Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/05/2024, 06:09

General

  • Target

    7113bb4aa170464c84f0fcd72f1087b4_JaffaCakes118.html

  • Size

    58KB

  • MD5

    7113bb4aa170464c84f0fcd72f1087b4

  • SHA1

    6ec85d2fcbcfb17d6186d917155e851cc0560001

  • SHA256

    ec8485c7f31225c5f01fb240378c5fac613b4122abfe2a64ecf00d56bb636b51

  • SHA512

    f7b9052bc78e915402fdd92420da2831dc191372e75dccf51ffc7a66e59c527080fee348aa0410a2bb804d048a2c505416bb1d9d2f23f2df05b608c83f88c414

  • SSDEEP

    1536:M+sdIRIOITIwIgIiKZgNDfIwIGI5IVJ7SqIRIOITIwIgIiKZgNDfIwIGI5IVJ7Sy:fL8H0WEH4mhKWob

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7113bb4aa170464c84f0fcd72f1087b4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1196
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1196 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1048

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    7c0fb599e6d7380c7b092bee9c12ed02

    SHA1

    25836decfcf7a9435ade36a1df4e4feac23bbb3a

    SHA256

    fc97a5e9c979dae01838a7d2a2020f0a7fe383b81d7e0540575d1d7c20c1d524

    SHA512

    d8ca7df1b2db9f2e938063e0ef1418f64a4250d515385900304c29d83060dc33de27f157f4716663ddecc1eec1ebefc73f74a9aa94cb34593f2fee251c2f9c80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    323e697aec884616cfc40d9ae9e13de6

    SHA1

    b98906af6e13d7966dfbe2c9ed9283a0383a779c

    SHA256

    455381b1aba880f9fc29065201ab07aa1ecddd5ef930497778886cf450f4f95f

    SHA512

    9b9fb324d0b35bb35ed7c6bad2131ec3dbd0a59207eada7021efa28e3f6e5ba7805543916d5d5125efc1a0656cabd64fdc1c3e45ece0be70760e8de4e17954ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25bff5d48fdda76c057df58a5825dcc4

    SHA1

    6a0c5d49c48eac1d28e291d1ee2f2ff9b74f94aa

    SHA256

    838af20a8a817810244d35128662ab572237b12eb65d728e043d98db8551b09a

    SHA512

    e9676000b02495bdcd7b2e7231ea107c9949b7f59c5c04dec2a45de0bb8f31c7b17ada67d3bc9ae3c342ee350f55a38af2cf47ac083ac7656d39ecfd74463b93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    398dc5ee8f157367992064a3a286858c

    SHA1

    bae2f7a42777fbf31a7e1f6f7ee1dbed48b9742d

    SHA256

    afcb954b3b12568befcf6feff391e9746e052f5f983bb8728c5e9e50e917d65b

    SHA512

    37910e66a42f7e8373d2957e7db044a30e797e7be19e0f946f5102ab143915e1e4940374b25250b2cd0b8153c33af1b8cbb1d0f7ed83424358a826863e371792

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a524a4538c9d4a571f93285e54419c0b

    SHA1

    8badc3403028b44ab9fa23bacfa0f9b55a9d16fa

    SHA256

    213996efbe8d36bf5ec1c61f7985b8a912efafdea1b44e850ff92bf42d7f9db1

    SHA512

    8e269accb102c445e9387cb45cf74f9814f046acd303f7084d55ee3c48de9ad9f5c9bee7a621104cef1f2c4defb0ce2872baf5636122d96fb41f0637e4c3b184

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5babe0d6255769ed7fe9858f3d117654

    SHA1

    9c88965a3c10d710f098c05de36a7288fd13c277

    SHA256

    e9292bb6898aed3f54e457e435bf2fadd9a719ea8e6dc73c9f753778fe392548

    SHA512

    21c654a5835f850e97a0b4224eae840350e06e01b61f9a0ccfc5103a465c42d5f6aa1bed1a3f198ab214973543e57ba5ddba6cbb6e6475fcec1e175600c19218

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f994eb218f36dce9bad95d36fd4bf4b4

    SHA1

    7122ea448c54763e853b5acafa69bec4b194e6e5

    SHA256

    4ce6e0bdcfb6b1b22016ead5c9479c9c4da3ffef0f223ee33dd07d79d7940831

    SHA512

    0d2fd97bb0c6b358658dd7184f46b52491da9a93bf5bb6dc16ae537b6d441239b385c798cc58526af44e022aebde3d20c6d282d435c81100d0ed3a81b7da5d9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12f5b303c6d8a62f88173aea4c71562f

    SHA1

    384435f53e41b78fec581473eb95ce2ca1141d42

    SHA256

    49d8333fa72f63ffb3c94ea8a2c383144fac0eb7c28aa974f72bf8d35174affa

    SHA512

    d6f31301bb60dbb97ce778e0e8a907475e8b597bb512a688f86566a3f584417dabc74d78b4ceb7bb77f16fda611add9838afd800a923456cf93051cb5bfc09c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e47e79426e1f330b291d2878e1b62703

    SHA1

    feadde941c822d92977bfe7e292e90e47e2d7a53

    SHA256

    7285963fc5d8b0faec0ffd9a39e963cf65be046ca645b980d0c32e59eb3c2982

    SHA512

    845f0d9bd44b8aa1345ccab2388e2d15690d18e09551627fc35064f11d1d13a21dfcff37552462bbef6844af928b053f6c9f5929f396b816b976ee9ad36bc740

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54899d6a81c460ba484088cf80147fe8

    SHA1

    ec68fc71c3247a85f31bfcc2794aab96f2eb2a30

    SHA256

    dd80749ead1f0a65eb994f65e7d10921a7e765dfeddfabd48674dbdd357a492e

    SHA512

    dce58e3d663c85f4d8021ddba64fd24281de81f2f64f122b23623eabe56fba1f68fddde0a3a6b12e606ed8f47a830980d8afda817f56d3e8015ac3d8d8f4bff3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7490e1939e1c413e86915273a066fc90

    SHA1

    829f1e09fd9459809538abbb5dddfd3e1d9ec060

    SHA256

    76a95d0b33269e3f627538dec6890ae9bf40d9c141360bc3fd0b85f7c84ca713

    SHA512

    4552bc485d8833660aa8c91e006f9828b7675d390a2503863577360fba2d13e52a9aaa987610452324c94c15d5b2981436761aa844dee1910163c9b083b7393b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f11131618d72ed90cb9f3ad7f48b118

    SHA1

    d61d4689c195f52e7e6ffd98ddb8c14d9f95100e

    SHA256

    6a178977d485d98e1bc77af82010c31c31622ce68f4ed217d18e1c10e7757c04

    SHA512

    88e638877cc1c71a2ff2bc8f1cfe0ab9d27bd08a5dc730f421eba78de3d5cf7eab307934ebe0859bf94bdc13b11f2205e77b2179f9043312c9252a4e9d505857

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91f24117d3359cdf7c87fb90c521bc64

    SHA1

    404d11be2458495e68f355eea93de70bb2264926

    SHA256

    27662a767ef738d4e56b50a80662541efcf15d77d6b52f1f55e385f57f7ae4a1

    SHA512

    e19853240d5075f861a401395352d65a06c0e74f790ff7524eab813958037a6d48e02200fe7b2192eb33709b73ae6d41c74b0cb8cb2861d4c5ff2b9ff64c2636

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb1a8f282708327aeb7b4f5175dff7ce

    SHA1

    939ee01985587b016baf57df7deaaa6115eb1a27

    SHA256

    26267a181368f93b3ebe5b12ee4d6bceb253f82e9f3bc02a6b8d59715c9affde

    SHA512

    5644037ef8bc176c6c57036f1d8a0ff2e10c6d82c3ff0a89daed5f06d48ca097f2d2b29477bc2619ba7ec0833190531c04dbde54d52b370885a28f6cf113c013

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9487104b953e0b714f2a815df561a53c

    SHA1

    36b8b418be7c47d2f6c0616c3b27bf9b1e5fb170

    SHA256

    ca86c8039b96f3911c4b0e1e8ae26e0e339d7d15bcc1bbab69fb259d310fb2df

    SHA512

    6619cb017c7b2474f6daf6c15de909aa64b5b130cf36eaab51da49dcdad6d0051d2c13de69b69c1adc6ace18817631eab4ff05c12c4c45f4003459b8d8c3e2ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ac999bb15af434acad40b0b35b05b4e

    SHA1

    4f14aee11c93bc3a088fca7a2fb9fde7c647b70a

    SHA256

    355ab4e490e4fef1b771ac9b2582ed1c446ec2b72883d69010a9587eac02468b

    SHA512

    1879ad99f66a9bbcc48e064fcf69d8e00317dc3a645e3e25352118b4e48bbcc8f1a26e0cdcb96c8136f8924a6f333dfd820fad3ab767b86727b64b7b7b26d8e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    877cf81f97af38eaf1d156522ffc2da6

    SHA1

    30f8ad5c14323c24c272c0f8fd707e15b28378c8

    SHA256

    d50ce2d1ed8d784c2241902eacec279619ec52689e8238387bc702b32de78f5d

    SHA512

    22d9aaf40743335b010954a6768c148139f19d71506a188cdde409c8c7dea8be7ae16cf4b71001aea1681af0afbca3fb25b7f6eca522e78b3a7c1ce12fb357e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2c3430bfa5f794059249a917f027c3b

    SHA1

    c134d5eac59126cb1d16d53ed56440f28201aed9

    SHA256

    511e15be9c5fb5b7f130ad106d365a27489ec196e84d9bc04773b3fdb30160ce

    SHA512

    2b1945b30395860afa2833c297a7e74eab12dd502535b9b282b6483d43f562bc9961924a7c5787f8795ecb0fc99a843b2f9733ba9dfc87defb32bda1fad02995

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49bbdee058df916f63236b5d4828c33d

    SHA1

    0e649a9a41997fd29e34f14a2cbfbb30ca9973a1

    SHA256

    6b6b8531b86d00b1fa6214afa1155fc9e147cb0f7638a5bb3cb5f948fba64b0b

    SHA512

    4862717f5c9bd8651b97cc13482688a289c3bcfb066e6665da45156c02ee803aa5381fb952e3a7903a519606f02d5a32cc2e6b05eac497b0258c513350e402cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ca918623fb73ae168e9f2d69472480b

    SHA1

    a6142eb7e67cb48206f6aeca55472f5a23f11339

    SHA256

    a5294918ae5ba74120418a5a5da9da64944f835854aa32bebe2da285fde84cb2

    SHA512

    ad66838e322a2b4867751c73a9b3164765ae359edc5af386bbcaa8fc38ec06b3fa5565849a08d006978c759d348de3d65b8af37f7cb8108d60953733af7fbae3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1724b748b7f6daae88630baee245ada6

    SHA1

    66b7ffd3f65e44d0d3e10cb611dd552f76b7a866

    SHA256

    4eb63ff3ab9586beb31588fd330a47c57710dd792b9db6daf9c7ba72eb2486e1

    SHA512

    479d611496f11aa0e0773be74762ff1295256b470d7fcb1b4ab53f75c99d043275efd0463f1ce2af40be5013e3bc91d78d1fc78354987e016567edf99f2a7531

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    285ece523eca4223c948f1790d6bd989

    SHA1

    6576971f4c257c190c3b663811a22ff11e84d633

    SHA256

    fe8eb6fd1b632582127c84801771ff444d6a6076d349804c4f82ac220a66d703

    SHA512

    88843e3eba95b1d319812f50f49b634d88c36be7387aec990ca2372960757c61aa9267a25ba05defc17583779ee89562fc534edfbe554e37e895e5b376ae4372

  • C:\Users\Admin\AppData\Local\Temp\Cab3583.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3595.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar3676.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a