Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    146s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 14:04

General

  • Target

    2f79b8d3956a7d3270731e51020b1a32_JaffaCakes118.html

  • Size

    31KB

  • MD5

    2f79b8d3956a7d3270731e51020b1a32

  • SHA1

    f05afa05f6af07ed3b3d4db4fa04b6146e91d61f

  • SHA256

    9696fc72c245f5e54e9419ece4c10a8dbbf2b9567d91385349f2229b1b4ae39e

  • SHA512

    e70f0fcacb11d31898fa8ec7b735fdde3b4642e7b385185981e3e2c89c1b43632ae490eaa47bfffca4586c2d2a99ad4ed9bbcd4e56d917168291af46b8a70f08

  • SSDEEP

    768:SZDJdD5MrOOLriSlHi4HuiGak68oO/Es9:SZDJdD5MrOOLFwpRhoO/Es9

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2f79b8d3956a7d3270731e51020b1a32_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1304
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1304 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2176

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    c92e7d578ab1dd2ec12f1639cdd9b537

    SHA1

    57ae23cc27ea7a718a7d39999d2e29b34b11d215

    SHA256

    1b1ce5281dc758bde442565490016b71ec7436b6665d6befdca3652b3f10b40c

    SHA512

    13b1b5b35881bf0cf8a82bbd9159a99e2f84fad365672aaa45682a87917178e7f0a525e81b355cab55f83d2198b2ddd595f339153e23a67a769172fbf7008f18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    098b89c33999636e05315fa9a5981a38

    SHA1

    5cde853840c58d9570b334cb0ff7a97111ecc75c

    SHA256

    d2b5cf800885b78b3d52decff2f18b488817fadc37fcad8932b828d5c12eded8

    SHA512

    95b6ad32da4a105b347ed28ffb056acc9842a42ffe0f4f029a3178b0fa19d9bc14b39c2a02f7286b3806d09d5990de98ef951461340977f98868efd56af0b20b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd8f4d87787b8ee147dcd472c9445180

    SHA1

    3653d234d6ad427b47c0194e78fcb1227a71a0e3

    SHA256

    1da2550ce39cd00192009266289b6c879ef49ca595a98532a720c26513b400ab

    SHA512

    9d9955cebc638980692e09eed6c5448e3c5aa0c5f8bb3d2071c3d2dd4c122c1ff19165e0b53cf6675a569bb9afcfd06e5ac79d343c67c2545effed1500acacdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f18b9bfc6750e92582d7c7be199fe51b

    SHA1

    e89ccc53b6a6671252ef4c74e830d694fa439bb5

    SHA256

    b17539632a13d858b0e96fb9d9d455d03162bf363ae4bb875eae2090f732080e

    SHA512

    1e7e6e1f0b01a7440e4549de8ee0966365e1ee16cb1bed0bbf5568e0fd1fea90eb77cec2dc7013b4e6788886415725121e3929033110d4942f75983487535e0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4eb07953866ba9b9f642e8fe2fdfc8df

    SHA1

    fff93132703987e1d5d97f1508e0311314e8d2a6

    SHA256

    a622729377fb4a5ac1cfcfa510dc94eaac584441f1acde1c602141cc41155391

    SHA512

    1d0d2aedf18d6df0e9b49cf6fdaa46fea305b92d226b65e697c64ef4d6dc81fb8f084c18f67e50afcef247e06899d4a9447cb5ab0bf2c09207dfb175533a1f35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3cf20b9514b1367e1af22d6a7029d39

    SHA1

    89ba73b10f143786c8d0fd0a01ee28ebea88b8ca

    SHA256

    90d57248963b1804f8a6b28f0f52ac4c8f86495c0826ef285d3ba87cf298fdeb

    SHA512

    0a7b97a62559c28f65428c590e1356fcef72b708e95ac345ca510c2e5322604f5f896973dd4f6c8f885e809a3965d89543864d3941f1ab2139df4df9e40e3cfe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30bfd68962e0df8d267be7c7de867773

    SHA1

    c64db16d345c3e6f386b0e8a35ef1aaf784b848c

    SHA256

    3ced8aeb64f5d3f977c65c97d2836ffbb4397a38eea94a9a708690d3bf19e7f1

    SHA512

    a383570ce58282c4c6edbd869f6779fae00fcbb1a0a686db38528958cad76b1e30afd569283f3b2c6702568e464e5f09a87941825608137e35801856c783d2b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7bb1ac436b6ee92fc068ee4370564f38

    SHA1

    b5135b93d8b3ae786f5019f2a75a1eeb11b95490

    SHA256

    ddce26c1264f36fcef12e8cc6b1c4dc7f61a936fed1c93fde400f6a6cac18484

    SHA512

    1a063ef3f1a339d9c0bd7038dc40060e0df01854f83b443d298fa4128993c42c18f49198c8d235e510d6eaf698da55a6e62bc7bf2ac366fe8fe296cc4fa40075

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e53bbb8c853995e6f2d0d86b3623d2cf

    SHA1

    4f61735972e09bb8956889d2c8e438611d6ef5bf

    SHA256

    a1cfefb37fa1a28a2c7fb9b8eedd8d55ae7edd237e9fb988d71f3183981632f7

    SHA512

    134a9920e34f176cf5d54f7ec12dfb1701bb134f4698352f3521af7de7469bd0671a73ab3cd8f84ea23220274f751cf375288400d94708480c75a9b2836102da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2308d784b50934a4b252ee558deffb6

    SHA1

    f258fe9417eafa25304d4a27865f101bdbe950dc

    SHA256

    8d58eb996ddcee6efbd2e2b82e39377cb903dd8ce6971e2a181a290c01a518f7

    SHA512

    ab2f726749ab9cf3b5a726bb2a0e000377cb0bf164e64cfe345ac7fbfcf212f15e84733d973791cfa68e8fba1904b615ba4258f70cd9903bb58a0b3a30a87546

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    76b957e5fdd22f70d74e93d81ec3f9f1

    SHA1

    9662335e3136c2dead67fa37294bbb6c8ea4645d

    SHA256

    289fc01bbceddf321fa46b3047bda71ebbc6fc01e85705781343d8e4f9c56a06

    SHA512

    6e480e15d8d0a78c7308facff95dbdb593c9f0932a0b1447b66749d9e8cb7955c6923a2edc627fb1435437230d55880ead0d625e662b34211684eddb1b1ccc7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c47be34e209552f8858617f9da6a136

    SHA1

    138344f805aed0f97b29cf4f9791c6aea46b03f8

    SHA256

    28cd70acb51490ba548a63a48f84ef6596fbac5a076808e26aeec0e6822bba60

    SHA512

    6fb8444372c48ec17a53b6de2e6c1d9011f1f828df008dd36ca4e8156be6139a26085e54b7813306cdeab69843164018e1dde3f81b7dfa9cae854f26fb48b661

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    06e86d99a8fbee3ba70265c64e670cee

    SHA1

    7c69c03741709145241d4f09773fb5f157d8da06

    SHA256

    d94cab1a6ff039f48f7826333a3d4f5b712825d8706e0828fd51dfa3a71ab734

    SHA512

    e5be0d05044af4a2bb3161506c1e49113af283ba0e430404b1da90bcb16745f4ce3263ab1027547a32f8352d3cdeecaf785c0e4e120d3afb096f1fb3e9d9c58b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f98952d845815a9534ac06f0feaf0b3

    SHA1

    8533a32b81babb9702183a3d3edb4af9ea3420a5

    SHA256

    341f94fdedfe852d111c3f7fe2afe7859d5bc296ea213250dac7e0f329e6e0e4

    SHA512

    8daa432d2381175422b42116d05cb08ddafaa73eebf2f8adc4b621538dc1a69488e825ca9c7a358d3047244c1ea6dcdadc95e85d0c1460b9965d8675ecf3f784

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cea18324edb2b2f88a4c09f355e4513e

    SHA1

    c859559c24a38f1fea41a4e7ce437ecd63f88d51

    SHA256

    1211560b60ae128e433c95fc7aaf89c84972dbe0e2f74159b2c32496c377a0cf

    SHA512

    7fe8d2221c022010d61d11bff9b4f2d18ab953d00a980022b834b47a81b6c74788733fe849fb383a1839e6593ae52b8c32d369cd03947fd1fea775b6cad53e6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27ae11257b6b74026474d5465f6db497

    SHA1

    10dd208fc94a53378ebc5a53822b937aa31a3108

    SHA256

    d73226d1a2cf53181ac1d695c05b0e43398b2b77b6a9e90468736e75925eb052

    SHA512

    dd53d89ad43e33408eb4758fadd67da711e7c592f154c12d5fad2830eb0cd8dd02780f2826b690506403e4922b7d0c67c65fa580ff73c97c5c2278721d15fc16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff202c46e9dd00831abf42c9a08af4e7

    SHA1

    082f330ca47654cb5e355ae8f8c5f2e03bad499d

    SHA256

    88546e685443a5c1ebd13c7bb74283f859c5f70c2bcb17434fb0389becce2a5a

    SHA512

    b1bb64739a0086027d5ae833fae62bf1a94cc03e4f92ed58f97ecb7d536acf6b5a226d52c534a7ba4e714d43f3bd8db4766041407916d9d3c1563be8ba2677ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    066a87f8ad44fa435c88823877a14c3c

    SHA1

    ac12b0ae9cedba16dd877bd33c18ea00c93e5437

    SHA256

    63e4fa55085d43b9c68fdccb85280d35b80ca19137f4b16e7cb595db36512145

    SHA512

    eb1c34c3470cfc423b3eb4ec5947b5b7fc6105910ef7f8b5ddd02621cec92e8fb387cf1e43953a17ba5ba1d5c02f0de88b764b9a2210ce0647bd0a392eee01c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0425e8e5ea8ac2c319fe79e620bf464

    SHA1

    1fe901d66452c80dc0bd70c2a7d125eb2fbf0661

    SHA256

    c073fceb61b91940124d414d5f4ed5bfdadedb7a17edec1b45813d1c96f709d9

    SHA512

    4d73ef0d04c4e13683add2e8db19f1015a5a816e1c44f2bd577b6935e30624eff61d954274202cb7c2b15f13edd6fac5c74ac5eab9aedaf56e9f53b38578b813

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4892710c39d93fda8d04224f5d5158d9

    SHA1

    3926850bd59f6baee05ff4541d12139530e6b3fc

    SHA256

    1122e696f91e9d54b390933685d74b31ff35706eea322e6fc8c37e155bbfca90

    SHA512

    bdb654dd02b039419e4f003d4a33844be9c2c44bfcb2545286f7f52c60f318ddc2fcb64922a3767d61932e0e3c6f6e953b73d57840402e4a6fe5922688a4069f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c25ee39599affc628ce8204c975e0759

    SHA1

    4a7a419df72e917240e5cdc5705a2daca8bc8c1c

    SHA256

    1534a86c129e44f9503e3493288d87e5632ab837db7934e278fb07f1b521ca48

    SHA512

    8f2f072f8bd8a0fbf5a6485ccec39df85461bee3bf4a296f7f358a6f538a99081bbc04a64eea6a645c188ddbf71287876341e2b692f37da0dfb6de2c943bb9e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1cd10010e5bb39f33cd73ffce4ed9c32

    SHA1

    7e0a2b36ced3e996ef403a1c4617a8d8475e4d13

    SHA256

    fef98a1d6a796621bd60cdcfa694f4ce2c86c22b88cdb1661d15c72d2b857bd1

    SHA512

    e48688aad16814d5c7f6d1a99c36cd118c50bd0b0f17eb67b8da80be17f176a74ec61c066992efd0b714a5ae9778b4a262ed41ec6a20f1b2d8fc0c790f53cbde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7fb3e2b7bdbc3cff572833086e59f06

    SHA1

    b32402abf8fd4034c80d15ab5cf54901d8e2839d

    SHA256

    8e32263fac8b5194351762749dfd0f537f63eac50496196cb33025ed9e7b469d

    SHA512

    e42802950809d83d60e4feb04517280883763cba5a51790f77ff1784f4ba2832e55a50d901a1ded7240ce379570469fb61489f4c3fe2f27640da8ce429ff4b18

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G17BROQF\cb=gapi[1].js

    Filesize

    64KB

    MD5

    63e5a0b45632b3dde3694ffcaf0e3f7a

    SHA1

    923736d0cdc308331d5cfaa0ea159bfedc83d53f

    SHA256

    889109910477919b3457416e7764bcd0add19fd959848253026125c7c35c43db

    SHA512

    5b886c4b5122d61f0209ede748aa84445c9388cf38813316c41b3dbd2308216e88394d9a45cfc27113c0cf3bc93b9c37d808f6d3c67888244c176ee095d42259

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MNCIS1YI\3604799710-postmessagerelay[1].js

    Filesize

    11KB

    MD5

    40aaadf2a7451d276b940cddefb2d0ed

    SHA1

    b2fc8129a4f5e5a0c8cb631218f40a4230444d9e

    SHA256

    4b515a19e688085b55f51f1eda7bc3e51404e8f59b64652e094994baf7be28f2

    SHA512

    6f66544481257ff36cda85da81960a848ebcf86c2eb7bbe685c9b6a0e91bca9fc9879c4844315c90afd9158f1d54398f0f1d650d50204e77692e48b39a038d50

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TTL9DZJ3\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    23a7ab8d8ba33d255e61be9fc36b1d16

    SHA1

    042d8431d552c81f4e504644ac88adce7bf2b76f

    SHA256

    127ffe5850ed564a98f7ac65c81f0d71c163ea45df74f130841f78d4ac5afad5

    SHA512

    e7c5314731e0b8a54ab1459d7199b36fc25cd0367bc146f5287d3850bd9fe67ba60017d79c97ea8d9a91cd639f2bc2253096ce826277e7088f8abfe6f0534b63

  • C:\Users\Admin\AppData\Local\Temp\Cab147A.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar14ED.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a