Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    28/05/2024, 23:07

General

  • Target

    7eb42468b79c504343e35940a3f03489_JaffaCakes118.html

  • Size

    15KB

  • MD5

    7eb42468b79c504343e35940a3f03489

  • SHA1

    b0e27950237e970f95777f0ee575d90c8b9a570a

  • SHA256

    0545005dd689558a57f566eeb044472808f4023c99a93527ace1993fdad18ef1

  • SHA512

    762ca39641892292dbb1586e7a6f94a41c1755ebb2b37ba5fa01c9688c3b1a58a08afa5464617b478c4a44f2c543939889fda769b9abe6de3d2d3ba6a8d5914a

  • SSDEEP

    192:SIBoUyMNOEn8oujUo4KkWqlhDxRkE7/UOGMIRoCqlpPS4QYOSEGbb8aEOCOgiYZv:SIBQoayKk1BQ6pPdQH0wacZMiR

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7eb42468b79c504343e35940a3f03489_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2420
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2420 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2332

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5985b6ad5dace38ab85e307c8567173e

    SHA1

    4cce9a737ee4805fb9436cf065b29ef4262ef938

    SHA256

    4f84eca4124191a420c2363d678371bc61af1a9b20dcaca4a6bad2cc3210dbe0

    SHA512

    ba50c59198e619dd4a59567dcb68f792e33ca087d3e66fb87e2fa2015090b8388850e995556c92ff3cfaf030bc25324f0cb61c75797b63d0d679423b04806460

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    04d8e256ea4b495716fd51002cb83192

    SHA1

    717a7190bcdab0bacc94f59dd06cfe966e547a1a

    SHA256

    484441a4244a250811633e71426815392d7cf5bf31e74bde0bb3b0638bc2b80a

    SHA512

    192877b242b27ea127fa7f9e0ab2d41cd43e471ba989195f2f9604ae77d6689c2ac245eccde8f8b307d226f15bf0b1e070dac3df15af821adada7d2a05a91a36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61628a9584e6672b4f9d8c56da95582a

    SHA1

    82f87dc4c483f32c005a035bea77bafccfdbd8a0

    SHA256

    b822e21fc608839425463be7a6934de89ab01a5d4d87181fe528f8c99c3d9360

    SHA512

    82e2e866156e74558de5e1f9b14cb3d345e80311669e97976f29505078e00048451c0ff6e83e147359ee191d94694ebfa147f763d52801d72bab872335ec17ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    81b86503375c135e54f686b3d961704e

    SHA1

    93eb89c9770e597a4f04b9d9fd95f1e84bff8af2

    SHA256

    d8b969d6621c9fc43ff8f655dbc9bc3f340f96a25fd923dc4424239d3c219245

    SHA512

    268d1aac96efc5efc60c370106f792d4a205a990e092ec089f2d31b3369c62849254c2fca79a7fdaad8da651ac019653f60ed418b2b4bd741c5c84c3e6962ecf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    300bca2563606728392e3f1cc560803e

    SHA1

    e7cb5dec3165a1c8328da8d251f9b2e70cffdebf

    SHA256

    8052e99e938b0e28efb7d8b93342558457b7f981f44c15375f5e3fb068bb4f4a

    SHA512

    881957ff8ab2c8d78e2e9e4592b3ce2f1a7c3f615941419afc616afc0d3fbb1114f38fae1894226231d82634e285561f9644c50b3fe5f15a03621d4cc32e3fd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3aeeda65d16c4aa71c6a177051dff22c

    SHA1

    2d885b3b1df7c64616428980e4500d33c1ff97a6

    SHA256

    e6c62d0c350c4f7821ac7fc9ce018930aed018031131b8a9f8a039c257efa862

    SHA512

    24a5f85c83c9b86328c959db652663a9056cd006374503f358c867a5334a03c09cdcfee1472249381f31d24be6e90ffd77dd642bcc08a0ecbab8a219f10e44ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e04a865aa78ad2c1914bb296f7a2f35

    SHA1

    500ab80813e91301dfa9e241e71b2da8e6983f82

    SHA256

    a79174a0166d593e56e92db9c7dd44f5e9f4b10a8769ea88b08b1fc62e06f85e

    SHA512

    e990016c73ace1f9071a313a18cbcfeedd2284020124e973d663ed0b3f8c86e43d996115251e270b3e7586f3a2e0cd399565b4d0f129865c0e04fd74b4181670

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f63df34ba543b6247c903601fd6c6e8

    SHA1

    2a6e004adddfc6042ead24971b615fb1daa51938

    SHA256

    b03c1bdc5c98f43d7f3bf919b87de86c7e773107680c6730da481ef29ad77276

    SHA512

    dab62a74f30c1d58e903e3c1fd5ee72aa0e16b9843e5f20c2410931cdbbf5cc61743d3e1a43181587cefd6bc9ff593dbc492346357b342ab5ef5b5938ad7f2ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4124869213772dc880ba9afc02c9e615

    SHA1

    51f6972631fadbfc8f6e9636351f0d88c9ccb3df

    SHA256

    b89d9715c663e71df7b66cef401b15f70f4c90e9e5a11b5c815c17d26f567014

    SHA512

    addb477e7d69300b4343c97b93a578bdd95923f94a848fc3a996321faf40865a67c0de5372fcb89583407c62a6f89bd2629cd748e5408186618d05da1868c2f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a21ebc42299ac99f60ab2eb8925a3a5

    SHA1

    ec13e9a9356bf41754befa02e56dc7eef3300d9a

    SHA256

    89c5528af3ad1dcedae266d6edf6df0286d0944b14d5dd6ff585342bf6e0639b

    SHA512

    4a8d51d8aa15795b8d50d98c3681f6d3a66a5936b0e893aebcf9dc49ffba19a11eaadab9299cae25b411c8cc1173ccef2f15ca378d757c3763f4bac16c1e59fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2f1570ea4983256542e61bb9cf681dd

    SHA1

    9ae81fda1a3be2393319d85f45174ac71e72b86a

    SHA256

    e98f36e1eb994d158481af350f2564bd7baf83b795f1b7ffdc1fe5967b798e8e

    SHA512

    7373ce87d54ce5f2c8a17b24412669afcd42f8055bcae7b30919ef538edf02190eacf1c4d88bcb20439a9ceed56cb3a6f13a7d2a307c9e09ba55c77ebb55f1c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b0f9675d912dfefc1d904a6ce89b0ed1

    SHA1

    b2915a7f5110f5f0c6b281549d01fc85955c8ecd

    SHA256

    6d6cc90437df627d488bad87d4c23cb706f3a22f2c088ba835a75f69f96dbf21

    SHA512

    90cdb3659661e3715613eebef8d500ed276f774ba08f380fe97ef21b0bb830f3facd784190be9f48bae1a2f822d45def3d64393c244917a91475a13570e31170

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f8156e615230ea45cb6595d1cbec47c8

    SHA1

    cff1bb22bd7e54e0898a4879d1b0a8bdd1aa6770

    SHA256

    d25fdf26f8e581352589fb5b1baad024562229b6fe4c451c2ebf36000df54b13

    SHA512

    63631ce9f979c3a1677699f5b7bbae6398ddf1345f4d41454d0df148406317e08ba56415d660b3c8d5fa21d617648e01a5e9cca89b6a22fb5364e2cd34e25ca2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    331453d21bc38cd203e55027d079fa98

    SHA1

    2e62659af01782e3d1682b48893c0869ab98f29b

    SHA256

    24982f03086ef462fe027f2a52cb6a24f0e4849f2cd6eec5c2903b75ac2ddf25

    SHA512

    a84355d34e4952f30351c9309983d6bec71b576470e9c07b7566ea8df7be11974ef7130a8eafe7b06ef0ea9fe4a9d1099b6dfaaf8516cff5ff8ee0599e9d9e73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3fbc6874e8bb21e5c9c211b436462dc6

    SHA1

    7fd9e4f67985eb0b82c4722f0f8979bfc21f61de

    SHA256

    c6ac8b5f978f4f3a7fbe1d5013cfdc365d5a81c493f91acbc7c7bab8b753e665

    SHA512

    35f5c6eefaba592fd521928b726b9c6228bf079d62ed265187e7b0d040b5597af833846e277ac2a9206a0aa6245df713df97d56d362be8f9a7412b26e3e2ea81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b6e816c021e50bd79a47cc4972ba832

    SHA1

    53279a0ae22b6bb13a37e445b9e5c3dd692f7953

    SHA256

    e28481556530b1a4efe17f6566e567031422b84a14f6f28af29cf677eb41d343

    SHA512

    a663b7c0a32ea851efee8b149cfe6befc12b98ad7d0b93c4d8d83733101413ad13522c91e9f0e984c190b6af0f822fc80179d3791103f5e6ad20876d3c21b77c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d6162f66dde9986726fc4cb97e632037

    SHA1

    0a89164d4cd38f08acd5aa32aca6483ab0f0b059

    SHA256

    ad3ba9646eed4396db7e1f272487a83081e2915d4ca5611bd14e0f52d440a567

    SHA512

    1f506c71c4fb441872fc64688d60fad0a87f987d9ac2bc28655c0ccccf366a276a181b0fad31b0712a04e1b3fe897334d931e8240ca1340c43c539d6177e051b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6e10ac99cb9e019c50079da97dbf1d7

    SHA1

    f0089eb1fa875303b171d9b32a900ae67d82f4bf

    SHA256

    b8903f989d0d8628ebcf5029603834fef07caf093677b716bd0c62e5ec659430

    SHA512

    eb05ed832ed88ef3878d8fb453730f2b25c25ebc0aa1fab7eb294ac7e5b591ab71f886c33377f09aec869c2f0a6126ae8a98b9862e9f35ba104463e8d88d5816

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6bd0577c792075f3dcbf56abadd41f4a

    SHA1

    ea0ccdc8f4605eb0eb5eec6932a297481b36a384

    SHA256

    77fab50b3aa3e9da0c80641283a80e33e12135524387d9239b72c4d7ba290185

    SHA512

    5addc75e4a530068bdb46fd06abd8134e45fe733fa5b82bea25e2c2c5aeb78eb21aa9f0196ed648e8ecdaa40e47d5d3921b4446065fa4a9e0ba359cd352b1850

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    400fafa54f327a1a1d27c43fe5ebcc81

    SHA1

    67181d4085b2c8812018236eaf8fb2effe2eca72

    SHA256

    8cf1500f77b3566f242e7c8577659eff30cb33a385593eba7a384a33676090e8

    SHA512

    90d0de09887e76bd39af7f34101a400aa8c346cd69ec968b84de86f56a3b719b64c6a6283765a8ff8bdf5b7c98bb6eb5ba3e23d0c4b86e75d0c1b8ebebea8e34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e5d33fc299546516340de0fe351ab3ae

    SHA1

    ab3bf32020b57de4c649109a04f9255c6247fc00

    SHA256

    088812d0fa0949f7eea8134dc93d1012c03bf52cca56c71c4552c8ad477c7713

    SHA512

    028becd17a746c9b1138a87bbf9a566b60d09772338e7ff989f8ec199fe57e1ba304136d62e978c1ee26cf41b9266b1d6e51aa3ab0848e2687794070bd6877f2

  • C:\Users\Admin\AppData\Local\Temp\Cab3AF0.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3B84.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b