Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 08:08

General

  • Target

    4a22b343b7574f7f9c0b8baf0c11699c_JaffaCakes118.html

  • Size

    36KB

  • MD5

    4a22b343b7574f7f9c0b8baf0c11699c

  • SHA1

    124f0f9666969f4f225f48f6a806332a63eb5c1b

  • SHA256

    fb6609c2b424549c2221ce3d8d41cc79bb0ec7dc175c7fb325b481cec9f746e6

  • SHA512

    aac11b727f8a30c1ec3c6539fc84a13032cb7f271c2ea9c46ee2380283a75b58abb3073b98f9011d39377f3fcaeeb622c486ac759d396058902d5bdbc3d179fe

  • SSDEEP

    768:zwx/MDTHLD88hARwZPXjE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6ThZOg6f9U56lLRI:Q/zbJxNVNufSM/P8BK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4a22b343b7574f7f9c0b8baf0c11699c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2896
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2896 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2420

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    c1e2466af0597e2672f29af175d12c3b

    SHA1

    cc3fd4589a74806a25279f8bfa269d2f18ef1931

    SHA256

    6b347ffe3fb9f4b08f264f926cfec815402bdfc1762488d1afe47c824a313da5

    SHA512

    4315539a83b9222dc12498bee6e1caff3a1bbd90fa029f30e1193798d077fadd608886ef390f37a860f629f61777f8e1835506c038fae7610fe076a3d836899b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    724B

    MD5

    8202a1cd02e7d69597995cabbe881a12

    SHA1

    8858d9d934b7aa9330ee73de6c476acf19929ff6

    SHA256

    58f381c3a0a0ace6321da22e40bd44a597bd98b9c9390ab9258426b5cf75a7a5

    SHA512

    97ba9fceab995d4bef706f8deef99e06862999734ebe6a05832c710104479c6337cbf0a76e1c1e0f91566a61334dc100d837dfd049e20da765fe49def684f9c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    d4fc473167a365334a14a4eb08ee9a8e

    SHA1

    9e9225d9bffd12d802911a110bdaaa9f79b1164e

    SHA256

    bf7d88f24d4480768ca6c64d0a9c4635aebc737decec5f080a39ff9c861d035c

    SHA512

    ed7298cbb02dd1c79a48e6221b6251f1479bb627f6e2b47cfcf05d2174b72a9786bcadbf856de0d7398be800b1bd279d58abc8b09cf123b9cbfc1ef751e42643

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    741347c8c929d19964a1036bf8206f9b

    SHA1

    31798413f4cdfb5a2bcc0f29c19018362187be1d

    SHA256

    5cc1774b402627dcbafe06f0eff0f4ba7a854d02a425165644c9647307e2a606

    SHA512

    b874061e204913482a6d093f50dc031a6ac0d48ae8f78dcc308ac1c94917817583ee994d99a36eee3e3c469a2a4153192d04368320f7f08087d85c02770122c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1ce7dcfd777722d242712c41d26413e

    SHA1

    ddd2ba301e63e320bcde8965c31a6545aa99f364

    SHA256

    5100622a4053a040c4bea0a6f8ff246fda0deeacda92b434dfcd91fbcbc6d59a

    SHA512

    66a5017ab7d1253fc4d5378dc02c0dbccd6b5aac8d398ab3441711f4c62c6994426851fda24008a4d737d5941d85b0001133a58bbc1d00d56b45d3eae2f0b9f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8fd8e8041e69e85b2214dd7220e1780e

    SHA1

    78fd3b2afaee29a504ae076dc92a735de983e712

    SHA256

    4710887ae6ca88395fd957373bf02096f5da881a335ec90951182dd897fe080a

    SHA512

    cf57e399751e35725f0061533b875f239282ed65134ed80496fa19fcdf732cc822e1b019be57056e317ff46771fd3f1109d6b62174cb3342f8ab0b5e10c68960

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5032d1d8f64782ae0be0fcd537254bc3

    SHA1

    ffaa7291e960aee0d83cb22d4d683a7d793733d6

    SHA256

    c80acd83ce09a1bb12c1e0d9c76fd5fe43824b7e31a0e97a6f56a95efb2d9e38

    SHA512

    21f317c8055e82bff05710992cca65bf0533e5d7faad3c392667ae66fa56aa22ebe6b0ee850ae4141841369850f0d45e3b0fdd45340a81e78f82a91cfbe59051

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa73163eb0f1689afa0ac09d925c3e10

    SHA1

    ed4342417f4446f85b41ac05ac00f57b9c13872d

    SHA256

    a1c3d7be26cb1b292e3dbdcc9e8e27d815a0eae5a9b6d65e45b97ec8abd1885f

    SHA512

    fc6918be5d2318c8c4384de1bec7eb18413555f039054dfe45338acf5dafbdf46326efe0f3b1f978a82f9e858e8626c2f52a1c28b94fdaf655335e62d627b692

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c532c82bc7ad7a362d61de0ed0fabdb2

    SHA1

    da2b85523d0e2035e83c1e0aa3a281ff252c7929

    SHA256

    2ed850f8dc050ba68defb196c33c20349e513cdbfbb2844e418b21cfcbba0577

    SHA512

    0283f43686db74bfecc2fe914bfa0dbdc168fd4a54e814f7161394b7f6a41a1f7b1654b8c39c34efcb5837039eab9874dfecc9ec033d2187688ba052bb1985a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f1d5598f6ea7b4bcce542e746fdec40

    SHA1

    aa923740459f5a1fb46fc849b5db20e5fd9f7f85

    SHA256

    53ad43cf843fbe303659d5af75474e6701ef4fe07f28526b53ba9e4c1c0e52e4

    SHA512

    02d23b94fbd633859b3ae90d05e4224b7706258188ea5570f7ec678f94e2f92577955e8fb7919fda315923463c20899b337562e4090d810491498a16aa334628

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39c2a383ecfa939ccf5fba549fc2dc42

    SHA1

    936d7c81407ad86037c1e93207ed5f4a1dd49ce5

    SHA256

    41dc5aa63de2c0d517543d83f00808ee3a67daf5951da3527d8c7cea47c68b15

    SHA512

    903530483eea22fc8f7ef33c99772e5d12946b1270e8cb4f9746b856ac522fcbb12c9911217b9bdd97075dedc4e0b324ee3631d26f847bfdcd4a8ef66bc45da8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3488f19ed8cf4040dbbef3979c7ec6d

    SHA1

    9ece5bc5b6cabd6715f63b45e2f6b9e22af1b56a

    SHA256

    144916c785eb288659752e6ead379f3908742c0c292c050351a0700c77984028

    SHA512

    cadf85e31845c2fba60148b6d136e32deeace2a67d7beffeaf4e332522b7a600163113e40ad8b16ec427938acb99b35d8d8415a00e69a0b12a2691e496fbda04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a08703e292381b7168764ecca6bf824

    SHA1

    f321ee282dcc55c39ce2a88199de39e2866c4165

    SHA256

    e797026d7118d5971eaff97528cee3a6f6fa4c009e9c7a45f8c1b89b84e08a64

    SHA512

    70289f882a4473f407e52d89e0030b09be8ee4c1db893814fe99d2cba189de038ded34681ad46e1201486e0d69fd9186a91f5a385b39d3ffca6bc0fe6ef3e2f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f26ea22a17bb31a6d6d942c7156a31d

    SHA1

    37340c431836cd45082002760ae1d559b7afaac4

    SHA256

    d7f6b8d1e69bb4617cdcdc14a538033866d24dc05ba2939165d24e75378a179b

    SHA512

    669b7c18827afaee8a39831b9f9a13c2796ed5e00c7dfccb323b6240f64f404e33ab3530a13e8394074d51ad24c6dffb5c970ebf870f069f4e12da80a2ff1866

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17b93cb50423d7f17aac8f2c18837bfc

    SHA1

    15dc1f129d936a5ca1703d246cd43c855a8b02b2

    SHA256

    f2506a7bca471a60a53c857fb3d837815ce5f539ef7de550b7edbe278c01508c

    SHA512

    0e6778e0c82306ab32a45862f7e72e8f8cc500ec22ec86a8c3d14b1fa7b0022d8aeca4d2ff072e0fed03457073fbcafe35173ad68c1767c5d433166a90cd3bd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93f4f09dbaa9c07e723f629c859d4016

    SHA1

    5ad981795a9b70515005da1998f2c42b4cea6698

    SHA256

    4d785bf2a67ac18a8ed83a9e7280288891b9fb79e6eb112081da1dfdc8c8b050

    SHA512

    2b43162021fc95863dff28c636eadcba5d4110dc5686c690b626c5fa150fc9c92be4d2f6bc9e511b052a1f933c459c9321a3ede3d2bb179764223dc7c29fbd6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50f2bb4044dbbe92c6221ad5ae8004f4

    SHA1

    1a596999c6a1b1754c04ccaa0f88611a1bb4f47e

    SHA256

    f1838f86975d975f2308bd566651ae612e7c0a2d5d5dea7437814a0ef4fe9bf0

    SHA512

    fdc808ea66c20e4aca6cc819055d64a61c4870f8a1ca3714695597b458191ddbac81a26d542472e0f7c1745c3c79605ec874442e91947b7544222386de236f67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4385284077682a87f47dde7a7d439ee

    SHA1

    d26bc2162faf9e6c76aae3e3cb8714de9b261efd

    SHA256

    6e813ab5fd9ddfb68c684795cbcb74753d84b313db8250df8d5ea699ea6334f1

    SHA512

    2ac04b19d2fd5cd8d501d766691d8ccf3b8dea47c6015e8480e48e90a76c947c1b52d00104ba5771d1a0fae82f16151fdcc03d76c79e81d7f6fcb19a2ba23e06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1206c0f5ce0db00be274a3ab7d9935f

    SHA1

    fc426b81ff27ecf9dc7eed038f6ff6f5649c4baa

    SHA256

    3826ea18f25d86e01771b44064c9e2e56061cace57a194358377095c8555439b

    SHA512

    f51b22c89a5666902ffa0e52b277c17d887bae4b42f694a33cdbc87b07b4fec78bdda5508441669851d2e6949474564a079a832fbdafe248efa64f77b451ffea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb2f31cfa3d8e88fa9cb1e541bf0ed67

    SHA1

    3238f7887b0129b88d1b87401e1147bc180ff7d8

    SHA256

    76f8b99c6063cc86df6abb34b4636695597c4f4f9626249dbdb8d4f7edb22488

    SHA512

    850d87e3289cd8b06d4c0be9bf562c0ecb59754429e8d2f0d9e9306be94a4669852730ae039c4d5815faeafa45e2fb7878fb9b6416b4b99b18e26c092b72e408

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    46325ec749ae814d7bc117af36e556c5

    SHA1

    4fab166a13ce284de9e1efc5721fd3c29f27b09e

    SHA256

    48accf3e585f1ca4ee771b270193f09da7fb592399b545bcc5f5f052b0efad9d

    SHA512

    de434e9e49df0c315c49bcf21fda962c90e223289c34468ff3d8512132314dcd6c9adb868acd6851b9d78582d8e5b5ae4656aad00ce940dc5e3c6f3382ffb7d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    355ce792c91e729304d4147e9edb96bb

    SHA1

    41123cddb84fe492055e159f6dba2c6337def71b

    SHA256

    2884f72db5d4d7fb13f29bc9855bc6249c335c1e1a64251155c1a39f7275d022

    SHA512

    bfd110a2bdd780ee8f94197c8432cffaf96fba6c6588979b443b5e6fbcd5b83373342f20a24f15f3e795edd73ac85f4420ffdce4100f5f69d06ba9f1c64fc4c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    70a7c018e3f211578e0dff23e8d4f64c

    SHA1

    d0c53cecbe0840364d6fe180d45d62047250e88c

    SHA256

    dd58eeb8168d6c16d259a9821383e15f0febee05ba365fdb93bb3ccb322f336f

    SHA512

    18dcbcdcbcc26110477b922341685e5a2359da4b7ee9aa60aa7d3ca5d2d6f98b7cb9d00861735284e65231ffc203ca879d5037bc92023ae0067408d15c7eb06e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea490fa6020714566e877a3bdf7b1c27

    SHA1

    ca1acce19ec2346db14b642094f65a42d96602e2

    SHA256

    9bca7a5df2d518a1af556048b1f0b51d9c5c7aa6e39294b064fe69dfc2cecfd6

    SHA512

    b5ec90348289ec953efaacabd3529a88d210def237ea07af902c3c50d2a0e836002cbaf326871aebed556cc394acf0adbf11fa8c7366001c3074b8537603daa5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    392B

    MD5

    5f87bca91a04574949c99ec6e80c0f74

    SHA1

    29660035ba1a3b4dc0ca0ae540a623636af73a91

    SHA256

    35af5ec00c49026864561d8a0416b709cb8934074631cae710f591f5d892b71b

    SHA512

    30cf9da3851769988968c57113700493b6de0c5fc18d452244607171bd42ed77753927ce153b74ecca9d204fa465caf8b0b6f80d2ec571d0ddad02ac4edd614a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    7f1dc73206738840e06287e9004e8d10

    SHA1

    258a4e2ee500ed877ca266d399d4e6c6ff9a966f

    SHA256

    dfa54bb2ec1a6a1ee6b805f8a11f705c22ec6cf956c47a318153e723d803750b

    SHA512

    bce547b38bed58192f128ea37db4eb96f83262bd0924a0d5de808d1d949a2cffd6c62f4f2750fee6902d7a098900d8a1b03f7f10bee3a5fbe910462b848cf94c

  • C:\Users\Admin\AppData\Local\Temp\Cab1B1F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1B24.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar1C06.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a