Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    154s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 08:50

General

  • Target

    866e5bd79dcf971469a70ec6f9c73a96_JaffaCakes118.html

  • Size

    110KB

  • MD5

    866e5bd79dcf971469a70ec6f9c73a96

  • SHA1

    2043cccd33e690f0e9e5c9bacc5a5650b7ea4b6e

  • SHA256

    2a8693bb625b901923e7eb7ba6c948bd6a6fc1558d30786c7dcc1c7921cbf249

  • SHA512

    d6962e7f54439405af28e866ec09b59e06cf6caabfffa5e8a28d1ade1ed9fbddda26e632f88c69d5c9245375c19d8a0887863d9115174bdd3d6b2627cd7c9aa1

  • SSDEEP

    3072:L2eDsReAPxbDm0V033y5i63y52vx523rAt825Qh8Rs:qxxbDm0Vw3y5f3y5+M

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 26 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\866e5bd79dcf971469a70ec6f9c73a96_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2292
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2292 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2540

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

    Filesize

    1KB

    MD5

    55540a230bdab55187a841cfe1aa1545

    SHA1

    363e4734f757bdeb89868efe94907774a327695e

    SHA256

    d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

    SHA512

    c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

    Filesize

    230B

    MD5

    f26598ea4df7a7fe9f5269a7438ecaa5

    SHA1

    06eb371f6240f042c364fbacff144bb6ef0f0a0b

    SHA256

    2e4d97c78e27e0ba40a5aef7fd9867646f5b89e6b7d87ffec3c32b63dcf607f8

    SHA512

    8f8e3568796c983d90764d0f84d2877b7f78c3130b15d19c8d2e5746b7730ad40c4b4537a9b0b9c99e780c777c38e2560f44bcce38faae0a44b0dd626d5d8cd2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    faf0470bff1fc0853c0e790135ea3c87

    SHA1

    61bdaa2a4bc2f25f1736374534ef021074c2970d

    SHA256

    43c7d5b166e476d16288f39210755dde3266368c5f24d4a643aedc826b04d663

    SHA512

    c46ab30439594b13460977c3bc7c5c7a42913bb7a5b96ab276a72be00ab45b6ce7f03614dea4eb7d7dc64fc013cc5130350ac55b947956e5ad8a44afb010690c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b17096a3a3c412ebe95e0704c855f4b4

    SHA1

    13bcc9838165320f2ea9ba24dc4ff09abc94ea86

    SHA256

    af76701b58add571697831b022b18cc65765131a0172bdef301cb537abdc931e

    SHA512

    78f75073b23caffa3e99d943477029772d9222da29afdb616a79f96d39038de1a85d287b556a6fe01122455e9fbc95f6a127689ec6be707111b23eae409502cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85bccd702ce093aac3ab35a62b5f48e8

    SHA1

    9ff823a5f66bc7f5ed1cb3d510075d29fcae6ca6

    SHA256

    e7847bc568eef1af3f0320af51ec103d0a14e4daeb19e4ca2bb9a84f97ecc4cc

    SHA512

    63c31f29dcea214e32f0a6a59a4cc8cdac14faa9f64b05f25e07e0046e8c73da8b6509961198327a10b9c692573ab5f6aec0e2e20efa1681f9abc4611320f787

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    36996cf16c80a437910d9d39621d7c76

    SHA1

    f6794d0532545f829b8d59f1e87757b73ee2309a

    SHA256

    c35210cc8c999f4b93065c1df9e9dee15d18430435000d0962d322c7c4b4a09c

    SHA512

    40b594ba402d00c967510f147e7ba438691fd89f111ff249ac97c0e3de406e69d371461b878d21a5fc0da5bad47d725c2d9aaf92be990387b00270f695eb4f68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78f8c3c755a722709400407556fcf4e0

    SHA1

    2772d91ae516392b60e4dd3bf8ae2503a0f10cca

    SHA256

    78719a9fe7bfa0bb6d8c6c1de477539cf6fb04c70eb7c0f5a1ef21c9a34ccf8b

    SHA512

    41a164bdcc9c4d2b0368bfc9794c0c442b691d7b8e656278274d84473595da6f2034b1856969f869f14fe1198854d213e71c440635d716a1aa3f6cb66c0f37ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    454327cad46f51335e9a0a527d0175ce

    SHA1

    1925dbc870e911db5b3241a8e8655fea519c14a7

    SHA256

    083921bb3d20e471bbc41877d20b4ff6310420adbaaa063af47b98d9a00be4a7

    SHA512

    2ab9d39912c0df4ac901e8c8703b818e1f6035f7b50856039f6382c063f09db84fbbf91b4b1f2cc4cf0ddc624c5db28f02f7a49b09772755c203aa9b925d8e39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c1b545f0d4db2dd7fb1a25527355c11b

    SHA1

    996a4cbb701b9cd9686457a1f4590d27d3aeb5e2

    SHA256

    71833b9886572a68ec07e6fe7727b0f392442d3187edf7284422a8bb27bf5151

    SHA512

    14c8976b694df3f5222c1a45d956f3a008917cdda1a8888511ccde3a3f7e9f60f63fbaf1d965f9bb7a2e5700e651f849734a6ec2b3f7756b1acf5da891c5690a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e759b6af1bb2c38c4966511dd661e550

    SHA1

    23b107aede5b0d614235eb66c857f1083e0a2fd1

    SHA256

    1bb5d41f75c77aad02e2fa0d7511800a4d537b05cabf6a86476868d1ef6c2875

    SHA512

    b510326863d617123a14c4c18003340109906864316dd128cdc573e9427e12761d4019cf213fcaddbc5552cdbad9925fdc47a8a72d4365ceed89be458d4cb11a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    42d8de08df4662db3544fef11d000fc5

    SHA1

    9a30ef1641173e14fe8281e9965468a1ffd6701b

    SHA256

    d896c80f8d92839caf0845890f3e5c3206fb74035206e3b585662bcfe6a8d5ae

    SHA512

    27b8299ed6345a90c66b5f5da4e34ab3f76411d922d30df6ef1d921d0e53e936abf6b0c806bf051be48fb0a6afc18eb55680be2eae9ac0cd4be069f2fedb42eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    932145b7b3c3b5a30d929ed9840dbb9a

    SHA1

    4625941561a33b5cd38c506b1eb362e0592cc369

    SHA256

    ce4fc1ae152bf2bf7b53fa791401d1247432a57f2ce64bcdda96048c472cb4e3

    SHA512

    abf62e66c5c0c010f4bd47d0c8edc37a7a5db08be4263fb273cfdb91ffdad22829f67e1a2192857011e91afee476bdb426add2585dbf881ee5acc1294a821663

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    707542cd47c3cfa755f45a159e711a29

    SHA1

    ed866f55bb5e877e6e7988fee676de62a7f49e20

    SHA256

    25b3ced3ffed904cfea671957d7b7cefb1f1382da1f67bc950d969b588c635f6

    SHA512

    b113dfd89ccc8c9d63d876b5d302d86d0dd0280a9b1e635452da11bf3be876c3648ca63fe204f6515865b49d4345780d388f56047a8aefbd0149fd5b5408c977

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c039643ef4f81713f443f14c7553e28

    SHA1

    b716a9dc83a99a68fc99626497ae8702c92889a3

    SHA256

    229d61d124291d63f8738cdaa41a10bcee23053db7e77aef2002e25225fb2dde

    SHA512

    8945ef416fc8d684b760bf50cd39f14caba787e42344231f61fc238870ebcaeccb9713d2dbb9d36b3f3f4350a0e1af926a23708dcacff9976f301557c4ae9148

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70aecf291f42eee774118fb477307fa5

    SHA1

    b60339b1bc2732244b38c37e9f37e0a4213756b2

    SHA256

    b0b1ac8226199e745b1a312b4ef572e615bbb454f45a44a4d60f4d64bb88a9ba

    SHA512

    23d8b684ba83de0d5ad9c55900d2bb6afb0264b7ff2e43af08bbce0cd5675abbad6de0c5699a23a6d046676e6616713d93521435c64dcc496694cced621579de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f9402976ac051abc4b423b6c964a964

    SHA1

    122d85490fe2e556069a4b86c7804984664018ac

    SHA256

    214a2744510d905dea194e6d1d1ddab4bae2d23f849ace037ebebbd12697e23d

    SHA512

    80d295f471b6435fc118a450fbcbe24e75d5da9bd7a935262b01cf3602d9cbe34054c2274e4f38e578c8347bcc02ae2d84f4b16b10713d22a270af92b0b9ae7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba7319f3ed949688c863384a8b8dad97

    SHA1

    99d7a55e968b046c5d6afd9143e5ff21a45d0d6f

    SHA256

    db79962710f627b34c3caf5de4763abf2c639472112755346be77362a0efb8cd

    SHA512

    e7b1826a4d4ac7ad55ec63532877172d24db073a2f594c02420932e8e5879886ed80f25794886cb1a75426ad858db604fabe38ea51c22325852355e9389bb01b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a7e973c88d2294fe2302927937d3c5c3

    SHA1

    6315bece6487914ccccc9ec7590c97889a2d0f35

    SHA256

    cf35bc842038a3e920895a5edf63144b0a55bf55eb3b6a07a30e91cb3a2bd0c0

    SHA512

    da800a1ce8cb065f2ecf6ef5a220df298a37db4e0c165fc44b29a974f4736ef91197439cd7e877e0104784837671f31de4d5515eea507ae0abe6b786e3d4fb63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9d294ee3151134a7b48d865f60ab4510

    SHA1

    338b19a69aac2d9216b5955b087512a1c59a563e

    SHA256

    87c5100dccc0f2ee9c2e0d717a786ca775d102020172437f7de713067afd71cb

    SHA512

    f14debd9d262f87f003636dfc9f0c763f7aad257e64c24b540a5fcdaa7ed4ad1518e8ca47733168ba8eb41ef951eb1173167bd6964d9e0bc9458e4d17ea322b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    18f2447f00df787cdb4baf2756b6717f

    SHA1

    4699e60293cb2041a8c7625eb86e3cb09a562ffe

    SHA256

    ab08976fe230bba57d2604671ceae8f8b61ff146dbb72f77fb6d14a46542f26f

    SHA512

    cbd20679508a85c7de8e8d2422edc0035df1d6b2e3564c0d4e9f150abbb75e7de40af6fd536f2221dfa7ba8a2039fffcda71a518bec97775eaefcb49030d3535

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bb7ba4fb35029babd8dbd7165c5e9e70

    SHA1

    31439e80625a524e781f2c1161fa876eab08b28a

    SHA256

    d84ea88b675cf60a19d87527e358c4be5de80cbe24a3248beea6a856dc43d641

    SHA512

    58ed732173035ff8f485c87377d9ba9495f9aca95079b4daa7183f7fb5d638f39a35ffcb807d67b98ce9490b89b2dbb362621589083fe4eff42c6a239f119edd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    020d6a0d5750e959dfd6d2c6471dcca4

    SHA1

    d0051a721a61c15d7ef754077ef4e5ce44a632df

    SHA256

    3acab2ac0b851ab77b1061672f7cf556efa2e2e1edbd177ad6050127520a0f5b

    SHA512

    63d7ce8ef898b1f13a3e9d283863d7f81497f3cf7a1042d1e8bd512e3b6c56969136b3746235cf76ee0f0063ef90a6da82e419bc3e033768ffe435c182207a40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    c59c1e7efda24e9afb616362c0559c6d

    SHA1

    84d96fb7ff12ab065f249112c50bb94b8da51097

    SHA256

    e4f0e6537d5a8d206a60714b7aca5160e52c2a25ed839c22ae28edadb5126039

    SHA512

    3e73969176516157af1a75bfb14d0440581ce87858633bf10b124ddee9c54353be08e86f77cc64991b76020c65ddfdc2278684e58bb4036f2ca7cf2152dbd3e0

  • C:\Users\Admin\AppData\Local\Temp\Cab8577.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab86C1.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar86D5.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b