Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 11:03

General

  • Target

    b32be30177886959e24d512d08a4344d_JaffaCakes118.html

  • Size

    218KB

  • MD5

    b32be30177886959e24d512d08a4344d

  • SHA1

    aebc7afd215b7f1a6a923c46a1b15314c1557b0a

  • SHA256

    e87686a9084d3059cf1cbe3288e89396d2b34e835b50a778e1e858f5313538cb

  • SHA512

    982fc0a870302351b823988753b8f6625f5da69a6897dbd0c989f27d727ea84ae807c1f34ee7c735d5f0b77ec193d37ca77a854fb509497df785c188c740a82d

  • SSDEEP

    3072:SvxbLnE1nIP8G+F+yfkMY+BES09JXAnyrZalI+YQ:SvNLkng+FbsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b32be30177886959e24d512d08a4344d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:996
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:996 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2532

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d660bf1f73e709c4acbd4a040ecf068

    SHA1

    cf27ac76f697e1a472d7dad684d69f90448488e4

    SHA256

    5cb11b4e77ebe71d71fce4be33ef68debefa83aac5614893be1622eefa55a44f

    SHA512

    7bf9fea103edab3c1fd5eb9c992ae1fadf47fafddcd4d6a6b4b08c9959ede64b8eac194a8c52e92a9c44fa0c47868ae80c28cc142dcce88c96d07362c25fc54d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78297c7cf2211f265d67f13f837d720d

    SHA1

    91a603bb0b2a35fef9074804c6b6985b599322f8

    SHA256

    8d6fe1825dc766f7068f20334d23493656c5d6181f0b25a126718dce01f59320

    SHA512

    353273380cffdc595e07e3da05d93c5a5b1d037fb0dec652cfdde7f2952d5520d1330c0ef66cfa0ab179c9ce5ea1eaea61bb0146af6919415350f24af64c0855

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9781741081157cfdc2c9fa3be5adf4b4

    SHA1

    f6af8613c696e428a1c03a40a62928b9afc7fb20

    SHA256

    c8a8a3848274fab03cb170c014782e35965fa420f3c5b62a19a80bd1e057c509

    SHA512

    7493c4b7a7217061665aa604b3f8338ae5f036a759c22ce1859968c6643fdb93428dc8cf8854ec60cae2a94c8fedbcdc660ad4fb30198cf1635ea013896e6d16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43741a7f4a53698f001ff8dbc189a58d

    SHA1

    2ec18bfbeb6bc250011776d27c17f922be7dde3d

    SHA256

    a4cc77bf5d317194aa63c762b7cbd52ed3deca9625b3d2c905e79ecca0a74e81

    SHA512

    208bed59f5d65893f09213acdae06f6d2218cd73390674c9b5b1d937a07934f3622f5cc2b180fbe639d9bf410e54a4e6d81a85e098b883b057cef1d3298fe43b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44d7ea56eefbf974030be1eaf69ed7fb

    SHA1

    8438770b6e47a90c70df2d5e5389a281c0cd1cf1

    SHA256

    515eb14d9190be3ce03099d6fa9c25b7e19e4fa29611d33923b7201618acfd97

    SHA512

    96e457b18f3da6c32554f4536c525a2062dd4265c35288b6322dc997738b4a8f16786c4604892f4e05ff884df52ae57fb1f3048d904bcd859f64178c954cafd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11f0c9d451ca80842cea02703915a2f5

    SHA1

    0ee487d7f975a6e76d5f52019be633731a27c8ab

    SHA256

    85ffcdec6d2f44dae60f7a816602c6e1cc898ff143c19934dbc3f5ba73122814

    SHA512

    ef3bb9355bba8181b1d155971efce8c30526a4871b35befafc8d7b5ae79ef239aaf012ccd7fafe7b6f83f2035135a5656c2b5ae56edc4a53b9c9a9fb273861d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c83c49ba222b8344e5dd548d2f3c9bc

    SHA1

    624f776ca61501462476122529d4346a2a35fd78

    SHA256

    748ba32e5448f1b280a89c309b7ce0064eb53f9dd9c8d5e81e397fa0153ef2f8

    SHA512

    aea4635ae3f00236176d27aff54b9db944d81a4c6c29172401c6ac1890ba92825b5f8401c4792ba8245aa6da4e9661d05531d4c159a409d01988b04a96a9cfcb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f15f35b899c9be44f514a221ba4e7a0a

    SHA1

    8fbfb8e5bdd460e42e48b8bafc17f4db3e60bad9

    SHA256

    2c2d75b93f225d74e671584881681197f0b7b6ce16f9c9c3aaaa195b38ed46e8

    SHA512

    f517bfecb87729974c6b5df69a09cf5753852a7bbca57952d1aa741edb2ee4bc5f9d24d03cebf356a608201d3b1107e8de04e0703fb73acf799911b03be9476b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd9a18d1ff014d14f794657016ff4e12

    SHA1

    14518184c8c9d1214f1d46f2cd37b86459def95c

    SHA256

    8b0584648f81767478b12733aba1fcd76317a6ecd28e6425e8ce9f40d7718be3

    SHA512

    315ef0bb4289d8746784f34cb54cfd4aecf3b3e26b5f31289733b0f4be95783c306459420b90ae3dccdea71aca638bf5b3e67caeec17c161e04300e109dce9ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7699985e9acdef1790b90c7658d5f700

    SHA1

    8d58c4c68209fd62e9e447fa54e9ab3c8164a921

    SHA256

    24ac5a6d1524cca172b32f5f28a643b490f15b787b96355f2df6b0e9c04ad138

    SHA512

    7b637f51bf7a20ed34049e71e93e30f65ec8d34dda2c97f1301a498f62236c09a5006608a7277a835c9d1c6143bc95f7f5bc6389b93155310baf922f271773ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c5c5e9e5b47a90270ff61ee30040c87

    SHA1

    45622f49ea0d600f34e1f1e563c637dfd1900ee6

    SHA256

    e06d95296625ccdd0d56dc5b769a02481c8a0c6b0b02dd71c2829a3c5247364b

    SHA512

    17b9ed018f08d5320a7f1fdd261b90fa5576a03c17f66ff25576f3e100263d64c6fe5b38aa79601979722dca9ba7bffd1e4cb916fe783f73fc80fa9318e9a05d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a016173d278ca039553dcafd061d0aad

    SHA1

    b2162f0fbb0696277f9b8c3d27f6ed677b0d8163

    SHA256

    7850c2581cd820bf82bb5e538ca54e7e0b80ea79371309a4cb4d9b1a32ccbb09

    SHA512

    24ba25e612607361dd584299bfa2ec33bcc5dab6c0c25aaf474c5d52a69c1eb70d9594ee14785befb12e312821049a228a5088f2f53ee94672a8960d422e3f73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ea311e344ef2b8ae114dcd1f4878e7f

    SHA1

    7c377de0a4af8ac6dcab01cbefec0f854168f6f6

    SHA256

    9580511175e5ceaa2a9d38dbca22dc44cad01ad964666fd3479773cd69a662b0

    SHA512

    074da0b36d96dc12ba2058cf151081ff007cffc478abe73311173e961c9c0a6a4ee695acb85d5019f5812076da1f29b16b4cabfbc9d0c7ca8bd346e146c32abb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6cb6174ed3b49b343c6f452538bb77ce

    SHA1

    ad100ab00fec3cfbce792ad21ffc831ee50645d2

    SHA256

    d893d1ffda3a568967ac12937258110dccc89599b8cc9836d765f1df6a1a6208

    SHA512

    5cf6ef425340ca300be2198f4b41945296b97f68979d3611a4fe189305181fcceaf095057c93931aad1c31fe4a0ad34b4ea2f1d409af4344dd75dadda9dca1a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a806d2771e1235f98e46a8eba79d89e8

    SHA1

    b804d1363f9e0e07b9e51c9b7d406ac016e2e221

    SHA256

    f183a3bf5d0dc3870786a6a4ca181f97360656a7a81d69d7a9439ac4799af925

    SHA512

    1054a6a2f00f31ba72a7b4f6021b441f3cdba3377a1e03110a4afd082b890513e1c5ab2c6b1e42bd515eac4b455fc0f3236fcb0c3102b3c9fa075bd433ba8979

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ceec2129d95539228513284aa332534

    SHA1

    de85efa15544806afed05e7c56a7fdec53402903

    SHA256

    da4b6044d8a6ecacf8a47324d60b071d95604ce7765ef1aff8ff982a8aa465f3

    SHA512

    25208e871739647836c47260b7a8a5396d2c0dce2feaeb046338f8c3d1241b9b3aa5a71a162629401d6b4fe360169531ad8812f74e706abbd773e050a07ab54c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2d1cc85536ade35f2c89a28df1cee51a

    SHA1

    ffe54aa28d2a95c02046f8d023e667e8eb618cf5

    SHA256

    4926ac9b28a2b85623569e4b11bcb3123a59e70e32bf76079ee82de6094784a6

    SHA512

    31bd38a44a16f6bfa7b76c40143a1924f6998eb26b1bd0a57cab7e0f50403e37f5b5531b2096024299402a2f5fdce74a7a2d47a62254b1350cc3068027a04473

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a45d6dc3ce855ef2883863f597cc9b7

    SHA1

    a3c8a748c0934f80ecae39251b116ccb74e843a8

    SHA256

    db23151045ad0e6c56ec755bfd78335b406a89ea72b2bba935af8646f080dc9d

    SHA512

    079d921dc3aa10fc26478a5f7a4e082228c7ac9da91b85c6e4404363d351a2ff14d670c1f6a1223e3e4e50eecaaca4b239684a18235872c49a4a0d764faef26b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35430468f8e9868548e3f2c772cda9c4

    SHA1

    485dcc711e0b00f3931439660918a874c3d19cfa

    SHA256

    8d15c6940df92132bc65600b2091cabe97c918783c36d7dccbd4f8b97043268f

    SHA512

    b3dc31c32c4585d3add980898e1661b5f799ff47d632e7681440eaef0e54ffc4e0a9c2df7d8375a98744b710052916c68fd9c845e13459ab3e92bf381384f1d8

  • C:\Users\Admin\AppData\Local\Temp\Cab29C0.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2AB2.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b