Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    28/05/2024, 07:13

General

  • Target

    7c216eeb5e4b71c5dd52e1aaeec41b2b_JaffaCakes118.html

  • Size

    36KB

  • MD5

    7c216eeb5e4b71c5dd52e1aaeec41b2b

  • SHA1

    50a25d3fa82394b4484717225e1f0f0ab84caee2

  • SHA256

    301b3138eea311a87d3b9a84ca694887be8a4ac844c22f49de355b9c88b661b2

  • SHA512

    2d86c6975a8f1324b1f173805bd8da9c42f50fc0dbb5739e992f99b522ffab6051194c6e9676c6c059202106a93da268304f12b785804079ebf9e7e8d4d7fff6

  • SSDEEP

    768:x3mGf0y+b/VEXjPWHljWLwPWz3bdRr/FEIngKNf+2VFnW7S:QGf0y2/VEXjPWHtJPWrhRr/FEIfNf+e1

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7c216eeb5e4b71c5dd52e1aaeec41b2b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:396
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:396 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1276

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    489a89b0a557696c6e623ab2079b74f7

    SHA1

    8775908130d6c010958c9ed6618e81708a17e411

    SHA256

    38185bd55754c319f0e381646cac1a4aeea31ee9a58ce47badc48df019b129d9

    SHA512

    01af148c30a65ffa93e68741d3a71a6c5e59842cb328c426cd4661aeb7cc756452309feb54fbcd46efaeffb1fb060ec7858511ea16be7c8df255f24cff2e7a62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    013735a904fd98a281ae8a67d600650f

    SHA1

    382e4fc3f6f437589cd8e74626e3fe4f0bbcd953

    SHA256

    4c9ba6dc2c0ba0dff2a0a4a919454706fc27104df9fa6d2e189219bb7f4b6ed2

    SHA512

    9185ec8757284cc696ed40b0f21bebc1b4767d2e89114101b9410fbd49e48ee89dfc6d1f446cffdb1076833b8b7ae8397bac68e7d228bc77bc86d84df89580b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0feca1df68bfb34a187814d389dfc51e

    SHA1

    0a8f522d981f0c13ac688e398702960edfa1e5d0

    SHA256

    5dbc8034b55834054e38bed99675208531875bd6c5110aee239b0534ee5a367d

    SHA512

    dd519dece6989774dd60f8a0e36d9a94b52b31501d4c7807cac92096cf2cf8f6d4d7bbd6d7adea352dafbea14df341d63cd8c7c28f2c4a340b366e90d2c80157

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c2133f987d0e2ca397f1fe5dd451556c

    SHA1

    e5dee49781b246a45e34d9b5b99b37fd903eba23

    SHA256

    0ae4bac812828e422724e80f49b40783e90f84f164cdce5252dd6d539341c579

    SHA512

    7f74e8948f7dc9c0937e3348533226a357e820984308c61c1d587d3a5652d55816e06b9196482e3e02c6294e1bdec881d4e38efcdd83ff676debd1914515c32f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5fde15414ae667dcdc927ee52ca7ee33

    SHA1

    a7c8a95e28d48d167cff0305fb10c2b2d2e5c957

    SHA256

    98b426465e94ba9f03cfc015c222dcf2c09d9233dddc2d28ff79bc9f72abf8ca

    SHA512

    bdeddf5dde13b19debbdb9d0051266ab6d456284264ef8bf1ad076633b6da0b14a3216710aab8543c14f80650b61de1ad2c58896211b67d23e1165938c0b13dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed12da0da2f53164e7a192b8b08b251b

    SHA1

    91215214b0874c3b749ca9c9ccbdc05c00213059

    SHA256

    e6f377eb0de628d25020ec22f5208c0f7b48da144fda56fa10d1a2200dac1261

    SHA512

    4ef0b983f6ae3b4fc832839711584c4919bb3d787352eef717dc8ce1ecb8bc78dd0be1730a6f5e03903b87d0f26a8a251c98090d9e901e04c80896a3a6f89d8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa54975d0877407f76885a96dcfb5f43

    SHA1

    f0ea31e8f4a531565b0a50720726ef56e9a5675c

    SHA256

    e3d8f0d8f4e53e73d465f8eed0ec05eb802a06f7ada2561d981aa69b0f0f173c

    SHA512

    5b42df2f7ee1bba170d6bcac94dfef503b66392538788b1f30e47ea46a298284de3e5a066c8d97e92e4df18d54e8282dfcfc22bbfac3435c43d8e65e45ea9e58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f559819d2014a9c990e502aab441de16

    SHA1

    c265163cefdf24dbeef76f7f05ff4930d632ccd7

    SHA256

    392be209fbdc47f5266dbe4dceb5138de0ef0d9462e33f334a970aa67ff55851

    SHA512

    bb54319edb916f4d7e8e459dc7d01ed6c411e440a2d143dcf7f6fd280780b9654d03a14b02ba7e420d35ae3ce9735a71248f9b47a3d60371ef99290a17e8f871

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c5421ab4b6c0abc4588067c52ce2a758

    SHA1

    852c598fdc732b14a68a495118d9d8e2d22bb70d

    SHA256

    93c0487ef11908b4bf01fc3e510aa6b55042bb61ee67ea20a6f901fb42daa83a

    SHA512

    383a738a403b2ac54f290864a2b9cb1ed7fbb43074980145e3b00a6e5a0b02c3a41b6158c50c4da13165fc70f676c7a2bde221c2229e01ae87546eeb9f8e4b68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7cd2ccfe88c39cbf2cf58fb97ff844b5

    SHA1

    55990562321d57304af2d5190bd749a66fa3df98

    SHA256

    70b5d6261d08ac7634c58319e5fe7b71216204ab020b8a6c9bac528bb8c3b089

    SHA512

    96ea77dd3640b8381507e5cff73fcc58334aab51420fadcae592dc8afde8b38851eb341e3b41f7966a1eaacfc0ccfa9389941f531d7975c0b01a1129515aa917

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31edc998fb913b59b05c271a03d941eb

    SHA1

    e36a9f03667eddd5b6317ee6c1d44a141ffe8287

    SHA256

    161efca6bfc016a33b05609cb39a5ffcd7fca0926f811ccabf8c122bb3821413

    SHA512

    766f65bd46f56a9c0e6b08613aa717ecf6f94024ae4e208a37d401b3475c0be1fc6b68e6152832a31cfe9d2b733b786f8600cd5a8253525b50521c0a695b6fe2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45ec17c68b53250e092bb3a662bec73d

    SHA1

    7512fbf9eb041506a1db04e096f2260b3bef9b7c

    SHA256

    beb1c61b2c64ee2cb4a4e00ae96f1f27ab8832470417e0524df18dfa9381cfe9

    SHA512

    4d6e6ad3a275765997fc38ebf2ca09681521de8fdc85b7211189b29013f9f843e916edd417e4c5d013eae09ff9552eafd743cbf42d3557bc60d7cace47747c2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80e81a8d41afd0aa1945a5d77069e712

    SHA1

    5d302f07252c75a86c7ce856f5c642bd023548d3

    SHA256

    53f15a479c0f484247f150242486bd9d6fee69bed43c68b85cc2c4c1d55b3ee5

    SHA512

    50d5714a64504940776011bce07c354d5c1d284054d90674e897aa672354f5784cee9527da93c9a4ef82b66f44640be33b0888fb8f65c9414bc3c479a70cc90b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dabc2460276aae0b6f9ea32a04275253

    SHA1

    0068cc69833b4e1fd6171b28401a12c4d2ea7e3c

    SHA256

    dc7586c073d266f83a7902c2206c722b1fda1cf28a9403751d675494a56290c2

    SHA512

    7b78d41e95f7a7b27d9a76eae63542fc3bda3ad1b783995324d5e9162bc8d40e0787287850e2de7fedfcb12991fd3eaf3ab572039f7f944ad25200f3ca25dd7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    894615f71d50c8b18b424f8cc335d452

    SHA1

    3829bd12f6c637300101794f8db4632b3559753f

    SHA256

    230555b2612a4df3ed1a3de84ca57ea66db8a826bdc4ca0a66e56f7af30ddfbc

    SHA512

    3a005f638a15bec7d1dd4992949ec53088b841e28339f1aad4cd7079a587921cac8f0a082ee5e3e0f38d90ee5192a25ed4531591fd462df0386197ec9bd1a183

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f750abea9b59732598800b0597142111

    SHA1

    e7f6765b91ee6b1b62d8f4f583ea3fe3c5cba825

    SHA256

    fa36117736117267158452ec1a9b30018a39ceb8b74de4599fd705facfbe7618

    SHA512

    ec89ca8dcbff533efc6dcd644b6b8c18ff5d85cf88f6f3dfb042cca7ab0698712525932000eb5b8b0746e17743895d2c388182baf4ad713d985b3cb29ff8d7f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9469938c3b301d14e807f052d9e77cd

    SHA1

    10322934e2644ca35e9142a25460ec54dbdce0bb

    SHA256

    b583d41d402d3b8bcaf8fb549cac61acae17a3d3a5576c7117c2915871e59ecd

    SHA512

    10e514195b4c41ffa976235e7e3727e30143e003f5cb4e346782beaf73e53aa55705e3dc2439e2382bd455a361b45cf2d94dc78f73490c0b4fbe6534d5e0dfb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e63d4e04616aa8dc6e5d902aa69d590

    SHA1

    dd9e817e58beffa6a9135ad8c9ec68b1c24738ba

    SHA256

    93eed1468566434b0918029c60fb299b5f35df0afa4589ee1334b5c3cc2f166f

    SHA512

    54393993e972ec440d6d9b98baf177b0c7918c0cd99b6dcea333deb405192a4333fd4f9173e4068d3f7c5f211c879df42936c5fe0826f2f233aecc69806860b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8bc4513ce51e597232e498af3df06ef0

    SHA1

    611b8e9bad1922553aca9556cdd9a9c72a9ba71b

    SHA256

    693866cec4dd1d70c2125f26bedc06b40a1f989d61c770b28572c5ea5671a0db

    SHA512

    30734173f800c4899befb9d0290ac915b81b3b92e341dcd044047096a820d72dbcff0f90776151b1fe12a14503c7088ef61683a9b20a1b3bc93d30ead325d6d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    269bb08441da13a0ebeb3f3ef51b1c11

    SHA1

    d3c942e57bf26c48a8f559cbab85ec843b8abb25

    SHA256

    4ca045d881c67bfdede50a717585be41298c3c9a60a27700fb78a25da16dd7d2

    SHA512

    ab75cf0c5d39fe6713b823fa27b58ffd28be7daea8529ca67a2e71edc666c0a9e459c6e2aab54f088e120a9b819bf982d5e0e9067c53c7d757a2f52b35e423bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11ed4eff7416a8d54f444e2081670cdf

    SHA1

    432ec4031a5e419cc0e4c0c7682011c5e633c548

    SHA256

    dae9504102bd49972f0d4c2d667417538c887ace8feedd880668ae1e28b03a9d

    SHA512

    3170d38839453c59f9b066c81f3714e895da6e90fdff4b072371c327176ff48347eae76d35992b557548a2601cfc8725b91d56b3c70e7df8f168731613dce2da

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G17BROQF\api[1].js

    Filesize

    921B

    MD5

    e3f1903d47d2710a17652c4a59e2f94b

    SHA1

    7d4687be838bbc81cf1d6d66fd1801d63099c938

    SHA256

    5f63b998c707d8b02c3a469237e2fc4a351490982cdb705618b796f040837719

    SHA512

    f16d3390ea8aae36688bd1a26239649c495034ee16761a81f8370b57b0f60999d800a0a9f6d127c7aa9aa6177809398e96282a3f75627ffb658b78f527fbe298

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TTL9DZJ3\recaptcha__en[1].js

    Filesize

    522KB

    MD5

    4668e74b2b2a58381399e91a61b6d63d

    SHA1

    89ebf54e996e46f4b1e26f6dcda93bad74fc0a1c

    SHA256

    b0e3acc54460721385d2e472dda7288382f2766a06b38d2e732d034619f9b929

    SHA512

    b2ead3410dea89b658bfb0ce67842569641cd6c29889ecfb223a83637600b82b0d2e55cec26750593359663a22896f5da91d3df9f085c204803cd646a7cabc28

  • C:\Users\Admin\AppData\Local\Temp\Cab26C4.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar475E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a