Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    24/05/2024, 10:03

General

  • Target

    6e232ad65792d8fcd255deca11ea563d_JaffaCakes118.html

  • Size

    36KB

  • MD5

    6e232ad65792d8fcd255deca11ea563d

  • SHA1

    05f3adbed6dbca106db825bfca808eb440e62705

  • SHA256

    bd66c2994dad85a0352432322b5ca95c47f4849ed82ab368c6eda2b91d1a8d45

  • SHA512

    467ee3d4928c050f41c38de1bce26ec2ba94069fdf323b609268e4f65593de747878dd2ad83fd0a6236a6bfa1049344010791dbde0eda8118adfe6857ba32f44

  • SSDEEP

    768:zwx/MDTHWI88hARcZPXDE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6Tsdi6f9U56lLRcs:Q/LbJxNVpufS6/s8vK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6e232ad65792d8fcd255deca11ea563d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2036
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2036 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2696

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    6180880554079cce45e90c0e2f0d1a12

    SHA1

    582754d9efea56d5bf20d19ee3ea1c89aacfd755

    SHA256

    f1a584dadcff1d0771907befea8175a3085541c8e0d2db8b52de97c02a2a1f6b

    SHA512

    796aea097d6c41989e8955d0ead10773a529af2cbc32d245b50979b3abbc08a32d559277b49bce16e04882fcb59f2c25910091521c9ba6aaa4c6b73bc5a52b03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    724B

    MD5

    8202a1cd02e7d69597995cabbe881a12

    SHA1

    8858d9d934b7aa9330ee73de6c476acf19929ff6

    SHA256

    58f381c3a0a0ace6321da22e40bd44a597bd98b9c9390ab9258426b5cf75a7a5

    SHA512

    97ba9fceab995d4bef706f8deef99e06862999734ebe6a05832c710104479c6337cbf0a76e1c1e0f91566a61334dc100d837dfd049e20da765fe49def684f9c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    b51314464ed502894977cc5f7e9656c4

    SHA1

    589c9830df120638bc02c57ddc109ea66240d5f4

    SHA256

    dd246131a21fde2db072005d46a74da35c11b836be4b233ea029911e89ac90cd

    SHA512

    d5fa441b9b1fa475a3e2a2dff4cdd5da034a9963374a4b6424635e5865802de29327c37d06226c669e72b85168d73dc88340e5459dd4a492f03218e6e58ec76a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    862e400c644a4240b6f4240897668aad

    SHA1

    5d85dc748666e7f1d24e0bddfbe253188ca750dd

    SHA256

    815b1cfbbcee2ade8ace8343d87f3fd51763854d10264c1c0cd6dccf17840b6e

    SHA512

    0f8369711d57e1814ae100baabe3783a114967963305e0612181cf361d38f4a6bc00953ef8c51b05dc4ead5dc6d9c7ae373ecb858450a3761d068f410afc835c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2373abb4900a1d0722c2b5a3f0cb0448

    SHA1

    ccdb1bc2a2e89586e218eb44f4b08db7a6abec4d

    SHA256

    758c4472891ca045faea8bc3879e0a115cd372dfb5d88d8c0b075537ce753539

    SHA512

    404034c15846cd63e5d738108d18789e8cb53c201778f2fc0c47d675ac2e53f2d78c80e9d9b894f625340e704fd3ae7b953a4f5768b1483ed53aa5fe4fd61425

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    85a4a0e3167bd8d5846720bfa00f0fef

    SHA1

    7c17901972642ceb167fb800eaa4dfc4d6c7e065

    SHA256

    8fbf9a11d2c9446016d285166548ef1867103574f45b864366ca0c55a9c3887e

    SHA512

    ae7c4319c4459b4f93c991a94774f4f30ee595798643f5b2e55d23aa2bddfc7f2a24c8062009203d891c277ea2f0df70496f4c9f82c9f291c54de3f3dca8288c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b0dd5b8d860c0730cc7f967cf8351dd

    SHA1

    fad3ec2405518382ea7c8fc38bb47c9659725425

    SHA256

    40312c0aa6ff82a93cea66f687feb0ee6a3af4006f7f685b1df327436e22170c

    SHA512

    21963436a240cca012a337e496e985a2a3339b64f7780f18ba6213bb9646d4dcf22fb486c675231c8ad5054905dbbc29b30c3927071d54e4e5c62adc57a56a51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7287376f6e0ac5015bc645313b3c30a

    SHA1

    7bb5f83d6bd2391e80210ca702724552ce4c15e1

    SHA256

    4bee612137b2ac21c90fe167cbbf1d074da4572841eaf499fa662e3f2404eb04

    SHA512

    75b9581ae2535365a37084e7814b272f433fa569fd29b3d74295a5d0e285ee163008784caedc6c294148a7aada595b895df49576d974139429a5cbf90b6d84c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e86220577fb38539eff8330fe21fb82

    SHA1

    ecebce9276198b97b9f117dfd3673300d01dd8f1

    SHA256

    eecb974782fabf60cc216deea4e17a7c3ed8a3c5e31d33c94e24c63d9e07b7dc

    SHA512

    69e07e8bd9a22e6c491390127c05fda2a0c67c25f965db84dc2471c9a654669464181afd99a722533dcbef8c4825aaa59f895df5337262432bc5062cb0c55ec9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9f7fd16c46e9e3cb9e8bf7760c503d4

    SHA1

    5a97a93e467a8a6595b1622c4d247839402132b0

    SHA256

    0635c7dc503d063e2c144fc61613a43daafe5975897f824f9787c8a9cbcf7ea0

    SHA512

    14158ad778828423a720907c32b1962eed442cb7520b0ce748ae3f876862f3b9109e47043648d544cdab81af6989d1498bf9b35129e439627b48eef13a5ab249

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1af1d8a03d37f263aea73f79e709b546

    SHA1

    2efc4596e6d63d5f56eb69b18e473015037b4613

    SHA256

    4a4114bd6805be8aae5d1c57a1e956e5f9785689902cf84e3adaf7833dde040e

    SHA512

    ebae31fbd69eddb6bf29889db3442fdbfb9af2bb3fec1be7a91846fec3ec42e70324260203511fa3f1634def2c5f3d3a5772e1f572a1aa7c3c50ae8262e2d3e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    063a0a8d537006daff6795cf93d631c8

    SHA1

    d456f1828d76571810627edd8cbf15972a392a55

    SHA256

    3d5ec563af75bb0ae27bc6e2ac0d2d593f89fea950762854c7c36d15d0635af5

    SHA512

    3289d26bd846faa3ea04bab4860bbc7b129010d855d11b295d1adf34decb7f53804d143a84a64e38e9512473e03a87c6b8534a0c17bd2c2b96719eac2b51fd6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73fc43bcdef88d1560ac8962a6afdc41

    SHA1

    b726f10ec75d3aaff227894dce0ac14025fdd1f5

    SHA256

    11017331aa264f076a7aa49e504feebcab39ce5f62f6d8a5f8b3509316b33085

    SHA512

    fcb0f3d8abebfc9354cc36100ff8371facbcdfde4651d53fc57d1727095cd0c5e58d31632c7a36902c1352476e83639c8d84b5be296a5dd0db24cabaab2c7345

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    210648426f26f33ffa96254f4059225c

    SHA1

    7957396528d587fb7f4e581aacbcdc139241e786

    SHA256

    641cf0a3f5c802d6c18c89264c95843721be3f243709f897dcefbfff3aa68159

    SHA512

    a02409b4a798d7db2b0c27569fc88d8c0796f1872205d27e65178687a0e45a538348c489c80b45fb4336e614c9fc259bfc43cb8ebb5e63b76ad3cced6d1f598e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7c2bce9b39200668bae32d961d4cf4a

    SHA1

    94a415d7518c0028bb6859d81a7d62f0b4eba462

    SHA256

    91436134b3abc7d100fd372a75264227eb8e72fbd52a2e7ac33436d3d575c42e

    SHA512

    a08702e70604f1d30ef525f3082feec4eb172cef040f86ebd1694d67ccfee490cf68a841bda60244bd59954563cfb1372191f71c76551607721fa11f22cf1d2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a712efcb647a3a6041c3549ca3454278

    SHA1

    bf3ad7bd409133e847350fe4269ac0b006769720

    SHA256

    2934b526732ba104a4f21f64de74ecb30b5fed98b75b4cd6918fe4dd302b3871

    SHA512

    7abd73970f9d0ddea3177a981895c80a175912650c7222a33708483a62ac5be6e4f03b871462efb26048c4c7544b467fd0c1c160b40c91a12a2f53d266ea6999

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e9cd468eabeac35f4f0a6520240b897

    SHA1

    5f87bdaa41293a0fa53e17a9e7af81725a0289ea

    SHA256

    2325a7cc4615dc99db0d4f835b9b79bcd6335ba74bcdc430a28b08af839caf2a

    SHA512

    c10eb3f383834fc1649cfed3c69fdf2c8a2ef0a2279b438ab1afa6e0391993c7c25d08f983f26ef2e847fca5150470599a2a59c3aa0ab73d109d72dd9513271d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63c20f579c7ec5277c3c9d5ef5bf8a3c

    SHA1

    e322eae49edbd411bf514aecc420b29837e88d8c

    SHA256

    53a764ce8a75898d179e66c91a3fb79f218cb5aa28ef31f8164a58526aa2493f

    SHA512

    288bdf77e6890b3bc3802c81e50c5b2b8f3125a5af57dd52eecba02059b069d01e0830371d0d87cbc2623225f08177c65c32d4e74b0e104465adc6b30db0f9b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09168fa7e84a106936cf281e638cbc7d

    SHA1

    c43bda742866eb1212cacfe58b52e7da2d1d9ece

    SHA256

    3cafce9926ebf505573a8ad110eb2b3a8d49edae78890fb24fa0f81cdb7c72eb

    SHA512

    8719e71d62061f6d8a3a2445d43b1121d9441b9288ce981d593ff2e61b815848f60f9225152fdfe7b9a3b245edbe842a628c2b16f2b99014e49c67b9ab82cd42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75f00a5e764a0c35b210e59846149597

    SHA1

    3391eab063759e0a8efa24d10a709a3e60bb7bd8

    SHA256

    5551a086721b385601c276d839c46a0631aae8e0b807a01f0ce3db3537c7f5df

    SHA512

    2f1b1a7da025ed364f876d945adbb1271193464800780a6137005d03619b15c4bd16d8d4261f9a1ada11640f735af50b5f122347fea3a8f20ba7483d377e8d33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c890f7e858d391161b2fcc60893fbd29

    SHA1

    afda56acc6e6f73f5d326104d8947cb598d9ff23

    SHA256

    91a86e7412eeb63ee28fe276e579719bb8514430d175791969f60b687709b8a7

    SHA512

    66539d126f1d6b2a7c0b316bc5040cc533c9fe3f3d6f55b068570df4694a3b79e238183d363a848df13b1c2cddb546ed85b924d1eaacbb2d2fed03d0493235c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2316a51f49a1fc3c9d949273d4cd9067

    SHA1

    dea6d75fa7eb3d7cf0179dc762692a8f15bef1c8

    SHA256

    bfb8a9a3558c8542f91ac55a803173c30568256234a421d1b53d8e0788167f20

    SHA512

    6ef8ea644b1429e4ea8d5d3580caa2b4cfb0507934e452e43e97a02378b0707319b7a03dd3d7b1a31bb6bdcc96785b541a28cbd4d2033da2d3a7ce881f2aebc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    392B

    MD5

    da1641ad924c6f8baca9991afb753283

    SHA1

    e5146f0022c512b3d103dac6b246b4ba75d4d399

    SHA256

    52f54632c0f7ac8e1747ea348b589cfc4d20a6458770adf7172375ac6ffd8796

    SHA512

    aa22850378a12167ff104985959cb2cf081b6e476f39bc997b8f78d097eb6e1f78d654dcf4e1b3fb80758ef88e1c7b72f0543dd4df68def6673e49a3e0c5bd17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    480B

    MD5

    372bef2418137b0b71d856ef11a0876d

    SHA1

    4dae67e4e3667073b4a7b745499a3d3fc8e3c4f2

    SHA256

    ba54dc8027e3db07302f2bcb5546de019b40d079ab3a1b55da6754483f3dcf6e

    SHA512

    df58cd486f8cb89d927d8f429bcab92c0df34d7fbd8da58b201f3ebe3b80f65a6dfe47906d8e67ba22bc75fe6a0d95d385e38e06512928fbe43ef93a854918df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    c48bc78cd0d34b4c36a4791a3293eb4d

    SHA1

    078e2a6fbe98f3f5815dd614fa31e518965840ff

    SHA256

    a626c7e117fdab195ddb468b056731afd6a147823a8801e7fe0e803682e8a17f

    SHA512

    0806f4bfcca609ee01bd226e04d86e3c5039c9c8a3e838c6271b3bdba6e5c85f3be32da38ee71692cbd35835177acb3d74a7cdbe54b6fed90dc1830a921aef58

  • C:\Users\Admin\AppData\Local\Temp\Cab1894.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1895.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar1977.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a