Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    24/05/2024, 04:17

General

  • Target

    6d4f9f74decbb798ba10bd141adac218_JaffaCakes118.html

  • Size

    102KB

  • MD5

    6d4f9f74decbb798ba10bd141adac218

  • SHA1

    30116fe2809072971082643b99e1b7f431b702db

  • SHA256

    e98c7021c67005772803773ff7866fa83f7b26826a0cdb05b42d30c3ac6ba7b7

  • SHA512

    87e93793d0ed42d0db4ac57d15970ddee8e9690dd4a85b21a28c0aaf41aae5292997e254d0aa6fb95763deb82510ac12bf8f7955f72d87a6cd68e799f40cdede

  • SSDEEP

    1536:jEVvG4F6iBY+ck7ZJDLTmBN1zXPcviWbQnu/0kppjdrAGcxitod3p:jg6boYZ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 42 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6d4f9f74decbb798ba10bd141adac218_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2268
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2268 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2892

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    ff61cdf84f477b0d7e691269391ec9c1

    SHA1

    6c0c5d42d192deef677924f53e8110962637b824

    SHA256

    52a73c43fb8f1e23f169b971886e009f1f9faf4de3041b9be7a5a123e4ad7e4f

    SHA512

    d6ff342ee04fd13e50f1f4cf2c74e7e4470c4f5c0dc50f13e321b159ea3266c3297c85f2035c967d769d43753577093904bacdb8fc0f51b94f3ce411682143a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    546e186c8faa288794899fbd2f220600

    SHA1

    982e7f783c0ede5c1c18ff590addacff5389239b

    SHA256

    5f1920a19354f52a7f85564af5a63071164a5cb82d7f99d66fa47eda8d42df80

    SHA512

    ed1db6708c747862b75c532b13289567e6c19f21f68dc930c1ee73295df34925b8bef1d6b3964468ac527a4df67bef3a5fdf132e7e14a9143c91fc040159d56f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7f6c8588d6a80c98637d9618da091d8

    SHA1

    1d285ea135a70ab6b542f48a41caf68933e1c09c

    SHA256

    a26afc139beb5880242901550bcefb19ea4445dffa8c8cdfae53e35d844bbc1c

    SHA512

    6d6dfcd7cf930cb6bdf9085aa4994542447e4f747636ee8c42b1b7a8ddc165e86307afa94feb26345f2c52c922c48aa2bf992682e2307a6fa893057ae8659b51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5fa22da936f70a888258747a2278073a

    SHA1

    49be4a489be51773231be835b7c55f2cdc75c7eb

    SHA256

    4fda30b4f31752329e1873e460bec19232b126c0732305324c5b593c36df341d

    SHA512

    6fc1d9595d7d54a58e495c222c8a96a0970ac5bf555118b6a97a2be9fcb811481e2c0d053f9829a8c49fb9092009335c0e3649375d68a31e81629d349cd31e3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e19d52a999b5fb66ef063304dad44ce

    SHA1

    d645c93520ca4b425c1d426d7579238d9b1d73e6

    SHA256

    f0b2f8a486e967d4fbde7b32fd09c66dc84b0bd2b12d6eb7811c8c77ccbffcf0

    SHA512

    499b184befabf3263ec6e6d6fd8d18e54fc6fe47d4d1071f97cc41961499f1303d5b82b780356d75cef1b5df4db785a5dfe2a2592eccfe366ec6161160cf1b0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    733efd3f023cf681521a6e2aeeefbcbb

    SHA1

    708cf8bc043df08858500b7e80f82a5e2acef256

    SHA256

    0d8df43f947335118c07703351c0118234f9592d5f347cca0b2e999c250bcd0f

    SHA512

    ae6a36296494df6eb0fb95dec97fea7385d0d19992d9938112884c048974fff07e1e6b462f6e82abe550460a3efcb7ea669e141869046114965d11d9bfe85c5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    785c8aefed29e90821d0169081ab0123

    SHA1

    182369df6f181c8c01bc79c80fe498fff1d39a48

    SHA256

    b393f6b7c20d1d2d594f3f0741745920750f9e6b2dc92c4142675cb3e4486dba

    SHA512

    3f152f6de820c0f9da72b06693a21b42ec838642c88a851c45acdeb0fa4c4e994c2ed9ff5179eebd43e50c5ff21b01f67814bb26744eb59f75ef72fa09d0c2ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e97b891561a108f003948a77e2b3195a

    SHA1

    e57e991fe68f02c9eadd8d145de22805ff13d5e2

    SHA256

    8ad647fca2d7666fc749b5904795a010f9ccd8163b5b4851a0d7730208af99cf

    SHA512

    9f90473766ac6c2d92f2c271c8c5667451d562f1cc552030af850bd096c50affbca0bb010367af3c7b856e892e01f7bc9b039c5c24ea7fb09e0566ed38ddbae3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    485e686b257caca5ace0bba766290f56

    SHA1

    ec215e70b1b81f2d4c5ea6c10b57addd58ebacd3

    SHA256

    3ebf7ca5125dd45a1072d33e4e3832c1016908cf088948d577b706ad77e51bbd

    SHA512

    5693e1eeeccc2b34ba0518193ed405655dda4500c63559964a4772de6b38b349a26a714ffc2dd35794c01af91248863d4b1d02751df562d7d226bac7735b4e92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3de3ae5846695d28b05823f9ab42ac2

    SHA1

    5a12bd409a0a24f034723383eeb4dc0d62d1bdef

    SHA256

    3be8917cbc644fda3e09d222b93ac1490b1a8e8546b01ebdcc87c3fcac83f6c8

    SHA512

    86d08d4a0989638e330e901bf1c8be4e43545450c1ea23cef6c99bfa92d07a6b49ea1e083f7b32db35f8dc893aeb51abf4041e38eb21d1af57ea88b6006ed922

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e16127695c47bde856dd464a0df1c0c

    SHA1

    b9359191f6ffd2ef7c076f0f99a3b11107daccc8

    SHA256

    4748e0b28f337581a376ce5155c3eac40d981903537cbf8b92ac873c735ecf8b

    SHA512

    f1c42bac5fa5b4b62eb7df0c2a6e11f43b9aaf11de05c410069dd403f7e71b94e6edd498de53cf988bbdd4c3e8de2fbc0d9120ddd93ec1401503ef9a00c63d77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56f6a964a222a4b84b81407c75ea4bef

    SHA1

    e7dd16a81f2e24687c7892d30b8ce23ca5a327be

    SHA256

    3a6784c692ec50349b7f7a1e0ac8673d608262f3599124fa32521ed7c75fec8f

    SHA512

    784a0d6323f63316b0f0f5e2d93ad0c6d4b31c73a2dbb8b5de4ca444f381920d92b7ac5956996b182a3ed732252224352af6ce96e6c4fe1d5ff11d81bdf6e71b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb095222e3ee74b2fd076ac6ff8281cc

    SHA1

    cd6598cec6caeadb02a52ec9b45c257828e3002e

    SHA256

    b720e7cf562f3d87609dabd018dbefbdaebacd1bf97a3eecd4304bff7329cb15

    SHA512

    dc9534be4090f3e069a2f4e1a180dede598d5129443a0003976c60bd0a5b0854a0cd3c4ce77fcdd590489ed517a1c638a6284b81ca66f6dd6defaa96da72c5fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d211e9a0c3e56af52194995178dda4e5

    SHA1

    0b37b7b298ac093aadf7cbf016b83f8948675ecb

    SHA256

    bf67ebb27a87d5410b195070ebff575b26a8c93f5f6a8edb2092376426325375

    SHA512

    19b9b675a18bff5b967cb6f34959e1c2e0aa9c57b641fc647c3d65d399a416afba1604d0ae0a7a66e12fa6812da19ba27ee334b207242d5bce5944127513c6ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1813f44d902e0b72a5dd619efb1598d2

    SHA1

    a7b733c4154eedbe8d8bf908c87527b198865930

    SHA256

    2d6e720ccc08eaae5342f10b4ff784733f512ecac0aa137d273ef2c6a6b68b16

    SHA512

    f93b6a0f04a1bfe4471dd891ec72d2d5f64ca59cc25a238d6f586d57bdc85b7e41f44a5618e0b8e16d38c1456af7552899b0e42531c42549038bc0636b97990a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28150ded20530362e8a37be4672d7854

    SHA1

    059793063010646fe258d705a5abe26b8643251d

    SHA256

    9c17fc6c3dec7b9d720dd2825622f1de336da5ee86c1b07014ba32da542053c8

    SHA512

    251d47617d29631cb4c0845e9446c1473330920549f06f3a88550ca942e41d96f80b54828e65c3ac074b0bbc4d9fb0ef4cab73107390d7734bf456819e9ad3c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11aa524f314c3ab949116b046de43acb

    SHA1

    87b460a3754ff6ca7cc85ab7c2078eb10ad60f39

    SHA256

    0fdf022c5617cd8fba6457455d47125c4329d2c37c7574ac091e0cbcacce954a

    SHA512

    62facd3ef3cd32e953c4803d245f2877f98c0a3a0cdb6a2b31f7469d24d52897177c3c02088cceb02b8f3383574cc7fd1f8455b62c422bf10737e27caee312a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e55ab8161a4dd5037dc9dad642e9aa25

    SHA1

    c60279072645c8923e7c87f2bb6750c9c0b1f73d

    SHA256

    403c0daa1ba070a4c25e808bc7b0c61dc485d1343afbfe76ae612403ea168c0f

    SHA512

    eca8d26f6d37cf4962a8b194e57367ebe60eba24f79c5e2fa54c39da431c8f99c5cbf82816ba6cec03afcc585ae20f637f010d1baabb0f38d466a312f880f62a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab956e745fe942bf70d05498b4c293d1

    SHA1

    b53d534807ffff3d9c4eb6a1abd094463c95d263

    SHA256

    ddadc90361e324decf66e1f3d08be221c4658e46d8cae1ee550fd71032b22e62

    SHA512

    9196f020461dfa22348585675f6f3a06ed7442ed5e59986dcdb1229b5cb7214cb084571737323a1099a3400b86f3912f27e0b725c7c7f3add5d136f508b4eec6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e4e3877b17712166946dc1a9a7fc9bd

    SHA1

    3657add05eed4677792071480862e8dcdbdea0e8

    SHA256

    23d5f26d48f60275e04b5d11a4629ae06e116b4ef6f62f82849f75e2e4edfbe5

    SHA512

    8f673ed55eb9049c37dd92d598d2b65e1f7e186be6fa8de013b8a14529675dabbe4c2d89aa4af12b0e187b2e1195c92e3a4a1cbf2ac6e85c2a6407dc2d48f742

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23fe97018d61754e42c637d24b43418c

    SHA1

    4612d140bd82575fe4477c08a39479a6383501bb

    SHA256

    10116c8ee4d8dd3546344259b7445472030494828f01671d8921b2cfd7484dbf

    SHA512

    75507d21dd62767b47eedddcf93ecab771dee2b524f2d563bcec6a3c8e4c86010902aff9d50a67b30c7333121f84f7168ee71fe1731f90969b15a198c8167df8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    9893bf97237e410592a93111fe0cdee7

    SHA1

    8ee02f16531d51143be09672774e539eea6df67d

    SHA256

    5ac5e83c49d34911db87271f0b9c1ae1f449910cd70481c0f2dbc0ec42c9e925

    SHA512

    59276ee04cd8d52464a9b790eb0da5feb3dc5a171d0ba57197fe3804c5408abe16d9ad81716a1025449c14ba9a3b6641c28c2944cd22a60c072c3732fbc7ee9b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\673IEUYT\YPLdhhxz6pNLPIbGlaCwlugi3aZZCpgGfChjHoWpMyA[1].js

    Filesize

    53KB

    MD5

    5e25069f731a5ed22194da449d917120

    SHA1

    679b4c7b8a0a827be21a3d5dc7dc62d644d68841

    SHA256

    60f2dd861c73ea934b3c86c695a0b096e822dda6590a98067c28631e85a93320

    SHA512

    3792efebeca39335150464b36ab07868e0c6249be4be4de140ec699b2bf0b2299e14193301534ffa3597ea18f7191542be8408e783a99cb9acdff0a374546ced

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IFGNZ1XG\sodar2[1].js

    Filesize

    16KB

    MD5

    2cc87e9764aebcbbf36ff2061e6a2793

    SHA1

    b4f2ffdf4c695aa79f0e63651c18a88729c2407b

    SHA256

    61c32059a5e94075a7ecff678b33907966fc9cfa384daa01aa057f872da14dbb

    SHA512

    4ed31bf4f54eb0666539d6426c851503e15079601a2b7ec7410ebf0f3d1eec6a09f9d79f5cf40106249a710037a36de58105a72d8a909e0cfce872c736cb5e48

  • C:\Users\Admin\AppData\Local\Temp\Cab16DD.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar180C.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a