Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 00:32

General

  • Target

    73c39a801c57d8b4c5a5ca61ba1c69fa_JaffaCakes118.html

  • Size

    14KB

  • MD5

    73c39a801c57d8b4c5a5ca61ba1c69fa

  • SHA1

    102182367fcb96edb646b5c673184f7b3738ad40

  • SHA256

    b7d6da4b22ea6ccbc3faace1085ed30f1f765036e6fb8c2ca02d0d0cb0c78942

  • SHA512

    c9ac87e3188eb4ab257186e69d0e26ce41b7490d5cfb216c81003ff96e374ea43d2a3180e6e2609bf36e548590525a74d0c1a504f031071e8ee564ff90c5aafe

  • SSDEEP

    384:w/Zn6Bs+8VQfZ59NQmroFnjrHFRNcmgK+u7dJlwT7/24pEF+SSsSa23JtwZP:w/Zn6Bs+8VQfZ59NQmrIjrbNjgK+u7dP

Score
6/10

Malware Config

Signatures

  • Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs
  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\73c39a801c57d8b4c5a5ca61ba1c69fa_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2320
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2320 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2552

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    a739e5dc1ab382819d1efccc721f1226

    SHA1

    407d59caee878bd5e9f721dc6e920bca22aa6696

    SHA256

    2f0935ddada31b424f9d4be0c8b2bec571bbbfa2d186ef55f926e492e3bbab92

    SHA512

    f50134a06d8ed3c7dfe7c527dbb02947736f7c9d4a5b085751a6aeed2bfcc97edf9e498a53683cdb3d69d6e0c0bbbd83ff120b164911ec8e56bff196dacd128c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8688bfe35b211bf0c519336b081e56b6

    SHA1

    c3eaf84db12f8a7b50ad03649a1a3d9f84a67b63

    SHA256

    d8130d508745a670d0a957d8580b9d5405fed51a6d17f4bce9e5459f0060d73a

    SHA512

    e81e8705f5671041c449bcd40c969a75b7e35c340bb4b6d9ab735cf3d1afbebaef4b5db4e7f1e3140e7f1c49911e02673dc5077133eb27954fd2d67b6c865b9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bbfddadf7398a8001ceef8afdf5e7a5c

    SHA1

    883b46fb21b2d274f7a031b9b5decf8252a51f7c

    SHA256

    367e43e4841f5e77bf8f394b5a62360371daa34ee787f9776be599517619ebb5

    SHA512

    ca0b09a9208a5ed8b2f7eb07f5cf6f6b8333f730e138156cc60dc9a6c7e7e335b4776bc7959fb4f7f1c8d97dcd0dad8c272a1d43f39eebd6e7580883402cd019

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82dde3da98f4478b40169a34851c0f1f

    SHA1

    7906b5ff730e7900ae5bb2d9bb0acd6b2171a6a7

    SHA256

    dad3af0efb6681670d9fcc760f6a6024c8550e3967c121c4239bca5cfbe0ef5d

    SHA512

    eebcd666dea1e305901d9b9322349393d75119c1d670c7b6f58133d00c66c3af09f4a95275393299e3610c8f8da8c3c6a8f62a9b44b5d21e510e2a72c5f1da2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a55220dac788ff0758cbdc9512dfba9

    SHA1

    2aa20ac303a5418d340a62404512d4a513cbba43

    SHA256

    ca43ff5cf389c67407a3dbec684f0376dc7179e890238a3b4fc11026a930c90d

    SHA512

    ea3b26fc83e84ee684914c044189c882aca867793fd3c66064ce07bb3ac229cdda01575f7380eb3b8edd675bd6820e0940d4ff7142a84e4156d27d23bc927e78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5a03fb6c4231cb6f06485c5768cfd9a

    SHA1

    f63416bcbfd53531b7459f528c497c1e9de59fad

    SHA256

    78b175625129c76153417edcca0f375db91ec5d2272feac0e04a602a048debdc

    SHA512

    d8fb0848e000a02d031ce4e56fc6b214b63af32058ab21d8b16814bdda765ebf2a369baccc906fabbda273b91aaa1cb8b4f367c2456cf973eb922f9058c12f67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e4b9a52981c91b4c37830e6c7f1d586

    SHA1

    9d4dd7cf03207d21f8ca4b36ffdbc9e6dc0de795

    SHA256

    de5c742c6115b187e0766113d19139ac0cdd6ff7424b41ef6e3ef5d4ce4959e7

    SHA512

    9521f0675d6bf769027272f3469a309a541380cc4e52bb0a89149de9604f2f127d6f057268bbe75659bb4a8a11feca8a5cf25817b1e04451c629d13b8dc7300b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f7283593ce8d0833ff926c22b80ecc9

    SHA1

    60efc0baf9b677cf65b5b0b2d6fb9a84bc165553

    SHA256

    1bc4972faaaefbfce2303b4b94284b43e00329827257ccb42e3e738851073651

    SHA512

    d83269cb57ed3577d24d4a898ecdad51cac2b2cddf127c97abc1561ced35acee44bbe910845cd51545b11b0cfecaeb37b2e7efa954d7ab38c80b3323842eb57a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    980a11306a6ba168af0867e9023591aa

    SHA1

    0c0659a4990f9b47a880c6baefc85ee1ec5db393

    SHA256

    41069ef9ae796d626cade03b91363d1263c28393157ee1e05eff7488c33d2b32

    SHA512

    0dd887736bb8a86e0fd31b695296132bdbfb7e3d565ea4258260f8ccaff63a6f44d6abc552131aef57cf451cfee38ba7bc69dc3433793bb099893fa53fae6d4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a92997cd52bb225b72ff3a741147316c

    SHA1

    4f95fca9b6dce9d11c8a17232dbdd97ef75096f2

    SHA256

    1e5bd4f261169a2d3c73da2c62af3bc37f942db2994e7d32953c785567f82664

    SHA512

    9120e5a6a5a48e4fb5ec4d8c33b7e187a359fd251e454632e55647840d0ce78e4db13ae04cdf1b9d26f27cd35661b76ba4c87a3b8b72ba1c4014232eaeffa946

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f4f71ed345d411e46fff475973c88ab

    SHA1

    5c573a117657b1c4d639ae98380508506352774e

    SHA256

    f282f4092c7e1e8ee1e3ab646d95ac939aed181f95f739a56dcba5084d4a78fe

    SHA512

    165fe6c939e6c8c7cb3c83cb62f563b0d07d922f9332c20767510e3665ade6020d6f7b814a9b2ae5b5805bc432ecefc8636d566903524cd6ef866ba4b9f30a24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f91a4461fcd0b09469b24674a5a717f

    SHA1

    435afd31bd67e29b6d3f9577bb2f37da9c29050b

    SHA256

    7d9d34510c919a0956885b3de7fdd1a1cc9db5499a319f2fbe7dfc4fa3e2ccdd

    SHA512

    b957ed0f6fa1e68a06b17131cbb9aaffe345696889ffc7a7c8f94d137a252983d7320abcc34282db7d73c5290d2def823d294835611c3caf99ec918f1ae75bb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0ca23716bc9c830d732473fe2629686

    SHA1

    71153169dbd7fe202422512b5ba37e1f1649b469

    SHA256

    bc22b7a94d1a2761b04b5c66271a941adbcbfb0d2a041b0a6ef62e099a370d64

    SHA512

    69d30475a1b80708e61269d936d86b760554618202fd7663e94559f24982cc265823430ad14af843f6e172fee67672532353068c7c313b64368c451f158f04c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31491868fa4f8d2dc1a4ecf55f1910ce

    SHA1

    900415cce32856c86747c0fe87dd2003e23c56d7

    SHA256

    9daae25f40d26569e9d4a866d9d3ff43e8cbf9aa9952fdb9d319b75275ec894f

    SHA512

    89122b066022bf042f3944ca0d9f187f21e862ce86a469685f2be35dff062e534f885d822dee879671df4d5d0226e9bc7116a0a7a4fee58627c7f42778191aab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b484e2f1ca463bd04e6019f002811d26

    SHA1

    8dcfdb6c9d234153d5f0a72561739d253ef06e6c

    SHA256

    eb5e01d9d132fc125ff8c4f107721c47ab40de19f6f3f238b85fd336c095eccb

    SHA512

    8408129db78eba7caec0a71444a7c4d15b64ff233fad6cc11472c55f64acf34cb229466083be5de41c0c02b675aaa517d9042fd12c3637d1fecf6e29dd6cbeee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04026b6bc96503db1699e9a40b2430a1

    SHA1

    d0cb55252d288cb816ec517dca59bf47707b7345

    SHA256

    80404a2fab4d40f9705e479dbaa2f3b36c9b63ae4b50b76f9256804f858225c3

    SHA512

    24fe7e9dd6502bdd32e4de21828543de222de693044e9cd84d0bb200c1a591fa439403df3f0be440bcab8336d60a3dd8a9e9c040e5efc02b554c505c3bb8f7bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    428b7bba6d51d823bd769df7519ba5b4

    SHA1

    97f8b1adb73cbf0d50013f6149b2d64001563aa0

    SHA256

    afe85913e00b47fad4e8e670788d16117811f3c81b25de6d57f52e13af6c3608

    SHA512

    7321a7acc9fa8032c28652e311287f04807e64f49ab1182f1d8d70c8fd5acc60699cedb92420bcb3d28afd879ccc5ef66e56c7c398c010df6be94d569f61b41c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5186a510cae5d1868049895c1137501

    SHA1

    52b003192ed8b3f55a78daa8908a118bd1244998

    SHA256

    30f984412f0dada669ab0b8bc4ad3680ec128c34a8966dfaaaa5fed4e1e8da65

    SHA512

    0a3d838e1087856ac36c651dce0dab7077102e7968e78911717a9afd42b432ec17ba29ebff70f9641cfcf98fa26bc8a59d40f3f171fc9d537b4f2dd30db258ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f38b72c9e5633741da983c05a58d4b8

    SHA1

    cd9873680f6b62df6d796bfc8f43860f0df08b69

    SHA256

    f9f17930252bb3ab5ea8eb99aa8fee16008cb96c9f87ededa9f7f0e8a872f0d0

    SHA512

    5d1389983ab5671906c9d9785a297c0c8b8e9a9acbd7ed10ab121a06e07857e39be640ab2e04e3544978893eea00c05670a12739b545e0e089a487ca023db30b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2227bb8c99240e7566e980b4bce48463

    SHA1

    65e767f43473270702402fe6de1da82fed5aacc5

    SHA256

    bcb3915ff7d8433ab04f9f90fcd0422c3b4294266e35dc00ae99edad282e743a

    SHA512

    56126c7c4636fdca859423b9fa3fde1294d97e27dc3125e58b8c47382f3ea3934afd1b4667fb1519d1bb929d497d5319e7173da754c2f31b0265aca312be9aca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab4aa267eb646878ca9db88b8b798f85

    SHA1

    47a8c33a584882ed22b355e8a61721d9653397fa

    SHA256

    8b2725c9faba4012f5fdb01129be915f38f707cf4218a01ca12698a72f786af0

    SHA512

    690ba748142f0294087eb0c9879540cf0f2465140b1155148bb46482f36e1c7caca0d1feab9e963acf3d3d8cfd2e9c2adf6720fffe0c2106eb4e9e9939dd66ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    a3517e4e2f0c195bf5976688dad7043d

    SHA1

    9949498b936b32de437ea56c77d280d365014370

    SHA256

    838331552c8b36b36c5b1fe8a9ad9f5c468dba735c3303ca23c62754f93beba4

    SHA512

    6087a4c4c3febb72f82a6b39efa91430dc349e2e3c515f8d9bfdf26ba4a73870f21e2fba6ddc6441afc9c6162d0c6fa996efd434b38d8f10d47f8b04c9d2cf05

  • C:\Users\Admin\AppData\Local\Temp\Cab14AB.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1629.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a