Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    16/07/2024, 02:20

General

  • Target

    4c69b4edc38d01af67070b252bc26a3d_JaffaCakes118.html

  • Size

    59KB

  • MD5

    4c69b4edc38d01af67070b252bc26a3d

  • SHA1

    a139351587d9d51b0173c14f49424a0365d41234

  • SHA256

    409494a71dfee5195b3bc37a5ae9a5701fc6ade45dc6eec2ae66343c1218140d

  • SHA512

    95ba82e163d026bf3b1f53df417c0302496101e97fc611001f35757d5cb4189a58655da00c9c060982d3c4a28a3bdb8d06db429d94ff5871462503e1c270d4e6

  • SSDEEP

    768:i2bOl4JPgG2Ab3AD65qK3sPFL8CplNKJg6PK3wh+2S25:iWPcAbwD65qKcKwwh5

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4c69b4edc38d01af67070b252bc26a3d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2632
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2632 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2660

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    38881d7a55dfa0d2b34041fa41d182a8

    SHA1

    203c3dc917fd6fb19058ab392730cdc6b6de2ffd

    SHA256

    7a6370645a34549debf2792eb8590f9e2b07bb852d583aeb2ee6166190ea74f4

    SHA512

    56243b087c91f603a9df2ef1cba9ef27d394a06d3f005a4e246ebedf6516b43e93fd103abd16774b7f7d1b194b7155623593383f0cbc4b070165d494b202ad89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e464c8e0f9000bc7e1198765ff9ec9d

    SHA1

    f3dc89bf34d932da3fe46b567e59c969ce14d870

    SHA256

    1685aea344fb8b6a156a65bca10995b1cd6de5666e698383ad7c737d6cc944da

    SHA512

    4f1b98bab165c6e561b0e512608d435368db14ed1baa9b9fe08ed88d5065a83f5f7b3444d57f5eebe15e8039b8591f597fcf5b6b3aba61c652665897fd6cdd45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ab1402ff169aef23ef7ce9764b0718f

    SHA1

    a6e0a3f20e10c5072070a7bccb76919a1e7078d8

    SHA256

    1d880919bff5a9e601771fb0328fc14c34c6b16e7929b6fac782eb309ce213c0

    SHA512

    ab5a06c1e2657f89e6d914b5dc21352642fc5f7554548b4455ee7d8fa0923ddd2f1c962206e3a3dca3b5364abfc275fcb0c84d801bc82f7d2092a2132a435d17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f36543deb2527f07b0ca447b4f40cacb

    SHA1

    79605031b9eb5df3c872ba3219793775d6e25605

    SHA256

    7df5f34f81d8d99a777dfc4b7873a4b717d87de3ccdd6faae73a61511e6d6219

    SHA512

    644238ec138099c4db6f960119bfa4ea8c13ee524191f38d37488ab86a8ef431d63c254a257833540cc2654cb6dceb8365af6804433ebf680a130c1243430020

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ceb26a3d518741481d99597001d95242

    SHA1

    e8f18a9c627a368b01ef8d0f94ada3a8caf6f365

    SHA256

    baffbee6d70a25859df5fa319e20be5fd29b377675199de709d27178cb1711b5

    SHA512

    aa897acba8350e4a8a435f8e88b696579700c0edc9266ccd78ff7087192ac0764e6d4f6dae7164eae7fe33f805b4aba2548ea603ad9d9e3be844b56e129a4724

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9778fd5a7bd55777f9282e79c1a0d77e

    SHA1

    ce8e8b5208f26bb9466232728cfb9f68ae205cca

    SHA256

    429d052c8f8b1a9e5525bdabcc03dd62761554310ef1747aa7136972c1be97f5

    SHA512

    4ee715b1212a4b9f9508de2e886c4d4aec5387b97bb851d0aec6ea294e81c5b43326515cd55874052ec26c205f0f01aa389b11c15a1047e88b869cd2de07ce3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1340d70c53d54624e8f905eaefa7e48

    SHA1

    e004b7ddf88172e245a59edf07277bf3512d19b7

    SHA256

    d50b78651efcf44365d44d39d2b0218e5e02370413ca12855dc2d19d2a8fdcca

    SHA512

    72fe713878de2bd544c2d3e267211f81d491690c09a5ab3f9ba023f63dc11aa944058ad175361a336ca2fb72d36ac664ffea7b67c8af0e4bbb5e1d9f4e749d8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11af1f63bb177fbcf1e85e613bec784f

    SHA1

    280fbdff9c6f3e27d473f269b165ebe3c8fb0094

    SHA256

    d10931265042ca128ece250a5f397f000d01402e9c10bde01de2c9b43236f86a

    SHA512

    67d3f24c2a345f333dc81a5ba9a5dd51ea486865c26798360d8610dffbe1097563eae58385b9e3eb025b67efc1f7420a68cfcd547a33c31a4c349c41563808ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80d0677b75a223b255140246a0aa1546

    SHA1

    1cdad2e9d45485518e3ae3ce99abc87ade3d51ef

    SHA256

    81b7bfd0a1c4ea9c07d6a43affb38114e21c1bad9eff92deb82b2488d593f8d2

    SHA512

    b73c04091e509a1908f3c1614db0e2766dffbf73076251002d54e4a0d1ab4d2e4ec2014b39aaa0ebb2893b987df8c78fb4f0d5256bcefc3234b3cd7d0eec2791

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00f736c4be43fea5fdc04920077f81dc

    SHA1

    68fc8d5c7d7ad587b2116da8aac6b770041688a2

    SHA256

    99b3c16ba65f34fd25eef532b01e446ee8c8e7db7e56c2ad972bbf1189e39017

    SHA512

    c03d355bc23ab1d5bf4cd975365e5bdc9aa80e0d970d5e5731a67f913092799a0a665b5b0c9e22008022b22ec873530f8ae0561bea44d2ffdb3780ab87fa3a71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf94204b0cd4fdf9f2c278871a6c8b63

    SHA1

    48f2d4a2b36ef551300b29afa495f09f7e048f99

    SHA256

    d1575674a7329bfd48b7f59392d87bfc994cf1eaea8bd9d98348198457b60d11

    SHA512

    23b5e4a280a31af249b8c1bc42dcc3602dab2f3a8cf9aba9d7eae0f3ce70c2ef23d7ee005ac84b383f256c66e60e67219d72054ba52d75de4ffe741b2ab49f09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f0ee1cc3a3b350533bd269333c268c57

    SHA1

    e98ba00920782fa526ede681dba8cc4b57648368

    SHA256

    2e996c6848b2f708aca3919dcfae9df0284695d5df69d9325fd6cf6cb281edb2

    SHA512

    ecd296f7b1c7d8a74bf8f13a8651a910edf91bea3473a513b5b96cbacdd341bae36d6177778e6d92e2f9f1d9f1bac9669c15e0ddf83f1c3c88113c8cc9f18760

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5483ac6786fc3c38349c8e1a37c68508

    SHA1

    1891b57d5a5322f6f16eb82cd864b0574a00a426

    SHA256

    d86632b6f490321014be80617d923fc2ffac17c333ea66f0629d319e6db65897

    SHA512

    88d559d48384fa7a5532eee20d36fdd9b40451d5cb0ba5077c802767fd53468d14aebd2ca869968f64ff17ae149d942ebcc007fa8f1f6e3bff922151e38ba551

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5b16d55446edbe9a5033e665cae3544

    SHA1

    1ed3089a2bdab1c87a420f06c336736ba1ce1e23

    SHA256

    2eb9ffff6c5a737262608c5eef81510becd97ba8082eae9619f9814ed31fcd24

    SHA512

    5fec952bd57357554030a8efaed4d3759f3972c310965c8f7da7ab8efc913a9923407c2edd8c195121cc1f0e02dae288309bbb53b67b974dad506986a9c8a87c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f826afc8822fa777d4df1cc21f623eb

    SHA1

    57b5a345d50aa38c516481ad107cc3936bb0c71e

    SHA256

    fe9e94c40886fea828012bc74413a691fb2c9181c3d77dd4c957816284f9adec

    SHA512

    1273f46d6044cce90b8387e0bbdafb91c77f898c5e1a21de2962f19681f11021df9c235d79878fbe1cbc5f850e9e3f92c4be49350c320d8c0e4bc57526acc50b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2422cd52e3500f2be0534936556a3f4a

    SHA1

    358abff015d708828b684f49939c5abebbab09b4

    SHA256

    d4cb0d94c91af627cd6d7db1778c35e6b3d4aea53dfebb0ba69bd96510ae16e2

    SHA512

    961cb906376da71ed450b8755ed2b4bcf91fbcd7ecd2ea37a389e4a86c8981d8be9f5636e538fb920a531e988e2182a10dc51c4ddfb174f4510ca65cd2d27fb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    117e2b57d1fea8681129a3ddb42d8375

    SHA1

    157b3a7adf79da588038378a53f9d0cf408d2b87

    SHA256

    be821c785cc91bda1e710393c2bee6aeae40185797d636d7ebe33cd9e139f8fc

    SHA512

    01b9621ef8bf211744e2a30ec8ef966b39c9d994d357939ddbdf7c81f9bb0ea63f9a87a6e3ebefc8e67f6792b7217cddbbc68772947c9527ed673640f372317a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b28979fe2e033d852471241c2e97ed93

    SHA1

    18c5a7796851664dde469adaa3c39fe1f388bda8

    SHA256

    28c0cb5f3bd5f80b54ab95753c9cbfaad0470e37a936e4dc877efbc2b8420c49

    SHA512

    9e923a9139921e01c73ea8d13f0bd09bd623b40c5be0b4fe2499af9de826caf882d20fc0763d5f3286913e4a31a92e9f9b0eff8373fb1b5feb9d303e54d23823

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    097a5caa6308ea4d9a38596e5e4bb037

    SHA1

    4d2b9872a32fa37bed4b034f2be0d3dd4cb693c4

    SHA256

    28e5783c1fb58e182993cb76abd2cace973084743254dbf78d8472198fd9a3b2

    SHA512

    465368340302300b9dac1085274341574371ce9dd04df6bb96b4bcf2cca118d2b2a86ef54d2d731cc6f04b4bfe55463ff20e418ea37c56c0a5bb60755c842c7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7b9b9f30b6c8ddf6d025f5c320f096e

    SHA1

    c06ed1db669e8cf8f3c41df3903f7e32612584be

    SHA256

    fd75a2c10f2311fac6f2acb1e2e64106f313d2e776784a53e5b62f6e4bd66c0f

    SHA512

    351eec18b231bec06c202f670bc30b3df92c68c7f6d767c0c3a374009f74b792504e4aa70e097dab704defd8d88225cd82ab345dd5510ec0197e0aed2a1aa0b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    99af221c0f5ed5a04f84ab5fa6cd9a69

    SHA1

    958e572705153bd841f1e3c0daeb35947b379e49

    SHA256

    c2b265d934695eac39c008c695ae24e6c47a065e33a6c41e19f3e95ffa710a5b

    SHA512

    d4a901562a0140e580b59de69edcd0f662ddebc3590eaa82e57a14b89322091c4dff7059778d23e182b4451fca4a7100a07a98e198a7e80119b736b2294cd992

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1fa946df435e4c6337e30af76acc1f9

    SHA1

    9a4ff738d2e5cefc95f1ab9ac300d28db5de38ed

    SHA256

    782a52bc944bae9f246c249435dad9a93034d5f0c5720348ec4c5b70b39b47ed

    SHA512

    001446e02710c11de8f8988d3e4519b5e7fa413acce3234280f36d90155b02901dbdd58b3e801944702b408e816222551925540eb86c46d47da6fad3a3291041

  • C:\Users\Admin\AppData\Local\Temp\CabF6E0.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF6F1.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b