Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 11:03

General

  • Target

    86c664ca381a68fae52727938b11ebad_JaffaCakes118.html

  • Size

    68KB

  • MD5

    86c664ca381a68fae52727938b11ebad

  • SHA1

    37b170f9b15a331135177ca34505816f131f26c5

  • SHA256

    88c95cfaaa9112683674e2ffd2cbf7d0d6a8835978f5df48b1b91bdd37d5a45b

  • SHA512

    b88d6a52c21f83b54e19babe02e6864717d02fe9a42fd7b92449f2590e85d86ad18ae66552b323a77f3fb5f3f6179bd370f3e485c1f7de561dbf27bd86dc0b06

  • SSDEEP

    1536:kYQKP2oQpRRZrCeChW7Cjsq49ZxfKXB8/w5No2/NOy:kYQKP2oQpRbemftuD

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\86c664ca381a68fae52727938b11ebad_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1948
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1948 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2664

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    0b8b5e7028f173cf2ce68da0296041c4

    SHA1

    c676e6023d50c482b84f71c9c4c6d3c3fc649b28

    SHA256

    043d08475b8f384e33d1930e05c711c883d9f3a01abb29909d6bfba4ab606a69

    SHA512

    164ad773e90ad86aeb5112b39caacd66233ada4d905eb4c414e7dc2e8af1100cd020d48f4d05a447006775057c7ff2933f2714d139ad4f81a88665b54e918e00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c941bb484d1d5afd59c0750e61c17c28

    SHA1

    9c868c9dcab74403148114cce6ba5e6d2763abe4

    SHA256

    4cc1fcc3279d6bd3f85ada6dce6a515f08bece0452bf85436c0b5d8fd429a05b

    SHA512

    f4f55b8c2347c01eb8fa6174fdd973a2a2e008c0796469f2977752e25949159589d365c1e7fcefa0f62e291b0d581de2e0788ca2046118c13fdd03e8c0d62dfb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    31834b92d377bf9d7dd76b1c1a81770a

    SHA1

    7b1c7f940bcdec85b9d8ce02a9042a6de794813b

    SHA256

    a2736a48746f0290f85ed4b3c7691519c37abd1a6126b3552220fde8d46c4d0d

    SHA512

    832722f9565a56817bffa184f8785b6e377d2e9793f503acce448f60fd4fa2a682336fe2af61bacac76410f805d26d6c4450548060f1fba09cd7abbbb3d3c4f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    31cfdbd7bb1f7d7ee45c878d8b149470

    SHA1

    f2589ec9fa18325894ec4014aec27ed879c34337

    SHA256

    73a5a7b56e8311972cbef1009fbfae0e36631f4242561eec6ad3104f20314a36

    SHA512

    ce684c46dd5965d86003101bd15a9579a9cf69cdd41371669abf8cf0002a29b46e39b3d92873ca02320601e51d8c9cb7335eb69b411b70c869acc55f22f01464

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0044ea58075d45a8afbc1ab36780f89

    SHA1

    d7f7425aeeee53506e9a99b33d148b3432343ae5

    SHA256

    f1c29c08599e7b9e6b75a717287904c698e9b856b6eaa39f9c8a888c7fbb0760

    SHA512

    fc742fabb92a84cd205035304ebdddbd0e0a80c42e4ddfd3c0a8c19c29603e31a744507f518c97e56a6af56e371365c15b488a7ef2bc368525a687aad0386c7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    edc6f6f555b87677f52f9b63a16c947c

    SHA1

    4f6f574dce7635956eebb2d3f0f4c1dfeece33aa

    SHA256

    471513eeecea8671a9e1e9cc45fb7b2e1506edff2e9cb24f310cffb3da9a99fb

    SHA512

    239bc6c6e21f83840ced61f030b852ab68f419bfa2a7f2dcc4d29fc8fa04c8656e8ba19a97669f0aa941d861187cf46ac63fa926ae116da6d9680025c035638a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f19d0739796123d13b71066933c1fbc2

    SHA1

    02a2bd2fddee818cc0787f235729db0d508dee3e

    SHA256

    8c69024778e0a74e2ba027c9d3ee494bf9605852884e170959d99470cfe6b38d

    SHA512

    d6085269f658a1a90921337893c5ba4173186b84851b4f3ff2ab832d2e8e06f2cd0a69441b944109ecd7c4a6c88ee430c4a3da5232dbe08b54c0957c1bdadd42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e9000962ec486f400505cad7ee40dc3b

    SHA1

    b66d9e4cb42fb991d869036edc51ca66fea746a9

    SHA256

    9da5dc353b812edc2ef0bee1b219b059547db3ce261543bd76a85009419e8987

    SHA512

    62bbaed5875ed126aef492f5ea734938dcb8e585b9bda5de290bcbd3e0e78a76b294b0ddf5cd8bf89e71dec98a90fa86370d6e452f1211f3d32d66a401126d85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2bd08ca861e752db7991ff446b9bd68

    SHA1

    49643208de58062371020dc7c78e0f1dbb22e86c

    SHA256

    8afd168505dbbc43cb359dbcde3722d1590241844a24dd24bcbcbe1350372edb

    SHA512

    f614bc9e0f0224dbe099a99efa530d874755d4e63ae2c4613e38df67da09e05f3f9c13def0d27b1931b5682de29d083e9e00b4997da672c1ecc65253c9062680

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a50a12ab34e43a8458ad41e6975ff18

    SHA1

    b9fcffe58e96db022f1126f7a443cff430056e8a

    SHA256

    590d2ea8a6c597bb922c371beaa566677cf74b222e1df2dd4953537377f374e8

    SHA512

    96f863f3fdef733798a29042c4df665cb315948c5a29551d07f2ec4179425cf007292b4518614d3d5ca6cf52f73f6ce390c57968e33e74fb9bb1783d3fe3e5d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0fe59de37cd06fc96f6cb3c66a813aa

    SHA1

    bacb079128d451754c46437fd247a7c6635a15d5

    SHA256

    38788311869c814ccd43d2d5539567cde5be5a74abbd26f9ba3a47bf76d40e7a

    SHA512

    22b74c7c808635d3254a7d2f56668e6ae9b81f86f8fdbb30499d461f0f1f33e0afbd91c9fd78eaf4cc7af4aa9c439fd256e0499e7e40f976504a1b0607dca69a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7842738afbf0d17212f388f525472a37

    SHA1

    aa9fdc61fb5d29115b2c93845e24efb399703eda

    SHA256

    4830f4f29fdbf2dff868a56b1bc7d1ce90df64389c84f5c1566b1fabbf974ae1

    SHA512

    4bbc61e468bef24bf1e40bd4047c8c866c31c5511178bd7799dbb4b0bb5ff40f567e1107e4e1823efd87e0294d187c9a7d113ef2e8fea253792172b86fb6198c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2de97090d2b14a2f7be2fc30599dfb0e

    SHA1

    9dc69dbc622c79c9a7d90235c428fe48816b45d2

    SHA256

    f1e7be81cb69d5dee05f439d6a8ce7781f5a8ea74328dff7b3f35515c75bb519

    SHA512

    31e357c03d122e82542e5412eea85d69c308af63ab31c778fa538a82881081b53e06d9409561c5b619b4f53ded89c2457b688989f6edf376c22919a7aa2cd250

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22b151d98a46b8e5f25a3714d11fd380

    SHA1

    9c0c92eb37d086fdcb9dcbb57eee8f77f8f77a3a

    SHA256

    fe82ca1469bd6364b38725524fa01dc5ef81fbe040a40cd9e8490e9fa3063e89

    SHA512

    345134f9dcddbee4368d5bcfddd34131cc8cd28ba460d1fa72db2872b985f5bb228255fa938476c62f883017b5c2fbd7c6fb55647f35e432ddd18051895237e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d976137ed30290707b2f4a5b2a414375

    SHA1

    64267132f74deb841d2d0d803ec376d5a6a8a57b

    SHA256

    4bdcfc374312f670398d99ab57eacb1997a5798b291052426ec73ab3c1fa64f4

    SHA512

    92dbd577485f12391a4c087412ab54483257c285cb6f9152435e60cab5547405b9696c914ecbd9195fedccd3559a4af74ac190691006744328ee8850d6ed5a97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    04387014a4bacf7ab8ebd2b096adddf3

    SHA1

    0c5b2a25196c3364d5af00a88bf99b528e9b25bd

    SHA256

    5d72c4155b9bdbf7b97d38f5516b05dd900f7d96049e377473899c2dff9f6b80

    SHA512

    27c53edaf092063346a996bbae6bcf4b07a58545aba899ad31d2bf7ef684a42b42cd0846ecbfa3ae25c4c62d374037305b257b14f4a49ecb8ce172b5f6dbf966

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8485ac8598d429f959378672a35abbf

    SHA1

    f52f8dde64789f2414657b91474ba71cbbab853d

    SHA256

    1bb6c7963bdf545f8363aa289cbb4739e47bb053cbeb32bf07d479c1be688aa2

    SHA512

    de6ef51d6352a30fa0976b2201c976eae320b4afe1f8530a29b0d431358e0e3805ebd6fcb5c59613c4f60b725e1032aac8015946359f0c61eaee065c9895bedd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    29a39cf8eedda228cdf4f8613423e4d1

    SHA1

    3f8145c0a655ed9cc811d0089ae8984cd6227dd8

    SHA256

    0eb01cce350ef866e4882be841ca48066c34889024392b8cd3359b0c12951899

    SHA512

    2410b4cf9e9105895aa5bd9dd6197e1be219d4dc796568bdb64509fdc5219fcb0a6bc5608c70b2a42b1345ce6ceb2bb0af9d46c65efa1f1f614ca060f0a6bac7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    de64aa914c0e88b7a065af640b0065a1

    SHA1

    4d11c9b1027a239bf6a2e04d7256fb4b4be49795

    SHA256

    4a4a9fe2bc96b8d8f45c3b61285ff110745811f1966ee1a1e9a252f677e39e64

    SHA512

    f774ad16b994a804f6735d2b82b464223714574214575109eedf04c3b662ff8f66e6ab6e1241b13d4c90e35fc664a5afda27d0d61cbe45169df604d242c3d4e4

  • C:\Users\Admin\AppData\Local\Temp\Cab3248.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar324B.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar334A.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b