Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    147s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 11:49

General

  • Target

    460c0d9dfdac07bade7cc4beaeeedeb7_JaffaCakes118.html

  • Size

    400KB

  • MD5

    460c0d9dfdac07bade7cc4beaeeedeb7

  • SHA1

    67f77d566231a950e174f582f164be9280c21c22

  • SHA256

    6468a1a92863b1a09ed19bcd2f8b994a9118bd62e5475e4b3fb919cbe22df243

  • SHA512

    66acaf40c954971273fc4754aa062a7cd1ec2f41d49c7ee19684237ce47361f80ed45c458dd2436c8b75bf7f59af893e4c00ab943190ffbd8ac3da117923134d

  • SSDEEP

    12288:cpziQ2wFRbgE3Q0g1IPt23rl/Zsloht60pel8Bw:mRbgE3Q0g1IPt23rl/Zsloht60ICw

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 62 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\460c0d9dfdac07bade7cc4beaeeedeb7_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2908
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2908 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2716

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    e1d58242c1275bd113e82476dbf42114

    SHA1

    e3e1f643a54633f5fa969cca3ddaa5ad584342d8

    SHA256

    15a9fa0a1fa1b7c97e2d08f934f980ac5b67a94cbbfac7a06ac995fe853fb031

    SHA512

    8c5b3820d3a5547a9c01b2963de2add0c3b79706e8cb4c5955d7ece286f9b831bf58d6f22b88f1b824d917c3cb44d84161cbeff104ea6f346d9506cca8862829

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A16C6C16D94F76E0808C087DFC657D99_F82FCC341F124F6AC9D153F6ECE89FFA

    Filesize

    472B

    MD5

    8ebec409402ab20953ee52f05cf2a3bc

    SHA1

    4fcb2332f8e4843cd5e80cfa9938bde757674f53

    SHA256

    ba1db799810babd1184170b7d824f0022e39b9094cfd261c62704975966d95ed

    SHA512

    84ac6b4c130fbaa6b998e90ab4e1eeb616e6a6654620973cf0f4f68d991c959f43e4266800492356f13164103b3b4fa4381649d31bae914ef076174e50c1f418

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    3356a8c3244e409942ced3ec5396caec

    SHA1

    3db1219c1272821a48c304a7fcc4ac6c8607a320

    SHA256

    1e33bb309b78b9d8cb68a821a51d03cd1aba31f83e908d9e8b2087f858cedc31

    SHA512

    3824b77c65920497b4d2f2695f26edb34ac84d73ab486113a1f441f0970a041ec7864b8ac0d75b9d185002995819b9f141fac7fdb71370758395637b3da6a052

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    921da7043000d0da3a715e3e879fbb21

    SHA1

    9a190b7dfc07a1576bba93b25407e927d9a649f6

    SHA256

    566b9853af9f4cc7ba1e3dcebc97cafd40e63e3d0ed58b31407f6fdd045be588

    SHA512

    900505887d330b550e802f05fb3e0ef3831310ec960ed210bd6f231f64f75116f457b33b4cf2c5f158fcff95d0532398bcf147d71e749272c259fda77fb228a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f7964ab44f081482a1d93eccac6a3b1

    SHA1

    2d2630102e4f403a653e845429ca5eb8089cd6a9

    SHA256

    d604e9df2adcba21bcede98fb54f8605875489fcdf5ea662d5d68a60afc8a073

    SHA512

    aab0d2c3133fc0a786dbf8a17f07fa068a93db6a9b1f81089fe272b9f5547c3c2c0e6bee3d03c4e4685f1dcb11cd7922c63871986cc6d4b5b64a7a3fdcea4280

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52e06a0aa63d8cc4623d144fef1f45b1

    SHA1

    92898e4d79f02302167aefc43cf0fe22038c7786

    SHA256

    dd76c6cbbf49629162adbd532eb51f6a39f92ab7dcfdc2677c358a50161fa69e

    SHA512

    0724729a84d0664ee301b7305f8157bbe58910f2ce8a3d62c7942cc5d338306b1f9188205a05085099c9ab27a9e85446196cceaeb037e9b1d616161159c7c747

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b8f601f6a621fb7ed0df792aa6f0d35

    SHA1

    e3bb93341b77153031ba8ef6008cef99c61c247a

    SHA256

    0a7082dc040da68d4b1edd2c632b9d35d8ce8443abc48060338a684df72326b7

    SHA512

    0a793d95a0d59f7f204ef90a2368e9dea7fe17782b4b9ecbcc4df503dc9d96869e72aa6089e4ea6309b8fcb401f4aa2ffc04bcfa09c976d31a226d8efa797255

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c2fdfd90db52d4645b80d25b7d2e453b

    SHA1

    44d791b306b57b237e3698ab9c81e311226e9853

    SHA256

    693d85081414825978183bb78df63606780481c06c146b5cf53baeb8d378169d

    SHA512

    1a1f3e7db84635144da58219553f80fe74f06afddecc150c11a11d35cea4e7531a89db6393b49a77a0ef50b746b85d453a324ce62f81376f0d6c8c4172a01d3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e668523a9921a9f7f124b27859930cae

    SHA1

    86a98b8cb78f9daf858cf525383ceb114fb34bd2

    SHA256

    0bdf1024432cb192b72f75fef09cba613f941ef1b337180c1a74e2b7edc4cee2

    SHA512

    627dde3f397d3900b877ec4d8a62c1b8af5fbe87c6a742e110a36110fc9b68ce6f11feb3b5ae5e2206969aca3ffc37c71e8e9e46c183974b05a57ae517df9c3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45dc480c9699a30208e9c3ab92100f75

    SHA1

    172a6dd95ebac613ff8ff606c311cd92bad1b0eb

    SHA256

    0a1a860bb28911b414d760be9cf078ae9d5c77ded19b5aeba1ed9b35e11f53ad

    SHA512

    358d5e8138b859903650e6e667ae05f6a412f0bec025dcc362f7346b94d490fc3f3cbef6ad4009cc583b690ab94e81ece402053d94df3e891e9cd38574940aaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    529f9e9bc872464b57869dee5f0f2b76

    SHA1

    6fd394f90db38eaa3b71cc171b182d5271342f16

    SHA256

    95add995a7af7467596727f880747d38e5d45a500e90d739e7def971a21c34a4

    SHA512

    5e5abfebdaca9a0023466f880b15315a8f5aa3d63661f3e19dfc7e9ff355fcb169e67af489ada25e2b1294e7cb0aac547ed9f9a9e3fbe326b89f580397956ec4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4c1486671101bfd3f2ff2374fead715

    SHA1

    68e4b2b96044912fbe46fc5a9adf865feeb93635

    SHA256

    ce9c7b5e671fb59c1fce6cafde263f9dba3188340f830bb49be27ce79fb634da

    SHA512

    6e6e0e2c0b57f48b30959273e6e0ee7b068e0cf3f63eedbf881d5ebb8d96101f1e70678579711f2c5955b6f765bd63c188cfe28e2945f41e19fa6c3adc219bec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f815da2b6276da8621cf2af8015c9e14

    SHA1

    49463a878fe8787f2e47411ff1a8fd44a319e469

    SHA256

    4022a96d2519bd840fd54da60001107671b691c8ee964fea1aee156c28ada318

    SHA512

    4dd4d1eb7dcdebc86eaa1374a01f6cd2a951de1a39a9fa101d7068e1d69ac4684f6aee44d04a51df7aabb892e81e35638383f4158163941f4eb6a5800d0006c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec6ffd36e3ee7e77ad5e99251f1ed319

    SHA1

    1725c5fd11f46f8de0745744de1a6f2c20d77280

    SHA256

    6e1b42c4d198c6a6aac4ae3de3563e4ce84d390b68f2a01f5c98204d538512eb

    SHA512

    51c06eb699e36b254263ad22bd812f1ff9c5fddfddb44f15dacd77eec5050ccdb85db292321bfd22df48eb01cde2cfb08cdba8fd0930df0b01023a6dde32abfc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2a279f6f05252ef3e2ac7fbdfa7e1b0

    SHA1

    69c311a0bccbe7ccd4da4c6ab444cb81a2cb7828

    SHA256

    913ad5ba7b1cb4f331812f77ffb27e51b0e92bdd4d348b672dc4eff616988434

    SHA512

    df54ebbc3670cc060c27d7a3ca631ab829693dfea5cd78adfb8edfed2562173fd76f68a9f99b8d410a6ac5db43678b1cbb8a9d9ebeb1b0ef4c8eee623728e424

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69cbe88e3dd4be6570e28ffaf141862d

    SHA1

    28a9d49e9207e45951323cb42613ef717c59ee02

    SHA256

    6ebde0aff07d78fd1f43629dcbaa5392b69d3e0908b1729965969e315efe6c69

    SHA512

    36dd9f85ce814e996331780fadaa5fe0180a0987d48db20c581662e31f0a110d5fffcc55b0e1f062fd5afc483d41d3a076d4dc2a98e107a012fe85954851c726

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    fe29ef541a19ff4a04ab8f7c44d35e91

    SHA1

    58f1a5cdb0615226ec868616b7e9803a4ed426c5

    SHA256

    710a0e24f496f0603e7a6df1721ee3ead6cfbe52a8cb1a41bf77df178b49ef15

    SHA512

    242e609a819cd826d50af3ce4b5269b87b5cc921de6c0c8e67c15b198587e3f03f4dc6b76bd68139f6847b43d78afe1d8b4ee377479a9231a44474f54c66eb2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    0a2b3aa90db0cbfcba10c88b22f312dc

    SHA1

    59ed9e5a14c04dc0f41f9c809c310ff9093dde93

    SHA256

    01c32788b95378df1c6713f03def5498bccb0be601ee832e9a14277be369ae6a

    SHA512

    41317432f69ddc556ad512df8df7fadb0a6dae8237ac54a145679fdd51acba67df6dbfe8b2d8f7d570ffc3bf323d62a1e92eaae5b6d7037ac21c76a478d909e7

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\2SXCLYAX\www.youtube[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\2SXCLYAX\www.youtube[1].xml

    Filesize

    229B

    MD5

    5b8b42c9818086bf86d4926ae66a82c3

    SHA1

    402490ea1e0708ad3af17acdcaa1639fe38e7de6

    SHA256

    5f46afd9d96984ddecb0db945307ab040ffaab98c3c87a9c004eead1bbdeebe7

    SHA512

    0b8b49b92173b64aa2b0641acade1ebd5995fc243505f201e24a0408baab23c7b9c0168849020d694c6605a451d4309003f99423aa361a4d68ace8d8f09556cc

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\2SXCLYAX\www.youtube[1].xml

    Filesize

    14KB

    MD5

    49baa7b7d92bbe53895be95ae1aea6ae

    SHA1

    728982ed9258b467c595ce81c7a0d492fe07512f

    SHA256

    f8ed07df53d8df842f89208bbbaace72b801cea6ce6c5ee30f74015c91bae583

    SHA512

    d8740132558f6759b0dd02533a37664e9b98124c1c4d8592ef243bace9883175dc9d3e5b5017044918aab7bd0f281b9aaf8ea69d9fdb9a09c2352c1feed28b19

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\2SXCLYAX\www.youtube[1].xml

    Filesize

    578B

    MD5

    180306134dd58bc3df9c81cfcf075a5f

    SHA1

    e0d65f9448f06716b1d5c2b5716d873000e7450b

    SHA256

    815d29fd633bf13b6a086b1f403caebca9905432209ec374a6a6b2a7d3767e42

    SHA512

    6fbdd18b599489c2d44c851b8ef7cdf731765f389920ee7081739e2858d38109814d61e164ba4a0806c349849426fabaeabc76f5f566f018c45b2819b9ddf07d

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\2SXCLYAX\www.youtube[1].xml

    Filesize

    578B

    MD5

    ee67a52f3a4d9a7371668a460e5fec0a

    SHA1

    79ebe0e4f10c3227a4abbe70b8a3fe896789913d

    SHA256

    7a6d8c59a258ea8902a6a381b5a22b6ddae78f328e32ad2a31769e9320f3ab17

    SHA512

    667035625a60079a6a6fe903f95d657f761e3ef93be62aef298e179c60bce7fb7f6223dc96c12ec287d0b9d6fc360df0ed2859e63824c5cbc4318625554ba8ae

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2XHJXO3H\css[1].css

    Filesize

    436B

    MD5

    1eda73b7953b941fcb4db0459ffc59ae

    SHA1

    4d8d09938660e8d89734d9da70960444155543f7

    SHA256

    029ef6e2d296aeb28d33f4bf294f2b7f8fed646e10dabbf3e98b96d4d736144a

    SHA512

    3a3557e9b66f3bf29d601855e0bdcc16b16e3ed76b66d80dfc8e4d72f3888bee182a61ff184ee42cfe3aff5633cf643e53d5ad96da0018188051f87a1f4c62d5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2XHJXO3H\css[3].css

    Filesize

    216B

    MD5

    715d1034ff4f45f9d3bdf2f6f09fbea3

    SHA1

    10539f7b1eb1d055f645822e1fce5f02f5753cd3

    SHA256

    3a112875c8e13a50b845ba2e64577dca08ec0a3b2d8e683fbb959caaad342a14

    SHA512

    b18c3d4b50daaa9787feceff336ee8ebb7d6fe5af7ec11f3d9f2928015ef0eab8511848629b5c556b5aba2b09339439b1fe3d43f5dd4e55ec47e080814dd0319

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H09CVCL3\cb=gapi[3].js

    Filesize

    133KB

    MD5

    4d1bd282f5a3799d4e2880cf69af9269

    SHA1

    2ede61be138a7beaa7d6214aa278479dce258adb

    SHA256

    5e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693

    SHA512

    615556b06959aae4229b228cd023f15526256311b5e06dc3c1b122dcbe1ff2f01863e09f5b86f600bcee885f180b5148e7813fde76d877b3e4a114a73169c349

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H09CVCL3\www-player[1].css

    Filesize

    367KB

    MD5

    a9911a47a877d2736a20d97ea9030fda

    SHA1

    47f796faf3af4f64953cc6db639d16630a783fff

    SHA256

    a23b23fdcfb6b7aa426716b112dae01903b1224310b7b68ad118e507ca1d9dcf

    SHA512

    bc045bec918bb0bcc585afcb9af7913276d5c5e10ede5cb1a38f2d86b020c9dca23b8f134414d6a4652c76fd5c6172f3c88dcf8360ee1a2114b3261b62b01a25

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IW68H88T\font[2].woff

    Filesize

    62KB

    MD5

    5536efd1fdb913938e48eea99f64df0a

    SHA1

    378046eb5350bad4957a11df02ff25af07988eca

    SHA256

    6824acaf5ec3b872f6639faed2d328b2c159d8ea0292bb749423adf1ff96c96a

    SHA512

    cceac9e995a6775548cc44a7801a9870fa1c7adc7fc4afdcf23e3fc473ccb75bd72471828d2ab49031c358896572104f5a979042e7c1b1e74147306c2608c4c5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NVDR4C1U\platform_gapi.iframes.style.common[1].js

    Filesize

    54KB

    MD5

    7ef4bc18139bcdbdd14c5b58b0955a67

    SHA1

    afe44fd9a877f81a3c36f571c0fc934324c6cbd7

    SHA256

    192bc707852c5986f930528442d88a79e5bcf4513aacc2b722a3c5e964501838

    SHA512

    6c2920e80e4d5059588a32f75bc2b5dcc19f8d68224c0935d74f9fbf49476ca5b1ce43c279768f3d36871dfcec39f36db3fcad559c2f93cc540154cdbb04dec2

  • C:\Users\Admin\AppData\Local\Temp\Cab6940.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar6942.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a