Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 19:38

General

  • Target

    68624e2c9618d81901d121d80a14d0a8_JaffaCakes118.html

  • Size

    66KB

  • MD5

    68624e2c9618d81901d121d80a14d0a8

  • SHA1

    d6187a75cd54d6b8fe6744b515d830b6dbd35b07

  • SHA256

    5a5b0600a0c0abaa54147cb5e47f492fd1186595ec6dceb6ced9944c3cb62b1e

  • SHA512

    ea85618b2d641b1ec79e31fc5384883195b452c7d7ef6ec0fbffd68287500f713112a03a9ac60265ec4e3e52b4647795e045a3c5df08d4793ab0af6f56febd7b

  • SSDEEP

    768:vChnRjpNvar5JvqnUunhqfso6Rt+K0hH960TdXSL4zxsVS297EWTx:vYnPnmhH960TdXSLQxsVbF

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\68624e2c9618d81901d121d80a14d0a8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1848
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1848 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2080

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    6728aea2631b86a76c237508d8ba9b55

    SHA1

    7a670f95cac088313f7558869162fe01c6dc0ec9

    SHA256

    e1dd7380c6df33cd5702b032e0e359029d3ef7630f06ceb42cfdc154fd0baf7b

    SHA512

    533080cd1ec40b8530cad5c9914e0a5156d225f7392283ed2607eda4f1db4a6930002274060ed9130a6f634222c2e15818e16a50579cfe7f5274d028d31212f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    6c726e163fc7ab8d2c313960bdcc6c2f

    SHA1

    6756680db5253ad9c4998eb13c822cb0b07adeb5

    SHA256

    a88e17b856a578ce0c6026a453433d0ef436586d64b16682e891ae5bf5e42f61

    SHA512

    b4e040f2483ab0b2a8f35cbf50066c5721caed8d57d485249e4e45b86eeb92ca776b3529f5fc091f54cedff67639363e7bae15b100b8996fd1468733b19e5104

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    9e6e20259699564d7aaaa9bcfc2827ad

    SHA1

    aa81a70c6920c2b6ff41a0d484036ad36c14c30e

    SHA256

    e84420a3588eda4a2fc193e7c541e0c99845d7bc0a66adef38e25ba6b3c33bf4

    SHA512

    b7abab145d1635cfd98eae6e363011ad00974f73cf066373ba7fd17d1fb859ba024657e2d9ad4ec04175847a058ec5de25b6957c3d661d28b18964e56d888474

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d9bbe51a460d92f2677996410488079

    SHA1

    a63bbd6922cbcdbcc22f38a3ac901ea0faeb9814

    SHA256

    4c807e2539a957a86f2f5600d1d3b208af131ec77222fd56656aeed0b5d88095

    SHA512

    76db8eda28706840085601ff167af156579cbad1d99bfd731e8d9509b03216dcfdfece9f59195684131b98d2d79e02eb96f3184a7d22a26e6b5f039fd4f7fad1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    917ac440733af6ddeec155facc71de7c

    SHA1

    718fcf67df7fff83ce970343592da9a0c9eda1cd

    SHA256

    de31920e403929ed458127213a1ad12a4615bee76c1ddce26751eaa416bacfc8

    SHA512

    903dbd6f2e9a92e8f7a2a24bf6fd3a0112f393c3cd3905f325536756396cee0d8f09d8174f0c82168cf887874fb7e074d8dd6122b15e2e75a72096ed693c4601

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab3fd060e60d80e5074f6716640ecc95

    SHA1

    10450ea54797c24ff1893d0f6a7178a3d941522e

    SHA256

    ec87ee831a2fb31ed78c7712c1d0d44af1597d7cd1557194f10a72c00bdc972f

    SHA512

    9d2e8c7b8b55d7229b63584a0b921bab001f9ce6327c5da97e209c955ad4be0898278b637c74928bf1bc331e18a699baa5890d1ba31953ca5c961b469173d8b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88419d7c0a081f5dd708fafd4074044c

    SHA1

    c2a08a44f83d0b1a1ea5e6da4504eb9d6739d9e6

    SHA256

    80a0261c09997081795c8ebaae0cfb79f1ff1ead0c5833ffb384f8425fbb0e63

    SHA512

    c11340764160cf6a99979a4bca8d5744fb4fc63c1796d86f00959273e7ad31934dc69ca431600ff2ad19634e46a3c7df537e7f442374d55687527a3853b1e259

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49ad75b26512f5517ccf85fa29a066c8

    SHA1

    03aae67a3fffe5ab5339cf8f0d3b77fdffb53038

    SHA256

    8a3f309d6e69dab4edb196251e5940ddcaa23ce5ae094e3a220a3d867ca05b44

    SHA512

    3019bdded811befc8afef3f5745dab89475a3bb2b821411e63f7844e193130a417b5997738bea60c39186c01552555e8e23c5a2ea8125e17f0a1c4f45a2d3a2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8bd0339c1f1aa0725b70db242ab2a2e2

    SHA1

    a3cbeb8fbcf2edd0a23754219cea50a85aaa3298

    SHA256

    d1fda0b2aed2d7ff808ed929377d021ab43b4723e49e92dcb6173f8a6f2dce85

    SHA512

    9e48edfe2c11eda1570302021f9ccdb991a1ee010c047a463ddf48ff9bda28b78c41f4554f7f6b19d7d4408947b9ff2d08dd3bb412ed2dda858588afc3707357

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b6047b2857207c9257ac2e266ef05ff8

    SHA1

    7422d1f9ce16ccae8eadcefafbcf21ea38709596

    SHA256

    ef9775ce0431f41b4d17f040cfe8b263f57b6d1591974fedcd35e4fc1db172dc

    SHA512

    b8526b8712fba335f5788dc7382a29798f49335def0d0706a3aeeb6da20cc7227ab4904e5ad6cbfc12e3d6a6e04876e8037e9cb453237def2d2b49d6460d9452

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83b9b24921e6461417248b910ec07983

    SHA1

    a096ab3ff87ce0bc15b8baf13bc9a7609ac2a8dd

    SHA256

    0a7bf25d7182ac3cc322d339c6be900e6c1235402af5ec35ffe9f7e9076875fd

    SHA512

    c2aead6ecab0e069d40419cb9d3cfbf4499927b4001767c4233604e4df7e7b605f670151dc8607a60aad96556aeb5158df56cf469f5be4ec6f7e70ea4e021d96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7adba96c9f2e4bed2fe846eadf14601b

    SHA1

    72fb77d87a7565830daf62b98319e3ba52d66f59

    SHA256

    c83b2499d6955dca78e500135a3840421cdd404cdb615c95ea9f055d72154605

    SHA512

    0569653803d27898748fc21ad63870f6ad68f4f0c1b9b82002d16a1909aaf565434e35c1f628b28d72b9e3d7c422dcb6ca7f59bd30c0bdf1086e7d69da856630

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11ca1dec93e2e4fb18dd99c5be2cbb3a

    SHA1

    5241526024bbd130ef08c9d702c53515db14d2d0

    SHA256

    732ba16a80a1b7ff6701a65d306c4073acf24961494007ca4d3bc2bb939ce881

    SHA512

    ec6b85b722a0c08eae8cb54548cabc4da7630f6c8bb1d558348d764f79b7f2ffb3151e12b59ae3682d8d35bb35cf0242dce0ef30956fd4246c3c62981c3972f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f3e16c161e7d84ba1817db1a5e3d8b0

    SHA1

    cdefabbb2f6e40109c35c6478847edf3ccabb5d5

    SHA256

    5c2b8ac0f8e9b6df8ecf73894dcf1563b12c16663a8b9f174d181b4e31f4d9e1

    SHA512

    6a35ca12c2eec3550387bfd8285fe94ed6f25d18dbe5ffb47df683d835700fb434ac05ff6326e793c082eafb371dfad44ca1ca039a210155f1245db41f0fc1f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75a42366fe2c42a2028c46a7d72d8597

    SHA1

    6f886c78c358c8b6a1ebe3656449cb42538c28c4

    SHA256

    559ac5f91d26a6f92e405f5d20ade8df632ef92e1ac3a622be5615e19e5da14b

    SHA512

    39fbaec0bfdc5f7f0364def11730d9bb652adadff0f4c74a0411ac1c980dbbe37b63f6c18b7806e50494cd2a4be073a77a1c24b6c4c3d0da7f890322e124d70f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    950c138790ca3be21815a11c774f2731

    SHA1

    7faa30f469f2c9589774d55788d43eb99b25a4f3

    SHA256

    dd0119d6acedc9fa376b2bf88d061fec939337997aa5bf8d82ba63bdd8d27f36

    SHA512

    b9fe08169cd628dc54d679c5756efa12f6f0cd5ccb8452ae9fd6ec9cd8e77143970ad24559507cfdc63906efb854d99efe8ab73af2268b6d50009f7f4a435233

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1cca0e6b00f5e4f609221928eee60c48

    SHA1

    e4c5cd546012861b04accae6247c59d12881f90f

    SHA256

    e127d6654fb6a7a6a8215018f3f5b452ddf7262d6c5be1179a19afa0074576bd

    SHA512

    be9dfd094d4752f2bf33a294d96febd713bc3783a5f38d3d58c7a248728f9965123c89ac18de4ff71b127025346449971e189cd35d0d988ae726311ecf7d8ce0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc1303a553d6ccdae45c431a8e13f2b3

    SHA1

    90fa7c22ea678207355935ec3b755f8b8896a3af

    SHA256

    cc6d4a6ccec11358a754ac0b0ca30cb7da77c9dd93dfe6c263fef05bfb7eacfd

    SHA512

    59ca3836d42ad63448d2cbfa49f2f7df5a71ebc73abb723a27516fda5e12b6f1010fd63665c500e76c2344691f5486c31c0d2dcbef23ab0544bfa746ccf0bc72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b54223ac473c7c0a5ece7ca37f94e7aa

    SHA1

    f8d8003b361f5e5794468f4c2bb17b878cb69498

    SHA256

    94596c09e7c886e8ad22efe9737c0d0a70863ccf86ddb1adb5a6822c15739bf7

    SHA512

    44b2952ddc27a55d7a80d071b4a375f73a62a5a5a77eb0fb6eacb6a2e9326164f55b3ecb7edfd2ca22b310e3d17e47502ed597b7a33c3f4e4a5fe2fcff830bb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf112f775cb8cd21e0cc50f89bba437d

    SHA1

    1eaedba8b67357be706c95e6764d537b3735333c

    SHA256

    38cddf3373a7c27f18cfa1da845a2146766dbab354d5d7d9cb4910e4438e05fb

    SHA512

    92df6798f8b4b10e56e9a987f5dfad68a2c558f228ce0a3d9e9bebc6fed927a1bd6521b9245b4129d775e20fea9981647ccd663b666f95396f5a4395ad71c3a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51a5379a2d3c7009d1d3cc883d4e34b3

    SHA1

    149cbacc1a0be9938b14e5459206febab769f148

    SHA256

    8333b8a085a1593c9d87a9901d8412debc73d1fc1e6c17da23ea889986859ad6

    SHA512

    115f97e6dfea729c62e23ff85d9ba478d628b7bd44206dd6b6da44e23a8c36d12402b288d7e19c6d21e83bc7d3ba340b90106399434504af966d352da586ea0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ecdbf11a793ec0ec8603150c8b298b6

    SHA1

    aafbd51cb3c69216b76c10bc80e02bc9caf1ce07

    SHA256

    937b09f5a7325e15182e2cc8447a4431f398895ba6eb4807064dfc0e6f46ec3f

    SHA512

    bf7af3a67d719a1e618faa5c4741dbe1ffb8f257f053571ad76a8d1204e1a07f2fd011ab85ff1f53626f847fd30087c548924118cbf773af4bb53a4bbba75b97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    9ca67c1679287a185f54f0a892192072

    SHA1

    e9875e8f8a62c1a9df81bb6e3fc81517c954fea1

    SHA256

    03e990ae2087518db4869f878135780067195999647ae29d94de26726744b503

    SHA512

    1b215a569763b8f1891c15f9c3330564f02e0cbeb5e6abc89166d96cc0c7eed8cefddbe559b8d17b0bef03cff898f01a2b1c1369f3f95351114f7642fbde4dfd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    41e2319e0ed302b2dc373339c4509dd2

    SHA1

    591704aa47b15d2f11a15377e8ed309eabe40399

    SHA256

    95e0afdc780d25b5ddbf53a39ec984966eff8f7afb9062f3db57599d10c4b776

    SHA512

    3ddc295f50c1652d44e8d7563fe6f1b1e42eadf3bb82f4a11480bc499c18c1413017c0cb84012a56bfef268f340e64bd4f8063708b5f5389ceb637052a7e6bbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    7c0c69d663767b57674a0c3c48c19a5c

    SHA1

    a820e6d411e2551de7735aba755fa4d4547c861a

    SHA256

    164a4987ce591f38fb066079110b429af8792cc9857228cf625a43eb09beaa87

    SHA512

    f712b01ad77333a2a3f97cdcf721c345b02c36d92768a3ff9d70dfd9ed3c9a4cfb01589e3554822ae1106f5174b6312898436f5e0619b49a432f4d90e00b5411

  • C:\Users\Admin\AppData\Local\Temp\Cab3C29.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3C2A.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar3D1A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a