Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    147s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    24/05/2024, 21:53

General

  • Target

    6fe94b0f8ea433a888ffe5ee5cd852ab_JaffaCakes118.html

  • Size

    23KB

  • MD5

    6fe94b0f8ea433a888ffe5ee5cd852ab

  • SHA1

    0d13a7ebe2b86017c1771efeb468c348ef8e0933

  • SHA256

    f57eee39570f32b06db62f1dae96ae36de04a1d59523f969b9c9c61da1e62ed3

  • SHA512

    274c507b88829e1e573afb739e89ae1c2c212acd0c1377a0ba41ac02230ddd7e20a471445950ac132570455461be41709ffb8c07e54245684de2e5262e32fd46

  • SSDEEP

    384:LOjrneSWG75g8yBn61VPNIMmoWeUi+kiqpembdkeN7t1OINhytjPF3sJj3KLUe/e:LOjLeSR5gBnMEeUi+LqpembSeN/OINe0

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6fe94b0f8ea433a888ffe5ee5cd852ab_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2740
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2740 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of SetWindowsHookEx
      PID:2068

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\265C0DEB29181DD1891051371C5F863A_242CEA72AD255CEF17D8B88AD3038326

    Filesize

    402B

    MD5

    a98e21898a3d48dfe419445ca1d9c899

    SHA1

    0caf11d069d40a0cbc0935b8fd7eeee03d2f8b36

    SHA256

    8f0606c5858764859027a5cf14b763c667991c2ffae20e5706754ed4c866aa7d

    SHA512

    95223abef3cbbb92328344c47cb94ab3f23abb580ec4f41c03d88e73651a3c87b34ed2ad704fc8b40359cee800c9173b2ff107eb328a36b187f6c0b893976604

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e70dccccc1d2c2b578ab2b7a8fc01de

    SHA1

    c45c033241b6aa9bd7df809e7b97316bd8937eed

    SHA256

    82ef187ab786fbfb74f28934e3abde8e1b7fe96357f4eb5c3f013dc4fe38e86e

    SHA512

    f987928b84bf8a47725dee5af6992dc1474fad351efedb2e3a395be40b853ced39dfd528af8d3eb49cd7cf739aae849da61eba9f321c1b5aeb1fb9596cb9756d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2f2c69e12381539beb26399c79b34f5

    SHA1

    ce3564e12e91556cfcf00e98483f07af74805123

    SHA256

    784fe313d92845d25ab5aaea224036e92279834ac9d581519bdcfbf461ca60fb

    SHA512

    699e616b6cbe3a294afbd8d6390ef6ec4bed7dcf80784570f794ac35e544b6113a331411e22328f815e67cf43b267d5f5a21ffa0e4a5bb4dec84cc09b04c4860

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2cede2bae8c47567f69ad3ce32c6c437

    SHA1

    c82c1cd43761d1d945ffd8931771d0722d7a39dd

    SHA256

    488828eb0e91d50977fbf24cf6c0c26c7da3ed8c5d847878c5483daf33102d53

    SHA512

    26a0e51e0ee2aaf87e4c3aff86ff723facc5c7b0131ba43e3e84386f9d0f070bb2d195113c6732603ed2ebf5375997c0759e9793e82f1545eb6b477886580637

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1dd755ae1b3c20be4188e4f92c6b9687

    SHA1

    780bd05e6066cc05122a2d5f552e340b1ef2c6d3

    SHA256

    637ccb55189251146d0412a4e40a74620af3a0ede2063d669b34103803c7ff45

    SHA512

    3a5ca964df9f13366275c6f5ff63330ac2b05fd0a0916add1f201e48891bb692aad282fbd32682b58ef736af7f8a0c3444ab9604a6421d39db8731854b2219eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1322e32332f52dc37568fe7d9e19d04e

    SHA1

    9fef7ee721fc06bc49a6662d16874417dc6f12c7

    SHA256

    220adc32b58d9bfb8702ba71f08d1a733db27371023e7078ff505bb4679cdc6c

    SHA512

    8da34df894f18ae0a1e4dc20c84345ef4fc4b09ad39523c53a096196a1cf0e622a937940140187b1c52e87513a87be572b370a34fd8513c1b9e30479d7e34555

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    510d495c4b91f334eb956159edbb7c4e

    SHA1

    86a88fd198666483ddb4839b3c982c01ad7778bf

    SHA256

    66901b0e80c76415546151894f2233114a9b9c81cc1043fc888be2e1c24e1dc8

    SHA512

    cc8aa740e4a3df6150dc02ae18a8465f707488d8747dd8d3488def2ef0921fd4152909e5884b2678f9db0bf8291e4f9b62404aa6d3a9b358c4bbcf8f16703f77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a4fbdf025a209a5fc102c97d4422fcf

    SHA1

    e6a1f9a28cab51caf96479fa187af64d8fd7dfb3

    SHA256

    5050fd93d4a99d65facbccb6d1ea3d2141e1850f62c2b860f2d4e03ecb48174c

    SHA512

    f74991354d6310b58585c891a1d126af078842b9c202f1049ee3c0655da6c617ccb048a4895406ccb5c3f8fb167ccb224267ebffeb864ef9ef6ab76eb7f17eac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f19a6426fa5e0a9a099f61c175be51ee

    SHA1

    dd3221da82b0a9f97ffcda122e2c20024cf6febc

    SHA256

    b0d02d4b74b4d684c2c616b5e0709f6da5c1e6a5325ca2c3061920460219d295

    SHA512

    29f499f120abedb816f2e35ee93b9b26d664a9049e10b9a97ab210aadd9bf80707a25de3f0df6504970e07ae7a9865d2af3fde120700d1516a657d66c07ae87b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db52444a5b615d1fcb1f6ac65a88a1cc

    SHA1

    b42fc0b1721baff39d7d0d8d04e667d2ec7892ff

    SHA256

    dc5ad5706edba1a31ae5b40ecdc352f2baffdd7e511b8a2645466b63cc925846

    SHA512

    a48d78d33c46b96e3f865cc43739f3183f4eb22971d9706c196069302e821c9f1dd0d7aa60647d0fe7d2072c66dcd4f351f4dbe93fc19d575675d88af34d93c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6482bd80964e0caa52676442fec7883b

    SHA1

    29e94627b34c22593d13d031129b173f63ce920f

    SHA256

    f6835addf7a40d40d553cf5f3f4d44f39dfa87716d5cf95a65e7bc4f95467909

    SHA512

    bc02e7aceb20a267635a2101d4d10b9bbc54732c67f8cffc8aa8d8935cd36608b08ec10303169aab0a077d61ee6eb03bfb9a5fc6e6b8d1813bbcb4435f27a0a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5867b7f80931d0412518e7ce3a46619

    SHA1

    8f5a01d05bf2692ae23d00ce8b6402892958b5a1

    SHA256

    3ebaa7776c3be5b6b548b60371cb5b1bfcdd4ec68c32396f461c7fec97c3e3b3

    SHA512

    9060445856563e904a774ba47bf494296ab9b96ec5195097226faaa7cb8af3f4a22db367fccc273ca0b6fd83056292739349f1964fdce8f288202b8b0c5b35b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9413725d4bde72e0ddbe86b4d42c94ff

    SHA1

    cafc094da7d1a6ebe587a5e7bead41015d05409b

    SHA256

    810cba12437105fbd6aa6637c049f36a97802184696812049d015ad74fa4b895

    SHA512

    bdfbed11680fa363e8fa83791da9d6a6428f9dcc7735d5b27164646a019047c6e4f1b441eb7a4d7dd3e0c419be0f92345b3f11a6aa886aa1d6cadf49c817cd50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c67d8a2db942668e0df31d7e9571381e

    SHA1

    e9d2c6082432963626253643e35b017d33c052cc

    SHA256

    5f44deb732f8aca5fa358344c82b8d1e3bea6e2ff9d42373e19124095d4d452b

    SHA512

    a37e15fc1d3bd80fafdc5929983e27bb71e77d987b85fe518a06df5505e037d700f31fa4bd35226eadb40da46d98f2d3ea228a073bc071aa1d54c8a68cda364e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9118ff818c152baacee8e66540d64160

    SHA1

    bd3d03498dafca9e150f2a660104f344a162c37c

    SHA256

    474b7ff0b48824808676fd60a08d4247f8710657fa40e2a32a8f7f2db182de1a

    SHA512

    c051bc14ce70f40a098cd83cd526860fa05574d4cd74324a2346ce4ec8a4dd9fca0f41370394a6f49e6520fa22afce753c146dfec26c3a72e2904f274681936a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a075b96884b0202dc82e3e3eefa88f4

    SHA1

    dce07e1453b7debce642854d4d9caa9c90ce26f1

    SHA256

    1afdb0d408b7f51019783daf0f6d6771c92c25ac11da96060867921bc64ae557

    SHA512

    200d2a020e3e217e719ce7781e45f2f384ce41e59e3c4cfe4f9cbc69fdc1a3d349cb681d97b5d04b87b0b4ffcbb5ffd94efbf456556be0fb65f9b0a3036c7aac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c05d7df97df3e6e468d4e586b6d2c835

    SHA1

    11a4183166eba98d97d77c71c6be1887066970ea

    SHA256

    3c1891152fd53a22942e60591de7d8874be17447bce5fbfe9621bf78a03b35f3

    SHA512

    d3063a6e6fdb16aa684c92cc429051c2b20065ee4b2c7800773d458d025e46d8bc33a9f3d7cfb8dbcc87da1d4ab525714612441421e82f2c7407b1b80d3c0bcf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6e733c5ed0db5eacf06c5f7963f6368

    SHA1

    174baf315ceac57da7fa5199b8b0ffc2a24a6e81

    SHA256

    9f1d9d0294c26e0e69282046563f387586fd8fb88f0638d331d3c43bba432907

    SHA512

    5efd85fb25915ef093c662c9a00f0466db80f82cd4cd485cba4f42f36ceb5312db5e3735fff88045585205af9ec4f4cb972ccf198c078cc60506008f48a4100d

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ILRL617S\www.youtube-nocookie[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\IOLI4N6A\www.youtube[1].xml

    Filesize

    229B

    MD5

    bf426c0107ca3ba203b862ce599074ea

    SHA1

    9be1a4d29be0f039ac41973ca07036716b04d656

    SHA256

    6884eac2f98c872c480d5839305bb32ef903b8f376d0502a0194a9aed900ed44

    SHA512

    28b30fcd9c434beb44bfaf34e42b41296b5dddc2a52eb7b4e591e34ac6d2a77ce85302ae9981f139d43fc1da8d2d0669530a717f44a59426d499a1cfbeca7d02

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\IOLI4N6A\www.youtube[1].xml

    Filesize

    641B

    MD5

    1a5ee7a0350e9f8bda5f387c5fb53d2e

    SHA1

    a1b9749754efcaca4ace1749e56bd47935fd83c4

    SHA256

    43843158ecc057855acbd50bceccb4e4f1e221954c8a30f547a74ae9e41621dd

    SHA512

    f0d1fb3f2391bf7b9581697081445aa0b2d196036598c7ca5c884dec3bda06c86c3cb051dfcd123fc1e18b1c00c7043a3746ad405923fda942eb34407f232005

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\IOLI4N6A\www.youtube[1].xml

    Filesize

    5KB

    MD5

    55b1c323e89e23013e1619f4b8decd15

    SHA1

    1fa7c9e07158e1a2212a8b3b48cae9061bbd30b4

    SHA256

    6824dc7e849ff5cc252ca113bcf1c148e3dd06e60cd44e0bd671c51b97a084af

    SHA512

    054528b9940adc41505a932c07ca49fd1e600408d075e38baa1c7657c7d9d6a7f0f4411ad516b12416125386608db6511c6845f84d683d3808c4867788fd8c2d

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\IOLI4N6A\www.youtube[1].xml

    Filesize

    990B

    MD5

    f17be25d4f000d83a2c129ccc6d9d042

    SHA1

    7309c93cc7d1eb3ed720d3ecf9f9acbef331b9e4

    SHA256

    db75cf01c018a9b2708eb8cf1ea6326e0e748e3017b73f87c9a696dc840287fd

    SHA512

    d33c8912e78b9961386120bb00f00a86ad25a888ffad7f4859079ca88fb8690d371cfa64ddbe3339fcc287bdb60679287c50186227a7f18355339f4c5306ffa2

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\IOLI4N6A\www.youtube[1].xml

    Filesize

    990B

    MD5

    adc69e3db4652dc94e545746808e936b

    SHA1

    93079a91621c2d2d0182042586d11d2ec989654c

    SHA256

    c6f2779d7df6f01a3fc3c17c9625a70aefb60d78241d684799d15fe78a4e498a

    SHA512

    08710e7e49bd1d5fa6149ceb3c574123148c1ef589fa4e9a8fb83696e088b4fb6693485ff55fe2ce6e8035409c0b2a950a73d35b3b1f47db190ee6aa1b56e7d7

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\IOLI4N6A\www.youtube[1].xml

    Filesize

    990B

    MD5

    79eb3af2a99313e8197351093c6c2411

    SHA1

    eb998a05d3cbc61fcf8a09a1ff206d114bf77cbd

    SHA256

    8a757485565dd15c0c327fb0bdc1375e3e09f60f7ece1d38b144eb9cac403abb

    SHA512

    e153000aa3cf7b706ebbf2357214634b2047db5995fa5fb47b415aba44b44feb34385e2a6200de97670c8377902a0d5bdb993fb6ac01ac72d2d694196d8ccbe5

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\IOLI4N6A\www.youtube[1].xml

    Filesize

    990B

    MD5

    399d5f213e259d56e6fe830013f92bbe

    SHA1

    40834df1d1edba249e722c8105d555bf74e83450

    SHA256

    ad6ddd8e378f3cbb374000c30de92d0a779a064b85b29d706be94f3044f31720

    SHA512

    12a9a39e4dd033d9adb4fcaf7aaf682245e72cc5ce6da3973e9fc4b15a4cf5dc99d361b4cb4c2a241d7262b1f5419e87305e69176c4609d3e2e65319eb6e1315

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MNCIS1YI\base[1].js

    Filesize

    2.5MB

    MD5

    6f02fb321c4804015e080cd9e3ef13b6

    SHA1

    0e3b98974df8255bd7904490b3177be9af41711a

    SHA256

    55bdcc08e0f7a8a867f69510171986d77b777ecbde13249d2e483114b6b015df

    SHA512

    57ed6d3a53b6f88fb487fee7718d3b0154c8b629ac99ad956aac22ba7f91636c183087557c647fdcae3673bd8e21b99649fe1d1a1e9766418590f765acf9c66d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MNCIS1YI\www-embed-player[1].js

    Filesize

    323KB

    MD5

    01ffe52cedfac91db631afb50ec0406d

    SHA1

    6c46d6f85c315d1b5a0f7207ffc9c11f51e91509

    SHA256

    5e7aa90ed8daf375a49334177305eaa26fd800a2a580efe1da3388ad51b094d7

    SHA512

    0f3b013d65a6bf7acbc350c0a664fbc4549d388599a9442a6a7e0efc5bbd33da5dadd8f4d0c63b0ca10c0ef891265a2921e370563ce92acc1d0b977423b67af4

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MNCIS1YI\www-player[2].css

    Filesize

    367KB

    MD5

    734b31725e29c82861a2c08184fc7055

    SHA1

    5ae2d674dd076c2025ead424f423b53bc5f46e6c

    SHA256

    2958e30eda7143b853db1d5e3a9e606f83d3bf40a162148fbca5a1b61d184223

    SHA512

    952fc63062d9e622bf71a8d2d83a63550cef69750e4d25a2659740883486c788aabbc4cb5a73a599f4f8031a8c514ff5f1109701803b35d777414f92d9210f95

  • C:\Users\Admin\AppData\Local\Temp\Cab104A.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar104B.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a