Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07/05/2024, 07:13

General

  • Target

    1fd8ae580c345516582a65c3d219553f_JaffaCakes118.html

  • Size

    28KB

  • MD5

    1fd8ae580c345516582a65c3d219553f

  • SHA1

    82564562e7a96dde270843dcd5799a9ca8209380

  • SHA256

    85369d8d8787002d3c5578dc21a64a8dcb1ba2332bcf83a7224d277a92aee2cb

  • SHA512

    bbcf0be32860f08043915b6280bd947a953dba40c777bdbdbf0514fcd09a592e4a86157f57939cc1c02e83e03aa77f26f8c1f39e28f009bbd8eebab391bd8222

  • SSDEEP

    384:fkdOJeE36Krz9boCKDPu8x88hSG03vbIRAyUuINBo5Ss+yFlN2:VeE3Zrz9boCKDPuNibUu83A8

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1fd8ae580c345516582a65c3d219553f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1540
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1540 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2940

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e9f9054f6870ec54debc5cbca991fdd

    SHA1

    3b4bcd4c6c68ee78b12a24db72003efca5d85f02

    SHA256

    98db28f0d75dbd08c0a9b84e6fafcb2d32b3d5791c35d72e622df6d704b6cca6

    SHA512

    b0709b03b715a125e1ab4a877b452106b55f7d9383194be7fe28d055df53572c8ed143862a97017146204080c65b19020fbb7fcd358ce958a6abbe3b736aa2b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c4c3cc2cf63a1fe00c4404a909f39e2

    SHA1

    0a6d8055eb0bb199888fc840aaa74b6deedfc62b

    SHA256

    f8aa8550d7cbebdd92988c82ab1c2aa9765154bf05f20b53d4d96afad06a60ab

    SHA512

    ffbb8c7f39cf7a0e4ba075c611df7afdd8ba6f66b83eb6a2e91d77b3041909cf4c3e36facd68875861810a84eecd93b44f3c48b8774a1fa338c10452c68773eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f589de77d6277238556becc7a70cc1ac

    SHA1

    132e47f3e5f29df9ab1456105a551d994fec53b9

    SHA256

    c7edcdf3bd01ddbc82b4156f367edef33b961b0373e2d663ff238be6c8bddbd7

    SHA512

    05db98947dd8df413f7c046cc966c9b082897fab1d1edf662a6b413c44e21f2b9536b8f651f76f32ba93b9b51399a077fa52a55500df0e46832a104ed6eae142

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3967852d956ba58b4b7de2f824d04f3

    SHA1

    8500a461e110139e31226883f6e2f4fccd6a1023

    SHA256

    ee66870f2e15503f97b58ff7dc8a353108a2bc07b74d1846f1ce0c41ff61d7a2

    SHA512

    07668d44248097607ff30be359c838fbd4697b2b55c3c1e27d5feb37a90619ab91bad1d2f63ab3d36cbefa52d0cb894fbe1f8d49ae2d89f4705fef40cc02c13b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    663960a0f96769c61a8b1488dbac22b3

    SHA1

    092e07ed6a37cfba3abb12c1f6cb2b710fec99c5

    SHA256

    e59dc2edb76e4a02b6fb450d4aa4028b9cfe9e644cc4ec8cf6d09c39524e8fb3

    SHA512

    7f85e2e862a5662d9d722f684ac8d0cfb885256c64f8754e230f0c3449dc186ebb03070e7b81386f778db7118817efd7301d874d0be6e83b5a2b4723cf157393

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a3c0804ce00838a93c5b12002b33927

    SHA1

    1a69286e4608995ff025cadc4ddbe6fde3cb059d

    SHA256

    281705c304b0ea8cc9a9899de700daf38504f811420ad8dcdd56716e9708a371

    SHA512

    236d948f5db33f7f015fe464f556a0776dc770bc907b260d9d0ae615163133577443d8ca1173188fe3f7ec3092d72f77ceaf9342bf102b67272e5940700cdc72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36f9c3a61daa4f85951fee3143e4701f

    SHA1

    1732c6b183c4f8922d681e2b2e107b8585decdaf

    SHA256

    c2116e904c91d2df143a372ac2a1ef10103230031ef11532d72126ee9627e547

    SHA512

    be5374aa2bab9407172a6a80ca5b9b47b1f19d7fc7d1acea81e453d633fd3cd5ee05d0ad378351db918d7969a6c49effd3394dd22fae57fbb3017e4ec76fbab9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6f06c6dbc2f611728c9d5e9b4e699a6

    SHA1

    09e4c66f226e9c3bc855cff144a08b3f2f9a2d50

    SHA256

    4e432a580230e66dbe0d0c727da968b66a383ffbae65d1f6bc123d9f0d7cd3b1

    SHA512

    dc04d3c197572777a94f942603c99c2069f2d9b4f935dc0f2ec39115ab98742cf515df71127ce67c3cee2422917f1021a5cf20e9f4b9e74cf8b9d7a6fda36bcb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d8783bcd98744ceedac2af67b017419

    SHA1

    b71a8851b50e1419fd7ed1138fc1fc6199a0c9d7

    SHA256

    9b9f32da67f0122aa308dff0b437fbec7f7efc05e38c2a0a01f9e36189ca1304

    SHA512

    8f369fdcb4895244dc4698a54934edd1c99a519bd5f488d0170de3cba3e32883613468f8add30bc9a515545d173533c4ff15c69ca10bb31b7aa7efcef00b7cc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9156c6a73f5dae96da49e451c3ddc249

    SHA1

    b28707098c1a6e87c83ca82e9a8fde42165ace03

    SHA256

    0ed6800aa2129952c731b3f8e137446c2155d01616422b76e6618f43694d2652

    SHA512

    290e9a7299074b92509ff1ea04df59608282d0b2a627ba24499366c38bda8c1103966cd3af3a6fba775d0dee5e85bfd8e0b7f34d57b881957182109421f2d26a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18c972313e9ed4fd70c1e6c6a0828d23

    SHA1

    5e4753e15c48e3282480bf3628739203b03784e0

    SHA256

    7100d4ccf90a1f1e061b9b4e7c7fbff44371a343d993c46e0c8a75b1f444a900

    SHA512

    5a79e32976d04416441ac7d0a9524a567eae42d76f8f775028c2d23e9ad65809e704188684db30651111a41a302fdb1eada67b48640486b928cef0e19225a17f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9366907571f5d7bc8d32d484f542eb5c

    SHA1

    c257a091c05c1e93e9510f05502d85af47aff7d0

    SHA256

    e8b72d46152c42095d096b211fb06cbee8a985dbbac3be8333557db2ca846122

    SHA512

    ed8b55a90e505eb6d48ea2be6422185e5526d64aaa2ce8517077ba26a7a443c2404a1f1fd3a9a251d48a552b558bf940bfc97928f6dcfae76c864e132fd4f59b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09089703cb8ce1f2d2fb5a1bad7fc93b

    SHA1

    27c2a8c919eb1d3e3061b48ecfa8326769d0f742

    SHA256

    7b778c8429e87d35775ad5a1af4e48e487f3ba6b90c7b029b56b076f1c44158a

    SHA512

    3f0afbac16513d96d77f784bd41862be32aec4ec3feaf25b01024f5b9d67ddb3c2b6da0c15de7e7bde2a497c26d7c231c9a268299dba0cabba0048e2f1426fc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ae75ba678818dda8f269a3dab38c3583

    SHA1

    60b65238cb41e2bc788d5c42edbd41407bc0a785

    SHA256

    e925c2fe9c1cb32eb5bbbf22757abbbc3f51a103f6dbe2dd3fd042ce383bb25e

    SHA512

    c4bb52a9cf764c7d3eb8faed116ebf1899901fb7baed72a4867512eece5bc50527e76410adf4ac9955514e9e09307255c1e5fe16538421d42e958ea2649d9fab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2cd526a0ac9c694ab98dce07a1575d1f

    SHA1

    5827b770d19cac422bf9e3594489351760f6e8b6

    SHA256

    fd2c482757f107103d2adea1806ebed80f60be3f872fcdb42b231c81b3d9ba46

    SHA512

    8e5b0380bf4bca689aa458c342644eaafa25bcf28801137a541cc8fe1068a7614accb95448b9123e09a2b339ea9c28c2c37971454701cce82a2011c38a115e76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    def630b0b91bac295d58194aef33f04b

    SHA1

    f7bd4447b2b5c80929b70a5d1fdefff137405a2e

    SHA256

    b9ca36bcd0d40bc950268a4d90d5d50dcf4cf2c3d6c74e31e61f11822ec7aeda

    SHA512

    d33545ea028c8d12917ccf9da54cf35b9344ccceda8bd0a6d6caac433cca578926ea36d474fae0306e8150b6590bcc63ba72cc7aa18bdafe6b72acd5ee590928

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1a26769dcdb548ff57f70699c08a2b2

    SHA1

    404d658bf69e6aaf704f293317d30a4a650ece6f

    SHA256

    dd7761de815db259513fb471c02ecb281b5ca009e02ada7bf2b1b63e9c4b6188

    SHA512

    554a1d6506b3bd6e7367d0ec3cd44d83c9dee031d55f84a641da831c1a774d2e2b4d84ab241c9f45fb11d3596245c5f25c84b82697ca189a93cf1c4ee01c28eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b56d56d45377422eb50a13c2faf2ef2e

    SHA1

    a1199b8505ed5c480e2668943f86cce0b8397ae4

    SHA256

    440114114c7f5129836fab54be7e8eef7d0fc653a6f51e2f10946a4cb425de7c

    SHA512

    898aa33d54551e0d97dc8b6b39f50ce228247a694b693ff881862eeef51a3ab34e4faf087c7a873632985b5b8cdb506e597e292f24d314f68ff20b669ad3de61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2504729c863d96967bf497430bf5a77c

    SHA1

    f3a9e135503a49b269f91dcd64bef157432aa06d

    SHA256

    ffe4cab06efc08f3888fc5b60f18527fe05fb227b0d59c525f7708e61fcf32f9

    SHA512

    8785fad9efb18cde6f1886811480803a8935de957aba780de3980b8a0e4328cb3218d501dd5688e14ca218d98eaf0989d168c75719d56fb9bb9a97ef5a5bec9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aba203daaaed46c1de1bee05478be348

    SHA1

    4481d18b621f05d14d49de21b5fa54292bfc858e

    SHA256

    a7ca2f5cffca2cc82cba9098aab71a88f0091e03a851bc365326df92f530bc8e

    SHA512

    b08c58148f65f655e7927f286786418cd86c7d2e67dada0cf28e1e3d024cfdc08730b40e8cf299218302ac2557f61dc6a79e53c4ec56373fbe58f168d1c8dce1

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U8A9A2DI\mootools-core[1].htm

    Filesize

    506B

    MD5

    fe8233954258cbce7838fb8b0a12aa0f

    SHA1

    83b0f8830d48f7dcec3535ca78ff480a968b0d2e

    SHA256

    73ba6161ca9663a3d5cb901db475b703ba7351acbfeca9c52d9495fb323f5218

    SHA512

    501867b8664402b32e30906a722338507b2b23e002928ad16531370a775c63fe7342719dd56813b8104cc71d85528699f27af9cc7f4c59319bcfdcd0a965636a

  • C:\Users\Admin\AppData\Local\Temp\Cab8A08.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar8B2A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a