Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 08:44

General

  • Target

    ad97ebfe17e93100d2715afc3ca96e71_JaffaCakes118.html

  • Size

    1.0MB

  • MD5

    ad97ebfe17e93100d2715afc3ca96e71

  • SHA1

    74e3eb47917a0a71d4025aeed478fe528aadc26d

  • SHA256

    197dd8c47f9e7c29a180e3f0b543bece1a8ce11243409e611e759334afb9331d

  • SHA512

    9cec252b85bceb39c9f441bd82441c3b8a4f8312c1c105f08ba745f5be3c8479ada0a31ce9941d999561d86d6ffc0042cb3d8f652851638749f391a62db1927e

  • SSDEEP

    6144:2kcly4UQ6Y/JBDRl3LHhFKB/SKbO6/lsE2HG1qxt+GPaqFZV+rW1bW/:2kclBB66BDRl3LqBZ7xq/1m

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ad97ebfe17e93100d2715afc3ca96e71_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2188
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2188 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2236

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    deaadac76f320476f19b31ca3833028c

    SHA1

    6f7ea33dc1939bc847903dc1c4de8220a53c5a4d

    SHA256

    b28ae5d047d5ffc49d3e60be6b95ab5ba618ef330fac7cb3ca2630a35144b976

    SHA512

    27d7efb49d84caf64718ec5c0053eb3f9dc93b11ef836967e526f07ef13d630ada5f70c5c6b949248128a4800d1fa7154de9cc1f0370e25ef2d55678707d35a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ad2b310ce558883f516b9a3abc10188

    SHA1

    0fa9770090dd2dc8c37196c497137e7e77868597

    SHA256

    4d62466bf269230b7369760519edba288e124f947ece8c2702218151a6f92597

    SHA512

    d133d7c84cc60f78ce327ac238d60405f44691f39107134e80df63c23ed2842ff9217c16485a2dae6513e04e53f8e826ed364e8c44ec821f57b3367adf5e32b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e60adf92b031767425ee482bd1a8babc

    SHA1

    9134ed2b64bd240c8b83d275ea49276b7dd1b68e

    SHA256

    fb4e6a12217af2ddb53e51bb46c94509cf2b18de51987515167e1dbd9911d138

    SHA512

    49b0ea04aade035cb49f2e9771bfa8549bf1eed44fcafb162c61e04784934164d1e6db5cbf68c4daa60ddbe6a56c859152590b5340f663d6c8ed9b4376cdbd28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd91aa437e901764dc5a3401e12beb3a

    SHA1

    30d2e31a6140318a88cf776903776287afc39210

    SHA256

    a16867ef0a376fbac7e3c33566c15a8f6deb301e9a57b94abcae96ad0e4c3f57

    SHA512

    6ac6573fdeecdeec4607c9a030e09aac222b22aef787f42a48a3db70d883994c04b9303052c7d88765a89e95f11a6604b51cdda7f34c679387a564a0d9b69f9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    81975839b31fded5f544ebfbe779ff20

    SHA1

    52f228109a5e604473f6c693b37b31bb3aead870

    SHA256

    22cc414929fa1ce2b639598a355f8bd1f1a8ecc7a0b7832f60aa73256ff6beca

    SHA512

    2dfbb54aeea58e28c46d15ff552c961a17860ab98fdbaf6b7875a3117ae2d83ac3ad4365de043b02115e13136b1ca2b5b5cdcf08e5ad8b28c744bbbda79892ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c32700e8fbcc6c6fbe8ba639e1a27ed6

    SHA1

    03c582f369319d5072a9c1e2726416d4cbe7c23a

    SHA256

    2c6a7b5baf4149e0281bc3bdf43a9db704d28095f04540034175c44a321de09d

    SHA512

    e4526bb004765a817c8f0ddadfce385896ac32d51bfa82f4ab7223ddcc9ec686b4e5ce2eff36545eaec5e9139348f60d86bf8373e2e3da38ae1af599c744c629

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3514eadc85193a13566e6de71a65ccb

    SHA1

    15e226a84c5e40a4a3f1ec81653aeda4bede3c54

    SHA256

    80a69ac04b8ea459de3a77dca664a26ffd749a3b25bd8da523fc1c86c2729415

    SHA512

    300e68562b42abd6414627f589acd2d4b0917771724de482c4d874348b305cbbd379b4cafac4a03e46c8cb36bbdc8ff21e198e3a981f944dcfdd3425b331cbf2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b67a505e543b823525dfbcb187fa20d6

    SHA1

    6a57466afc01333d3ab09e385c591c8fcdcb7515

    SHA256

    83871c792f6633d86e9af7680760b48a3d9d3a522534791c5ba7b45ffe68ccfc

    SHA512

    f7286f6cd0a6c888de1356d4de407e39de170b7c5a7007236aaa7626e896fe4679c7f36d40cd3753cc6b65ea762abedf7240cf90dea4153dbb919dde5106ebd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd4d79a6052060b73a22f13bf122504e

    SHA1

    3d211758198fa8c006c9593a6817a2e0bd3cf22d

    SHA256

    438dfb821a75f6cf901dc7f7a923316048d22e510d0467f726188e6d2a78b934

    SHA512

    8050b52030f70413af2771899acec6b716988a0b48cebfe2e74d3493a7bdca7ea7775b5e73feb4a9a5dedeb04cc1792c8d34b43fe3dfbbf9f735267d766f990a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    984a629c16d1762e0bfce7ae4427900f

    SHA1

    6ff8ebc7b00710ef5376f21b5a1c40f0165eca7e

    SHA256

    00c16e2b1a61d5c9ec0edc4254712055f0b90375b8ab4536a7e2dceaac3cadbe

    SHA512

    04624a547a5c3f570fc046ecd98ea24ebece9d9bd27756f256f87a36ff7c87eb9d30c8fab58c7d98b85febef48e1e4f6f8a59c1cc136af015730cc54de4287da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1efd4127ec3f1ec4be1d160e52980476

    SHA1

    e594284ea8ca7b3056b362b60c834c9809813f71

    SHA256

    b4afd297eb788555312b67cdcb66f48be550f1aa3cf05054755513165e76b995

    SHA512

    9a7ad7c87f936a96d10d442a4f1cbcc40ef92c582cada542ca2c82efe06a7b69805eac5554f486bd640af555e0fcbf00ad00b64f3fddef762352cc9bc1a026b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    988491f38db1f1a355e96ca9895b0726

    SHA1

    959e1067fded0c580ad27426f509b60b9b9c9b48

    SHA256

    ed1acf01bb03e81e364ec3d46f5451cc51cec165d1ea316994cb72dd9c95ec20

    SHA512

    113d04b6f312f4087b054d4c0df239fff46dfcde526e98d789d6dfcee04c38e320164bfa814e15adbffaa72f10aced72f35d0f49c4031033975ed8e656c5f9e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3d1f68d19c4539c5842a7ea4459244d

    SHA1

    5371b0cbd406b8e6d40907abfb06d3f94da6cd55

    SHA256

    3ea11825b51be8d8d0da31dd15a2de0b83a189096b15eaa41692a5e2f7b4c224

    SHA512

    e108b82b38c779f31697be5722cd1a7253ae9dee27d9cdd6a90ac8c27c937d371eaa756638ad86f6d6a32af493e193dd2ac6b8c2ec4dcbb4d152b4c7ffeede63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d703c4bf9d7002b7c9cfd28310db9f67

    SHA1

    7617d3112a48f0552e77ef024e00cbf74d854797

    SHA256

    66970286236719b9256836ebdaa4a161a494873ce37cdc751a155bbcc19d5e17

    SHA512

    3d86381118656af578fe2beb64388a4aa15d0495a45dee9084bdbd4ae550c4536830b4e5d47b06b6ab7611d378b85e3dc77dc271f89f64e6752f77d60ec0d012

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e01291d2ae19722f43c8aae5d15970d

    SHA1

    763619a37ff5a31bb9c7c4339294b5d1da98c9bc

    SHA256

    5e9d9ea1cfb2f61525832e442e7384924abeee0f28f7a3fd90bd44f6d2b0b42e

    SHA512

    8d0cfb969994e8893102432e8920a9cac9e7b4029d84c32994c0357ccde3907f1e24ac1be46c6512dc88d645157ec1e8d493bb2bf888c96f6af438889b5c31da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd9eb46a4fc708007eb5aa811bce6de9

    SHA1

    1448c4dda9c09550fc51504cc55998b8ab990619

    SHA256

    04d4b0cca75f1d8c2e874fc03e03e1cf8a06dbe200a6de39d390b83c754e14f9

    SHA512

    4f006d8ec5073927f91a2bff21c2afc74fafbb9c8bd9cf2b3bff2191b8c76debc7d51933d5f6fe2c24497068bb8d213d3e1ac52374a723cc7d7627143d634b17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0da2b97b0a63fd367f906bba16ef6eb4

    SHA1

    69a96f54507bda4db486a41fbe4442d6e66c742b

    SHA256

    01b384b975f655bcc53a8022a928198d3ed725eeb6cb7cd718729ed7b96546fa

    SHA512

    c1bfe6405873de39f73b65005e334adb9eab3397af52abf1c589ea7c720d7b45b1c6692eb7eb0274a11b2cb252ef27ec29fe721337d793b31f88556f28f65309

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    079ab3d932203aa0fd92ef12871e8b76

    SHA1

    1aeb94552327ae346673f1b2b4a0da31f111a3d2

    SHA256

    af2068196a6213febbd0da20345b27ac3427f2dd5b51ee693b7139ac10622cef

    SHA512

    57c0bec77c90f15b7d4dec124d20c80b818a7ec6c1074f5706649a5d1ba755ce9fb17d54525d67555ec08f7364b39220867634e3488eed13119e47ae5846f19c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b64a125d9c0db28b8114d4185b8f040

    SHA1

    d002d89e425c5b560ca0e5a804cbefc430efceed

    SHA256

    10efdc519fa8141eb03c8d599121c10f92aefb2b49e70d211fdffff9ef78905f

    SHA512

    29cc8a2ea9f39259a6b29749ad1defb239bf32ff259ed33ce2a5f7cb07517dcd37850f03009d34aca71a6471c77b2b50970c77993235394f0d66697fa6146a80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a30201f01a5c7e7bd1623e0602d405a2

    SHA1

    bb5d4a7d8694cf257302702d76cfaa8f47d2fed8

    SHA256

    ad8638b2d76da3b30f9c3a08fb5a8ccbaa0eb7e76b6f5f40faec95413e02951f

    SHA512

    d1c1e093058366bdd9ea524e1c31d4c83fac4b9eb1f7b3627618cee63b32591b069d032bb2a5099f3a73d9c31b5f4cab37dc88ea392d1f2329b68b0ae9b0aebe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ef6637968378114972ba79b055c7fcb

    SHA1

    577a3f9fe49a0876fd38eee157ab907d6929da1e

    SHA256

    e3280a705db2fe14700924a198c05ededf78424ec20cc009a2a4a11d86577916

    SHA512

    7051fe73413f22ddae2ef24859a5ca7f99e86bb1fdf769e0dacfe96142ae2f0d61e4df3b6018c075e99b78008b3fefb1ca385dd3e02aa405972a699f9d99f9ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    003411b6de3ad854ef8d66a289a5fa0a

    SHA1

    4eb9e13efcc6ba860feb0026a04aec0558f6ada3

    SHA256

    49d405aaadfdf16d13cce182cde9b489aae5106ebed27e054acc87e80e622957

    SHA512

    23d60280d6413764508286634526e6ceb8a8c9e6ec7838ef0779534708f688509bbaa29ecfb74110f8a5b5adc411fa4e6e385bcf4431f4673f4ae4305c6330f3

  • C:\Users\Admin\AppData\Local\Temp\Cab1824.tmp

    Filesize

    67KB

    MD5

    2d3dcf90f6c99f47e7593ea250c9e749

    SHA1

    51be82be4a272669983313565b4940d4b1385237

    SHA256

    8714e7be9f9b6de26673d9d09bd4c9f41b1b27ae10b1d56a7ad83abd7430ebd4

    SHA512

    9c11dd7d448ffebe2167acde37be77d42175edacf5aaf6fb31d3bdfe6bb1f63f5fdbc9a0a2125ed9d5ce0529b6b548818c8021532e1ea6b324717cc9bec0aaa5

  • C:\Users\Admin\AppData\Local\Temp\Tar1935.tmp

    Filesize

    160KB

    MD5

    7186ad693b8ad9444401bd9bcd2217c2

    SHA1

    5c28ca10a650f6026b0df4737078fa4197f3bac1

    SHA256

    9a71fa0cb44aa51412b16a0bf83a275977ba4e807d022f78364338b99b3a3eed

    SHA512

    135be0e6370fd057762c56149526f46bf6a62fb65ef5b3b26ae01fa07b4c4e37188e203bd3812f31e260ec5cccff5924633dd55ab17e9fa106479783c2fb212b