Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    139s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    15/07/2024, 20:42

General

  • Target

    4b5210650d81a4d2caa7c388c3f5700a_JaffaCakes118.html

  • Size

    55KB

  • MD5

    4b5210650d81a4d2caa7c388c3f5700a

  • SHA1

    0645b208f44ad580a5410a7f3f1325702bb1b898

  • SHA256

    620334b4fa16c7ccd2887f6be07b80659cf5a9925be73b8c8879362f6f5f7245

  • SHA512

    a3d9dbea78b5ae5827a36ef2b92cc963158d59520c6c8ea2c4a1c55915291d60818bd7daa063c93356a93f7bc42aaeb1d81e2b94b60767379960a35d50c56f9b

  • SSDEEP

    768:SCvkrpFxShREQBwQCYG4gL4Z0QIbu4GZgYD68CgeHiTjp:SCIpFxShunQCagEKQIbu4GZd9EHi3p

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4b5210650d81a4d2caa7c388c3f5700a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1128
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1128 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1156

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c969e7d041250783d311cc8097439250

    SHA1

    2b64eceb12b7b5571e4f685c959d3ecc6ccfa1bc

    SHA256

    d634fd0c95411e12a143c2b0f988a408c1fb4e58a282d2e2db0818f77cc6d109

    SHA512

    964dd6f792e46959ea0af2375ff198fd4932e455dda821fba35cb38094b24793545f6d58f637ba07106c3c8a6643b9bc606ead861b13d29894435a4e2a7cc8cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ef140897fdc46828f96e5227f10827ff

    SHA1

    da72e2354741d80df75acdebe5124a9310f917ea

    SHA256

    89e744ab85c8f82ea468269a5a1dc2f569e677b9b429092ea3c0c983684e3b64

    SHA512

    7a176f81070bd9df007baf66b71c3105416777a8cfab3f93ad782ce5767f2bb20da7359421adca5a6cb26f05823faeebf801d2eb5083cdf284b7411b6370fc51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    36ab3ceb173097de88d60b1a78024d9a

    SHA1

    9254907288c5715e2050613e33b76781847ec9f4

    SHA256

    06739aef9cb809a0cdc1c628286b6c648d9afe10f021abaa780f725c03aac915

    SHA512

    8e7a168f205aedee1cb9e301397ac9f1c64f4504a27c0e06f9786f42d22cf7888a1e3ab2d230d8305426f0b36e240e4dfe9bd1e8b741f6da86f5d74f98d506c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    14c9609252651d1903fd10df46baf609

    SHA1

    a275ebef3ef74b72e470c8b6a9d8a47d40889781

    SHA256

    e50ae02d5840e3886498fcaa4448e0af6e548f1cfd0847cfe871c84c1f2c4972

    SHA512

    9ab7ac54fa57e8dd02236d69c0d9e3c6f57510d8562930f8e0a37f5527b7bab0dfcbfaaa13d9706a71e54080130e21372620193d6722501653e3ea84e3919b43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    33956a53063e91eeaf8f67c36c37d183

    SHA1

    bc88f3cf9019f943e1babebd5eb8d5434a32ff12

    SHA256

    c324bf757ffa0589b17967103e232ed53e80f91b448b8c89dfd1f0cf5593306e

    SHA512

    b4b83c120ba6d3b20c50c483ce0ec3c1f1fe855d3b6cd139ee9a9b45cd259caa782b7e551d04e0ba3ae35e29afbc461453d37e542bf6d24a17282a841c4c4f58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43a031befd90615becf472989b75914c

    SHA1

    620453f2cc1593dab7764ebc56b1b1772663465a

    SHA256

    283651705f1fd75a4eb1615b7ef68ff7945cf87792e93520d762816f2b717f61

    SHA512

    c0acb3fabacb556316fea9ea9ca5248250e2d5cd92edca2305d15a7e79e6fe11737555021938d4d94f30b3a1835a0ac46ca0f0066bf323d95dc4bdfc63ebec92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7728588013f2eca1b8e01d946dd53ba

    SHA1

    d3df653e7c80521baa2dbd13bcd9645ba4fd1682

    SHA256

    e2301487e267861e2d79439d0e20a53f962f45b8a2c5b291d65494251a2d789f

    SHA512

    846a66e1e870d3e24acfc45950487b09514015da202fc89117873437c7606a96216f5b1aaed5a64e8f23e99fd26fe11cfb0f062333adebd41425f814d2f41238

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d7932155fe44c885ecb89a8905ca1b94

    SHA1

    6b5ef247b6c32ffc321f7971e5b37fe4b82e9ce6

    SHA256

    f9b0ebe6ed14b932a5375bbe2abfc3c152189bbe463bd183e683a93b24922ddc

    SHA512

    d640e94b15fe3ca502982f22b772605329dd5182eca4122f69992496f177bc29e0d506d854f05198fae4b536bcaad97ec9d5a2c7792c8beb2b955fbc2f11c25d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c6080b94884f91d0df92ef072c063ba

    SHA1

    f9cfe2abcdf66712b502b4b11a692f689917207a

    SHA256

    edc67c597d64e309dda84d5c358a2dba37df76d87adee8e4b94e349123faf1e9

    SHA512

    b7a72fc4058195acd636d9eff2510ae19d2614f86c4692e82da0eff2497a95170c174eff193c7c3ceef38ddb48c4f7b45e03ff204e93507505fb3c920f5737f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    633de431cae543f1601cd3d88403bb7c

    SHA1

    0c5fb8dd8646355abba9ded66f657ce6bfe63d45

    SHA256

    25ba15d0c58e693acf2a83dd0c0c1cda890e0ee41fa41808d0c2e79807a24559

    SHA512

    b72e15338acfbfe806aae284c9dc64c5f0fed39ab9cd1ae4b73a28767fbf6ca76a559f0ce03fe3a76e81fc5829459cc2c854afd5deb59b4598224c1573a5e66d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    844ad03a6af907c0979d0540097edd25

    SHA1

    f2099f7df6534a0e8c4ba93c1a7686430bb4e07b

    SHA256

    f90c581d97e098ce77722b8080804739c6c69a754b943eae19871a4931f37a94

    SHA512

    d6778b049e0e7f033c08facdf9822629d416fe28a776c52c5c87835c340844d002b32caea62347567b37a5fc54ad7900f4a129d69ab70c49ce03578d6c9871b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    419d82a449d27a8ba4d0d679ad82f4cd

    SHA1

    c75215cb86cb42b807d7b24052f3c108d3a9764d

    SHA256

    a7925a5b1116d40295cc31f21a4c8623ff58badb26072d83c65d539163c2e5b9

    SHA512

    40eafb4d8499a5160244862425319849ecdc199ea6a2965327f9249fe1f06b06c6f628c875f2c493d5f5867531b66443b7661cbace3f94ecf7afcb9cb940c437

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8fb2fa6569949e9677116cd2d24d1e57

    SHA1

    c3baec8fc887b0343809a93536a26adbe33d38a7

    SHA256

    34d36cc0119566f14f485c92a2ba2055ed17e9d443fd88976d28d1312cde0bb8

    SHA512

    e1d82b5d230463852ca0d4d57c7f13f3347e2a4a5034574832720d7a15c57af0c267a6cf45f7ee81656185463198a8ddd032c9e1b8fd7d68c84e5e960d89bcb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3104f498520ec9c816458dcd1d75bcbe

    SHA1

    f1c00eee1ff4d48dac94c1a26508d6088b9a4783

    SHA256

    c185038ebbbc2147c5eb15c359c805cb11f80d2fe08f482dda465e847d6d14b4

    SHA512

    865e51fee6a9bb93e0623076ffead55c900f3f7ca098bd40f65c3192ed4ed0c819ed1e94cb61fae1e73d12bfc1942abb6c766ecd43061e81eee27d8e5716848a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8a741c70fdf9d439171d2b87d037213

    SHA1

    def8e553d34029f5fb40d32f7723661c8723da31

    SHA256

    6443e9fed0897cbc62216b72d0cec571f27eaa97c00832d8369833db83382489

    SHA512

    d4601075f28b66270883cce33b23c0ae3f6481a4e0748e701bddb110488994fa3d506663d6c1e151183a222ec109fef41dac86a860531c546cbdf66d4da122f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e03015c24749f0fde485da0bdbdfd879

    SHA1

    5018580ce10a3850096869eca2dc6161ad9e4f7d

    SHA256

    412a5fb97bb832ccc34b4603af6375af9514b9fe1d0ea4b1f0e740ce8eb993fa

    SHA512

    300cf9782625b6786298cc75449699fe39793680b678d83dd3c6eb507f0aa60884e6da91fd150d84e427bb68c6bfe060f1bb47dcfe701a8f0216a5447efa6ff1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd93150738a3d57d29b68526c6094a05

    SHA1

    8f2c297c2e71ccfc06c6a430da601a68299e5443

    SHA256

    ba53dd4a3c682949cebe9ef1ad7693dc7edb405c8ab44f975c9c4744c4f90d3e

    SHA512

    b0d31589b0f93e62da7e1a6bcad73bae1bbe89ddbd99e2394e5c029eee73fce0f937cdcd7c2fbf474fce1ea2ef4b0e25b1c1f97c49851057e22af39d56cac330

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dcee6c3b9caa3e9e788f2bbc858a6ccc

    SHA1

    75019083eb23908e0526519d251a65265b184b62

    SHA256

    445e344b821e348e13f985fa82e814c5c95b4f28efe34dea6b94d7e18edd7b79

    SHA512

    7b90c450a6d251bc80b6135b7292129c77234f6522884073422eac7eb9d56c77815193a281c231e5f1e55947659fa9e8bc9f5cf527c71745b48cc22d74a781df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    afe1101c7e59ce6df9398a9d6b0a8248

    SHA1

    bd671813cd175fc00ee6705ca82b48f7a1db1e09

    SHA256

    c1945e6e26f8a8c7e208d1c246e28b8d36a651c4b7ce765b1e7dfee522c3fdc1

    SHA512

    ab1dfd1a18b80a47b9ce175eb484ab830c493b3130b9864449644864f2a7884267f2e5d404cb1f3ded6c4b7c14ad85d9b85422e87aab9459b5150a181c0b79e8

  • C:\Users\Admin\AppData\Local\Temp\CabAD80.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarAE2F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b