Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    29/05/2024, 06:35

General

  • Target

    7fcddc54246bbf4a212c0f3bc82ed32e_JaffaCakes118.html

  • Size

    28KB

  • MD5

    7fcddc54246bbf4a212c0f3bc82ed32e

  • SHA1

    f825e696dbc290c1a628ed0d489abfb5a2a50e86

  • SHA256

    9df23fbbfbbfd7ebcfe3676af60730a25eb047f2a081b3eb1d0cbb7e2a94bd34

  • SHA512

    ffc22b833b4cf38e8408e257db5fd2450d5f34980f1fb0fec73de62a59bd48fd36f8b79f68a8041a2aab677dc92b2e4d81a20cc5748c52c56c25f6f6df56cb2e

  • SSDEEP

    768:EMM8oOQOq1ez2BHHbCVFLF0FY2rzhcDOU71:E6i1e6BbCV9GLrzhcD9x

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7fcddc54246bbf4a212c0f3bc82ed32e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2180
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2180 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2448

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    b9a6ce2d8d958f97f33e4c90383555b0

    SHA1

    1dfc439a009c45eb482547d65aeee88675679279

    SHA256

    35c92a56b5f0f8520f27ee9b8d093c80deeb4f7599dbedfa8619559986db3c03

    SHA512

    0395ce6722e8663e946c8ab45bf6b28dde3d77c42ce893dd5d9174bb1c2c287b5ec4cb165ab2c606c13b39a72af14ea2d1b63bd3f21b766f8969b6d18db920f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    724B

    MD5

    8202a1cd02e7d69597995cabbe881a12

    SHA1

    8858d9d934b7aa9330ee73de6c476acf19929ff6

    SHA256

    58f381c3a0a0ace6321da22e40bd44a597bd98b9c9390ab9258426b5cf75a7a5

    SHA512

    97ba9fceab995d4bef706f8deef99e06862999734ebe6a05832c710104479c6337cbf0a76e1c1e0f91566a61334dc100d837dfd049e20da765fe49def684f9c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    34320f199b99c2541d4e320e063ada7b

    SHA1

    8a55e19deff359d2e0bc8d730e487225c4107d67

    SHA256

    ce0ed1cf80854a169ade57c119f91b105a18212f3b4c8465e32fab67900e5959

    SHA512

    d56285c9a4d874a307940656f3ecb3fd2256d34c11ae751dac5772660be645386bd354aba3328c90a41dbcc08184d8b57451a2c181f57d2561d186a8d4c5d9e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51bf879d52b40d877958ff6329cdedc0

    SHA1

    bbcd1f32c72ae66be351688c354c6281b7520aa5

    SHA256

    bae5317f9670eb484b99decc27ef75b5bb71e1ef1977bfb6a9bb404ac6985c27

    SHA512

    232e19f91eaffcf846c9015c282fa70f831f8883d81a45280a91e6586ca42e8dd9a6d2c8e2c62cdccca146a3a498d6ddf50613788c77a5138e5a82f469bdae6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    073ec64f79a33f158d0c4be828224281

    SHA1

    94c2e719eaf45f34ea56a349be0e40276602ef17

    SHA256

    9e57c703cfa3bfafc71f14cc28ed39ee523c5721e8c676c6ed6eb790db4e4746

    SHA512

    dda6c787c6884b0cb7643839217a46fadc4cf70bcef4ef89c9c94e69f13cef05c94ffb64f6b02041df7ec07cd0b80a313ece12f2d40b975b377d649b25ebf70c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    18c2e58209a53efede785c457563b934

    SHA1

    c8e416d1fe51331558de979b25ff13b62a1ef927

    SHA256

    1d462fbeb8360d297c4266ea7ae15e782863f08c9a1ea3c8290788f99f980172

    SHA512

    513506aaca4d52434639954807a6c0b5d1ea6c65b9b600bed064a97d8f1c76c64cffa8245c581894f635e92a608e7ce877e1eddc35206ef5df5f3fa4945acd37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f6b2f50ac2a33bc70f33ebdab50101a4

    SHA1

    10e19ef2e8b7a2f54b68be29b65484877e8aa082

    SHA256

    d0ebd78bec25d64137fb5048cee684af74425648958323d67c762f96d7cc73f1

    SHA512

    217ff53d003e40c6a294ee59e712212983f40daa07989bae6bb953c07bee24e526767841fe33722f61edb599087fda37fa42c6b0eb6ef1c365452a68f5b87212

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a753bf1e8702805c78ba1338ab44ec0

    SHA1

    a1b150a2b4c4684b2647e6e1f81bfe5cd74fc472

    SHA256

    7f2dfa58a9a892a6690d92edbe846f35384e0ea9f129d12ce93b4e31f899d5c1

    SHA512

    4523197ce40aa9de5caa43e22824a2eb49cd6aac8f548fa155774e5f32130afe4f18d0f6d637609f4b41243460a700931fd06305b987a025ce1fca6c3f382b21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5c7a2d855d718071871499d67a92d69f

    SHA1

    b1a83d54d360edcaabecce89cabbee35e3508839

    SHA256

    555223b8fd5d1aaac58e8ffc99ce233ba7f45271af83aedc957f04540597abc9

    SHA512

    b1c85c4b9ce3356d92878ce1d9a49a7a6db47bcdb283d61961f705e162273d418a32777c6cc459953e781d13908b82f300f8405abba0da6e75efb8bbeeaef064

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6bc4c36d8e55bf48f71445576a3fff4c

    SHA1

    475f856d503dc6750895eeecf4415c5f68278d26

    SHA256

    be8d6415374fceee1a75216757a20044e68f4c7d7ad367374d4b99393e63a7ba

    SHA512

    33a270defb1e12e5fb68e87a20cd9a08050f339f54c76cdbe9896d9b6d4d6a254852e97ed8ec3fa965d631209360a4530c9d9811f596907621649536e4af81e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    891ce05dd3976e4fd922f9fa307c1a3f

    SHA1

    e72d74ef194d09a722772b2b20646b22969ca131

    SHA256

    f16a1ec091b89b9013133ee623abc9b834ebf0b7b0ad952ecee897f506dfea01

    SHA512

    b843f7a56f4ae00fbf792703c7e76de7d80142c703c266753564d95ccd722c81558d8b23438efa48ec04ac65be17b7b253e7aa1e2189c6c03690ee000586505f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78ce7d992d63843bb45349b8002fbbde

    SHA1

    2e941cfab3dd407c799fe257533857b2dfccfb2c

    SHA256

    28afde06a34965053bcf437e355a4a6955009e71af722f6810779a8d02057b76

    SHA512

    6c0778b14d659da65bfcd62dce59c8a15fea717b27cd4a627b392664bd04e25deb8c959228910accadc054f839609549b949b6fc399e1298a3848df90f79182d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ad37cbce13bc833324b8e411d6cb087

    SHA1

    815d2965f8f1dcffb32dfa592d6dd33fa4541deb

    SHA256

    4e2ed9a4611f8e3d0043bcc6277b54ba91541dddc1d26a05f60768dd54febd41

    SHA512

    5a75cd6597bd24aaf01f939369e2b1f1dc6e71b4fecccd7b651f99b9ef6c4afef0c937b801ed256ac186fe6a3f4e62850f10dea7e7bde930879ab354e6f09bde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ec296948974c5636f06c06d2fc679a9

    SHA1

    96f1185883cded3e68b3a8cf10fd52e16f12a1d7

    SHA256

    739f6b94afe81f42d18eb47d2f809da28c8626529158e30693d182851ddb16f3

    SHA512

    39c81abc4c407e0ab26f56c3d81e498d7d75e6937ca91c663c969a005c3f275c8543a5eda39a0ca76d95cd088c3fb816a6bacd2f3246757f4895f5b0ea92c88e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1dcb0303ddf09531ec1df7be9abec8e4

    SHA1

    b893da01bad817f205af39770e361094880ac240

    SHA256

    491192eccd51049530509bc989cc000a66a234d34fc66d3812d9ddd13dca449d

    SHA512

    9024374c9bcb24dd5ca376d62703952f3c5c21d50ccd6e2e00ba282156c6f9dc25e23dc653c920220b80bb499f142cef2e1b251c83e3decc1d8f250c5e801f5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c876bc49b6c832d2b09f756e18954e64

    SHA1

    220dda9f3008302388d083d310cdd65c072b9c4a

    SHA256

    0daa6154b736d9db5eb6d6cfcbbb3b90238d7a58e99efcb6e82eb7bb8246e7b8

    SHA512

    f397d9a9877af9dbef9553941dc47290243c7cc3ca20502f83931154df458a9b9cb081b45b96a4c5b39fa8fbe52ae20870d1b99486b6e38357333ea90008cad5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c3e2b3a6fdc64471839eb19d9db6c99

    SHA1

    c78f77c2f8c6fa20d4eb19ae654356fe66287347

    SHA256

    ba43c3d2bb29d9a8c80043ebe2c9c49275c85ca8b10e41dc44cb600bfbe40e96

    SHA512

    d1acd037f4b991adb149f8010b76b189be74c311a4b93945eabae5f53016f4f445c5fc357eb9c31a0394b3f9288db473435d550846275dc95fd5ba976bd0766e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9d2035fc719ba79ce9425b413424b432

    SHA1

    21bf4f86b0a423d9bf2b4766232a759aa1b8d6bd

    SHA256

    27f674465ae324ac3697077bc85875c0e82f61f731ffe5e609bcdd8286f657f5

    SHA512

    fd98fca19b10be548854915d761a24eb84b90f33d2adc74dabe2ab0e0af5ceefc9dea0118e5497df1a62c91b3a2e7b18ddebb7551aa09a8c06e2d7801dd67bd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3ef90fdc364ab1f019dad87e035d74b

    SHA1

    9d3285f7386f9520f3689dc2afa2343f765d95ce

    SHA256

    b5335a424bb65261396fdec4e792723a652bdf82864fc93d69a6caf385d26472

    SHA512

    aee7cc6db2fe3ba41c0739100529d4dc4f2cb6711fb5377cb4c54d9a2a68d19dc6a8070096b4193c85b3e13a6267c19445bb469ff4125da04f4df2173b131e6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bcfadd23268763b55176ba61e3c6c6ac

    SHA1

    fd2b6cb16fea8199554b8d231671bdf8dd2187f9

    SHA256

    e4a6bf6009bfbbc37d4b04f0d7de421700e8fd88f7dfdaaae3aa55edafa41f0b

    SHA512

    95c44e95f81f0068f4466d0eda8225edab86a705a1d7348c0f24d24bf60874867c81b5e58c9a80d58a9cbd9020a46c7aff53fa88d426818b990dddf04a9936f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c94a816a6a5113ade0313cc599959f7

    SHA1

    f36f44a877dbadc1f526736590e07bf810fabf64

    SHA256

    907a0da5da8ac5b6b05da0993c3d0ef33bc67c73b3726dedf3655d90b63d73d4

    SHA512

    db49bac00f623be7ac7b4f12c73064e3031710128af2876e9dda0690e8960092509ac948121e11573d88b249968fb13b755763f4284ae79446bbc17dd64f0280

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce22e97a92d625974435813df1464f83

    SHA1

    5f398132c89db85e8d17c7acbd54830a539400fb

    SHA256

    753aae0f022ad32f0ae76fc14ee642746868431e4254198376b240329edebd8f

    SHA512

    6dee68e180b0d1c52af7f40aec0497fcecc657899a5a9509aeda00459204d48a25dee0cd71ec18cc42033e5fe76c0466746792f4bcc41e8f766d606c7032bc9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52530438cbcaf6dd3dd6a3428bddcc99

    SHA1

    a0bce69267eae5325f1ccda7cd948d593228ff8d

    SHA256

    6842833dd8a56bc4dfa0a4cbd5201520c57e5b06aaba8df49eb0e2a5793d6cee

    SHA512

    acb3e7e542f32b16a261d477d39677932e97b437e55671c3b2fd91e17466781db1d67704f0576745d6343934ae7e1464cd6d2a41931cef4bd96d72aaf96383da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    392B

    MD5

    c49bcc701a6192dddd791205979d8cb0

    SHA1

    1882acfd75858213175da9ad594d387f1a8baf9f

    SHA256

    24cb761fabc4976f82e26ff9d7baf2a605e62068d0efc8ef10094c3ee7711b12

    SHA512

    afdc76dcd19cc316636767687426c93fc9c533fb32fffed2cb3f8b1cf763073f9754edfd01c5bfe9616a4ae3e2984fae39c632289eb198611ab17341e9b15b53

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2XHJXO3H\minatosuki[1].htm

    Filesize

    167B

    MD5

    0104c301c5e02bd6148b8703d19b3a73

    SHA1

    7436e0b4b1f8c222c38069890b75fa2baf9ca620

    SHA256

    446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f

    SHA512

    84427b656a6234a651a6d8285c103645b861a18a6c5af4abb5cb4f3beb5a4f0df4a74603a0896c7608790fbb886dc40508e92d5709f44dca05dd46c8316d15bf

  • C:\Users\Admin\AppData\Local\Temp\Cab3748.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar374A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

  • C:\Users\Admin\AppData\Local\Temp\Tar37FC.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b