Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    27/06/2024, 11:01

General

  • Target

    15c0fbd2bdcac418d28e764f6b9d9c82_JaffaCakes118.html

  • Size

    53KB

  • MD5

    15c0fbd2bdcac418d28e764f6b9d9c82

  • SHA1

    559164be778e67b4e9a7901d97b1e6e2921a15fe

  • SHA256

    448ec9b1f9324ac1341c870091b779baba6a748eb2fa320f3e19805c6f00acd4

  • SHA512

    b9e4afe8c818957d96da74b84610f42ab8ba8754c39f5004fc5bf3767466087452aeee9c7a1e725957a999609878446e1a5e82ddb96a44a8edf208102b051f12

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUkrunlYR63Nj+q5VyvR0w2AzTICbbRoK/t9M/dNwIUTDmD1:CkgUiIakTqGivi+PyUkrunlYR63Nj+qb

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\15c0fbd2bdcac418d28e764f6b9d9c82_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1960
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1960 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2980

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    8a452885385d9ca4866623fd4c6ad90b

    SHA1

    9a0084051c565bc6984f84e7b8a223d3bd090879

    SHA256

    406257b34a0a4831cfd9e030fe744a6f7801739ec0098b42e4ed06ccdd4fb656

    SHA512

    f6ee1fb00f2b5dd90c609eec7302158195c32355b50216068b69234265425a2f81b80f7b0de1375a4a8ba836f0d85bb2a14114dfe18f05f40a5aea909e0295e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9d134d772492a8fc6c0cc1dba789a4c9

    SHA1

    f5d1c219120e67099288cc96a8fb181806e78c7c

    SHA256

    ff8fb76c97dea615f62e182585508dcd24139c6ae7e1e974c584008341e00bfd

    SHA512

    6b6b6e20b015cbed1789dedc7f3cca14c012537151c9adeba4c19c4679e87084afbc31854931767948d6de57a335fb3ad97561fabaf6cb2e44646a47234a3900

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    838485acf0fcf4f78bd760ea29530d11

    SHA1

    5e848c0d93b1fbcb0a13f2afe96ad3195a903087

    SHA256

    c0e93782370d674d0c2efdb09d543ec37d84397776e72a25bcc3d1a83ce25eaf

    SHA512

    ea5dcc792de9d8b4470850e665ac5962516c59686d711c53a8e20dc1f9a2acaf585cc4092b25c74a8c59ec3607f51840d65acd0b8421c3163a0f298c00f2678c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d8001bc35c694eb3a471d7abf8d5fa3

    SHA1

    56b54c9c4094960cce9af46deafd3d5cc343a0bc

    SHA256

    18e5749a9b198a7c853786a083fc16f855e4fcaa1db10a7243bd1e883db57137

    SHA512

    88cc659663c463a7798ea87d443d19be1c0cee9cff0b0612c9b534d522bce62f612c0e2b51750a9493497eb9defd40f5463574e1bc176fb10db6a86c78c7bc7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    788c36171ad39b96fa1e8da3631f1f1f

    SHA1

    72a90908109e6c074e8c700b776148aedf814edd

    SHA256

    ba2ab30af7db1411c84f84f0612b0e7d8718665a727a437bdb251652b0df2c4d

    SHA512

    646e711330eaeb2098d21aeaad81fb94149667748b4d9c6913ee0d3c37e3deeb376d980a8ecf4023fa830b8c22525b1c2f6391234efa98b6a116882c703d8565

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c15b5ac6c9bcb6b0b249f3084782ff33

    SHA1

    7c0f3c02b8aef2cb2006b41fb6fdebcfabdd179b

    SHA256

    30e8d2482ca8c53f493686b8626842429e288eb24299937e03b479df696c7b1d

    SHA512

    869ee96a7ebf7809df956c6cd0abf5b1679350f662978f4e30ee48b13cbb4afd0cca3bf2b837c7dbb5177e3c9ace78ff91e439b00234b120fec89f166d0f0ce0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    014d23a7aa060033f73f942ac01c446c

    SHA1

    2de530e5815c2c259b2be14df1cb471d9aadeedb

    SHA256

    2605f229238f4df8d04990028a7e297b540a0487ecf2220ae94030abce9d9077

    SHA512

    6320406a40eca77380770ab26679673931db86b909d76323af17dfa700ce57ba898fc61652b3eedc73054b97731fce18d4e9a09cdc13d17b4178ea12e42ff9e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    82b480d33bf8c9cc8c5236bf7d6f0d6d

    SHA1

    5c7e3052f6402c936348f19bf1fc893f2321f073

    SHA256

    a7213fb4f01d62da9b4797f4b922ce99f562ee357964d3bddb4b08663e599210

    SHA512

    2e19818fcfb7e94bf6f7fea06df6661f63a1e98e067ca1323d3c0b24ef0bc78b0b84f14f3ba65336345192a943f02d767cba0313461a817bb6077d156d3f3c2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c383c584b7b2bb451c973ba8d7ba719d

    SHA1

    93309c971d65ce9fb27dee0204bc02fc3a816854

    SHA256

    839ffa76d7c0804d0e7edd7cbaed385a891e8d3e1a94c081cce43c83b9e3399e

    SHA512

    2cbd83e6b05af0977b8f2089914c8cdd1753935b6ee5128779bfb73e6c74ba7079e7a875af6378f12a3758cc8f0a0a4b862672e0615a4689b396e1f353a35f82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ea8d1d69e48fb441f9c2bdbcd731205

    SHA1

    7123b8685202778be0102b93e4d24fff0ce5781f

    SHA256

    69cde4de5b08c949ece90618e757b005ad52e8d9da61e0f558877e16c232b77f

    SHA512

    e7fbbe84bf3beea996f80a7fbfcb434ef7f6cc956b88bfb90456f128fd618392238faa416c107b7170929dadc60b4e2604578c04f20fdb48656a69ed3564b5ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    01f26de8cdbc6e0f5c6043582d2be8b2

    SHA1

    3408906e44a524820c72055aa866f69e737074d2

    SHA256

    ef003da7152dd0f42bb0421d2c83fad90fe536817adabda036083c8d13096420

    SHA512

    80e9746d9ddd9646cff16855b8baa2287f006e50a399298e0fa2eeb66f209cb7c19d78bb49794b9ae8b40ff189f4d76879d7c14135499d0293d8cbda057e2d33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4541a3a76d9ac3191939d1ebeabbc4fc

    SHA1

    667bcda5faa2ff4a5ea17433e879469020c07d28

    SHA256

    f498ca4f2994de6c61458cd96d40d1398cb34b3d24b9d6aa7a1395c239825339

    SHA512

    f7262263ef545286d56807c160965d55cd4db17da52a452b202745f6a8c9acc0a385163caafa8df052617fba8227db5f504974b242f17f3ddb93c929dd969f05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0173a054b36f9156a4125bbeb75f4ad2

    SHA1

    b12a2fd16c8291410fcb695b2760e1e8d344d047

    SHA256

    438e241411375fdc7cd1129530afb1f69165520a55fbaa7a65488d0cc60289b1

    SHA512

    1e4c785ce46b411a428beac8efa4563597119d79b18df158ef1a4c2de6f1135dc60b9efe401509efb94a9b6362c480e8909347a188b867e3db10984b23a63a2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    812575b782fa10e4ef00f1235f602aa1

    SHA1

    93e35f479acba3a8c23873d08dc6f4d182256e13

    SHA256

    212769e862800c74bdbc0aefbab92bc57532f3ff54fadda24ed12fcabf668a7e

    SHA512

    60216c3ef0b706efe0849d849b323c6d827d04770eee2d71cebb5e7a19590689353f544d9d2bc5349b7b7c5091b88579b4f8f07fb8689d9b66883337126d90bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac0189c0fac796efb7d4555a4ff494a1

    SHA1

    97f54c0d538ed5c9324c436808d284897df12749

    SHA256

    5be80110f299cf59ec8bb9c4478362ae6377764018fa426b9fd989f3f170cd06

    SHA512

    ab5231e871a52e21c01703f7767d40c320f8675be755b3de075377043735a1360e6e466f7978b640eca89a6cdc0cbe4e92a2791cda1fa7fb5ec94d0f6d1c400c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e47fec38042ad8097b396e7935c0a30b

    SHA1

    e212d54b153ade1f6ab35ecb2eaf7575351a0a93

    SHA256

    12f3e8de628925276eb90e15583f32bc9b01e0e54fb533fcf4121652968977ce

    SHA512

    cdd751bb333b6450145d984cf140e0683c2a7a8ef5b79abc34085ffb1f6261b09b5a76a1c0e683cd9de14daa8ccbe1b8234f06c5f375cbfa3bd6e914c3b6aae1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb6be54a89ec058f7421011fe34c289c

    SHA1

    644fdecbc4842578ee74234bfd144f0ba52d2b0d

    SHA256

    9311ff8177b14a3b6a782ea7c50fcad6a2d3a10425455c50176deecf600d001c

    SHA512

    c72a9b377f25b58795b6b267ba23d579dec84f08d65049b333ad735b2d133cbbb04a85fbe366b5556a9a1ad0ca741beb11dda897182398ceb8fddc8b73a2f54e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8880b3897aaf972a68728814f4314c0c

    SHA1

    e9bf8d1636a74bae92e9f41e5fed2602087b0be8

    SHA256

    b50f721a7d5b7f260c76feb59d6195d12012dc7163a6d5e28bb9bda27157ce2e

    SHA512

    917b7ac54d93f2e28df4f0ae83322c40681d5e1e835166987ce04e58040b8a44654b14e74c567195dc06238430f59b69114ed8d6ae8b09f35bf020bbad3ea803

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    851dc7df7c2cca24b5d8c07d5c6653ba

    SHA1

    25809af8293f92e80648e7676ffd71d3041b7cd0

    SHA256

    b7effa718de4efdc93c626775b82ad74531d022040128ed80aa963d8c7841e8e

    SHA512

    b486430e4434adfab7d0c6dcff8c91f84c868ce5d3a7ef771f9c67b14867e489705a4406b4e023de1db689c84b3389508579f59f53861a09491aab0da31dd72c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    e19ac89fac02558ce4b585eed0cf3966

    SHA1

    ff26f2acd44ae60e7acd346c4797dae9917f9ab9

    SHA256

    cc8d4df9b29eef12f13cea2046cbee6398e5050504c7a0cb9047281e833c2e6c

    SHA512

    de9742aea8a152337284f0d9a7f82b528b5b3555ec108d80e3ac666af012d4b77f4f77d515583ad48dd7cd16c3ce11232ceb43398897e5252709e200630a3a30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MRBAQFOS\script[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\Tar3308.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b