Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/06/2024, 22:03

General

  • Target

    17b0c493e1a729d50f5ac05296f6a980_JaffaCakes118.html

  • Size

    7KB

  • MD5

    17b0c493e1a729d50f5ac05296f6a980

  • SHA1

    16d389d06d58c7d3edd03fbb47309468ecf69879

  • SHA256

    a425a4778d1cbc387df11d37a7c54e77f247cdf5d06e6a0de3a690cf0737074a

  • SHA512

    eb2629bae1d81adfbca2aa7949c2da89fc03019b7d6c9b82d4e45fbbc3a90cb6a179fdcbee6b239fc4dd3b26b79b002b13e29d87678ba48f814d86c74dca89c4

  • SSDEEP

    192:fBdGgN1aizAZajGe7gaHePep/e9aO4uGpxWWEh150PS4hWlQaWR:fBdNEibI0uGpT8150PhwcR

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\17b0c493e1a729d50f5ac05296f6a980_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1460
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1460 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:636

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    46f4d6fefa6acb5fb35db9a65884f187

    SHA1

    81f0aaeba31feb6439c014dc624ae61a8c53828b

    SHA256

    e8152a8cb63cfc1aa01869043f5a47086d46b8cdfe44f80471ec4ea2ed7ce219

    SHA512

    11738d6e83b18cdc594ad12ea50a57cac854aab2174ab9940a05270719ca8f047822f2d817ceba7ab46c9e23001e1ee086c60fc4cc5f16ef1b8b67271948b985

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c0ce91fe756117559046b235e3f536f

    SHA1

    1b1a6a6f597f6f1db1aad0f3ddb60af30ed63f50

    SHA256

    76d93b91374904847d5fb2708ee332542019284fbc210e6c398a7bb8e786d87b

    SHA512

    de93aefae6914708a50fbdf41439d79304bdfcae367d65f920fcbf2d9fe6059084aad0a956bee551973dd23789ccfca1c0251f64b899b75f6d416136cee56a6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ccff9a90f686e928b553e1a3ae91f399

    SHA1

    339bb739da3d2cbc55a39800ef759c6e0ded45ec

    SHA256

    42764a96d604809be15f1750c0d693bd9616b54d77ba1fffef758c625b38749d

    SHA512

    157cdd1be2037909f1d9c9a1518be70083a5c724be60a74bed0ba1ee8fde3af925125d7a029cc1faa276b0e90114b2081456f606946d4dacc5a649cd863684eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3d3b86a31180a84c5eea360a78a3252

    SHA1

    4435313d5a5a7a4fed62df400d19c9ad84fcd3eb

    SHA256

    fffe1d36a7635c7621010e075b5133b9b9fa72dde7dfb30ab7da453e868d49e1

    SHA512

    8a964b5eba3e5505dfac5eb1be7d0d07fa3543bcc67a662bedfd47db0e68adbecb64ae5cecd44cf3782a0904c41162f977384631e6ce0c64656caf9c323cd9be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49e59dda8814eb73751ce3d4282e043d

    SHA1

    bcc87f1885bbeb2e3ca55e2b02159df9cf4e1481

    SHA256

    0dfadeaefe6ad527541d8a795e44109db0a10559e47621edb417f875eab97c14

    SHA512

    6a280ce47aa614da6f43b40d735f11a3905a4914543a5ca2a4db153a32550166239e2e0527571faecf8f292b694054001f05d227a75e7019065d96b4f3d8b0cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    01739998fa67d0f77a94a1ffa4373cbb

    SHA1

    8394c98d322144da85081d897085806fd26d5b8f

    SHA256

    2e2c85bc95c7c5864bd33999de85ce1c4558a440265df0735bb47f599e317be6

    SHA512

    faef40e66596a87d53303ac8b1c274faa7e45156594a597f53839002f530ee767b9da0fb1ce09799fef35da30c99c78d3e90a773f871518cec6ec7ada158fb23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    04f184cff4bdd58150e4072a82722398

    SHA1

    a9721f35982720bb6a0bb93ea358a8eb3f497e60

    SHA256

    99f1b2baa9581e202b9859288cde0c3f070aeb52849f5609e0fe9a3be998d119

    SHA512

    1b54f90d6efcb4cb8702446b5aca927a67d8f011d83533cf5785fc307849e23ec706fdc443272c105553983e6f7cc3547a81552d435b2d305df84e13a3f22d62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c295f86723499eda2e839df523aa192

    SHA1

    8f482a6a28c0a243146d459fce7abec2d0512ac9

    SHA256

    2843be53ad4bc640ad744030b3abf74ec32d71c5d458ed0e0c5e799bc060d958

    SHA512

    352a6f94052102c2e13963c305d3b56c9260d777936c1f2eb837278ad4c9a8c769a78b8775f160dca14c41e56ab73e5df54b452c14a161acbb2860b702a700dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    275f28a3d6a6e7dd2c5d89d4f565195d

    SHA1

    2caf888fc3927beb0ebe21cb4a139052cca613ba

    SHA256

    a5d494794aa5865ecac561ad07e1c53ae927457d49388a15d871aeb13e8e7b76

    SHA512

    bebc293f14c61f73df0995a3f7a2af8fed8e4f678b8bd5319e64aa9043a9a9100096150440895d21cdbcaff1bc76dab7f9c1a04027ff7ce6e7f9c2d723a49328

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc207e10b67de862a70424691c1d5d45

    SHA1

    2808935492c612401a866169023afe208a78d725

    SHA256

    9b2f90a6f94ab632242d7a2fa460b0fafd82a7f9e3cb6c1d3efbbd52cc8fd64a

    SHA512

    8fabf2cbd3041e5b22079ef56ce9872bb8bdce8ad35f44732e277e167512c898a7a5fcc98bc6a9fa65e26e8cfabd4a155f741073b01aa004d17cd8b97849ce3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c001fcbfa2e3cf549934953478288556

    SHA1

    af7a6b96533459be1657645438fb0508f3b33e47

    SHA256

    02e4d255236e522072fcc975acb2c87f89467edfbe91d6aaad3a7e3bf8f88ee2

    SHA512

    486b275254d81ee22688b0c02a14e7ec0a1a43da0168adaea3247def2561f27d78715cf53ac60885f53ccfc02339aa8ae7830559aed41d4aec7eafe48e1bb9b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cbb6373dde7fb61d0003eaff80b467df

    SHA1

    3e1394a8e4917c1fb1d13ef878db8233b373eadc

    SHA256

    3839cb4a4fc6e27795102efaea774a32b5c61096c5e4ede48c897345b91d8018

    SHA512

    bb18e3e9476bb72b0dc79dc81b56b08102a30c0b2828735c71f179637dd9aa634bb6dd1093b451f90aee4917df543ee8b4e2eeb2648c8d36cd8139832f0e0146

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    843733e134297ce568d9e5c586e58fd4

    SHA1

    7ff776c9148cec838230144edad0ac6b8d2f47de

    SHA256

    6d627af47485e95af868eab32c67897a8bd8ed7b136740fc737000990c008665

    SHA512

    2757d8304e37655b43686e7f09461febc51360879105f961e249135ba43c10cf7da8aee37c2a1ea42db9e2f03569301d8b4c8f564a1c298dca73429030b76109

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4b81e6aa49f5d57d306ca5e835ce0dd

    SHA1

    7e6268ce769cf2ed760bee2a7938ef29a6c1f302

    SHA256

    519419b29c5779c476f9d592fa5c79b049492f3a3e30fc314ff23050db7dc204

    SHA512

    dc2e9a2b2257afadd40f9e04c8380e4860af83772c4765cad40d90c8d97d0c1a847c29b19e3d200461381bd38ddec27f7dd7bdb99b590a63d16f7fa05bdae260

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f2dc0a7f651e720c5b1d24fd2a63758

    SHA1

    c308a48b3e8d44f8bbefec601e7aac5a40d7cc6f

    SHA256

    465ee39dc23027f77506779d1fc777b7ef19b9eb91251a9df961b47e89b03d19

    SHA512

    4bfdb92fb5a9a2bd71a338e54b8ea053a78526b663ba5ec563f6188527757df87550d5558da1b1cf5ce9cfc9ee9cb74ffe5301e44d3558fa85a52be50b29e3d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0c7a53cb4dbb2f5d05b831b8b0b023f6

    SHA1

    f0517a53aaa51aabec0a4a7429b0560182b28d26

    SHA256

    eefa782f8a65732e48b3391e3858e3ddee47307ae7aab38d0c7ce2004c74a8a5

    SHA512

    e45b99c08a148e50c367f723f8011f3a0c21ed72715096b63d49cc0c0feaf00657ab4517177c3b0b1304cda114fe68194b38f860092760b0ea61d59e80abeef7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b2f46a5280119b3b0ed92e62c75c7ff

    SHA1

    a99ff0a773d72474d886b5f84cf40eb0c566506e

    SHA256

    aa6870e8f34c0b920329424187004a34235de4c6e2389ba9179d6a0cb8d42845

    SHA512

    ed0beeed3f49e2f2db0930da07bc0b44a9f72417107e573df4bd55a195ac25e7b4cce21061e268d93f351f3041afe6087d3fd2d2e76021eef3c227dd7f7520a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b24920c8c903ab0e1eaebc38a894a49d

    SHA1

    f631295ade73c8ee33e184e091c32fa92703bd67

    SHA256

    3e932b00634f486e5c9813ea56a0ca081cf346bc3a62e0b3d0cee6446db54112

    SHA512

    45bc7f8053c61148cba203fe56e0cf4c0b64cfc35ea3b7ed1a5665db17a2710b92ddba8ad9fc1d8d20ca6a73928c8a0ddf22c2dc32f2db54360374b253a25023

  • C:\Users\Admin\AppData\Local\Temp\Cab4119.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab41F5.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar420A.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b