Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/04/2024, 06:46

General

  • Target

    0037169619a290c9b5e026ed2a781ee0_JaffaCakes118.html

  • Size

    24KB

  • MD5

    0037169619a290c9b5e026ed2a781ee0

  • SHA1

    0cfbbee1ff69af19480147031bf853333699ef09

  • SHA256

    a04973179f6904cc3c3436bc58b283d50bfdffeaca12f91ed384b89450088d18

  • SHA512

    2afedff20de83e1a979b885cbee79455e8c6e660f88ba3ee2320cbed0f00255f42be9c8487d44ab91fe08cafcb35c57f742273a2d4a3132a9dcdd3eca272fa50

  • SSDEEP

    384:SdpQhhiq0KfvuCcV4intwz++DHH2ntKBFOCQTIhvcKAXTb:Sd284fvjU4intm++D2tKyKqTb

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0037169619a290c9b5e026ed2a781ee0_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2772
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2772 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1616

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62a6e2ce3128f0cb34122a29483c65ae

    SHA1

    dc68dfd3a440725e2be4c4bdcb13cb13bc6e7ba0

    SHA256

    a1c7bef908cf1ab438c4d69a9034484c6c129a5e1d2367adbb25707dfdec7a8b

    SHA512

    6a8b741a81ff0d6573c082b1e0256dc424a04237c9b83de32309a5bc89eab962d4c7beeacefd9cb29f7dc242f30eedf6125d1340c9b2cdf97fd619530337cc15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91434d8e2788407ea7b3da4546b819e9

    SHA1

    efc4bb378e2804881bc92da304a4a2ebc9e56b17

    SHA256

    a79b3cd5cb7d53c5d505faf577d7a7b1321404bd954e827ff7934d6a066796eb

    SHA512

    b8cdf4e2c1c6e45e9f2d31edb9f6f08abbf85bf35fbed1e8f5dfd40cff6280da70e563243b40d5148ebc3196e6cb902a6fd2f4e7552fc0304594534054358529

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ced93d2eb96debdbfdc6abbae5c03094

    SHA1

    d27a0fa13020b45b9c10323131b866302ca3e45d

    SHA256

    9b70140aaa425ef4a61dbd4cf29a7d2e37ee61ef7d7ced784887b89f608fb151

    SHA512

    9877edd13b3e13390cf6d96bab196927ee124fed092127f187d840ca248e13f50271481e523eb2a1ad4dbdece36508fb7c7794452fbe8068a7797473886b5438

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5b60858c49d6b74189376877a9fbd53

    SHA1

    2b91a99836a07f5c9ff00074b2cffa666dd91b06

    SHA256

    fb15caced2386c006d676b5160bbc72863d47f9479c5bf5ef1a6f984e8b5dc81

    SHA512

    82845f99c6235d6624c32e103d2cf123db00b87ea47ae2087e119343e2fe6d09c8967b9783eabb7f79fdca0daf7985155e5d8f20281be55bf22541d979be2cde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25d95eb847d079134bd2d48cb949e7d9

    SHA1

    01475d14398c4905295a5790d6f7edc27d0fb13e

    SHA256

    8c9663cd70804d322947fc4a4cbbb67e0996f940c938f8399089863c35f81c50

    SHA512

    3a9b31ab9fde8d5bedad5f39110aaedfaba25b14b36e7690af6ce79916ca31af60e9719175653d61b0b992cfe3271eb8dcc0499a0b06807fda8410ab77e94ff4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    092d8dbdc40e5ce2dfb68db7a122470c

    SHA1

    5fe0d0d2f33352738ede1747757fdddde5812ba2

    SHA256

    e2c0d90d9ed9c763d4e522cb4a57d8f5d00d9493bb485cf5ebb1d6c0d0ad6793

    SHA512

    a34e37e280df3c913d432155ee60596626bfbdb36002850c520fe96e6a825a60d4b68dd4621d20e0a6735304e782d1ce8c6003ee693df159dceaa54eff546829

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e7b2cd726477fb09ae9f3b953b2312a3

    SHA1

    1b3d5b7d72fcadc97fcf10ec9512a218d983dd77

    SHA256

    5ca99f21549f295a0f0bc0d18f93da33c3f62113c3c963d9603e1047b2c3c715

    SHA512

    0ef43500c4cafd792f8a9dc20c05d50800ff8ca676ebd1be4b698bd1edc1547a506e65dc7c45d1a56219a104d0afbf238f89a7db2608e4e6aae70de71bf4db60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15d654957a7226afb3c7de4489ac4c9c

    SHA1

    b65816f87d197e40649c267ca47101feb757d234

    SHA256

    0dba8430ae8c6af330785a0998b7d47f8c769d5a45820b70ff24cbe54dd8ff7e

    SHA512

    aed24d5d471242fb1ab0089ce044ad50cdaf2cb4df8145dfe62c0880a85d3a12491f606d597291e9363f6748c22c9a6643fd5d51397208f51b165cd38be4ce21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a150418ffb966855d7144c34bb902e93

    SHA1

    ff785f59b5a70b01bff7a2cc22cddfaf6279c0a7

    SHA256

    a83800b392b4f05d43aa6a906e8d13304aa0731fd56a5643b4abb4ad7b28e8d9

    SHA512

    97183a8721bbeb401a3619788c0964c2e43dcd534c372b8a07e57c7249afbd0c47cc46b7fe2eaed93b9d7dfd0da5cdc2b9f87fa6f96bd3ac1b108d54544ab821

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4ae885b9196653decd353f06a994c58

    SHA1

    f1f43007f064a46ca87addef801f20ee5bd42c8a

    SHA256

    e5e337ffc5b321ec7e5840df8a76177deefd71ce074e71d0e6d64089c9ed2529

    SHA512

    5811cc09d4e547e6dfda8bcedced5734ee016ac6851f21ef730b40ea614d9f57193134b635ff9b583980657a095c87bd217bb4c683a4c94237b6af0372ea4290

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e0c69ad104a1caab95cc518ea86a6ea

    SHA1

    fec93a323eeed8684ffd6abcb629f8c26ae04abb

    SHA256

    af8da36154e0788b2f9f11dc2f4e9690dbc5d6084ea61b6dcf1fa9a4ed6a9f4c

    SHA512

    7ff686445fa164e909a9f121e1b5f1a054c6cbd82959238141ae7a4b368f141f6815093237b876b1b47d319982e258919e52be5a8aaf4ca7e78e7bc01a4b1286

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    600dd033023df2a8f235953b2229402b

    SHA1

    b40feb796677a5d18f0e1991aaac8c8167797f09

    SHA256

    f3919368c3c4a4315123fd867fd2404302ee3b53986a7ddf3f69c6f3a2a01cd1

    SHA512

    4cf72bd07e78ba26e0ea410c17932f7a308220e771bdd0ccdb309a8bf645e78986692fea589d1886699fed4321c05a624bbd2502bd1cccd778d4dcb885362c3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba759425f0e13275596ba7dce8eccce7

    SHA1

    ab327a955cf99df160c94329ea21c1b52575fddf

    SHA256

    9ffb9c1819190f2823c4a9632d2523f23a8b9c6bdd547e2b12566a3c8cd98522

    SHA512

    889d564512904660487a16c6a3e97908dde716fc74909561d80a8122ddfed95657d37cdee6e9ee7b7855867f94c777d69e774614f4ed8dd727c47f93d9a93df9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e0d22ecc32401490ee4a549b97201e6

    SHA1

    d7a47a2ddaf6c5f5eb44cae2e032cfb28169c492

    SHA256

    c59d6788a9024575a21848fdc3a11182a0088bc043bff913fecc04856f79878e

    SHA512

    2f40123782c95f4f022e4a907f7514b24dcade09e5f292299dab1bb7567b908dc48edeb2c2c9c1e8683b5aa8c8ce89e184fd353027e0263d3f246b1d241c25cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe0facd901338cc7249fd83d810e5b64

    SHA1

    ef00dfdedff05d7b91bbe3b700f881c00b6731be

    SHA256

    93022639f2db4067c90b9ef462bf89facabad015f5ba6f56ca3fc9b3298f7d21

    SHA512

    6be7da6f4c22a6209541ae3ff63b59cff321adde613a1d5ef94100e396072b93b3fe9ba11bf5529233a8ab690edd2d8b9f6f74898763069f3df9ed2f9a32ca6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a095eee2db2892c9f94e83d10ad645c8

    SHA1

    881b192a0c008beb4a6ddf6b8a32791985d91505

    SHA256

    0760316a38bae7072639c77385049ddf5395377782a283dcd39e94af40197a9c

    SHA512

    5355c5ad34f9e6370ba134ce1c0071346cc95e345978467de8f4865746361c1060debf32d391ba5be32ff312062a7371bcbd17d9eb770918776235716544ce41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c18b10cea6bb61339a49e57cbc9781cf

    SHA1

    07f640de1a337b03a40fe5b98eccd1848d5aceb9

    SHA256

    9e7e0341e62876acc0d962b67704ce749dafb59ab273e9615d46a318b84d8f62

    SHA512

    462f2016ea50fce0ed47a5ba39fd73e8cacf12bcee3ce3d01109c77ca18a71ccc9624c86a946c15222afe2d67767e12463e41a0125b76c5ce0b915a3e75006da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a68337452a9d14bd66dca5875ed81b2

    SHA1

    520aef8ced1ee004e4b13f33ea75e1ffb39f6f15

    SHA256

    afe6b4daea8ef43e18b30c00a719b29106a9a60d027b17b5ce66cf8fb57d332c

    SHA512

    c67b22ca2b26d0a7a7b020744a6aacd011bd29dff9cdd51ff55695bf43b4f56410fe6ee61250307ab911c74f809a22f38d1e4606de9f7e7aaca2c1d7d679a4fb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U8A9A2DI\suckerfish[1].htm

    Filesize

    114B

    MD5

    e89f75f918dbdcee28604d4e09dd71d7

    SHA1

    f9d9055e9878723a12063b47d4a1a5f58c3eb1e9

    SHA256

    6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023

    SHA512

    8df0ab2e3679b64a6174deff4259ae5680f88e3ae307e0ea2dfff88ec4ba14f3477c9fe3a5aa5da3a8e857601170a5108ed75f6d6975958ac7a314e4a336aed0

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U8A9A2DI\wp-emoji-release.min[1].htm

    Filesize

    124B

    MD5

    773639fc98a2b3ba223e23f2859fcb3d

    SHA1

    24725f1b4a346a8697948328ef5b4f88df1d9a3d

    SHA256

    3087d46057b902c85a961f65ce6bcb723b2094505ed462d9866e3aa7eebb6baa

    SHA512

    359ea9fe7ef2df17f73fdae41c83171f0389024c0c7496495fac8d54748dc444a923b609c20e2120c9cb2b6b7f2251b19f2bea8727fa7ba79e5d54032df8e4d7

  • C:\Users\Admin\AppData\Local\Temp\CabB03D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarB352.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a