Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 18:43

General

  • Target

    140137ab8c59ae7dc2a59d94b4d5e829_JaffaCakes118.html

  • Size

    14KB

  • MD5

    140137ab8c59ae7dc2a59d94b4d5e829

  • SHA1

    2b23094470db41fddf0d1599c980ffe5eaa39bf1

  • SHA256

    df9a2a708a32c8bf3a305e0e3f0c2b2e9f4195ea3256e1bb4ac1088b2bbd84c8

  • SHA512

    ff249e325c566648b538e35b3d89ec1e8c216175f48e943d52e06015ab1a9f492e36a136e663e4dcfa04f129f38edf21290a496cc3870c3cf9bc72f693729932

  • SSDEEP

    192:GGGqWZwmOj9gxbDcrxN0zRfF3jjlyQQ7nVfBibfBrJ1iDuv7Ysv7DjCfhGGrqhrL:GFZwmOjobUCn3jjynmrYjKjCfoRfFqM

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\140137ab8c59ae7dc2a59d94b4d5e829_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1992
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1992 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2880

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    6f6a38d5dce5b64eb3a19d4e593218ec

    SHA1

    65191decf692e988e398b330b6f0748d772dff6e

    SHA256

    6009a6511f0958f9833a27af882e555e71f5ffa8d7c210ae836af5ea16d2a795

    SHA512

    f2e013a04b6d0d8e3afc1543d83f13aa295ad6f8bae864b13ac224760bc1e13b99322dd3733fd7ffa7208500e7de7b2e7cb43f6b10c8b9f0dc409eb4a1cd1abc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98d129b4a57762426a413a94716d2829

    SHA1

    a65412dd17436355d534fc537db7dca8f3f0c89b

    SHA256

    a5d80fbabfc0dd29a84768541f6f1d41c715563504c1e9b7cc79f4fe83fd4ba7

    SHA512

    c745756e584961bddcf13d560da1fac81df8d0ea38ee8acb5d8cff0010936235176a3543144fadc0128039d9245f7dc73f6d92969ba6a7939e1adfd4bbdf2fa1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    438532fe23a276979fe34d7a3cb9db22

    SHA1

    7379e226695ef678f382c098be304b57f6510f78

    SHA256

    12fa21129304e86f5625c022b9dfad0a97f1daf61efdee12fe448691bef18ad2

    SHA512

    e08ee65de6a2132ded17ebb0e69015112fc24bf573cd1b9817fb2484df5c8e7729e29366f8522fbb82ddf774ab90212cf2deaa23c395a3a08ceea49f0d3e14e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    347c978631d389a79fd942ed8e6ecddb

    SHA1

    81aa82806277e1a582a8f151eaaec2707d5ccfea

    SHA256

    af9f2e976ecaefa162fc6bad2504730e51a7f85d130f7b38cc3c30f261d9c000

    SHA512

    e7fc2783a544c7b809f8c49fef9d6da0b649c00d449fccf8c97fa0d8c131b097cf1a6003ea8a4839861ec5175c2b7bb49f297c5f3acd1c85e82a6fca33a3ff5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    268b6f8ed9efae9cecdc92551211a0e5

    SHA1

    9f00a887bf9145e7d1d44e2691eddaaa147e1251

    SHA256

    9bcc8511588c5209e38e6add0353529b803710ebc70efa9abf92b6a8b9568dfe

    SHA512

    83f98446cfb9cfcd0763bf8a19e9c444d5f37b6f5f010a42dda155e3bbc012465b5a0705d31d6ffea0cd8fad57066002c99e5ac63c3de671c80aec4d3549db56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a722a15a8777a60a91107f67855f0d5

    SHA1

    06887e1f4626402dda2a15b0a6ec11c8f59623f1

    SHA256

    41e635040257a32bfb0feffb4aa6625eac14a0dd9a32a034109533d82cb3aa5c

    SHA512

    7bdbac215361f8dc6eef6d7c85138ae23c65484d160001e5871e9fda8d79fd929796143156eb014c7e0800ce28785ce6fef0974cd1895ab38d0c6da756c1479e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb01d3f3d7e975e3dd4aba0e53cc5235

    SHA1

    1fcf78076e1e3e59dc5b360f3d18ef88081df4c9

    SHA256

    ecadcaccf52b683016dad10b9c2f0b6f9b4d331c735a3672b7cf470f858e8437

    SHA512

    2afc1fd676a4e6ef5ab74de8fc24c3a07218edc062f863f801b0b346bb6904311b878773a88411613b5ce9b07e12a6f224e8a5dec1b1781b7f07b58ae36f80f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    68d4402a6fdc46e34a846385638851bd

    SHA1

    743cfd63090e3dd5cfa95efe96a9d47554f1e8bb

    SHA256

    e263740c3d7a0b79f6d0bb3451702eb5a128e1aeaf00c240d97cd69badbd144c

    SHA512

    a4923b67a24ff8f0e04d24a510f58d34833071ddf2b8544d903977f2a8ffd8cafa39a96013eacff44efde69da8a16579be245d08e21cd47bb96ebf13bdeda0d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09320f99a93c225ba8da570b6c98b0ce

    SHA1

    f403eff9b120ef16ddc9fe48b24d7e65e21a2024

    SHA256

    d20986fb56bd702da6d1fed5cdf9fca655a47b61bfd68f06a09b706491eea06f

    SHA512

    3656067078acb72590eb928d95e64989ea8a983127acfcf1f766557f55b1f963a8945ee87ab2a93a0aedd32b1a7e34357f3f20688163879cdf298f2abffea37f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    662f209713c2aa0525304b584a051c0a

    SHA1

    e3107089ee9983a2c6446489b96fb914f5b57042

    SHA256

    fb9651ff7c0ad844b9d508f89c9c35745c054642d0b6a9681c7a9f0f04586e5b

    SHA512

    44aeddcf667d3c23f6482389d7062336feb1d483578761dcfa22c0eefe43cede6f904d3b36688592a47d403d9e6598ddcef56ba153dca6a508bafacd1a1eb5e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    410b83dc46707fbc211b6448cd368a82

    SHA1

    835f1f4008047d22871c996b55672e898ff9a1a6

    SHA256

    0f3496d502e071e01d910b6d1269b7f9482e84f45618b5e19001d3d790f19d58

    SHA512

    21d45ce69d0f3d164bd8355eb36cf9c5b731fa6e07535378442a447ff0421a744d47b19fbf9d4e048d44f4fe8165cdd207db2e92007a5ec8c2ebaf96f42c2515

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba17e29d9dc976e5c078fff630e14948

    SHA1

    b6f2ff4d2bd1beebfec90b892aa78e7e94cffad4

    SHA256

    1648740ee27bb3859eefc04109e4220e1f6accb7263d47a8dc10be5671b1171e

    SHA512

    fbe48d53862b23e955739da6a1f669d38d10a41bbd727baa41b9365c77e6681af9e6f4c64bde6746b62a234bdbe9012d8f92bc53b4915134cdb5522e164164a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e6ee8808554eb6df526822d88654c4e3

    SHA1

    ba050fd841b9de24f7b30189b733b75cb2757972

    SHA256

    1a61a8117cf425fbb454ece3884bbb6a0edc8b3cae3b3422172450a0d7c490b7

    SHA512

    39805856cc7ec2fe13a36bc95ee588c7cb50cd9b7c5bbb3d295811bce4d5645b006cd0fd4f7bda39ea16d028239f9b43e425d1bd6af6a9154793f9ff3892b565

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10b9c5ab64e017a0953e1fb13e533046

    SHA1

    2a0459125154de619e5c5e0a80f134db4c02348b

    SHA256

    b715671afbfa8a3db6c301d90644f39e96aed46c285360a8f0ad37745cd8883d

    SHA512

    08e86426eb37996268692cc816962b0e565a3d531b6884ab5ebea4c12133633fbc2d6c0578e003128343cfc0576020e840332a8a967e11c07a0fe3c433563cf8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8aa67c7584576ab0cd46793f777389b0

    SHA1

    0449f91a7501fc66318c9809a96c89febddded38

    SHA256

    a9c2b13dc2378b1945d9d34daa0bd6ab998df949a05226e1c7b6ab8323d73f3e

    SHA512

    2964efa49aeb21ba4788fd1ddb785559a6a9a07a93eaaa6dd343c16eb216a9a2f7e42e86a453c5ac8655c2759de79fd3958a4877214391d2872462c67b9b635e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee75fcf505463fbd02881a5b26147be1

    SHA1

    f816fa70e59428827f0fbbaebe1ee52e7c92119c

    SHA256

    f6c6491c1cabdbf06577ce7c34431e412f91196c03dd87858ee10e185527bb7f

    SHA512

    1b8d6b98ae5af169bb440cdf499d49826969cf230792a32df810b9b087b4a0cf06f09ec8e1f55e9f05206d0d224f748e3d5c781c038e902df79148ef3b410929

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e006283014e41f75e9c273dfd184988

    SHA1

    52b1df4783906c02929acaf3d85263c86bf4c260

    SHA256

    692a0ae87ba77d766df5d039d1f1e66618ad93545f6d8d2185edd7cb673d144a

    SHA512

    78c3b4d7c942bf7b219a1ddcf644a3f12128d5203c74560b9b9a7729d64f08da8e3317970b31d99a6d7bb71e962c32e6c5cfe417b1d0a91aaf0ea50cb00406c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9c9216ff0ed57ad89799c708fc7a5c7

    SHA1

    ef277101e4f1dd2f1cf1b848d4aaa2acf6f8bb68

    SHA256

    a45bd4441cbb93ae1aca46dd0f96750c92fe7f99133d658c8b6b1d3f7e15ccef

    SHA512

    c0e66dcd7037bd3124e8035ccafedf00db058406a919215eef78ae8cb9fa8e3d8908933b186ea3295c5db764517cb270482f4875befe36056a7e6d77c2c0e30b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2fa3bf7c85e6e0e9803943c074ec8bb0

    SHA1

    796454efa5da5e5519e058838593ca42e5f5aed0

    SHA256

    9a3652822cb54a95b8c8bcadee4b1788f0e8ad611045ffc93e10c0e57aa33cc6

    SHA512

    7d119db77f4dfbb5c5187cc3eb2c6e443ab8562a77db0cd352e6d4843ca76bc5b6e62c94a8c1b91875d0ccfdd49dbfeb9f03e21455be94516f2f3239f89882c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59f282d7e43c69f12a94450a491d010b

    SHA1

    90a0c2d1e1b2ae8bea2778fd9dc0e2a44da5611b

    SHA256

    4c2bf3c2713bfa1dc3c06652a61d33b9c681df6a0e684a2bc5fae2062880c311

    SHA512

    510a51cd605bf55d512a6884c90865ccf280270589ed1c1a9b0ab9410d1f0f0d305e01895b6a4327579ffeae87ba989b63f7eb31074c63d612b93fd00fa48666

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e517639bfc453cb5ac3970a73c14015b

    SHA1

    5dfe81d52870249d3bfd8432db2dfa8598421fa7

    SHA256

    e736e84dcf286c5253c72370404d0f7c5d4953816a49ec6a6f2f204caa02c0e7

    SHA512

    06615c8af1c9b1366cac45e60a90ae63fcaf2dd1b3298024173f478828ec2b69beedb768199519d762ed1a533cda96f2bf2c96c40d2683ee6ab227dc8f7ca68c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    da1befea73587c5b3855318d2f580e06

    SHA1

    f584b8030f7e8e4c7cf909ccbc2e5968523417bd

    SHA256

    176b4500f86e0343d096190023d03f0b136e4fe5746ed6a120e59c43689c16c0

    SHA512

    33d2ad87c3bda8a995cd553d7dd343d9e6b23af2871f530a917d91eb15983733d37cdcae2749334526764141d4f7cfecd3c8ae56c4a2aee91d3eb1e35c31aaa2

  • C:\Users\Admin\AppData\Local\Temp\Cab33CE.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab349D.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar33E0.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar34B1.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a