Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 14:10

General

  • Target

    75bdb28c5d3a2a4a03d7df214277302e_JaffaCakes118.html

  • Size

    16KB

  • MD5

    75bdb28c5d3a2a4a03d7df214277302e

  • SHA1

    78ed6f6bdab53b1534dfec0f123f4f542a3f2494

  • SHA256

    396b8ef3ceade3bafdcbf364a09131731ceb48573a9f2dfa0a516869181117f2

  • SHA512

    efd19e60d4198ba55d5b55a20d3ce17102aa559eff08f789d425be46ef9664bf91efdab72cdc79278adbdd434232f394a197044feb9cdaf0293728af06ffcbeb

  • SSDEEP

    384:ulOREuF0xWEkaSuDa0wTWagCqzRhP+wIAVu:ulOREe0xWEkaxDa0wGVhP+Hj

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\75bdb28c5d3a2a4a03d7df214277302e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2932
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2932 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2640

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    498e483dc2710e009138bfbf5ff63514

    SHA1

    e9f5fdc3a8ade1d77e2a78b3e7a307a3c0265649

    SHA256

    1c9f7e89963ecfdcf601f367e652323d094688aa3030a6ff847a68b0fdc45964

    SHA512

    b72a6e1fb2c089a79d518809b32b57f768c4e0f40027efe105f1caa4ea657e9899891e7447fa4414c59198fd53f65f45f208dd452292a4f521a9163020e536c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4c13cc83127c60c658dca25f0b05253

    SHA1

    454cde9894f647cae85ebc2628facba63e915250

    SHA256

    b2ed77d3690772fcaf3ee8376a6494aa0d9933671ba77e7afa6ce3361c410269

    SHA512

    d32e781be48e47ad30068f61e78e4fe4971f0aaef9e7ca79f4a9d5a0efa28f5806e5a6f3c159d43651906009e4d2bf634027b8ef13206273ca62bc83333dbd42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a3283f4f320454d15be9f9d10b40ab2

    SHA1

    b74467b05aa13e02ab0898cb71f2c4773107d760

    SHA256

    11eba43a3918644c94427db1f9f45594c0c0864fe46d82643996aa5a664f49fa

    SHA512

    201927c65a7140399b650479a355e6b699ab013bc38ae36bd4afa7a9769892e20c84c03b3adab37bc2998e49710900e533ee3f6e70d3f96563cdbb61a2885892

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8ce452043fec81cbeabb82c6a0e3db2

    SHA1

    eebb05f97da48b90f12fe44e1959575ce17c33de

    SHA256

    bff5bd77769ec3c82e00e7ac346de4a5fc0bb777d043a2ede0d9d0ba219f4607

    SHA512

    e0dc3c3c82758eff84f0dfb916577af9e21b755a7c48e5fc77c279d1e816cae612a04515ae60d0df6cd3755726df86adc4d86b89fbfabcc0bde34d804deb990d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c8c6c8318bb1eb10eaa095a64730449

    SHA1

    1ba69a7c4d1f26509ea27012b3e5e73351cf4883

    SHA256

    130749d0cb7b4bd9bf0c90ea879c3b799c0e7fe7160a037cbb91530ad52b5725

    SHA512

    48f0c728f79bf3d10b38848c56813667bf54278b3e28da7f4ba9d3ad29a85043b7ffb20b4316a8291b58d0df59c796371754d769fa87a69cd29d2d02884db2d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9b46b799c6df99bedcafd5a5c84942f

    SHA1

    e9586220a6f1bc6f6970581ebf742b2ba5a33fce

    SHA256

    f680ece571eb1acd77f0a2d1aa406e5790c5bc2a84d5356dc7399f44e089b646

    SHA512

    ad6463a9611e41a11f4defa44e0b287944d854de9480fbc4d60dc970839a174f8444abf9ee8aeb1c412545dcc334fbc931251be71f62813b654a66d1364d1651

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d45db265b63b391bb2d1e63be968c1f3

    SHA1

    e665e4ad9574432c7787166ee4b067ab96576e06

    SHA256

    c2dfbc4f759fe7e9328b33e77840bc5555e3ee40b83e70fd68b32f75da43e233

    SHA512

    6cd073a83ebaf35670f95c85d5c9c422c367973d66c2bf79615e14b3e21cac3aed60d6da58e778cffa7ecdc6d913eb6289209d8c535c1179c50a2d6818cb13c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a62faed05a5ab15e05ab817e2f87058

    SHA1

    aeb6bf0838fccb4ed52bdd2dd41e79f7bbe7cf56

    SHA256

    7a55a0151c175bb4ecbbcf16b44bb78c1ac9d9dcd23b514479e41497b389c371

    SHA512

    64fe1d7d1df662b05346b929590be0cc3fecffa62b840da1ab90b733c9cc787f87d88399e3e50ac969d14fc5cfc04f8690c3f3df33a41a7916d0f686bb27ae08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c07c588681c436b319e1aab4893444b

    SHA1

    1f6f9c34ff1180ed58dd552ed454b7fec60b9740

    SHA256

    36940979b4589e7f9a26aecc16e941c26aab354f4189ea5288fa5de90640617d

    SHA512

    901ad41d4702fafe7d0010ba048fb171485633559d4a91de2fea44a9d8628aff664c165112c45009cf613232c6fb020fc4c5ad719a4df9995cb1dcecbee0ebad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41bf57f0349bd11fd8be6798d248551d

    SHA1

    fa48e9181d9a308dab4044b9db8b88ee65efde73

    SHA256

    0181fe5667a2dfbecbf832d26ffd08c3f2df672a8f98249678780067a657e170

    SHA512

    1de2219bf12777e86cb1dd98cdd5f287126cc11008be64007efa329cecc30f82f1900d8e9c9e78cead465ab6df09a2ca57ef449fbb4a1713d202011fb2e2a209

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71734e1641efb3187bd8a791b63bbb08

    SHA1

    21ce3421fb0eb1c971974251754bed94050057e6

    SHA256

    9df431ddb0ca4ca668c9c3567c24f5ef9b0eb82bf29581f0563c91c2e43de79e

    SHA512

    ed95ee4b78feb875819e838647f36cfeadbf29916192e2d67022fe213e74b8602707d67d184b87d49bbe09930e9bd785c9e73c4a0f4163013b757729dc439355

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c85d3733a6bd5162003dcdf8ca8b4d4

    SHA1

    eeb9e3f7fd9d798650fe7c1194624ab3066eac42

    SHA256

    dc9f8e0404306759cedfa83d8773a0505e01dc300b59aff05ab886c73135c6c5

    SHA512

    aa9a48d8658cba0c58ee05123fe67e84845125408c2c2d15582d5516d570f502b7ba01334f479a6b249481e26ff41aa537246987c3e282a0da717f0c90f1e4aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d015b3cdbb2342d8e8d6ef05ac705e4

    SHA1

    ade42e88b54967a8b57c002e15c149da28d92457

    SHA256

    be3edcef8c9869e8793d41ee217157aefbcb09290f5eda8434181d57e3737215

    SHA512

    abf248fa2d4aa835e01a9c5944ad9e69e71267215cc2e2d82e83aa7234d35557dff7d7f4f8d53fd3d6d0b020643ea237d5a380694e7eeda373ee4fa43cc7b1ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8dedde4d6cbcd4fefedb367a9d2ab1d

    SHA1

    9523b950c3b79ec80e2656612f5164d280df5d66

    SHA256

    30f1e7a5e504e46670c418a1de572ceb7984cc7645a20df2998545e42f5cc819

    SHA512

    7b70b88b3815a7b153b12cd4c7187959e2067be0f5f227d553d67271759d022110b9baf077b316e51b0543ea5b7b9e37c292ef25a3b439b87a48f3bad1e83527

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b7805656b4548db2a0e98b806402573

    SHA1

    5756e4e811b7aedaaa391f916a91623570b150f2

    SHA256

    c0fc41cc418be1a3edef3a62a0ae0e37ac89c199d0e7abf0fb0b0b0dcef85adb

    SHA512

    f6552ddafd908e788d31bb0b9477bb4006994058e0d071b630ce7a08340e28dc78f5a9824a7a7c1fd40b62f17a9839a8bbdfdbeeffb2fe2cdb74a71f3be92572

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd73387feff00ab263c02498404cfa4b

    SHA1

    25105179def672cf31924ebb309242cf869ef5e0

    SHA256

    4e4652f29ab290a748cbc1e8f5e7a0739b8c83d12e629918fcf7eb452f813ac2

    SHA512

    3b5e51a4a61b1c56194364a2d22386dc64bb7cdd8622c521b5748f9f1115b7a277d162808cc8c4296d1cccfe9053fb1a458272ac69bfb63a64c9c8983b441fc9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a0570799c6b61ff37d4df6554a461ac

    SHA1

    320ef46b48b3a7725f58944ef9d61a1f250cc62b

    SHA256

    4189fe074812146acf6c6e0671c2d0cf9d98a1708c0ab9e982f5fae2180cb509

    SHA512

    e7e5dd331f46e524c8bd3a673f9fd4346b6f6a124761615fb02a85a6ec940c1bcf9ff451aa76cb789945d1c39c607a902f257a5b52c6e0d99dca5e69d14a5580

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9674e2e1f36fb3167547b2ba4129de8

    SHA1

    3268ec18b4ee27625db7977db398286220aa480e

    SHA256

    200f7d193ca446197d7e56599c2736638f24c45ec4116fd4c2cb3c2635208c7c

    SHA512

    7cc25c31473ac28d36e7dd61dd24be9b9b63b5f7d7635eb8361759a6678d1dc94a80798d4fc0c2d83f20eda5da10260e8fe99d98e040f993e4c157e3ab7bcacb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a37c426c67437d0ce5411e9ceaac2c1a

    SHA1

    07315c857807a1358ec0b484eb78395a7841336c

    SHA256

    cd5645cd7470bdff5b9632c944c9c64fdb211fa930289d83f7c0aacc9b7b1c78

    SHA512

    2004cbf5be3467f8b133bd6ba112cf689c9a13bd1673b7c6f34ebb8dd6f9a03d26aab0a0d15280b0ce0fc7d6d9e29564622318f1148154b9c97ecd69e4337c53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d4244c36f82bb19d58c2d888e219ff3

    SHA1

    e92108e32e37f4459470edac001ef54f39c8c00a

    SHA256

    2e672cfaa58263664813fde5008c11873611ccafa826bcfc0f41a40d6969bfe8

    SHA512

    b13b47e05d321a5f4cf4863b2bb93fd3493087976bba2c6bce685ba01e660396f411f545141f14b1814f6d762b7b03107f6865e31178c2af22333cb0d6c86d1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6794cd8ebdde728b99aa28ba9ec717be

    SHA1

    c6d7bf09328716a1e4d56c854bb198b9e9a94c76

    SHA256

    0eb34981f365398ce7e63fac4254f5ce2b53950f63e3bad3ad19b2714c6595dc

    SHA512

    76405de806897b69758eab20083816d5e027bffd9f008fde0b549ce66584514df3ce390ab138c5a93cb9cffc005190880d9adfb3e05fcb1efd6554284dee140e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3628c14d6b6e4135e42b8da53b3471d

    SHA1

    b935912df16c6222f7aada6834158d3c772f4923

    SHA256

    3a99c0fb8ed11aa11506a30b224b4e0cdcd4baa924e0d40b9b18fcca8c5d1244

    SHA512

    736423ee0e3c56f6f16ae1fe3ba4804dc280c0555cefb755836585818d39eb0fd66e3fb0307f9e1fba92b07e59deda3c8bc93551b9b176b47ad859498ad907b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    c2f5c761f6fd901ec46d1d374b5bcf35

    SHA1

    622fca8140ab2cca084a370620e4171ab7508b7f

    SHA256

    0016aa8c1ae050f1af7e127e5dbd2a6308951fd60896852b269789cab142fdd9

    SHA512

    72be868307083206d94e7101af63838c3a62fa318b87216d38a7e3afc4f3c013483ede0100a971f35a2c13fea40de895c7f4c5ca563a569ea5c4e85f64d28d30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3NPBB818\cb=gapi[1].js

    Filesize

    64KB

    MD5

    63e5a0b45632b3dde3694ffcaf0e3f7a

    SHA1

    923736d0cdc308331d5cfaa0ea159bfedc83d53f

    SHA256

    889109910477919b3457416e7764bcd0add19fd959848253026125c7c35c43db

    SHA512

    5b886c4b5122d61f0209ede748aa84445c9388cf38813316c41b3dbd2308216e88394d9a45cfc27113c0cf3bc93b9c37d808f6d3c67888244c176ee095d42259

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B1014REI\3604799710-postmessagerelay[1].js

    Filesize

    11KB

    MD5

    40aaadf2a7451d276b940cddefb2d0ed

    SHA1

    b2fc8129a4f5e5a0c8cb631218f40a4230444d9e

    SHA256

    4b515a19e688085b55f51f1eda7bc3e51404e8f59b64652e094994baf7be28f2

    SHA512

    6f66544481257ff36cda85da81960a848ebcf86c2eb7bbe685c9b6a0e91bca9fc9879c4844315c90afd9158f1d54398f0f1d650d50204e77692e48b39a038d50

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EDQW9R5V\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    23a7ab8d8ba33d255e61be9fc36b1d16

    SHA1

    042d8431d552c81f4e504644ac88adce7bf2b76f

    SHA256

    127ffe5850ed564a98f7ac65c81f0d71c163ea45df74f130841f78d4ac5afad5

    SHA512

    e7c5314731e0b8a54ab1459d7199b36fc25cd0367bc146f5287d3850bd9fe67ba60017d79c97ea8d9a91cd639f2bc2253096ce826277e7088f8abfe6f0534b63

  • C:\Users\Admin\AppData\Local\Temp\Cab2D58.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2E97.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a