Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    10/07/2024, 11:43

General

  • Target

    3493b74c338d342cb52f8cb71a36bf4d_JaffaCakes118.html

  • Size

    7KB

  • MD5

    3493b74c338d342cb52f8cb71a36bf4d

  • SHA1

    2ef6958b849fe3d5a65d25c06d5fc070e5c473ac

  • SHA256

    bf182ad49791c7bf96e7318925eb9c0fbd2e65c073007a982275ddf2921aac62

  • SHA512

    81891a9d95a202cfec615955e03a6790ac66fd0be867974212439b00f07f6f7f267ca7ea5d4ab6a445187d6abc37ae834930e83dc194e969436f5ca94e41a005

  • SSDEEP

    96:7YkaLikxI+9tk/1MhTKjkAjoE0V1UoPZ1/d4d4dzdSdIdId+KU3Hzx9tkwQEonWk:raLiCt0pcFgU3d0WK4KpN

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3493b74c338d342cb52f8cb71a36bf4d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2068
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2068 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2204

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fcd1710963043f55b4c7d5dcff4ee92d

    SHA1

    58f1975ce48b65d8ab905f323537168541ff775f

    SHA256

    f96a1675af2951d36a88a03a45105b43e3529d0f6d74aa8657daf445114f3d7a

    SHA512

    08230ca9c17b401450a158d92aa074c90995da66776b195544368cf1f9bb924d5a1584ae9f16d66c664ece81ac1fc6a53eeb1d5de593bed3beee72d1ec976849

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e5f6385f055b7915dd293b9cae301a8

    SHA1

    9cb8ebe1b80bab2f9350444b68004ba33c304bb4

    SHA256

    de30af410264b4b7c9352611e885350f7e89ba561d660db56b0c18aca321aa41

    SHA512

    db3887ae190e1589e7c6731bfd6e6302815331ca0cba5e4a1f611c3d273a0421ddb093c2fd707717278bdcc0de639aaab524abd0824c1dd757c3750222e6b845

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ef7fea876cd99ac3c85fcfb819e5244

    SHA1

    09d417854b8496ccb509e4d08fe1c3457f33977f

    SHA256

    99c86fed656de8113a7c3df314ed1714ff31b3a2bab4c7911105e0431f659e12

    SHA512

    8367b12d82fa355f249fe82772bbf4f74692dddf30aee999e729adca22d1a9180c76f91b26b72119697879ab3ead4c10259dc9bcfcab74084fcb3fd890e51a88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5cb117dfd29dc88a0dc11bf8ab6ca1eb

    SHA1

    31c079466b918339770bc58cabc8d93a27cd44eb

    SHA256

    d66c4a36dd085977ffabdea7f6bc9f170bc227a737ab7e0eb3e4d86da6c575d9

    SHA512

    aeb3e7c6a59f9f6b4d99283a72cdef013cbd0d628267dca0d2cba4a34175b271bb3f53e579d66fa73463c6b499557c82b6ca6a359d2070dc677662284d0bfb9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b0de8b6b60fb263f30dfdc19df99d085

    SHA1

    b175c8122f1892e530342a089d839a201c9ad38c

    SHA256

    57eb6b6570062fa739ab4f5b1ad6c4783944e0e85d6db7700ab0429579a9b380

    SHA512

    019a88ccc7fe2f79a27d0ed3ad79e3af916849ffd8e46462f8b99436850528089532e24f6e890845a3f2036cd4c276b641f2235a04e491d6eaafc6250c552a27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d350ab862cdd8490351087542a5de17

    SHA1

    5c51c303e24b9a26c01c763672db4e24441e9863

    SHA256

    a829ed582892633366607dbbe82497f2d18b982821aaa123f106e4c356115917

    SHA512

    9aca4c2cb3ccb181b2a615692a81884e28a8d1d90f9eddb0bcf1b63fc0304f82f6faf33c04f6c43432b608a12ead22d7ea4ae7ba942d3fc486987aeb3449d18d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a768d1fb8b10fdefa29f2d649ab480f0

    SHA1

    091c2e9c64a27ba8935fe04a2222444d05d1d26d

    SHA256

    98001ad365e8471177d3d41836ceec2631bb00284300d1932805b35bd2c89427

    SHA512

    fca7cbed062ada9b35c28ba1e86003170ff04ac1337b1ef2ad6363dbeb0a6dfa4fde180051d0a6aa566efe80ceca68ab9377e988cfc07667956e18cbdbad4878

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    810fc23a650af1d30ff2e5d0a49c7d51

    SHA1

    469565d1612af3c2216904e8e1139f06a0d2bc65

    SHA256

    7ede33d214f67c151d953c81cb18e6e59bf09a6df7a1fbc9e4f192de4944db3c

    SHA512

    638cd45cd7dffda319a2a7cf858956aeab08c7ff9b20304da63c85951436c347f131c93c1dfde79c49c4a254dd1cb9dce6cf873199ada8c366f4355309edd252

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f4a288df5fd296b3e4d29a17011c3bf

    SHA1

    a2e38ce75da86eef21b070d358ffedcfcc7e5867

    SHA256

    9d1b2d6c37236e6181244b272ba130245d110d5edb5b7f3b8c2ca04fcd9dc815

    SHA512

    29cb64d5c4cd0160d6c82155f0241b9dc6803a88ae4f0e06be68ea5c7a8a91e50acbe2d92372a61c29d51cb692615dc60e569fdfbd8f4ff1c08416d84117af92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    20e6e32032d222b882872476a3207d9b

    SHA1

    6deb2aef5853df54099f0d08ca99bfc3c2f20cd6

    SHA256

    9537be2a9eaca868537fca3744ca5b02e8d3fd496edca32595b9a312747cb6ab

    SHA512

    31fba5457bc8d4e06be3307e41c1971579cafa3bc76f065f1c0c51aa877018f91d326da476c0baf08c06b3298ccbd5c79a38b71ad9cbed2eefa8a01e91a5a434

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd7f9ce7fcd9e63ecb56c741bdd1c90f

    SHA1

    2d952e771f3929ce0c1013d0d07c19dd73b4148f

    SHA256

    46a8f2fabe082707c7b5d27ee2558845399681885eb4de74cb437300dc40b863

    SHA512

    de600c406a7d92394fb8e19c1562b7bf750b90d7d164bd95969e691da4a442b35903db1870f8934ea3406373fc8c1a8e86dd6d1a6d3bb330352ec1331069e126

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e86eb11357e22f56a34fd37398ffd8fb

    SHA1

    9def48c6bc6eafbdc2b9f2270d4eac7108bf976b

    SHA256

    a6cabd4379e2120394a0fa4cff6a83db8eeeb89e1bff657e4371c1b004e37875

    SHA512

    fe7a95b3b90edcba1cef86c8a783da0ce5d4a77e6beb75ed467db7e1a8b6bc6b985e072019df5558f6492d95b400200e5b6142007f6f7c2503122f770f376bf3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78de1a0df4bd82be07c02a85ab29a7c9

    SHA1

    265be53eb840c118a0f1aff5a3117b2fa3d9b024

    SHA256

    ea6c935e0c568c3b1802e0f89ab380ebba4afc60c36bfb64d9f0e101129c2f58

    SHA512

    bf1540cfe4bc2eedae6206b17231c0a0137be89c19cf9fb8a7c0d7ca75c252b12857e0e0c34ecfbf4cee65f1deac8bbee69f9dcc8d00fa1139341e58e5abbab4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28923b74a7e24db04c269cbd824047ae

    SHA1

    eae81a3b6e3287a514e53b51bb599629173e6205

    SHA256

    4c4a5a3ee0f21ecaf7feeb63bd4519781afbb7cb83998a65e1b1dc3ddb2b12e3

    SHA512

    cbeb4e060108151c778ca089183688ed894fbff35e98a117e1f7769fa122a5f622521029a5601dc65e4d6f0adb11eb419df696756df9ef320ca624ea7aada9a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11fe4a1fd5228349947622c9288e5252

    SHA1

    eb2a5eb43a09cb6e1f4462aaba73127006db0915

    SHA256

    5ca756ffb462b94828f2e63be8bc20f46009ea7975fc660a2ff42ed19d880c95

    SHA512

    fb6b5a5259e38e3dc11e838925cb5116aecb2be123279818f8a6986851d81b80a84c3ed9227aa2df3b1663a052252e246417688fd6096535ac0b40f3888e94f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e878b3b3e6235875256525d1af26c8d

    SHA1

    52b921727d2b940e47f4d9c7844e3949fec60957

    SHA256

    b9e64d4d7525e181af3c4b9de5f627f6567166f511b04ebfeaa66912329a7b72

    SHA512

    e21145981e8963f631f4a4271433bc29667ba722f3a2d93324b8f569ed5e88c6b8ab7fb245ff63c9bdab0c9e0d01acd43e85b5fa76a545e1756beda34faac339

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9754d30c9b10ede18a5bf832d7324c42

    SHA1

    7f94f3c949dafb572ab817f15fadcfa6bd68893b

    SHA256

    af98bd034538ce41d13847a1368d2a9c2eb484b99fd2fc900f88df4cbc0e92bd

    SHA512

    91a854c04cf1e729f9c92a9cc2773aa4d36bbc209270871fa6432db97ea9634a80354c77604de68b70b4a5f0f64ce12f53c222f9074c3f37f5fee1c021cbc33a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    092bfcdad5d771a498c0d8d1187cfc0a

    SHA1

    f30c1ecb4f76260e2ae67a4a25365878fbabf69f

    SHA256

    16b0e3af2e20551ab12caf54507931a45bfdfcb5f3077c34d54309b5df1c7ae5

    SHA512

    63cbfbca3986647f603cf3511463b62e2836225c4e92ca464be319a140fcfecf7de69924480c6684fd842f96faa97fd0967a689cb69c34f8cc0e44fcbab78fd9

  • C:\Users\Admin\AppData\Local\Temp\CabF049.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF0CB.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b