Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 21:13

General

  • Target

    48108ee565a994a4bd5fafeaa87b8541_JaffaCakes118.html

  • Size

    23KB

  • MD5

    48108ee565a994a4bd5fafeaa87b8541

  • SHA1

    33007026e384ba701598279e7b78db1fcab34778

  • SHA256

    2a6c7e39a70bdadd9631c438b289c6b0ac0c54df0f352e3bfd510872e0d65d3c

  • SHA512

    5ff7c37ab93d5358c7e766fac0428b04bf50bc3fb2db72a5bfa958766909db01980015ce2ea9e732daee634177aa8f80557e5dd112337bb03737574116ed250a

  • SSDEEP

    192:uwDGb5nbSnQjxn5Q/anQieBNn6nQOkEntqcnQTbnFnQKdjtvMBhqnYnQ7tn8YGnZ:wQ/Xev/

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\48108ee565a994a4bd5fafeaa87b8541_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2064
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2064 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2760

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31e363a8bb8e85eba36272433f604c70

    SHA1

    3c433b3e8520238d862446bccf0166599114959c

    SHA256

    226d9f2439ce723d3f162412e3c9260739ee5de680506bd49d0ee8f63fbac013

    SHA512

    858b3aa331e357f52c1b7a8905f7594f0272a172840f20092f4cc5eed053301efd8bc864c801991f95e92cb572c4ded5240bbe944d20b6257d6352d557306c36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bfc606d95b336571027edcce367c31b6

    SHA1

    96cb6c25991b3a20ea17f67c56061b303ee9e177

    SHA256

    8c9ad7815bc4ffb8951457fedb9f5ecf43ed66de39fe13467095c499432f34a9

    SHA512

    db223d7f49ae989df92c73b32c929db34867303089d18bd811d340cd1e3894b42bccaf04a9a118a441ce0d1e7d824e54e5c941196b016ae060abd495154cfd5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    638a603155c455222f5b4265969e3b15

    SHA1

    f7e6bdcf18b0aff63ec2915fc4ec5409972abc1c

    SHA256

    4955bbefab08fa964c1313b77690171b5bd8461b578da87d587957f9b0202528

    SHA512

    09caadbd55877b81160ffc8e456d377500ee9eeba7631290e5d72228e58b13b734440690c42301e53414f6872486b0278f60e42303159677434a79019814a6c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44f46d85d82a26896d60af08d0f45b4a

    SHA1

    49d5b4c6702f066159ae03fb995a603128dc34bf

    SHA256

    e9e4b05534fe0bba11ef28777664ba5bfb4f73a76735526d8bb848d147527cb8

    SHA512

    277302ffa2dc34e53b2b5e306cd185347e5a77bd00f164d08d24391a40711efdc0873c599f971bf9ff94d4295e14d0dee9e79daed07bd5bd924dd7df78c3b63a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a97b7d9326400f483347aa9a11cfc87

    SHA1

    204ea2e1c230d9c89543b31808dd09d032ca5172

    SHA256

    04d4ce1cb9c244aacca0ac320c959d40619f4a7350911bddfc27a58521ea493d

    SHA512

    b029f9df98a14a71b5ef0b342522bb2e0ce321b71a2f21bf082e7de596cb7fa4c7346dcc91709816a8f573c30b058dd389dba6f6e0a4be8f708e9ffa4fa54630

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    753f70553aff5014cde7560725785768

    SHA1

    1f94df177cf59efb4179bc158c45f651e663a981

    SHA256

    575023222102382f898b10324292a368051ecce23c9f869c76f2d67bb94acaed

    SHA512

    a9375b0a6f1c9ab552b73f35e0b2d7c1ba57c6536fb9469ebd0129e4076104056a0751673dd740976a9e0c45cca8e21c308612fac98c016e3d47d3bf94505f2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02858b15971ff373b9dad11597c8e406

    SHA1

    346d831c0bea9a2af1f7ef82a9dc45a397a4b5b3

    SHA256

    11394c2c7dfecbf2537c5b3facd260067833cd9220c5b864408735c0595a37a4

    SHA512

    033f5326c681d59351fc7fd06961c4f110ec963bcbbde82502dec77a00c1a09aae7b58af7afe97a39a9fccbeaa8aa49146d66a79983c959df8a81c2d3618fe8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65deb56c97b7e190fdfc8906bcac536f

    SHA1

    4ad272d24b16080fe53fdfc61af6a8b194fd9fc3

    SHA256

    28fa3bcf3402af214c2a9d7b3ae5862bebcb0f64fd64d8e1845cd1fe36131137

    SHA512

    31f5b4d850d6c624f91920d187fb223b686f0ee2d405e2cf0d1efd53de170a5712c1926c0ffda38d4a379333a21a01f62854350dc2ebd9abfc3cea7fb7cbaf5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb872c86ffeff126332874e213f3f3b1

    SHA1

    80cf8fca1deb9c2a9bf46abe2c04e800edef99a5

    SHA256

    67b8ced9f29e3ce56a8c9f69dfd56b3766e0e658069527b7887df93365a41d24

    SHA512

    8fb5ccd239c8ae6f7cd087f412135f4491bffe66bc90e0cf64d3fe9a19459ee2c754187ce9134ac394a9e3ab7de8ee1681d28eadabb07f53f8574262b28591bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9abea3c4bd53acb66070157c38156bd

    SHA1

    bee0778f17806e5decbe5d39c094acd6305cd8f5

    SHA256

    476070245ac9262a62addbbad4fd25bb181abd03cbf62c26619be8a9954da46f

    SHA512

    1ef60d8ca32478f71e04adc7f028bc4c4c50fd8c94bca06cd32af035f0a467ac74a8207d4ede56f7e34dd3eb115da8a624d3ef1a5dec15b3fe6e6b0ed8c3ed2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6237f0ed77ad3d755110d6d4bf5b745f

    SHA1

    4f3593ff63dfef346ca7fd2dda9bcd5f37f678ce

    SHA256

    8c080ebdb71f742192b7e58e4128993ac17113caffdcff7f4489eb238948a8de

    SHA512

    a48a31e10880e9f001e9ccffd8f7aceadc8eafc6c1f51ee7b5b633c3ee53e8d0607931a5769d47099592325824bca1df0f64fb5d366fed91a97d43569f6f4469

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dade2df28924be5eb0f93d6a56465025

    SHA1

    827555c5eb8e02cad9ea646c543c1b54c1363feb

    SHA256

    9050b49274f8bc131baa59dbdb8f6a5b0d6df0526e769092c819fb64c4498599

    SHA512

    5c0b4a878c282673f4e98c9dfe163024bf3fb5ba8da0a100d25056d5d24f1474779045aa76bde3d81149f7efc9b9b90943079727b44bfd3ef929d7ed96a3dfe2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a0899cbab7199d231bf242b17f44c5d

    SHA1

    a398a2ba6667943f9018538d791246631df27712

    SHA256

    899c2f58d12cff97ad65449b7df4111aed059d502aecb7c6e2eb2a0702b50f8d

    SHA512

    a0ef7be26816eceb2df23b9a470dcb617ece0a71180eca70fa6e887c3bcfac390a9ddf4d7598b6c30bab3be21aad83e3dbf7741d8f4bcad080a3373f6e9434db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f99ac6b2a14564f881c700f7b32c481

    SHA1

    88c4e6507a3fa5295632e0cf60b42962d0840578

    SHA256

    caad841ac126ce8fb9fbcf420e678d182dffc812901c05b20ff0cede1935a274

    SHA512

    00c5cc8f4af14285cc9afeca87a025d17c8d8744462374b47604375e4677193ba73267ff8aa12cf2ca36ddbbb86fd6735056bfcecde6dda4bebd4da24ea14958

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    777e6f8b91e72a7370b762abb58a2ca3

    SHA1

    5b84dfaea6e394264fdec4fac23146613a38f33d

    SHA256

    814de041149c46777405b4fb5926b5ac63bc796f30c5d4a8860d49fdd6763723

    SHA512

    cb57779093648047179a109669d0dc535ff5a6f5d74cecfb054612d0d9870cdc47f7521a20b54ab8d5e49023419bb9f0810db67b78298d3dd737a7a98c4a12bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e3ce62dd7c03099bac070feae257ffe

    SHA1

    bf79225e64e665f437408ef349068313ad7d06dd

    SHA256

    fd41bdd5ade87f02248c688c8e7171d5243d97fc8462767975465a3179e30d47

    SHA512

    edb476c72502d9d74eba34227641a6707be8b6732128070894738d818ba2771f20cc08183186f7107c1d419e4579825a552b3cbea989d94f3032f1a0e2e1393b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0054826c48165278819e1a7eb5a16271

    SHA1

    2c0ca7e02de5a284b346a37871f8c9c01a976d73

    SHA256

    b09e26ca381ee835fe8ca82d5ec1d13640b9035835840b96814976ab3657eedf

    SHA512

    d537959a4f9d0ed973a8ea4be9171b0567a022d7bf153168679e5320f72b7be718c6453aaffb38012cc0ed2a85015172583f9ce573bc0afdb7ba0b9f43bf5d20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c27f492c11c484b4978ac31bb2394dc

    SHA1

    b9fe82c6c736c14dc3dfab7ce2559b2650992efb

    SHA256

    a55cce3602c40e7b203682795bc722515de50c28dd97246a46b8548683542c82

    SHA512

    0d94730b14bd4cc8917b07f07ebc199ef47d6941a282e3aa44c65c23b3b8952fa4a3cd63e289a98c5b9973ee512a6578e8fcd613e0fad982562aca01f9e57e9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b6bd83cf611ec5227eddbd695e9ba8da

    SHA1

    404de16d341a9a2db68144afefa5c3c66369f78f

    SHA256

    8042099c0fadb6c11829c31f54b5080e52de225ace5451f3ca2411101059bc5d

    SHA512

    0e1b8db0aa486feecf7a094681be18f8dd627b06223fead7d4354053c738b7b8da78ce337c13e159371db466f6e93d3a385610032ccae2d525bc070f1ad5c00f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96b47449b723a0df38813e8c5f4e62cf

    SHA1

    c340c2f4f58d1038cbc9edad574bd413c688f6a3

    SHA256

    c001eb32fb9cb66a638c4be790e03793775b7d1068c55ed1ecf05c6defd89e5a

    SHA512

    da57606ced8c1cdc2ec23e8a801aa237aa7c39ecf784165d840cf532357d25441817da4bdc48ebd142e1e16a9212e888154c15bfffe341a020032eae6ae1f8c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9b0278267b69001f5f8ab5bfb255a81

    SHA1

    d2e8a51d5b2481ff6d1aa3791137d8859b70daed

    SHA256

    d636d23d6db420a0d58e54286b479d81181e0daa3d0feecb1d55a997c82f58e5

    SHA512

    6bee362c047f0490b8d66cc3a29738fdd8524d66deb329fa557bd99bf155fc8d4c065a034a3e7207aa572f792de9c3aff53eaab9577acc9ea7572025d494499e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7cba7024bfb817ce6369c14fa0567ccc

    SHA1

    3244d4e363e04d358118c33f65e424151f5bca55

    SHA256

    726196feba5fb38e8e500ebe9c1feafb6d2ee98a42611dbb77eb47aca2fc4381

    SHA512

    01783fcf3bd740c112b348e91bc7c6bd4ab91571dc7dc18432ce755c7f2c6f8056270b5d52bd8e238b94861bcb87ccf605d0ed9c6d7f9b73347fc5d1ff4b42e2

  • C:\Users\Admin\AppData\Local\Temp\Cab406D.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar40DD.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a