Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17/05/2024, 13:55

General

  • Target

    4fedff2ed88652f6370cbad0941f2ea9_JaffaCakes118.html

  • Size

    86KB

  • MD5

    4fedff2ed88652f6370cbad0941f2ea9

  • SHA1

    a54b036532752df9a85ba0c65223fc186de8ea6e

  • SHA256

    ec6b0668b20b0bcfd9071a293ec1c268aff8086f91ca06518b08ccbcaecc4c1e

  • SHA512

    42931279fa0949b8732558a2d0e86c39a249f8c3ed8c8dac01f7696276bf9cb88ea53eb25bfbdd94c77dce79ecdcc0489f81cb6047224783fc4c46bebd7bdcdd

  • SSDEEP

    1536:SNcd05UrGtZgtv+TbfiJc8btDpsuliPNaXk9doP2G/6uV8etb8DgJiDfJeqCb/zi:SNcd05UrGtZgtv+TbfiJc8btVTvV8QXy

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4fedff2ed88652f6370cbad0941f2ea9_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1096
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1096 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1816

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    97524d01511ef185f0492f278881b9c3

    SHA1

    fa76891e2e74cb1dfd03ffc355b7c400eb1198f0

    SHA256

    67b5adea6fec5af8fc6c3dafc01ea98265537ae726e5751180d30c99de1b54e1

    SHA512

    0f12ba95d41b321ad11f779e4d0e64d425fe840d5bfbf0727d1eda0b2e779d1286d82177383a9f2b791342196118bdaf2a06b09bbcee3df84a82b55e5c1145f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94e684cfe65f0450cf3aaa3c59cb5925

    SHA1

    058aa4d13fe6cc4498799355f5b6cb7a5fc9ec98

    SHA256

    b5217d788eee1e4cf8b6c9fd2e0303e8e613830629648081c5ce3c976387684d

    SHA512

    144898c421256b67ead74133d5eeba537d499197859d917523cf099c82801bd2bd3febeb202c18eb7e034853ac4db11c6ca8447346f6c9949f8af5ebee9e236f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1bf9e1009936da5f5b80962be57d9c9c

    SHA1

    5db82bdce4a8a97c5560c018d8851e7f19520cde

    SHA256

    f9d23904c8e4431a80c4297009a496af0fab436580f78c62590fb47b8dce8f3e

    SHA512

    e2edd094679c097f281390dc100220b34c12fba8dadf46381aa1a8b6ff912b0d176093b43c9a27cce03ed2667fb3d803b72a54262eb49ed210c7f27b268e30c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d506110ee2dd142d81cc23a6224df86

    SHA1

    cc7cae839d153e65c0117912b96a674af2e501dc

    SHA256

    a88d821eb9d2e9e0e1782cf3fee35ea15772bac12dc008c88d63cdd1415b9580

    SHA512

    b576c228f017864127a8a1147a83ddd0923032450b0f5d8e8a70eff3f4e286a06f2c38aaa9b1c422a334fcd8fa73c009c5569bbaac931069c11b977e93e6567d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ba0d8ddc08574b648cfad98c88a608a

    SHA1

    481c10898e4228d1b122f628123df70413aae790

    SHA256

    b25d9e98faba684efd94da2c0c2abf1bdeaef68b4ca1ba5212d7ddb84a22eecf

    SHA512

    0bcf8e453b76840d18fc1103283e310c0113acfc302e88e38321b2d0919da5e50dd1e8a9d13cc6ce54ed687c51550789b99b754b7c0dd11483c5ff64b8e831fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e567d575119f98ce0b8cd83356b4643

    SHA1

    d36db46c4d9218cbb56927118bd5369a3af1e589

    SHA256

    711de0940ddd361dc14036cd1adc33cdd3726ee463ece3f5fa5778731074cbc5

    SHA512

    186f609639a1129943a4f23a57f9db69d9282039d33d2b79eff0f394d6e7fda5ce992247cdb063e034258c6490ae88cb92eee042c9764d0f7d042cf276c08cbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fae62803b23432d65ebdeb9c14c1c702

    SHA1

    73e1dfbb2b2becddfb2f9b032860e1d88c0c1e0a

    SHA256

    6297ce5d89f1d384d1cf366a7e4aa83e0726b3c6748e8c8e5b50a704a4fc34e0

    SHA512

    e429aa6ff60d190d2cfee78a0049e3591db6c6171295188c4fbff5e9cf1bf0aafca7937f750f4475e4dc3606efdc0bacc853c3bf812f52a6a6707537cfdbb760

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa9cbe939f45f7d52148ed2a8a7a641a

    SHA1

    8f67715984bcf23668ca553e7ab67f685707033d

    SHA256

    41335e89ec92b4b5f47465bad8df041acd73eb3e038a9c408863ef237244229c

    SHA512

    2170d513b9fecbf59a6029454acc04f33fa5259eb78bbd09d59d62764b9d84682e79021b297f005b13dba4376ed90b50461843dbbf0c79d662ab253443b44409

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c97fb4e4302061886fd72bb9ccda8a44

    SHA1

    e028f156d0997dbd214c4ed4f9bf5069a5e1d743

    SHA256

    43f5659a8f9f0ae7359477cea4563460dc06ec17581c1cb1eb5b959d62b5b6e8

    SHA512

    ebd6b76f9449361c6e596bd05ebda49135261e56a408a6aa5d2b4c7ceb87275d467c20f37003cb673de0c03af8f256364b915b5a5aedb03630e4ea4a6215dd12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f337937b70b6e9dc78c40e83d6241dcf

    SHA1

    0e693b84d6051c5c29c0f7358e1ce812619970ab

    SHA256

    713e1b2a42ab1105d4fed44df28d5eaff70924af845d66a4f0751670c3def3f9

    SHA512

    f9ca881fa3fd9515b747e8e7840dd01fb8fcdd7cdf4cb6360e4bfa7d74554d899c14e2bd46012c3346262bced7399777997b6123e53ca14551afba56426211d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4344cae746657b5d261f4a4e1729b8df

    SHA1

    593fe3de83c447efa702bedd97ebca18f656a1c1

    SHA256

    5cc5f29350ec0bc06ea9494ea60c0f56049bb06200dcdff38f8a7eaeadde9555

    SHA512

    60d7c20cdf59b07feee8b7162b0648aa56803137ca852afaf035ae228b3bd0d3245523ad8592f3884ca6efacaa398ea26ad51309ec1b3cf856df50c91aa729af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aef5ac819f9da3ef42873efd9822ecc1

    SHA1

    e582ee15ca32f8fcbe0b7c63505fe47b56b9bfdd

    SHA256

    d84f2eb4f78030b00e450980a4cffc8e365ef5faf53eba6c1fa4cbf1e0590878

    SHA512

    7ffd235a03e5c5d91a74a7378c6e3c0911e14020364a4e93d54e1bc947e9b2de12b775f583708e84713f7e2067f678f9dc30d2c48bcb478b66ec330623e305a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48b0914e4ca8a0c877d8b977d7b74677

    SHA1

    4ca520b1f803c01329bb30e373fe65e55a454f2e

    SHA256

    9a019771851aa0815aa043a7fdc5f97a1175a20e0074215487bd655f0a990fba

    SHA512

    971da5e1ef5f5ca308bd5e40968ec7744f4b58e9910c9a93f9f91718b2bb6bc2f080a9e4eaf78f0a68c4433b09c1b9305e31b80362ba25bb54d9ccd1ddf4bd58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a00e1381fae6f083e4a77bdc39f874c

    SHA1

    6a76c6d86021ecca71ecfd30380d163d25aa9706

    SHA256

    9aaaec9208c28faa2beeef10bc04c0a18b74fd83a3466264ae786230748efa84

    SHA512

    a6f450dd2fc03f5410d6880f80ee12882fab6f3d670a47136e866e05d3650e2aafa8cd31a9db6cceb2d5ed9ac238c69a5578647bf1dc7fdcc72b52a88751dae3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44cf6d8c883f1694061b4ba7e696dde9

    SHA1

    0684bca50c1acc231faf473bd5dccbb44d1ac7eb

    SHA256

    2e5a8145d6f1a65bcef5fce1c191f697856cfe65d0d2c0eeb2bf7122e937d4b9

    SHA512

    e5927c96b4b85159662090a822fdd9b5f69772a8dd83c9bad377002e1dc23c81519904dd26e3e679d2ba54040913e666779ad9681ba04859d75bab37d7d72856

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    864d73340f64b9e6d8fe550baede8141

    SHA1

    b56059ca06d7ecca7f3068a96510c27cf419d836

    SHA256

    a978b424373112d2af2acf08d4f4918fd76e90645d62bced3771682e91f72fa8

    SHA512

    03982b192b0d284758da6340f8092e647f4cd40002c7afd21bb9ad89013ba61bfb0f6d4ba8940f8826f615ac9f2c5dacffce0570739fb334b8b916dfeff60810

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fbd5bb47f1b30f3493fc3603eae73b4a

    SHA1

    59242d2eb36bfd728836d7985b840c30ebb51ef5

    SHA256

    ea3fc0d35e24993a8e28032dba214cad07ab858556c99f306df11f4ef4f642f1

    SHA512

    c220f3fadb9a65f078a8fce5b7a46dc22a98cdc7e4acb947c624d9f405be0e35b113997bc0bf100d033261e0ff9cfb467f21853118f6c1573e1503ae48e34b53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    357f68e0582dab37a2736a94385589cc

    SHA1

    1a6d6b0eeb7a4aaf43114c734f9d08f14eb6619c

    SHA256

    d731bf28cd1d7004ea86b85e61b266e0110b7520068795b4f49da26a7791ecd2

    SHA512

    52749368c965646f02ad29168a6168e72023a671a833810d0b323aaa318fa1d659d22509d2da808f03d66cf6736767579a90e76b5e308a8cbce19b934b89c746

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1945cecade50df80921a5b27ccb974f2

    SHA1

    cc529154db5f01e488dec3fdb51b432e4fbd46ad

    SHA256

    0b4faad383e0caaecd703c03ba21acae542368ce23702fcab2d8527dc1838007

    SHA512

    52bb856009e7a86aa013237a2a792248ee6f2c6dbf5ae45d9953962ed7a360f54242cf17300ed50d7e81b27d87df2600c40e0ca243b513d3e1d3997ea5139197

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c9376a8994b1cf7f7c812b7884336f2

    SHA1

    e1ff80dedb83229b40fd8fbfeebff36386b0d238

    SHA256

    68161aea0096345520d202e9c7a41cc87e111a3d4993490bffdb82e59ae94677

    SHA512

    b2b96712a32efcb4d127d7db3a2deeb77a6d37088dc076de9432012d81941bd3ce7532a416e552ae5a26f3cbc230d47092b0667f2c23cc593aca8c1f1a562351

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f70e39ad25874765b89d2932cf232bcd

    SHA1

    ac9ea577f281c52341fabfdc88637c1039493230

    SHA256

    c517a38ca71a9f81f0fb4169ff2502da898dee98e4b7169d9388d97d72adaa44

    SHA512

    5fe16a506e14a4ec6dd8079f9ddc5eaacafbfe26e5c71d0f38682e1c506dc4802db979896f08a3d98ab5ffb0f2638b1411a58c1ceb0a05c519cf8893a22fe75d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    a26a0411c8b3ba24ca2e399e987e2119

    SHA1

    3f1fd0916be0b29e57de3ca894056b540e4b5dad

    SHA256

    ef863b0e39206de22bbb9f598705d6f9929b009559d327adb516537848265275

    SHA512

    0cff29f8308ba71b0064f84ebd9ce37a75647710c2038648ccb69a26e557a6f7aefb306c9dcd9f3c5e3132aeed90e09086302c6a3253b0d5d321993242b4d168

  • C:\Users\Admin\AppData\Local\Temp\Cab25FA.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar232C.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar24D8.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a