7e2b5b32e96d9a68a38b

    SHA512

    e303e843b24533660700c79b34e97ae61ba407bf0cf7bf31430702ec8f00da7c5757aadb928a9fe87ddad1e7f1d5d98e004a84d24016236f522049183a96f068

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af9fede7e3a27405a3493d9463f5515b

    SHA1

    39745a974f3e889fbffc073ae97b58a825ae796a

    SHA256

    39d013e2e432ec00759806d4ecc0a14536d0d933fc769e2efb937e6f11aacf52

    SHA512

    633f8614ff9b68485c0eb32718665a73e78e8e15596cbbf891b2756aeb5a19dc7eeb8b246401d153f95119edc8d9464e7f1cc3ca4ba71977f5b3717c8aa99836

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cccd5db019757c0cadd95fe2637e9575

    SHA1

    5401317a18146cec6fc4fcda4b4a0e0a9d067d5c

    SHA256

    3651de7b94b940ccf476ad10fa4021ac879bc5cf4f1e1eb908b576916ccac126

    SHA512

    f4033b8c7f6d492e8544e6d837d00b15d27c4f73d5d64b4e5e5a0d46cf481365858d300c679b26801d6429083e92190560906feee3957f89481376dc3779daf0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98dc8b30b05a5632b2e7f07585db1499

    SHA1

    1180c740e1ebfe77789725a8f7418af9bec2b8b9

    SHA256

    9297347af7a74ba4b8b2fd32129c01cf48cf2ce81294688550516138009dd294

    SHA512

    da7b946e25cac10b3501ec73f86c88be30c4ec6444fa6163bd53acd8a60755b00d3add4bee693f73447a8fda4b5a007b17e3bf03c4bc262afd6520aab96ffe14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c9b1e1d4e557f0b9ea2eaf154504beb0

    SHA1

    d3028bacab1e569d2bff56abecc386849ffa12ea

    SHA256

    9ca74ab98a9e5f3809c1f190d4d3f80743d0dcdeb33004cab87de82b742ca16c

    SHA512

    cdf6643c5938ebaaad32f564febf916696fec80d7a4173f96cd61d504240e9a7ac680763839eb3db636a05c37f5ae399c75c2c648b7e1fd06f20ff916895f2fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9344f605284b31760266fcb4b631b620

    SHA1

    a9aff4b082488b847cfcb61aeb43c778da4516ff

    SHA256

    dd926e9ffafe4ba4f7f9fd736ddaa6604185a97103a7c626568555e8c47418fd

    SHA512

    f5fec8c8d1f33dc89a5a56e7a81b52a95a60ec3b8f74bc9e9f35a2abf2d015faa55fa9041cd139739e2d8589677c12d8f612a7e14b26531d7be9be105fbf7a97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    128a6348d5af84286c5743c387a50799

    SHA1

    b7f253f8a42078636ecf4533e337f45d31f69868

    SHA256

    d307d7f02a9bb2954f2238b8262c84af59dc13fe906d99cddc73f3cb7b98d39c

    SHA512

    19cdaab9eae082cb11f0c7645018e44e21f4075af990e7885ff3296f6217c2d50e8fca2d2ade76ce176d7757fa612c424b4d41377062b391fe7008387f483840

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    33d6e97926c6d335bf961decaf5072cc

    SHA1

    04a7a9ce67d58872e604aa2e5072e8ac18cdb655

    SHA256

    05c95270ab3a09d8eb0f79b923453b250a78eeb0568e8051a6ecf62397b70b02

    SHA512

    8fdbf9ca68c4b55e698d2294781c41a8e110347fb7a868d601d54f3e3269ee1ac22a02db0a3a0bf7381b633e65cb5d1518dfb4572b72c0365c55d5795eed63e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e0155485e0a771ce684bc55c331610ae

    SHA1

    f2b468bd89f869f8f05a16b203d3ef8f3700950f

    SHA256

    c9830474b4ce77ef63492803ad72b801fe7c405eed9b69886673ddd2441719d2

    SHA512

    989bee7e7657aafcc5f1f7b4c7284408a01e063befd84480e94be5ee9acaab4d07a6ac1aac2727caf32551bbefadf31ebac70f906ddfca44dad7fea6df81643a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e751f4383b4c7bb4593477c9ee8554da

    SHA1

    ebb3b1a6ea913d706af9255884d1e85e07fcf92f

    SHA256

    c052e1afad0f391334c138ccd46b286b4e701d481dff1f3e70291b55dca997ef

    SHA512

    1358b1dfbfa956155387261b9d3a8b406ecc4f630dce45ebc471d2b969bbd89180bd024b26dd35a885263c10a659ebceed5f3a876d2b01d71b298d021cf0fa86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1994234befd3505ca5be1b71bbc83881

    SHA1

    8e78f261d0b0b7957174ec8c289513a8b00398bb

    SHA256

    f7994f70f4b03214c88f1e8b5efd8cf26443fc34296a6f952ade3ade6fc57fce

    SHA512

    bed2604a74ce512bd5736ed643ea93f78b4d85b71abd0acc6865e7af9872a309184b5bd6db94c564e0f8fb741de5e422e6381556fc0f15805612d37130d61abc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4814eb948fb961e30078e68a21898000

    SHA1

    3689e824565337b58cc3c744589d7abacd2c46a5

    SHA256

    9e54ade4b0b408dc04c0cd1d21994aa05f5a280dd0db0610017b325ba7308b6b

    SHA512

    5fb6db5d28621ef97b536bfa9680770a980eb0d289da7096b4711c6a28f3fc72aace9c8795d1b6ffb7f6d6e679e5b682178fbe803f8f7052dece71b7a393d83d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4af60c1c0150dec7f03019a1e7a5ece8

    SHA1

    577e9502f6985245646e8c2fdc84763c1ae28d87

    SHA256

    5cfdbe718381ed858517b8369243b884da34cb7eed2c15c83a65537532baf209

    SHA512

    eb8b4f0e2f7c5d095202d17a524dd74faa84b71644815c83e7593a406fb5a0b4cf9148aca8baaa7e3bfab742d2afbe2cbcc0cf06e829f9c67c38c8db359efaf2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b8e96497c356abcb6bebd6245a7b8480

    SHA1

    16888c6657921bd33968b69a6692f5396de771d4

    SHA256

    35cab39282d661eb7a42b772bdff61217a6c5d9672d79366c9f73ba874f5ab5c

    SHA512

    c06f2384b2bcc535a993ced73f9a6bd2538b2b107ab2d8a0060db7f5f5cc4392f792bb62fff5a658924dd4fd94789c875ee521669cdc05b016f6a2587b4f32cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    96c264d02bdde8e9f15e4d4301002dea

    SHA1

    7107afac09890e7f2c10a79dfcb1c4da3ce52e70

    SHA256

    f2042fd9c541ab2cf7b3e2c91472def44cf133694ee7d30aae912404963bfa67

    SHA512

    efda6e19155a7ed7531dc834ca9065c7ee6dc8ad9b26bc4572eabc1bd04b8dff45d62d74b06a6844fc081f738829386243e5fd3a439d475d5ee6da98b4a5f17f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c7df9f5fd61aecdd01cc309059a7075c

    SHA1

    7e0314dc274a656916bdadbaa7751da45971f9f6

    SHA256

    d7b8c4f56ce52d6fd146ba1a941e30e755d83ca59ddb02504afecfb10874c4ee

    SHA512

    9eeeeccacb0e15fce936304a160aafd089640171ddead6c0bb413d4790eac2929e78422a739a7d2d1b9d8964208937ca4228e8dd8b7fe02ca096d8e944bf4d17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76f1538b17c664d835e7c62cac9b7c05

    SHA1

    ea61a5b9d258f7536087e02c25a4c0e75bcc411c

    SHA256

    f13ba42c1d7ac4f823813bf5f6050c2dc5a3232615fa1e004d976f0761586c54

    SHA512

    a959966577778ff854e0eb9de7c7e65d2c45dfecf08c27e4c96ee6c0cca3c17caac2421be23d4cb3f3c5b3ec7fc37be9abc74c9e64aad57b96de37d14a462575

  • C:\Users\Admin\AppData\Local\Temp\Cab22FC.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar240E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.