Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 20:18

General

  • Target

    7a64ff7c5a98b7ef4aaac4ec8ada8bd1_JaffaCakes118.html

  • Size

    69KB

  • MD5

    7a64ff7c5a98b7ef4aaac4ec8ada8bd1

  • SHA1

    64026e3fec3f04c7ba50a1f7c17bf3facc41c6c2

  • SHA256

    154048a24a475b7e3590cf6f61c5453780c84cd89126a35a2d21f13363d4532e

  • SHA512

    6c9fbf458f8055f7ad790569991d3db83c64a99689585a4b9288d0b4f267323c97159968d24c33f4d66485c63d76e1f9834cfce7b4bfd163f79d1be303117284

  • SSDEEP

    1536:USO810mmF+dsu2bVLHnFfSdhqVvmg0GAUcLWJKKlt:UtRF+dsu2bVLHnFfSdhqJmgRAU0W8Klt

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7a64ff7c5a98b7ef4aaac4ec8ada8bd1_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2908
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2908 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2760

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    e7e25a7c342a2b782db207545eae3405

    SHA1

    44b1e50f06a37530c2f835be3fb98db40872eda7

    SHA256

    6b4a89d18a5b093a0e4f0b4131ba454a10e09bec471c5cbf173c4003e902bb1e

    SHA512

    d18a4092f3900d5512a38588e42aa88d1244ea5b9bccb718ccd17609745eaf92155f74dc19e4a10e1aab193ef8d3421d59a2ff0e79b3cae9e0b6a2885c8c4841

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    aaceeb8f0a641ece86728b19390a8939

    SHA1

    3425b17760c11f70d3200ba6249d8ccc522ef95c

    SHA256

    c3c03c3aedfc6d8404398efbdee58272f184aca048ff3d50628718db49d38274

    SHA512

    9f9dbe8d8758ca84117c2a921b009687712576f6015ec4645a90aa961da7f1a4e8aba7fa7d256de0d6017e672fd5dd98aa78e7259e4d0c43ad3ed74d5b00367a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db55a0075c2c9d847e3e45d2a04dc13a

    SHA1

    73de4e833216f7666006fe455a7b37b9f1d7fb95

    SHA256

    29ab67800ad9070b81bbab31d6fae913a7d6b12842261ce0cc0f7f87a14d935e

    SHA512

    53301b261701c7e2605e3728f6881e174e043077412d65855fd4cce947ab91054eb7817c982bae01a22a1de76321b37c35abc1fe011f923d7ac3c4438d034987

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7eb4945b8cf97150284d167ad72afe3a

    SHA1

    5a0c5dba6c112afeec377099d895f0a06cb1eaa9

    SHA256

    bce12a3d7bc3edea527bd909f4a94df723965626cfbc8c2f98c8bcc276d0b3e6

    SHA512

    c7740694e0d6bdde10b43aa17b7e02fc4daea4f4fd79344df2e587232d1d5e5d63761a86e2497f1591f00985c04793d95370b58fa727f34355b62ee90ef83c5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d7cb1dd3a60650b55fc867483da7ba9

    SHA1

    35568b05ddedba9734abc9460f088ce3ff27f306

    SHA256

    779a244bbdacd34adb8ee9e94141e6e50dac72091fe1b76f04e10e844fadfcaa

    SHA512

    f9cc0d15847005b06351af27454d05739e553982c8b3b1035887fa6e1b61fb65cfb5e2c2e083ce7868332baf86054f6c67314364761b0654aa9a2e5432020597

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a90e0284e4d0d5e56be57ab10dde3b27

    SHA1

    b7d16967665b603d54c4625009027a692b1207ec

    SHA256

    09454c5a36bdc5a002523c5567cb2e440bf5bb884b5e9c3dd2e0c55ef94730c2

    SHA512

    e48032ff4b2df922ef0563bfe6dae075d3f62330dd718d64f0d883663458575e7b2baa09e9984061410d149add97e5ee30c3954a39a65e86954044486f646c43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55a3c06f31b6fa6f636e5d36fb3cde16

    SHA1

    3b6a734c1f44d3fd810bb86c19faf77cb9571ebb

    SHA256

    1c7440d06d789da8ca59cad378ddb16bb7d39392183e1f3603648219ce6aa410

    SHA512

    0cc2e38d4370afe3f3c30d899fae4d55bb0f1b32a3e1e5179a309a6397fc6b63ece951ddf17399d46c6e91840eb8220692d6abdbb7c118b381fe990d87c79065

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    448be680b9638c6ee4296fc8ed20a3d2

    SHA1

    dd2f570d8061d17081f52c3306e23dd6cba17426

    SHA256

    6bfa4893989f6b618c8b307839c1eddfbbe5e117bb1d69f6a2c67dab77c693d6

    SHA512

    4111bfdd480e561751ac21bea8e2aeeb94d23b58048f3cd14ae0118817be1ccfea6512813fe4a8287d16c8d40364ffc06af2302df4d300a46eaf6a6723a47a24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2f8cb766351729d01c7b93356199c16e

    SHA1

    b76c538b8d824215c443cceeb9b121635c389df9

    SHA256

    f08aa4252cbb33fd25f3252b1f79061114c49b20b586c0563316d441bcfdd0bd

    SHA512

    0dcf317d0defef66b5481e98215fd7d3f76abc15f9e73e01b3b6d75f923e0391ea3f50c5f6f40f09f5b2a6e6a53a0d449a35f9ce46baf5ec9fbcc9d987d4cf06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e8f61632b244569df884cbfcb85d3db

    SHA1

    660c489b6199a604ec26124f2488b65a23294e95

    SHA256

    126009b785d960b6537cc1fe845e440dce438abcf970b2a893bd06fc5972ff2f

    SHA512

    48b7946d1eb4028aa3ce2ae3e79a3b145ed4f8beb8da9c0aa95270024003899fb111dd9898d59d144a943afae4faf54ebe0d1f9600ab02abd9e8c0c62847bd7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    06f052d6b007b391a414b39deb63b141

    SHA1

    94227a3a1f3cb13d3e0ddc6f2ea695090f3309b3

    SHA256

    eb8f04d6772371f7c2e2129019859bc8121bdbdd7b64fb71f63e5f056e146df7

    SHA512

    6a067da9a13211d4546668579608943da2ca640b68eed98599dc5664b827fa0da8a7df4eb8e755fadcdc3c70aa3d32dc36ccbfb4d9ef5c22a6159fac8c47fa2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b66bca29e19135566a87e88fdd86b25

    SHA1

    acd9cbdeed648b1d636b3eadda3486303f95c4c8

    SHA256

    40e6c7b24e955418d6d1666ad968b81d6e2c871ce91c90e48bca5cecf7797702

    SHA512

    0a738c0faf5493429ae2d246767e1155215ae72b719f5f6920588926d77deca5e9b86e4a774bd77bee39a6e7bf3942cc03ead717a018de2113c17eaced947c5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03074a8ed0d252113213fde99f9a5e4d

    SHA1

    a70462931aef39e1c522a886848e95918b30a61d

    SHA256

    604a9874a3b2fd340e00369f477d236f478de6605c38a9545df8bc2f2e664bc1

    SHA512

    b2486c9ab91093c36193a187dbeb4c1e51f753842d3987fc590373649e8e316329eb4d240c9a49c1cc5df0bebf17346e70be63a03d9e8cc35222d0a773733051

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    368d9f94b5ca5d3f5f969f00c2ce21d5

    SHA1

    e0a806d0038514c75e32284b20f54e8dc6e4560c

    SHA256

    da826dd43433cfab549560709933e22007b63f58a39a8d88c6564661abe7d582

    SHA512

    3aaedb7c89053d440c9330c1814440f940b35560fb5a93d5c9cd6d664f8bf682debceb3fbe5374ce760a1bd287243b59597708aa66340e76b423d5ae9fbbf845

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a779c867cc0447d939f736f0143ced0f

    SHA1

    398848d7622abfb5a848827f4ed3380ceee2e81b

    SHA256

    7d00b3f3eef59e4387318481fb08f56df63a1794a56c40b51e96172cbd54116b

    SHA512

    71559311a6d161c01e7c1cd90386520dbff434f42a5e2a891515341e8cffaae7e45a643b5e752e4197c0062c189ccf2ef63c9d8fb874ca41bcb0bb5edf437361

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf48feaa3257c81a4465be1f5ba31ef2

    SHA1

    7a822dcb1886f04e7db80ddcf961cba1806be07e

    SHA256

    1a1018a774984af9b4c90cffaf648667718a273579b1c39bb5a8393e716d501e

    SHA512

    703011f74c724e363e47b48aafcff7d4f9e696d6c6e6ef13672f499896a83349eaaba62fc3c38bafdd7a1efb85906430aa5d57237ac2bdee99201b23deb0a826

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc12a908d74b93b0631abadbd1751842

    SHA1

    b16cba0a7c1b2559f1277f97756c9a4f67bf639d

    SHA256

    e721899652cb25075d002a0bd019a4a40c63d0cb625647654823ea8eddee0611

    SHA512

    e24a997022612de126fb9afea20310ac65cc7227b4b47adf84daecb57e5d08783dc008fe6382eb7eb2d7b700023516abd147789707a1efd9d4be9b61993804d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    ed7ef0cf9241918678963ac97d3ac4c8

    SHA1

    767dbb2b4eaf7ff08045d5dcb4ce7f3e7581276e

    SHA256

    01960a7dd2bc14cb18a186a2ab174b7e9c678b93ed87da9eb607a2aa468d1ca5

    SHA512

    113eba634bf8f35285a4bc0477c61157221fc2f5fc490395040a8b340fc4ca3e1d1b1ae9c828b6adf73a2cbf4b4f8aa50ec42d96c365f46559ee8ea82eb26743

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    2ee6d5ac4df1270d3a95d0b2010a2c73

    SHA1

    0285c585932daf23e7531093c4db13dd7f07da60

    SHA256

    79825cc6b1b4ea191d4e4d6e43c9d585ce409a8e1c63594e2d77ba6c74e3ef09

    SHA512

    92102842c00b6ba7ddd0d8e9ac490fce4ca5efd65afa77cf5fb793080e00f6a739a6bbc291154bdacf326504f975993d04b07efb747724565c68ab3db00495aa

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L9PN2QMY\cb=gapi[2].js

    Filesize

    133KB

    MD5

    4d1bd282f5a3799d4e2880cf69af9269

    SHA1

    2ede61be138a7beaa7d6214aa278479dce258adb

    SHA256

    5e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693

    SHA512

    615556b06959aae4229b228cd023f15526256311b5e06dc3c1b122dcbe1ff2f01863e09f5b86f600bcee885f180b5148e7813fde76d877b3e4a114a73169c349

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U8A9A2DI\plusone[1].js

    Filesize

    54KB

    MD5

    fb86282646c76d835cd2e6c49b8625f7

    SHA1

    d1b33142b0ce10c3e883e4799dcb0a2f9ddaa3d0

    SHA256

    638374c6c6251af66fe3f5018eb3ff62b47df830a0137afb51e36ac3279d8109

    SHA512

    07dff3229f08df2d213f24f62a4610f2736b3d1092599b8fc27602330aafbb5bd1cd9039ffee7f76958f4b75796bb75dd7cd483eaa278c9902e712c256a9b7b9

  • C:\Users\Admin\AppData\Local\Temp\CabE5DD.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\CabE6EB.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarE5F0.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\TarE71E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a