Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    29/05/2024, 23:30

General

  • Target

    8256df82281a7aeeb66d908d54cc8794_JaffaCakes118.html

  • Size

    82KB

  • MD5

    8256df82281a7aeeb66d908d54cc8794

  • SHA1

    0511b4b578b9d288a98bd0ff82ff00b2fb96aa3e

  • SHA256

    756c80b60dbb50381b26284cbd49d1e994b0434ad8667e1276b2fc1bc55c073f

  • SHA512

    b5431293fd1e99848efd3271ae1389780933d6ef8609336ee34a65ea890ce9b2f083f6dd3abe46782383b807c4b2fc05c877213f3244b139253148a4103637e5

  • SSDEEP

    1536:A5kOg6gN1onn7ysX3zdNVWhtUSH5Q42JZHx9GX5z:A5khA7bXJNVWFKzyN

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8256df82281a7aeeb66d908d54cc8794_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1580
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1580 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2580

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1a2eccfb3d563e0a6b396b1cf67727a6

    SHA1

    acc06b5ab487d60e987332ee8915130d16a47af7

    SHA256

    e3e3b0af0581c9acd84a668b8b52005f9f0c3ad83544398dd7dfa9705c9ab1f5

    SHA512

    13b5d10518a4d6fe170781499d512b9db08656ea803e1fc2db0e820204b571cdb6e5ac8afd0c8be03b377573b0cc023fce8a5b08eb122c2ff05be33e5aa5047e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    71d784d6f7ebe397315138dd6c86de2f

    SHA1

    40a015e9b4fb45c8d062e9cda31cd6c5eb5fc146

    SHA256

    1aecb7cd27462931e65e5dd887c10ed66f8af66fa7e973708b43c956a7c5ed0d

    SHA512

    5277146f9c2b97d7f246ce341ed4adeb6e4317f65f312b032768eeacdf84c1d7fde61f5b07f8f183a1afb8ebf10f655d6779ea6174f5eb2ee8499d3f909f806e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    207304f8d9d49f38e79be2c7cf2be0d8

    SHA1

    2ce5bef104fcb51f188d7ab4e87eede41c57e176

    SHA256

    9000d8db043fa753fe4cebe7ceb5bc817a4b37fb0187b1c78a1ea2858d772071

    SHA512

    59ad99dcc3e04af7721dc5e4003cdaded3e6084ff2342a92ea04e5821d36f451926ed973f704855f73defb725ab991b49a6bbf9b2ea72b87f1378f8354e49bcd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff8bb67317771b71d3943c50c8fd6b41

    SHA1

    014c73252aaa965abb4c598ded27d2ee8527d30c

    SHA256

    215d5c9d3fad44926b87c02b493c841bf4025b64c6cb870a6e4eddf380dfa9b1

    SHA512

    4b26d54aee018656bf328d27e7bdf4c95f6df40b54ff36e94f8cfe7ce7be0c8cd8b4646f13af00c114a2fec39a58ffd0f071e333885b56c90122aa5df9df16f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de1c8190f0b28b1842007defa5182e13

    SHA1

    a25100b5cb7e2eea3f77d93abe70345f8cddbb6a

    SHA256

    3657462ba093644f9f5958857918203a608113af24f659eb84ffcc239f8f8367

    SHA512

    c8c4ecb0307a051bf96f625b61a9ec4e00056f955464ebb20fdd563708eaad3304011c715debb2b33867da7338f6ea12111df7e64d01c2969f9849bd9b48362d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52e65988467dcd6978fdac7bcd9445fd

    SHA1

    0a82c02a3140087b886c49596a4c31e3177b6006

    SHA256

    1ab0e42223f63c36e8526c71aed84c644af03cad12aa41c30c3654f25080c069

    SHA512

    1847198e4af337440cabca1923ff85c5fd500c9bce7fee675df0de14ac9245f274ae65854ac8bedf5c9fdbf314e9f319b7b953aaee3ed782869568beb95b5338

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5976f30fc12a36d5adee71b622b6c0c

    SHA1

    5a1bb1ae1f60274b4126e2e4d364f0a49f4ba313

    SHA256

    97aa350a4e3170cbaef14da23332db1478d3bd1f3ed324310670bf844163d227

    SHA512

    4ee50458b2507f91f645314419ff0b2103ac05ba3905d44c435a06064dd3cdf4e17ef8cbb86d7e5e8e479ff44acfb3f603878025af8d5b70605b5706aeba6681

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    784fe220b0485c98634c3042726b3610

    SHA1

    17ff52a10893089c9b81264dd4f3182d03c2053e

    SHA256

    80d9b43268e80144f21115b123b221fcc06dc61ec17cf9ff9078db3dd843306e

    SHA512

    dc20f1f0373cf4e62b6fdfd435e1e9f8b624b5826e0a2d2c6f04c594156e6f52660f3e885ac4d75dd155f9dc98cc5433286cc003ddff28ef7d094d64d5069753

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f63c2031bf169f2dce10416811060c5c

    SHA1

    b4efcd57721f7b97910e03079f7ba8be7f396d38

    SHA256

    13e0b8fecd95c55d72a9a04bc5880397962a2debe1ce3b09c6dc9f2cb599d01c

    SHA512

    08a36b4df26419c95c61318dbed5120abbde2d9f5bc160bc7bc9c852597c720950204498d9611b263b50b83dd1435646cee500bd59b032eb765fe923a6767a00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    46d6f6ad9d78d645599816b331cd2909

    SHA1

    b05712df1a10bcf01ab3727f96598efd013dedbb

    SHA256

    c6dd3bdf17d3ff34591d36e8b5146e754cd4cac5c8067351612b2edcff3a7857

    SHA512

    4460799babd89bbd24a5e351ea26a81bd24e21783295aa5eb4f0e038b3f5e173aa93a64c115ff6127e74d484328fa6c2297a428e2ea808cfd2b4364e3a1a691d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ffcef2994c9628e7e85461fa2e431ab3

    SHA1

    d05059c8540c683ca81882f2d0e533da76241e2c

    SHA256

    860bbf92194fefc5231ddd98190b0048b11a2e08e07fa838715c48dddc3fc58f

    SHA512

    57fe582f9ee29de9a7f96d8872c80a0a0b3986c8cea016dcb9deb2991afb0e16950c36e534ee58672068f7f62de813788bab4b20b0e59c9178f54a7688ec9543

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    93ba4a1631b7c79a874673e388c41e70

    SHA1

    bd54f3e98b362808bd4737ff003e208d49027474

    SHA256

    07dda8ebd65022aeb89fe144091612819f8e2884645c7145a78a2e4a49b3083a

    SHA512

    b972721f17fe8c51fe12406f521ebe3edb2c5206277a3bc2cb4651811f0462db12f2dd67b032f4a1eea630c75234ac004f086f74bf25febb10f40ba7793f2936

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f105e0598300bd7f8b1dac6dae1130d5

    SHA1

    e7589d245098e3c8a6e5ec3213a401fc34439a93

    SHA256

    a0c65a2613f7f0b67a06ca7faff1d6c07cf2860a295306b40a86262dab9320e8

    SHA512

    25bec6b17861daf3812fc094e680e93daba723e6d266a86e5da5068519abc4e7464029f8b0b074223270e0d751cc51a9dd81fb61d86be3c13444f1fa9aa83f30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2ac6deb71bcc0168ab8452c3b020a08

    SHA1

    6c7840d6acbbce1462bafbb11f3f8316d09397e5

    SHA256

    fd486d31d2bd7bf2030bb4285da0b42d23a8ecd1e3bb6ce91c936d9fc25dbb62

    SHA512

    70edf9c21246a3b9140baf5211b845c4524c884a0fde7425babf7224dbfd2f57a5118c61a579c0f2bb4d4a87a543f023ffa302eded2c48a1b117d55a38ea5dca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f9f1568269a8b25b569b59f0f2cf21fa

    SHA1

    1761c461f06aa3e496823b03368110b2c605268a

    SHA256

    28a63a2f7f55cc169fcb2848600e1ad28d6dea5ca1aa30343c06af30dd5a7319

    SHA512

    0c780cf0666953e10b6913f8fa6c08a8842e2c886aaf90e169360ab12f3f1a47e6bc24fc241c6c5c305cdc81f3fec2a6d75f118895302a3f70e8cca52b89fa91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c59ca4110539087c0b7f3f0ba775a315

    SHA1

    ab0bca7f99204c4ee7ab6d1151cafdf32d7dfe26

    SHA256

    29c7b3074800353d9baa87073d27846d90c4742f93b0b7ba4259034ca6c4ce18

    SHA512

    6381b1a19c22e2f9b2dddb22aa752528dbf7afe4d275fdeebb8dcd0d27fbab1b171518c76efc1d5c292f4aa164337646c11a0371a3d53e5290f6b15633ec4117

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9caf8df28e2ffcb150586845b09299fd

    SHA1

    b9637fba74533d95c0a77fd5dc0da0bec568c04a

    SHA256

    645f1d1b949d0ab2f6d48799e6ad8af02829d6d323a88d2640790f2cd2656bd2

    SHA512

    66aa1ef2c478f0077ca6bbd9f4eff91962175f239f8a2ca7e1b12dcac22a0b05ec9db616f56c18fd7d293edbbdbbb3822167afcfd13b11afb9998573691d6872

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3270f56bab266d3e570bb192b586c9db

    SHA1

    4c99039d4676c558768ebf97e47264d09a7e0200

    SHA256

    a1679d28e8ff0b087ba066a58ba39e4e65c75074acd4d4bc609f5c0547bae946

    SHA512

    38175777e64e0e8ee912c00c03fcc5998d76b492a269273b5da101481a0452fae058b9aca417bec7cc2c851630ffb833399cc6cbe5ff8fb0c98c042df0aee766

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ecf12b5cdd4a6efa56fab53e155768e

    SHA1

    ab7d512fec2e982476cd0c11ed164631db8708cf

    SHA256

    07c38cd93377525ad7fa596d2b84fdd03243893326ca4e2ec91a09f336940b57

    SHA512

    9725dba014763e23ebdb77894e6f3d138e7a514713904d8dcafcb90abd56fd1afb5bb2e14250fa69d8dcad045179f8b68d73dfd82ae792502048a3fee14d2542

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    33fe1cca439612662b53a6c1f7fa7369

    SHA1

    6f4de52ac96d2f295e4e0ea89fd501514ed5d352

    SHA256

    ee22c576f8f22b87418efebe848c75d05b760389522481d229a33ef537283a3b

    SHA512

    949fceddef3868155c739dc584a0e4bd7eafbf208f9463caea663a8136c0b64875dd078372693bdd16e6cb452382073f0b9872e3c6d36cd0f244cf101835fa30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    447c6b6f6e73b434a316037cb902ddaa

    SHA1

    d824f72ab4125e80b7a12fbdd53a7d9195ea2567

    SHA256

    7b821770a4611a202a32b2eac42be39fc56ebdfe39c92aa86f7859daf2a65f49

    SHA512

    4a043a7137c3ec2437263716fec9c03be0e24116d11cec188ba2e7377e2abc60b9223807e320b0781b174e941a556d4b7bd9cfabe2a6f64d042019db4887326b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75dc051c1189935f644d046507345a3e

    SHA1

    5324395bd573452a6e28cd079e36dea93927c588

    SHA256

    a2893840cae0d316416ee5cd212577bae77792ac2186ad13c04c16294be0d8fc

    SHA512

    263d499d2042137e2abc32c2e9d5dbac62794c7ca42e12c5d7869cb7fb06d594b77b928358d08672de0139e7ee2ff09c9462a5e3bd7b5811fedcf4d879253544

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    020675d07391c54128edb6afa5e62abb

    SHA1

    039c8742a1a01008878005810a4573c3b624085c

    SHA256

    16b6193bf1025ea801f1c05daccc8aa38b6e8ba7ed584a90db90a86d2f708d75

    SHA512

    33d26850c8ca7e5e896b14bc944f6a22a7d221c186cc9019713e8cbda686a35736fdf3a57fb21deb555321d0e5c81ba8e7e8527a81690e371d0ff2f979ccd1cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b861c4fa01a14b001841dae5cb18ab25

    SHA1

    dd25668e5e51815436a1a4560f43be398f7b0b0c

    SHA256

    f9dd8ce445aec561713410a56af4f4b788041047e97413b9cfbd09bf684995d5

    SHA512

    c91a22413a3c20869f281d90aa8f5becc3c13273121dd3cd3828eeede8dedcec8bd20c0d1543bb0551eba16961253967a0f36e0472886df3fbdcc1feb7672f55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2db86371145609a03c3a24af6fd24cc6

    SHA1

    970918b73905ca9fd33fdd131994b14296e65bb8

    SHA256

    57ff9cc83e048a1fc5a56700844158ae8172b688b7161e0ca2a1a1775e4425d9

    SHA512

    36a82f43abd4ae29853eac0c2fb50871326045505f9668673e66ec88b4df794c4813a8d66a3f227c32c5f286c81bd714749f38b419b575ea81e831074302d26e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2XHJXO3H\P0XEQVPN.htm

    Filesize

    167B

    MD5

    0104c301c5e02bd6148b8703d19b3a73

    SHA1

    7436e0b4b1f8c222c38069890b75fa2baf9ca620

    SHA256

    446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f

    SHA512

    84427b656a6234a651a6d8285c103645b861a18a6c5af4abb5cb4f3beb5a4f0df4a74603a0896c7608790fbb886dc40508e92d5709f44dca05dd46c8316d15bf

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H09CVCL3\KB17ECZU.htm

    Filesize

    11KB

    MD5

    aa3196be6d14defad10efa6697cbcfca

    SHA1

    f0f3ac065ad35dcf5dfdd36cfcf0b670433f640c

    SHA256

    e528310f405fe7999de6e09faa131e91495c9173304743362337c5d5a9f1dc83

    SHA512

    90f72b450518a9c88ff5c359b74fe58e5c505daca084b8d254e06b4df6cf8756dbd4391364ade47fc1fee48dcfef9b492470e910a40449d0a2105e2abede80e3

  • C:\Users\Admin\AppData\Local\Temp\Cab1873.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1875.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

  • C:\Users\Admin\AppData\Local\Temp\Tar1937.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b