Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    137s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 08:03

General

  • Target

    11cd8aeb4492c93bde4365c40ed125ed_JaffaCakes118.html

  • Size

    31KB

  • MD5

    11cd8aeb4492c93bde4365c40ed125ed

  • SHA1

    70230613b76e7f35b085887dc0b1850be79b34b6

  • SHA256

    e23c95d9ff247401f58d3a46952a82964bd83f3e63c15bebbc7c6a90636c5fbe

  • SHA512

    efa653017e97a3f35d1c4acafec2f757c1ebfce649cc650afae8b92745b82a56902ff9d1e80156b3ca13015e64dd1f6c2a39926bd5b76f8be288eaac4d91d8c8

  • SSDEEP

    768:SglG8Xe/3cfZggrPSjn6DBdh+5Y3Os2squjru1bLQY:S6XQcfZggrPS74Bdh+5Y3Okc

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\11cd8aeb4492c93bde4365c40ed125ed_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1288
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1288 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2624

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    81032e8c78218eb57bc7b1a058ed7b04

    SHA1

    64bc9d9213ad323f53e68209ce943640d2ba2d8a

    SHA256

    683a3c4a002e6f6e83bb8297adb6776bc4d722abcaa87a3d6f2c843b29c42fe3

    SHA512

    07dfc93e628505cc76d20ce80e34a5db6a982593a49d8ca03a6dcc577ca8625888827cd4426e6bd9323a3a99d801971aa666b17cd61b69488bb44f223ef0ae5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77ceb6f6c6ec07e3a4e7f13606d43754

    SHA1

    e0154231653902cf517e7eff282400a1789de17e

    SHA256

    7a0535804f134a10abc913b0357d8e64a337abdc0b68e7d22444e32a579fa233

    SHA512

    5416a62dab9f2ebed0b1ad8bbc8d2ebb0dfbd5d04cab4a30651ec0b4062fde0aac55b8360ff94801491e9336aa4fd34a16b6ad2f4445cd6c1a73b74965f18351

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d767ef30f900b14f4d8d965e34fc76b4

    SHA1

    755a696e80075ff63c294921a44dec4683eb259d

    SHA256

    45e5137ffb36977cbf19b1e911bfc457debf7cfdcf1299de5901d0ff9961c89d

    SHA512

    cb56e267b73e3293f6304e28f21b6d1e132ef6d19725b3b8fc058ff38a2ef328864539b56fc3d202fe6b3b8af0a1c83f79de0172aab1b1bc5106ba5a1d51660b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a5197f6d9785ba5c0bd7528f63c46d7

    SHA1

    19f8f28ac07b767fcb2a7d6d19232b59317d610a

    SHA256

    8eab3a71f66e338d3b1370020d2b573f5c93cb732d93f61b42d6e6abca544e9e

    SHA512

    602e166b0c50a4c450428003961bc58414bb079ae53a744a2796fadb013f881fec9163d306d9b86607ff14ee20b5406b92d54b4b75c1149ef8027140c93acaa1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9c37f980cf73b3a74a62ab88e1af25b

    SHA1

    2048db7688ddb860aad65543bedae7f472827a3b

    SHA256

    7228f3c97f91bce2f9a86885285b7bb5eeb81cb2640faa0f45714e6784cdd0bc

    SHA512

    70576b7008c764e612bed14754cad7e867574527b9a237275861546b4ff90d1e0f326f54146ee791dfe779e0ea813cef8d5fd179905bebf9cecaa8f40a04a34a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6925f1534034d278d88cf6848fec93ab

    SHA1

    e2b34fa43d270eea87ff54ffba1202eedc336920

    SHA256

    88fadd6fe0044ae299a54403557b5428db99d302ddba872191f5873304d1eec1

    SHA512

    d9163d8970e91e670c7c387840ab83006a7468360070611c243b7947a203f9a85b6e462b9232d7f417e4bed24279fdffe5df4ffeebb86328e48997f9d2ae3830

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1346ea29e81ad0503e1467fe4c9ea676

    SHA1

    605db6f0cebda531f649eea5829e4d6b3f582a65

    SHA256

    e2055f0dbf6d66d279bb31216a6d6eb831db1b02e75e7b56e8e91e6a9e3bd625

    SHA512

    46df894de56ca46846a0961b7d03f0e31f06578a0eebb7dedd3acad79f757a864e8b4fdf57a5d3775081fd317cf4775c879414e6368e6d155106bd5dd8f9f608

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50828af132a726cfc9bd5bc30018bd4e

    SHA1

    ae6d04534336d5b3d0d32541dc1adbc1b6f4d4f8

    SHA256

    d8db5c2ad60465bebc25d1810cef64730440255f342e4f1f0f79be7296752706

    SHA512

    d5f2ad280929e68b098f2b5d61cbfce2df3092be5d2f827b0b4f6e994cee62c79a8f9729a954bb58d42ec96352397065ea15ac25d1ee477203fad5a27f3fa2f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d94e899dd8e30d043144ab49bb620a68

    SHA1

    645a2292e072eaae22fce8c426c6ecefcade7381

    SHA256

    12a12e7fe39ca4cd1b86d7c9a1c8a69f0787b2af4370d33b2cbbd5625ecd353b

    SHA512

    9f2a443815109bf7c6b7366f340a5b40a95c16935f1901909b533a10738740e96e00bf8596b3608bc4fc515c866f2606905fcde893cbbc1e0eb605c26563112f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55e7410c3efcaffbb32c26843ee699f5

    SHA1

    40092d0385f229777fec62fffd84b662ed77ba28

    SHA256

    9381829cd8c734416f9c74dabb0fbfcd05073c3203ef9d5180bbe7b96916ae3c

    SHA512

    2407abadcdd0dd9871f7c2083709d3da623469bfbcd35d87825c76aaeeae0e75c6f39a92e92a76b1273851ed311552f33fe84aed980f0d0d0a4ee84d921c2d35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ffbf567ba786dbf4f80165cf8fb45f96

    SHA1

    79b3071a5a564bd0d29cff9812bfe32907044aa4

    SHA256

    36ba98f1e146c338f51c1578c48897cbe103a58b12def23730fd23c9fef717e4

    SHA512

    123b85e2f0cc3ffc7c687f7ad343b49645d14bbf32ea7998d817bd8afb40da7c8eb8cdf91933c5c4ebbe7e1f8b29da5406b40d34e8487711632437998ac2188a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3181746c81c5ee5bb725973bd5769737

    SHA1

    4fd0a698ba4166ac20dc7f3971ca29d241d6427c

    SHA256

    97790814be71effec6c5dd0d6a4a70aa550bc1be9bc079b0641bc02e49fa7a61

    SHA512

    56953d5c85231d871ae6b17ad4c06c714cee29e776c8c61a0b8ff1fd8293853d63cd4ad79300a74193ea117ccf6af963a2ced3f8401f90bd5990f90ad6023481

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    186315db459bfcff5a0b60dfad73f78a

    SHA1

    ad04f8d4971bb3b20919887ece4be2a8c4b12631

    SHA256

    4f15d9c58b2ad5491ac23d20a6404faaeabb0f8c0d4b7413945ee8b2b3dff1b8

    SHA512

    85d3fdfe56ea8e6d2b2d160481baaa950d35c6fda954f88492bf7d1d528a715c01051d768b541bf17450a2fdddad758d87ed6eb911a072b90fa89fc287169e76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d4633f71bfe7df883deb5141e3f60c3

    SHA1

    d2c8f21a7a7aba4f971997e51a4616ebafb60a16

    SHA256

    f3353ee9153101ad40bececcfdb088d061e9022ac57c32411a981cb2c5eb9573

    SHA512

    2f7a159e2901d3ce8cff677f5f2f4ee7964cc6c284e57bbc98af417b80e86bb07f3708a695378283963fde0649689aa0335155e23bc27a267e544d7e2b415144

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    377b8b22fff0b1104bb9e667ba531921

    SHA1

    cb0b0ad8f917c861c662f144bae942a9e07f102f

    SHA256

    1d7647251fb0738ac550e4119dd39003610ffe94bd82d8aeb514d6f2952a3f39

    SHA512

    2b8577b03025b9b09872465fd83902c200f41fb240fd18e29f3ebe65c07fae73841f574a44177c9191000ba7ee5f75c2c7a0dbeba0f453316209e61f8889da6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d8778c06bac151652825d6a71c78f9d

    SHA1

    80acdb040422545bc6421e515be82bff3c89308c

    SHA256

    ef1be58092c48bba0203ea7990696d452d94f8d5b7d4a7c2c35f52daccb900ce

    SHA512

    f6359211a00f0d631e6b1ad29cc98d68227ca1ad5c84c8e457c805391e62aa7316fef0eff450683becc5dfb391bcf17bb8d31e2ead420dfd069c66118c470f84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b23e40b09bb7701f01161636812dc7b0

    SHA1

    ad816dd22773d1905fe05c63c9603332254ac736

    SHA256

    facb8656a0f81ca27dfc16c32a77e79c1980d641234bde46fb57a2ac7c5c375a

    SHA512

    4eb555f4a6d86dd3a6423a1a84d2eaf516084f71e0de484761e3b1d64cee77d93a969d523b4391a8895269b3381578c59c22b63265902ac770ca58c0c34a1034

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c101a3f760c6b349da44082fc04f0ec6

    SHA1

    b8fd8ded7c2f5cd235be8d9bb6c99fc2b4ff61b8

    SHA256

    7d4cd76db02feff7afb2da54fbb640847327caeb127c1f32390e342dcfe2d915

    SHA512

    d6763b94c8efde0d9bac9bdd0e60a6638a8e65bf8bb45c181950c19d9c241a6d510888b343549ca0098dd9451e0d14e476836dc525cbd53f4268bcc0e535ad6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0a9e342f80e6bdba2d5b2ad3a7361a9

    SHA1

    9782a50c1a9b9ff0a3062e2183d01450ac51b68f

    SHA256

    e1cd79ced8ab77dca0eec2902f8a4bf337966d002c7bb7aa4c7e00c6390db099

    SHA512

    a1836ea6046605283de2252404902a57ca3ba96d6065c2f89be97e175ed11fbf1d92392affc7e1b7caacebc59d5f14ed8a8c026264c0f49e2bf3053ca64677b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    529359306dde7dff28d06510e2e84017

    SHA1

    f2ff5f687fdc4c8ba05fc1857af91ff7d6cdec15

    SHA256

    8b32201019a4338c6b6852677d93f3c644555aa0f41bd838c72c13debaddd881

    SHA512

    0cb6cf9efc5809473007d45867d9c8d8fa5b2691ffd68a66742d4b8b7b000696cc49b0cb30c0711a82af4f9c15da0d85f3571daaf6dcdebc4ef0942444cf8bd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13c0031252946ca79a07e9b7b2e46c0f

    SHA1

    a0871dede601547600507aa4730abab878cf8663

    SHA256

    6c19f01d9bd5c211f16157415a79b7277009ae6db59fc9f96d64703e58c8652c

    SHA512

    e9b303c67369aec531c013447475139efd256e00c47eb0dae7fdd1bea222bc21eb9348aea601576adb0d93180f6ec28c145958efdb20f3063754cc6d8a344f52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    9ed7c39338f0d401c33c6b387c39e6ad

    SHA1

    b3a3e51501c22ea6dab93105c53c78ee1221aadb

    SHA256

    3605b4d6e36e2e880c0c8d85e6c9dbdc443988a598e7e46b78fc8b7ee8205dfb

    SHA512

    bc295cf5ec71b9cbbe365a1b546af4ed8f0cffb993fc51a893b1c1686c687082d081b2c933244ba95d3a3cc154af296419c3182a1b0e20d8455c0d9960b28c90

  • C:\Users\Admin\AppData\Local\Temp\Cab1046.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1059.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar1DC7.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a