Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 09:55

General

  • Target

    86985a495f2a0950e67b952f1d3e811b_JaffaCakes118.html

  • Size

    36KB

  • MD5

    86985a495f2a0950e67b952f1d3e811b

  • SHA1

    f6fbabedb671c154dbc3c1316e9cc200dbc7d712

  • SHA256

    ed82cc944a36a6a550f29395224636f430d1ab0648ef6e62cf778f61ae38f9b6

  • SHA512

    7982086c38a0de00419e0dae16915c2737a7a945afa7bf0ecc0f174274b8560eabc94fd6d32d1c5415ce126e224226a9564423864d48a20bf0cfb953229558df

  • SSDEEP

    384:5cd3Fpvap0/eU9uk/lZl4JZXCjt+Pt+rt+et+Kt+Dt+6t+y8KhcKhhKhrKhlKTWn:2Up02E/lZl4TXVtG6n78vl2hlM2mqwI

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\86985a495f2a0950e67b952f1d3e811b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2400
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2400 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2740

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751

    Filesize

    717B

    MD5

    822467b728b7a66b081c91795373789a

    SHA1

    d8f2f02e1eef62485a9feffd59ce837511749865

    SHA256

    af2343382b88335eea72251ad84949e244ff54b6995063e24459a7216e9576b9

    SHA512

    bacea07d92c32078ca6a0161549b4e18edab745dd44947e5f181d28cc24468e07769d6835816cdfb944fd3d0099bde5e21b48f4966824c5c16c1801712303eb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\82F6F8A82BE2791A8B42B9799858746E

    Filesize

    503B

    MD5

    43a8f8be105da29acbe424e76ad333d5

    SHA1

    6f5545e11c66d71f6dee21bd1862a2f7c6807324

    SHA256

    13a86b6cce28758e6dec3280b9ac3ce4d243ce05790c760f9779f48218439c25

    SHA512

    6a0392e989e3d5387d0090307a12caae284634c0d6e53e488c679ab34b66e0aad367b9b97a6b66ba00499303378927ad4ae7024070a1fd28f460217399884abd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751

    Filesize

    192B

    MD5

    9ce930bbf3b6d7fc864f30b00ee6e635

    SHA1

    f4977aecdbfde34ac8ed8fccd8a38a1e53446a63

    SHA256

    f8259a1f1cd52a00791294674a78fe6d111affb4bc4656ab87eb688f71708963

    SHA512

    3caa5377b8bbcdd6c1486f75a4ef57b703b28db3e62d0d9f7802391c796bcae134b49c1c799b626447d9fec2897d7a21b3ba382a0f71ceaa5bc2cc4dbb4963f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    64a86c78b29e517313ae3bdab679c130

    SHA1

    45d7104830fde4ed34d2380a98989f83b43b86a5

    SHA256

    1c8659a25864c7dc8d93d19e408be7650db5c134f824fa209dcf891bb22aa69a

    SHA512

    fe5d74c6c3f41c04c7a074ba28f4ebb4c1046488e27503c63a4340564a123026948a496d372bd9640a3c257317572e75661b8665912202919c319ae2c488522a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    039f940f2d60768a4c43e7a5dd6d430c

    SHA1

    27871bc8681308d7739c3a12bf43d970f2038d8b

    SHA256

    05756f4e1a4e0632e504da454e5ed87dd7478b29d9e58a1de2b4baaaf9ee983d

    SHA512

    6e3b37676f9be06599ac991dca2a3cd43ffda13da78d95163034aea5abb945d2c68f8c59e142aced942b132ccaf60e3ac84319e474830d5a85a48f52f83e905a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9a4a67f3cb3052b25f7e80636e7263e

    SHA1

    12b5e28043ccedb285d6a2a9336ffbb807313a8a

    SHA256

    edfab4985a45ea26deebd5a3edf0fd755b150cfc610c6624a9936ffe2102084c

    SHA512

    c832ca7f21425c6c8808737a1b0fa57442c8a83726574cb0b4db75a281bee390a3f71a75d71449079a17c5d77b6b7f98e70c578ed09347254cf1937dd7faf588

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5d91f6281ba364a2bc4c11b3d28cb6fe

    SHA1

    49112d2ea96fd3d648aa36f7764ba0edf7d6ba68

    SHA256

    d53c3b4a93417fe70a73b8d205a72495bceb0114802cc42a49973dd0ab5bd15c

    SHA512

    41a71ddd880642542d3049b6c6f736a0654951a21de4fbdf85b17087bb6b132bf4b49355f1af783eab910e2c5b153b15bfb3d78dde427b774cae561aa84b7eba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7804665887d334393a1730b7b65d4776

    SHA1

    4a14c59282e300a8373e51a073928ecd1e66c7d2

    SHA256

    40726636aff952ee7a7051f55fd7debe01908e28d2a76768cc22d9faa2647250

    SHA512

    a6400ed7e72faebc51a80895970ddf341eae4df84eec2a4b8662ebba64daebffd6d4190cade105f3a31b1e6af5076edbfa9990c7ce487c64da4e2f2c216745d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    6c38e687fc48e1ec60d868ac00f9b12f

    SHA1

    5ab5ba4fd6ce916a09321ae3d0be446c0b5a24af

    SHA256

    4ae91092450e6b6f96b514fd28d8df1134be635c04ff30c4300af75657e06a18

    SHA512

    43f51be770815e8d74cc2d6c3b67b46919e106089fc1b50f264c63c4f6f2f3f0d1df388b6acf08c8383331253966aa6242d03ce14619f2a771062182b79bb669

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    36249314171748d3c383909233b42d46

    SHA1

    985adca907b24b5c707f9cc70dd7f7aef8ab0638

    SHA256

    873fee9d3dc762c288abc340826bafcd9a728980a1fac04a8e390a7664773969

    SHA512

    f8821fb9b29f1df1ce9091dfe1e4a7867d20e9c9981973ffb85c6c2054366f254564747dcca41a4ec55d932eb73d9b2ba638696d90969c208eb925c38777af7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    182768eb8eb3b92c411982f8ce2e9b28

    SHA1

    8b97e20b95a14693b707b09269d65be5ca292a6c

    SHA256

    d26a8345647b46dfe469c87d52dfdcd5af265bf895b1babf70b6c34677146c9e

    SHA512

    b6f782dbf530f05756d7a2913478e9a63cbeb3fadacbe70b0e7af1c7fd3ad258933f4daea47cc0fa29a262225d1bda3be4dd24a947c62e3679635287be9439d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    79536c89a11da9139379955028e21ab9

    SHA1

    73532d9514275715bcc4e209237d6f90064266dc

    SHA256

    f70a431543517b5d11767c43c286947035a693cdc32a0d0d7e6bf37c281b43d1

    SHA512

    90cbc7f346e8ad619fc2a7430bed74cf8a6644ed7d85c9963d290fb3be805b41055c8377a7caacf76146249c0d600b00e27d8cf6244b7292e5084ca459f4e4dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3616486634ee3011733f7e4f14c62195

    SHA1

    aafa4fad954774ae87189fd0b3b2af4e3752426f

    SHA256

    cf0a048499c2c8e9e5a76567404740e64e619933014f2b6f3165ab581524af7f

    SHA512

    215235c36ba80090ed575fef62f1ff5707ab7e9736e94b64a790776de34873e8ac76223994cbcafa24cb02c48c3beb17d52c8526e5f2a093113ef19e3df12f92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    dbc3f7df1faefcf1cdda09319db129fb

    SHA1

    f92b2310052741bd4efbc22393728a0a0865432c

    SHA256

    0a7787c3867a7b074b44bdf472cd8cb6f3545005a8880fecaf5063fa62d551d0

    SHA512

    67a1d9a14dc8980fecd33ab533ee9b6d769fcd51bc0de554b10d4cdb3207710ccff99bdda6e2675f91e35f1a8679df8ea597170a53bd4384cac045a0e4c1873f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ae2957084d1a4a7b9e7f381a4c077220

    SHA1

    a6c344bf2f351417979129bcdd61a501dfe6e75c

    SHA256

    35bc20551342acf973fc0a82877eab3d42549c66afd93774e11f901191aacd9c

    SHA512

    81a3bb42dabcf0436d547d6dcac437c0c84f8d8dc25b242afff1a01a657444ad88f0729cc313dc7e4457796bd4c4abe801c65f205282960a9f4342eaeb36d5f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    bc881c1214496dad1beacf4c46a1e968

    SHA1

    dfde5298e62c324484a3580bb1b0a6351ab65745

    SHA256

    dd9641f124ab4058da445df33075a680736721034a4875dc7104aadde402baba

    SHA512

    9cd3a66eecc91afd6b66b9ae38396f515c70ec14f122cdd9cefa82c3d3f4a7b37dad4c9ff2ef16fa850ca029e4374c0c32e36e972b8b038d4520d791cccc7a5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3f84c27399f6f5645aef2cb527dd0958

    SHA1

    e0c5d1da018983f058ec17bd4d56d5e47a77e401

    SHA256

    2a2dc160b38371df90e420a75f9523f95a4110febce7566f962bddf6498476a1

    SHA512

    8e6aa6d8512254359517174729a27b9dc5429128ed4446d6be0c60775658e6f637139d7968fe242220c232a3dc03b27ed445ab64e5f991f0ea88a8af23d5aafb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    1b341fd3d1481b8ba473bb8f608bfe47

    SHA1

    ea7eaa73f7806384c14f1baef4cf2c78d11a0f82

    SHA256

    1d5df4995423f286a03de563342e8e74c4c7d590dc34e746517fa7ec95900866

    SHA512

    ad4735f3d88d1b155cf15763062e9df29343cf5e3d08afcce281609e7ea56f5eacb7fd69e5f96323f80a221790ebf0551365686872cfa640cc1644174cdd1fce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    0f03c770a771f776a594564fae686042

    SHA1

    0c874e4b625866c43235f3aadf182fa6900826b0

    SHA256

    60bd52c1779033ce00f751bfdecc0b2765e7b487af0853f5098aca1e79d29493

    SHA512

    66cc82765dbc3d1ee5c00faad1d6cb0ee5165aa5f5149dbf83d683832d21a59fdadb36bff588aba299154a8cb4a633dafe11adcb5b658d4c9fba1328aca54130

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ee14071beff59761ebc207b48ed39d38

    SHA1

    358ac2a37528125dcd40dc049196e39201fac794

    SHA256

    b55d3f250c4e0ba3f819caa438bd1c96067c42aeec35a4d16ee1baa7f8fb7880

    SHA512

    dadf450a12d5a697fd5fc9209ab1bdf621494c7584e398bda5b98f93b48af9ed89c72a66cecc1a0913f7b3f8e58cfd6b024cfbdb62ab7b9d1e7514cfcd07ca24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    900f9dcba315129216ec5c333e415620

    SHA1

    13646ae4664e42f94f6c38015281e372838a1ec2

    SHA256

    22bc5ddcd4cf7506b5b57ce486d648182f5c7a4bd50223dfc3bb280b983097f5

    SHA512

    f70c3da0d1bff04a1fbc86941e7e9e151992c9cfe8a4758b1e595232737a354c3f7ea7edacd01d32a94c089c454e3ae67aa75ba6a222ab990d2f86ec8648bf9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    0863540a1e88faa61514d85429d83910

    SHA1

    921419234de0002ec2d4ba936f35a0242f85eb02

    SHA256

    fe37fb74071cc8b77a06c97cb9de3c975a361b3c054d1dce41cc3ed1181f6be1

    SHA512

    e239208115c04af18b1a6c057aadab9057eddd7e482828db8b9b44930312843b712c76035cb147be01a39c3678ebdeeacfecbf1eff518e81ac2dbccab9cd0751

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    de3a37a6f043245bf9d157c3881127ce

    SHA1

    ec894f5df6dcfdc47887250421c26731fec3431a

    SHA256

    af8921894e448127369692b6cb9234b5d42ade463d1b0dca58e1c396f1f2dafe

    SHA512

    8cba20a1dfbf8f0a193949feefcbcbef93a155066b8198ca4761654623898e082ff476c77a1253e1c3d3f817286397d9057f0debaa380fc46f5dc51b4df575f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    d822fc131b7b3e11bd94b22d092054d6

    SHA1

    04a60dac87ef55a8adfada81fc594d71d73734c2

    SHA256

    75e214da9214e16fcf7b3123e6c15588acc91d9c84dc60d91701540eddd24575

    SHA512

    80a83ac4b5312078eb8b5bd68d5816edc1f86afaf5db2da3cf1373d7a3637ac4c0ee391f49c135a2510134b21831f40bf7dc6e821408357a5d1f74300ae9c822

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    1258ee0aad3d327e2f36f974183e5c1e

    SHA1

    a7d9ff0ff6998944c9f703199a3871d845d863a6

    SHA256

    c202a60ab9b900cc297d6615b0464a803d2867310be83152e18d2731f7392503

    SHA512

    105f51e9fab4c506dffa3363b7af4c8207e8f71d9d9e3a81c6687af3b794d0fd0d356e767d349f46b1b6f425518a9ebaae14ed5d5d6506464223b061b608f9c8

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SVBQZB4R\moo_maximenuhck[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\Cab5CD2.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar5CD4.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

  • C:\Users\Admin\AppData\Local\Temp\Tar5D76.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b