Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    08/07/2024, 10:47

General

  • Target

    2c0a0f8236a9d88c3aae243649abd2b5_JaffaCakes118.html

  • Size

    53KB

  • MD5

    2c0a0f8236a9d88c3aae243649abd2b5

  • SHA1

    721fbaf50f88ce707ad30ba7f03a812526e79204

  • SHA256

    cc9a2b93ff3264268f9dc764b4f0faca2ff372965b39ecb624525247f0791487

  • SHA512

    a20b69ed2adc5b9f7ec4973e0d27a280195c24a3ac302f5f0741cecf071804f656f737a9f289c9b6664eeb34accc3bf97c53ea02526507ed9fde100785b0ed32

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUI5runlYr63Nj+q5Vy0R0w2AzTICbbOo4/t9M/dNwIUTDmR:CkgUiIakTqGivi+PyUOrunlYr63Nj+qB

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2c0a0f8236a9d88c3aae243649abd2b5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2816
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2816 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2568

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af88e92713b3d50cce3223dfee1e81ec

    SHA1

    5fda7a69670494587de814e46a1f1632f5440f86

    SHA256

    a49e7552c3cbbd66ecc9adbe4aac06d7028f90efc4f8abb5263ddc301c143e16

    SHA512

    f063bcd0b4db2559acb2227893b0b25a4ca324f577de5ba3b2777301c5557f1367b6df53b2d24714907df972e0b54364aa7f3505991d16458369f6b27171cbcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5838c0f02778da25f6add141b816d664

    SHA1

    6d5c9519c0f0910fe8996e82b0aa3eb05ad31375

    SHA256

    30d6534b91e6121f9d65451dff645434787f0c59a9f2c0941bf759aa2a5c9cf4

    SHA512

    7dfe2734e2fe2bac8b3170405ee792b081354f13ebbda7e0d53506a28e77275c3c1368031c1afccf45dc6cd24382e45248ccb86ee07fb9d905af321ab18de503

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ff9641d732ae7825346051310dfbafb

    SHA1

    36ff6d2bf3fd5b297f48de7a581e3a8d6813dd76

    SHA256

    93afa53a849adf5d1c71e25dd00359304d8bb31d15fe5aa99db402f7b32775f4

    SHA512

    38ff979e30e5d6c859cf1ed7eddeebad5bc4a9679ddc0ae8ae71663ab1b37cc788337c9eb37217f52cf1ce2e5e90e7071db4e77ec8f17c0c31066114e4af0016

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c0d88ed27c4324750b1abd2c5be79bc4

    SHA1

    87fd11b8e28c72313634aaf29ff8cc950303c0e9

    SHA256

    bc2f1c42934dc9211877b158d99d0056ab643a9daec50c3468f8d3d16db1cfec

    SHA512

    b3801cabbc50ddae78ebfc953e5c0bce298187f600fa48cb64ca9405368ef08553187c87d5af42aa8017440fd6f769282ed9fc96b6f4c9bac88cf2a450d45409

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    decc83f8949dc5ecf899dedb8ed0ed8c

    SHA1

    fdade1997754ce81daf1682e5846ae77261abcff

    SHA256

    3b1b878fe4f50addfbfb0e47384caf62050fab7d0149d674b952f1a1ef02a0dc

    SHA512

    9c3d2b6fa7edb55d26a8d975520a4053ffc331ccd116e874763475cea5895718cbcf4cf4f3191154a3aed2c071f8249245e4da3f2366be6b967b4e44de905c76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e91d4930def30c899ffadc1cc463628a

    SHA1

    26e0ea3bc6ffe5441b249abad33070e8c95de546

    SHA256

    8f4fe2c7ef228564d66f02a7a0692f8bee663adbcd365e7513cd13464c8fa9ca

    SHA512

    eb789a08739a221fece0e606dcab46d2589ebf2a150941a4f7945b60fc9963e72f2d78601d16831ff727bd52836ba4e973f0f4bb62f2bcfb52c07c083636af58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7eb217fb1d6c8d102229665c556e3691

    SHA1

    6f810b600bdf545da7eead38142be901df8773ba

    SHA256

    252efaee384d14c89dbe7361790dce4932ce210dc6a92195399934d0d3b7bdb3

    SHA512

    a49f8de08107cb0517de10ca6aa35d1359999f4a91c5beaf6c77bce75e45e9fdb523a5ff2f57347de95fdf1d34796d2084f2fbb4ff4eec0f44a71d3ea28efb05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf40724e9f83ab2cfc0895753fc88090

    SHA1

    cf5ef4e5a3123a581ea3714b15053b155bfaf5a4

    SHA256

    fc1451319b90b8ac1d429936a75441c3b810f1b40488c5505c52f837aff7551f

    SHA512

    40765acc47589f786e6065b43c8e5e54f0954379f40dc60bdadf5e69da63eca046baa4dc952ab23f0135b5f8c237f06b0dd57fa639473bcb08cb25f1a2b8478b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68f07ccf330089b97eee08d61a196a78

    SHA1

    4a3bee2d398a3357a73241ca6f7d109b7b6ac85a

    SHA256

    91836f10b73fa79998b0d9be6fa45e15f5087d15fd6503dbfc7b5cc8b6b40a19

    SHA512

    aa2bd50cf245ea8c70c6dc91d6f5ab37cea171f0c7d8a0fff7ce432cf61e19ca13d8affa36353646174aea74dff11eab88ff8b6ffc53fd7f083a0f683b0c8034

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a608d8622bbe4548cf5877fcc82dbe15

    SHA1

    592a86027f78a86d4171b3edf8427f329f66913d

    SHA256

    53cdc9223fa75fd87179de84a5f18c69abdcbb6eba22cf2c91233c0198c2c678

    SHA512

    98a32afdd4646a622bfaa1f5512977f16ad388e3ccce8f8aed4ba193693f49b093304aec763c892a346726965136753d76ec82ada880b84c46fbf0a2b97b4c0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7859a74afcdeef16d72d7e33568c5049

    SHA1

    573bc30c81acd60b5bb0cf928157df942c3f643b

    SHA256

    70cd501b8f99fe9619dc27bdfad6835ed86ab4123f5fa665631552454b5cbc6a

    SHA512

    f44d396a381ac1decd16ab83bf8364f7d3e49510c84d5fa6ec03dcdf8d7917f3f4e03d6adcfc7ba112b2209cd9dc643f952cc3fb83561ab8c6633dda4e5566f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    65a67e78d4796495281a9fb6e3496152

    SHA1

    2d8701f2d74eee0e78a78724b9def76152812ca2

    SHA256

    8919eb40ab248d1d20234575081855b6f42e0330e180323541c74979ac13736e

    SHA512

    858c1661ebe1296944800201b420fe88d72e1dbfd435016a559a0175b73ce3af786e27276e3eb19b6628f12c1982b862cb8da00b338ab9e9f1c56f5570a1667b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    649ab2084f7606f6df33110ea57b85e4

    SHA1

    0baf1ce183d489c7463fb57b2190de50c4269e16

    SHA256

    c48adc885e72fa536be7886ed0be470458d36f507729ee3fdab370fd70e6c468

    SHA512

    b641b52abfa18742448e6b97b23604d6e2a0d7c7c73a8c225ef3aea796e4143ca661ea5e44d68204f9bd08c94297014126bf29fba86988dffe8164e5345ac26c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    703209708cc38a9a95abbbd81cbbb7ed

    SHA1

    b7414a7ef373722454a1c38bad2c60b325e3fcc6

    SHA256

    f85c4fd75da6d080a7c3b1bdde4a51e749bf68e18b85dd691f2447f924ecaef1

    SHA512

    e38adf3bc34a3b80ee69c5a2b5afe06d3b550e7fb8f619dac469a6314cdb3bb0bfc9ecf144d6c8dd46c9b0719fa8a0cd258628222d6a7e5705f085ea680d8f1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37eecd80442dea6def3c854c7e32ae80

    SHA1

    3e73aae546e89b90112d8383e7a87f30e501ce5c

    SHA256

    300042bba2bb2d3fb452a3fc0595a42c2f1652c31bd5fd535359984a0d3be369

    SHA512

    4c52e36a35a5570944b2f82d45cf5dd92dd168d632a18e963a91350c046e11b9693093009bd08f3cd652c4bb4887805ca8beaa34e290dbfdb112ea1d2f5bc592

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    263d680cf4117143271612203b5bac10

    SHA1

    309b556ffed7eb79c2adf8b8a42968031daede4e

    SHA256

    9cfa27c42ba5595809438f74a79531d49bd1b4cc70dbf08d0e68b5086ed13a41

    SHA512

    fd4258d328dfb42ae7eeeb612738939ae059c6e7091ea76f6946f771a93455dc4014fab64765a395094d294ba153969d35e10df4d494a687c9f8ca91dccc679b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    21f284f5fefc6841c01b424773230759

    SHA1

    530a44fd74cc30edb273ea2f5b0598e8362f5c63

    SHA256

    9592fce2fb5a09d33a255f48fbf41ee7bcd39c0e48982749b3046cbd31a30502

    SHA512

    66876cd36fd439966ee30bc8e5f0bcc9c23e36a1b9cc03db845a72b8bceda13b3b9c8074850c0e049ec75816926a2578f1a6167fe0e3d77889f364b14fbb4ee5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    872d6db960df31092aa263a3d8c3c8d6

    SHA1

    08410d028bfd8066aee61d6cf4136b9488e48814

    SHA256

    885e46ac042a53ef171d76b34306dbf897ee44a51b47d56e0720eb27f8ff5e4f

    SHA512

    55c97f84905ae3bd81ceee4c84c1783bbcf281540f58b1bdc8316b0a7dfec828e10ecf32bcfa00a2ef429608a8855c160b7baf7c38bb5c2cd1f7ffc10fbd49c4

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KJ834MBR\print[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\Cab12E7.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1368.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b