Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    07/05/2024, 20:12

General

  • Target

    218bbdaa83b770a26f7733072d00f00f_JaffaCakes118.html

  • Size

    35KB

  • MD5

    218bbdaa83b770a26f7733072d00f00f

  • SHA1

    164755ee49e966972df087c5f7cf08eaf67ca31d

  • SHA256

    7340612156ed34f25460be0aa882171b2f74b206afd87c5e8fa27157ff48c2c7

  • SHA512

    ced489b65d89ad70c340cd4615a9857948a4f561736e6bdae1f313ea6b41b9e2892b7ea684fa49ba438d27bb401d84db733149a2db75699e67bcb72509a35468

  • SSDEEP

    768:zwx/MDTH3P88hARWZPXtE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6TL7P6SW66JDSD8w:Q/7bJxNV0ulS+/I8XK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\218bbdaa83b770a26f7733072d00f00f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1368
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1368 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1624

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    af14424bd91fa356e225129fe451aacc

    SHA1

    4046dc95051bf8382196ff1fec36326c22dc1aae

    SHA256

    26f7df2742be7eae0cecb3954ab69d2f1ad25c6b63a21e3a477ea34dee8301ae

    SHA512

    362068ce189ee00c318b574ebc8fc4f2e09add21f6c79aea8fe2f69ece44c0beaeb6c7fec7297a0b758ea5b8879ab0e9993c74ab262e200e289c05833e734179

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4A9377E7E528F7E56B69A81C500ABC24

    Filesize

    889B

    MD5

    3e455215095192e1b75d379fb187298a

    SHA1

    b1bc968bd4f49d622aa89a81f2150152a41d829c

    SHA256

    ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99

    SHA512

    54ba004d5435e8b10531431c392ed99776120d363808137de7eb59030463f863cadd02bdf918f596b6d20964b31725c2363cd7601799caa9360a1c36fe819fbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    724B

    MD5

    8202a1cd02e7d69597995cabbe881a12

    SHA1

    8858d9d934b7aa9330ee73de6c476acf19929ff6

    SHA256

    58f381c3a0a0ace6321da22e40bd44a597bd98b9c9390ab9258426b5cf75a7a5

    SHA512

    97ba9fceab995d4bef706f8deef99e06862999734ebe6a05832c710104479c6337cbf0a76e1c1e0f91566a61334dc100d837dfd049e20da765fe49def684f9c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    d9d8ee93cac6b0a64fd4ece7f677e5af

    SHA1

    64389a40fec9ff2c07bff1b3211a7e68dbe89c74

    SHA256

    3363245e565023d5ca29ead9d745ee603137b80eb2ec1eacebb6064b499ed480

    SHA512

    4c83dfb9e4b3c0b30356558bc4fe2cc5a52e44400300d600f9e1affef5987805b46ec9affa6020b35dc93c0301548cea2e3a9f01ddbced6fb8018593db721304

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    313f29991fe21db04c93cdba6969c2fe

    SHA1

    5525e01c6d29a446ca8b10fd4191c67a1bfc1180

    SHA256

    0d9b92d0777eefec2a348946f0f1714640606f6b8a213af25a7180ddd6e842ca

    SHA512

    0bab402a540bce4b4468730536911e9df098613227ce4d9c696b2e4841d2747048ea76518d4acf216dca625d2f728f795e60622b287d7f1100693b3b49136746

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    940cf30c55f2eb21a5b2b95d595f2659

    SHA1

    344268c1df2948e87d7e2c141dcfa081070493d8

    SHA256

    92bbacebe83894d3cb5428a1e807c835944abeb1634a53bcdda2e2aeeac2952b

    SHA512

    9d27a9d2da4becc89df59728d7bde0fa1aeca2ed31ebb4c75b8e7295bc4825fdfa6cc2465217410684a31c02fbe47b62a6c53b701b5940ea067168752078ab3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    718c355781379ca0de1d5af8aec4c323

    SHA1

    47137cd9a85df093951694b8001e5f7fc5e1d7c6

    SHA256

    cbe4a02ced976e5be0473ea78affe735c943293a75f110b524b6bea9371067ad

    SHA512

    80708774feb11d66e983cadf4f6bce379a2b578bb0828b198005765310716b4576bf2b2dbb7a1df1dad56a5ab13a592860a57b5a9d5af081e5a33350e99a9a2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37e3fbf656c0d494b93c36fa29db7118

    SHA1

    4f30a514654c65c405ff771dff3a8143a35909c4

    SHA256

    cf7c1221c61d8bbfb57a3caaa5094e9ff58242fc487904958a5cea30216a53d9

    SHA512

    5ecbfb79bb7220067eb3397f184181a78072906cf865f8f5b58ac6f905bc743051cbd2de2feede469b804716149ae1b93a114ce045f9663c934110a2779afd94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43ea1893d23d67ab4badab12b847ff79

    SHA1

    7b6305723cf5aa7b8800af0f027b10c72fd40084

    SHA256

    3fe9380877f9c7fc25aaea2911174eff42dc9b6a45e7e393fee04914968606e0

    SHA512

    64265c2b9bb0aa0382edb6de48201f658e41680246f032f4e2af93ddc1d6e9b01b725f9669dd3655882e16970f7a52425484a6a42a2c96553ef33cd500e997ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3aa7d9cca1a02dde3f64a1d64a257927

    SHA1

    05b9af56b778034e06bac695fc55960967e40429

    SHA256

    3412b38c1a069541545b710bd6c3e5c901fb8aad3096f36131316ef0abde540d

    SHA512

    5ab47e7e89a25910bf414cb845f256c40ab8de2afef063934cc226fd10384a8396aac1f8d5552ba5d7030989516e6700cb8e6c63d2cc7255ce01f42f77403aed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5824e63fdbb32980fbe0f078ce47bf85

    SHA1

    6c532a4b305aac58aaac7482e6b186b300b0f550

    SHA256

    e96db604944b71a4f18dfe6443bba5e6452bd975dec4df03706a0dafa70c8f4f

    SHA512

    928744735fffe87020e81f223069cebb72527cb9b5e61eca568f0b21a95e9cb4854e1ef1508ec867ac56d6bbeddde0a03ac1b40f2b49d8e5fc2d3477f89bd4a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    552b8ee8622e7818b6eba8d6ac6a3a5f

    SHA1

    bffa6e02be0dfb93a060f74632a684de6861e888

    SHA256

    c6f40e3383ec441582612e4c9bb64bb9f93fc60c70756bab073d27baa847aa90

    SHA512

    6ba8ba57184f95fd5aececadb7b38407e1c901c95f38effec2a3a824988d70d58771839740e9d054c2fbe454426d94315a893d002231e29cc5c939e7ec4bba33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8a5241d54fc20157ab5ea9c322915b6

    SHA1

    a4af94eebd1aeab1abf097468fc5587b16c4f6cc

    SHA256

    44a27b90c387495f8cd624ce7ff270e6bdea88bca8ef034a43c248b2f0ad24da

    SHA512

    c7711f1d59c2347825d6b960f081d0ab5c56367656b88f267c808e49dec28b5ee5252576a1b20ad2b7c6f7626f316ac9e99deb792c99af913432c708c39e75f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2caf47a81f176bf99609000def584b1b

    SHA1

    46985f1b9e5d3a03e28a52f6a4b0c766eb852f93

    SHA256

    7b247c1153659ce9a8f7d60f5a99ad84c69bac08b3accf3c79a0578a4277656f

    SHA512

    c37b25aaf6392a79212482d7adc96b6d2112f6b386d603238a60051e1f5e354843dcecdf2352c5bfd87b3d4283143da0b68f6a7137cb26d20b8be99e36a69ee1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    95eab0e3d22398cbfa1a824ae974a0e5

    SHA1

    8dd0090f6c8bf43ee459b0368b0ffe898fb61aa9

    SHA256

    f1cf6b99a9895c6f119df634e840f91af14c50a55d9546c37db9a71b87129c2b

    SHA512

    eb13fd946e89d17ea1a8a1857805e2a164dca6815e99e26c07c0eb1d98c5f02b77e523efb8fd4f034c5da31c84833cee4a72a058285fb658c7dd5c88fc02bef8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e440204e257ea0523387d206a2b4bc40

    SHA1

    67b2cb6a9ce7ba6cbdfceeeb4d51c456b33bbb4d

    SHA256

    15a3c3912f7ae9ff54eead8cad893f45a22c5690399219cf685a788925b22760

    SHA512

    0e7f937f6f77334a7588423be701c6fae308933358e2aec64677d949ad0076141e769e69b3614823327ec9efddcd5e8f4c82d74f3f012824e4b605b10e4ac801

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6aded80d2491f546a95ac29f8eead588

    SHA1

    dd136da656f7fbe69447bb83d15e815f32507e0d

    SHA256

    02cfe6b9908aa9e2196b9fcefbbc237bec9c23f9baf9903c92e9959f54fd8330

    SHA512

    8b7f29a55c711a39285049510b171f5ffccdb0d15baed1529a3909dbe94de6c54d8428d42249fc4f83f69dc86eabbb669badb7d7f88e5399e16d0af33bffee01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa0254ab42f1a65e02530e28e02017fa

    SHA1

    933dcfdfc374eec3fd20e6c519d62cc15b37c3f7

    SHA256

    1aeffb33d841899f76665051ba853fea08330bf5d4088d154bda84f202bb6143

    SHA512

    d25950cb3865107ba3cdc2fc1eaae135b374647afb63e8263f3ed917c66f03f2ec43e4b776fa9bcd904d8a46fd93bb643c5839fb7a2dcedfc16af8635177e758

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9eaab26f168994098b5b1cf1852c947f

    SHA1

    86ec4c2f087258ac15a60c2946c7a53d16e44acb

    SHA256

    ae503388a97674332125accf1c53ba3ec8362c8eefd46543484572165458d48f

    SHA512

    4bbe19f2ccc76820b7771d5d7f0885548cb5bb7ee01d10abce0dbe8ef076f639693b5f1433dca03b0d02e0d532a1a5291d3037dbdb204bddbb48757c795af279

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62fb100e1bba3ffea8baecdf5c2e1591

    SHA1

    dd3ebf82e62218c8169d314b6a698c85b2948088

    SHA256

    2ce047092bdb237e49fb5302c02ba83b368a7f4348660123edefcede27e63fa7

    SHA512

    7856fbfb0179b4af1e2291fd70594a4dbd84269866d10f85896f4ede5e113983875b8d3e7010e469016b2d6522fd6849085a5a33bb3ca03a0c3298186bb1c244

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59a231eda5bc84bdb555d1f63c89ea88

    SHA1

    5016565e8be4196000570b6245cca7c40bf7b2c3

    SHA256

    9f887912dfdc7c4c308444dbdf6df6dbfbc08e50e2d92db0ae05265f509462e0

    SHA512

    65446cd04d26425af32feb40a3561427cad92cef7a85d71360bdc0634dbf0fbe3ff12040633e251dd3c8279bef31d8a67ebc6abfa9778632a4b644213049f353

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    852197a57c7ba51c4968b9d59236474f

    SHA1

    6b0c83ad5a8aa50b04a2ec3d50fa54ef3ff23119

    SHA256

    952e6448e8ec45ecb233e7c312cf69b4b90445697e5a83ae46960c2bd704355c

    SHA512

    47748c0c21daa355e5c1c2c744e5f8ff2f5956a176315a72ba97fe50a5f0cda6223574bd66c02154bd55f71669e9d6e4fc1ed7e41f5c134b768149ed3c53e829

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57f75b8e8fcdba845b9635284b9b6868

    SHA1

    9c6e371c221f7505ceb4b3717107c78546ad0eca

    SHA256

    d8bfb4aa48ab2dcacb3049ded389a68aaeadc7139b99b0c01466f001f3b29642

    SHA512

    085da32b32af8e429d9c33ec34d4a1e43094f1f1e4decbb44b9f240ef4f79d7556c2e9e2bc76504177ce6a6a2c07158f6f5730cd36f98b853776ae792643b151

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69053509243930d9a37fe601cf390d72

    SHA1

    7905ecd18817d4a0913b313400013c40e47f5c6d

    SHA256

    9b6997cbc789dc2e1aff06ab1e3e227f82182b817f26d09705ca373893d0f10c

    SHA512

    ac15586644b6ea48ea035b432716ddbfe7d893d0581ea7a0ba2baca30ac1b509adb6f23652d161a327947e8af2716f03923e8893829a288f1853b35d5bacab50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48a861c93bb8b55f4a2cc9cb3f31eed4

    SHA1

    2ee87ee70fa885722cfa1c8b8dfb2ae0e82aa410

    SHA256

    6cd22267273087ba9b7369316d8abe6a4e9c24c8a95d1113004bcf11b1ce75c1

    SHA512

    56d5c690961df2eab9c6c75f84da6dbb06baf36b6f7cc36395c8e8446e93922367c5a46008dc5b9d25d6c02df7cab49bca29d1ed01c6dfd2fda630d7f98d9e15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3d361f22d931398eb64b8d886f4212c

    SHA1

    9f137b7058c62dc8dfa02c04b5f4700c864d59d0

    SHA256

    9ae68bc7bc9837c53743102edba8fb2fc2395ac2ef74aa8e0eed29c0298f3f27

    SHA512

    d48e191ede3a6a3d90388425f78f5bf915bbf54a339161973910797f5d68510f7b47a89ecacb66b66cb818302621c21c86cfc2e20e2be24124ba4c925fb273b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5104861c875f75c248cc2fc065ba3ba

    SHA1

    d5cf38a49ea538c89c5cdd0e8eb40322c8c16822

    SHA256

    c502e5638958ef04e54021027b78b31ac81ccf4b6963e1790e2cf1ffaf637e80

    SHA512

    240fb610d859e07cfb0d9f05b0cb678dd872575ebdd053ab961a9654bbd257d836732af1a0c5ab3a72eff6b1375689bffd682f8dc2d5570d6e4924460e94c7c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    70e0f1c1a52e761a382a7d12d19c8bd3

    SHA1

    79505efbe1ee4ce47500f2e4639d563e94c287e5

    SHA256

    3873e37e549ea76f82c95df4f80866199b525ef9c515be8b295e3b948f8683ae

    SHA512

    42ebfe92b203d287664b34b098114dbc3d47ab3add5a9952023c5bc0bc18433f994fe3e3ddd2b72764be2559e15de59297c6188b2014f528bae28b336bba258b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Cab16AC.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar16C1.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a