Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 03:21

General

  • Target

    44580f0bfd120bf67e58377192b83a80_JaffaCakes118.html

  • Size

    36KB

  • MD5

    44580f0bfd120bf67e58377192b83a80

  • SHA1

    f8ab1411ffe37849d02c6b383f0f4c28d2d67e19

  • SHA256

    0c6d288d6d4930a735385dc02f44a82063c5601ffea6e4a75c04cbe7a7f728e5

  • SHA512

    9339a3e716bd9d1e00d1c4786b42104d79b8e751ae67bad0a039737080cd5d2fb6e060b58d9d72a1f17e8c1203abb137aead65ba1490b35baad9a2e01f5e9325

  • SSDEEP

    768:zwx/MDTHP388hARWZPX5E1XnXrFLxNLlDNoPqkPTHlnkM3Gr6ThZOg6f9U56lLRD:Q/nbJxNVNufSM/P8qK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\44580f0bfd120bf67e58377192b83a80_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1800
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1800 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1720

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    b3da7ba05a9182c567209d501275b1e4

    SHA1

    530c1a66087fc6b80e4f0ea9fcd86d0a514fd794

    SHA256

    200f8737d95e4825bc0a41101f6f385fe8264f18d59535e2fd033dced394414c

    SHA512

    eb5916e11b97c78be9c06d28d53e735513aed16af57513e33d758ba7244e3b3cea55fd52175e52caa4c67beb38b268a62ffaeff495467ee9f69ed1097db193da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    724B

    MD5

    8202a1cd02e7d69597995cabbe881a12

    SHA1

    8858d9d934b7aa9330ee73de6c476acf19929ff6

    SHA256

    58f381c3a0a0ace6321da22e40bd44a597bd98b9c9390ab9258426b5cf75a7a5

    SHA512

    97ba9fceab995d4bef706f8deef99e06862999734ebe6a05832c710104479c6337cbf0a76e1c1e0f91566a61334dc100d837dfd049e20da765fe49def684f9c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    2207130d9ca258c6dbe56c1d7c38a019

    SHA1

    6d35c939888effaca4b97206e92ea17251144f36

    SHA256

    70c0db724a9da80c9c89c852bea43301c8a12c4eeda6c88a81d433cbb50d3b8f

    SHA512

    837c89eea164111d90a0fa26c4ec06a8405f05d02f4a59f1ef41971aa17040c56e7390551de3597f5f2e66ada013190a96ba50b4e27b78875a919b643c1126cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd072564f202aa420bbcaad3d762f48c

    SHA1

    0e66179d392a8fc9fe7d86923ba233a873f6b3d8

    SHA256

    c786ac4037b4d59ced2ad994a7e6164cb85a1f3af6a99b5494ac370b6b480f14

    SHA512

    7a4e3b8f3140ebc59429db894d9dd485029c22fe2214cb839d64e8bec60e84a6ba0b6aeb88ae60b21f4f4f360b9db430d09e5d36a949cfa14af64be76fc88303

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    adb40b1162bbea7271f51923e2628c45

    SHA1

    783cbd68abe26b30768c37af4250797fa78eda6f

    SHA256

    b327e74e3a645c44895f4ae7bd453a705bfb50b2c64c1f3e67343b54eafd4b7e

    SHA512

    625e13da996d23b568739de231d976994df6491c42eb79852d6dab5473db451d28e43f9a4b32a293e5dc97d3fb90ab27991571a297f9ae3b51de3dfabe4df811

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    609c56d9e0faea981736d8ecbbc067c3

    SHA1

    8667f08a515c13e21de95b50674fb19ed964bd85

    SHA256

    2121724f33918199771f39ab88df91bb35bd09f58b960517badd4fa4fb92bf58

    SHA512

    3182020af9a357c5346c09c1d4da0343e6b06b11efaad239c5b1c5c2f7d092d576742d060aff5e8dc4421af3ec70b6c12743d267c471f47f0a900c4c3eb5b17c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77743f79451792fd7209961588a0f799

    SHA1

    51b3c93586f6da2ef000cf208057d0273d09331a

    SHA256

    bbc2c449f7785bf44c02947396c2d48bb497a5f66bb855c3853767e2f7565244

    SHA512

    be3a4e697eb7ff082d0ef9e3e55b0b8465a4b969a9f1cf072cd178a92cda23892fc8d8e1122010af06b001b544fc2adea5cec44ca7f466e32eb00f62204d211f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6520e60c55be40ac7120b311522fc764

    SHA1

    b6a12f26c7937a2a48e5ba0525abe25426383155

    SHA256

    1fbc14a2c3dbb4244167862444a4759e5513704d3e2556b396411ebc16ad1da6

    SHA512

    0523158dfffc78a9d01ef98ccc42cd3888a3b1523223d5d47a685f0cb761e66df2abe7b7528b56647c9559519cf146a6ecb7d1772a080f9feba418ba0534aba4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43ce206527bf2f4be63d998a77615ccd

    SHA1

    930a4f0ce20d38e54d3fa3995b23b49c6b965c4b

    SHA256

    407438643db36b70dfd822e20cc22f444bea6cbf21351fe00de32917a97a449f

    SHA512

    d0a6ef69f8ff9f568b1ee9730f776dc39ecfabad2056a1dfe13ffbcd48037941138830556d568db1612483e02083f784aa0a8740a2028366c9151f6496cef21c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c1ca3e939d7b75ba0b251ba20e44b02

    SHA1

    2aa0d89dc84228d42e45f7af02e88e6ec5f8d620

    SHA256

    05222ea735ba246f4f3d8cf135662aca089197b1621c3624d85fab6801082ff5

    SHA512

    cb80e379ee5b86330f498f18bf6ed332d26202f74cc4b0fd5bde232978f754d36d648df96783f51e581370ea0684a6a651dfad728551da8edade4599415df7a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c62b2899cc4308772cae129022bb91a8

    SHA1

    3d006465236f1f41d3707181c49d9e8c1330302d

    SHA256

    af0a7666ecb63e15424aebb8e1bfa4424f2f9e9b0bc7d5a567ad06f9ea03af62

    SHA512

    cebc4c337ba96b82ccec2888f58ea5dc01e736d794610da4d7bf5b9e659e6dd67eef74e6461c5e92dae59fe54bf90c0bcccd66cc285dde126e4f5542cc5f65f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21c47e07134814e3272d139d58fe69cb

    SHA1

    ff844126daef5e3be0257ae0cfbe979ed1c803c6

    SHA256

    593b339bf9872920ec9f7fa9f064158e02841e63f7d027ce1d41dfcba93304e4

    SHA512

    0022b3ae77bbec3d81f7b3a45e6dda054258a3ce7e0cf8cb053b0caa43a860f340fca3a811dc57f4b64a0d67655df236e9b0a5f816f9bd1f367c1155e6194b46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36170b15fe5fa49a01a7eaae74884ffe

    SHA1

    94a628d1313e8fcdc612976c09645d5cfca4a836

    SHA256

    9181934c8ec431a3ce329c0e1f86db8a5dd2235e0810c3c75d003351cc6cc261

    SHA512

    9a69e1e7b689df963f8df5839d505d4295889cc7e4b8113c207c6a8c860a9645ce644e3070803ea295d45cff9215d15632116195cfa87cf715204ee23a996275

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60775335adc27c56b2f166d7a7f2ca85

    SHA1

    b97181b0c790e88331db46082331a8f445c6459f

    SHA256

    29f7471cdb9fd072b41729dcf8c34ca73c87b738917bc9eddab4b0f9e793e262

    SHA512

    2c5485691762929810255251327b8b330efcd6a93950b4da8909b814fb8cd4267919fff51858b682321c36ec52e45d1e769ae6657b6c928677469dc965a27c8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b71a55bedf680ce840c2a50747cb588

    SHA1

    8480f1bb305ae0d827ba076cf8550390ae4c3c98

    SHA256

    8200a18fccbfb37a39bf5e825f8825c5e8b6e6b3f11b5359756558a3ca7f37fe

    SHA512

    3bfe6301ea6e22b8ebe3b6f0b6d22da6db83dd6707fe97d0900f712795f472705c3df9e0b60dba35ac86cdd2abf5306bff53419bed56f977717d61df5f842673

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd87880fac00cc0bc4b413c4032ecfb1

    SHA1

    339d2b6e57cc6ff244023749a2afffbda76c2f4a

    SHA256

    3c1b137503247099ada1d319176c186c49805c6456903d4f221206013bb2b05d

    SHA512

    fec068b2a6c7ddb60b3744b3fb29b5279d23546fdf3391c869d907db3f8f1250070dd5a7b1f0e029ab890256cd3d0d81f1448b753feee8e85853858705f146b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3e44be6051693a75b7274a8a65d232b

    SHA1

    18fd4a48378e8f5c05f9afebbf0c516d53af6749

    SHA256

    f3aa82264166caed3efe9c9699ed8d9c79ba9e9e136ce62dc5941dd95b296ee5

    SHA512

    8197772e937fd9a465086f9575f01a769fc69c7ee19f4d3614b5e310d1d4236b7932226e326cde64bf1ac7ce11d9e31fc8f91de46dace5840c77bdfcabe6ccf5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d20bbb73137c19b4cf9446051c9787b

    SHA1

    1b0032559d5f3f5d05515f6fc2405238a39e7067

    SHA256

    68a50b20aec7054b27909ceea87fc904eeaf4562243463500f9266455b4d7d4a

    SHA512

    698838dda3595aac4e0852758bd54f80b2e76de8dadb9c5b7cfd85a7be7b7e2129f2e834e358fcce9434009ba1c5f67beb99088764c3102245c210f0fafeab78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4dcf2ad8e51e276fe0e606493f88d8f

    SHA1

    5895ea12b48c0cd76c0fda3f8b418bc1a52afe07

    SHA256

    5cc2d1c34669ba2266da979fc495d146e77a414cc27b0cf03ab613384d2531f3

    SHA512

    431220b3e757fdae7cfb9532733c30f20c7793597d6428db922bad0226cf15b775c0a2961ea89520833ec6aed86629fb4901aaa77febc2179f6d0fc04eb6b19f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d48c2bf8e439b75594fb9518041ef57c

    SHA1

    9e195dd3db0ee2b55ba9bfdda6edafc64131a005

    SHA256

    60ed62d3226985e7db8761cd76708fdd06a69fb64f480f262ce738671487b114

    SHA512

    23cca9d2558fec9d7cff3736504113551e0951018dfaae1597c5e97c415acc83b771b60079ad0d39a24669e4972da057e974f89f39363973f03ee4c6f4e9c499

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33609a8e7bb1ec2670b55416000a3a80

    SHA1

    06d3ff581781368e0812b7408003a52a53e5ec7d

    SHA256

    bd93e71085b814b2a5cbbed0af139eb836a71c4119e9844e742d996a141f42e9

    SHA512

    8634f55a907782b037aeb0cf72992cf6c0e801ac8dff2a9c8137ede49de9b324deb7d26611280a8ee0b5465a0d8762cfe0aa6c19e5c988d8337f25bbc442039f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f08e09bb233d40cf81ba1e75374eef16

    SHA1

    1e93450ec0869d212fbaaa8c0fda53b7801afc48

    SHA256

    447a5ef9a9e3b66c54a9892cb19eba1d6a542bb058af1b6782e2bf2c3d79dcf8

    SHA512

    d3825c1f2e3b1e737218b510b56dfca4d5938dbd32a9ecfef972bd35ee4869096b9c429ea7cc656d1d0e7f12fb680525525dc1af4dbce522b83cdaef9ae8ada1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    485a411a91fbe4348834f5a410858a69

    SHA1

    ecf366ff5b214426c2e67a5f4ce3382116101a63

    SHA256

    1dd92f76b8aedc6354e82413706f135a21382a2a924c602b176d2cc9b9f108ea

    SHA512

    7e0f349195b22706314a5439e5741d398e952a0f18d77eb6e17a41fd7d4480c5abddd6895074cfd9f43271d9100b803d233cd2cac07bac4b70b9090bb7ebc145

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    70ca4dd0c955947dcbb8e905350699ad

    SHA1

    7882461c431a301cc3769f09a3b8021ae92d10fd

    SHA256

    4f9c9e83dd441bb97226113b3ca361e5d8f72d314124009240ccb27c9db91a28

    SHA512

    3dce318b54916401210a662ad2bec3e80a029dfef3c514ac598946fb17bcc15ed0d3f87ec531f82a5cbef76caace60fdfe0a637bbd8be695f8990c140bb5a3ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    392B

    MD5

    9fe1a2b16b27aeb3f497404809ca5e2e

    SHA1

    21e1dd36dbd086a0677cb93dd96e635f76db919d

    SHA256

    ce3da1488a9cad17095a1e5c70684b590b5316f238ff53d78bebaad733dd8b29

    SHA512

    a143f2f25646e29d6ae6ad789c0bd10efd97143c3ba29d92e9dad73a714fa125e5c16bd9d18c5e6c346cab04fcd1576b07d4dfb790bf5c31b304a094e08c8fbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    fae26e9752303023bdfbdd374a9c6ea5

    SHA1

    72f17ccc77cb701448eef5faf2e0caccc475771f

    SHA256

    f1a796975064a6fc3ed1c5d60c1f41e58f9e2e49c17b41ecaa4d125f2adf2653

    SHA512

    7b5fa637e86390a8924cea4da7056042e4b3bea3ebc30278f6fd617ded799cf496043dd3a89957e2ba7e4bca4d7f3cd0e6714b066ac8adf42e07759ce6ae881d

  • C:\Users\Admin\AppData\Local\Temp\Cab1C0B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab1CE9.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1C1D.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar1D00.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a