Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/04/2024, 04:24

General

  • Target

    0902e58eb5eee42a288ada1822b7ed92_JaffaCakes118.html

  • Size

    34KB

  • MD5

    0902e58eb5eee42a288ada1822b7ed92

  • SHA1

    220a946cfddda56c1fe93ae4f79647e0b20ef8cb

  • SHA256

    ce5c6fd54118fc65278e1bd92a6841e3dc058cf7f7f4e9b7dd0643cd15648ab4

  • SHA512

    a687dfe1bbffd63e983c4e39ad8c7bf63fa32ad120251c25e2a84069de39121be8b78fee517e19dbb2a629ec9b12ca32577e94449356a060a15c76e280e0dd72

  • SSDEEP

    768:Sr88vBc9kQr8HHpHdhzY1/F69iNcwK13MQglvbfRFug:SFpc9kQr8nVdhzY1/F69iNnP

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0902e58eb5eee42a288ada1822b7ed92_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2136
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2136 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2848

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    ade692acd44dd5ec9a7ccc2772f40c37

    SHA1

    4fa50def3cd0d8b536e9d3e7035af1f62bc583db

    SHA256

    16256ae5e3752029b3434bdce253430ac85cb0af045262538658911b007947ca

    SHA512

    0fcfa1a4a1c50791110f8acab2bfea7739dde82ce96b2f883268e39ae21d68394b6de4ea78ccff9bee3b8b4d654976d0441ce06074aace95aa9a7dd9f5b197d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    06436ab21330661ff745091c799b6884

    SHA1

    9a0b644baee94a20c84cc41c9d03cd6607777719

    SHA256

    f835ad1717208d9f35b3f9370e75a0018fb0c3d12d4bb70d58a7f751668750e4

    SHA512

    9eae18a40ec6156d540c5bad62c4a80776fb470234aafa0e5a96251bff6455692035213174807dbb1e69e4e163d15bbea558484ca74882896043da6617be4247

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    766df5289dfda8b86af7d4a394b7d824

    SHA1

    c09c7596299598694f3197cada367f3a2486ae8a

    SHA256

    6aa042cf612b1ac0b6e4683bf67ff535d185b433004d0c6b6139f61591a72e11

    SHA512

    46ff8ab79462fa607491815563574141fd82d4bcc8252ef248b6b1e2b4b8dac32f991ccd558b3e0338cd5b8272ea21d187f3687de0feb4d6a1d012393bf48983

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2095b114ebc00500085db8f5d40e5b0

    SHA1

    12633c1de11981f62a9b7903d91fd1eb0b7f9e11

    SHA256

    5a5e30115ea4c5b120e659efd3b27135e259be739909672e9dd77bb2c4e25f3d

    SHA512

    3d7c8790574a47f1358d1aa81392052779a1ef746658c5caf94dbdcc135529849c1bcfd2185f0845968fb7dfd11a42d5ab24b91dd4eb8b087a43f943225c8f18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a6788fabdab30027240f4bd95166293

    SHA1

    ef25d172030901d1cebb83afd82316632a9c3419

    SHA256

    50e1db30e8535c321a126c0307a468238061abb28d83d66a76f008cf2eecf1ed

    SHA512

    ff6b9f9a35327c9dc7b79e455bfedb8c7e3e905ebb9724fb0fd7d308bce439c24c0029c4b449f4e6d39efeabe4702bdd5f582f0b01cfcae02c65e52e727943e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc41a6e6d2fa313c9ddf9c8c96e38857

    SHA1

    9e79c74deabf6088d34362ffa0f4928e7a687205

    SHA256

    983d575f026222ffe8ae719fd7aafe000a68d190bd516736177699513e6b4af0

    SHA512

    48f02ab188d82a915ce88db1df601f94cdad5034d14e50e844e42826827e8180bb16121da1ecae848386e53eec54be9ce8adc51522411faa564e9185ab3e3402

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d77e0b1b3f542ecc10f9d10ac301005

    SHA1

    5492513f85af46238238f48e1c75ada1a65cf89a

    SHA256

    19c24c0c2b33fc89810877900c3b467a05cb32b5a72997988b4ae22dc9414c03

    SHA512

    b3e939b78a64d8f0e2680542a6b0ac068beee060f547b25766a40638805923e86cd1d39f8a468067c6c475c9071ddc710ac32cd8c18c6ebb51c34b616cf6f79d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c53ac5cf8eeb55bb680913ae69286af7

    SHA1

    c2c5bd655226ffd38326759fc0a1c3de3282de8e

    SHA256

    fb58d8f867a197ba380ff24e467aa423d103057fa4c65cf97133224eb98d2ce0

    SHA512

    1e3a9b91a25c31a68c1f99218ffc5aa06890c1bca551aa21cae11172cdacd0124e1360486109c6c62b3f0bbf6472aed0b5d8d819a6e55ffc84d1f5fe69426708

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60bd7b3685dec03e74b4e630ceef5b0d

    SHA1

    ef909063c884ac9eb18a9a467cb558e9671b8fbd

    SHA256

    1e3c951edfc91fbc6a3c156c9a2153348c0be043f1bb74da4c06e57219c6acc7

    SHA512

    6af0a5963a2fbc37957b77f6ddaa09a27e24ca495efc829a82235e3f9fec1220fb7604d6c478950a41a3560c62fca35595f3e0103fe343b7a773feabecc8072b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b1600bea9b7bb155aa295cbe819fb8f

    SHA1

    a8e0d8a82b365542c34fee0841e412b16cb59147

    SHA256

    b2931401bb10016f4914ae2e39766685752ef9bed86b7d86169af4d4dde7051b

    SHA512

    496bafc28dae6e3229bb868f5f81fdf8e6b8096e4da0da23a8c4bc51432f71746527aa79db94cbdd8484316ed028653ecd91e0697a72d7596521f54e1212ea53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a76bc6eeef781aee7b4788150ba59ee0

    SHA1

    f9df56a776e1f3e15f299ceca2c1edb456a629d4

    SHA256

    2ebcde528b9010343e8d1b2176cb4a2646316393df6bf73bc3eab02ec48ee247

    SHA512

    9246469ac62372e3feff3c26e1a370efde4a5e147b5ba3f1fd75d22052a0c369afb476c5d4889a2f4e18d633ae7c1bc3763fe7df65913be29c1cab6e2cdefdfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0797d0d98626fbcb66b6cceda9b4ffce

    SHA1

    890d1e23717f288f7cf607b33db4251b813f2825

    SHA256

    cf73e1b6771d94a6f0edfe5aa1a9106305e71c2041189208fab96025d2b755d8

    SHA512

    f0f8f231b652ea514fd0c507516b20011c14b71005b144427d38825fc6d6f645401b3be20a8cb5582899d4270992a583cf04cec00323a70453722eba6a72c594

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4b82aa11189b6deb2efa1148cc13650

    SHA1

    347db9e791e7eea619a5209fa180cf5f8e6919ae

    SHA256

    4ed1ef4ec847a49d256a92923632a22122cd16a9f46a670c2d60ea218642aaeb

    SHA512

    0deed6773ef825de424c89805234d0de79e8b6efd8351c0a7de2e6fc5285946756e3c601ee4654491ee11f463b9ac1d22376f106146c9136c21b304287af2f00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01ce3e03778c579a709f2adfb546a325

    SHA1

    0819fead0da586091c5e25a11b23d017b8a881ee

    SHA256

    6b46a740dc9eb3965930b68fae93f743afa58e8da27982b881f29ed0a56f3d81

    SHA512

    47fa4a7c30c941b57d7f9ac7b5e9fbce98119cb15c207e26d409a1668579059a1c78df27fd4e6a9d77f8f7b2a2feeffc5f8898043b41b4d2c6a01c32bbe0f8ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1911032c5fabff52245b7d3ec16f36af

    SHA1

    25cfbf7a1159f141fda5033c8fb456ed262cd530

    SHA256

    abe81423a27ae8d7913d3624155f546f85c9d0d8cc7c3afc59ce8783e2d7d988

    SHA512

    0d1c06f896fa1f7587ccdbaf03c2d32170049ea66be2d05e451106012352e9f58c5c4bf6bed8dc785eedcd1d98d30fc79b0ec0d9718cb806b39fdf4e0ff0e0fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4cca4268cd9ba5c97d8f8bf8e91bd527

    SHA1

    4974111459254b77ca7a5833465f75e8fccccc69

    SHA256

    ea3d57ed49bea32b50a632d43fbb627fa4284174245480b67a176330cccce0c2

    SHA512

    560843b9af3598b461e5e080bfab7db4ef84c3240333effc619c6cbd2a90c93f623d25da477ec458840785acc747b209c5bf2462346aefc9324f6d12e6a32372

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    abb0e2f6f27cd81d87b7b0856a4b049f

    SHA1

    de45135cf06ea1ffa493add708d3d3503be20faa

    SHA256

    e5e24b937de2d846d309f4110c03fff40e78fae860042202c9511443ddfcc0db

    SHA512

    98de6a66127b488380281e613108707d8a68af187111bc26bc6126529d28efc0d5c038a9434b7b28de563ad412559953dd362da9057b442cc4989d9b8179d2f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73f225e040f98c2bc3245d11f9becc46

    SHA1

    0b1c951c23dee644f35a04997ab1fdffe21191cd

    SHA256

    13783fca05a3f85577bc153fdd626faad76f2aa5b1e0b810fcad7dc8a9ab650a

    SHA512

    e8a084c7d14f813ac34a78344787a6be4eed2cebc1a8ddf41993e4cc4c3947c1ac4a898d4a220cca5c70a86af6d188fbb758392c7fdfd390bbf13ca2f9cc1cdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c20c5f70c62d53e508b819f42b31691

    SHA1

    096637e806725c6e4ace6e37bc1742f76ca8e154

    SHA256

    1f8b6e67e57d810122dda72ea269a6b2821640ccf2c0e10b8dcb4d542223f68f

    SHA512

    e359021d6e02b65193c4e67a01e0955e66a56c621eff9cb41cf6217504af3ec705b2aeb1e7b7eba2a392d28d7a241cd9f961defb88a834c791701478fca52ba9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d2f1eb5edf4971ef06fe2ab955e884f5

    SHA1

    7d77c520e1d475ab68e7661289ec44cfcadecd11

    SHA256

    1c56cffb4a1773a4f406e57c0369a2e9a7847a7c73cee2c9b3151984bea8c5eb

    SHA512

    0e4ed0af63ee3564c8ec38e51d11841cc182a26f11f2bff5ec589439380129e8113fbb3ea12ed598778724301dec6ebda52bb7b14b23048b57c3d5355c54286b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    70552c600c553e8b38eadec8a7541070

    SHA1

    0c878b3d987f0dc0da2442a6b828e4f24bb109e1

    SHA256

    35a2014b276b77d2ce7d410491d31a4ad9a08cacbb2702d70791c7e669194cbb

    SHA512

    fca03bc9d08d3ab647c06f4500336eef70cdb74b8c413c24de425c3b27583f7cd1f68a415092427e8fbfb4338d3ad351a9692d49c7212727c1051b6e8f2e9749

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6324bbb542e351afaf7ae8f370233d7b

    SHA1

    5ce464415fb2536166db4bc559456207f6e268a3

    SHA256

    827170f6b9e9b70235b73476555ab08c09a137a1fcf92780aeec7f54470e40b6

    SHA512

    f10c26b4de8b157f4e162f1812c83ccf3fa812113f4603504745c6da15a26ffade0090bb8a5ece4be716d9ac512ffbbfe8993d815b455d5e9886d8a8dea947c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6879865e81c14e1e0156a01910ec6aa

    SHA1

    c65274fce3dcd0c39b2e46236c7f56a9fa108cc5

    SHA256

    29222be2f665ae8523909f4d51d08944647f31868305e985ff8ba89c30572cfa

    SHA512

    952bb0870603c080d99370163fd50bfad956d4680acf536f949fb0b458f12b3dd7c13a64dd72ab028800bcfefa3d9b1fd88d4ee9d42f639f3c3ca9b826a29df1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a593cc9775686c7a7a0b52ca3006dda5

    SHA1

    699e8feb945cce14d6e84ad9ca923dea42aab4e6

    SHA256

    5dbb505e4f51e36e13f906ca84bf7da259d3a3863bef86dc8bc8f85c359e1938

    SHA512

    7b2a951ed9dd45e267ecabbf82353713f7b6dbb45e6be78442d1ba64b44b72fc9643dae57eea6d20458fe2d1ddeb458b206275feaf6d2c0754fdf0ddd472179f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    cbe7d9f12ff2bbbf991a2f6075ae1a68

    SHA1

    a43cbcae8baefcf6ae5c380c888152eee6569589

    SHA256

    02d2dfd4e37c5361fcd922e542e4e0c3a951204852e030efc8261b7b07d75936

    SHA512

    30cf5ca88c78d5ef597bff754b2bb5b8c9d66d5086d942f24be203739f7c57773cffc4c45417c636802042c391725583ad83fd7dc5c899319b3bc11b13058a6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3TP8P9TP\f[1].txt

    Filesize

    175KB

    MD5

    acaea17b053a27ca1fd13b07d28c15bc

    SHA1

    976467639d04ebe9941f84af53d2ec1d91225d38

    SHA256

    aef844b31f983041852595608f9f2babaf584233840b325849fd7a7452ec91a0

    SHA512

    cf801c03db877f3e4b8b64a94806c6654c766cb9b2e244c80bc9252c1e3966ed790f52a7c2db773315bf1cc7c047337c6322b6592ceff34f8b1547a86e19f861

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CRQ4GXJZ\suspendedpage[1].htm

    Filesize

    7KB

    MD5

    b9c7e93ca996b9111dd7550e91bb70ec

    SHA1

    3aa2c5ec5125bcec1c3c55415df34e5c7bb551e2

    SHA256

    c9b7b67929982955790ea67f0bc725c4399366d0b4d34d0712aa710f9fe09ed5

    SHA512

    0a9fff7121c626c39a4c33b92bfa452d1002f72fd02c4bfb414cac2da9ca793ffcde637effcf42fe3561ef5df82f33248cac9dc0402525fdd8867ee913993c7b

  • C:\Users\Admin\AppData\Local\Temp\Cab8E6.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarA14.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a