Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    23/05/2024, 23:36

General

  • Target

    6ca6f0d0c25423fed0fc277cac0b99b6_JaffaCakes118.html

  • Size

    53KB

  • MD5

    6ca6f0d0c25423fed0fc277cac0b99b6

  • SHA1

    866925a6e0ef9dd8e210222ec85b4d453c25e9be

  • SHA256

    83ae8c382073bc3c320c1b4ac09afa9add70c678dcc7fe65c6adab072e3a217f

  • SHA512

    eea61d49b5f6a1b23e947d532de8238a0a48e76e428b78f7022b23b4ad89c053f57da363911b99b2d4c25508453be583a35fffa299ca94ae45bd1289ce93d151

  • SSDEEP

    1536:h9+uuu0nsS8HQU8e1U3ZNFchuCzW2cRgB+end:h9+uuu2sNHiPZN2huCqvWAend

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer Phishing Filter 1 TTPs 2 IoCs
  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6ca6f0d0c25423fed0fc277cac0b99b6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer Phishing Filter
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2224
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2224 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:636

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    70f1567326032af63567243ea0519ac7

    SHA1

    0cb8ef9c245ee34634b8d571761610c380554ea3

    SHA256

    3bdeb31a98363f414b989132d584a8b55af79067a11021d1b76f8cbcc17bd59c

    SHA512

    26baddae72c9ffdd88cd2b0c59cbaed9c3372d58b69521bb77a941c58abe3de1c02fe9318829eb5d241a0edde328beb55420735ee9f4129af052c54c7b1a0e96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    197e2792789215c242e75db5ff933c68

    SHA1

    acb7b9910cb4fc5b88e8fdc97cda149b39618847

    SHA256

    4bdc0a3db8064e94c0d76e49ac4c47690cd6dd1171e7fbd1687e87eda3b8d322

    SHA512

    ea5e638600c94ec596333db2acae43610483241030850066a8a02772fb7c37f52d9f72654d759a0627526dded66621ebf637b748a4b553156b47bafd1021cbcd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    47ec018d95c4baf4dccc6ed6f46dc78f

    SHA1

    3bb9c5086dbff2732ab1590762d16e774a620436

    SHA256

    e952c76195d93ecf9455b67b21891d20b890da7647e3f39fe1d9c1f98173cf9c

    SHA512

    6f7d33f70bc6f8b0329f712566fe53e10e1aa92332b874f3c3c6b9234543b968366ec3fd3a195534784fef276f3ad3beb0d30932740239626bbe897a6e279ce7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    214435d9490404f51c364afce7e61618

    SHA1

    b1e946ce470d250ecd688395c034598ab42e6658

    SHA256

    12a10e71cdfcdf923f9179d02025a999bfbfb9bd5c95fc8746689038f1e1fef0

    SHA512

    81047ab6067e889e11d175cea9a3fefb7641942571ce0ca30e77e47e5824e0584c18c316bbd862c262d356dc38877d600012b01981432eaf598959e4f7f12d55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f99f28200c86ca3433faa3ed3922c8f

    SHA1

    f2f9305c48b8a75db7d38b825cdc5d819e52d815

    SHA256

    c3ba0ef780b07a1cccac4e3a861f4f4c5a465dc9cca44a13749a8026d64e8d24

    SHA512

    1e991efb458ff55f709956915630380fbc37c8f34d225e4b278f941e12aa2d272e54a97b757d2739a3e839628836b4424cc48819a06f776913d8799baeb1e6d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1df353769ceaa5ad82ac141c2e4e6ddf

    SHA1

    a08c5b29d312f626964e30e45c107f15562209d0

    SHA256

    112b9e1db8c4934bb74246366cc5170d9cf229b10594e6eb9b3e4a9e4fccf178

    SHA512

    2c3b0589cfd3551720f91c43110ff3f5b0a2eca89bdac19fc0974d8388cbdccc10f090ea09f3d100c829bf29161635fb7dae03789e59e45cd29fcb6b47436835

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f26356fe13ae888e1fce65917c79743

    SHA1

    3ae6aef0c0afe8e3579e70412d470a205952a9cc

    SHA256

    7968f27e95a18bd49ed76b34a1f3eeb52e575f5ef456d08d6136ab9e832bb74e

    SHA512

    006adb985df51420bcd753cd47bbfd979eb7cd0061b49fd8cde054cb0314a94860360fbe1d07b015c9af0094c234cfe21eaad656c905e68dfef780e062904ee7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e20b8e5ba9a6495a0de0bd3029f39c75

    SHA1

    1e07a8a1d285b10b3948070d6d8b108bd5764be1

    SHA256

    ddb67a2df81ab726719dac21ffdf0ee67987f46e9e00002b614006b8b51d3149

    SHA512

    37055cbda9f4609b76ee2e16ae15bad9487d0eb2ba6ba7c9aa035104cd1e543a1335cc7cbddc902a8529c3c7851b5acf7c9f83e8cfeca588418fea0fe8488124

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91485d20a1db5ea90b8bebd933cb8252

    SHA1

    cbda2088b01c85187ebe447c7d9f3059ec45a21f

    SHA256

    f2aaf7717c3b734e8db3c5403ccd363f5a1fe1ee0de50405ffc5b5b22070a7d7

    SHA512

    02287789e9fe2917eb23311c1adf1ed3c274838fa78e0b436f4cffbf43f6999d974d9954ef10b0f1d7ff6dec333b14f7f3d7358119e7d2628d53408808814595

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb9a2ff9a205fbb785d4fc0ee19c01fc

    SHA1

    d6aee25adcdcb2f2cbd7dd648e8c912af718f8dd

    SHA256

    2deb6c885b03c105a2fa506f78f7b4cbdecbbcf6e09ca9d72a1ad0fdd2e16997

    SHA512

    e9ee69e55aaf71926726cca922f00c0282f883ebfc815f9b954e954a2439e3cf440455d720c551033706e0d3632a407a560ab57b16acc571abbeeed1115c1fa8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    761e2c8680103395f2af63f87eb49f76

    SHA1

    b5f852a6f2e9ae9413d8945a2be353d5c8b25dd4

    SHA256

    fd1a8a332bd6885be4711ff7226af0cedaa0b5f70565a3833853f979e59366f1

    SHA512

    1a5f43751ffabdee77acecc44cd4963a63d700d348418dbf74e65bfbdef7721459e9d1bfdca3ae47f24307dbbf8feb367a2531a7434fe5e96e8fc55bf934fdae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53b8e98c5ea0d1af2b2cd86932c6ac3f

    SHA1

    2baef73eb91677dbc3b941c801c63ea01f6df992

    SHA256

    5fd15efe9434763fa2154a95f708d24fe9cb639edf2193939c0909fcff4d10cc

    SHA512

    1c4384d0bc5f72eca82539cb41899a7db3022ca43b927d0c39cf9c34b0b3e27234e8640e69dc76dbd586de1e5be5f846fcd3fb60f8ca07cd188fdff740c7ee9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2aea49c2073b90e7adfb06b4956bc4f

    SHA1

    71ded00879d3ca6cd85328746762104b54cf0f36

    SHA256

    1a2251e7085d93ec6713d4aecde4a1baeefeef3b3c84730a9fb4cc788024fa75

    SHA512

    d127777620ed92623647dcbae312e3d5673046e8042a28a446b899687748cb8d5d7c6a1bcd0eecca1effa08d6dc2ac07e0d7f63d2575035347ac4e5ffa972a7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    188060194c359cf25ee80796271fed42

    SHA1

    0a1dc5549039fec1828e30173755a5ee37783d84

    SHA256

    9d51e7b40bc3095d35d10da4f717d48bd2c53eb555ba78040a1e7b95b1698034

    SHA512

    c7507bb79b8a5a798616b1b30771c51616100b74ea6d09083d6201678e8903e44812ae3fe187ca13f2e33227c89a907d6795b25f0fb8be2f79e25fd1b820d694

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9025a277e2340d91e713396153623bb1

    SHA1

    68c1f9f6fac03525e8737b4df9c93b7c63657cad

    SHA256

    217244a624a54ed04ed58a88b3c2df31d49841c935d923dd228c647c4cab8348

    SHA512

    a62442d1f11fe15c99649f4d2a8cf3a1c9803e6cbed20f9585d7b82c443253aae8a8b09c81d7f7e11b10fe5c159258182f167e3ab25a1a2d1b56594e19246d95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99ef1aecbded113ca1dc3ea1c6d6e92a

    SHA1

    a6a38e1f62b8f992dcee96a693bc2038deb1ff04

    SHA256

    a9d972d15ab3a0d8adf6f2157810530919b30bb0a4a01ec341de0b33994d1d3b

    SHA512

    606527c3f316d5724fe6626ce19dd0c93ef79b628c07932329579dcd16ea9c305b775317243d7ceb230ce46f07fe3a5b8c7f0b6f3b0047cfe8f31363e9f45eab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    a3d099db7ef54e472a66846a27770239

    SHA1

    bf95354ba80478d961b6ad0242493de7a0c6e216

    SHA256

    ebabfa6420aa528166e2829afff014ac7c6194b23c2cd340854569f066aa0028

    SHA512

    a4f2eed7e434d64db92d7769ed7ec8054758e973c9e91c6c9bbd3563afd88663c9c3341bfbb1622e33119b501558928fd84dcfe378313b993a21191b16887a44

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OORQXHVT\adframe[4].php

    Filesize

    4KB

    MD5

    0c4d7efe0875b1f19bf04ef303dc7f7f

    SHA1

    20c07c251d2664a7be57468918903c8126165869

    SHA256

    71cc662ec467541aeac4c1d8657567bd996e28adec3fd9df042c4a941926989c

    SHA512

    2890c95e00e348a832c5a11171e4859f8c9ba6f4f3f886c337291cd4f41db70014e1aa27b65b0fcb717937c69726dc5f7043b817b48586b34511293182b55f9b

  • C:\Users\Admin\AppData\Local\Temp\Cab322A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar32FB.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a