Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/05/2024, 22:16

General

  • Target

    64f5fd2a432e88a84e083677125060ac_JaffaCakes118.html

  • Size

    19KB

  • MD5

    64f5fd2a432e88a84e083677125060ac

  • SHA1

    0483f022ce04fd28ddddc7e955cc8556ef98f666

  • SHA256

    57faadf40d04d062f34e8aa8adf9fb7799f79833380c7306131bd88d7698508f

  • SHA512

    399f08a0c20464556d38d57cba1be60342704b92febd85e9714c8f68412085cae0d5f37414c10131ffb9ffc3719d9f276654b49ae5ef9b53e9f9514d6da134e8

  • SSDEEP

    384:cbU2K6DL8tOA6dlnV/jIBJw0mTJ6zd57gqwQMuhd5wQfSZhJ:+f8OA6dlndjIbAgzd57gq1Muhd5ZfSZz

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\64f5fd2a432e88a84e083677125060ac_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2648
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2648 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3016

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    c744af45c03476007991d7879e08f3f7

    SHA1

    2107c9bbe5a58dea1235566d8506e3b7de29fc1c

    SHA256

    78e3724250cbf1f2f618dfb1d9a382723cf9bd2e2ea1ee06049c474bde246ae8

    SHA512

    80f81607be29ebe07d6d7490e4c74c5d72c9a50a9ab8993061e595ed5bfa1c4ffbdc29482d6272042ab9f381b2aca2093106ea0299ad1dd5b1ea2da8a1b67ca0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e6462942c648041739a342fb1c17ac47

    SHA1

    5e7d003e3a4764a96da6ca3a49a678208e6b9a22

    SHA256

    7aea856aa7b5e4f3f7c4e033e9a690d8d1c9a43bfc3b95ae5d8c2fb05390a09d

    SHA512

    e53c438dc28e559e3baba748e2a112143e86dbabd8bdbbe75b4173877d87ac092505d6c88e72e753ca8ec6e7e36d7dd8e7362becd8256c4f702a3def23c5980e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e10543ef7479c8616b51004d9d4cf56d

    SHA1

    5b9587a865cc958c75d50c793ce014063005653f

    SHA256

    0bebaa86f2c4bd8bede574a4aa321d12a7cb26a4a66d6ef974ccc4f4fd94104d

    SHA512

    b2e23282fb38c7299816dfc287b1a5c46bb330f007d998024f91c4a1c75e54504b2b9c7a4812a147eace257bfb14d7384c3b3a9aa241335c14b4e66b090b76f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35abf0073cf58ed81009382091c0b9e2

    SHA1

    750d2bffcefe33c8e2d3ea1f5e088d409da34161

    SHA256

    437e28f6c4e76f5f40137ad3645758d1176c9a32f63008f0a643a2050cfa6c4f

    SHA512

    77033ef210c80a513f1096302090c17f19aa69768f2e3742e7e89fcc1944733694d58cc8f52f05d7fb9f177e97a53816e62b0d639450e287b07424d526982371

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61283714ae21190b32697d4ebad4bb2d

    SHA1

    c2df3291a15c091115fdcb366dc3fef3ede654ab

    SHA256

    2c9f35a96c67cd239c03d3467ed7c2596fe3ef70b1433bc3dd585d962a3179f1

    SHA512

    66451dccc672fa628a870862f709264bc6ba25bffbe495459e85af436f4da2217903e044fcab3b5814e76a89849971c01d956f41607d4854b394da85e1a6354f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fff42e68043acb1c2a7b49d57dff4f7

    SHA1

    e4f43d19efe3a09abb296ff6ac15b0d26fa45bb3

    SHA256

    cb0b34ac3df7edc4669fa28ed93f91b1d281a7b8bc48065a0a601a0f89eeb9b2

    SHA512

    d6ea219f8a2b9bc3e85f946aef79b5fa7c19cea0736fe1d1235615ed3521af71b6204eca66339fcb0a8d5ee02a5f849e13151252be137e148ef8e9dc2f921704

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6c91381f70d8d3c42b81c306dc07f3b

    SHA1

    0427197c5d8e0803296691fd67aa02d6dbc23468

    SHA256

    7b899088055f9d7d3f39ddfcaee8ad6af7149f58db37937cda8d6c0c3271dd05

    SHA512

    7fc67fc92a79123e7ceca14b767313995f98888fb2514e05067ead64c664571fa2cb7706d983d7ce5c763ceb6699ce5492bbb69b5646a419580fe83007d2c7e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d3dd795ab5758e08abab7fa70049086

    SHA1

    7377ba054b716c79d4e7e00f27a9821de0e4acfe

    SHA256

    c084891cf117e35073fb4344cce9005f97ffbc124f6052a307281c266a936954

    SHA512

    e5297cf8cb6a131cdc2203e88de065e6e73da25a5bbad56d7da9232e78a11ffb0da8c281cdccf13a1e63a16110e2e4a331d5d62abde18eb8ae5252e551680ef3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6daf32dfc54ec1c669476627248cc60f

    SHA1

    bc6609b6001d68f664aea6e688674fa7dafea83d

    SHA256

    5acd0785aabb11ccab5ece4895ddf1092f305be9c6a9a306175ee38eef221a36

    SHA512

    7610a778b9072e9bb2879d3e8c8747f559f76a06fae357417e39a0bf1cfc4a731af6c85ad8bdb5ce6b8c7fe1335d145be515154b131b76b6e2caf6ecef6b6ae5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ab35b5a9abb79a5dfad220644f5c796

    SHA1

    937d3a08a370d0a6814ad442613ec9126f8fc1c3

    SHA256

    8e9dd7786b5dc7d2045a5faf37927a8ea5a6b9017a5a19de03a6c764a83004f3

    SHA512

    0ed7a97123358ade02e73bf2058d6afb761b30fb134b3702ba98e98cd453e8f10c4cb068634850cc33aee5fab9c14cddbd64731eadfacf6f3de66a943befc51b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56a947e1bcf50da794c3fb4707404be1

    SHA1

    bea2671d9ed03264376eaf31f9688a98c6a71df6

    SHA256

    fe249676a35335d4e4cc2e07f1a9fcc25ba5884fd56316ccbba0cc36f67f1348

    SHA512

    1ae7f1c647463e52597678ae8142b0adb457305a8e409d226196d643aa8ac0e15be93e2ce4a7750e08e2a89c46f8156aad5e40dde4fdd9ca4b6f832e3361b006

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8bd11bd6eca82e0e21dcd595a2b66cff

    SHA1

    126b777b1d77e0d2117ed389d8934efef0c21fae

    SHA256

    fc61830cbdb5b676a2b27179e22b5965a29d340f2a6ad21fa59913d63b93bd76

    SHA512

    e35059ab6758387c1ee5437800326b53b0091e098964f3cd8e63ef92dccdefa42563327b09c0bcf975129f5a6efdca7c7ea824896eb30e06a0cb1de66ced0843

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf40997834970402535a6eef25cc6488

    SHA1

    aea7950a51f7698b1ad436f9997292b26cba47b1

    SHA256

    e06f9d1eb2caad8c6543ab94d0367fafa68792e2778ad397b06123279b502018

    SHA512

    380341775f5cfaeea40fd931ad9dbe6a47ccd13f69fa5d90442fc1b019b10cf18a7e907c178203a5f44e1ec35cb8c464f01015632f7978e79cdf806e21316d6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2eac35924b0f73465234c26a53d3aa1f

    SHA1

    c1a440295447d93345fb5cd5414ead3ae6810f36

    SHA256

    4088351c2f34a2ffb7892e55bb67c4f19de437a2e3230c4997111178e8fd9caa

    SHA512

    e85683e66a99c749ef4fad7d77e0c1651dd08da25684b8a485d9691ffaff84775e393ec97dbc9c923deb6039ee67a3e849f63841e7970e3de0bbedffd1714d5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c73027f00993b62ec3f530acad653793

    SHA1

    b1c4188a5017e6ea08b7efa9d2a217c286e8a6cb

    SHA256

    a75bf0dafb8891bbad6b58a861cdee7e4fac7e61194470305674b4ddee556860

    SHA512

    904911e6059f0d21dd2a5005d9e5cb3acc94031b4486f155ea380cace020f743f67f00626dc1abf18109584bd83b353ce726b42c1c7430276d3097d818748bd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f1e9af9b93d1520c44d96daa7c72120

    SHA1

    a6ae5709f3bc907d0e042056bcdcda76cef1337e

    SHA256

    ea0c6c528bdf81f4265a15787e80a6487bde853307a216585c683765abf59b12

    SHA512

    f3715bbc9009ea20b000a6cf6a46ced040b8e6d78ffb5c57a156087d4a69e7f920b0a0e7e914d12ec8110eab472543c959da3dee6b8aa74d7e6c54ddb9560ec8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1fe834438e723f281c145b21efc87a62

    SHA1

    ea87635db769194dc8362cf4de6dc35a36da02e3

    SHA256

    68d4e09bfac191b93ef82ec4f045802b4fad57dbf4183f2c67fb93469c79f66d

    SHA512

    0f8c3c5f38f38710e4849c9299ab247538a1ecf079876eb05db6e9f758e93a99d96b53b9fb3e4979e80c85440cf17c2607fa6fcbcdd68df6a1caedd69119b72d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e638fe3a1cc2c3e27dc16ce794a5283

    SHA1

    bec34c9245130734f9c58505937517d6bc133672

    SHA256

    c4be6cc315eeed27512fc0d1ea52bea152e7a01152b44a4810a6332b590d3d7a

    SHA512

    d9a397edb3bbd5e0cd603d393cea30c7216ef635c6168c33df6abc127cd8b4b3648b73d1152f34347c45a2334bc3928427b96a569b4b3db5f73302311fff03d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c759236abead2592c69b7080fc0740e

    SHA1

    58c8c97babba65358ba76de80a9d0eeff1d1d094

    SHA256

    d17e96fd4ca71f8ededfb67ed135ab4552ff8a5f1abd8089758370c398f9c5ca

    SHA512

    2352f85930f6d983ff37b65088973a4d15168212740d0b07a3e85e992b8adf91ec85f9116e0125de2cae226ccd7558f0fcdf54e61aac68bfc7b846fd38b9ec4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55f3111f5f506158a0285e45474c34b9

    SHA1

    0c9161e6802f426aa7be33d862cfbc5dd573eb5e

    SHA256

    3a0f794caf946a3a5cece36e9cfb58cb25659ab0899831120d8bf52b77f6d811

    SHA512

    78bcd215f6320e6b2985a061fba3192f346459fc970b9c88668574d09cc7e68b97ca988e41528e30354435f1020b53d8eaefe844c853102edbc2d37f055213db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9a80df5462eef7def89c41cd5f64d82

    SHA1

    2bff56890325b42174b646d09deee36d34877bdc

    SHA256

    bf05c64a27eac92ff27c00bd4ce5127f1cf4f7218a9a043b66795f63d7104d0d

    SHA512

    721d6d00701171edb60ca24f516753677b0516ae120e012b8ec208bca5789cc801e1aee5c8cdc6532f7ba5e5c0ee240f85783cb13e32bf9c540ddc382d79ad0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6349d780500342b5c562d6598286ca3d

    SHA1

    385fce8fcc4af0c7c547942bcf69e07affbed60f

    SHA256

    abce3d6e7df9d7d3ee44798bae0892057f37e0cd199b707d189b803cb7bc5e4c

    SHA512

    fbd8855d200e0f2c06ddacfdcbc86e5e846691d55b4296e4b3390232b472ecfc5d719487ff4d058f5bc648cc96ffb687a569be9f61597859e6286e404e5a3fac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    37288eb6d5def6868097e84043d6cf69

    SHA1

    744aea0bc60750cc337fcfb47f770267213ded83

    SHA256

    3d69d6be60ec900c3743b0962e9722278976ffe59fa49bbfbcb8f4b0ae7b8411

    SHA512

    f70aafb464c8d81793633fe5d34d3b4951149bf7310a5925db7b24a21aa8b84126aad335cd8a86af18464240ca0cfb97f29f3d682dbdb2e584ae177febaa7a4f

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\5ACG1U19\www.youtube[1].xml

    Filesize

    229B

    MD5

    8b85bfbc71307afaf1174f1c2dc0c6e5

    SHA1

    a1b310e130ad8b4697e39e98183c82b495f3f899

    SHA256

    59302dbbeac3299e9ba298d7faddafa010079be5ff5afe6bb8dba4311216083b

    SHA512

    94635279bdd573616a6f2520e43a3629425a7613d87930651db80ceaee3e85af23e4a886bb5efd3586f62f7ea879671a8e0255fefe90f5d88866f4d131cd065c

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\5ACG1U19\www.youtube[1].xml

    Filesize

    641B

    MD5

    aeefbf03c70ae0a54fdb77c368349025

    SHA1

    900e132e6a4ea0e83f6436c6e5097922200cecb3

    SHA256

    38d0520fbfc33f0f6bf6903523838d3848a33b314dd1c90b391815258ccd9e7f

    SHA512

    af3ebb0ed9231565fda9b21b382a0e3a801b627e05dde58f68ddf8367048d3955501dc88bfcff43f5f6f7f428d5e62c7caff5415321aa5d8037b72584994cbd0

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\5ACG1U19\www.youtube[1].xml

    Filesize

    19KB

    MD5

    c39bed346cb850ba95397a176f70d539

    SHA1

    cc18f562820f159bff86481cddb9e9620a2d22d6

    SHA256

    5b71566ecbef4f8fc9ab563ad0e6ca93af8a16f0d6af59beff30c7efecbbaf4d

    SHA512

    7ac06eca18d356b594098fe2a43d0df6f1ef65b05297c9fac26440d23806b0dcdab936667177d806134859d81f37beb5b7f4d4c038bafae91a553299fe2da3f5

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\5ACG1U19\www.youtube[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Temp\CabCD21.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarCD22.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\TarCE13.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a