Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 12:20

General

  • Target

    2f10b8db7fe65d6525740b43743a6ced_JaffaCakes118.html

  • Size

    36KB

  • MD5

    2f10b8db7fe65d6525740b43743a6ced

  • SHA1

    1cdf52be3f235b7db43dee7cdfc3992c0ef91810

  • SHA256

    1f1d3fcf75ea5e54e3e1369284b5b17592644c112d7fc39dd97e331809dba946

  • SHA512

    5cacb4924d2c60d7495c62a7e18229a0d3f0267eb1e61f9bf2b2f0ef70eed1400203bdb93030b7376b8ccf5a43aab51843fc6179d38a88330b6124cd03f69ea6

  • SSDEEP

    768:zwx/MDTHzb88hARTZPXCE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6TOZOF6DJtxo6lLT:Q/XbJxNV/uuSe/280K

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2f10b8db7fe65d6525740b43743a6ced_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2208
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2208 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2004

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    fca8af0dc8436b9952fdf961f8c7f401

    SHA1

    ac194f887a84a4538985ece94daf59cea48fe65b

    SHA256

    477645c7b83bbde8bdcf6d066f0de596d5b02fd47c223f89dde7d86903338cf9

    SHA512

    ba0d8f654216d9530bec83aa011a3433cea27873be327ac60eb1244997995489db76e25077dead09fcd43009b05deda51fd37b30a33fff01c94ba3927e1c21d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    724B

    MD5

    8202a1cd02e7d69597995cabbe881a12

    SHA1

    8858d9d934b7aa9330ee73de6c476acf19929ff6

    SHA256

    58f381c3a0a0ace6321da22e40bd44a597bd98b9c9390ab9258426b5cf75a7a5

    SHA512

    97ba9fceab995d4bef706f8deef99e06862999734ebe6a05832c710104479c6337cbf0a76e1c1e0f91566a61334dc100d837dfd049e20da765fe49def684f9c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    cdede3febf91542bfb1fb8ba917a5005

    SHA1

    1968fa2d0ebf7e2caa25926d6154948cfb12c626

    SHA256

    2306fb57879eea9f65a0bd27f2ac0870dc844f6fc8f21faf74139304c6e9a3b4

    SHA512

    33c757a3a043c2c379ab15a4a02502d634c5cd3a13a7becc51a89de8419d274f715ad1fb66a59701203d496f5f8db33fa06a32cb5ecee65e4637a14aa7f30313

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0cf1f6a0cf27f22904f2c7c42259a2bc

    SHA1

    18d5c533d69d0a8d3d13eb601fa8ff1998dff7fc

    SHA256

    5f2c8b5f233d160cf35d5473e018e692c69d9a9d940d896846806c26587515c2

    SHA512

    ef179fb5f77f47b3e6677b730ea495b8aebd14c78019ddff9a1e49f30a62a0002e45695154146a803758fe7bc73b748aa950128dff96984e78aa20ff9ae0da15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dbde02df43632c69eb422e1103afc6eb

    SHA1

    b7b4b221d38037238f0f2f18f71f80def656aba3

    SHA256

    496e16f3bc5f085df072170bf17815b46a31926b0e9565684e8e50d3855694e2

    SHA512

    9327d9fe4cfa0cd3bb945a147d6e801305974c408b565f4f2f91a13c7cb623e8641cd494b28f03eac7cdc1acdd9995634e4659b6e4a988b528a03658493a84d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94c5d07771e06781c727e106bded2878

    SHA1

    20ef2d1e19b7cdcde6a19308492dcafe5c0800be

    SHA256

    3f049d2865bf35456ee22af53309cab04762861ddfe48facad6956af51afb536

    SHA512

    f5d563d7d4f426d2f7148605cb69746789091b22288616eec37d0b9933dab15eae891de247186bbe08eb67d9822e16f16dfce7b7e85ed1c446fb4c19eb4e73ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea8a8f3aa55dade3f2aa01b55fa312d6

    SHA1

    32d3bfdd4251a2b1501e309ac6f6f66398162c72

    SHA256

    cfbcc1852b2c593edf87139e0aefdfd74ad3b03d09262991e191272597b422bd

    SHA512

    41454a5aa198b45c8abf1e70f8cc2b05b9c1d312668d8573566b907e0165242018855668ffed206d781784c92cc475dca745ccf2727421c11ef261a9e52ab8f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    950dd0ae7f4aa4d6923cb4e22ea8361c

    SHA1

    d8067cf55a8189e73462b55fd5ceac7595174172

    SHA256

    c9ba4db5b325b36420ea75fc5b4fdbe7074c4c11ca9013266b0f671371f6f605

    SHA512

    eca9d1a168fd33f128257b2e64dc9dd1e3bd6e209cfe8f65cdcba1b302f73932326083556fd2c70da5e7d0c4c8b612834a1c05c2520d463c9471e75480dd9dec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    105513b4179b55c8d26c737d8e4cf2a5

    SHA1

    38261a707817214ddd1f0ecb0c5e3b3b1bb7b523

    SHA256

    0a73e948737fc4080b15007ca47fd1353bc9f36772ff684e9ef5df14ce113c7a

    SHA512

    fabab38c978cf947cfa9d375f90720a9996c02b976101603595d85e28ecf9fc703ec12d4b81010450e13876a428de2f5f50eae8fb030436de3bd72703e270e84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a51e4982050edd3bf5537b5f9d0ae3df

    SHA1

    9568979008111a33f3bbabc72436ce4651512394

    SHA256

    da2f7b068b272a96fc816a867f90155c7f3633b4ea57cdda1870e8e4f8ab5c51

    SHA512

    af67047266b91f2ccb44ff4a6915017154a02461f1f5d959ace87a5855b642fb5079473d5cbb347e41da54e45214c8c174667f50757b4f272f7fdcf7b45969c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d2a86b712ac101e62c80d8615209d66f

    SHA1

    b9b5845cdacebcbbf032051c2c78cf4e4ca0a691

    SHA256

    cf6d472a4c2dc5b25175743d7aeec7cc9b570bd2118de09e02be5df49ff836b0

    SHA512

    410cefe946b813b8a12633c4c84e8e42920cb1c230d7f2d3f72cd5e209ca2a88ae565ef431cd0fff13a2489743036827b5cf4dd7df64e7ece8a4aa03936a6ef2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08b0767496aeb0ba7f6619e163e5db5a

    SHA1

    bf5628bddab3d445b18daa3815cb86b4be0ed001

    SHA256

    c8649d8b5f52d444660776bb71ecd0d0dabf545394b90c75848c40c70912ad4a

    SHA512

    797257eae5c9daa391046b30794ac4ac3a05691ae305e8218c73681cb2ebbf43fbd0e34257e2d8e0c39ab2966eb95a6aedf1707b6b49098c0527a816cb1de505

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57244cbcc2cb21c85146af6c87c0987f

    SHA1

    abb4df9c79c3518897f2116e24c64ede2fbd61db

    SHA256

    c553974e3c68d41449e944db9a9284e03af28bba4d7721b45977593af183e270

    SHA512

    9e63328b8d9b3ba18ccc4a3655cdc3c6cff896dcd40cf893eb226832c39f7a93ef02305bcee69a217787a1f8e6ff5198555f5ef57cd2e09b18d173e666a7c321

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53a65c4f7fc7f556dbd962bacc355fa4

    SHA1

    01a9e4d982f6f87e37038196acec10b8dc9fc74a

    SHA256

    14cfa1e3d63038c7565f09a824c183ba192e8fd79c037a779d97ffb3ec229f54

    SHA512

    b5d486dbedd5c635265f83c244b9df8a71e908a91071a3ee3a34bbf0c31c5ff77b0b9a67294b9247af11cb5da3d17d98ec75238640072bd818cdfc4369cdca6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90e0dc6d0c41e4aaa0781450b7e97274

    SHA1

    9963f601adff6678d4b8c586d44c9c33b2925cab

    SHA256

    22557b26a3d18c270d4a0f40776469efa3b015e8bc54f8e6c59192d831525551

    SHA512

    ec78d8c6042a2b15038c6760f89c5522c06300fb97e503183a67358a995362afe1c0dcad8f40cff22f9001640eb5f0f557d6cb06231d3f65d63b03486c2e768a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3891318664d7000fb85803288c0acb3d

    SHA1

    2260183dfda48ced4005df750d3657bbf9e1ddd9

    SHA256

    9bcf69589674a960d45966e56c5f9285f414bd4fbaf6f234769fb8a35694ee8b

    SHA512

    568230b2690df51a8cb80c3c6ee524b42d7def393564517e675e5543f94126e7ff23a6ff517c459af3adbdb125daba895983e1592b28941f4d42430d5c1f1ed7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89b57bebeb02ff20f87b54003febdbc7

    SHA1

    9f0b4078d3738ac3efc245c15187f363034c77fb

    SHA256

    c68edb3c6d8713206f3f085b79da6c76dac4f882b5d5f47cf7b075fbf92b7fbf

    SHA512

    54f527abce6b368777cee28a5254a238bd85776035c41907f4a17c50c2c64965d34e7bad5eb056d03c46c3fb7ef64829bc6d2000ea3ce4475b4c141d9efaa745

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d915062ce4c5e81f8072f08d2c912f9b

    SHA1

    6ab701317a30cd75fce7c48183fc2313e4d969a2

    SHA256

    cd7cd6bbe221b425ba377c905e5bb82d63abbadc249f76360e2f2e14457fe4ea

    SHA512

    0821550a3ed0d6b822bab9ce175f116313a9f8381f539c0c01aa6657052439c3f32ef3d3fbbc37131ce24957f37be9563dfb07186f64b53dac74b70361e7625f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce4889561d7ec7769d0e2fed79f6e242

    SHA1

    6e4180f34cfc10652e146534be10f28a4a613302

    SHA256

    38a678329889c473869ae46759311f527bc41f8fccb843b04f9559bfc4444190

    SHA512

    f3945a38435d8f453f009ce0aed31de7dfe61d6655f2baaefafda801134c042c28d548ffc0756b02d2d07fa991a75f76089a5ddba1956ed9e542b5aa92275e84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b731e20bea503681964f10d8099ad3ee

    SHA1

    71e876b1096730a9761b59e17572d56d3f02c462

    SHA256

    8f87573ed3b5edefc542cc6d756e5717e61dd58ed1f0f00053e4216525cc9217

    SHA512

    a638bbf95f1aa9c93f99803cdb4047cbf081a5b3da0c5d05033c73bf611430952b7ea3924fc9f9aadbdbfbc995cc8b64ff2a1e106e864bf1add8142715b87097

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0790fac433e2c2cfd59761c53285e09

    SHA1

    fbcf50b96e55d97f360cabc71d8f70ee60f15c15

    SHA256

    5bd49d99f41f2e173b277402a5b6a1a260ee4f83b912306e57a948e60c28b0a3

    SHA512

    61ff27b0ea0cf2fab00cf5ddc5df8644210fa78cade41a80de993a7eb3a7294a7955deb9bd47cd9b004b7e523666f12758d6a24e8f4221c59834b36ddefc45e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b5b82484495c580dc2dcc83393152dc

    SHA1

    85a77da0d61228acd19321e5a1f682b03087c3e1

    SHA256

    79224ba709aaff013ecfd1642563df05e0bdc8406675a18da7b720d239d505c1

    SHA512

    3746a382c227ee7b2163f844adcc948648cdccbd3d2697516317335b5627664cc61a32dadafbd666eb1e0189d118264670c2c474a1d19d8829a193b40e4e84d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90a1da1cb4d429d61dbf36bde82bad86

    SHA1

    e47bac24909d74c1c163245f1ba240a7eef2178c

    SHA256

    57f3d52f089c9096cb75db5200cdaf4a1b0da01d460d25a18d9d32c2eae9302c

    SHA512

    487016d183cd269b482c68b0df8cac7da3dd4f4590d39428bb5cbda326400abed5e0cbd3683a489a44b1a771596c8aa597183758549aecc632eeb0bf1e08438a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f29ac00a943cd95a150e8ac35faceb3f

    SHA1

    c0ea58d1216a59139defce02864a71a17d059aee

    SHA256

    283f795d3dc47e07872ddddd24dfbd88cca3e25ea4a67b4653d49194b1d250a1

    SHA512

    a653683744b9dfa74dcbf99fd5d91e1b2bdac4305eb5a4ba81cd078b040e94212b269740b9eac970a0195cf60b51c80c928c99997ccf0ec4b7ccafc6790cf396

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    392B

    MD5

    8bcdac2b039fe220e1d699078e64d303

    SHA1

    449abe2fb1f65f0f6c3252b829fc64595ce1ce1c

    SHA256

    8edfd9bd97dafe72344c352a214b898638d3a7950e51bb84e787d892a39ff61d

    SHA512

    ddfc08fb5c7fc2eef3ef5f47474eca53356616261943ad4378b046c938fb4cc4b52f9f7abdcc710cef456106250f2ed83d8cd3d712d68a8a3b15a50c3a3bd414

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    480B

    MD5

    62993ed7ac80b71f8b7996d6a78bc5bf

    SHA1

    4f2f29802ce2cf58aaf82dd098a13506501e40ff

    SHA256

    e71a2c6d93e83b8df7f8a6f97f29966c52d41546d0a2c55a0cfbdeafb2caebae

    SHA512

    59c58022697674b170ccacd8235773601e978e0b0919120b001e8782f43aee301e93a778d8e35bc92c871c49d32c6f5f21d8d86d4a4358449a819e2c4820d583

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    31c680d59025cf5356e0607ef2f44fbc

    SHA1

    5f63e14e1f6eb842917940035e4b499ad895e26c

    SHA256

    e4278595a3efc2ab527cffef43d0cf94d876d6c93b38c2cdf7a4f32824ccecec

    SHA512

    316ad61acb46a2cef60142ffe37dcf5bcca311da3f81a166ae86410e85f67b7bcbb3ccbf9c9555112d0afbda08013c6d638dffa38575a376e76fe81a51dd1269

  • C:\Users\Admin\AppData\Local\Temp\CabB09.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\CabC0E.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarB0D.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\TarC21.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a