Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 20:36

General

  • Target

    3bf3204e1d6035e367d26d694120eed4_JaffaCakes118.html

  • Size

    18KB

  • MD5

    3bf3204e1d6035e367d26d694120eed4

  • SHA1

    4d6bc7efc18ca3fa0a9207f830c85eba1052aed1

  • SHA256

    a5f32c16965db9246aca8f0792fd53896509ad60190afb49b26e8ac1232207fa

  • SHA512

    05152dc635574a3382f35a78c25d5490ee902f1367b5a6c37373bf1616ca3af486b928a728865efd22ab1d49be127667474cc451d2e4e9c279cd686ce5b65251

  • SSDEEP

    384:geSSlwqobML+MvAn2OQyvG+MZCWMOLMZCwMObJGGQlQQHsvt:gfS3HL1yQHsvt

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3bf3204e1d6035e367d26d694120eed4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1952
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1952 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2508

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96c3e940fa707b1d86ecc3023445dca6

    SHA1

    847939d5fbc60139f862c4fbb177b381281abf10

    SHA256

    c23997b44dbcdf33c03fbd7cb459dc676c40a04966fc1ccb1ae58a57634c7b5b

    SHA512

    9cf2772ec0907505dd5fcc790a6553af4fee1ad1fb39e70432174d6bfa7040f5dda799a0dfc15a2b995277020cb5a4c4de8733497d07bc074305b4a7a20b0da6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9879a87708ef7918599e2f457918dccd

    SHA1

    fb329772c4a07c4df7459633b65a5db5a6c04104

    SHA256

    304df345ffbe9c88c4e5ef6cf3e08ede60d48cdfcddb43d2c9bd4a8277d00e77

    SHA512

    a98f4c03550e6b395a94cf1759af3f26e1fc91bae1d2fcf320cf740556ecec1eda147766a3f533bec0c571dd8cc69687309c9ea969c34110749376081e922ad0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fe5a005551981abcc3c116a533f9481

    SHA1

    b954243d2b98b36d392fe7ea6c6852a99f52731f

    SHA256

    7a30c49d687c09e39fef0af1186a7599edc6bbb48b77c19ad4296802072abef9

    SHA512

    c788127a036b0ddddedb4ab0694fb2608d3c8a3ffb3b9aef9ef1f3e4d67d4ca3aa1288d4b1863b7961d1a6219563f75acbd311bb7d7caa15b087a16e4b738e8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    126ee164bbb1bdf6b491c27f72bf2e34

    SHA1

    4cc8e0b9f3dd5cd2a1c62f02ab42f7117bd96eb4

    SHA256

    f37d03ccaa11df088cfaed15906df3b2816717f90b640fd5c2f8a3abe78ce27b

    SHA512

    dff174d6f9da93864759302c68354ac6958b41c1e62b0cec16c444a2fb241d85a6db881d12abedeebc619487b18dd42b8386ec583f0743dc979108a4fbd7dea0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2465e8a462183fb0dc988ec6d92a4f66

    SHA1

    a7c96236991fca751ba14bd944de048f916c810a

    SHA256

    b33db853b6f696a76934d6e256ddad91c714bf96e0bd5eace3942fdeb46bd6aa

    SHA512

    a1801d33a9aad298682c93d00a8f3a9c063b31604c36a6f8a77d0e48e0a3fc0a75199306159376b42fec92b3651cdbe0124f6f39e83a976e6c0c3aa0bcc2d539

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    423c4e99a5a345cd1d75075b407262c8

    SHA1

    b8622f8557e2a915363f08ecd3ea3093a7250c04

    SHA256

    eb8e3fd2316b36452c8f77b2f02475a9aa143bffe0985283b0f2313ad87f2e69

    SHA512

    9792e53deae28766468c5b57941c23c978772315d9ad27e19c5fd77fef13ebbf03f2222b9ae94ad821c93eaf6db20cccf78b96f413c7e3f8c4645a2a78d7a65d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc9b9e4dd156597c5720c4a5dbe79b70

    SHA1

    91ffc26cfb2f783b791a20fb596d0b4b8efbacbd

    SHA256

    c819f20532e4f323956381be3deb2467873790134b3f811b39a522dcbd3936d8

    SHA512

    9f1995dd90561edd0e71ea915386f2746357c0f732e5177db5ce6fa4433e4d788b5c420900c0e46bfa2d12ebb4fd28868a2d35e8f8d29a87ac506dcce06196f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08e8020799ffbc2aae2bb2844eacca1d

    SHA1

    e0c93ca976365cb6921c76fbf06ca0fe95f64d73

    SHA256

    33f2c5c4b69aa36a8e401b6442e2fd5fcdb0e640351225d03b65d009b99071a4

    SHA512

    cf028aebeb6d790a50f6ed33e4e6250fec9dac206fec76536d820c18d163341de2069663d3275c1d9b99c136d894bb7c509402fa5f61a015acf0c7e32e267bb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f4dbe67b08439c78111ed5f629c08ad

    SHA1

    057fd4a621510bb124a33ff5c4bdf68b292658c8

    SHA256

    18d61fca58158eb44e0a0cdae956a7071ae67a08311d7811f5aad9bd6cd10717

    SHA512

    9efca6d9d15e73dc4841be63b96d7bb803e3ee91416a9a070ddb36977cbce2d53ebdcf8ae961077703a534c7d76809c0de273ca51a1d6cd1f9ebe3e908e11466

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    32356459e6377914bce1a57f4d86044b

    SHA1

    613e59edb5639887b579fc9cc50669949eecfdca

    SHA256

    ef591db3754415e2e535fb2ade6d15bc0bf3ee7e28837bfe8676ca5a68632067

    SHA512

    2559ccc1729f43dc5bf5e9dd03969de3ff9421f4176a2adf6f2c711f68ce593c5ac14a94f8da855b3512cce48787321bb94ea8451a565a8382cd9fa0b9c5e8a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7513b034c05661479b5aeb2131274fb9

    SHA1

    8ff190c7d1bdef3110aa636396cb76e36f6313c0

    SHA256

    ffbb39496e4c3b50d0ccc63a3f8876c52c7dcf69d2ffe4f5719dd6b5eaf7ba87

    SHA512

    b41ef9a0b7875c7a0c1d93864525a99166326672eb6408297bcc87fa8e8c9ab1b2c79f043f36f51c5416c3b8cd0261afe2c2d870c463c188766df94458fa8866

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    146603c3623a6b91c011f1b93e21a778

    SHA1

    b0b5efca04804b9abd6af9dd682ed09794b78c47

    SHA256

    6adfbe72376852d8720d655bccaab7fa507476cee79e80afd52b75a8dcf6e861

    SHA512

    fcdc37f6a30709e85c9696d78d214534d6781a3b11f7c205da081862436fabed8be3802b7c792ef6050ca6e78a8f8e63d6c0e8b3f5d317cad9f2e05391c7eef3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0dc10bdd1fb8578a841bf82e45d5d6be

    SHA1

    13bbe540860acd01f1608fd0e9dba75c9fbb8644

    SHA256

    82508682d3e94ad37346db37f0ed5dccc17b6d78b02e5151e2c2e2e719f47d67

    SHA512

    482b7d3cb1462783cd264a81e12c8e65da2fa22c16eab893b530b2c77605e36359c113dd8c31a5b153fc586200f8f4e3fff377117c25c388b8974f8ee48f4b08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08aa9ca58be599d4b8656de9eaccc19b

    SHA1

    512ffa00c44824fa6dcc77dec3e6a9356ecaa258

    SHA256

    e93faf62ad4612c589480b92afa0d2cb46b75803ee145757377dca22698383a4

    SHA512

    cbb567e5aa0a63b5a317b2e39d3e7a7e3ce6fcd93df7198b5ff827f70f9e60f2fd47f07690624c130fd49a521d4f711ad53e099ab0dd8407ce3e95892b1794f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa635a1afb3776b6614377a891c1d13a

    SHA1

    a8ef5d674c5bcf254965e1a08cfda161c9477c9b

    SHA256

    d41b2afb10ac6da6229a58fbff19e78de7503c1c91b80fca7d32bfd117abdee6

    SHA512

    05c797607f5a106b7d1d3f5a35d5ebd82b6a9a59e999ba4d05d1c9f13709df94229966e0907b8e21ae57507603947ec62a304538f44fcdc4bee77507f3cdc09d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c63c46a93a2192c2282d7fa801b14853

    SHA1

    54c7d2ea6bcfa69af2b3832f51297478c4526c0c

    SHA256

    476a720112d0e025296f77ea7887f6df9d520bcdd814ee8aab849e3aa8765022

    SHA512

    1fb2b321d40b2cbc80b50a2a9f71cb86bf1f6f85d86d47a545afa1093397041bdba3fa60aecab13f21bbbf1c68fe22f743da6cc74ad5417efbb8fbbd4623b717

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b43048972d988c0d8e5b8b5e52b71b5

    SHA1

    4b75da685989a6787ea88bafa7a9f08385133fdb

    SHA256

    3a510764905d7629879b34ea474d4a5828eebeb2b37f46b450d77b304633dc8a

    SHA512

    3d0a2fd08e47284b4a9066f92646ee9232902dfa922aaf683d4c47df2dadddce5ead638ee052980710ef3b25e3181b75d607d29b5a15c83c37514a8c7ac9eb97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1719356de4118ea0ddadd6792381e904

    SHA1

    18b034e93db652f653f811dc4c5d1c2e3f44d088

    SHA256

    78b9a5621eba17c5867b78ccdae20832c231d2fd86c75d3b5cbff58f48b4d260

    SHA512

    531de2cfecf22aeb2f18eb3eb6af78d816d1d2df5b5362fcd818d8b786dc3f9c6c72895dd0ad6f589bb7a0e1bdca114907590ec4fb1063fb2a45306bd11194c7

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JB8Q1DZR\et_shortcodes_frontend[1].htm

    Filesize

    122B

    MD5

    a89c43bff6448106fe939d7ed63aa5d6

    SHA1

    c8409decca3894746b586cc44acf18a0a43a5654

    SHA256

    54e4f2a9b12500cf2444f8fa8d3071646b04f8b8d4339cdad6ffd6d720e0eb66

    SHA512

    e566694a3b44885eb35f03260ab2c7ec48701b5841372ff927fa403d1916c6442b0d5687ab854e0d9e80a45418971357b14793a822f6dc0c9cd9f11c84507271

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JB8Q1DZR\logo[1].htm

    Filesize

    114B

    MD5

    e89f75f918dbdcee28604d4e09dd71d7

    SHA1

    f9d9055e9878723a12063b47d4a1a5f58c3eb1e9

    SHA256

    6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023

    SHA512

    8df0ab2e3679b64a6174deff4259ae5680f88e3ae307e0ea2dfff88ec4ba14f3477c9fe3a5aa5da3a8e857601170a5108ed75f6d6975958ac7a314e4a336aed0

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VIF0OH2A\jquery.easing-1.3.pack[1].htm

    Filesize

    124B

    MD5

    53be825ff0691f64fbda7e366a369a1d

    SHA1

    2cfaf25ec5c55604e4abc11d058af5245ec82793

    SHA256

    b466d6388b84655901bcd30202addbf8f919de2b859e087f9bada86782afdbc8

    SHA512

    26547c734ccdd00863c0ad1a0188a412211cb3a951ba47d49e793c3c996c9956768165d999e5ec0cc9f734641ba2d3e8051f318e0a11dd2b332feb28f79d2b5d

  • C:\Users\Admin\AppData\Local\Temp\Cab3D01.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3E04.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a