Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    25/05/2024, 15:41

General

  • Target

    72726fb5384bef9797504ae6e8ee8c1c_JaffaCakes118.html

  • Size

    24KB

  • MD5

    72726fb5384bef9797504ae6e8ee8c1c

  • SHA1

    05d93eeafcf40fcee3fbd9236d4063e2832cff1f

  • SHA256

    0d5e1b95445b5ecbcafc7a36fc7ede9a800a31352e26a1bdff9de7df359dfd7d

  • SHA512

    58625da443db9cd31ef2d92734908de2508d4fecdb32a27d1c838c2cea2cf462425abb5746ed4b1dbcf085600005623bbdc4e2680b828d6d9ecea10092bee085

  • SSDEEP

    768:SlnniLqBwFzkapLdwwGPTj4BTsHlARTbgh4NOEz:Xqs/xwwGPTj4FsHlCEGND

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\72726fb5384bef9797504ae6e8ee8c1c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3028
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3028 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2508

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F59A01A8B782D93EA6991BC172CEFFB1

    Filesize

    867B

    MD5

    c5dfb849ca051355ee2dba1ac33eb028

    SHA1

    d69b561148f01c77c54578c10926df5b856976ad

    SHA256

    cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b

    SHA512

    88289cdd2c2dd1f5f4c13ab2cf9bc601fc634b5945309bedf9fc5b96bf21697b4cd6da2f383497825e02272816befbac4f44955282ffbbd4dd0ddc52281082da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    860d6409e506d7fa18fc97ea0c1669f7

    SHA1

    ab15efdf6a6ae41bc7f29c8c7ba7414bd66e229c

    SHA256

    79e4441a03a4b7b7e9e07fe457726f7180c1e3a5d98351cd4bcb91f0a85b2590

    SHA512

    e824b7f999634840054e07d941280a43a667ab2eab6acb6ef2c3c2843cc31a0348cf5993fb3fe51397cca4b9870d612cc569ffca8012a6cb128b0aa6f412b2d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42602fa18fb9ef22d8305fdd1e5d4c8a

    SHA1

    58b488cd0bfc116c34b94812fd71df7ca6e9d314

    SHA256

    d9113b2f02ace6f64c856d1155df397630187465de9ce118f525f0f9b580be3a

    SHA512

    7282af3e132cd61690526bf2af43d427504eb91aa315a37c1f048e2236eeffa0d02fd49ff1f586892bcd595fb4393be34584bdbac91e59e89ad10cb07f00f5d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3ae06fc9e9665bac7b46849c893c75e

    SHA1

    ec9524548e4bdaf4f48fb0ff61fd3fbffbf4090f

    SHA256

    2de9d814b2f22fad91c3c28d60bde51c859bf4bffd0cf129ee3866fb964dfb72

    SHA512

    545f3506ede77fb4ed0feaf0e1fb244209b780bd174afde426ab05b3eed50bed18bd471145943b5b56cda381a3a90698975549d327cc7965d5644936273c1d45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9add2e725d6d40b6994749b44b7c83fe

    SHA1

    e5ba009974fb5d6c7b676cf0b7f9ac7fe4775cfc

    SHA256

    703f4810742778ee350f4edc16689e7e6fb62a88e1de06fab1b073a83d889266

    SHA512

    4f30755d1f0a0bd59c09fb72f9c3153ec7378017282fb554a91faa7349de337e3b333f9212dc399836c4b1b5a55ff3c56a6b5239419f3c955e9fe6a3a66a9ce9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f16e5ac1fdde4941e24cf41c3a4a03b1

    SHA1

    98d3dbfb78b9167cc5e7eeddadc7c53f22c45dc1

    SHA256

    154ff101bed77a1fa1ac6a1c3586546bf2f7eaaddbb86e078588afc37310edc8

    SHA512

    fbab3feb9a899a1f61766d5b40c9ca9a579ac1ba27da1bbb36f2b66ac6125c3b56777d351948a7100c7df54dedc7701eee9b0d1f6f4ec65b37f0874bd2f1229f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b291071574a5cd1143fbb0d16dadc1cd

    SHA1

    e4a4d959845842b36cc7a2488c8413b20597192e

    SHA256

    554b0bb97667a2abe0883ba771a6cada86476fb1d906fd431d13c917926d3de7

    SHA512

    094043e1c80b80bb9a8042fcb161610e7fd13b2593a34c4c2a36af7bada3ac6f084fa0b7aa29359f539d167890a3e094b0a945da639098d07d1d36951d8ae28d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ce6f3daaa19e5508ef9cf4292b14d5f

    SHA1

    3ea0276ac1586a1b54b10dbd2d1a3fb895ef5bef

    SHA256

    64c46a68915922aea80847f9e640180bbcaf140ef0aafcedeaa0a194ce8afc2a

    SHA512

    f764ebada7025c697bc094a2a78451e041ff11f99e83d069e7eec1bc226f68a9bfa069f9518d138943998f2fa2cab71f0b9b448bdea10e8c571e45de7286a24f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    deb11ec279ad0fe20d699d65f045afdf

    SHA1

    86652fcd4502776875fc3320a9cb4355a67cecc8

    SHA256

    2aec826da1b23805aad6e336bd70b5bb54aeb5b66afe919a4e72c4e95c6fa8bd

    SHA512

    af51d9c4aaf3cb5fbcf96f832a77f3dcb15bfe30b894739b26aa34fbbe409f42d5cd725c2c2fa806077d615ff1b82048836783d143f75be09959ff2f0e43e62e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42a135445b32fcf0653963fc5b122016

    SHA1

    b4a5ea9ac144e85abee11555062d6cb3ddb64d10

    SHA256

    319c28c305d7e5bd27b09ad18a827e82c19ab4bbe47cb847e695052d0e9eadab

    SHA512

    abee9c7c37d757adc8936a9b8c66a102b191486333537f6e5700fd7bd604ad1941023288f8f09b547a4298c51075bc81d046593ef223bebae112615b0434d8ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    282ab98dcc15c9868395e85ebd176bd2

    SHA1

    25175d3aa62f8488f4853625872a79ef5a59fe54

    SHA256

    be83219bc55cb568de06e1719b545f5e577e4d3565292af637c0bc3aacf023e2

    SHA512

    ab5662d4ed6453607cbd24df7d0160ccfb28a12779e13835e8579e9085530ff3b74f16e700b7a9133184459a47c3b6099a3d4e1d5284e6cb477d23712210c2a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b00664915a1c1acc60b7ed4cb403438e

    SHA1

    b50a8143a4e9514418e11c2496b2eb3d2602be6a

    SHA256

    9dd39344057c01b7037380be6614226be211276113fee7cdea0efc3dee38f13e

    SHA512

    d4938d8667192e01bb1c6c879f8e01f31a788cb13a32c3b4c7171871e3fc8a7678a64efb072885570174035c4b4d6ce0721c35de0bc9633efa1300eeeb318810

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8e177d5d2b6a833d125230b10b5f13b

    SHA1

    a197289d7d87af5fa6f9b78f6df4c0d600b42f7c

    SHA256

    93ec28fe5116d808db4d5cdb9b19bbd8f09bc9033842915880b6246a5608932a

    SHA512

    9455f55229f1fbfa61237865b2d93371de8b30ed0aa68e6c31e5c8bec6100dd82234874a0edef2888457a7d6be8bf24a2d2bfe3f3f2a99e619988be2f669d800

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3844f8ee97bf5e78312b596ed945b276

    SHA1

    bbf0ec6ca6bbbc471326b7e6febb564625c39c88

    SHA256

    ad67c7b146a1ce16d15e0b6f6d3a488b3aa0098662db6ea0d95a37e31b2bdd7c

    SHA512

    225ae62ee0a9fbfbd3b436d88696217efd04ce4d666e951416bf80cc314685da4f0413f84fe4f1fb7fc67943a83c8b43e7323ea401591fd29fc20b58d119d24c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    32b7ff5edd411b938d30b22204742978

    SHA1

    18dc75f8a9f469fd4396ecae2c11dfefff8bbe66

    SHA256

    eada8b07505cc5a3cc8a87312437b1c72b69764645edf54080fde7ae3ee48313

    SHA512

    edb8fdd9291111d1bd98cc31b1a8b8469e1f6e35cb2b9ff8cb6ac554c30e540604206fa5696e54570adc783578cc582e94332a7622ca1ee9f777f47567666bac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9cde08c84b3400e3300a7290e9d9dd56

    SHA1

    fa16fee42cac2e1c1219fa89fbfa16213ff3c1ad

    SHA256

    3fd7b8c847b8ff11837b7eb39603615446ccc58bdbd06e578c24b5d69ac2ac62

    SHA512

    c7bb479ed6bdb4baa815bf3f5f691d6b55ea67be954aada18a65c39819fd6cde37c3bb86f86c6cd593a340145731609718749a68d383ea55758abca21519bf2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2285ae864880b9cd196b1c05689dee4e

    SHA1

    bdb2946061b5dfa3d16b71cbf6c08dfbb692d735

    SHA256

    445788662c0e632b162585d4f0cb2264f87d86dfe35c8ffee885c804f673355c

    SHA512

    613667383e0a556883696298a2a47d6296e7ede6db9b2a77319270b0e7d2d2fdb9dc05301515090c4cb5f8714b82299b0797bd5f8a168ebb2cdaf668e181fae7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14e283966df361431394563b67e5fb34

    SHA1

    a9542666b8f7407199607b70e023b2ccc9d66dcd

    SHA256

    5f156bf1a3a2749b616971c6762e3027465865a4562c6d3fecd20d69a25fce33

    SHA512

    373ad117703c329a096f3fa862eb6aaa2a00c7058489a9bf997ec8c2507f23aae2343346090ec82f40d1366a1a04b08e42eab5b8b473d97817017c20f1774701

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c02482ff6c8c4c269ff9faf595613222

    SHA1

    efdaf515abff52270a88e35f2adfd45b814b5348

    SHA256

    5977f8b6015d0ccd97b68a1dd23e3b399c88f4f6e84f0807d6bb79c65424e5d5

    SHA512

    7fdd74d82857cefa7531e011f3009c73ecc103200d6cf21593ee28dffd2e228287019ae92eb99cea87a37a37f8bd1f88beecd3c20349af93cf187eb7864bec80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    301d7213f4613269f1465a44ac55d362

    SHA1

    aa38858ca5b2f29e046bcab5ec3cba4b95d86f2d

    SHA256

    c8d2d08cb479a273e55ea13af780d7b1cca6b2667f42ca7b535b0cf8819b78ff

    SHA512

    253a08cd6435864ae188607eaeeb614f1252f8878be300744a172bd95d7e5c06455314c1dfc01493701bca9ea380050ef55a9eaf96fae05275af530730cfdb69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0af302f8a31e2c7856a5a37015e54744

    SHA1

    a0508e5b381f63387fa7aecfc38880ec98ccddb0

    SHA256

    6c76b732fb5b5496dd9dd3e904e706c64b1cc9ff1c41b922bd1b0ce4e5056f2c

    SHA512

    1de6096f5d13054d31137921223251b818fe5d0ddd38d3ac24a543a832203590032fd8cf3c677bac2ede2a283df170604403e8465ef6aad327df8126ea4c1647

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F59A01A8B782D93EA6991BC172CEFFB1

    Filesize

    242B

    MD5

    b55de0089f78b62c5d6068862bd2ed5d

    SHA1

    3f0f88539fb919cf6a9aedeb41485af05d4411bc

    SHA256

    58bc98467e05f846ceb92ee5ad95119f7a3b51e8b2719f969864274d5d3cd168

    SHA512

    195f30e3d5becadc74be29672ff2e5514b391ff18032d5de6f97b997a7e95df52dc18fd07b21efc1c0b013d19a08414b40eed64e3a4517ff69476c20581d8369

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I819HQXH\b64[1].js

    Filesize

    32KB

    MD5

    f48baec69cc4dc0852d118259eff2d56

    SHA1

    e64c6e4423421da5b35700154810cb67160bc32b

    SHA256

    463d99ca5448f815a05b2d946ddae9eed3e21c335c0f4cfe7a16944e3512f76c

    SHA512

    06fdccb5d9536ab7c68355dbf49ac02ebccad5a4ea01cb62200fd67728a6d05c276403e588a5bdceacf5e671913fc65b63e8b92456ca5493dae5b5a70e4a8b37

  • C:\Users\Admin\AppData\Local\Temp\Tar2BD8.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a