Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    20/07/2024, 03:29

General

  • Target

    5edd7326d182ffdd6d1f5d9312c3d4f9_JaffaCakes118.html

  • Size

    747B

  • MD5

    5edd7326d182ffdd6d1f5d9312c3d4f9

  • SHA1

    45948582022bae0ef0c3f0b0459479198a0eadd0

  • SHA256

    839bb7bc664aede20dcde0cb815417b87c99d903d85b7ec984912857e311264d

  • SHA512

    365145e681925fbccfc46634c4b756da49cf7de2ad87d92477dd33881f32a14ae0a3dfd505c8ecf510156b220092644b0c6f7f7d2ad5756f4fd1f95c961acc5c

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5edd7326d182ffdd6d1f5d9312c3d4f9_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2268
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2268 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3036

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    50919bee4c28c664fb0e6c40b8ae66d6

    SHA1

    3aaeefdf04b70bc37ec62a6b09190523a2540c18

    SHA256

    04779712f3d1770348921f5e39ba211b6f8b64ce341307dca5d29d0429a1ddcb

    SHA512

    cac41e87f2337ec1edad775ff33876f3be5c54f191e22145bd32ea6692c0f1392b004925145831dd852a63f38e1f1aacb122f43f9ebae10eeee67da4f036d46e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ed5df83b9df034e3abb8cdd56d253411

    SHA1

    08b7d3f282959ec5e9e7312a74ea0f85e458ae19

    SHA256

    3064239a2fec167a2b109b1a6b3fc211b97e3c6111385c0ffa15de8e34b23c5b

    SHA512

    f014b6bdbd526a79b3b3a4b2b2757ecd076e1ebc737b43120666c02ff83833356873ce94043432c521a8e235fc3750bbe440d56bf556b334865d7d2f275e1b75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    79beee3490d5926f4f6154fde9fee2c6

    SHA1

    09f1c437dada4838d729309dcf510426215199f5

    SHA256

    d52aa6c2aeb2de7134f63aa16ba70a802c922368527988a2be38db499c1051c7

    SHA512

    13408ecfe9d65441b18de4f4f856507022ab0bf2d4a0b7f7edceadd97dbe83496fe07ae49b5a6c25e5ab242739af3c0ee0c1aecdac3846df1bb3adb5f5dab63f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    695f4ff0ff553f05af803e99e3f5885e

    SHA1

    a8eb696abe5edca9e32331b9d2c967cc9ca9d7d0

    SHA256

    ef087bd03ab0b8e53d2e47259a285ceeca36266a291c030418168388be6dc1f7

    SHA512

    e44d0dd2f9c01c9cd6ceaa55825b05dae700d1e5df2f5b947d1130bbd5a0421b1a62c7cce6377484baa16b7bf71714f187fa9fcc867180b4007c6310c06fd565

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    939ade772be4c0c4db2ae0d520988509

    SHA1

    237c12fa02e1b25eb32b49534e7e9b61bded38ae

    SHA256

    88ba9fbaeb97667439c12a724a42eedc54e41b522604b1a624e8451287805e61

    SHA512

    4da7b3d9fb1b8ac297c9a3e435ad09f8571cb4e502419108ed717cec252534fbeb70c0f23170758838cc782ad2a51c6881f99fbbb855f7038d1fc8eb5140d54f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    1a0de500f5dfa8270a4a6feadafe21f3

    SHA1

    3c95880452279c355dfbfb46a5a67a56d72ab170

    SHA256

    f88973ae398f5abf1d327ffaf6e7092d412f49e3eabb6b45209b852edcb03524

    SHA512

    3a9dd8a3b4b33a926bf6fa4776f2048dcc77802045c65e5a2bac5842e372a019d41124ab9f41b649a5c0e147ea314d61c2e7d847b581ab66ebb44929c635762d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    726519153b27353fd941207098412196

    SHA1

    4959ccbcf7e5e53002e70f15fac81af7d5cede31

    SHA256

    2504d67733a818ab34e12c7d8db835ca6d5c23768ab6cd558e6d4f6153d4c538

    SHA512

    fe267ac2759cf1519c766781da1855c357598b60eb29e7bdbeeb30705a1490664d7eae9474c351202c18bd6416d9d740da23a9c6b417b95f0bc23eee48d8f23f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ae42dcb68e3500a504c27620aada5d2e

    SHA1

    c801820a3c85dc8ac7cb08a98ed22ed5e9b76ad5

    SHA256

    f006cd2b2386d33c979a05d7077fafd3e8c7c09710a60bd7ef1564ca1ada4dd5

    SHA512

    c9037875185290080f784dc472b9f4022696e69d1a6192e78a76e48365e2a3479cf5c2db56e8b022e559c0054335be14ee75b3ca632b71390091fdf0ad3ff492

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5ace50f8b661e74f90f49c37cbc1865b

    SHA1

    591cde6167a66436246144aaa611c23d270c4203

    SHA256

    797764949c0873eebe9e862edf984bfd6fb03e3f39098797ebbe56cc7017fedc

    SHA512

    8474f737a3002afe5dfa6b29438191c69ecb36ad9ff012145833cb8ec7ae7e2b3498c68f9315266eaaffbb3458822543cb99386cace6dbc644498babeea794da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7bebc0a39ff83274ef331fd52cc63cf3

    SHA1

    e74979438b533394df983155b43cce568067c740

    SHA256

    57425884c591586f3a06ff921b37336780296560802023a36932f74cb5a5a0f3

    SHA512

    869d1db6c458a7b06513fdac4fa7cee323baf09cb4d3e7b96e22aed35c3e085577ebeaf5bc5e415cc28e1b63da4d1f6af6ecb4835173c90043b6589ed60393e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    09d4fc05935f7e2e598ee87cdafa3b64

    SHA1

    2247564d183a2b768a24cadfc9a54edf42068199

    SHA256

    49c54cbbdb6472a2f6d3297c3550a03a9608b53bf5a85147a5594e216b96a4a4

    SHA512

    166c8df1eb9eb64599aecd9d09ef51033b9464bb490a272af6222e7e3d18d8923548ff0562942687cc5d083150b3c8714f6e77ae592aab667bb661c6f851184a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    79f72633fcc5e58eed9a564d43f3835f

    SHA1

    ac290ef510ae9e0807a303701849cf0a699ab38b

    SHA256

    30a182f0cd0804021957c775bafe69ebf1facd96b32ac0be2168d39ff7fabef5

    SHA512

    0b1da020ff069551116774dfd910f4e0b1b58f674356ed32d7e58039e4b437417232d8e073a202efde247354721c2f9104895214f4cac859215768078ca4af86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b77fddec43947d5f085133303c2134b7

    SHA1

    b71190c8ce7878a728558cd9fef73fea0b87ec3a

    SHA256

    d5681ec35458162a42277258f16b1f741953612edd4ec50a139575c2080fd725

    SHA512

    881918c955d17a609950d19ef6e93db44c270e3fe4ec4a04f33f6b5eac310c1bda7b5b53247a1679abec9ac8f722c4d6769861a8f8cd38b6142a6f36a231e4da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    24fb6c53d95c533fa4ee539cdbff265b

    SHA1

    5fe44d62d0c396d2c5b81fefb71e970863557872

    SHA256

    6480081889691d09fb3e3518ae3b088084e1d8bd5b7fec7b9e5f6066dbcfa0ac

    SHA512

    c2ebbe7da82e97569877fab3af65ad9ea88d611cb642c95ee90e8cb011b5103ef955783d6658283e717fb14d98a3091683e0d12bc02b67497b20507d09db1c68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    857b20f7943e512aecd0b4aa81a3111a

    SHA1

    903f12695bfc479d6090b9d35745e656297287a4

    SHA256

    458c01cc7282cb993232c8375fb98274464822337073ce067c5074f35754f3bc

    SHA512

    339712438b6d199c256844cc465f994919a651deed6e0b1154e2d5ba9921bdd5f6571616a1b98511f72bfeab1329354313459ed303d5b0c408eb8b21331d1991

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    41ea2f10ab8b20180927c48473600cdf

    SHA1

    b495cf50a446bc88835ca9e23a2b79b480a3a30e

    SHA256

    f7a2225822bf1595271c5c1d087732e13a946b73b6264c9886b063bf3e1cde56

    SHA512

    d863cd60b0a0480888e9c52926e56e8dc51e60b9bd6185f687dd721431af62d4f119a4a0a3be81f5f8576a0b1edbf4ccd0b0aa692b3e1cff38dc4c60262d6f2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9dcf8775130b05f8a45ec524d28f7449

    SHA1

    077b9d34b9d5ca7682a069eff8e57a93666e3e8b

    SHA256

    173f22cf6332e37f91219fc2cc3fa08498dfc854ea5811c7b333134f877f9ec4

    SHA512

    d84c416239fa8a0858b425b05442456d2103f37b06e41d7112105c83e4c2fff47a3a9682c96ad9f71b41bccc99211282b6c191d4214e399ea8d211bd39033d48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    1d264cee15bbc07968dd9846fd59948e

    SHA1

    c03558de742742054d58d9bf0d7ceb83c214c1b5

    SHA256

    7a43321d455ddbd8ed1bfed97565b6db42a2440f3c01dd3340d387c58cd9f740

    SHA512

    4b82cf8927e0dc9c5ea5bc101c2c93526ad4c5990bf541848066d593d2db28c3b4ce0690888b6886973b3175f4b2381535c3563f3336b0e0c42707d16c773778

  • C:\Users\Admin\AppData\Local\Temp\CabCE59.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarCEF9.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b