Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 21:32

General

  • Target

    26d6f160bcd4262fbcaeb3137c10f210_JaffaCakes118.html

  • Size

    33KB

  • MD5

    26d6f160bcd4262fbcaeb3137c10f210

  • SHA1

    e620ec2f574b00d615513121b2abb25626de4458

  • SHA256

    4f35abe803f69fc97fcf5ce19b74c9aa76a8b259bc5920081732350968479232

  • SHA512

    61e475ed2d6008dcdb835d7fe66aa82a98bebbc6d11e0f81c10b89763f4f056585cd9f841447f046a097bc2dfa6ee9394dfed7758f9a01e101b7cdfaf8be3217

  • SSDEEP

    768:qif2+keFRDAxDozGlnJDls1im95joBEoM2kGv0lRLqwUmN4o6Enkxwii5FIKSBV2:FkeFpAxDIEEywifzH90

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\26d6f160bcd4262fbcaeb3137c10f210_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2732
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2732 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2560

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    11517edb47aa80c9d7753df233ccccab

    SHA1

    b1bb29cb362288399bf484a6b2791a0cfc0fe61b

    SHA256

    b2b4b519858cdcda461409c4d2df1a3134f653b1fe8fade609c01800e6edf6ae

    SHA512

    a155bc22da3f228d6e47277d9677730412b7912f649b479e946e6dc913ffd745e3d7d24a4f9f5059bebbce9209844907cd663288d04d15785fd9ddd678a0372d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e93ad788fc82b026cf74730d4a20a10

    SHA1

    e7f8861a35be84a57ed24e4559d762927afb8254

    SHA256

    91c7dc4c040283e4c71bbc9cd71b2a991f294abd4a0de17d53945c06c0fc72ce

    SHA512

    c68288538ebfa71df574ff640febae736dd8538be674f1ecfebc6a5b4aceade59d78f5ef9807837f37bb483394b141c92058adb27df1990344af351a133e3251

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60a4bf8a3e10de20acd8b90445a2a2b4

    SHA1

    061786038cc0c1e0459f80e1d183984293c96876

    SHA256

    ef496564ea513b193bb76b862fba56895c436bebea582ee32105646e0dadd02d

    SHA512

    7a94ed3017473fdfc293e0a09cfe3eb1b8bfa7751c7cf1ace44f3a42a985aae1233ab8200a93f3b08bc902a2559a33dcd3034e884f2e0500dd60859cc14baed7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ecb584d30dae359a91559a5f663e4485

    SHA1

    09eae23b28874b7d26b29f87cb19eee3ca0ee0fc

    SHA256

    461e2ac894a82da4076e85b874b68417ac53885126997703314c7db151653bd8

    SHA512

    e7ad0fa536ec0f87f55944f80f23dc19247a07e00f087d4fd22b8298fc9bdabf38e1cb137d271dd2d4160b924db3e142ed66af9f3fabf5766ebbc542222976a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca03a5c5366605b0a0fd959e93017fc4

    SHA1

    f42b1a52a3d39ad4eebf1c4bf479cb48af2615bc

    SHA256

    8a6bd0f6070d849beffd4835e928ce747f921fe7d7140162049b489d5b7d1054

    SHA512

    066cc552086e633f0b3ca86de0004326d7f2c16765da9c188132f5ea4d34f99fe3498176471e35d95c7813a24e444f56cb0f059f28ef0f26493c36541fd040d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff62883b7386ae424ec3d6c101d265cf

    SHA1

    f4d5d05560112a3cd67446d7c88323a5ce724529

    SHA256

    aac35169cccdc8748bfd3d2f79aaf05e494a9d746707575f19f86962046bb8a2

    SHA512

    bf2a9dd5b9d2b8083e435fa6351a97e8f1ba8791dbbe1b1924491364552a6d54e69fbfb108efc7c31d66cecc8da11af99b9250e6673f3def62f098ad0c328a26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc459a0a834019b8499d2b0c42c200d7

    SHA1

    860f3ed91f512e78e8862f07ec1809c0b942eb3c

    SHA256

    38ee3ebc19adc4166e01e22e5e34ac483c214cde8103cb5778b26d1ce4b8458a

    SHA512

    e55b8b058e26089bd30719e0bb3e42061d9cee7b4f4d66402e7ea1a3ff8cab5c0775b44b3e5a411a8438eb476fab010c33ed59d144b1a74f3324d9e0a6662e6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4399828a10ba35b73c399813d887e0e3

    SHA1

    8c55ba4d6e3a517a992ce98cb3bc0b412cc8b15c

    SHA256

    235fd51437e87a66e6d20f37d9e79c070867013a45dab5044394a2bda8f5e8e2

    SHA512

    d1640a3bacdb11a9fc9fcc3bceaf40ce19a22af3ede77a455e63d14ace4f8f3570e53efaf22394e4e415f7534fe7e0c22125fa0326b3f9abcc9287b48ab30710

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92708127ff00f8de73586c5a72b671ee

    SHA1

    ef8bc7dac43a4008c35df2a2f891f47420db992f

    SHA256

    82618b3a8a6f3454cf5f51650c5594bd99f8f014239025060dd7b4cc64332224

    SHA512

    8c3255be85da7ce1b90499ec700cdd792697e6fde9d6c133490917a9a6cc64cfb8ba2e45d636a758cb2e1369a1604c4341042e9a35ea0b60544fd221c8f5deab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b60f81ec4a6d61a65c26a9bc20dfc0bf

    SHA1

    d3de39a6475ba1802928fbe603244389a2aced77

    SHA256

    f38e915a3146079e2c5d0ba872735497ca405fc5a29a02fc7662c478efc0eb51

    SHA512

    c8a9f298db0608ea3d90e400862765ce628d319fe985ebd429da594617f944e3393c6658d77d44e914401861fe91a1fefffaffb4b962074d824c5122e54e7b41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb48f25ee8132d3aa3bb321736ec704d

    SHA1

    21399d750f0d735ea84a90b2b0f0abdf90f5911a

    SHA256

    b0c046e1f14ead2886aa406329a69de49781c3c464a96c6c2d9253c1f5ff9e91

    SHA512

    dc104fdf0f515bf474970ec05af08fad15ace9c9f4e3bff9636691445e11c2be1dc76061104a4a902b1585327ef0c0931eb2745ce58c861657399356fb76470b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ba07a7e65f4a1fa3b042f4c01bd2d26

    SHA1

    4b715f6669add0f104dc504dbd8b627399882ee3

    SHA256

    f3ed1dfcb78b19fc259ddaa40c61066a2c0f8f7c1fa10ac4ae065f80e41848ab

    SHA512

    7b16b07b125424bec1fa142513f07b76a234ce4b46f3c482daadbb1e3bdbd5278421ff3cd317b766f26b9ff689d960fef910750774b48e0a65fd1163fb0bff20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83b8cfba1a3ad4e0de3be85774de89cd

    SHA1

    a762416b7ad09203c2e353c11578b7e11db0aa11

    SHA256

    444652aa76a92ea5f4534a8133d51435717ebc75a881f6d274000f42c6340076

    SHA512

    13dfbd1f0893254aa8950accaad4bad54a79dec422958d0296768bba791a5b54f089142579f5f8737e1da9dc3221e5ea4c03c8fa119e5185145f2cbfc2c3d4b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    81d80d7c0f354777da8e6dbeca90c5f7

    SHA1

    3861d0c6a050dd6913e828b295353c01c4ae27ad

    SHA256

    25663d9b3b5d8c1280f08f3bfb92ae27a4d3ef2594b368533f149fee0ea484f4

    SHA512

    158b61200186503b0e3299e1dffc8a77e80e2e1871166ba0d85580fb94940dbbff4547975aede3bdabebd8fbbdede7704053302cea82e3b035a7f2d11762d550

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8c77ee6fa7c08c1d0ca8d8737d1aa46

    SHA1

    6cbcf213b0b5830a238d92d58b5acb6b2e2a5a24

    SHA256

    8b5b54e2f27d73c94db07833a8677367c21afd203f0f8a616979a3e5735213f0

    SHA512

    8e2b44261f87c918c0507d3fe1da8c31b69f86775f8ce1aff8b38a1aafc21f644caf06d84619e24a3edfa3151256fa1ddce40293d03bdc6bb9deac646416d339

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3293e1bebedb53fa6fdf67d034bd086

    SHA1

    0a94c832d82adab8d2c12a7821a2c9a2ddbd2037

    SHA256

    c80c97fe4365a86a819da62ead7eeadafa4e58be099741c89135e7ec610f79e8

    SHA512

    65e608571e1053e313c76db0c9008169b8e399a92a151a28831ae468d72e2a9b26181775e11697430019cd114722a9d687ba2cec4e388141ccb60955a7c4afcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d317fe2c463ec7a501d8439c8c7dc0c

    SHA1

    ce753f8a2fc2858cf2ff432d5783b73e8cdf8b0e

    SHA256

    383020c2314b00aaf2aa45a960f09e34ee54b367e4610f2e2e20a099eb2e0f5e

    SHA512

    8833ead229a9edc9dde5edc56548e185b90f89ad0b3ef0ce670fbbcc77ddc6d3e54c971ab2fbeb743429c784b77c441a37b68ed50e04c603ba320e0496c659cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5360bc5ab30a0f6eb14bbdf872293bbe

    SHA1

    68f223d344375e12d880bdbc6a2c804b1f97657d

    SHA256

    113dcf9d40909649b5bf6e39c3fa97f759c8b20f5bacef32fd5b9904bff1bd15

    SHA512

    2ee942e8360da9868854c5e777b333568b784bb358b9bf1be3fcb5cfa8595b7ad2e3ba6df9e44424700f001e4dc5f1d24617f7469873a3cf1a40022b982d9259

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1529a3d91b4592376dadda2b1b8838a5

    SHA1

    72f90e0f8c601537b17692ac64caaf4135a47df0

    SHA256

    678395a92bd2eeb362277ac55c32bf63d3b141be87e9826e79a73bae64ee1c04

    SHA512

    62b87817f3a97a190c12eb55bf6a7b4c5c949584cf0b057c3d86121d522e42a2ea15793ae89c65b6d2381ee0654c40faa789e34239545e7203a89efa7ab07eb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cab5bbab002d3111f05cb124747039d9

    SHA1

    ca18596c0e7143f9ad0454b80bf8f3771aac2ebf

    SHA256

    49512727ec701b8a9e2809c650a76ed34fe14ce0e41fd5e87c74e37ae23b7615

    SHA512

    756f9305943795e7a54684d5fee3596b2bcbd938afb288aa504cd6e68c2e29d89cb9dae773c15e414d5491ea80ee154d882e4bd2b500238e5225c61aee0e5a84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    10bef26c0edc9e1aa4638724a31f5c30

    SHA1

    677434dae2cbf688f20ead64c03fcb01940c92ee

    SHA256

    3df97bf7ec9def8f9d32e9218c5191751e7854ae02f7b9fe2912cbe0a440d8df

    SHA512

    7d1d164ac844bffc1e82f07d26ab5d37e7d5e30dac86d15c90032d1ee0eec4f8a9bca8a4ac13cd0b62d6123dff8aadec7db56b21c3238a08c52e2996e018bb46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    f07f9c614322b75e67a13a928bc54a88

    SHA1

    d69086a392718689ec6ec7375c93429ae2689c82

    SHA256

    4dbce8f29825178ab60254bee1fdd718ffa7a5df77f4420281197e2280713036

    SHA512

    e9309c48af1c212337e5c33e7d03c39df1f3aa3a188c3222f2cacd5132235191fe690eeb5d02e4a6949e9bea385bda57a3084cbe27388404878da7c79475f6e0

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L9PN2QMY\f[1].txt

    Filesize

    177KB

    MD5

    6e39d3a83a8f134e43491f29aa66a325

    SHA1

    8f853e9b8ede8a360eed9c5e567528bf46bbb4d1

    SHA256

    2db00ce0c527c862140773de5922aad4c1dc2e2ebb2d5d0d0a59a00a32b48da5

    SHA512

    e7b6c5a769577d424be3a165588b8fc2c86367cb4d0a52f43920df3244728329380277a374c7ef2274f6c98fc1295b33cee917b82a06ea08f3bea073e5d586c9

  • C:\Users\Admin\AppData\Local\Temp\Cab8C98.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab8D66.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar8CA9.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar8D9C.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a