Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 05:15

General

  • Target

    b1e0cbcdb2b714b2fc1da29ccfde1b1f_JaffaCakes118.html

  • Size

    460KB

  • MD5

    b1e0cbcdb2b714b2fc1da29ccfde1b1f

  • SHA1

    fe0b5ad9dd39129828d60773d4ca90ce3c6ff430

  • SHA256

    e012bdbcb6b1747cce21ac29c8feef891dca46d31a95313320cc39f3ea720c1e

  • SHA512

    4ae026f77fda4e50c958d957cc085382e8701b93b502bb18d075318ca120a5592c931bb4e3d5cf9d70dd117f3abd4b64f32df58153f82ac3daff6e34d22302b5

  • SSDEEP

    6144:S6sMYod+X3oI+YVpsMYod+X3oI+YNsMYod+X3oI+YLsMYod+X3oI+YQ:F5d+X3715d+X3j5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b1e0cbcdb2b714b2fc1da29ccfde1b1f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2204
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2204 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1700

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    91a5309b2fb9d10c91a9bcf829074938

    SHA1

    383ace4e7d0812dd63742e385807999687c82d33

    SHA256

    032be693ba804303641f25b0da2b8b7a3ef5984a839565518a01eacbc715862c

    SHA512

    dadbc4d7d44adda87ab7c9c25dd58f29dcb3f217c3061865bc9709f5ba10be1e68ced2d1ce20c4e585b77bfc992315ec83702b43182473d3d72be2db2b54246c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    acfa21adee5d88546d9557a17e6a28be

    SHA1

    93ac15267c8398a2bf76e203a215ac23ed2cfd44

    SHA256

    6a37a61c8030fb7d3b4ee3ff164f66c958ec1e13407b65ef201259742acab3ef

    SHA512

    f5ae71af73ddcd8d031b5b261f91f1652b53d1c98ea719d10c63d517587c5ef26d58c57d1ac47bd7bbbc7a65eaabcf0638a1c71a97fae6ea660afac9d6ec6ca3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    999aaab66664c2febbe10a11c5dc27af

    SHA1

    4e66803cb36f0d185a7c37d6579b13c294342b09

    SHA256

    2bd046866bea1315f4d2e55b66495ebf9496f08c2e982e65a7720aa5f8b3433c

    SHA512

    b32ffa31d957ba746efe9185f43fef8b7bbd55eb70a90446e019fd2e8e53eb2d4e59757e98e16c748f7bcca90c178c9c63e9cca0b533cd9b1abd296779ffad6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06f9e4551320ae98bb8f5c8bd828bce3

    SHA1

    5a9a2c7647fbe11eeee73bf680d22541e78bfa87

    SHA256

    9f46428a8f52c958383c3d999586b7751174dd500247c1a541c2f402579f5371

    SHA512

    f899b929b10d0ab9217958af31a7baf957e4fbda567e11b8fb42365ed4d49a68963d306af6687ee5276b89702409895bbcd3d163c2b494d6748f542d88cf0a50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a34d19c4037dbc39f02c2005586776e2

    SHA1

    46f7e6a9c0fa982ca5bdf11552cd6f4be79c45f4

    SHA256

    4775fe61e81c327c498e2c6ba543f578e417f16a2bb4153d94e9310d8bf03adf

    SHA512

    5d2bb8f4d2586d9bf34aa4e7d6640b8d5acaab2bf23d17aea07845143cad98b133f864bcf7b8741eaaaea7b948ce8f349f77e577f7308d920fdcef5c717cbc38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f8aeb51cda2d821955ef331a794d9cf

    SHA1

    6bd367b9e492c3e23e4c51631390f04e57d6887c

    SHA256

    e4475691e01c6503854b47ba51cef14353e201aef4943d2734a72a351e0a0995

    SHA512

    b7f01bebcf19e144f2e394f09fe5ddcf39a066091f511a5d90cfd532f34db0c29ad1acee73c6ff893b581c6cd3dc426e1db945156616ba3bed0f5699e9f76708

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75137898df2883971d7d7bd20d373f8b

    SHA1

    507003f7610d41632c26a6f6d1c4789bf74b9761

    SHA256

    f54bb92112a9592c62b8a5877d9dae123c8d67b4f4f8ea1398369705787c6a82

    SHA512

    1fa79a4ff6369d2d232a10b21caf2f6b123ac65570215feb6bde6d6594c3269b8ec6d817925d26d1042f73463bd5d31498f21569f7d8fdca3fd82a1ac3acd23a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    157c0f27eba30de33c54fc0dd4d75596

    SHA1

    e6b855f491e643f4af915e146fa3e5a43fa97913

    SHA256

    32bff1ea9e535a62d66d2134858e8c2604503a3b72d889e36a2d47a172c74310

    SHA512

    24ffbae038071e5dd6b98ca63050bd0604f4b3b7027728add0745c70ccb0f61fcc3ef4a98ceddd9ecb8d85641fcd6262d272f8fd09f6a47a0551bba81d93b70c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd33d83a8ba2d88aaa41c731ea5d2ad4

    SHA1

    1869d31663dd089e062a233d50fe69c88927abd8

    SHA256

    4d2b298f6355ef8eec0fb6e659704502ed33f6e345d1ef738e8e73f2ac156daa

    SHA512

    94b99bc8e4db4cc9c2551ca081a25b4e9fca68ff348298643918d245b0b33baaaa14ea79b7de47249863de514273d5004b61ff966d9d2b25264dc690887eb724

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a648ad69da0e191a6ad38c64b84ce90f

    SHA1

    0734ecd6966ad65683f7d955a42b8ad1c0c6449c

    SHA256

    ae0cd5e67760d2a80c9fa3b87f90dd1f6f5a083617085ee9b5f012bacbcca7a1

    SHA512

    8ae5322b444da9873d37da4f160389d7020f01a29d1f9c1c8484d21e87140a6ac5451f23d02620e4f73e18e6c32f18c5a2fed00591c8aed833c7be5840ca5b9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce2dddd990bd485dc011f6fc4a3b8625

    SHA1

    d9a7c360709195e4c6be6aaecee5c696cfff73b0

    SHA256

    d34850c1533d84a406054971861760fc6dc10d6ecf2dc760973a6ecf21ac5779

    SHA512

    dff934519b3952b34179bb816626e771e6820297a1957ea1ba77bd7e299d20c953bd9a1875f94889c6e33b30db026b8618304809ed3f4bf6ca4451aebe966020

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d91dedf3594d652b1097f74d3402d73

    SHA1

    1192d567d63e8c41eb9b434d91b3c7ad951f0fb1

    SHA256

    af4755a785b5fd69927ff8be4dd58ef4c00040dd1b862c8d39abe9f4a203e3eb

    SHA512

    a832f70bb45eab86d7c801a10fb4daea1244dfac25059ef62c47f080741f7885fd71867650157c82abbbc26d397f45933d83a10dfd1c4cd08b83b21a9e9ccc47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0083f8e81ec0ca011790b1f724ea084c

    SHA1

    8ebd25cc6d4573d3a94977ccf840fab65e122f6d

    SHA256

    e49e01007c0b3143afab7c26ad74f888a9eb14fad6aa3a83a303719d799f584b

    SHA512

    c4faa60fc1472ffe4ecc26c49f9071a1e351f94554834eae4cd15cc5b6c4c01ccb993268fcb760a0b576c23bd44afc3b29929f0472ea45ce501688f3ee8ef9fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b5530b837f6b9d46348c6c4f17a351f

    SHA1

    55b46e1fa1121ed078e84fad1c68648747c706c0

    SHA256

    a88ffcd669235320ea5db183457c0eedbdc2c70f35f8a9dad46d29a166fdd6b1

    SHA512

    1adc9206e510ffbd769b313520b1f1fc4061978cbf7dbbe4ab3bfbe022988401827f967c9d9076f4e1d736ce199b11279a2fa4ff54d561fb287c77ce4000442d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2328cf8c9ded1ba71dfd95f85b766a6e

    SHA1

    8e9db45c7e62da370721f1ffed67a056b61d8a3d

    SHA256

    dee2dce0216b3bf9ddbaee3ee917352d9e2252a92f1c43970ca50acdfafbaa0c

    SHA512

    2f59356c6ec1261278f42cb468d6999d046d4107cdece9caf6fef9782f78f8965591db6a753c87a9b369f1ea602f895c2c72ead830128d8c928cc67095e28fd2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ee65b723d5fadc054d878a396d3a524

    SHA1

    a4cf90037cd6deec1fc14336b11fbe9946f8d91c

    SHA256

    5109f8e6c72e83791dbc06177c51fee6d6d672223728cb59ad6a7e3592ab0219

    SHA512

    d5938cbbbfada7ba2a373f4b07d451f6cb85d9f480f5894241819c51c66aa0919207dd344f6bf8f5ee950f3ac2bbfbd70f36685bf5092e21fb3778a37681c121

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be67885cf94cece703fee05002be84ae

    SHA1

    8a91cb92728e51de2eb9ea83cef4fe28904cbb8e

    SHA256

    598b124e8cc6938b469b5d21b137da92ac0e7f0c388a0380649d3079a89b3e6a

    SHA512

    d287bb874feb8ed8beb0550e96101bf6811585d035a66c529458c0557710f17d7d8be93591f86c4d663c46586b1222c7af863c09127c5ac1985b44cf71948373

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f57cd5b8c78908a97048e1c44fbba727

    SHA1

    ecd4bf151944c529887297df9fc705f9e0d41360

    SHA256

    70bad11055101405bbea409cc1d328dc0be8f96d4059a8854a317411e8c6ef5c

    SHA512

    5a313e6eae784237d9184dcf8616a12a32710e0f6d00893111e2c5ee054c707203f5a7d0f765180965861a87e98378a83692507a3113951b1e2b7a349f7a01fd

  • C:\Users\Admin\AppData\Local\Temp\Cab4AC9.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab4BA5.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar4BCA.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b