Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13/05/2024, 18:12

General

  • Target

    3c28e78c6dd8334377a586f766b7441d_JaffaCakes118.html

  • Size

    28KB

  • MD5

    3c28e78c6dd8334377a586f766b7441d

  • SHA1

    1f572957989c8fbd29b254d84a1fa0095e97c03d

  • SHA256

    ea244bca2b70cd3dce51f62f6e065717a53d0904aca0067c3c8102ac2e5bac7f

  • SHA512

    df799aa8a92d1a8d89530ee44d0567f8c6fa211b964022061d917eceb196de432e8204e9747a7a3a1b43aff7da0fb4475294fc41bfe83e87fb0d323818a5a002

  • SSDEEP

    192:uWbRzb5nytqnQjxn5Q/cnQienNn6nQOkEnt8unQTbntnQvXCVA6aEoWcwqHAwBQs:qQ/Wiozw72

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3c28e78c6dd8334377a586f766b7441d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2400
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2400 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2028

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    337637ca50c36a5dab8f3cd4d993694e

    SHA1

    4c541d26efb8aa8cc2e7bd376a8cfa1b4bd5d6ff

    SHA256

    72256286b9ad9832dfc6e1e67de874761a0b47895dfbf85e3dbabb6f228240f0

    SHA512

    2b5f467f4873157d9b6969aed8141aa7741f0cb39e3c19d253d9169ccca3fabfce5fc59a7aa37b84e053bb0f9eb3a1a7db0181abbd060511f7e461712356f29b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9702c78072c6dd31f85d097b71090085

    SHA1

    54d3b6c736e027893c5f638c1ea6c56d3dca4bb4

    SHA256

    7792cda6dbe302a026cfaedddd501a85d55bcd2fc4663abe2255f0877ba095f3

    SHA512

    8ea29662d8073b99ea36fe5c977d559b258ecdd5ac10581d6e67e6894217a9cdaa80fe2bef56c1fe1306bf35a81e2f5b7652ffc0a14cf0a404cd1029b989824e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f040ec89b66cca5039ef92d87bc3ba6

    SHA1

    1291cfa0329699b830233ffbd460ebb5ce99b9da

    SHA256

    6216cb36e26b60e36290cec53468a3b98c72849114654b0e76f6135c1d46f632

    SHA512

    c843bed835c969097992826dc4b1701ec475294c2bc9c0a512afa343998bedce4a26c29cca19ebdc157205e3d013d3951d61df620dd0463395b21ca13af6c598

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04fd607842c4beaa714d713fcd9c9f14

    SHA1

    ac88ebb22a23e001d44bb42996903ae77e53362a

    SHA256

    feab72ef52848b1757741ea93eb51714c8dea0c3450679c1177c6886771d7bca

    SHA512

    342b182c452d6e83c88aa4053e1163a0b7e1bc82c3d522a7605aefd0103f6bb22c6d0b2c25f6cadd94a7d2e5c2947fa14d2f3ec0d79c89ca41136f97a12b9c51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    26e7d07c7d9ff2c4597b9b6c431b6b90

    SHA1

    c5bcc4f3eae473de50babe7f97c978b656bd84f1

    SHA256

    3fbd948d8f4bf231bd28e7b1484b9fbf17d0ace2c110a20e527d25ee0301a37e

    SHA512

    0c9263cac1fc2ea77a8160d3ec961b046780bf81fadfdcb0031f25aa0315f6d8dd5760cac8cd0a05155280e78ef856f1cbdf0ec6037e9ec7f159d8a13def9277

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a4b666835554f170d5f93c6b246a403

    SHA1

    3136a646127bbbb831fc169495c73280a7fb0ce9

    SHA256

    4c9669171b887530f991c8e6d6deffa1587c1048205dfdd894d940a1837c80a7

    SHA512

    3655b695f117431e4204e590e4bb9ab9b6ba69629da11002038d5c7e047b3f5139bf5ae7e235ffb93b488ad4659ecb492f6cf83c902b02adc61f1fd7fd9d5165

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    720cd87b0216067d758e60166f56373c

    SHA1

    296a1c257726ee5bbae1ca1f5de5b4624d9a858c

    SHA256

    5086fc615dbd806b0b21360f9df7b94ab450654c41671f56b98eb8987d68f4a4

    SHA512

    a356685a0c124f7e7311017a29dcf7d31362913a4457e417969a93224af680b9077decdcc457c4e73c63dbbcc2ace5a76124b077865f88a4c694e8a6a79c76c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf5d4e8c828db477ced7f984e85e7035

    SHA1

    9809a79949f151a2d444dbb88b315dd3b83549c1

    SHA256

    f6c5770a9ae639e6e9409a9fc1b1af9f0cb65fca55c028ca60d3ec7ae5c03643

    SHA512

    70dc90b3320903fd14fb3d8915a57ecdb079789997ef58e34bcd4508e02229e2a7e1470d79cf99861fb293e1c778026f5d6b4b6b0ef885856497c36b1277dbe7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b177dd4db89d54f03ab2ea73d485045a

    SHA1

    02ea566d685b9e364a67513910ac5167409752a7

    SHA256

    2bd4e5b462259377c893be43835160552049f84633db7c14b867fd99f4ca0d33

    SHA512

    ede9d18b8d99473411ddce31d4889a27162a1c35aa9714431c5cc025fe0b1176305cc0469c5755265d9431d9aee6a780f41e6253a3f1808707d25b37b3b761b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc95a6d8759622733e11b42eb70b86c0

    SHA1

    7df571d1bc10cfd184bfb713cd3e4b73e9b516f8

    SHA256

    713aa16d61baa23c8b165025f2452babe041e86d4fcf1a9cc4ea34b282c9734e

    SHA512

    669a4221fdaf3abc8a8c2aaa24f3127fb4016bec0cada45fca45cf1d24b0abc503f46a02acfc58c7e20cb22b6bfbf36dd87e866fa2bcd95e7f2ce29637227d1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d21ce91c43daef1857b28d66f1381f51

    SHA1

    6df67988220a166712fdcafb0d588a72bd1078fa

    SHA256

    c1eb20b36b9abb84c7d9fa7f6308535adbb1d984b618dcaedfefdaf8cb94b603

    SHA512

    fd082be41c1e2a23ad419b924cf459a47e36aa8b07de61bcb74840ec27cb76a039cc3b042c9ec8cd4c785248fa4ca75322be983db6cc396a6149c50c94fde2b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2468d086db7c24599f628e16671c0b07

    SHA1

    5c370f838c015b0ebdb3915aab77cbffa2a5934c

    SHA256

    b88771a5ae9804a568854a7d5f9fe71bfffe0db274c1e6898acd31ab4ee80eff

    SHA512

    c108b86349b2734d293ccd0704d247cacde77af6e0bc60d8d93d5d205b449aa92db025a1d59c03b7239b347c34d3b11ee17f8347d117f9c62a57f41abab049e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e38b3d5800ef9fcffe398ec86b9d933

    SHA1

    6ba8dd627de55957cf947f355ec6d26016495af1

    SHA256

    0fb28cefc0e8571bf6f6cf7c0e4a7a6057a6082aab6bfd54ccede7725247c31d

    SHA512

    3c5bf7c69588c41a52de1848928338346fcf3aa11c0b7c31afac2a27da55e4545f55dff7e67d73c7d17a853d7ff144979aba638155276f3a8e199bd4d0572e5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e28f25e40f71ae9c3870b554a8b91df

    SHA1

    6ae451b164c3ed84efb59d303e4faaa76b823e9b

    SHA256

    c67a005c11829266bd18cca9612b481dd0d6a7ac334c03965a19430dd7bbee6b

    SHA512

    685db6307d64dcaad045cd3dea47787f0233ffe2bb076456e274f8fe967fdcd688d72a0a97c8807e95a1cc695d3e0ec85d71cede9afe667d0833bc209d68a6ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    593fb812b88b1f180ea9c1fb760e57f6

    SHA1

    358fec69adee6af425441a4b27ab00190dce537b

    SHA256

    e207aceb547775c006648769857fe2e0e9f1b17bebee915f7e8ff8a7f622fef7

    SHA512

    3a420ffd63fe4811fa23c08fcbfb731dada9810092543986b7b2661122779e736f3a0186223c3f2d5ed0a2b56043f023c23ee7083bf2ffaee10c488035e60c99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ced791cb1ddc052c9758057c7382c0e8

    SHA1

    6f88dd4e5e7353ffc580681a6afe739509675a8f

    SHA256

    de1830c338a06689b723c5e3538bff76c0191fc359678cfb0c6e8726035b43eb

    SHA512

    adfd4d2bb4687532df0fd02a3d72a3fd4afe8ec6cb734efb2e0ed8f0ec1983ecb6ee5de37ceb5041b66b026add4a629d1105cb72d09c68e441bdb4632835b5f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1c33eac75f07b2527320639fd09a4e5

    SHA1

    85b9f3e686c4883974bb675c0e45ba0a8f935427

    SHA256

    89f8d2b4aa0af6696e0dba2e493eacab33997f6d0a0c3a2d1a29cff719be2408

    SHA512

    42cc72e0c8758e4a9fa9d0562c5a835cf45726c30582e7cee03485ef0eed02563f645ccb2be7f5b57caee16789f41a6dd28fc0ad629d7f8042b9a895c2fc114a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    311412946294c3a6a1a655361ca97cb0

    SHA1

    7e5d643ba9e5b405a0a400de61f3e5ad43a180d5

    SHA256

    b23c1524d61d1e232c4c5841cb005ac27d515150cdf1b6604a161f5242d0a1a9

    SHA512

    6d0a614333f82e35b092bf7b3b8d3694de6020cb3e71fb97b2e24ff7b0d9ca8c5ef4cc6c82b482abd5f87671c44d4651584fe6cc4a2820490318ec02e131d0e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f61196b2dea96baa102bc9d70258178

    SHA1

    6b9b00979f1812dbb622e7003828478f586259c6

    SHA256

    e6a50f5877f5a5e0eaf29f47cf70320678dcc2324ee3bde1799810b400e84c41

    SHA512

    04c2bb43993f410e83141c612392878a66f6a6dd31df075194a84a29d512dce1d7230fc955e3d5e4ddd64856432a63c3b090e03c64afcc0dcdaf9dbf71c7def2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57f593c670265f5da19c1f14cb8ea31d

    SHA1

    062875a1eeeee19dcd031b204dcf319724e396d5

    SHA256

    b7db0a9176941fb934d371f4b74426482eed7e790aa648a96d96a9bd5e85e710

    SHA512

    9610f7e63e14c9e030f17ca889e853daeea827462df49d5e5ce8a4851b3a11e44fd82c7a7c7fe83d0836a99b8281704958bad84dca8747a8fde58aac5181a8f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1cbf37bd2214c60d05fe2b0f79a64d8

    SHA1

    ae3c9afbef3e0df6e808c925021cd658709e0e2c

    SHA256

    a54373bd917b84da753e35a2bc428789cb417a44a5ccaa67d79cb3985477b69c

    SHA512

    bb4de486bcaeea91cad21e3e930507c62d77c4083468038bac9e1d27e5cd1c1fbda4500acd341048c65fe73cd7a6c82dfdbc9919594d36abfdbb0d76947f3702

  • C:\Users\Admin\AppData\Local\Temp\Cab1AD4.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1BA6.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a