Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 15:10

General

  • Target

    b4287aaca2d694e219cbc5c1f4571f06_JaffaCakes118.html

  • Size

    68KB

  • MD5

    b4287aaca2d694e219cbc5c1f4571f06

  • SHA1

    d7b248570f571af3b1d57e00e2a2eb54532d850d

  • SHA256

    450f84bdf178decbf8b22fab4e3f3dc82b879bbec912c9cc358668f87ec309d5

  • SHA512

    ba036e0e67e4b304585a1edb67c7fe99d312a8dffffd3eab81b3d22bcb300a373e6beb38cc7c68b26c7133298805922dcb3d49f1aa7b5572d5ae40a8edcc3be6

  • SSDEEP

    768:JiZgcMsSZ8tN99OIsqKak8LA8cNX2XKUrXv8PoT2fQCZkoTnMdtbBnfBgN8/oygd:J5WFTzuwT6Pec0tbrga6crNnz8PJ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b4287aaca2d694e219cbc5c1f4571f06_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2324
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2324 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1580

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    4c13816241485698242e710387c58844

    SHA1

    0fe46fe8879431665492c30525e35eb83c3afa5c

    SHA256

    39e32f49b0aeaa5772fb88ad1e626da1468a43ffa328ff0853b84151a6134939

    SHA512

    48880b5cca8e929be07d4fbb61f3b472f9505c5b8fbaa5771bce0b484423e7d75c29a65391710f451bdd4ca4707985afe06f56560fe3c7166aafa99552eb730d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d92eef2fa4a92a1c18fa794997b1c1a

    SHA1

    d993d854cf729039dd91050090c9f8ce2f53fa9f

    SHA256

    ccb7828abff71a51d3313060e2df43bb967a6b02d5a6fe6e2a849dc5c18e06cc

    SHA512

    227e0c665abdd78a62144762cb7d7c0bceef02948e1fb0d73fcd31dc5c51a1c129f62e336b33eb6791e23488ff6f3daff3efdb758520a1150c7d2a9661c3595f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6cb45edd696d76fc6e2a7586b983e6d6

    SHA1

    9876ff2f6b813b0a2986e04e62a83b7c1cca7db8

    SHA256

    a71395c4134635d59017db8bb18fc1a7e2c95dc8cdfc19fb34731a1a3fc933ca

    SHA512

    8009ac18b84d6ecfb7089fa0f1fe82066344ec5da07bb6a36cfa260edbecf595d4fb4a54f60bebc9f989c12dc6effb4792ac9861ce20856790d8eb55a37805b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f3d988a0a820b96b4b138eb2553a191d

    SHA1

    c277834ea4b30517a13b80bd7efd1f67f3d2fba3

    SHA256

    02538468a9092d316a1687e9d5975121a502f1cb37615258af96bcdfc2606370

    SHA512

    3ff0b63965aca8410e051ba55357f4bf3dfc53e47c3b32f09439fd4ea27e7ced8d5ecb69138364476ad510fea9652ee6e7ed805e3dd27460260e7503ede9f9fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    69440632acf26c5b60d6e9b1e87e2eec

    SHA1

    531d9f698dbac9dca63acb211db2d87cae0ebc2f

    SHA256

    104976ab8609f8a920bf3c969f418a6768404e0d63b02f2f6a638c72415ef2fb

    SHA512

    e442de381204fc8daf3cb3e23ada22a29896d5a8d3d46b3b67c321b3078320df7a3df01b65829eff0cc0b39b6afe5e4ba9be9a30cea3ef7c6af9bcdfe1a06339

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9bb6620140f6c3fa287e524db9d722b

    SHA1

    c7d5f08f945628cacecc20f2f43d414b00fd0cd8

    SHA256

    28f987a4caf5f92b4c631e184965d552446208810f0fd6411d44d50fd120dd53

    SHA512

    0b8eacba0be592a7373844b62a9c9a06a58f9009984814d5884b7132c3dca17f186d870a313a23f2877bcf1a39cc5f38e86ca1d2f5e06ed26d8c70a3b4186a8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98b6656c3103ddf7769b7dd7ed8a07a5

    SHA1

    00859073006773dd8033ccd0e443f2d212d3b519

    SHA256

    bbcb9224bc94f812a979543c9196a94ea73bf4d1adf6eb2f0e9d54ac80bc3a3c

    SHA512

    f88631ffcb2df74fa521932f51c7743a7612d7bffb9d77d3f2f6d9b15aae0402470ebcc970a1a286d59d6ca13ce6872f4ed8eca80219bda53b5e731b5fc95043

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea9c0e9fa89375c0b5d14745175070a5

    SHA1

    fcd1ec6d1e8cad209fac2145d4914780961022fa

    SHA256

    25a0b467ab868cf59c6be412e8ab1c6a18293350d53f86c08bf93f6030a43cda

    SHA512

    8dc09312d564a98051779244932bd820e801b1952eca891faac69e96dee830572af4242288b4244191fdd068f76d2a00f7b4d1d3d1a4bdcdeb0c80021d7be641

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80f37b5a95f48f6abc3b67ad352253c9

    SHA1

    51d3cd3d9961ae17d8d89c8de357bd7d5e225e0f

    SHA256

    5f5915d0d794f7f03a936eac4931fbe59767402f316e108043bb9bf0577e29ec

    SHA512

    9f20ffbcde2bd9f26430dd686aa68fa73acaf4288e961db3af660b35a7fb29a12ffbd4d68293fb5d4e813c62cf53f405bd521e5e6b7f9c5598604d2bd5578920

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    04bbbee4e057fd49d2394382ff6ed841

    SHA1

    720b8d2ff4f5ce7912d127020c5418403ec5851a

    SHA256

    99a63ff9f23b97529c52acca39155022c0b15bda70072c00cd9bafc2df0c481e

    SHA512

    cc7450b153a2bfe8eedd627d8d5d668b44d77a0a25a5678e2ba80656e36515fdfae3d86d48b767eefec6d3b1ede3e3097bd9b12e3e703d648f7056eadf774b61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0aa5b0650c14354c1237a48bd9305af7

    SHA1

    98d913d0d37ecbb9150a0eedeb2e1e5027a30021

    SHA256

    63531c2a263fbaed0e284facb92fa531d52304fc5ac8aa191c70f4c8bce79093

    SHA512

    85988b0a27fc59061efc125e23c7277a72a6da2d938c56baaa4a37270481d82d66c2f4fccd7e57739e056eeef83c079349d3fe4a7e42d21cc9cb4c01181aef5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    2c471b563f4cded642295cc230930a9b

    SHA1

    e00f37148b351789fda0c4a8d7de3d23e7eafbb9

    SHA256

    4c311bd57b7f20105ff5ea15e40798a1f3eadef118e3c53981d3383770ddaad6

    SHA512

    eff1a1e06a2a1848f8c84cbbb6c108d3307fd277dbebc71a9ad24ccbb2904c891056987e02cedaf88d8effd35b79a8dbe7b8d8958883d0e5f6defe6717957ed5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    9f40c1029cf57ac2325dcc282a37b857

    SHA1

    fee4f03fcd3de53af0a4f803217a43d462d9d0ff

    SHA256

    37148df97c93b66997223aca2b98c91871a363c11e9db0e6476aa61836905600

    SHA512

    f18e3f77070d13a01cda47f6cb11b01125a927c80920aa91e8791647de1320ad22b980bdbe30a60729ffe6a290ad29bbcf0a44ad2f011ee798e79264f4b8805e

  • C:\Users\Admin\AppData\Local\Temp\Cab954E.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarA864.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\TarAF8B.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b