Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 23:36

General

  • Target

    319e842143134d012c26b19385149397_JaffaCakes118.html

  • Size

    36KB

  • MD5

    319e842143134d012c26b19385149397

  • SHA1

    fcbba3c6e10f5b5df66854ddcdb1ea49c94ab1d1

  • SHA256

    cf305d96c11641a837f61f4508b0cd93924a223a57f2fb670c29a7fdaa0fb9c0

  • SHA512

    bb9ede16da6988000f84f05b210da5e93ce0b934106a8b25ef65a352cb674cb391f99123d71058bd2db593901d6a8f592b9a8f35efbbec9cab5d468b9ab20845

  • SSDEEP

    768:nG2DZqW8RGVCnGA5GmRxI9ACbYC251foaQFYOX:G2DZqW8RGknP59RxI9ACbYC251foaQF7

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\319e842143134d012c26b19385149397_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2220
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2220 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1156

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04631bf2b48fc6f3db7769aa03bbce18

    SHA1

    601f9fa4c7c159ef51c738fe7304f8cd66f67c2a

    SHA256

    67f0cae6d818c0f2075fc99eca1c8fc2c08aa5d9fafa7c91578268120a41f270

    SHA512

    16d1abe3c63a0b2de45e7b8891ddd0a17c519ab7ba7595546affaa228379685d8ea439df31f96bdc7c5e636892f6a1f48ec406dc5e5e80c73f4e0d8ffd6cd139

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e411e7dd1601221a43dab778704ec91

    SHA1

    4d2362f8ede76c28b63178dd6098c58839a2bb94

    SHA256

    0ea402cb7e2ca4406055a01f3dae7a58c6dc4703ab697a1e4532eb84171fb3b4

    SHA512

    be9bac5720bc7a5d0cd2e0be8a2128f6540baca5daa794dff9e611f68f6b424dc1c923eb3e7b1913496b5fa09f9a5a06e2d5a88d9bae143bd7222ad248d7f6b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d3b4c1e2a6d24cce0a039c73abdaf4a

    SHA1

    ed56b929c0f24a9328d24b444779ceaccd3e780d

    SHA256

    733c68b575f4438ebaa45bf1ec2aeb07397c554625903839d2f390b6e607991c

    SHA512

    d70ccaaf71dd050a618ac2528178d7d23aac5462b4497b89ff6769d98281f00ecd60cf42f19ad3a7112a36adb943edd76213875720a23b38c668d6d8b3ff6665

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    efc562aa57e4e9d378b3ca9264c92d32

    SHA1

    7ffee1cbfdc96d13d505dbd7858fb7dc44f7611a

    SHA256

    e63c7a34475548b864cdaa0f47e47d8a8eb1ee9e2554803c64d32c84e6e394e5

    SHA512

    ce37580b538c92c4da50a3cc3efcb1e3f24eb609d611bf5cd42d166ea1cb5f959c4b5558dc2b08d2fe800bcb45b7260bb592ab3982d3562135a48369e7e51e9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f142bb64208bc86a0eb7bbe0bb99491e

    SHA1

    3a768d360510fb68ff9f9b89b1cbec598ed4d553

    SHA256

    0d87bf08725e1307514ada07795ecc0c92c36853108bd0cde595ea0e2d0997a0

    SHA512

    281cfdf68865c232d71cda8097f414144c750c4a6a5374d126bad49df30f2b6e2db1b1242352e7aecb84fba1e4ae93df48b2ccb71044f7c5be26ef1532ec2f16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fed7929e41bd9afd7f3b6021ed96ac45

    SHA1

    6c4a786947da40c71d10d038c71ecb554bca130e

    SHA256

    b5bce27fbce7d44438a16abe0fcc8cecad64c21e98633a57b20b646585ed0958

    SHA512

    3a75dc7c7d7bbb5a374cce21e063ff1c72a07ff78c4f23bd5e66d7e8adc6e7f8f889f56bf9ace32c8fcfc166037d6d11a52b5e1d8c0c64781f283dd0e8eca237

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ddece021c7478abb0855ae90fc45d50

    SHA1

    bb32fa8259c265064eee975c97e51dc186c8a8f0

    SHA256

    221df30c47baadba198a8ecfbc8e6bc5f80dab713cf403504697c93fe561efd0

    SHA512

    6530c7e4876989a06b6253d7532b075f4c7edd135383a2eb3927709d90baa2f942d91a10185eae4ef9fb98be1604c644ffca83154cf1ec8c67849886cc601d29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d2ff2028ca7c9b22bd4fdf2b2e6c7c90

    SHA1

    215a3c575131355c28c8912d9bb7dd54015108fd

    SHA256

    40f1b65f5233b634d56394d04cfe0e730410a88cfde7856472d3f3b596925c90

    SHA512

    b1d9f94f9b8c00fbc101e342b5967a7614877ca89c7a8db5a41571bc38e6af982b7b7654a9f57d42f0b5eb640b62ceb6a9b5a87cc75fae48e57ced789c25af15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5f42edb0a1fdd71fac6bcb0b3804fc0

    SHA1

    ef3a1399b79e3a7b1fcd71788c8f0203f64661ba

    SHA256

    38d58802fdff7dfb9f4e1cf176bbb90b2af378713b8740ac4da3d70a0e23dca8

    SHA512

    89cae5e5e6f5b08aa92090f4cc14cf55f2253a31bb702cdb002536340a758685dfbc015cb1b98e8f85d565e78b4d02959dee51da224e5f5a6b0ab796c61c1b8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    506103730248e0cafc3566ae2fffe52c

    SHA1

    28da03342733a2b9a29bf583a90844a6a60dbc3f

    SHA256

    37865b0db037d86196c3d4e831163f16a0cd843076c11ed4a03e59383d6f706f

    SHA512

    90379ad52ed084f29a1a8f53fffcfa4efbb0496c1eb2ddc861c8e9be12d2ad6ae7305e426a03b02c5f4d8bd2acbb34e76d14b55e5dd43f4a9562c4a78c11ff8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9dd6c697b2aefcd113d652503920723d

    SHA1

    cf8e8b703d03f3d39f5458eed32cec0e8ea7b0a0

    SHA256

    c8e13cd0d008ccb5763bb3ab3da6a39825fe56f4b02a9dc0790bfcf18c6bab8b

    SHA512

    6e8b11d315b1b026f3379eba0e9c7caa4872ac34ee1b93a9f23c59c383486a22fe7432b3130be0825d864826f80f78b3dedaa1590625cdcbdcc12ad3809876fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3bfa3761892248db32f1d46ba81c1acf

    SHA1

    4cc8f36bc59d31f17fd705217b7ddf9fb22dbd43

    SHA256

    8f5ec2c325f492470d62fe369e0b89c8930584b0748a93da79f1134e5ee37901

    SHA512

    1418354ed09da5deafdde163855b40b8af8c12e796e4d4875fb293126f6aee05c8d464e960a32ac3bf1e67061a42b7884b0f2025b1e09f38f74bf57ce6bba0d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eecea08dae3e96ee1575182d362f067c

    SHA1

    924e994dafab43fdcc7e72373e4fccd91496019e

    SHA256

    c7fa545272455c94678612a99815806ca0297cb0331581f9bcedd28478b4c1ae

    SHA512

    b3ae96d8b1672a5c86ff4befab6308d9728806886d4f4a9c3f423eff98a43fb4492241a605ddb6e230b1f416abab6c5fcd63b6bde62b96beaf070e18500302ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86ec118baddae0ae72c26688ad9c3ecf

    SHA1

    1e72ef28565830c407ac1a665c8fc3b7772a7562

    SHA256

    f6f79c70ace866ac989fcea99e5394ff2b3b5ab09ba6b92bb6945080e5ce3844

    SHA512

    47f7ea6b3c25788a4bac2c911d244fde0294e39bbd0238c66656994f04e6674069365564e6d18db280dd7e238b10d6251372fe86c7422dbe206b334e542a65f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e76570181ccb58a65ee5658e9b23e650

    SHA1

    e58839b721f6e3a473bbfd9d971f9cf4a9fe3779

    SHA256

    50721a85b2b8e5090cf6697364b1531df67e5e83936bfedeee633f74ccd0bda3

    SHA512

    693cabb05184a259dd0fc10cdd2c8345f86dd88aed6007592e9e0c0edab730602f566c95fb61efc86a4433a3dcefcf4a7db70a72de4d2b29a8c89d22958459e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c4e3ea53d193de71be91784269e529e

    SHA1

    96aec2bd9164d3aa84f70fdb6424ef2f6d60e65f

    SHA256

    8e9a98febebed83fef32ca347cf95c213fdf660649a5ebd0fa1ca139156f8d52

    SHA512

    e4c2894833b0174237e9e9c0938ab4069340dcdb86b41b86cbe9792815916456539bb97c9210b01f2e0123c6ea824240bc2cd009ce4cb6a3dce9cc9dbf9a90fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c07f1789cab000e4108e713a1e3f4e2

    SHA1

    bc3573dbad84e99fb7e86ec8eeb3276b5763d72d

    SHA256

    4940e447f45d1fe1b8374545f651eada84ad9093517b5c2e95782fa191548b0c

    SHA512

    a986a3b6d7f7a8b2a7372e0a3db48ec59108e1addfd4c256cc00c4ab98cb476670a09725d9f60b6bcdd55f7bb0162fee5f612e6af3f11d40de535744b35974e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82a70d8c0f526519a7f060b556ea55fe

    SHA1

    b48cb7588befdd871ff94fc8f780250e1c156a04

    SHA256

    31eb212c560804b635d26381a50bfbccf9cf60392db85781291534f4775c4789

    SHA512

    41a915481edd0d065a886f791e403d527203574c4f8ef765bd9c74799de0ea92eb5231e79ba0983ac61320f38de02657b9d1d1d8548b278caecd4b46a5d8b2c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd01046dc6ceb77e44837ca53684fece

    SHA1

    71556d7bc59e10b518c55ba3e12a20eb73787802

    SHA256

    90424449b6b7eb2300cea498851a10382019618e394d2e85de5558482b7edd3f

    SHA512

    2adcd675cd41e21b688f7adb89779779467d79bb8ead7e9c1ecfd07ec24f1dce7f1a2c1c8f6bc75857eafb36488ca6284b710acc4419b4345dc0c82324574834

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0d5874260077d905dda81a18b3e2743

    SHA1

    7366e250a8fa1d1b801b1f95282f9e6edf41a611

    SHA256

    3dc4d6f157bde28e8295343dece7c19e043b46521bcf1b04dd9121fcc79ac62f

    SHA512

    729e376f2aaf8028988649ef00d9a53ba6c0a1fc976de9f37783e6bd73125344000750070c5113287ea26138d3fcca603e8def569ca98e344247fa3107125f7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83b771914079426288da74042e82a5ef

    SHA1

    3fbedc8aa921e74d748efd1e5682b67b18c5b985

    SHA256

    05906e5dc92f1972af4233e7dc16133806aa7ce49f348f2a39397b453d5f4f47

    SHA512

    f34f725ea8de9645f99c45e4a240a8db6262c1b60bb702fd47eae2adb1de68f22705d97a6eb1805b695306de2ed1a172123b9689af925f5ec4051101e7106134

  • C:\Users\Admin\AppData\Local\Temp\Cab37E3.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar38C6.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a