Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 23:10

General

  • Target

    487c22f6847bf2a3fdc7e4c18aef8b5d_JaffaCakes118.html

  • Size

    460KB

  • MD5

    487c22f6847bf2a3fdc7e4c18aef8b5d

  • SHA1

    dfc136b745f0d73c149898fa8b5d087d51e3c29f

  • SHA256

    00d35e577c43f69ca7bc0dddb8cb56e0703ecfeaee6b1bcabab72221172e6c38

  • SHA512

    49e76cc438b9f8895323fe61ed937441dcd9028c5d48106c7acdd6444e1527fcf76500b22a8d226555f6720015f7a0531cda3547890eab8a69fabdd74a088f51

  • SSDEEP

    6144:SvsMYod+X3oI+YYsMYod+X3oI+YJsMYod+X3oI+YLsMYod+X3oI+YQ:k5d+X3w5d+X3T5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\487c22f6847bf2a3fdc7e4c18aef8b5d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2892
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2892 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2852

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b5a6621a14a1fbdbf2b643142597bf1

    SHA1

    3fdcecbd82c6cbc8abc26ec969da7024ab352704

    SHA256

    f1c8a3b13aab5d5e4486e44b5d42a953424ec627f2e7b7e0ec793923ee212292

    SHA512

    3aae8fc7fdbe15da78203c0aadf279d5b69c89574355a67171f582d1c26a90072a5a6152c63b5d55d1ccc566649fa24d5cf0d03064dec38059028d45f6d908b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c7515ca898d5251c74ddfaa7f5b0cb8

    SHA1

    85ea39e279ca09f7559394f96cfd1a45731f6743

    SHA256

    85b11fe3dbcd962a93fc59b744939c178b8bd495efe795eaa9783d9a51b580dc

    SHA512

    6755d042f7a2dd53e699c9d8009b07f4021dc2993312d91f57fcfd7c616fa68ce574900ab75ea446be053285cfe4ca8674e27293dd57e3f0faa775aecf586840

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d261e40e92ea74528574fd1f43fbca50

    SHA1

    68a01e224f1fbd19a70f24d3c693e6736fa3877b

    SHA256

    8273aaf613189e87c40c2366a2e0d5977fca2b1e99d2c99b794080d4c9ce7b75

    SHA512

    765937a381ce30d751ea02368eb4d4d08e5234803951243bee29d302b8784959547d68c6ffdfc7f413cf523504ce8c3c9a61e8b51a3cf69c79db91a9de5c0ca9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad6a15282b537a3380ae993766cfbdfb

    SHA1

    796b8fad16a6070d0627928dc6fdf6566d0e3460

    SHA256

    30604ad072e5a58565a4d2c9afb35c5288602bf191eedfeb319f170546c4c564

    SHA512

    0ceaf7b85045b7dfc975bc8155b035d042fe3a786c4bda62f42719955954be281bddf096d52b0162c666c2e553d1956804847a190460584dcbc408851c3f2018

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4344b54c09b93633461787c656a5fddf

    SHA1

    3fda53d9a1ee96b31936ff7a76a76435b3832f11

    SHA256

    2069383548ce8ff67efaebdb1e263e821a7bc1621bdbd43e5462a36ab846cee3

    SHA512

    99c7ce203705ba3c9024b302f59af12a988d45ba7b429643295d641267fb6d680859cd8947b3636566f6956eef17943317ac7b0688f15263dcda636d618aabcf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4835b811da74035d2b6fbb92e0ea49fe

    SHA1

    6a6eef2321f638afbbfe4e9c5cf1dc9647890407

    SHA256

    8226d611adcf223c034db9aa7f60bd000b4ca1309c9aa7cf980e5212268b15cf

    SHA512

    2d87317bf3e6858a7797cc7fbfbe8079c779a44190ec822a6b39b3864fd091eda7bac05b83c0839dca3185e5286a021273e26f6d4f19f05bdef233594f532143

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed68bd450fe19578c95cba5b0e515b3e

    SHA1

    df3c16685f2aa5d6f2b29a079898f422ecc9d955

    SHA256

    12d47c5b755736697ab54e44c9b7f89e8d8c4a35e02e4bd4bb14de251c930abe

    SHA512

    5ed205de18a9be16b64520f315fa5656417354794e6e4b09d8113785314b2b176d67f73cef03c351170fd04a5890bab70cec8ee0f8fcb296ad7dd7d252174935

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33fdde548287b0fdf86f0ba6efd5053c

    SHA1

    808c78f8c11190afa7b0b1a92c64381129ed54d8

    SHA256

    21d142d23ff9f82984d566aaad4acbe67ab64a8ce8d9afde18487a1611075982

    SHA512

    718d2a6932bcd1ad748aba6c738c96bcd1d2601aded4fc228b6dc49ed190421c803f04cd55ea377313d86d3e577b13ca0552164e75af419bfb59f1055a920d96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3d600a0561c9e1797fc762115694261

    SHA1

    89287cb5525c7b33a1749de0122250818aa2cd0d

    SHA256

    a9f65e9012d4c5eb7b5c7618ea1eb2652644a39d96e5412b8e383007d618262e

    SHA512

    b9cae504ab65ed04e15b8cf85542e126a94578154750333e873e7e410e8183b0ae79a42c574ac44f4366576881dcaceb7a516644f8324ddfd4ffaa544f006c48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec369d61b8aa1b570849932f6b1352a7

    SHA1

    848eb700e097eabe1c97fff50e20105ad35d2da6

    SHA256

    aa936400ee6baa86756295be9d0fbf6efb528dd464ec4fffe94eea0e8ea0bb3c

    SHA512

    ea13f7bdf56b67dcbddb0486aef71d98027d1a21c2b3c35f49032a174b5643e271132b440defd81c877620077a5edea99348c3a994791c07c396dd2378f1b291

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93a1e2b2c344f89383cd97043ffc9efc

    SHA1

    e4f1ccad456c9778fc31e69ba25f9f3eb94c0db7

    SHA256

    e154af5e186b59f2ec87612cb06b12089cce256660a7d6276beea2eb98e2a9cd

    SHA512

    cf2cabec49656d44abb8af258e9172ed3c76c8608b3bef16a7abe40477ccc537d77be39769160c1d46ab5579452398da31821920752a15576886cfea5663c7b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f367316a502a0869d5ee311146cf5507

    SHA1

    58b82c8ea17eb254116dc39c2c17a90f7c613dfa

    SHA256

    c174c6911cf7db9684892e1d6f69e6af9425719a3148d87747d61422df5dcab1

    SHA512

    cadcc22ad3d58dd27c8978ada3dfd8ad1b9b0bd7d57b87a12ed79996b9b5bad23bade5348590412556eefef99e692a4bb8a01d965dffc596e28d11504f9e44a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b1a26c2191c614aa8b9770915d6c1c7

    SHA1

    dbd381d08f513d144d0e8d4a4e30a1bffb103751

    SHA256

    942cd1b6db67abe075a166791e5be4af14752e813e0690ddf3f6ee3d5635cf80

    SHA512

    cbb5c7b1f950edcca2967594dede37ba55209ea075d6a94abb646d5d66730c3ab6a720e511fdef6dd10eede9a284fc6259417b622026b021bc3863715c45c1bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f0f7ec9d081d82cf8f576542e18443a

    SHA1

    4334bc69a8f608432311d2eac3b4211f35db2117

    SHA256

    c1b01849eecd65f04425281c2d48858e2bce8510df87b87feb25950193e8ee52

    SHA512

    e4cfb5640b43f37f2542903ef6b6e55abdbf5a4b68936567b2ec5cf59abb135e3d17ce1b33a8e9f25da1634c1247df47f583a570879b3410d2f1718670e7c4b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a883295307930764b63ec24c2cc62b9b

    SHA1

    525b965765e2ed8edfd270db81aa02d5d53cc924

    SHA256

    fcef531f3887ecca2dab1a339d598b2b55934d602840efdbb854f25d621e28bb

    SHA512

    45857f9470a7fa5e9f6bf9f49e98d758d67fdc4eb6d25a1408443f7ab995e1a719434385035f751d1544c3a0226896bc95ab1ccc6fa26f4bbeafee7ac0fe0b3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    400017a249d2e39163f8950ac53b6130

    SHA1

    a6b0af4339eb611bcea4f9689bae398303887752

    SHA256

    0048cc9522ff6deb7c881fcb23d5ec3b3cf4eff448e64d2dc999c01e8b7a8f3c

    SHA512

    f8a9868cca2c926442aba86cf3810da8114f72136b6b7cfd3ac880d9fcab3c59a6f58ccbb60fd150cd14f93e87bdc4a5d56931d1587aaaf9dc801fcd868c589f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58ba349526c176edd33e7cfa7beda161

    SHA1

    e7517b58f842ac1cbe3e87ca9236eaa52bdd05d4

    SHA256

    d252772f95241fa13ef9d8c2f2d5686b6a3e6f9f40c02b8c301630a3ea01ad31

    SHA512

    18a2b358022e057e4a129124e05116e5bd0213be33de54abefe3f9acf4688deca887353494d9953c87c97fa9b2da08b9b1591c2b0fc13ded8a1694912654bf4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    604fee8ab390124ebbe30310129e25a7

    SHA1

    867a078ef03d84eef705bfd7f731795b01723c91

    SHA256

    3be2ed14f4e5d41522f3b08dc69fad85b0073e90b9c3aca26a0b011e099a980c

    SHA512

    6ba724a2ecf076f644faa0871d709f61082ca5664c7d5fd69c82a91bccd5d3d8622c249a2094dc38e538e7e10a2c7ddc9f99b3d77a3a5448763f34b102ade266

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1f3edf7840fc5be7490be144982f5a3

    SHA1

    f2a0ba857e3880f81dab2a626afbf19fabcadb00

    SHA256

    335f54fcaae7a25c54b66f61db099b811601f4e3555eb3575fa36a9139c82b06

    SHA512

    f6e7b3adf0e2c8e77b03e17525d6c798fc8eefb1b183866da2e308936bc04ae8ae2bd3f3e3f027faadcbcc261bbaa83c43117c140ad893baa133038d9c246476

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    81717577af335b55fe7026bbe0efabe8

    SHA1

    df045f6bbec358a171d2b64ae97a2b54ff7b015f

    SHA256

    78f55ac2634d36591cc96b07f3627af55fb7352ee0188cf483ee6df4e54682e3

    SHA512

    e64c01ec91b175dd083ca05d31acc7ae8eb0a5a7a56d970126f55d107d1bc09a0fdd1dcc0f0c1485071f3a76724fb783c53dec7380768c3bf1fd9e35c5ceb2c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd37a28255d4cd3c19b7b6c054a9d8b7

    SHA1

    d6241e583ade63eaf175d072130e5b6dc59f9d81

    SHA256

    da0f4c56989e87b9aabee7ab866a04e4cfd8efb687e1dc684776d150b6d69c1a

    SHA512

    55a90b9b8be212f8239d9c984868bad39c9f5c98511358700e625af7daa1f608fe3f1e8ae7b58bd2fa8d9858f837f5482b278bbb86b9b687bed28004f1b1c290

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2ab26b3be2238c2cef581c82e4a06ee

    SHA1

    0a1d76f4e9a7a8d95220bf6b9bd600a5cbcf2083

    SHA256

    ae522d799ad873a937bbce77accea046818c9a677a278dd2f6c46e34fd384144

    SHA512

    9706b8549d0ebf441a665bbc27beb319f4658fbed5b0a5b906bdd1e41e55fa60d2b5d238d1715c9a610fa0b6cc39cd80e4ae5fd0464375eadfb88069b7431611

  • C:\Users\Admin\AppData\Local\Temp\Cab5997.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar59E9.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a