Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 04:59

General

  • Target

    2d7948482556ec48235214995681456c_JaffaCakes118.html

  • Size

    30KB

  • MD5

    2d7948482556ec48235214995681456c

  • SHA1

    ad2059ddf1271c8be16b858453de0bdefc1dfead

  • SHA256

    43cc2b96bebdf7f03c9e1b6737895132603c3ef4211fbe351d5545aa7735575c

  • SHA512

    f2815cb15700823d70e9b86ba7e0a5ee7f75d57b7a3adbcc6ae25a1dff47553e7ae660c6c4b9d25f9e461a7388253594ed24e14be8c0532c092ab811aae257d9

  • SSDEEP

    384:95UlqU7Ity2PJU3LhAb4pVrH9E9itAs0r8pH:9ikiItyua7hA8pVpE9kz

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2d7948482556ec48235214995681456c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2096
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2096 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2700

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c5d5c8bc5f416d82292ec0ac7f0718dc

    SHA1

    36e555e86b0457905e1aaa1fc6c494d6ad6cb20e

    SHA256

    489a5d427d0b17d4778fcaa345f849dc97925dd8e7c5601fc1200ba5d403a046

    SHA512

    d72c8344bbd9e5ce11b8eaca262bb89e334da721271a9dd208851b7f8229d632750337c48e1e6e35865bbd8f79ece1605a452ca456446e99aed335fa9597aa41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7bd663834b1c38a83934f7a4c6af034f

    SHA1

    ac972c8294fc113de2e13b5cf82575773fe60d40

    SHA256

    b33574d60ce052a2f5b32ed2405cfbd7429f1f3e18537cf0d2544884c3b3b9b2

    SHA512

    8ccaf7f0e58ee36806339bbc5d8675efa633ec1ef7e204eb6e3855c7f263328fb9f277cfd7933bcb742b9e519ab3651689f9ecc48e9469c286601370dabccd5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c94783d852f5d2fcb032bd13cdbce76d

    SHA1

    00c08c46251cc1a61be122462d0e160339c5e802

    SHA256

    89ab2d8157dac4e71502930059ca26dde9c2cb6ca6a1d4c8e65e37b78914e56b

    SHA512

    da4ca44b8fd77a9155224f33f4b5767e405a776ad43b2769ec5b26f35806944408369da43b72f0d814d0a2deaa0161fcc3302ea8393bb1ab68640a9673e4cbb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c54b5887729f29bafad2d41cfa20c7bb

    SHA1

    cb369c1719fbc8e16c966b0971f9c5b335de1b61

    SHA256

    5de81634471a658ff330462db61886b51bb7d1c695d68651265c578e1e7fafc6

    SHA512

    d41c820278ccb152d9e671ac99161389ad2fa7dddcf4910eefbfd58537f6c5ca8c7dfd3ad81604ca9c1f673afeaf55f6531cc29649dfdc30ff7efb163274f9ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d12f05f2c62b6a1fb91ded28f82587ff

    SHA1

    432b4a9c6084c9a2542adc8be095b447086a84bf

    SHA256

    1c9c195582beafeb3c9e8a48e43a70cf89a15b30e2ba3c7c1ca1196b6ce6ae00

    SHA512

    a1763a024e2407515240372ecc5807bab128b675338b0a9661e29b84fa2d20c61c86bee1f0fc1e865309a1a8f49470e21e9b7abb5d8be9662ad09caafc0d00d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2014fe65ef6a422f7a544a4c042cd166

    SHA1

    83e184c5c9e105276bcb59b1d0ea7cc00d7d0165

    SHA256

    a3bab39bdb0e1e57cdc4cbae654184aecd878c1ff771dd1b85a27b8d337ce4db

    SHA512

    230ef866328dec0325b916255061cb43b81b24c870465dc1d6c91774156867525a3f8a007ae62b01d7bd645f4bf23ed13471f750c033153f429186b5223ebfd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8fc60afd9286d7c66e1b036ec4b57ebd

    SHA1

    f22d4c489a01c5dbe977924ae0ea5c0df647bbbf

    SHA256

    6e1c7845a076046dbb7e64b1d7b96e00f809a49d87b582bf4946d32568d45e16

    SHA512

    b8412e05c38c2195ce2821df0e27e26a566ddfc7e1890823ffd2b02ed0e5698ae3b041d7b9ee79386ee4ae33abc8f9c1c08616f1877b0f3dea282edac74dc47f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c6151e7a521efddb86bf010d721211f

    SHA1

    45bd950e93ecfb868c55981dedceb1f62aefb6e5

    SHA256

    6e92777e8c4b0fc0f983008a0a16fec2fb90ca5055bc01b4957e7787bd4efb40

    SHA512

    b6a55a95a849e9ae2e4dc36b61e63ef54efcfbfc186f88b2b432e6165684dc78ae14b1074d2c3aaae9c08245f67263a0e8ccf8497f526c940abda7c1020cc343

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f776e22ca8835eaa514832ea13135bc

    SHA1

    6ae56eccf2ca9376a66fcdfcc7b1532b50941c0a

    SHA256

    675e343b4ab275c7b3ea107f66c63b1a6a151c9d21c8bf570af390c56d56c607

    SHA512

    4e1bbedb0e99882d25132e3c6bd31a828f1ad7f4a2f960495d8bd6043f6769a55ff7057953702614b9952a6c8faedfa22444b75058c85783d6838d31351ab513

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3744d34b53096cadbae4e8eb5773455

    SHA1

    c8ac57c7405e0cf1f3b6dc25f4e6769ceb26e6d4

    SHA256

    3c837b52597daf5baaf4324494e853e3fc6103c87c064a5917d6670b55b3c069

    SHA512

    25478196e06dceb29040e45c7c264f77a326355c199c95c823643adf1a93e0981a81c1684742ac3ffcba336bf7198be14b0725a249d8f773a526d682a5325f86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1179f974c49e3cebef7ce99389da6be8

    SHA1

    a6ebf47ffc549a44f5b6fb355129711269be5128

    SHA256

    2641f7ffad34481ce7d4c0ed2b9e04f6813862ffceb641e3996777aa0f65f3bc

    SHA512

    6b879ed11253d52c54d8e50107460c82fbef3d3b9ee0cfc44150600c2bab4081e99ce82b67851ae9e2c6d31452af15edd9ebf695813791f5cfad3473efd4897e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c32ab627f49004eff7cba74f40a5ab4a

    SHA1

    d663ba45004a84c6e1a6bcbd69e511071f06413c

    SHA256

    4a82422077657f55078db3e1146fefee9cf9392d4af3988bec789ad62fe1b89e

    SHA512

    0942437f93f885724c3e40d087660970a3ef7cfeadad7789d38e58af2903453cc0c4538b249888de6a71824ddd176bb0365418139f7ec888ecab58fbda6b0c31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa7e04b101716cc7624de95478d944e7

    SHA1

    a30f89b3e1396505dc8e00e423c7b7d71bebfa3b

    SHA256

    59adb2d9ff9afbd63614265548676c80fe88dfb0b95bf85e7a48a05667cdfebf

    SHA512

    7fe6c3f9959b960f8763a49087be5912b60711faf651ce6c022ff31723cc7a1e398d73ac04e6632adfff5f24f5087b6a8741af5f988a5a993bed7cb6c222f017

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7335d7228460cb739aef929bba314667

    SHA1

    d9635c46af82ff53871a58b6c73ae134eddfa4b5

    SHA256

    d5ca9e39c8ff24f44ca7f5ca1279db0c48422ceeef070d4879afb078c05fb3a1

    SHA512

    20061083007bfae7d6f623dec992ab92ec3233a401ff73699ab503671cae898c7197c51020e8ed71c41fa5df7d0b09bd8741ac279b809a922de99f45065b4578

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72fd7a180b040e7acdfdf883e20283dd

    SHA1

    7e1aa2ddbb8edd564d26d74a91c9ef5c15cf661e

    SHA256

    9d74038c8e1044f8d41529e9a644d28e16470cbbe45b7f29c899ff721f18d5ea

    SHA512

    4994805e09f0accf1df7cdf6f3dfff5439a7e511d8e896709ccdb79ccc77583fe3fa5d9a3f41cefb8d9ada2b998b30d552d877a2e9170fdf9a03b8e231b64ef7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    381757380a472fa245bcbf128f213c3b

    SHA1

    f1cad43977031fe0d538f1fb0a2a509925d0ac84

    SHA256

    fb54c8a24463e1e7c38c1fb02e23b71f761664df514b0e44b552c625b3cb8aa1

    SHA512

    0146a9c03aae676faa3fc2bb4d40c22a85e1f8bb53b503227c74e16a3a5170198626b24e41c9471739fdf1fc2081583bad053cedd9283544321029890bd23c71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    975ab26f4d77593ff346362c6e85434f

    SHA1

    056f8d7f4f1f8754da7ceb86295b58e25e4aee2e

    SHA256

    d621cd0f037cbc0777ad3417b03f6691b659bd289c6ff1f6e492bfb2a34cb104

    SHA512

    a767b3b7320713a17e60e53d1386d81bb6ad378bf9d67a67941b663780d7b2b78f6fcaada1e3b33dfa554e0b79617fb9d07847d68329fde93dc6b36353399729

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1db26b1b6838ff82dd73ae480c2aed4c

    SHA1

    f662a972859b541d0f13796eab69525ddf622d28

    SHA256

    ee0c09247e1d799b847f3824bc98b04f41a228b767c6626f8c9652d282586ae1

    SHA512

    b7049b09f804ca5a85b333a64d5cd5560e1294023740741b6b4f18b2ee7741ba0e43ae4a434080dc4eec101b2bbebc31d864486eaf76de009f69e99c0a8a7b18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd7b09dfa0358295ce72b976f5264539

    SHA1

    1b69c5ff7316cb054cb897ba0b21965379818576

    SHA256

    85b8cc418c5dc7cfaa5b6695c6164ddbdb8bcfff1ea12ec3407b0c6f289d7ed8

    SHA512

    9c0c29dbbc33cc4203abb3d41cb2a04e085159f20810dd52f7fe2a0a639c540fa97d6c17006fb39cbff5e3bb616694021d95215ccd70bd616c345a3ca125d238

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf83c1c0c14b5bde72726f9953afadc3

    SHA1

    51c1c725e9dc2dbfc518ee55b0c4d6c500c99a2b

    SHA256

    acd825d0b923b1be07ca5a529cea9a78570f182bbcdda533391f20d66ef2de2e

    SHA512

    a83de55b7b44bb81a440ed100cb8b661469477f94fada9e8d07a25b19670d1ca52fb9b6fab30a213abee71a8f9cfce7063d2a3dbdbea92c4b8785bee57200a57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    26870a42b3294fa9bf2355a94190ac91

    SHA1

    9ec551db47c9dc0379a88e68a32b8ab4f4e641a5

    SHA256

    9364994f6784f737df3165c0c05c68f395047fc4df820b53b53fa22dc6ae0465

    SHA512

    a0014917aaf02d392bbdaa81c687ad64cc118c9b077178dc705adbfb8a947021de2d77acdb282fcada05fba0a6f3246866b4aa9571190f2bed01e6a79a27853c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J8SD872Q\style[1].css

    Filesize

    2KB

    MD5

    e507b0ac5a1de647356ffc5380a5bc8a

    SHA1

    83c30442682b8212d090c7ffa975e6619fe1e224

    SHA256

    8658fc3744e22ad2967d6835fceac45b473bc22c9da5c9a410233e26533efa71

    SHA512

    e0679d10b44b4ff24e232238ef63cb3615a0e73f66a419826d1db6e90cfcb8d7e0ca99b61382b714a2d8a2bbec20faa4388feb7c3cee05f61c2e3453ecf10201

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MNCIS1YI\lato-light-webfont[1].eot

    Filesize

    26KB

    MD5

    77c97cee47df73b6074383e9fc822eb1

    SHA1

    01e3797894037b09459349d21e99d9da8832ece5

    SHA256

    fec7db69d0c92ffb4312daa595d4241673100dcef6e38687f4885da971504770

    SHA512

    cdbed50a03f477bf56e0aa64a1fd1ad884b8c6f7b17333c55ae72b1fcc0ad851b2c4e2eef1921ea9b739c89996dbae78ff9ecd309670b5c66b323bef395e0d4e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MNCIS1YI\lato-regular-webfont[1].eot

    Filesize

    27KB

    MD5

    00df88857ad38a8b3a9e24744203b69d

    SHA1

    b6728718e34349a161c26e10c7152c4fad2ec0d6

    SHA256

    f4ff54514ab3e903ab1e932af60028c4f773bca28fd2790da3f576a8de90f39a

    SHA512

    e2fa1f0e58b0ee5f447914000afe791aad244297fe9638a982914e92d3490a337f25f1c3c968c7bf597c95c7ab71ffd4e0604ffc253a3e0dcf8eb3b6d9ab7cf6

  • C:\Users\Admin\AppData\Local\Temp\Cab2B47.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2BA8.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a