Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    137s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    24/05/2024, 02:41

General

  • Target

    6d1593888661b57b467b7b5ca4b1d79f_JaffaCakes118.html

  • Size

    70KB

  • MD5

    6d1593888661b57b467b7b5ca4b1d79f

  • SHA1

    b6180bb698df97700f3de8ecbd1953097641c797

  • SHA256

    9182c9ce82e2d2980639ecec4860e2106dd5fb7807a5bcf6bd6ae3a6c72de6f6

  • SHA512

    2264d1ded794d46f0b47869d331b6029821b5b9afdcaf832c7c60dfbbcf75fe4620c65f305b4eef43dfa604ecc0d05a8475c43a6032c66751452fa7c3cfaa430

  • SSDEEP

    768:JiWgcMWR3sI2PDDnd0g6ZdlNBkoT2e1wCZkoTyMdtbBnfBgN8/lboiGhcRfQFVGQ:J+M5TTNen0tbrga90hc+NnhVJ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6d1593888661b57b467b7b5ca4b1d79f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2004
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2004 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2944

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6f026e3cdef805d7f22919c8657ea5a

    SHA1

    dcfb35d4b3c3e39a58c49f06fa3cb90a9d662ed4

    SHA256

    de54164610e7e9a8f74fbcc3300557d1a10cc628439a75548c4780c1a824fe74

    SHA512

    00aef99ac43d53b9ec1c0156d49683985bde1dd4db8748f65d150c260bf4374f5d58ae1c43e4e2208a067f3542dec16620c768f55f9b26be0d7dacf3d72072d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a4eefaf4695c1385534ada131deab0c

    SHA1

    083b9da5481d404d85b93675b642101d0915fdb8

    SHA256

    f31b432650676f77414e7fa91b0607f96484b1a127e614d93f52e40146410cad

    SHA512

    87afa5049a8ad1dd119177bff7b887cbd1247b72b8b6798f29bf9255800ef92a21e93b5670f20e653906450350a2c023b1fc587704c11ab06d843c9f2e8df547

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6a93ad6d3a86771ecca5327f1755bb1

    SHA1

    aff3b726ef44f0fcb6a35f0ac59c3e45ddb33d3a

    SHA256

    b2a6f6e70cb8ef52a61a059777208e676d6034f8bd05f72c0d006eb15c025ba0

    SHA512

    d3fb8d8c2fc75ac20335807376fcc42f12cb20b517e596417c81a470ea50ce03904b0155d3e3d6cdc80c30aac41f833a0f18478b44a413d1bd19e0dcfa81aec9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62dce465b1760325a67df766f158322f

    SHA1

    5888da2bb83f3eeed87072e37b9dfa0fff45a941

    SHA256

    816933969313f11a66a9680ea082f56fe1d890580d860e09870bc46de8c5b824

    SHA512

    6370ed902b7fbdfcf6a0b05efb84feab2171a2afcfa13673c8e59a73467ceb020dd98c3fa26a589cc4a052a90b82cac3225118aa14b014b77d217b7488d3e36d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    485877aa872122edce06ac2e93d730f6

    SHA1

    1826b0e53aa6b8f32dac95e31ef1f01390e96eb9

    SHA256

    9a46b666d11471eeaba5896368bdd04374f80676f0999bd89ef700f71a1dbca9

    SHA512

    030ad3af9c0054592c7b199b034e66b1079cfca66615ccef38aaede98d5eabdb6d9d9eddee9eee716a472b83e0b8e02a3fc227e6252174087df8534809f4c654

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42606688a53c1efa9b5866ded948f456

    SHA1

    34371ac0bf36b5ff4640ef52e83cc37f52536f08

    SHA256

    e598c14f76bee39794881097b2d4c10f2f25f641142147239d3c7be0db9c494a

    SHA512

    56583acedb076f0ee5766e1fcc67a3bc1f3a4ef572490a18c8eb2e1606e99003e7dab87b53b2cac4dc470f42094f77d569798cf633cb3d9877802f635b42b40d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8dc4e46d9518005ec3fdae484ea854a

    SHA1

    0cf3a519afc5ba586220f29c6cf1fb3f621f15a7

    SHA256

    3310f97d517816f91e0c742595836cdc01d11a3a92943754746cf161adeedd4e

    SHA512

    acf3e34abad2f2e7b7bdae5ba1cbb38fd93752b179b7bf886c48470881ca8cb519d45575f6876f608aaecb4dcc630e697ec4a865316508504560d143b231166a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96bfa69e582213812383dc780e94f5bf

    SHA1

    a3d1c2cf4394ba20a48f77fc736eabaf9210497e

    SHA256

    634ffa1c8287096d6f8dc43eacbe3400cf5eb8b004e3ee332658be79c68bd8aa

    SHA512

    c066029b5095afa9328237a66ff375a6dc9dcb417374ecf34a4df2f5257d4a33f9453e738255a3fc4c6197320f1a3835724b55a980719da8e92d85726760055d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6279404aa5018bb2548dd1f7846fa9e4

    SHA1

    935d83a5a98776c82b86b8dcbc192625b1b75e63

    SHA256

    62250318b64398242fad781be5a924bf5d803b504a9c1cb05c0d7b7a54ef7142

    SHA512

    7a2f7e0eb3242fb0366d54452d72a85d49e95516a25dade213e62d54b315d90352bd9fb26753d58307819fbf64234a22418126f5fe63b58c88d8a72e189e9cd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21da342b2a04006069ad458a3d1e24cc

    SHA1

    bd252d56b6a8c4499c8bed7a2da3bf2f516536cf

    SHA256

    f410823e249ac6c9271843c6c0d570d229e40ed466e77d640e3aacfd54c9a4df

    SHA512

    54f7a40d141c43b10f5ab615eaf9907636ff94bd9e1770148678cf3158ebeeab0aefea28a66fec82baf2da1518e3de979d734099a6f34a2ff766a41a59eac8fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ab47b695ff4cd156efb2f8b59af07a1

    SHA1

    b55eee5ffc8aeda12954559c35e0d6c490e9d89b

    SHA256

    fa7e13a5ffbd0c97f34f2dff5727556da2a9693c389ccad5813c3e2cb4f19d27

    SHA512

    bafc5cd514a54d3e100a1afec4b224fb188395148ea625e31d832a8b9df3a93d59eca5f54e85a2dca2ec24e68027ee19ba7f4e96a57b0f5a981ba127538d96a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb9e8bdfd51733898944123cd6cdb035

    SHA1

    5e8221d9afe83e219040dab5c995249c1b08a7c2

    SHA256

    171c9b8f0fd50a7cea3aa6ad34b8619f8b1a29bfa6f0569073ecde331edaf567

    SHA512

    b213cee2e342751e362a07e8a2d2ad0d1d8b5ad79ba5832d6060929d8e38c75abc746fb2abf00992a4ae686b8ccf76f4821a7959349036f1140699591c8e7d74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ddf81f6db18c16fb1115e2551bb366f2

    SHA1

    0fa6d49c63fe122436ef42f1e3e066e5832127d5

    SHA256

    3376f145302abaf2e862a4234353448e4dd2af382267671391450c0efaf19add

    SHA512

    29e7768647dbfcbedff387ed15848f1940aa88996ced75642ca4c4e6a287b5a13cdc51ac0218837c39689e5731e90e851c56c2f712cf0db61e76648cea5da7ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3c9b012483ef3f538a66301c2cf9554

    SHA1

    8ba6a52b0d840664f17e9e1af770ad5a724c964b

    SHA256

    b714b52c7b2704c87daab3c43e1bc968c91daa1a7f78217b36660f50013fa7aa

    SHA512

    f107181da1053d959dadbdd1c4284907172066e9e32a4d94544d993c460636a056523f3a959488c0c87912bc2af0cb238837570e2b5cb2b0587b02ad77694219

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aafe087354bed354f8f7a62c04f5fda5

    SHA1

    b49b1aa7e5cd9470086b476fcefeba199644dea0

    SHA256

    225dbb7bf3c93e8eb0b13d720eb6644e37b66fd653274ef8b1070dd6c1022b43

    SHA512

    9e0b43c871b19b6d79b2fa1c37b1c3c357a58508298b5ca94459c4ae0e61766955b646197d51532ad4f0dd38bf8936f9494a84fa1a7a830cbd7e98e8c523944a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f2a43f08ed7554500710fec8c753e31

    SHA1

    603ad829a3a011f3a689ecb9379d7b206745a903

    SHA256

    4cbdfa9d81155232424e37e1b23a5b2495644de8cf2683f280eb9d9be1cfdb10

    SHA512

    6b58416f6f9d4caee28249cda535b024274ee229c9fe35cd58fc1aa65c20f77cf4ae92cf8bdf4825a245574ff78a8e8e0ec32633be7825f6f3c9838b880faedd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e46fea1fa2c17d6e4a662c801fe448cb

    SHA1

    e2c6d331140d71f584b366155c9c6b2c20194e13

    SHA256

    6834c58ac9bd04f1d116c0f006890f1f5808efbb9eaaf7c4dd634e959d46c4bd

    SHA512

    c2495f10a9e4b8d49031a3fdfa2336131fcee50b3df0eaf9f76d1917f070f6843ef90d859a186ac72550478cc5d8e32efd891fa6f6c97e0bc998c3b233e1cbe8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8de4d20b555dcce7cf34f8e70795792c

    SHA1

    1ed1670a7975223d9e7a9765a219f8dbffb119a5

    SHA256

    f0d1b540924c4789b381e4f35db196d5797dc149feb4af4fdfef970f8e6d886a

    SHA512

    1e61677c7a3c2d4da99bc001aa22ce57e7ef32761dee9344baf8fc81fc882bb2bc0dd6ab7d5c8422c8bdf10b62234d489e09578a8b2eadec6d77f4063da13413

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4cc7b0534c0e60e59627e265a89ba09

    SHA1

    6087380664dde092b08f0f3c7c2e900ffe0f2465

    SHA256

    aeea739c6335547128c70316a6818859ba8ab38ac7256a60993aae9db9c6d9f5

    SHA512

    cd1bf169dd3046cf4ee5fcc571886e3efd3caf345d30dadd670029435cb565598dea5ba55289604ce64de32114388024cbe4f0276e88b21701ab95c106cbd4df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d2fd120d7a272ac51dc3dbc55d21a748

    SHA1

    453585f11695264430e87f1ea94512846766fe7d

    SHA256

    27736cd126cef7623c0f3298f87b88ae970d292d96975984a79026bbd36ccbc7

    SHA512

    bff1a804cccb7e93b01da34d853fa4c747835cb55d22f0bc62c341f9b208feae47539562cd11927de56edb03bea2a5cc43be402b562b22285af7a9d83273c7d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29f82c3ce496f810a5da923afdc8045d

    SHA1

    2d1a167a816da0b588fa169dc03b32e09e426e34

    SHA256

    eb2aaf60ab96232997bfaaefe7bdca157375aa8ab7aa7f0ef6d21c7d5f2748a7

    SHA512

    092b71af242e404362007b0ee3e96ba2abacdfef2afdded707af355a3e6c1e7fd9a49dabb80aa4c65a7275a905bca0d49c1655a47551e86debbabfd0950bf0fb

  • C:\Users\Admin\AppData\Local\Temp\Cab1FB4.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar20A6.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a