Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 10:31

General

  • Target

    4aa3564eebcaf4124678c8ed44f09068_JaffaCakes118.html

  • Size

    24KB

  • MD5

    4aa3564eebcaf4124678c8ed44f09068

  • SHA1

    132209e42b32e1164d94a0e1b4c426f41e8edbbe

  • SHA256

    4c7886687f776ebc2f678550629b6171b6da27bca1f1f41d6c11418da4a9c6bc

  • SHA512

    fb7564a7be4360825cdd740646bd9bb296e781f4b98409b52ed200a528e3bfaa0ee84e93e2104703e63fd2d21c35a94726b5f6c383e8b5539dbbc31359e9d410

  • SSDEEP

    384:SbwYiHU6uVq+K0vujqffPelkgJFTOiiEN6C0mo84ZOXbPbwsjMrKHIHOmue9k:SbwYRpU/0v1X2C04moBZOXbpYXoe9k

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4aa3564eebcaf4124678c8ed44f09068_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2860
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2860 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2800

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cadf9f4e27d6b09fd2ccc9753fe4cea4

    SHA1

    69a0ca3ebe56b5a6c7b3ee9421b3e8ffbc2ecdd6

    SHA256

    3cab044e9fd010b30170001203687582179518ecd7d7e797185ebe70095af4ab

    SHA512

    44c3987a4f3a3039a20815ec6fc19cf9a4e701d1c266ce63d16d954e94c9527d6b313a204bc119edd2f727d57d705fc7c303e2cb856f0463c5dc9d3a4f8ef899

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a0f82e00647b11895d825d0efb1db30f

    SHA1

    9372eb72e205494a7687116323d50375b007c756

    SHA256

    549be22ba067661aa78d63241b4dc317d1685c8aaf6eec03d184ab22bc53b73f

    SHA512

    33189d05a932c4eb1d2e605dcd940ee04d09737d523e9540eff322cb744d468059aaa18e59f9e5be795f7e6533d253451b0bba1596b49df2a832d31b820147c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35bb2fff13ba12a4275fab237237346f

    SHA1

    ed6d7c636ea37c707f1c42e6e1916159c5573ab4

    SHA256

    764f2f67329c6696cda1aabaef64feb58084cd186e202ada685985eacf79e5db

    SHA512

    d46d2dd44c352316070f49d098b9f31670558283eaf1f9fa1e81bc671eb96594ec5a33264634c57fb6272d94679870077a48d9f906f75d357fdc23226c700fe4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    95ff1c306fd8fc1afdd9bc3a77e59f97

    SHA1

    310fef7f2a2596a1637d9c654844c5e9f29ffc02

    SHA256

    03723e0cb0b6213b6e94ef08b82a5a96ec868ebacbf14de8d48b5c4ff0061a24

    SHA512

    e3423ce0d9abae58d205da305838b740f03d88d52c52ab0ca3bd0403146754090c4d6263d3c4a0ad1be85404459b740c40e14bb634086ebb1c511aed932d95af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cfb61b13471f7660ef9a6db55305cbb2

    SHA1

    4efe14b68749eb1d8da27a05817b2ab6cedab890

    SHA256

    2107960f907fb7ab765792590c489333c3bdf8a036b0752485fb82eefda4b1b8

    SHA512

    5a90940c59c680d2e9ebd35f2d7841aad28c645c59307cda48ea79e298f195cfb572047c138ded6d4203fa17ff5e8d3f1e16f20957b3104a797ce7f64ba443c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9eab41a681fed6d648fd6a98513af460

    SHA1

    94759a88501fdc532f6a7c5df65ef210ba5274e5

    SHA256

    5c642e04f12b93d576eb417a8fcd36316cd3e0c6c6c40ad7364d050cbdb72c2c

    SHA512

    126a0163c8964ac8d9555f1b15fc5ed132773a2c6dea3e49ae159a435994cfe9239199442dfd24d9190f2e2bc47f50fa372838b32f1806fdd9aa2c00c9a2629e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af8c3f2c23d09c14cb4b1f789517465a

    SHA1

    aef34008e4be9c16fb4bac560b2e1c709a054577

    SHA256

    1a87bc52b9b06c0e9c9decc49e4fa3dd5a8443bb35db39a2030f4391315b2092

    SHA512

    f9b59e29a73aea2d7f11d3cafc14703a205a92a0b565f224c1030c4a43c7dcc40032b29838718b720eb86a6186a53f3a5f2e6dd2581b70977f48584297d1b6f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    932c78d1f610a0040acb7cb590a84d70

    SHA1

    4513f0a336923a4c686d2a1065eeb565a78b9b88

    SHA256

    b01395cb15c353fa20650546a0f801ef08161a6bc5e392526309ac8e757eb6ca

    SHA512

    02b313393404d535e190ab22685b9fdc22c54b6434eb8e53be731962e7e10bb7b043afe423eb885d1e5b3a19d291bd19ed3faf91391200222f7cb290c04e82ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc2f50aeff5041065694d4d44bc0596e

    SHA1

    1deb6763703873a0098cffbdce462a4ce2964a02

    SHA256

    442deb58b71074385891b95d6e297b50c1ba5eed0912ac0da73201579f119e35

    SHA512

    e685ad7c0e7157447805a84bb6fd20ded63045c0bebc545882eb4e55c0d89fc771f7d5e853a41d7e8a99bf96af82bc20a26eabace7a936a7821046cf2cb2480a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fbfbdc3ef762840d0324400dd132ea5

    SHA1

    5a5fa1dbd7b342a38ae66d74395d6758edbe4709

    SHA256

    89d5a1ddb8f1c408e6e99abbe2801043dec5d5a7cd7a67346b9cddf48cf62048

    SHA512

    531f59053c14f02598907b18f601868970038814f758c60e3e0be9d85bbed27f2466b5f1424286ac55a382af02cabde61c6df6b88902cbd0bf60f1248f8582c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ba565857428bb9264a6df2686554dda

    SHA1

    8aea2056f721f0eb8422bbb1a96d5be69a02fef6

    SHA256

    029ba9ff74b5b8c4791094c51842f3489e374e3d90eaa26c478f6030e3fc144f

    SHA512

    424594dad8521543b2abec151629d4646d6de0a37bd95908f2e7b6d8a72fe88d786cb1ebddcf94d4ba9d843e4875e5dc405b11176ce3e8e82ac36a5c4202e72f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0f35337e979499425565299b6a08bf0

    SHA1

    9880268527b9e6760e92e7903c79e9bd701fc92a

    SHA256

    ecc474f3f9dd5cd6b6a26bd7970e01e7f10a00d91023871b5ed5d0011d2a6c8f

    SHA512

    da5735f5bbba1fb37a782bd0117ea6f0c7775852373cb3ee491a5ba38dd7362fd58a891c8b981b3cee4bb0ba5bef9bd2b798ef627942415cfee0aff8b0bed3de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0813e6f3cf8ae13c1ceceda207514ebd

    SHA1

    9d909b1b636791ff64ccfbb097e18f86e5c82f88

    SHA256

    6396125ca711bab84cb7c9b40b971d416c91db3fd8fcb4e9b958e9ceb977f594

    SHA512

    11665640281074f72af2f92163bb025d19d7de6900055c7e807b1466a858d942f6a87740481422163952d0ec8c7b406329fe4a2a4656c18db686186e89f59bd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a0d6782e5c7529efba5d9d538e4d4962

    SHA1

    67fd6922e656bc9338f480134cc6fe107cab8e5e

    SHA256

    86fc8bd3ed576bc79487d216535a11adf9e0673da6086359038a937c1b21eef6

    SHA512

    f9c075da715a169cec89d7976f3cc11e5d32d5ae60ea23ba29b1aff7cab2acbdae63dded9b2b37cc6fe36213d22797f50d09ee8a7d28f43e23cb1682cceb66ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    409293969fdeb3e7c04f8b789a606031

    SHA1

    816e94a3c63511b74f53564cbbc324091726f2d7

    SHA256

    a3dc334781d25d3567907df113aaf527c051cab2359ac6a323adbad1d8cf67c0

    SHA512

    5cbb4095a1d81c028b66f50b631d11b6ad7dd19186e8d91286f79945b8afa741a9a932edd0f2fec34d4226e76f4b71e300eb30b66501d95fb4a3d14c112f6a46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    098885ce78a29844fb4bf574296b5524

    SHA1

    c0b182e4a6987eeff6049485695983805cc08c42

    SHA256

    dc03b354bfb3398d9555547032f71f0e03b2d14527d68efe522e13057a4a9e8c

    SHA512

    4fb3058570bed4d9ae5d6a791bd5fd2ce62bf69f5105e40899fed528d22e1ad7c9d312503b19f59c35226fcfe0c7bb97564fd1e5410979acd70a22c314ef59d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a78edb17b219d07dd080c376325373ca

    SHA1

    f7317e231086d8be5a731a404a92713a8a7ebe30

    SHA256

    8674b3c9c74ea165b69b909c33c012b257ed7d23e4d1646e9cd76cb6d83c3750

    SHA512

    ddfa0a9a64bee18fab2de75e30f7b1a5974f2198c83b04939bfabefceb1a76b216b2a25d8c23e96a74df80d612a89fb77c0f75a238c20bdb16b252626df4c76f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df7730209a37a6cd44be021ac91221c6

    SHA1

    ab038b637e598220fef22ab7e5c13bfeb9656633

    SHA256

    adae8512e04e1bd33133dfa2539e9651b0fd067ad41679b4f170e2d0990a2bad

    SHA512

    bd038941c86b5a3beff1d1043a7fd587d44bad40f745c8c7051178a62d4a1c8e74cf3174b9087a0d4fad13cbb21644ead663de8fc781c862f257da357fd36b4a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JB8Q1DZR\League_Gothic_400.font[1].htm

    Filesize

    114B

    MD5

    e89f75f918dbdcee28604d4e09dd71d7

    SHA1

    f9d9055e9878723a12063b47d4a1a5f58c3eb1e9

    SHA256

    6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023

    SHA512

    8df0ab2e3679b64a6174deff4259ae5680f88e3ae307e0ea2dfff88ec4ba14f3477c9fe3a5aa5da3a8e857601170a5108ed75f6d6975958ac7a314e4a336aed0

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JB8Q1DZR\et_shortcodes_frontend[1].htm

    Filesize

    122B

    MD5

    a89c43bff6448106fe939d7ed63aa5d6

    SHA1

    c8409decca3894746b586cc44acf18a0a43a5654

    SHA256

    54e4f2a9b12500cf2444f8fa8d3071646b04f8b8d4339cdad6ffd6d720e0eb66

    SHA512

    e566694a3b44885eb35f03260ab2c7ec48701b5841372ff927fa403d1916c6442b0d5687ab854e0d9e80a45418971357b14793a822f6dc0c9cd9f11c84507271

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VIF0OH2A\jquery.easing-1.3.pack[1].htm

    Filesize

    124B

    MD5

    53be825ff0691f64fbda7e366a369a1d

    SHA1

    2cfaf25ec5c55604e4abc11d058af5245ec82793

    SHA256

    b466d6388b84655901bcd30202addbf8f919de2b859e087f9bada86782afdbc8

    SHA512

    26547c734ccdd00863c0ad1a0188a412211cb3a951ba47d49e793c3c996c9956768165d999e5ec0cc9f734641ba2d3e8051f318e0a11dd2b332feb28f79d2b5d

  • C:\Users\Admin\AppData\Local\Temp\Cab36FB.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar37EC.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a