Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    147s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 13:27

General

  • Target

    4664e03eeee026a12ec219704dcea4bc_JaffaCakes118.html

  • Size

    74KB

  • MD5

    4664e03eeee026a12ec219704dcea4bc

  • SHA1

    e397948ef08c9611b2c8cb9f13112e47d82d9532

  • SHA256

    179332a939bbd296b1ed712ccea7e646a22cf3cdf44052f584d089dda6709e99

  • SHA512

    d41be950754f9e0f2774c7ee34b91fb3178b25a56372e96e8ac32d54805abb7e3abd553ddffefa8b9ccf81dd8bf581a025b6040bc2b9fe8d3358452f7ecaeff9

  • SSDEEP

    1536:jMN1I/2MKUVHNiWSGQJGp5u8uWueeQVl+x:gN1IOMKUVHNiWSGQJGp5u8SnQVsx

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4664e03eeee026a12ec219704dcea4bc_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1616
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1616 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3068

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    e1d58242c1275bd113e82476dbf42114

    SHA1

    e3e1f643a54633f5fa969cca3ddaa5ad584342d8

    SHA256

    15a9fa0a1fa1b7c97e2d08f934f980ac5b67a94cbbfac7a06ac995fe853fb031

    SHA512

    8c5b3820d3a5547a9c01b2963de2add0c3b79706e8cb4c5955d7ece286f9b831bf58d6f22b88f1b824d917c3cb44d84161cbeff104ea6f346d9506cca8862829

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A16C6C16D94F76E0808C087DFC657D99_F82FCC341F124F6AC9D153F6ECE89FFA

    Filesize

    472B

    MD5

    bd5c8e332f97ac0ab9af520076d9c96d

    SHA1

    c4edada74021495cee9011998ac3c7b2f4fb54e1

    SHA256

    2947283c10244706c2ee62c23b39965b63e3e9cebbe3a513f55111e4a0b1167a

    SHA512

    a6c861f88e4056fa428671c23cce4dd8d910af292324facff20394a554568b2158f5a4a3cb0513d49f8d80b6eb273d96e06be12e0cc09c75cfd4acd2753313eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37f61738431b994bd00823bf4ad5caad

    SHA1

    b0d76040671ebe05189bc037da3c9c0fd49e82b3

    SHA256

    af9bcdc9cdfeb202098be8a83f447211c1b39bb604b5c13b01eb2c7321f70b69

    SHA512

    d912515beee7e1adfac0ebe548cbc249f43eb9090187d100b4fdb0451f5d19038c64d40851618076b3dc5c4612c22fbbfbf853f78db2abbdbeb60abccba276f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cfecca90d5a269e02fa0e9cf095df255

    SHA1

    d10a3cebc793ba1e82253279a6b734500b4c9dd1

    SHA256

    fe96be103159de6734000a3a622673bf073dbed1c6ddc646f5a4a00c8b3dcada

    SHA512

    e7ccacb03e88d616e50d8a19b376de64ceb0e521edf1c829a4cf4bff5bc1d477ba40d40eec49eee729721ae53482e5d2143fd9626636407acc9febafd8c57c09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    74ce2835aa8a2605f1934e917bd19aea

    SHA1

    ed5760069ca1945ca57a29f46c081e48bab407af

    SHA256

    7a0070a548fee0f98ab640e0952819793569e80c8704a40696ad5cbbb9712f8e

    SHA512

    93ce008fe94a17d568d482d1e8a5d2db18e8dd53c8b4250ec36b487ae47ae3d4187a6cc8b5e51f90c9081fcd8b3f18c9f7439baa4039bb89ff56695b92b8b539

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e872ecd31aa5bc290abbff178ec02fe

    SHA1

    c2ef2d35babed2bd910ba6bde7d690346652682d

    SHA256

    cc6482579bc74fb6395bc3a886cc177c55e04aa52c39a111c61777dbdd31bc57

    SHA512

    6c887c73ea7a2c996d0b44643c8226f70d87a827b720df4c3c5d5dee2de9d2eaf0489d21ca67e3b9c3f346f0a5fc66df92e27b47008a0a438d7bfd9e58f04b93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    661c5d373893691f427d378d20e981b8

    SHA1

    c3387796fbe05a64fd9e181602cb39f9656f2652

    SHA256

    2303b917dd0719d9c856c3cab411751c9332e83028906dc27c27b00a24b57e8a

    SHA512

    4bfeb24ce230cce663c17ede1b5f33c2621a112ddc73adbbb9dfad4c63c164ca0d55dde5ec17b50b3c9efe40b2ecd599ce643f3a5a4acbe850eb3bd6bc7c65fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3543c24386bc648b59e605f5eab3705f

    SHA1

    022fa3bf6fe43629b965fd9900cda809d971794e

    SHA256

    74688a86598bd68405a1f2d49fdda61dc6eed8a90c0644f8fae08874be6b8fe5

    SHA512

    ccd2eec940e1bd30d257975a69e4b08782f0ae0591669f791ddf77289053ed2db99278c8dcda0ef87ffd1840cad6735783c2925cca4ee54e6c6ad1a9d5d4ad0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55f8f1e450d023e945bf1ff86beface5

    SHA1

    dd39f7cb2ab7e1952bfa88ceb9a8460fb67470f8

    SHA256

    19799e23edab99fcce550773ea7732ad58e8f4b45ca9c356a55d1b06cbfc0136

    SHA512

    7fe87779bfec6b50cd8556be13330f3cd40b8c0d247cecf4e7ae89631660e80f9affa20c221b21024e57a3e0c2015e82b15d1b65f6d27d1a70e9c8690e8360aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42c84c06f33eeb8ff0372ac01f3d7647

    SHA1

    b6c647d39e6cd3070de13fd79d153ec52c2a8b74

    SHA256

    ed5d15c1aaf0006e637543e2d272628a61e2d237c13427cea0402f107a56c004

    SHA512

    b414f7ceeef07b745180c73740dfae65cedaa3fa7c9dd8060521b728cdbd75c935ac330107b4912eddb65237f235ed8cdab0f9057fe6de459151279455299acc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3dac943ebaf8f6c2154e69ba2c9158b9

    SHA1

    3c004894f1deb5ea0d69a50ada0c4dd99c447199

    SHA256

    a3b9255aea601a4c73ea2e7e5684a794c7da1810071da22cd04053c6c5362044

    SHA512

    a551edf4424e6c4a172ac9955673a11b51eede8c837b944260c843a585d20b4086107a713f4fb803c7d0e2f50210737180a8d9147b10d82c462297c881ad4d96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02a1de763229605c93f00272a4cdad5d

    SHA1

    e325980b7ef303c301a02fac33d29838bece7907

    SHA256

    786d27af7ab41c719c755c354c5384fb35af41fd304f3e3a92d2bc7fdb3cdcd9

    SHA512

    53675c7ecaba99f8471b1f288fc4705360c9c001c4079e79d2a496f2ffa44f1f3eb7fa5b418ead54890e08278daf3fb46ead32ef1fcc3a94ac6ee07f4d22c8f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    816ed10a3da30d5628967ae8e3c27662

    SHA1

    8a4b099fe421b80a7baf2408658587eb9c9595f2

    SHA256

    cfd45a8bceb93f4f216dfb69123af60ef0aed4132ad3212a3a2ffbbbdabf8180

    SHA512

    11ba9d5a8ea84948210a417d2ff9d46e9a65ef977deaa195a14c707ad766bc20877b73439f54909e7057433eb4444290a20aaf3b9adc52b06db580f895daad5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    228f6ce7c4c31846d55df45e01d35637

    SHA1

    869555bbee3c48ca54c2fbb191546028f20b5aa8

    SHA256

    11b073e305a46c8cbe0fe11573e917424752ec00448dda1c9a3a2b572f6e5153

    SHA512

    3cd9897b3c91006f82357a52295898b89b4e303e5c10d0d8a4d779b21bc3c898e895374a01b42b62ffa5cf7ef900b86a51d2a682e874cdd38926d893d8856778

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be1449a04ac10810053d879edb1f90b4

    SHA1

    675e5eaec5744fb8275aeb8899bd4e4581072301

    SHA256

    6163294cfbd45dc60025a0b35a5c3b614c3119367d1b5349ae8f2840890dd07a

    SHA512

    fa7e2a11ecdad8dbbe34052801fd5f27016d2d54015df61afa06f9b933f73d60b4ab2ea9d2df719f98502ad83a0490db4af0a484fb0bb389eafaee845298abbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    74cd899d9ef3afd6ffbf894c03ff1866

    SHA1

    357714f1aded24e08be24f9babedea64f70e54e1

    SHA256

    3ca2f3bf310ad005d3c3050991eb0cfe26012deb27b3bc88251047b41f6a716f

    SHA512

    3d62a1ba2303cf7acac34c5a9f2e4b2a41bcfa78cc14ed1939e8d068940629797b462e1d41f06c3b02a357a7653683866291989ac6019f587d89b888cd686e93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3e7eae8c65df8813bc1641fad17b449

    SHA1

    2127eb5529ddb73d977cf2447f3334c9ff422a23

    SHA256

    211a0831613dd42f4a95d46b34e327cb1a485e36069bfb488a2cc7aa69bf5667

    SHA512

    f9f85956dbf10a1114fc74e7869fd70c066bd6758fdf89e5fc54807c31d808c7e8e4db5510d1a69274b089ee0b1e3cb09033c6904f6ebf4af257a604f52e0eed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28cb13e12701d766c46ba272a9c1073b

    SHA1

    bbccc3745362e59d2f83928b2e31e32a44acc029

    SHA256

    18d30866c68051610dc1565cf2e99b6a7a1c1a04575f50000ae8462cc221ccfd

    SHA512

    59f278347ad946e9f45b1d40ba095dd5ea3cd6736f1db3118a076a3809ccc61235b0ab4569bbb1bc4fa17f74b613293c291efc06924e5a137659e5b6ae107db3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    958efba43f25d285e0c412b3d24c508e

    SHA1

    9b7db18408a502210ac46d6cbd4ff6d3ef9d2a59

    SHA256

    1a980adf433c01d3a5079b6f41a652d734802f4506d1be811644fdea2d7551e6

    SHA512

    ac3f818500a68d40e4cfee562ad968cc7f862732fc2aaa9bbbf99be533bb8ed9caff6ec3f14360842062071627f42d5fe56b7837d0bb5a0188188699b3581f40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f8692b63f1cfecf1414f33e85571c7fa

    SHA1

    0f9ed5ee8fe55113a999097e3f1d8fddde3e3dee

    SHA256

    dd0b71527a0e4f480359fcaaca637817ddad3a15a7e9ccf5421d9f4c2cd51d7a

    SHA512

    98a9b9166318361cb9893e0b6447487773cd26e119a3f549ec358f644d7bc740303a319286add090e75016ab46704e5cf7a8dd1b1ff3390a3485f7d777530701

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7628244699a842b2630361e4c057c817

    SHA1

    2faef543d2c2989af5229854dbfe9f3e21533ac0

    SHA256

    89469b7c8258e1671748143c85dbe691e01618fd81f9a3c3bb10642f9648649e

    SHA512

    c6db8dc4eded31fd9d13ed228d8ccede8cdfd2976c13e52c66322baf7725a75956be6f0575bd1724e029eb02516b557fddae95909da21563b636b71653b0ab01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a09bfe090b4c6b3a0a9bf764de45e11

    SHA1

    9d9d9705750c607ca5319d140e250a2a70640fd3

    SHA256

    9251081d8d925db730150c76cec59907d31b12f99bd7d4e7068671ba4bc55e25

    SHA512

    16ff0202ffc73489f16460a831a1a10305205ec3d5e9bbdc2710e358755209523dbde6a8507ef78c727560d384cb8881e1a81e482a2329aef92108c2870da512

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1fcfe1b582291429a964399271cf1803

    SHA1

    e5cfd569485ffc547852468caf5e7a7e9d16c005

    SHA256

    af8f330632560fed31bca4c5574742c0ff737b12c9e5b649301caa3c7ab7b4c4

    SHA512

    db00af063d40df8412cf47f97e0bc77d1e68ddd11e88152dc8fa3cc40105d40701ae10d4330fb465905feb2afd4a6047c2448fc81634af0e2f113a92c7d04949

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A16C6C16D94F76E0808C087DFC657D99_F82FCC341F124F6AC9D153F6ECE89FFA

    Filesize

    406B

    MD5

    d6a74b41e09037d2d5f62e5b11f271fb

    SHA1

    a2cf50d699fe029d25c9ff602023b29a826ae11a

    SHA256

    9d1d1bc25218fb989ca363ae5fa5fe2fe00f1777ea4505d47aba38c76f14d89a

    SHA512

    44854d441765b3dfa58b5bc64d73904888da506d0b3e946ab46cabf4535ba55490b863ddc7c3a4bf0bf9ed6e67219d0a7a77581911227f98081e513efdee96ef

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IO0LJX84\3604799710-postmessagerelay[1].js

    Filesize

    11KB

    MD5

    40aaadf2a7451d276b940cddefb2d0ed

    SHA1

    b2fc8129a4f5e5a0c8cb631218f40a4230444d9e

    SHA256

    4b515a19e688085b55f51f1eda7bc3e51404e8f59b64652e094994baf7be28f2

    SHA512

    6f66544481257ff36cda85da81960a848ebcf86c2eb7bbe685c9b6a0e91bca9fc9879c4844315c90afd9158f1d54398f0f1d650d50204e77692e48b39a038d50

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MEFTDE7Q\cb=gapi[3].js

    Filesize

    133KB

    MD5

    4d1bd282f5a3799d4e2880cf69af9269

    SHA1

    2ede61be138a7beaa7d6214aa278479dce258adb

    SHA256

    5e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693

    SHA512

    615556b06959aae4229b228cd023f15526256311b5e06dc3c1b122dcbe1ff2f01863e09f5b86f600bcee885f180b5148e7813fde76d877b3e4a114a73169c349

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SVBQZB4R\platform_gapi.iframes.style.common[1].js

    Filesize

    54KB

    MD5

    7ef4bc18139bcdbdd14c5b58b0955a67

    SHA1

    afe44fd9a877f81a3c36f571c0fc934324c6cbd7

    SHA256

    192bc707852c5986f930528442d88a79e5bcf4513aacc2b722a3c5e964501838

    SHA512

    6c2920e80e4d5059588a32f75bc2b5dcc19f8d68224c0935d74f9fbf49476ca5b1ce43c279768f3d36871dfcec39f36db3fcad559c2f93cc540154cdbb04dec2

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SVBQZB4R\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    23a7ab8d8ba33d255e61be9fc36b1d16

    SHA1

    042d8431d552c81f4e504644ac88adce7bf2b76f

    SHA256

    127ffe5850ed564a98f7ac65c81f0d71c163ea45df74f130841f78d4ac5afad5

    SHA512

    e7c5314731e0b8a54ab1459d7199b36fc25cd0367bc146f5287d3850bd9fe67ba60017d79c97ea8d9a91cd639f2bc2253096ce826277e7088f8abfe6f0534b63

  • C:\Users\Admin\AppData\Local\Temp\CabC04.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarC65.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a