Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    129s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 20:16

General

  • Target

    60fd69c6b82adb5118496e9321eb0c53_JaffaCakes118.html

  • Size

    60KB

  • MD5

    60fd69c6b82adb5118496e9321eb0c53

  • SHA1

    bbf3a5c66f72cb86de6eaae29011c3c871640690

  • SHA256

    cc0ad134b5f60305334db12b4b67615c8612e0b5ac264ca6a3ccced200adf64f

  • SHA512

    30bcfd823ff927dc59e1b4c8438a9373bd12d18e1ef0813a44975a6c78b3b3bb6b6c55e16650cd0ba5dfbb93e8f9e5d8f76598bca3d4be6906735419e4132893

  • SSDEEP

    1536:gw+LJHJJEXWOACBNueDGsjXMBPZ2v3Mub:OpeAOFGsjXMBKb

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\60fd69c6b82adb5118496e9321eb0c53_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1340
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1340 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2148

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    2861063c0e5b4b97b9bceeff935fe681

    SHA1

    6a4bb48270c696cf111fc5c27206e84aec145f54

    SHA256

    104836bc45abba5fa0b04c6f65d9eb8c0d83faee20bbb2b515cc2474d5f109bb

    SHA512

    c6f3ef2ece358d6cb29f7640e3b470295ffdad5229eb307378c71000999bca58ec698881aa2571c7fde0e50b0bc1c69a915996260f4618c27245b25b9c4a24b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F07644E38ED7C9F37D11EEC6D4335E02_02C4C6ED250727F9B08935C0A9565568

    Filesize

    472B

    MD5

    7a1e441067e2f71efad6da8ff30c7500

    SHA1

    247c339a52f9ce202be20f1524b462b7fa738bf7

    SHA256

    b125be7ccf15f5696afabf0c2962232f59245b7933d04d789c0d13a24bba22fc

    SHA512

    d139d706c00ead9dc1e6e438bbbd8df7f3bceae51440aab815661bd72ed8dac385f8b274613477049ebbee7124b5846e9b93d86e5914f7a521ad0974f898ff8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    79f8f62072388eec88d15e88a5fad9c1

    SHA1

    ab9410b4c598178f995c1c5c10556354e3bf24b0

    SHA256

    9c3924b8311c5d3bb524c66985e60aaab69664c1de5d5952f976472c4e7a82ce

    SHA512

    8545ce3fcc5b32a6c057670a6e7f4f2f1bfff45bd9fb2115ba9f81a8ee01e5ccb16a38fbc0f651cb7dc64938007c69d8abcb903442462e35ee069120d6b73dd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    4c18792b55aa23f5bb8266298fafa407

    SHA1

    3f26d8e8010ba2086a9c0ba578c3fcd703e3eb23

    SHA256

    cba1164b5d7ef5fbe3f14398600b36a6bf1f0827cd1d1d2ba0edaa51177c48c9

    SHA512

    7fac4d79bd2835109a571d2540b5f6fff196e7e0ca6c5b1f67dc99b49af771ec853298670fe8a3181218a5c1200203718408ce4735aac23e4f7676e79e871e8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e925a0e2161605f43878a0fd8b006a7

    SHA1

    8f099df8df5c847621b6cb0077aff4a0f35a4ef1

    SHA256

    0d3ff36e012c18fcd8283bcb28b1be5abcb437ddb6a8a3a8c31e939b537663d0

    SHA512

    2ed18ef25a8743972571bf5db7a818a2df9e6ba95d8e2d8bcd5ab2298440275c005d4bab2ab9400f103ef1ac34c71d2a62bc2fb893cb576b28479715cff46651

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    40dd2e30b55c69e88ea6bcc326179acb

    SHA1

    fa1d9f5174b03e0cbc26251b75daad33d826f0f7

    SHA256

    1a2fea2fb5b16408425512a450ebaa958a40e0d6075e6a0c1740e9a624252f3f

    SHA512

    053ef9010c3f9d19bbed336ad434e6a81e4608cb9d9518c4ce8f461b84d13679c45bee098aa69a18a6a9599c06736bf528494ec3009e9298afed3364941e393d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa5720206012c0c2fbfa2c63ac612264

    SHA1

    964559321d5018b769fb689278a7b504f8ec192f

    SHA256

    dd60b7d9309fa684301b2cddf9531115153a74cb52e372dc6a2d755f9b26e78b

    SHA512

    a5a8b4f591ce801057afa39c5f45049026933e1f065208dff7ef6c407810cfe13d88b72b4da89c95ac9d57fbe09ae23eed91b1f28a8ec99ac25d4d69a3c2ad94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5d331f56a7785add0e5a2766788dc6a

    SHA1

    471847e422442a5b89cdbd183ac3c650187ba1b4

    SHA256

    5bbf416ec1f98186b18b2b2ea62352ad5a9db66eede78f56014b603d99656d66

    SHA512

    993ce9fce7ace0f29e692ca1a87e8ab2ea1212a668477abacc8dd83ba8119c6953afc7995143a3e6a347f8ee678b89f89b481b0a9df165b75e4fe1a69c128700

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ab050d723442147f5b4a6332919a7f5

    SHA1

    208768bc1b1cebcdd5ebb8cd8222d46817bf3964

    SHA256

    9e8d7763886441cf66f38fdbce2efb3792088d6c1504893f3545b4c833381ee4

    SHA512

    cd539cf9227ec4622d4e83b27e2397068a2377bc5b17a30976b3303f9a3741781d62c5c17a860825f9dbda5abb50598d63fd189faccd22abbd48315bbffb737b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1fd6fd2c545705b883da563bc1adc2ec

    SHA1

    bf6f864735df4567eddc90f3f52c5e1f8fd72e8f

    SHA256

    aaaad3fe2a643ca08ec2969f7b8bb0cce772da1bdb4415d2194315190f35e60b

    SHA512

    5168d29874e01e902b8cb7f27249d94a3cbaf74efe6ca3cdc9f3cdf21ed071a9f05e0fbdc07e5e6a3be74abdbca977f8b961803fa708b74325702f1742d76f9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    975442749b0500a15521965ae544728d

    SHA1

    e14d09c098c97034de46f60c484b0409944f9f12

    SHA256

    7eb6a1cce818de91c498cb88f0371ca142278e045a65f0359ea8499371ee5b49

    SHA512

    54c9bfb38bbea21f11766218aafb3687db2ae72df94df1cfd513fbc6ccde0e21c55cccc3a3327f149ed566bbecf07b0d28ea833799e5008f6d9dcc8f4d4e3dee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e3f12b221c469b54a6d1e50513b4690

    SHA1

    8922e3854b1fb059474bc006a591213aa8f7c042

    SHA256

    fd908d74df61be8ce537a3f145a93d7e3f78be19eaaf37d96a6483c26490dbd6

    SHA512

    5e68b4f9c1314f3abab892d8740b7af29f2ff799fe0ad6e1a6189b7ac79bc9753d88bb0ff5a4f834fbd71ce8a868b83297e1e248b2fa1a378f1dad5d9b19966a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82d47e0ddd6d31a304a0fb5af95f6ad1

    SHA1

    55a1f1e92ec0dbb69dc2b5cdc7736c2259fd1cd1

    SHA256

    3fd2a3d351055f4e9d4817c730cc895390061689a3406da0258fcd2e953f6f07

    SHA512

    3838dbcf1fc87e4144bf07d194edf2152d4c2ac096ae563dd09c37313e4109c990daa82e13438bcdbeb4d22be64d95efeb32e511296f2d27efe4b4a35d972ee5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    47d00786a9bdd81d966cd281a835e652

    SHA1

    0792e5325b5d90ebcbf55da4e9ef6cac9874ff88

    SHA256

    d95ef050446a902cd6ee1c971d200bbe1e56e2bbdea910c973f33d444a937505

    SHA512

    82018d1cb56e0a967da5ef14c5b160bc1c14288c6bce85f484377027f827558c39df5fb60685e9e343f588b738b282ee420f2639e83012305ab8dcd0566fc56b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e42181a3fd8e88c0f71c4e63905a9416

    SHA1

    c716cbb4418acfc81b908b777a99194762eae5e0

    SHA256

    1d2351df167425c7274fa3e3bbd08470a1194db9cdba53a966d6a9d319b09e55

    SHA512

    073817c63ba7c3b5ae5c163152eb3777d69d4e791b056ffd4882f402ed2593c8f4b276744a44c0ab48394c076f7419cbcad359d13f5221702ec04f05ba37e950

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3dcbc5b4e5ba25646f37180a4355b27

    SHA1

    baa3e78531d86a4efb329f9916f8bc44194f00fe

    SHA256

    8ea98241ce52974fa66067c46aab423f4b10788a0204c4d6fe26f31fa5f0f194

    SHA512

    43447d81277a03758325d0fba8eee679427b651565ab83cc8dc4a7e263a36263b068910cfb50e714318661bb3a0907baa9dfd1f742b0f7a72c064322bf2eb63d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a15004d489cca1eea48c0484950ea1c

    SHA1

    cd82bdda1ca8d549ee255b4fd42936df61ea0d7e

    SHA256

    ddf0e40394416863cca3a4485c82d0bdb304645119b569ab90713ef89dad95d8

    SHA512

    72e97d5c091217723b672ca17daa13fcf89bcd7ce8cb6d2afb2a608ef289f86995ea0c3461dfd3283b3427b7d6eb22e95c69686ca6bca210729341c7d8301bff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fec2f78da5cfe6d6a34f005ad92ea2f

    SHA1

    2638cd10cd8651dae37160bf901f5d1c7d555bec

    SHA256

    092b99e96bb9c1f9f95a485a2b71b5f74d458cb299a16f769cca3eaf0f63b9ee

    SHA512

    b164371688f881574c3cb46d9a175f2232e43618f5c4cc9c0b8f64f29d48c6e8f00e626f65d5e877d3d329e6a2a0bb9e16ee4129a13ff8a02bc2271cbdf61176

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    72437dfa591ccdbbc1bb9159a93569eb

    SHA1

    05b32383ffb98ae289b3681916fb65028189985a

    SHA256

    0b1adbc11f274c4be4039dd883b901773e62d6a2be3654c62a98fbeb8288a6e3

    SHA512

    af544af2d7e1cf2878d6ce03d922b43bfb2a424d0e704a13c6c5cbcc280e34903ff5f09e1ea1932b0b1f4d59b0fb65664eebc20934c7ea7392b24ea1f1e3c631

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    3d5edb14ee0a33d080f515a8fde25dd7

    SHA1

    1e30c325d63b562ae4df4d62e267bbf6113732ac

    SHA256

    d4d29d1c80edfe17840c534321d7a57679086e7dcdc11e1302afdf80740eda03

    SHA512

    19d91ed7f8bd843ebb7e546ff35cdc9ac15d4ad4b9b4b67add136610e4b9e3feceb8348fe09097c371e8c0bb1b1e8ccfc23919d2331593d1bb2299fcdd2beb7e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\528EVS6A\3604799710-postmessagerelay[1].js

    Filesize

    11KB

    MD5

    40aaadf2a7451d276b940cddefb2d0ed

    SHA1

    b2fc8129a4f5e5a0c8cb631218f40a4230444d9e

    SHA256

    4b515a19e688085b55f51f1eda7bc3e51404e8f59b64652e094994baf7be28f2

    SHA512

    6f66544481257ff36cda85da81960a848ebcf86c2eb7bbe685c9b6a0e91bca9fc9879c4844315c90afd9158f1d54398f0f1d650d50204e77692e48b39a038d50

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KRMHFE1W\platform_gapi.iframes.style.common[1].js

    Filesize

    54KB

    MD5

    7ef4bc18139bcdbdd14c5b58b0955a67

    SHA1

    afe44fd9a877f81a3c36f571c0fc934324c6cbd7

    SHA256

    192bc707852c5986f930528442d88a79e5bcf4513aacc2b722a3c5e964501838

    SHA512

    6c2920e80e4d5059588a32f75bc2b5dcc19f8d68224c0935d74f9fbf49476ca5b1ce43c279768f3d36871dfcec39f36db3fcad559c2f93cc540154cdbb04dec2

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OV51DDG5\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    23a7ab8d8ba33d255e61be9fc36b1d16

    SHA1

    042d8431d552c81f4e504644ac88adce7bf2b76f

    SHA256

    127ffe5850ed564a98f7ac65c81f0d71c163ea45df74f130841f78d4ac5afad5

    SHA512

    e7c5314731e0b8a54ab1459d7199b36fc25cd0367bc146f5287d3850bd9fe67ba60017d79c97ea8d9a91cd639f2bc2253096ce826277e7088f8abfe6f0534b63

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PH7CXNA3\cb=gapi[3].js

    Filesize

    64KB

    MD5

    63e5a0b45632b3dde3694ffcaf0e3f7a

    SHA1

    923736d0cdc308331d5cfaa0ea159bfedc83d53f

    SHA256

    889109910477919b3457416e7764bcd0add19fd959848253026125c7c35c43db

    SHA512

    5b886c4b5122d61f0209ede748aa84445c9388cf38813316c41b3dbd2308216e88394d9a45cfc27113c0cf3bc93b9c37d808f6d3c67888244c176ee095d42259

  • C:\Users\Admin\AppData\Local\Temp\CabEC0.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarBC5.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a