Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 05:25

General

  • Target

    5d64ebcbef1cf444315e68cc83325231_JaffaCakes118.html

  • Size

    7KB

  • MD5

    5d64ebcbef1cf444315e68cc83325231

  • SHA1

    01e88b4e44f20d0da094e27433094c2f19f78a86

  • SHA256

    6d2c2db4ca069d7cf878f225982c56dd4775c4169d908a934e71d657647e97a6

  • SHA512

    65919d5866634b69ef655bfe2fd4e385a92e003a7b89621da8f6bbb58fde5a5d113b9809437e7dd45571ba0c90928829d91f1fd1d5029dcf57a8176098046923

  • SSDEEP

    192:CpV3RhsNPPlJYuJYutuYppYSY4tzvsRcMWvufn:u3Rh6Pd5JzvacMWvufn

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5d64ebcbef1cf444315e68cc83325231_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2276
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2276 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2472

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    c9395790a074f46b76006c767e926495

    SHA1

    5d25900efa69446880350a395007587d77d64859

    SHA256

    f2ccce3f52590078074bad6ce44b38ec9af199a40630379a83c0d92bb66bde8b

    SHA512

    5c700f3b23709527c4a85f1d5b8f624f6dc4257550e82741938d18e19f7b13f5a9b6fec007cf9228a17078e0d2f8d838ae10200ae67d8562c88cb7c58b740914

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    477c03fec77dff4f28f6bc428b98fedb

    SHA1

    6f125139a848f72d42b4f6bd3278564c3d880609

    SHA256

    e47c1bf7f40d5e5117a2fd0436f60aef936099e876ff21a53e4f096b83d8c39c

    SHA512

    77dcc229e951968fea0fea0a994482b8b1c62fa734a48ff7c1c86ed1e4578eb1adf2929dffcd8351c28a208cd5ad33703d4407099be7193f756852d8c125d440

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b99b66f70d833a3ced7f3a292ced6c7

    SHA1

    2459603d96ac6fab1e43f1b482e653e7a7333b96

    SHA256

    7afa9d6f1154e6edf860633fd3c758edf11269521530dd9fa00bcd796d94e37b

    SHA512

    fbe8eeb8a7853e90ba5c9e7c7c6b0a249d1367d8a5b399f48b3eba5bd1a05737b1bcfb3dd46b24824c076753add43d235f070c3dce73bb933f08bd6ea7a31f1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dab9e2fc851123846fc58338712a8b78

    SHA1

    f5f5416d7237ed4c0c0e04a270b7c3f2c4e0463c

    SHA256

    44238e09b83419b822ba016741bf1de4a9ef8730b4afd621345976bc4c422bea

    SHA512

    fbba7faf9aa815c6506dce54ab579373865690e94217b69ceb290b84158171dd3967c4e07ae3d722f190cba2805a9f6f7f155ef7c1bbefbbcd10f1b1d2c4dab4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa9fbc473068f5d87962a3df3d5335ca

    SHA1

    3bf1b115c8407e9169044c18103e8818b975835b

    SHA256

    efa5c821cf809241ce722aad94a8c0e650385d6863990b01929fe1fd782d81af

    SHA512

    257bd40ec9656dda780dbea9a77264c33890a56a9661a298c68d0624bd26d464865ab189ccf386e72c2dcbfb2205da7fd9f89810a8cb15ac0f3fd02d04d09fd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27c0329e8af2b2b5292ae1f795d334d4

    SHA1

    841378ebbd1bb12cfa36f609016ba64c7225262a

    SHA256

    ba8fd32e983e709bedeffe5af78fce0daa88c6e9be84ce2cceeb74fecf1ee698

    SHA512

    b5833d7aa3af9628c6a627907f65bb6b19760884d6b8b1570545cdfc823ae92c7dc5b90b97ae607664e978b6ebf321d498cbeeb9569fbabd90f21031ae9e45aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f61158f9f14897b26abd18472ec7f994

    SHA1

    c85efc0858ad54c76d8a6382f11d27118c5aa2f1

    SHA256

    ea6f879687194e3290eb64c6ab6c255fc1506e03de587fca5adb16931796439f

    SHA512

    4f5ac162e9ce077470b05ad0a1444e2c2ef3eab50cccd5298f80ac098fa7de22fd24ee0b29df69a7b5a6150a0187e501b1ff1fd1d66706bbc1b1aacb2b428efc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8071037cc07f1a62c0ce47b9e7a1bb0

    SHA1

    4465f7e0c6c7df039881cd54bfb8fba381ac997f

    SHA256

    27cb77205651eeeaebceb89271284f6a4e708b16be17bfcc5c4e038d0a6798be

    SHA512

    5b5f81ad18b8cf7a55c6779456e551adffac9d627c0c21161ca01126e13baa1fd43f35d88bb3c719c324887961b62418aa05de2cc874a704e5c8ac14674e555c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f90e6ff7fa4bfb1cdc4e9bba5612bc0c

    SHA1

    b252dfb83bb65cdcc96bbed5ec17de9cb8ce17a7

    SHA256

    51fe64f05ab2c374404cadd344a4b59c6eb5673ec30167a9c90765a12a7a3a49

    SHA512

    eec0dbcd8c5542fa5931c0a2f2098721efda682f5bebcd1ebb8c6b31c54c8957845383ea989496f0a140afb5be620dbeb5967249a09e014aec30270e669b8581

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb0cbf712f06550f3d565ae66f85c2b3

    SHA1

    75a349c88b5333e1cf599601d60a13bb9edadb85

    SHA256

    4f86c6b94f99b9ce8a3549cb7cf45272acda9f739205bc68e0c5eab3832f3ae9

    SHA512

    f77e881886d6a70b22dc8047ece55cbdca3fe3fc3d461db76467892efcc8d77155c4497567e416a5c523fbc0438dd925b268a9195be69972679592dd8ae042f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bed9d814199b748279ad4d65eef2d085

    SHA1

    572b1c0025303283356995cf89a4e5105a4acd46

    SHA256

    f46817fb2808eda9c50191cdbe34ebda7566c0138a8f35a1dfdb4984cf310727

    SHA512

    470e6e1ff5d8bcd28e8de2a793ca0418879f5a96e37d602e947ddcabdc291b0138777080e41fb66c457360d770076f75d85d1a5f10c83df8a92f607b07177179

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07831f90704db54ac4006201f3f1de33

    SHA1

    b8b73f1ddbca4e080fcdc881aba1ecf85a6478ce

    SHA256

    369e6e0a5fe732608de2b3a74a8a4cdaa80452009a78dea8a93359c7bddf4f5f

    SHA512

    53e03fd985d70e545c41443d4b2bf469e5d73c5f7cddcbc0d58b9bd9863e59a826243b59d27711417cdf478bf9749a4a19991db167ea5a24b855a353f78b9c41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b9b3ef1f060042daf2f7673273e4c20

    SHA1

    5c8faf2819073563b0e76414505a6b957c6cf478

    SHA256

    98d494fb8e642b2915048793c9ab91dbab7f866bf37662083aac2c6c8b77f27a

    SHA512

    b9d5f2f76df1ccd39b617ab4fc051b083ac356159353aae245cf4cbbefb9a85864c95ac8c2d95ea5886622aa87b3461644cb0b1c8cdcbb1a139c4d2100477855

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ebabf4d3976b8519f73b77812550b9bb

    SHA1

    9f5c7775643e859f774555a303fb6560334e8fc9

    SHA256

    b4452c48a2b25baac92a6690ce2f98d7e3f1c89fd2b2868d863f5e6e09cb31ac

    SHA512

    80f493003ac79d609fdb7a660c100041d5d6047addfff42b1b01788340c2a58d11113fba6196bdd50eafa670af577598d1433a50bef9d64acc0583c0c7f0ff67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3e2752955c263ea21670d76b1d6243d

    SHA1

    5a0f3e0d8d3694e75f1094f9c7bf526e792c1a5a

    SHA256

    e81c89a0176bc72436f472622488964b1b548921cb24a1f8bd0118d2e4cbc8f7

    SHA512

    f8965f72d48eda02c96da02668ba6369c1b9fa1821012ff82df5f6acc0594800448085ed92e179f7aec71f772c13e3b2e92b994a7e1d1c0d81833a75e3797243

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a015a08b6a57f4f1e1c50eba44671aae

    SHA1

    5ce483c596f25b6908cc17dc8d7aac5974dcc797

    SHA256

    79e459f509492f801257e8fc81f0084b28f6226557d5f339063a1531b7d90ead

    SHA512

    7a361def33e85a5a2c030d2037c969d6e61046e11bf6216632900617e29aaf9305842693184b0a932354fd0a731dee7d8a39acb6c842006ec39ca84643d23353

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e94f6b1484de7c6be7fde2ff7348843

    SHA1

    4e35dd7a91ef2809c6011f1388b8ea14d9fe7b14

    SHA256

    90be96346ac82fdd7bb7b9a22674ba3c149c5aa94dfa0c022b990a8d81bfd8cf

    SHA512

    46a2453a1179764fa2e5e9ba25739802d9271071f4c62f36efda5a1d24126df83d5272a632e96f644551d2e61ca23dbabe6831d3d93c52c84af29010c72be3cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    919b06867f69fcc0d4bdf04c1fdee87d

    SHA1

    0b21135af511a185266aa091caed379dcb6ef357

    SHA256

    fb75b03dd0f67e655c5e0bf4ce890a75dcbe942fa02972618062cd55a81f6e8e

    SHA512

    89399d1b6de9ddc4563f8c4fcfc4069eaf335b0e493b709534a87b0837dea1cafc79b568ee2ed0d8db63ba2b0e5b5ac25f55ca2b0884185c4a96d6dbc7afb64d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    549d27534a8824869adef2c0ccf7e0bb

    SHA1

    d01fdfcc7a42b40cfeeb95628a6d39cf6b85d758

    SHA256

    c0d8ceb7510d3d32a6e6a1d5913aedeebef73ebf58c81b908bc119e3ffea1691

    SHA512

    32ad7a0d3b462abe42f2246c663362b79f3f2b0908f0496792916cf123421fd72d7787d164569d36c33126d953450a9f81ed7f502028ff33c4d48cf456ccac20

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EDQW9R5V\f[1].txt

    Filesize

    35KB

    MD5

    81714c6346655f970a995a10f7e133e5

    SHA1

    b8b07b9859ce49313a27091dc5ee254a22e6d95e

    SHA256

    4fdf59a425c698be7e097de8a18ceb8b7e397bb1d5ce04168e7f457ed5ca0c20

    SHA512

    8ef425d6b10b4cf24ef437e502ce3036fe96c16fd2212421c167ae4c1ccaa956d0057755d4d209c9c08e13dbb23bc8a159a7762cbb47ca0bd2935cad6bf44632

  • C:\Users\Admin\AppData\Local\Temp\Cab2849.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2979.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a