Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    24/05/2024, 08:25

General

  • Target

    6de0e7e2d36348dc54cf74b686f0f045_JaffaCakes118.html

  • Size

    42KB

  • MD5

    6de0e7e2d36348dc54cf74b686f0f045

  • SHA1

    fc43b72e507057c4a4c2bc4e4a256626f9dcc74e

  • SHA256

    06befdeda9c44a6589a68298b9dafe3c9e753ddfef24410c2af97756249feee0

  • SHA512

    dd8923c063e0939bbb5f25ddd2415607b35cf2b3d3bfc6236ef46e6465c16013a8dd24c5d0139141da5ed3de8e6280f39688d0a7427058286930734ff97f09a3

  • SSDEEP

    768:5xMNwWVuN5xgolJeYihGH3Cd686tNY1fhjZhKeJylo4N+ihGH3Cd686tNY1fh54E:5dWVuN5xxe/KEONfNsbq

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6de0e7e2d36348dc54cf74b686f0f045_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2044
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2044 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2800

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0eefc584783ba12e211714b4aaffb905

    SHA1

    3e41a34791c405c5d7b932e754d0a3ada39b2cbe

    SHA256

    80a359d0d05516b10beefaa00b5ece11133129dc4ff83139f6e8f5771f8cc054

    SHA512

    e94f21c1cf595a29a9fc6151c5c0f6522ee28961c3007f5f4064088656aed7b3a8747f7919bc64057ae998b45f74188bbb7a07b7bb920cd40af3ab48c3a969b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    218c5e1c560dae903eceaa5a0fdbda38

    SHA1

    de3fd185e0582c32d13e6ab78dfd15ddfdfc669d

    SHA256

    b2034b465d0ea2e5227907d32ec12737cb78412a61a975b7180f0d9426eb11a6

    SHA512

    057819e87af60075a7f592c6e287914065fc3973ee43b63cc46dd5533d20d7f74a09fe0339f83e348b6450f1d52c20714085beef139d0d329fef5418f16f3f7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a7eaaec0d0727b4d879bb4b044b97df

    SHA1

    44cfa9107b1ad1439ea6604b2f2c8baf1a5417b3

    SHA256

    04cab57106c1e0bf33abffcef662a103f4c48d1b865797ea462b14d21112b1ff

    SHA512

    219be206b69cddbc8f2d80dd1602e7a5de6c952b3fa0666d2fe9f5e5a7ef7c7417c38c9d2b63be21b8f9bc0597b57998b6c20bbb9d1fabc2dcf24c172b52a7b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5b6e5ca612c521c31971d728708cc83

    SHA1

    196531dbfb176f232fbb2dc351803ca006979b15

    SHA256

    411b90080d81d60b9cbe94266ad1e9d248f0ee63b317ac687138eceed68ef652

    SHA512

    8ea5d6e6ceb4026e45164196acfa6176835b0e9c6f4b47138597b0eb7234056eadf8f2c0a57b02286d86d5179a3ad7096d6507314f769b8666f8f26382cf6389

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    87fe2a8f8e1876ea73f4f7072c284dc8

    SHA1

    5ab10d3ed920fa1607f4f279d3e0058071ba7357

    SHA256

    05aceb1aa83b41b6dcb13a4f32c97b0e396c6a6a804690b42f368c3e9a0d205b

    SHA512

    0153ae48388082ca5119679f9f0bc6a433ad136397c64c10f56928dfa2d099b0dfc02b0edf74636d0e2e748d7aa3de81e14e10f731beafa32f1cf96b770fb508

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd20fa51cbd21545b747ddc85b56bb94

    SHA1

    b79eda293fff097cf3b26413cc4e696882ec682e

    SHA256

    12da952df1fbe6dacfcea024fe6137343b695105c78853178c4355a9fd3b2cdf

    SHA512

    3de5bb5732e1b504b5408f319273f14566270c50d528bc509bd089f2c3ca49bd52177ab354c28dc4671843b6d8f46abe6ce75db3e7f5ec8656e99c767be61e4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92331c3438becb14938380504f366146

    SHA1

    73cb564b8300cc046e2dfcc12a5d44658097bbb2

    SHA256

    84950e95ed6802ec99b0bc572537b2af28aeba7cb303145e1274bfe67ef34f8f

    SHA512

    0f632c8bf8769c7703a74f7be02694c0b6686c572873610b1c1b0c6289557ed30d5b55f74e52d96df514adddd6afaeb7933651f7748e386090fbacb8d8f7c1f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8c0a082b35b579062a58c86ef37dfb4

    SHA1

    bc9ac06d07eb4ed113f25f57ae88e78387f8dcf4

    SHA256

    fb571064bfba4a1bcc5336a156c1d4fbb90e369f2616236a88d4c3ad2c1e39ab

    SHA512

    f79a04f696b484cd54ff75d2616017c0b770ec024d35050fcbde6df224dbe7485994b7432468064628b9c5034e356f61d4323f2569250607f0f13c41b5b1a9b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    647b64ee0c83c7eb27345e6c9d659ebc

    SHA1

    25c00d197445ada18e4bcef9defbcdc893f18cf5

    SHA256

    c9c99760527c9bc1cb1064096ea93b433a2befb1bccef07712a1692e8ac2bf4d

    SHA512

    17307429926e146b51452a83de4d3582427c907b8776ec76c33dc68c0d861180036c957fcfdfcdbf2f9823d209bba497db324d44e48103610c312044fa34ff70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55523cd3c0684a17358ed1070c3483c1

    SHA1

    7b03463e433c872d86a138e374ce2a88d9d6ab2a

    SHA256

    3d3877e00e200a11d8711ee5d1a9914bd9fb07fba4e9011c6fef905d2911e223

    SHA512

    46ad056234fa83ec6e4698c847655ba4be7d6779cbfa8bade05b5bfe2bf7461607c9147bba0da03c1ebdfbf7b264f04c1de80a7674cf4b1fc35482e7802a2171

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ed9252181ea06948be1deebb8d9d066

    SHA1

    973fe3d69df0878ab566593cf83e6dca1f9748a3

    SHA256

    b7f6d4043823c7ee3f3aebc1f65ff050dd6bd7fb9da9fe0768ac42b41b2dbed8

    SHA512

    98ec9d8b71e2013d51bd2ff23e8c676cff556fb10898310918772338130085498a9a0615acea6a2ba00328e5edc5a51e7d81d1b4001bfdd531122f7a60d8b1ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab66a33a2a2381c62a4a941fc7b30afa

    SHA1

    11afae8a94f0c3b18024a9a2797ede1d1c26b1c5

    SHA256

    8fa4abc816e47c25d5059b7a8f95c0e2b162eb57e9249239fde1f8f1ea56fdf8

    SHA512

    16a9f6b12d9708c4bb38b1fb5a24a8a261c738689c13ec9fa215bdf9a65ef883f93c41718d87b38e150412d3885e2e0f5f6679036e51eac47d3273214589cbd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d84022d0af99831c843d3d9eab76975

    SHA1

    9ec3aa7aaf6d09df501a07b9fe522295d51e87a1

    SHA256

    fce52d30af489cedac652b2fb2afd57f5ce64c7f02abb090a57300dae98616e2

    SHA512

    a66cd6a20b06420bd225df24a07af56bbdd1b015c168eb503cb8879964105dc176a94a7bb20f2c10fc94eaac023228c5ed12a77ebbf12c6b2e25eea66529c096

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd7e600a26bffca1e0ab1bec8fa4e5b9

    SHA1

    bbea086f218fdd004e472ee92d7d083d7b5e9706

    SHA256

    870ffec03e60eb0d13b7a134e85eaf4f82835100d3af1e4150385923d37e1d8d

    SHA512

    4b38c113b5e5242e1137de1e5f0ecbd0e36f7b18ae95a5ec84dc863ab2446b9196d005cf58c2c2a74ec26edc2b191851ca8d77678777d5eede45814847bbfaf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d17ad026de885f2274300a47c2f6a5a3

    SHA1

    a02ba326a7a6a51f8fc0e77a57fe5c3654d63efe

    SHA256

    561fdeb1bbf335b5530b743424e7140c61880550925440ce423d3300ffe48eb2

    SHA512

    038af648f513b241c52a67aced682c44559866ba8d754ff1dfec2d986b89195832d4f9b2ae85baa6618a0cd197ba2060d1dca630311b0f1501b250dad659abff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e0ef2b6b3492d58e5566b4ac46262a6d

    SHA1

    a6f2ffc7376813b3c450a6ab5fcaaffeed2e5507

    SHA256

    02615c43c5e32c90242e41bc108937ac7b9074c71c15193e1a276ba7f2214589

    SHA512

    9cd35f02db482b65b5ecee54c5471f090a9ba200ae38b0297293b857b9d646f669410552cd1aad0886c873205e09984516b473857c7994b76e505c9a8358b54f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3bae3a792c641cb561e8c6afe254ae0a

    SHA1

    a94b37a7a030d66c5af10f616e8c0fac6ee6f58b

    SHA256

    99a3677f520fa51cec8e086d5fed5b603494dfe2b331759ac93fb08fee2e999c

    SHA512

    703583db2ac92916b4e3d6ab0fc6b8f318b8940e07c93161b88c3cd1ebdefaea36192f7dbdc82d11a7c50603c6aa39b04b7d8dd849b71301b3cd785cc9318630

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa1c9f58e1356d5bd20305cb8a774a54

    SHA1

    baedc9358c71054222913449492e1a8609c553cd

    SHA256

    05aadedd3430211ee8affe12716d17d98267be7d2656d1981e95e7c6e8ac92e8

    SHA512

    a2f33dc4be8e2ddac620569649982715bcab7b393ef7f2ae8617c9c8cc411f22472bf7f30f4bf1336b20a535772ebebdd061bfabcedc0a5f06c3011ff61d77fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f113cd0c6b0f0d4237917b580bce907

    SHA1

    47266b3eb9c56be7a2b0829aac6269248d6783ca

    SHA256

    6634258597535aa7bc5f25f6920d8f389b3862efcee9183fb46c4be9d2b229ad

    SHA512

    59c4dd9924e84426db5b9e92170da3afd2228ac5aaf40edd081cce11f20697fe6da42aca298c9f49c4d3d79956b8384682dc2a0d03722aa54bd36cfbee712d41

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\52G8PVLC\jquery.min[1].js

    Filesize

    83KB

    MD5

    e85aed5c30d734f1e30646e030d7a817

    SHA1

    b8dcaa1c866905c0bdb0b70c8e564ff1c3fe27ad

    SHA256

    8f0a19ee8c606b35a10904951e0a27da1896eafe33c6e88cb7bcbe455f05a24a

    SHA512

    a5b7c4911b530b4b550838f50ceda9d9382d86aad7cb4ff13c897c269bc7ff350ccf01487534882f294749bc19f3398f0b338e1d8b03af3dba1ef382168ecc9e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\52G8PVLC\platform_gapi.iframes.style.common[1].js

    Filesize

    54KB

    MD5

    7ef4bc18139bcdbdd14c5b58b0955a67

    SHA1

    afe44fd9a877f81a3c36f571c0fc934324c6cbd7

    SHA256

    192bc707852c5986f930528442d88a79e5bcf4513aacc2b722a3c5e964501838

    SHA512

    6c2920e80e4d5059588a32f75bc2b5dcc19f8d68224c0935d74f9fbf49476ca5b1ce43c279768f3d36871dfcec39f36db3fcad559c2f93cc540154cdbb04dec2

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MEFTDE7Q\cb=gapi[3].js

    Filesize

    133KB

    MD5

    4d1bd282f5a3799d4e2880cf69af9269

    SHA1

    2ede61be138a7beaa7d6214aa278479dce258adb

    SHA256

    5e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693

    SHA512

    615556b06959aae4229b228cd023f15526256311b5e06dc3c1b122dcbe1ff2f01863e09f5b86f600bcee885f180b5148e7813fde76d877b3e4a114a73169c349

  • C:\Users\Admin\AppData\Local\Temp\Cab3F54.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3F53.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a