Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 23:01

General

  • Target

    b5a24129c4a18ad0cd24ba40d6173a63_JaffaCakes118.html

  • Size

    157KB

  • MD5

    b5a24129c4a18ad0cd24ba40d6173a63

  • SHA1

    ec94ab34b8a463efd016f5299c8b117b0c300fd5

  • SHA256

    24f1a5c8c0425d8d4c9a16162aff9da1638bdfc691d9666a88a3fe024fc7257e

  • SHA512

    7219d6dc0b992814bc18fbb3605dafadf2e7fce784fc3837089f074a61fd3be97a18afc0db31deaba2bfa403ad49eec70bf705ba07f4a33ae52d23f0945a7027

  • SSDEEP

    1536:SSirlKYz4ZalnieIyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3om:SS4JzPIyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b5a24129c4a18ad0cd24ba40d6173a63_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1996
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1996 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2540

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed202c5abb97932c8643ec2f66a33e9b

    SHA1

    689acca8ffbc65c314c63bd9f95f7aedabebc405

    SHA256

    d6fd1141aca5bac600021e1746106db86b56a9199c3ead5aaa182693c514518a

    SHA512

    8053d22fe804c170fb6b08425afd381e97c7b67500b19fdd1096db199b9f2a6a8be30b06cdbf76cd96b38d3041fb2c1ee0f660d92eec52f510289607096bd1a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    138c33e046f7170077391165f940bb77

    SHA1

    38ab4f3dca42a7d2cf183109849783ce6836e5e7

    SHA256

    3e25d7a06d1f96fe49b4c6cea105e19f2504a4871c7f97b39498a84d78a3ea4d

    SHA512

    fc0383d8d5142a85b62ebfe2c8591e4033b0b77eab19088131c2dbcfc2244a3d5f92e4a597c1ebeb052d8c47b5f2d1c5bd7e2ae5ee48a67bcca3f1760bc6c912

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e2eae417e01aba8c3c70f056db820e9

    SHA1

    5e97b9a23ed16267346947ecd42994a0b72f5bcc

    SHA256

    dab40d64ed409db34472d653e606ded06e3b22cc2668e70a55024817cf97eab5

    SHA512

    a534db2fce3672eae949c53e326848b89b7c1b914cbad61ae042934cbadf9d642f325ca33fc5311ae7504f70f299ccc34f77b83d7cad9871ed9b5c0b9bd02ab8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8860cf40d79f3fa83db21c1346bfa65e

    SHA1

    106de1870b02f311d278267b538359b70db222f7

    SHA256

    65b94da81964038309baa42789ab51b96e309f5bb623e3c05368d977e3cda415

    SHA512

    b81e68551c22be24fb40eb3d96044dba47fe4d0e1e601f407fd0aacbf17bdf2d72716103de7bf92aceaeaa28fb1a28f56137e3e00e7cca2cf833c36154335758

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    14e34cef0096c2685c67576f85855bf1

    SHA1

    d3174cf67244ca9a11b989fe91fedcc29921a4be

    SHA256

    f31098d5ea710a02b2e34bff68bc129d2c7bd0d9f3c95d715a3f9e3bec2ad15d

    SHA512

    d508b9813f4c6e8380361adbf3b3ef0649c26d85be2d7205284e00645bef18321498ed9042f11b6e2e32bf706d9c08769f4d9cfbc4b14c6b28ec844c4fc705b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e3257ec05bb53738682a783dc676792

    SHA1

    1a7f7373231ee0f3296de3df1c546940a7eac99d

    SHA256

    079bdfb9a84343bd86ef23b723c6783873b9df2c1d26fd9d69f6b8834451d13a

    SHA512

    af53051a283bf588f75607ffd1866bc7dea8e08f78872034b254390a2cc54677753367acba83dff098fb09230b781906c2ca5ad9c86aa8d337a0b977f3b1a46f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2122a1ae43b634a4f6c648e66ade76f

    SHA1

    7b71f23aec0e8b5683eab52387cbac889a8bd1b5

    SHA256

    908e309aa4682fad47ebcbdf196d37177c129fb5da79acc04661a283b0e28cf2

    SHA512

    2f3ef77b73a5e3203f8fcacf87515e8d19fa58dbcfcc2601e22369dcbe94c3e3b45556a10793321f291b5b1e6a3008dca95e6e3361dc3212c3dc1ce33a81b050

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e0c36b06f02318c91f43648b1c15c5a

    SHA1

    71aed6952bdd52eee355058fb5c7e8e081531ae3

    SHA256

    5592721ba6389b18db6d423c1e362e32ad38a1fc8071c497454062f7ed1c1a63

    SHA512

    69fde2d916ee8bac55c14218fff88660c5b90c0b20ce71aca555f780033471ce68ce74cd3cac20d619f14c25c3e0e910c94376469123c0349241d17467afa87d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    62ab7b42f33c288b8d582f8a08c3ca97

    SHA1

    52c920d7fb84f1b96a4a874281a96e75c0b4fa27

    SHA256

    c61a025a3fdff95cc9563c2e625d99e2f7e61085d41ce7b43b933dca0dbbd2e1

    SHA512

    91b11d150c4ac0e35503a4936d80ecc97e3a47eb7cd3e7f9ef21988ae6ae3eefb0825fbba10b4aea33a278ab47cb388306f5f8203854567f910ad75db2c3aacb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2f0338097bb9abe4a3a0d4a3cd0e9ca

    SHA1

    40694aa68d91b2968ad9ea28ee443f464c4e185d

    SHA256

    3c4abef694dcce17d8e53c8b67572276c25d42613068735d9f38a3c51ccabc76

    SHA512

    6a6d77530de2c4c9bd84b5e3a1cb20f85d6d7d1169d37934e0091d65ce9f24f0a044bf36eaf311a66bb791eef283525bc45d25048daa37c8fac96c0f00dc84e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    10e97f2b6341cd80c548c9e8b594c642

    SHA1

    ac04bb9509b3a175b0c2ff09b40579eec0ce0f2d

    SHA256

    1e6a5a8939b7d4ca5851607c0e63940a626ed3e613aa21c3e74ae1c77c674c60

    SHA512

    737e1f29071ac80f4c8f3b5414d5fa8da1c947b45649cf595c3676eb08ae35399cb21c860a8fa22e13e78c34c7dc2fea05dfba43d42524981439e8724c1ec8aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05e15b47452cbab9e993217c3e89f8dc

    SHA1

    e6179b1b85ea3f6b8373c617317c7b9168f38d1c

    SHA256

    9e9a4959bdad790c127d044ab063b994cb350d3be7936da012d613c2cd5825b5

    SHA512

    c6c949f4c71e2b5f061cd55a64c124141c18acdb82e9ffd9bdafcc7560d81b8c6cc0a7ae56fdc14de034200a428dabd1a868a74848a38fe909a8b8c0adfc231a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e60d70f7f55992992c241136560eac56

    SHA1

    88e74f5b70830ff9f9eae73ad2ff7b4abeb8315f

    SHA256

    9767bfbcd9ad880d2ce2cc968ccc29809eaa7a0ff3d9fd5afa391f327f8ca603

    SHA512

    0a9a5b83166f816b1aea46a54298236dbd488d8e8a2704573d9ade80cc3dfcb0c7030ebf162574442b9e175d355e5f568882c8325c072f856c682533373f2180

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    801104af3fb8f5506b9f9c498adde3bd

    SHA1

    b8020d74e2dcfe210f9b5ca18a4f8249964e81fc

    SHA256

    9a923e6d5d0a387ed9c2ad2e64e23ba1d36416aa0a7c744816d57c91c9cf2274

    SHA512

    dfae3ac73ea7153abc719a408927872c112be0076ddd61e13955261e25882fe4b04a614c3adf5d36d4cb8676ce630e18ce7fc9ae32807fef4e87787b015a9b33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19ab62adc82a6c7b71986af94994c5d7

    SHA1

    efd0674588dbd03f81ba4951c4bea3eb7f19e8db

    SHA256

    f415eb29ade88c762c0349c325177a9d6fda2bd63a0134790a2ae055aea046a7

    SHA512

    42b294ec3eed2761eee3496d26387e58a6d3ca5933ced472f4df323735bd11badba97f6ff588af872e1a5f210f596d84250953a96d5a158d285d9a5391dc4f4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0680a0fb4b54980dc422699ca2583932

    SHA1

    fa3f5d1628fe5664db167a15c092d69a94d22fc1

    SHA256

    e8620a125301ee4c02523d2c4a5574d5fb496c7491fd3aed5b015ba52ca03306

    SHA512

    d0ad641286e266a0061aac1d81531da009ca54a893cc56ed7b8758adc031bf4560534f0240c1049d2c5b27bca733af9328808d888def6ed8c324c0e0e68b4992

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e1c4279fe0ad28cf81936fad5eaf645

    SHA1

    3f2aaceb949ea701814844959ea0cfed247a0957

    SHA256

    b4686f41b8ec8072bc9611fd35b02bc97d831d579afa3e113c7b7a6898b7336c

    SHA512

    4ccbfdb692932857709d6e182fbe7cdae81cdb458eb2453fc4b0023ff9e21e89438ea8981f2dd4b378b923f245b3632bb6e978996710ab5c2926b8ddc0321de9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    83b45373dfedd4fe1a0d4b1a6e6ffdc4

    SHA1

    3d683c2496839064b6fa3ff9ff4a8db25a1b483b

    SHA256

    623562110dd6a70099ba955fb8583e1b723fc3075367ec53e035bf87bb1a0182

    SHA512

    09270edba18a16d653c1fff1c9902fb075058b30114842df6407a39ae801c563bf4459055ae624d6a98fc950759c77ba57970d3d462ded6f8cb4b592a0915f1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b48768939ee843382836bfc3436d899

    SHA1

    ccedae98940650972c90c2911279d2efe8ac3de7

    SHA256

    6bd6cc2e638b6c82de8abbe948ba2a716484dad3f729ac1dd63998f934acd9fd

    SHA512

    42e8da6f6c8cc6fa0fba06804d6200c75498880f52b52f631e08a5024a4c3ec3da7db43d3ac6d54207e5364f588b121065e5c2b95d4ab0f2814b2cd8920a7ee3

  • C:\Users\Admin\AppData\Local\Temp\Cab27BE.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab28AA.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar28BF.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b