Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    20/07/2024, 02:36

General

  • Target

    5eb602bdc952001d259184cb8a5269a4_JaffaCakes118.html

  • Size

    42KB

  • MD5

    5eb602bdc952001d259184cb8a5269a4

  • SHA1

    96610817cdeddd417ea668a4ba7bd13c9943bd62

  • SHA256

    1c8e3fb55a1355dfc6dbbb8d093b60d5e12fe99acc74c57310f250dc4890281d

  • SHA512

    e23c7bed46d109b0b8ffbc47fb8b45fcdde5fb1545e6bf50822b9d5c665c7f896c557b6c3ad18d596d60fcfb14c6249e03208d491a7459cac7c1c4333089b811

  • SSDEEP

    768:Zcd9QZBC7mOdM8TpC5I9nC4a1MDb4bXCwBwowPps8Pd:gQZBCCOd/0IxC51MKXCwBwowhs8Pd

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5eb602bdc952001d259184cb8a5269a4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2404
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2404 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1648

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0907f8b3e1df336fc4297d56b0b60f4

    SHA1

    30e95495cbbef93e59c9f1e70622b030b2ff4a70

    SHA256

    e1343e69d7af786dc5f10eb7b369779146f1e9b4ef050330c26fc7fa4c94df97

    SHA512

    b18541dcdc3b8826e9e9e2c72a036a3fc934978b136a4d0bf4e8fed637d9fb35b76f776410ec1f02a890ccd8c48e0ecd8184f6ba6ce70efefda6d071f3fb1c79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a909281ba47a26b3456c271dd4631591

    SHA1

    d0a613a94a158c5dec4b572afa8b43454701cc48

    SHA256

    c6e9590de16f73af64927303bb0b301a00a90597bfb25ec887261c8e91159bed

    SHA512

    c986142cce84f21588be8afb3a6dfbe77339af7a47b3c115e7357ca5eac5f6743147fc909da38f57c709b19df8f82dee44cb9649bc08f55b6c573f029af56225

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    30ace06d21306fe2b89bf4f61ab5f7ab

    SHA1

    9cfa9805c14d1ad5a540c8b1c4df44da4e0e8e5c

    SHA256

    81ce5ca2549063fc16f404453a07c051168d44ae3c3ae29109d1dc0b17ebc568

    SHA512

    88c9722ca9fe84e07bc2955dec3c3aaf8a2230effd49644513eb151d7fc8db63d33af56a5f2b29038e28bc9c8e5c08e969a6895e05291a04d42c9f6a621f8493

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    16ff6ff0a6b17688bcd52d7a64e0b42c

    SHA1

    39879f79aeeb79980bc674b75c962f60847b75b3

    SHA256

    da6f09647792c93942e8fa545e55b45ca91e6b2c56c2cdeb00774892eec735a4

    SHA512

    4f53f2dbd8059986f36d4d3388cf40d54bd533fd48f7e0678363ad1566254af2e0760d8095d8e2ddbcdb8c8fc7ec8ef78c93c863a69dbd317c56e076543587cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ac621d69e52a5b6c9335cb778109eb7

    SHA1

    1607bdebe40c1ef84edeecf678a66c98a0429c14

    SHA256

    93dfbb87121cdad1420b145c66ec6c18ea43465bf2e7a13144d3ef1e0e8a1960

    SHA512

    beeab2d9cf88ff908e1a062106da5cb3451fa89f7cc1bd894896abf3887b73a28564ba78bfb40612379993fdb6d11f70179e7f033a1602922db4623e04557d6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    71751f3ebbe4e402a28b8b38fc3d8937

    SHA1

    2b6da7375f318f3b67354535921175c32e330bd1

    SHA256

    e57ab547cbe5954ea859a8c0f6ecc1038b919006fd7bd46d1e88d86913b4ed58

    SHA512

    a67b8b5a850d2383aa42e656685b68182f33b143a6c7f2aa50bc8528aef5fec62503466002e66e740f99982fb381927f7c65f518851f58d83684ac2c9e199397

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a349d123724af9612982668565b85cae

    SHA1

    a082fe8153b40fe315617f861722195f64750b61

    SHA256

    52245574801617183689498baf61d30ed122051b0825092cd854d4d5f0310aa1

    SHA512

    5100ad69747fd440659a9358f132ee58093a051e49fc4bb2e6cd3e10a9e83158fe30428c172de01dc230ecf3ab3c983ec206dce71d7761b2d36a02cabf50a643

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6307f7a8776fb0cd212f5d7652f68793

    SHA1

    abb0eb5d0ee8f5a63b42ec1ec927e2f7bfd68233

    SHA256

    b4d1e2caeabea8ae7ad6fe2c0d1dd724483d14e77bf3676d400567cef0883a6f

    SHA512

    58ad34462fe632f360ca14b52284d9e5fd875eae71e457d60a22c6b7a978e437e9cde1c0e3543bbce45fcb55feed7b68891df78fedc210c4ec62174d93ed9728

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb4ec8ef4c04e5ead28480b009e78ebc

    SHA1

    d0aff041dfbd2c6bf336c6f85c2bd792cddd8b38

    SHA256

    7ffbf20c148540d7ebf3fbd3d2863bf2fadef7e9b1b642ac08ae9d24a3eba1c2

    SHA512

    c9b9c7fff151bed2e80595db77ef223979092d166b8bf1bc36170af9533054bf0ab865d388f3b75c5cafb739285e75ce41b1ed7d8b44d784b5885c4509b51306

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    54488ace27b9c2511ff47858e4bed76e

    SHA1

    f4271d2e6ad82b39f3aecfa11868debc4922ba6e

    SHA256

    96e987fec937d03390a2e2152e24b8cd60466ef37d332c57b8e59f76a625b15f

    SHA512

    cea3e13fdd368ea9bb0ce05c52afe08b4f0db65113bade0bb3f476e8707731ba436e57cdefaa5ac05ac8c407ea64b6fe264f5049f5fbda6afb3712584e88ce29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8053cda6542917ddf07801ad4a8cf8db

    SHA1

    a6787aab9c321244fb1d73db82a591cb2b6cdd7c

    SHA256

    846fdc639a588697d7a69250f925cc15ea84d1d4412a10221097bc0b83f65e3b

    SHA512

    2f7f65f158b99b21732c8125aeb70b3e022469d093bb00053ca6e27a4b370fe054a0cf03c4875b0be14107d86ffcf1b0629424f5f173a41550b527f10decb01f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bfff1b74cd4f78d65c041aa52c9eaa1a

    SHA1

    be5b81e5fdfa796276f177178a125b01f3861679

    SHA256

    810d5901152f041c5eedf3fd1ed4574014cfc810ba40caef73c7c9e7c1746e14

    SHA512

    d90921f1739fb853656b2da296f6176d24589b0720e056f4d6a86cd0072f0eb3463538b0b3102c84f1f19566cd220b2db6d510a6381da5d4e5eb26994f2307d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    edfd891eaac83c6dc6061bf053044b02

    SHA1

    86080ef4727511b36baad6d24429b8692bdd531a

    SHA256

    32e93fd4c74488a096bb896388c46dab2603424c510fa544e30195352cca7058

    SHA512

    a221759c6e55cd18e9e1a472d7d521c551b9ae01398179be2b38e7c5f7a8634105ee1f61da8504b530bf41891b0b0f60ae399161867c378d54a4f37ddc166adf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ffd6a6138feef9f57acdecbb6d1ee9e6

    SHA1

    a20c0aedc6d6a1fb01ab07e302928cc616e352f4

    SHA256

    e5322101f1d15f842c62da16fc406cf3f0c1589431bb84ec92f818ecbe194c65

    SHA512

    d82e5136e13f234a771747bf70c513efa3a149ba5b305cf665a40e019fe4e58d7824b7254da8b5ba684ba9fd1a8d9be5e7242ab49d81c2c26ced6a2dd24c92b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ada749a21c8c64234de78d0732e50d7c

    SHA1

    cc2bc49d2146de8b1d30ce7dbec6aa134db197b0

    SHA256

    b21760eb534ae4539839f5da38ad9cf79a5c8bf014348c1cf223dd26f91f2a4a

    SHA512

    a2ccbd4aeab46b376c33631bf4ccee0c6a79798439d68328e2afe963606256131375f2922065d1f9eacd508263ddd6c6c6c7fb7539bc5649582332762a66d064

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e6a4ac78458f2865ff3a6e4a80650d3

    SHA1

    69ebef77d203835ef28b6328dd310aec84d723b8

    SHA256

    e0cffd1c270b278712c8d75d8131def25bd394cfd887e2bc4b94feb49850e693

    SHA512

    881fd802e42bb49cdcafae6ecce95987eccd715e79c985da0f7dd2813acbf68bcc971b4eb52f7c6f39962e843ca4f048f7d9cc68921d97bb74a007b66b0f75f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    82753e1ef952ce409fffdbcd0e1c130f

    SHA1

    5da3f332cf7f60aba8f09a1917f24fae3e00a9eb

    SHA256

    f5406f68e488465fc18add1b675eaa4911dd5dd04987a51138cb5a15cb81ed59

    SHA512

    31b96a154fd5c3a8d41d6a01e5550e5983ef9bfc0fb2d1858bcc2bd69f56f1a6bd1cd4c9c7f571aa6045eec4bb537b8d8924a78a497d2684e19d2bca4a824076

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    225297aab1aa7b311f546b0f61c75a60

    SHA1

    82c2245235107725a68b10a035a5777ea72f318e

    SHA256

    42c3f9385a66cb9bc7a5c951d8f89c43dd6961fceb7fb7aa2a1d1f76575bf68a

    SHA512

    feca05fc506655ee419540788cdd90a171f1acf91529d47bbd2f8af17af7e578006f7afa765239a916693b1fc158ce1d3907d06889519be6c655cad1487b8308

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f877e84fb3fc215d2f0888ebf16fc09

    SHA1

    cc9b5f249c3b9cbae5dec8457ee313453e3cd2c5

    SHA256

    eacbaebe8a0196807f38870c6e7b21156a03da501fc2be115b77b848ccb583d8

    SHA512

    38a95e22b1bf8db17408040ee8376697b21978cf0a433439bcbc4a31d7629729ea2ef4c60734ffbbcb91ad3be7a9392e69ff18f1ba7a9f7e090bfb36ce77e906

  • C:\Users\Admin\AppData\Local\Temp\CabB711.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarB712.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b