Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    01/07/2024, 21:27

General

  • Target

    1c8e0fef4598936a7551d0de185db69b_JaffaCakes118.html

  • Size

    6KB

  • MD5

    1c8e0fef4598936a7551d0de185db69b

  • SHA1

    f5b838b3f1e6fbef11eb63853fbce995eed55392

  • SHA256

    fa83e81a823119f169deff18da2c186c6c0040ce94e03667dbc4daa1befcfc0d

  • SHA512

    71269ec7ec1ae443ff551ef808b0e18305574df28a5b179dc2cfa04f4dd622819625be2df228a76a8eb5d59f66d956f9ec0c4546aa869911eafd64c2797763b2

  • SSDEEP

    96:uzVs+ux7tNLLY1k9o84d12ef7CSTU3wp/6/NcEZ7ru7f:csz7tNAYS/uM4Nb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1c8e0fef4598936a7551d0de185db69b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2416
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2416 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2820

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb676475fe0d7047268187c12359d1ed

    SHA1

    4219d29d40a26e239f0644af05a370cc920f9a14

    SHA256

    1113555d428069943249db32c92851dcd083584899071a2a49f61ac08c3af072

    SHA512

    1ab025daf89ef81d14ffcc82574e051dacc12d784c1fb6a92b4339b3f78c300af3196d873b6352c219dadb5bb6ec246ca8e63479ba45b1b1dc5b0669e03b6219

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    314c0c143e2aa0b8708e6a3bfd341c78

    SHA1

    515b1f00b5a8c7bf956f6dc83db69204a59a9c15

    SHA256

    5c351b382d5d1852673c65df716b8ebc628a6d5bcc30a6b5f9e92c3e71991a9d

    SHA512

    68428119858bca0a1362b0d3c6ae5ef74a306373163f0d5421c232e951f09064a7008e6f845bd6528cb8e567a5cd1fc1d439fb9b674c26a0ed4497156f0cd807

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce17b0238a40c56487be0fc32006c198

    SHA1

    20aff30c8352e1e969d7245a3c4c579134add1d3

    SHA256

    8a922a575f6fa2f27bac27d22b00d7be90796266af69c675766213ea13af4c52

    SHA512

    52cc2fe9dbb0f24b7d1a6572887db86e9ef044b0a08683a215f1b127d9d6767ab8cbebafeac730909df17fdb71eeef2ed6f7d6999a4cff4dfc72710c0c430424

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49fe7b89a628e3e3129e61208601a4d1

    SHA1

    abd7df89d0cffceeb8c34ee1d4c260ea80d18b8e

    SHA256

    ac8d4f4dae563a5fd09a1df95d902659b42a790fba0ce1656e907a0a4cf36c88

    SHA512

    1bc5391a7563ee50516f34e3e05729afcf445cd1bf7aa2a367fca10f2ee8b3be495c000d3d7fb87aaf0aeb263a7f878d9a6b49bf2d059578e42899b96c426792

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5b3d7264a36a72e5d209bed470827a3

    SHA1

    89fc704f65cbc9a1b628042d9892d543955925af

    SHA256

    2cff2013bd54d713fef7b9d3e7fbc6dd429fbefe44e8a694d1a68f8175390d66

    SHA512

    d978f98e930f45866cd29c04e9cbd81200c110603e444a8e082050c60de1cfb4fbfbcc90c5e008bde8d31cd4df48a2d01d8f5bb17aff433878f0b99a60776e1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a3dd3ced6035075be4c8d79d1b31412

    SHA1

    eebe2182563bf07c562d6f81ca9e0daf748fe635

    SHA256

    12e7f273b07f0d19efd863710f3898679e707e816b1c42009bc8e8beac7202d0

    SHA512

    6d9018aae6f94b4c391fff91db785c43da63a5b941ae2c4a531b82580e826fdf605c93eb26f781529a67fb3713587e55c253265a1604743c307700b676bbdb7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e2eff74563bdd78898e0e827171a921

    SHA1

    b17cbfae816c69b8d59b88a7a645563fbe30edf4

    SHA256

    92c9887d1043f8d81558a13c5cdce427c33139ce74a8a0839e615289ba7ac99d

    SHA512

    db1eb51ec942bf0c1006fe5ac9b47599466b0164a87ae44758ad418cb848b7b0d79c42afb000fac3eef71f15500a4f3315abb01448c5fe5895d1e8362cd237c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ca0c123a14e3016be16081f1e4404cd

    SHA1

    467cacdc1ff38bea582ef4046fa0476c2bd61c62

    SHA256

    14d3c6dffc1a79e9b9419b58acc290c069aea78fd95866011ad7115a49eab010

    SHA512

    a9e3d248617b968e0ccbcfa915c7149aa51c76a1eb0958fc2162af653e24d13907292bb46e183f3b0f5377b8b011a5a1e2df6fc374753f54d5dc0b87e6f592de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    793e499ade8e6bab2c13704649d2b4f7

    SHA1

    f88d963649fe5da9843ed087eb83748484809247

    SHA256

    d6b32879b6239a8f27d26bcb42884e016c3a354e620133279ebda1b82e094d01

    SHA512

    c56fe7d4586b8ed1eff4913674799c818af9f361bab4b551e6910ee32e6f931b9dceec5fda5104e6eb56b4526de8c124864ce9f9e2c65e0f0c5cfbccdf7124ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fcc8f2631dea489fc2748a55177fe845

    SHA1

    3bdae2e82c5c48104f45415a11372d17c693dfe0

    SHA256

    a218ecada0f223b8052a39b47ea8a84a7e06fbffb26b22e6fbb5db9f36b32822

    SHA512

    4286cae21339fd97f3b95ac290c9f4a41164565b1876b1d7a115984042ad235fe3a83562b3d28ba1d76ee60c70800d6f8e30d82bb9efb0b2542c0c362394e43c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    04a014ccf7f96dae79c1e75943786166

    SHA1

    51f68bf132725c7f541bba885ad655559131f69b

    SHA256

    56d28928428b34c962575664c9b4c71a341103d45ce85f70ff72401513fb50be

    SHA512

    718eb25ac6990e9cd08adb8c6e452391524e92bad1b3c22c4b98886c6010f130125927d5852ec9e27fff5d3aeb441c37acb3760f5ecb28f60aa5835f1990ccef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf5592077488e5f32cca434dc28bbc42

    SHA1

    651492fc3573a898b173302dd9f6503e8b81abf6

    SHA256

    213b8f4664fe6df7b62ed5a2112e82ecba52c8b3e7759ffc62688f0c24116c34

    SHA512

    121973745f2852425c6a97524dc1632ee17e0efe0e169bdc4cb9ada4fe7eb274f66b3c35c7634c79a02c17dd2e8c5679e9181fe70833c6a8828afd8f6667ea9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de04b34f16a62c6710743c50891d1f39

    SHA1

    8d4b9e0aafdc4f85acac0fe1e047dbea57e73a97

    SHA256

    25cab56dc087eda323b2652854652f9a6005cef12864bc0abeeeec4866465887

    SHA512

    a1551bee2d5bce8a51fa5f90325f489863804b7068978445d3dd73b07c8b637a77b27e90d21a281c3af5ae1455f2d4fed5dc90f7f2bff05b9d6995f7929a3c89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0097b2a7c52251a26215d1b66a17f351

    SHA1

    d40a7f94c3c20b6b64647f110072ac0ff7ced95e

    SHA256

    df2bde9b98fcdbae6a7079720211e3b9d703bf7baeba84eb25b684708e77a145

    SHA512

    0828cfa7845f3567703bd92bcffde97f4705dedc6868c1fd61a87c477d7784fef0721aeefb63fd76fd31665d8bca72dbe6a67123eb6c70509ea819757e7a1b80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a180507ea8ad2d49a8149a7c1dba334e

    SHA1

    96de6fd81b52b24c82541a361c42aed580239ba4

    SHA256

    821df0186e4bc5f7dcfcd036ee047c45cf952ccbdedc736c7a89a6eb3b33bff6

    SHA512

    db1086aaae8b0ee4af9977ea8b3463c00536339309cce3cb7eb93d37a3f1c3c40622884508ee62f932ef050bf086288b0a5aea37453f61c6f973124a9a5bdf35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    682d33e55282a31d417e82f71fdc6500

    SHA1

    acef264a3b8aaf443efb2c3acf6786f72f04079d

    SHA256

    49a4c296ef796bc006de578da86cb09a676a696d6007e4e9e97c9ce3b33d08d3

    SHA512

    4b80421971e8a4f39a775022eac270c3dbb47cc61e59bc300c2e9d097b38e4ab134865c2dc5e63a58edd19d1321b5dfea6cbf46513b652def1eb5edc66587b4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ecc20cf85aa810a586ffc0d3201529ad

    SHA1

    a9665b077631498f6155dcc88a0c9f6f7cb98c06

    SHA256

    eb744545a1416031d5a64786b04441baea5c27f0eae23b583c248c39ba1358ad

    SHA512

    d11976ead17bf15c6ab61e0b3576b5709938c61869928a27cf20a4c5c6d008efc388c22d49095839308eacf8d82fa6577668b8f07c3e91eeafd628a95b2fff30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5dfd14342238c5896afec5d037e5ab77

    SHA1

    3e89528615a2a6c88a4156e899c2d0db1a215dde

    SHA256

    648dcf1a088ed76613a1938422c85eb7a7e8c971b36b3175e92bee00508ff62b

    SHA512

    02c45c9a292c354943edb152d7d1c626adb7673a6fbbfd5fe87ff4179fb0d9d3848082ddadbeaff08bc594ecd3bd02d7f983efe002c8b97ac6771bf326c5230d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    033272e85a5650600d460fdb1e901dfd

    SHA1

    c6fe8dedfc6c34f77cd81c91be54a5680b098db9

    SHA256

    292b463c726b53a12168239fe2e0b1d37d5dd347bffd89bc393922b59062b45f

    SHA512

    04893b1ba0ab9de35e19f72f20e8e1065c138c2a2d8ae88de592e50cf5289d1ac463551043e89b37a2a24a014d617f4d1cd004af96fdcbe371869a7b2a16e9fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7dd88ca0783c342f92d0d8f86eaee160

    SHA1

    a626e10945c1b840bca069e684f9e31c5ccf45a9

    SHA256

    e3ebdaae1c45fab07cdea3cd38eb7f59b1b74f3ed06d42bcc25535c770292d2b

    SHA512

    e8a52dac6f02ac62fcee850b8c9ae4bdd1f1516177e1bc6c6809fde2ea16fb76e5dda59d949c1e8b75dbeaee857b5fdd8708f226d4469e78929bb1ed96d30bc6

  • C:\Users\Admin\AppData\Local\Temp\CabDC4E.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\CabDCCD.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarDCF1.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b