Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 09:42

General

  • Target

    66d4048ac623829401186ca01b8e4b56_JaffaCakes118.html

  • Size

    19KB

  • MD5

    66d4048ac623829401186ca01b8e4b56

  • SHA1

    b854c0d01dfaaf1ebf17108d0a2ba26aeb5f20ba

  • SHA256

    f4e9558bde580f30b961f0e962bedd83e0e738434b19f861972f57c3f14e5e33

  • SHA512

    829c52379df24e67b3805f866a5ffd88f1b648cf3d2f3f7fa1db466452c33392202cb0ecb72ecbbd94543f726fb41574490b73531feabd2e450f53f298a10bb1

  • SSDEEP

    384:zijKhgESnVBD8cyQ3Rn2U2xePnemLxXucfIk99he3RzVc9LT:ziwSngcV30N/mQOIk9SZqLT

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\66d4048ac623829401186ca01b8e4b56_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3036
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3036 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2988

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    383720736ec81fe0925bf2796a1e4059

    SHA1

    b1e06b6000308055ece4c1de06a2a07022ae3a99

    SHA256

    eba8978866ed1bea2edcf47523e13c47efeae5ac06596b93a61cc8199ee1b6d4

    SHA512

    4217dd1af5d7cc475949dc5e5715552c2290eb4dcd0327156c8365cd8d69a9eaf096e05fd8bb50d996f0a96804a683587b284cfdec527910e474338091bb7183

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4556c456cdfeae2a011884549324a41b

    SHA1

    1b31dbafc60ca73cef83ce44d2ffc1cb852d76b9

    SHA256

    998732900a1e7a7e2497ccb44a66b48f33358156d19a243b72671c1779d1e1cf

    SHA512

    35e9b526689ba90cfc715ed3bd90e9710139234f62f10f599505ec74ff51b52c38e668559d3ac0dfec7a284cb6964114e09df77a9cc198f226d7e5a8c8d3a2b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4356d2c73bf96439ca48d9ec052e4925

    SHA1

    2a9a7a1145af86ce003af01432767f4932e90dda

    SHA256

    9dcd43e299699b243f8c097b50dbd81c6d3509b4a813848d5134e8ce4c6f03b8

    SHA512

    108e4556b74f8ef3142c379781c7cbea85599a2d96d3dd78911e3b1ed7fecc69887918b86de0262ca9dd560714c3d25f326cef68df6e930d7d2e5f1377c1b512

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf77e30b93f34d65b5f135ac90516766

    SHA1

    bb4a07009e0a884be2fad989d843c03b2de9d699

    SHA256

    78f8a6525fc2fc1ab11e575080401758a806ad284252e33d1fde0a662d118e1d

    SHA512

    7d7b77d1660ea1eaef66fb3fb427442e2eabbce5607273b0db066efe9026a5b18da715604fb3adb98451a6495c654b5781412a96f04e6cc1bd5d2e14361f0198

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5556965ea62a24a7f5bf4a30ddb5104d

    SHA1

    b7a387a1745dc3e4e9d998c3e505594b5619f8ad

    SHA256

    ba61a525d90838e331ca7496404d70a0213080cad7bc799d7ed98547164fc3f5

    SHA512

    b0247fac493351863e28915ae19e53984b22a4a808ffbb4f7a8e98a41a41cef36d96880c4764f58e621ae748fc4103ada5d27b986b19d5abcdd6fe6889367dd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    227d57b90fd4866213d7a4e06dd7dbb1

    SHA1

    666d62142914e4825d4ce48db6f236837194b7ab

    SHA256

    22c367dc8da25752e082d09306506a083862aa0841e213e904745fd7e7b796ec

    SHA512

    6dd10f0fb94dcbf3de0ec0ed99dc5cbac4ab247227ee365614455d39ab5fcd9e8ab151e008bd7f72edf4d226f7621037c652e1182fa858d18a5930746c05a3d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e74c77158dabef5585a0e2db2119498c

    SHA1

    f4c867ce9419b791a0e79dde703297321ff5ceda

    SHA256

    7ae747f48fe2496765fb0a4100576251275beadc54487f3f43dfaf44c7fe64af

    SHA512

    e08877f8e29c8d1e22254d8f763dfb347c4ff862e6b92105b39765e714c729712742353b24b557f23c4a866709b9388b90f07d3af9ead8e2b949790d0312e0fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21907fb018d89387f47540b13f8a383f

    SHA1

    d66b81e83308db8b67eca98b28d38e25e4bef0ee

    SHA256

    59e293cff7bd639267e4d196a87a283d15a7c8dee7ae7d599934e11cd3a6c5b1

    SHA512

    45b6a40c65af2894a7212d450aa6b3f5991670e990616a3a437ff28e23b82c7ca45fb8cb0d4dd567750938ad25976201bfffda8635ce8912c9115e84cece3fba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4d62b4058a70371e34f9a2ee66de1de

    SHA1

    02e2288787966326da868c59288130d3d41b81bd

    SHA256

    0539c5688ee02fae722df4017507e164941eed58f4a24df0bf2d1783064f6484

    SHA512

    3f657e8d312473ed983b888e1b368cb649cf1a0649162fbaac8f69088dcf031fdac38b2ddf418dabd03d2afa0d857099369c9a8a2d205db435e21d36cb5e60a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44a1220df172820ceb8d9e1328c0d880

    SHA1

    fcceee8eb1fefe09e27ed274d76fc06615ed54c5

    SHA256

    3cc9c489697c2b679dce0c5098709e4310b4cec3cad984fe4af2a82c19161fa1

    SHA512

    b6fb70b84293f9b66b704d96e3f85ca735ecceb0b4bba2a47d4d0df7d80eec285cd38c16a38bcd21c915512caa4d731057f54c94a807d40da76285926faaa3dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e50d83b724ba31eae275afa7d355a90

    SHA1

    7aa5d44ea8595594d15ce196b34c94cab8c832bb

    SHA256

    5466ce10f9319504cf12f6c8f45768c52666929c2efae59fdb3758c90b153f5c

    SHA512

    c115517350a7008fb72a21b2d6709f8d5b3b950e50daeb48bafde2f1a3b75dc7795bf14a9355146f764056deb0c74053cfecafc4ae4f21b076d9d048285bdb8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1925ddb64abcf1ee448e8fffc3c80d28

    SHA1

    ef07f9c63e12460918aef5f66ba7286d5ff1ce2e

    SHA256

    5d00d5c29803ebc99dfed298d1872e61958e4fdda83f6846a28bcb13bb09fe7f

    SHA512

    5b12888b0d7d891f75da39b975bfc511a6966d6aef339382bd07be61642ff0829dd2e813e3b1b7f7c42e703bbfc1f4af736b77f067c4615595b7d5e3aff28a03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13e0b8948cf2e9d8ba75ec2abba62dbb

    SHA1

    240d3338395339069d656df06e814a8a9f863f31

    SHA256

    cc7515bc1610c3326d0038b012bc5dda1eabc85e1bd9a2c5792389a49e157759

    SHA512

    cb07c7ffa3d6004266d1b6f6d1dc6af7091ad3891363203d530ed5710c50b0bd874f752887f3337e20cf31eba0170c3ab78587a94aefad680531518e23a8158c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d641c6226a1e8e2999aef9afe407dbd2

    SHA1

    17a5ddc4fe28a641a3517e054f6972dbddf170c3

    SHA256

    42271a883871432d06dfe0903aa6808fd51b386bd38dc3e523190c82730bfa70

    SHA512

    94efc6737a56bb4fc649a14cb443bb285f74e9f69717e509ef566fdc6d2b6b960417154615a8e4ce3ba1a563408c67a39e72c6362c0871274aec185069b3b43b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    266d746e286cf27dd3546bc34ee97bbf

    SHA1

    c30bdbb9e05c3415625460dce6feed62306d585c

    SHA256

    f9660410daede454cfc02d2f1744f6972a9c42f1a0531e3eb539e1420953a2b7

    SHA512

    0502bc50cb44de6b4371c8cffe2f1137c07a3163f63ca3a2bcd3e9172274e961a338dc7680d81535b98330d4c11078d56f667451420ff320e9e9b207f3988baf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    016b78faa18134695a03e50d22136714

    SHA1

    f0b6c9166543abafe3d33b1f2df54608094ade93

    SHA256

    c3e66501599b549d098362d8f522433c03bf02c47180d849065f591b5da04eac

    SHA512

    ce80a3e6025c7b51559b426775f8742ca82f62d1cfaad3632d3f28539ccd281325b84bfc9d32f61d947ce6e75df9b856d61d63237f8df4849cae994f10c6c18f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09715da027475133370b2b217a3a1012

    SHA1

    39e6954c14b99513d72f564db46034006888fb37

    SHA256

    6dc0799f03d671f02be541890168d40c5583cd09f89a9f689c688146390a7d66

    SHA512

    740b02c11cddbf8839ae62b796fdd95fb6e9dde039274992deb79ecb8124c20a8469db3bb55d4487ecccef672e0c621dd067a84ff76c07cba742a846e1973fc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62eed22daa669ad2519782f7c169269b

    SHA1

    11e17193456fcc8623e267e914658722f7b24c02

    SHA256

    5282463095e6af5ecdc23503399d3df336b9daf078d9c9edd16c85ad452c9784

    SHA512

    012eec0c6e5f97d30c7841cdccaf1979120ec963e5af9a706ac71650f2113a1b8cb98dc78aa28e3dc3f9bdcc2a67a4125f95d53aaf3b1d623b70328b52922ee5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2832742127ddce1f35adca6815bcf8f

    SHA1

    c2885ea39e72088577536073d2b11acb98a2d1a2

    SHA256

    9d641b3c0cbaaf08a248fbd97347cd83ea7f740bcd63356f198eef06de4b4670

    SHA512

    5f364a651686b357e383cfb34f499bdb03e3dab5de4ebf072438a8630dee932a56c830a9c199e21de2bf4ba685f4e5b56e7ba3ce5db7413855957110afb56212

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    85f29b512c2ea9500a36828c940cbd80

    SHA1

    531440b0da0a2fbac3b7e85e1fefd1210eb080ed

    SHA256

    fb1907b3d39d98d0a5e5d826ab70a5d397b5c7991c89476da48f0d81a1b45a70

    SHA512

    9ecfa664145318290a43e969133e01add18807ccd5689ad2eb2f77a35fa520f3806f94aa382b8bf5dde4dfacc009eab60229dd4ecf5448f571709c96f18beb54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    644514003518a1f83163a292dd805d9e

    SHA1

    68e27b46e0823eb0e7d69a56b0a500e55f232834

    SHA256

    11f7e28fb880a57091fcce67760637f43835bf208114de7e8e6a73fe66e9004e

    SHA512

    f042042cddcdb89a64e88ffb37e877547bd40ca89a77e8d5bb4af62f442f45cd8e75cf1eae01df071d17e82220b9207e3edf50b1da65e7490784a207368f6979

  • C:\Users\Admin\AppData\Local\Temp\Cab368C.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar377F.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a