Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 13:13

General

  • Target

    4b3dd9ac54d0554f941334dfaf62cc5b_JaffaCakes118.html

  • Size

    20KB

  • MD5

    4b3dd9ac54d0554f941334dfaf62cc5b

  • SHA1

    36beb5a29749bad1bcaf1cb54b3688c44bc3bd4c

  • SHA256

    3ec72e1bf9d921f4025d82e139a38fb7cd6b4e4ed0ec10d62dc8154565389f9f

  • SHA512

    c47c869ebd54b5244439c03e37321d2056f3713d7c6887faf32a73533655616b141d415b307fb1f79e5c9eebfc14e507b93977ebad140dbddc6efeec37618106

  • SSDEEP

    384:jijKcRAa5r9DIicVBD8c2Q3RcyTdCXqmd5WScfIk9xhemCzVc98q/:jiga5r9DagcZ3OyTdvmNOIk9emkq8M

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4b3dd9ac54d0554f941334dfaf62cc5b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2716
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2716 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1940

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e71cd3e507c9a794eb8348d6f3fdc151

    SHA1

    55245e3bc7e620eadcefaa0c000a16c27d356f38

    SHA256

    bfe5b7afef9411d77d60fdd850f8619f9dc6a67e9d95b7fd7d6986db5ff42fb7

    SHA512

    adf0dd1b0b6c6ccf43e64b080b4f22f179a2c5bf0730c6725da4e59de7ea507fbb74427e485dfda963ca00418083a00fd12970cae365323fd498763a2b3d0ed8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    238cb07d815bc90be6125c19d73493f4

    SHA1

    2246b420ae614f002ba72a6da8bc5570ac40b680

    SHA256

    4c6977ed875a7af869bc0bbb395f10d9ef44f7c73edbb3c8460fae8aa240dbeb

    SHA512

    dc641f226cb48be8796ad4bb32bc283649db362f5b83132b9eecc6e935c309150b9d3d49f5f56cdf05a9c932188ccc79e593276cd5247ef761eda3d05d55e88f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3c757b43190bacb0926a2228fa00949

    SHA1

    b63418087ec61fdd89c587ae187ac606fab471f7

    SHA256

    cf3f6770056d2accfb86573342d90c6b26bee9b2a96774bfa75922a05c4f2ef5

    SHA512

    39805fa7d6b1f22c2603c75bf198108a70b62eebe5e1119aa545102ac99e5cb4a34f95dc1f43bb7b6ac17792310ac271050a3f12e87bf8e99f7d20ee37073ef4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51684b40c7f92a91e97f90da5c1a4a92

    SHA1

    5d443fc46f5efc03cc6778f251aefbef97272e48

    SHA256

    2a758ed037d3cde76dbe1a589c7d16bc45c4c2e6b26329523a5d0a449e44a784

    SHA512

    babbad3e155764839db370afdc212d9cc0f878477e94ab0083d1e6cb1d167c63d84d85279e2338ae1ce0b0a18606daf868fda95aa9b6546b30cc08c68a88b3e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c567f013d32713e569feaf82f58e004

    SHA1

    496e6ac9981e05a9665ca5e0a7c5d1a2ceaa5f3d

    SHA256

    b0223a8cf2bd8f5a30d2f455626906e504affdf5d5d5dc78f2ba566c1e5c4087

    SHA512

    46b863ecf375283cd4587c8120d7f5357d960391bbc9e30f026e17905d10525196b5d9ff172174f4c967cdb7606c55454f2362ed20a6d308affcd3489d7765d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c3256b2839db8f21b5f382c296a23da

    SHA1

    c20f8182d0ee64be00556b558fa18c1a98887d01

    SHA256

    94376c02cbd89eeab638d38cb65aee1263e04fdbb9df095477f488c84878fce2

    SHA512

    bc438d2fec56f498808c8787d781e95440a9710c9e36fd824009b5d8a34ab7613ad837ab0ad68fb9a389a20755f79dd7c2086ee964d6f5fdd7be7a0c30a4a016

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c434d7300ef757cbe41dfffef81f732a

    SHA1

    77c1d41ced046c71748c8c01367ad11d8322d091

    SHA256

    9f38bac93f5c00714c9e9f3f9cfe26f928f5b19629ceb29bade89822c4039926

    SHA512

    486ab82228626916eed4f9816ea4c59d324e6d0743c7816449744146b9fbfb778ffbcb1fe9a15a11c25afec728823045eb17d2942956cefad943a310333adb8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15a5284b0da5b4cca23aff86114b66bb

    SHA1

    c6e5d0b41646551497c48b8a0755bf134e599968

    SHA256

    a4da6c48ebe8b0c9a10230bbea36a86d2c278a331573028f0264f0932d73c60b

    SHA512

    952a93b2c201f182ce7839bb528a4516e7c99487a4c4d57418ec09ea8a8da88fafb14cf78cfff0fcb7289b29123e9d164237c07b6f0768d12bae8fc2979e6dff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0477dbe3ff9e080b3c980428d9c6f6d1

    SHA1

    cf360488f64cff0ca220a9779721c5024619bba6

    SHA256

    cf88b4789b3385cb21e9ecf5eeddcb7d5a1a4db8be1590e8dceab9c0f3f80d52

    SHA512

    4b1febe679c3c37fe5c35c167f9cb93efdfe1a1c93e9b5fe98fcd6bc1ead62984d44520549280c3d92df5efa1a452eb1673c4e7c57c0fe5a9068f05966cf130e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e65815485611d5cc552ddda5d7aadea

    SHA1

    1ff0c19c4eda9d230c927f1264d13e505058be02

    SHA256

    2e75fb04e1de6140753ca46bcd21372e539e6d040cef51af76cf32efa47e8a45

    SHA512

    01388ba1f5691e9cca546fc1f0785a6d53cede1cf229c4ce004327b7349c73c6df09222b416a3fb2f78f065c2ed490b4a4ea3ed1f04a78c9c14a563fe41b9aff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f81dd47803fbcf6775fc1b4358d23e7

    SHA1

    d23373256f10ee7febc8aace2ee2b865b369742c

    SHA256

    06a73d345b7055c1c579cc30a06e70b67d7384dbdd9e70dea613706b23e0d8f2

    SHA512

    31788b603a2612b37f3b1f5ffc00a5b08afac1d0b33f1faf34657f517463ed6b95705177913a6e84b9b3d721bc1cfcd1f09799ad6fb9eaa89a7257b8bd80bed2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    644e115264df28ad40953d4a6af46a57

    SHA1

    248b0aba53325d160b78042a6081a85b955dd332

    SHA256

    8234c511eaf7dd279c65e10438c163f14e05dfb0ad501bba61bfbb3ceb49702b

    SHA512

    99c461aa3dfdb5737c9d579ee22fa54db898a549aecffa661f4df9e84ce851ee0a78ed1e7ad222ee841756cc9e2ff0865bc2bd906018941b9c84a875c446ca7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82dede22f273ea61b8957b0d6a84a2da

    SHA1

    beabd84d5971c01b85dde2e069a483ac44d8d138

    SHA256

    bb72d16e0047fd89850dddd6b15a0e8714bfb80f2d48bc39e95b28a9846c6c96

    SHA512

    f87b216e75f5eedf7bb41b0a980e4b2e257c9d0aa7b60cd074ab33c3324093c2e80c2ff726b933c7f57b02fa30c254920767dbe8b4976d15c50407d428d1f6fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2d447b3e052d7ca3cae860b8506fe8e

    SHA1

    d0f01e34bec451755de927e79c0278080a2070da

    SHA256

    2762651badd80fb2a0e83a5a99a6f209a7bbf781cc8dda081a0461f23f6ebe45

    SHA512

    66c9c6479b3c57fd7855249eaf0b480170b9b7a3a0074c91409890d64ab548a9e4dc37b7c5a9f256a0d43df118c50562264f5c6eef833fa0ef9770714ccf22eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    725881440c42803c9a2f86ef29dffe42

    SHA1

    e448fe7fa15eb5433e878b1fdc5ce7f0bd987e81

    SHA256

    51dd0178cfe80f38a0244a477c06d256534a0e4a656a87088a15f15a607a81b6

    SHA512

    4e48138b6a7f9af11b91c9e4de811e10efb223dfc219c3341869d0176c05c657aa0191d7bda6e83b8bd43e52f6a640ac955083e7a7412c6a40a2b6dbb3f974eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b1713ef37999cb38ab647fbd81cf018

    SHA1

    f4c067100b4f9dc738a0db2da1b08dac502d4330

    SHA256

    ef950185cc0a45b5dc865652ecd98ea4d7afb508d3fb703c88ae6b5cf0013459

    SHA512

    44c03d42461ffff6e747fdbab6d8b0ed5556e98c18900bdf989c88068c2d26aba29840365bfda6826565398131d7b10162298daa9cb29294e7ecf59937cca1e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    088e1acec9d5f2cae851a8e372c1f52a

    SHA1

    2835746649afc39dca696fbf933ff1287b64cc11

    SHA256

    d8723ac82224c5319a06fb65e02e499871713f1e8cd2604ea1eb7276471f756a

    SHA512

    9657ed1e8b55dedcc30d32d04e317591bec34c911690d7af633d6b73741a9e01767b3d68287f16b19a472dd9bc8a5e4332ae22d98255d69b82745d7c795de110

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    466010fcd4393543f7b531d29c9e3e55

    SHA1

    ebc3c044e4e6a640532725b4c02ea2f5d1257a8e

    SHA256

    31437046811eecc531a5774e68bb954b2b88ddfde0f4c7de6c79a9e66f11da7b

    SHA512

    4ce9a0113f70a4130bf3bddaa9e190a40cd32f18c3f8ef35010edc2e391e6ac353c9e87e8b80e529639df945a92cd8f97079868e61f7c0b78a0a35340e537da1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09e4732c263b7208c80ea78a2428a5fa

    SHA1

    494a7b0b85cbb32eb0aec014cd7fbf721dcf210c

    SHA256

    6cbb1263a5e680e3da828356c6df367cfab658dc408198439d87917dd97af20a

    SHA512

    c1b1353d5ae3ce8bbaff896f6d495aa08e69104ffe8aa8f6fe0811768f97b32bf467d1e4ab0f0e81de305dee185b1557288c012b3dfe733051eecfb529140266

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ccf494d677111865f76fd53f2e181cc

    SHA1

    82e3f1c1980315cd3adae6abed50de3a5a404b52

    SHA256

    1708cbf09468d259b64557bfcee4d30ff3a702fca1002ddbc88679ada435c76a

    SHA512

    f3f9555ced51e277cd2bebdcb3ffe3db46c2b054faf876f550e4a994d8dc0885d249c7a61fc0c9937464ecac37bc8146177f61620520590f97ae29afc813b855

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a240a32056f2508f1b5b827e47648993

    SHA1

    326db5f5d4e319e07e40418e25f499fdfa118ff6

    SHA256

    845f70127f13d309df3695bf2717c3610c68c963c5c7206c34bb590a9a8146bd

    SHA512

    ea285968d81b5b98b45ef3845aca7306cc70668a4a7478b6adca8cbfa3a604a1041335e95b751e3a4a3922d4a141a668c12acb9db136ca86a3811432415ac22c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    478aa5966a431e77ae2f92f00b35d477

    SHA1

    2a2a5b22d34f23613f3f21ba53163fbee7755bc5

    SHA256

    f0dafe4c511ea6e1afc47bd8527e6dbe84f9cdf6cda186c2980574ab676d2ceb

    SHA512

    391501178dffce0480db278c3f10774790fd7e67e1d31b9df87d7598935694bc31d94c3bf0b6c48b88df578b18783ee01931b65899033f1383eee3e94c59facc

  • C:\Users\Admin\AppData\Local\Temp\Cab2DC6.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2E38.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a