Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    19/05/2024, 23:40

General

  • Target

    5c162ba3544895908e46c8da31b9f5f2_JaffaCakes118.html

  • Size

    36KB

  • MD5

    5c162ba3544895908e46c8da31b9f5f2

  • SHA1

    3e57a082fa34530fcf76431ca28f747e4b49f377

  • SHA256

    4ed5c6f4fc5063d08ea3276d998b1c71213e3386174c5b209309f03a082a7fe8

  • SHA512

    a84b490ba206462d9be5bb6eb9b04a0730c722156d48bf5444170a7692f2ac86b07920ba9ff0e5f8f149d5d1fb28464358995725511b73b85e34e0b15b9a9b54

  • SSDEEP

    768:zwx/MDTHuw88hAR2ZPXRE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6Tsdi6f9U56lLRcK:Q/XbJxNVpufS6/s8lK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5c162ba3544895908e46c8da31b9f5f2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1860
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1860 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1636

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    4dd0cc541c3c96c77cd654ab8671c727

    SHA1

    a19fb6a98c106ca4374ce033dc7c139fb03dab7c

    SHA256

    baa44b3b29cd9bc4de876951f04fd5a0383c2cbc65105825c03fb30446009683

    SHA512

    4ca520662b3d0531d1e49bbc89fc3bbe4ddf6478c1fa2564d01693d5097213c85a5e020662314be471cdf453e65d82aedd6603b148aefb79bcd11c8368cf1e6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    724B

    MD5

    8202a1cd02e7d69597995cabbe881a12

    SHA1

    8858d9d934b7aa9330ee73de6c476acf19929ff6

    SHA256

    58f381c3a0a0ace6321da22e40bd44a597bd98b9c9390ab9258426b5cf75a7a5

    SHA512

    97ba9fceab995d4bef706f8deef99e06862999734ebe6a05832c710104479c6337cbf0a76e1c1e0f91566a61334dc100d837dfd049e20da765fe49def684f9c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    3b4290c211682e9d39ef5371cc2d7aee

    SHA1

    17a6aa73a6fbbd3276420a8ac57abcf5ff51c2e7

    SHA256

    f1e2165f7da84fe859a61d920b8e13567556691b924cc14b2c6ee5b749f14a0c

    SHA512

    653b1605518c77485126d6123841ccb8fbfdc799b59e5720ef7effcc8ac89d854f997ac2d6d5a6d129ce4f305f6ab611e142b25146d7704e17e450640626b854

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    fa73ca3268179c099a859a5b5944f3ee

    SHA1

    4ee10224fe7d48ca9f684adc33f090b0c174ed3d

    SHA256

    1717fb59e8e7bdae9391a1bbfdaae8f7a69c19e8b86852c1c4824cdb92c870bf

    SHA512

    e9e6a87e8c498eadf112c0358d63fa7bb74b6075e1d221a67fc06cdfb579785ade6ec6a99f449254f0ea1d2c9af1cff2a2bf7020f6f089879a4b4081c72da02a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0b113005aad8afcf6acc99d5bf88ff2

    SHA1

    ccd9b9083ef7104709128a58c25ce5305bc5e5d2

    SHA256

    34ff39040310ac1794b0c66fde1c06e6700518d592f665f48d72b56ae564ce56

    SHA512

    6024ea7e420dd3ac77472e83c2a2bca005a23e2c364edc6837cf1ccda310bb943d011796040bb6c88cb1baf922ab1340fd865e77d7a32d1605d1c53af882b185

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa34ab27c8e496e4b01c2185ee5a30ec

    SHA1

    52b453557d15dc62c68092c41f6b595587545f41

    SHA256

    8f6e904086a965dd7e2dd292b5c47e2ca81225e22eaf56e7d29099f45e1bcdf5

    SHA512

    e2b2abd90c866ea84aa3c539e7bb7298923c935b244fc16be14f3d9d92dd5360c75a7f92a99ebe7f0f273c032c884f3e245e0da0d6badd354a0dbe05827f2a0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ec843fb102bea69440a7f4b33d44e9f

    SHA1

    8115b7c6185b51d6a072f932b19d31e671eace00

    SHA256

    3b2b8fd5d205b44d4d0b93d933de21b1df59d159fc9c385f54c452a912793eef

    SHA512

    5dc2f330beb550e21d6c6fdcd63c9899cb305509adb0262bc90a91f42f7cfabbfb70e6d254e2537985ec6a29a383af5bf53d5abc0b559b8fbd9914ca8af786b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e0e7e532b3d57347f3a4dfccf9f700f

    SHA1

    0cfb78e779d5277b96a976697d89f5982c745440

    SHA256

    60beb2ceb72c6b4aeaf1e47e67324142751060020bbe1ffdb47c3d80cad4a378

    SHA512

    52d9c3b5593c78c7c1df68eeb7330202d4612340e8b983a563482c330b2d6a4f006dad2ef008215242fce4a5365af7732f73b1372f48fd7057ab92b078550013

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd08105b6a3d2de043c8aa64e512a133

    SHA1

    e51e0a31934c7e762313fab69ef13fcbbd3f1c8e

    SHA256

    1e823ddc6beb9adfbd4469cdb35943df313e7b6e25f0d54c8567a4c7e770070a

    SHA512

    2122c66330bf620b930d89e06ceaa3fc32e3301ab01e18b39837777fb76f69b132eefa0c9588d53bed25bec3de684e06ac73f4a6ea48b82c631a2587c0850b3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    baeda4de592e5ca9e4be4447f053567f

    SHA1

    3a4e486b0566825664c3380500d0c4ffc0c49045

    SHA256

    673c4eff72eea076c15771d9449480d51e392cd9d39c9416745e26086a046cb8

    SHA512

    f850cf41a4445fa32eb825221ec323b84b56642b70dd522eb59b1b7798431e2fa7221f80a0efd72bf150badb9f6d648677de6096548a3edf15e009f50e106f56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    819925a2061819d78e32bbc4c44d5c35

    SHA1

    8a662b3c6c8d75582801ba51a26984a7d920cd75

    SHA256

    dbf61d208fe02c35cf9bf7b7eb1055278d32db8a54ca7aa9263eebe4582fe730

    SHA512

    aec496b1e2a8e7a1f2678bb49948c2f49d2fb2bca25f341c6b324394298f0d7549ca6bec8b23a9a5868382e754f5339b83c8128c18aa195feaa696240131520a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    145684c57d7564f25a794a57debc2a90

    SHA1

    1e1bdeb137d34b5197e688e6cba5bd1bfb084c90

    SHA256

    ab3b5e103ba4a61f5afab06e812d9aa4efa6c060cdf0eebbf116e18be9c03c04

    SHA512

    98373378d4a7eec120ea1d6ef0753a251c6914cd87220516eeb6913f440c398d3f8befda8a1640f2b062f27f0a04d7e82975bee84620d0df29e6c948ca0e00fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6710cac349c2968bc3bfe4aface39292

    SHA1

    c2a3d6c5ad0a2bc25c3a651da073b62cb40f7659

    SHA256

    ab56bb2879084962d5e9a58573c24d10c29068529a8f665369166110af986a09

    SHA512

    4ba111fcf83d23f5f19a57d52e4ea243f1f73fd24190553c64bfa1a034d2c0c1fe523c61c8b13e10508771f417ea7debfac99f8c1824648b612c65d2cf323b2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fd4d408da842cab302bdf45e9a85ae2

    SHA1

    e177558dc1b6593d86c870d84aaa8f3e6506227c

    SHA256

    a0bd2e06d70dda589b50f3ad899c0fe3f1c2eab9cd83401930b2bf2d4e893478

    SHA512

    e6d534bdd9eb0e16b5a3ada7739433af2554dee292edbf285a4b1a2bee99603fb77497e7554be17b667351b1c1e9a77956023cb802d06d669859a4aacfa32173

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1eeab107d86db4af0f895588d75deff1

    SHA1

    19dd3751c4e284e38e73e0c4504e66af8b6df331

    SHA256

    3451437e76782de4d459879873a8785a30aa1d9e28a281218e6ae5dd7083db84

    SHA512

    6caab7082a75727948e7cf0eb8023f9f664439ac6973f841fed0abdd2942292dbc529fe2e6c5f9c2d11e492d59df6f3976d578d91946af8f67bf1d7948a6e53d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    169a94064c020a28f10050dd6a59ea9b

    SHA1

    b60924b6579920862973a397d646ec43770413f6

    SHA256

    9f37340f6ac206d39ec9bdd6e859a5d69a3a387a95d3e7922edffc1a39d20a89

    SHA512

    423dc11ce133a8982ffa65081b51a55b30366c501d20b12a8f50e887ca033192fb7ce9df8fb8b0c7fbc5a1428ac86cfb9bf48b21a359f3b86ae269026c6938ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    adf1f7941518c1321c50afa7995f55c5

    SHA1

    d715a9a8d8de56b69c0ac4ec368302382683cf72

    SHA256

    4ecb6cfcd7c1e0c4c4c14871747e38feb1bee3824d3f76df44ab12b2e4d78794

    SHA512

    2228d2e4c8d080856e90e5a17f424825499389cf03d435eb95ea8436af1a45ed05f5dd5201e9ce07ddf4e8b28f450783665962cf1f961abbc3d1d42818d75257

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50841123dcc2127c0e6f0b691ed25ba4

    SHA1

    498a42a5a999759443851e5497fbc4dde2c84cd6

    SHA256

    212c52e7e448359babcae220ce4a497ce5e070c9a34fa0a3e61b7bc9fcd53739

    SHA512

    f401cd9d1d260800d73b74449a7958c0cdafde784277ad216a9ed9302f906966d2a7ab8e2bf98a2152233eb64f22aab227f9232b0d6dbc000cef49ca3f2ce558

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    851ad451ecfbe3f4b547636bf61e45d2

    SHA1

    e6dc6f859df837697887ebd82a9baea303140fbc

    SHA256

    4fa17d56bf2e531c4bb40e7185b00a8487249b30fa8d4a1a78c35b64e088faa4

    SHA512

    29b3481a8b8531625668a15e1c4408a19c4683660dfaf8aef686d85303da455f965262fd3068ac233c347be872c6fe8bd4733b5fa3079978d8a226a789e3b9bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97466c4b5cf668749f9a1ec14631c288

    SHA1

    a010e676455cebd6cd208446c65dc827735eb782

    SHA256

    c9d9372d44730f201f5620153b967309fb48fdf45204c18a92cf9008a72309ec

    SHA512

    548e059e1baee9ba218a5056d51359720f692c676dce3e9dc6ed035c95217d3de883585022b0ecfcde534dc73239cb69936f9651b57813f4cb0a2ec4ec853410

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    782ddfd04db55a244746c5fa6b16e483

    SHA1

    aeebe3f58aed04376e2a776522017985510a59e0

    SHA256

    b30f269ce90ad1ec262e6ec776828730af9f5bc908bd9932a23b2858109792b4

    SHA512

    a412c2fc2cc9a1b3623dd0b57f532e8912ed6b0fd541678f86c05d6a4d45b615f6babe3fcd8b935b5a88c0405674ed357ae32d4ae42c7c6ae2bbefb561a4c3b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c668a7c961dd09fb8ab0d175875dcbb

    SHA1

    ef82ad0009e6423e7e52e36ca829ad6c38fbb8a6

    SHA256

    be708347424ef66e5253c8b4c02c88782a8b40fa4a14c5aba9d7d65efe944ec2

    SHA512

    5731e2cb3716fe6802c31376252b553322e2569a6b0036105eb527ca78fc23716b36ed65794ad0c4458fc5ad13be7a194e303f6bf2cb828e0d82be6092418979

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    392B

    MD5

    fcafd2affa7e35dc6f83061c2526822c

    SHA1

    c6eb613424931993375fb7ca2aea8066a799c94b

    SHA256

    6e1cb13d5fbeffe8682742aeb34e561822db84a8f7e3fdd43f32725bb5bd5e4f

    SHA512

    661a0bdbfc65cee19088653ac6c2407e9ee00ec2a801a14cb0363d6e57dc9ad2f204e934fb706232ca7f737a1ba15ed8d354ec71f78896d3a7aa540124a1da17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    448349e99035bfd75f0807d9479e6d4d

    SHA1

    0d317dc7ae460263173d83d44dd9d09bbd10d7ca

    SHA256

    804e36638fcf6ed1d69d67bc0651cd94fb2b109f2fbfc9cfd791d07f55e6844d

    SHA512

    73dec1d12bec9924e02eaff7d23eec229f8f19557b1643b3ba292dc7285f6bb4df103252c5dd02ee0d15d6cfd62abfa6494bc3e37fe37ec217531d3b55d78aab

  • C:\Users\Admin\AppData\Local\Temp\Cab82B.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar82F.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a