Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    25/05/2024, 00:00

General

  • Target

    7038a5c87c7e1d5aa747309dea8fa452_JaffaCakes118.html

  • Size

    557B

  • MD5

    7038a5c87c7e1d5aa747309dea8fa452

  • SHA1

    efecf2a3c9f29be760ec6a68fb2ca7fbd2b96e79

  • SHA256

    2b7fccb317e03e74a7c81e44800dcc5170991704aa39ffab8c1d6a3c232442df

  • SHA512

    cf513398f3a7cfe05c51bdffe592f9252591b2b5d9478a4c0f19a4a028f68cb6b08c5276ddf5c6b9ea89fcf26ea816730abe1ca663e46c9f50884299ec8e2467

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7038a5c87c7e1d5aa747309dea8fa452_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3028
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3028 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3064

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    b538dc32d3566e02888d0c72d3484612

    SHA1

    3715ee4b354a6ef7086861e44ebd724606d9ad02

    SHA256

    3741b6d0f9d563c475ee0e8443756fa4a76e104accbb58fbea64d53fea605a2b

    SHA512

    76620c7eabc91f2bdb0afdee0b74ae599f3ad943be500db067161903e919d83310359fd2913bac1d4f1fb8371a85cb863ceac71678611bca8d1dd167577a3c55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e195b20f8bf0d33783eefe719da3534

    SHA1

    fd9a984f68cad4427dd5d27e91dc69a45683e428

    SHA256

    5832ba306cc189e0341a67703d3ecdabaeb9365aad5982ede0b0fff3caea2d55

    SHA512

    6afe7c7e2a340d7814958cda5d385a31929760e71a1d38003624d2bd0e6ebf39068b20df5c72a7750fa963c55134746da3a1a13fa34de789bf8677b69a8b9d65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bfba99533297a2a98b12cdcd5bbe1fd8

    SHA1

    19a8f6fd0d987ff3858289b842e10e0faa0827ce

    SHA256

    ec67a76e5f757159aebfc11b386b5a4c561143c54734a74a1595a14f62132b1c

    SHA512

    a17e0fe57f7ebe90cc571cbd254310b4f90dd0d2241cc4ace538c3216c7462ca7ea89034587ce783e5ae51a7fb7fb8f8e114e5b9d38d0fbfc4002f0b891828ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    282b1fc620ebf489ef11f7f39a4e8aa2

    SHA1

    a88eb00ea5c92da3fb9c0586f8d2c948166baa72

    SHA256

    ad846ac43c14e784159f903deffd0a475adc0ca8f0db088dd078b2ad78936fa0

    SHA512

    db3a158e37e3805833c90368fd1eb7fd7b2f08d2064351d2fab45e312faf830a4bf4b7fdc5afaba511ed712857a54917b07ed173446f97a4deb86e2853e311bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1de3fbad6f178d19028f2d926a515a8

    SHA1

    7590e93be19f2fe508e7205c9dc77708575bafbe

    SHA256

    a630383cb99c3bb597672beeab438b04804bdf32e81e63ba93f3cb09c96c37a7

    SHA512

    f84ddb8684a1de5f7ec854bc76c85f885954ca7b29f106c7ce75bafa9f0490aabdfb022dbd2366c22ff5de211b23504e0ac073f493831d86a03e3d5f0dcf2f70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b24d747f48b1ac1e8b9c956ba671dd34

    SHA1

    b3fe5b730fd10db7c121d393db0908f20bad920b

    SHA256

    cee3b4b1a72291cece5b16f564442dcf12a4506c58dd77a10925b6833e16eaf7

    SHA512

    54425052730fe4cdc2e4db5f67e74e94d11a35008af68f4787898d2496fee00e1d1638e1f43bb0b5aac866f325de4ad9aed97f52c1eaac220d2278a65ef52f2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33cf0535c0bd5e09a51f2d01f7ac25eb

    SHA1

    73abad31a17c65cfe9c073c6b3b49540948e59a8

    SHA256

    3d24d298bbcd15d7f91f3bccde3e805067ea9d24cd3897eb996467f52fda3ee7

    SHA512

    83f4c2bee94c7612fdfac643edb6d4346a5b544b57895115d1b5f1da8b62fb46b2675dbad19fb3a3efe9ff25892c8f167f8807d22a554a97889c7edf0cd60122

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6af7062df7fc4709ca2a0f907b7b11e2

    SHA1

    7905821d53eb01454b31bc023cd26f02a4d9ed0a

    SHA256

    c23119ee579f6558511dd275555befab63f1c4f7de65af2ca818388956ca4004

    SHA512

    8aef3981d21770382ff8acc0cf5c5182793e2ff72b5943de605918a8810b3b335b018e7035a8ea06510a6af2f608ab3ed7aafafc69c9a878f2eff41754808a9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3ad9b7dff8c06560dfa77f1c7fbfc6f

    SHA1

    be51a5c4c9ae27154295a8becb31bfcc5a58722b

    SHA256

    09c21654847f38681b927ab607207e3061a22f128e7d3d34b2158d807b75185d

    SHA512

    477f0c0d6890fec7d123ab2f0188e76102820f95ac9fcdbb285e3982441757a8c2d4fa54b58c8b55915a2d34314f1f032496943f990dfb021b4244ac0a7d0421

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d437323f66417e21bc05ead8c1399983

    SHA1

    a7d9921c5f1cef392f82339826c244cf4f8a338d

    SHA256

    9ba18471444413decb79468aec782c11a7578da534c87a23eda33a1b3e6ff8a8

    SHA512

    efb005db5b24d33220f874a305678d571d5ceda11e31ae655a95313b1036bd2128822521f79ba3652667fca77f2d2f044e0ffbe12577b14b39dca4b4106f07c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c0759caba3ca170cd4a6c259d07f947

    SHA1

    25443bf8c7e08718a699abdcebfad9c6552b54ae

    SHA256

    77eb468ecc1e7ecd4be15b401c3545f1e6d1af4250ae37ab684a2a666f94c594

    SHA512

    e0a9ba777769219ecf38c5b2c3066e87e15274f01c670c2f4e70a7b411d02050d94dc0a9f83d3788091911e337d72fa6778907feea4891813d7e1d6c076b1835

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de698f5df6787a28c6744a2ec0cb2ac9

    SHA1

    7df09f1b3617ec0b4d1abc18251fd04492a551a9

    SHA256

    3f861e6c8b1b6597f661a281bcc88839e4b74475cbd067a572ba22c3f7d94f65

    SHA512

    159892886257d4675758750092f6d4c45eee49c06fc253896ebc0afdc4c1f078967f8e377921236d312c9b649db83e65377b08966c1515fe0c6a80973ab153ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ee358edde0f43c75b10c135300b4da6

    SHA1

    f2432672e886ab4f435c1872488c24fa88b8194e

    SHA256

    b1e43664b8eb917154d64ab75e3a602a02f36ff2bc467db5e3f8b36ae6f56933

    SHA512

    06975dff39e98927e9a6056fae535afa4cdb312b2e1aedb233d9c391a262b7433d51194394286cda2d07f94fed8c89ccc01d547c31683fe18782953b347c1f72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca25969d52ef29dc29a17fa23ec898fa

    SHA1

    6bffa7471a9b07e071ef89e88d4230c5c4ecc24e

    SHA256

    4a9505a3f1b31abb9e93e5388ddcfe2cf585ecfc0ec41646f029e4b3fba12192

    SHA512

    d005b73662f5c3d4932c7980b21e46328bd4bc14f3936972b737e3de3853f28a0723cd82f06c784d10a873bb0179d2fe21f14b6e2d05d1cc0a50e994f5289bd2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fa35acec353dadf452e38fb67851fdb

    SHA1

    f85d6aadb952083b7f0977e3b04bfba695912763

    SHA256

    0860ed09ed63390cde00a87492edc3516b63be6438c8c2e3f0bd215b12e05277

    SHA512

    0c3054c80ed1d0fd671917bfce908b3290ad8207492dca8615313c7050b5caee539cf242f8257e0c8f92bd8f1a83358d963c99bc9cd59e0b75304b5101ddb652

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    884d611923e529006646ab71e7a3b5bb

    SHA1

    db6111605f8ea93a6936d44c6dc63e5cd4f9a106

    SHA256

    b8454aec9edca417f693b45c04c8b5ea31580291454e7d1d1e22266cbcd7b55c

    SHA512

    d3b6175c1918d82f87b88222a05b86d40f5b4eb20a06b12a5fc66620e90bb2a0364520fd4bec28aa49328e42e5bfc06cb991a94eba3b69efac543b3882b65d97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc5256149d1f57c8686c39af45d42dab

    SHA1

    8695af137100ebc2813160a9f822f97eb9ed5b74

    SHA256

    15bd81e2ecececcd905d65a1385d8816850cb82730632ce3b4b5c260e3e60192

    SHA512

    04fee81cb08063795294709ab0c1e7ffdf0070736183b5aefc3b059542419004cfeab0b8b939b1396aacafc8b0014b6efb2a0352464e3186e8988b66fbb9de3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6cbcc7a7de97084e2f4087594b85ba4

    SHA1

    b2a16d37e135b4394ea574aebce4f94124f5a522

    SHA256

    61bb370044bd616851d777254dc762db4c77580d58ffa717fd03634aed070870

    SHA512

    1dd1f97231b98f05357ab7cf8904aeb29324dff2bfc81772a27e5a6920a8fb9b7f1aca8a23b53681d1d9aa5148e440f8dfb47b752154b5fbfb613bb54cb5ba6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e51f6d9be6ab9b362c9e2fe682946b52

    SHA1

    c792e31360dd3082bb0f3d5e861be7dd2516a215

    SHA256

    91bd676c7af130e88912fc1a766b2bd124d41b98f794149df047e394b981e572

    SHA512

    56889ff25d00dbf36b5c6f7562e9f67776e5ccf6890c263a12afb50e3a574b21756f87f73435e6e4085099073617f89715f247fe7c7138f0ecd7e62479938d28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d88417e462c4331c7323bf091e02704

    SHA1

    d4e769926bf3587d98bd559383ec362350a597fb

    SHA256

    537af6d367534efbd95595096c905ee67d8fdeb24f8c1fd2099e821163e63017

    SHA512

    d9c4a44476005b90b6f06eea119a0470422f6e61d10dce217d064ff381d3cd1a7c448b64fcbf982f10c0907c94e6dceeb54df26e3ce04ffa696030f79513d04f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d236c1d0591d3b9c6d5d4f5686b8c8f3

    SHA1

    0326c7bb0ded3455d5c7a3c9fee166ac1673458d

    SHA256

    14d1dae8ddffe9c5067bda3080a30d5f616e85b0b3deee0f2b30315e4520281b

    SHA512

    3698483920a1b0b3fa9d79b2af4db48ce413c998db90e8f4d4c5445d30523cad7004bac1e7eaef2f077cd6a43bc67d7f64182bd9baa85b743a6c46d945f940fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_2543588302FC0B794CE8BD7EF1AD49CF

    Filesize

    400B

    MD5

    bbee8da2ec201d29005af6de9508449e

    SHA1

    52e5bb7266a5a71aac8238e9dd466a6c72b07331

    SHA256

    72bf5d0d1739a8cbc860229dfe13dd36316cd2df050f1810d1a48c26d45716ce

    SHA512

    0319bb17976e58e5d15072bcf34154ad6c62e73c64e216de7bbabab96131a0e1544f2b7a483d661e144fb9a4464a3c16fed5747af67ad655d36c27f2a3ffad75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    43ac96d1b561b86b28caa4f8a170923b

    SHA1

    832a5b5bb4a3ae75136be35a042e12bdba567597

    SHA256

    74c25441f7e707ea812e6dd186b37f5879e2975653f0b3187384a1fc86bc3924

    SHA512

    ff981cc4291ee5da5d101e6fc796bcbedb0a4bf3f9f83f72d75603669d07b03f3f4c1fe2369e1862f8c9e3487c61c2e4d3a716be3104024184dcff6329e5ee3f

  • C:\Users\Admin\AppData\Local\Temp\Cab4B16.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4B18.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar4BF8.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a