Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    02/06/2024, 21:15

General

  • Target

    8f72a2f7618177d76b1eaf6a1bcb01c3_JaffaCakes118.html

  • Size

    14KB

  • MD5

    8f72a2f7618177d76b1eaf6a1bcb01c3

  • SHA1

    fa04fab8fa859ca018c3cdcacd598e8f928ec6eb

  • SHA256

    38a6e0fdd060ba2a373668720eaced0d7488871b91c9316ef86c531cd919476f

  • SHA512

    cc49f31bca5476edc588acc7b2912418609c018a40df4d04cce585ae90773030994dcceba30ca29568327b5fb7e78eea1574568cd98fe7388fc73e3fa8a7bc6d

  • SSDEEP

    192:SRKJMa0dyhPwV0EeYetfL1DHs2bSYLT2pHco+sxgK7+Jye7vkon0Q/:SRKIdyEHeLBL1Ds2bSYLqPxgK2k8Z/

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8f72a2f7618177d76b1eaf6a1bcb01c3_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2864
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2864 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2620

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ac776757bae707133a2eabcd6c9540c

    SHA1

    62189ab90a10f70b617ec6e42b43ef15f9853d67

    SHA256

    b16669a06d2d3b6e6812aa8b670bd3b42e4554049ed45559f6a773cbffd3cedf

    SHA512

    486f5bb3411eaf3548ce654f073736dbbaf568003ddf848769d7abc6be065c3241164e7e454e3c9e30f22ec967703a16725d499c109738e5165ffd7788ef2f22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    778536fbd8440d11c70cbaf7a997db47

    SHA1

    83e4b0b31000c878eef4ec35f22e6cd02426e445

    SHA256

    7cf3ea0486af7479873b8e02253bb538efd2e327b5da0b5b77b38def7c4a9fa3

    SHA512

    d925407972f17c9a00ed322e304b60696c90200a6ffb0c3e2ed40339a896f1c20ed44dc8459ca885920cdd50a0c3371c38ad89a0f32e1912e556db2feacd776e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a0ee61d51abc7cbcb31446ac01bd988

    SHA1

    25be83a9f39d022f57842befbda62d01101730d4

    SHA256

    34d4702fc48cf5307b30754a47382cefe9d7e9485ef830a7b64c0821796effc6

    SHA512

    171a8d25fe2c7adac0308b6d42c9a3b747711835b83fe0ae9570891449846e619982139e7866be3841755c56f7d9fff2d39ebdc0dfb711b631ed3126d3083b72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8424e065afa688dc315fe197130a41eb

    SHA1

    30c48352ef7ec9ebdb0af42fb82ceaa9c0cb03c1

    SHA256

    34baafae66038690299128810e9fdb987ce9f9279ed0267185f5a28fb8e97df1

    SHA512

    ca1b613487d5d4cf8c8938f960ee955ce15563e1c6563ab84b4e0050badf59442bde1b3dec127bf6d5b22e614a32b28800cc6901294a2e4e92e84ddebce2b4a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    02f334cde4d0669dd4f94148838e4419

    SHA1

    74d4412e3b3f3a1447f66d3d5309fd4105611d73

    SHA256

    4ac0e542afce346f69656b85c01906ad3505ab777b96926cf30b85e417b5a04a

    SHA512

    7e897f612f32ce42ce5402248b2a4d04fc84288638804950d35b5a01ea6fde9f97f3a249c6d5e130e28a8c3322506b406364d1a8daa302fadfd37f577b80bac3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    271005569dce3ed9f11dd7e3dc496713

    SHA1

    238a3a12eb7131ed595687175a6faeeaa791ab3f

    SHA256

    19583561d6ff1ab9a217cf02ff50076067fe40ee2047bc72a44bc6d96cb6463f

    SHA512

    96189791a6bfbd0fba8288c717684a699b5f18a4ef0fff88596d03bd6e7ddf8ae107b7fa20bf1b8361147b5cdbebab685b2724e8a98b4ebbc7b545be30679599

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7f6739abdd48b83400068a279f876a9

    SHA1

    f31cc51fec54c9b2d6ebb08d68edc0afb1195901

    SHA256

    fef98d420d03a24268c8fcaf03906f449d62c1b818fbe812a0de883b78586371

    SHA512

    f86fb5d27281c118701465f6fd21b6299e45fbc7f08909ddaa698f59da0de366c5befe70baaaf1d9dc2cda1e89f9425984e84c8bda17a010fe11af78c5b02396

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f5db81460799e2343548f7ad50b6e3f7

    SHA1

    bab7647890a407958f583942d95d2db11ced8014

    SHA256

    051a497db00139e3a090fd3cd6da57325375eaae8f9305426db3103fcc95a729

    SHA512

    715afcbad9a54a5857e2d77861894612b5f8808ba9a0165de4b2a9878e4a386a012d5394e791d552dda392ea3075c5f434acbb04ca5cfb6d10ca6ff8df38dd10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43d7a29b262a901a279d36db80bb6887

    SHA1

    8aa17266ca5e5f877267752a1681f80b0ae6c8e9

    SHA256

    49cd349553f97c90661408b0e4c0ece5659d08db8c0d350d7f6a6a92205750cd

    SHA512

    a0f85f9dee526ff7f78dbf1f4d63c90e02ec34724d0a1d7a2d0cc4694d183b3bde788908126f670b654bf9082a21eed795f48897656c4afb2b026fbe487a2439

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49b9e21c1d326ccced688c541e84f330

    SHA1

    f9eb0978540de9d84d3c65e75e284428e64e2109

    SHA256

    4e7ff3a034d3f9b93efb4dd0db6ce3265bd70ca677c5cbe8defc84f29f2483aa

    SHA512

    7909759201e5cf26be2975b0a4570332d33e93f90a04f5a0d3f5d161de9365ef9f5fc3092e0a90d5c9a64efff0ba628df1af261ea79ef7e6c6771f74637094c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f9483306e6af6c77b021934ab9976a6f

    SHA1

    37fe41f9b2636df9230761ba67804de8b2382836

    SHA256

    7270de693c507a3890f02c6e2746079ccfad4a695cb2c8ed8342b242490a4865

    SHA512

    6c703000553231c6617abf3d3f56a5fd16a5a4bf23768c1c7ebf09c4ea28b87cd3563e4c9da8472b13cff078c20b3e472eb458a5e66fb0beef8378073cb81b4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f4e372a6d85b70875437846838196d4f

    SHA1

    8751ac53996a5516790048f1b370b103144ae577

    SHA256

    e604b6f343a0ce7364dcff1901c39de2ca9e203a2ec1c54472a6cc7c2d37ab7f

    SHA512

    c6efeb3d42a4702d05f31f0ff059a92d4b32e1230a27a2e0bab4a0705e4b25de7601d4a3864c058f45b19ccf65040def2a156c5269b4284f79835e11b5549d28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c796a63bbfe4d053400bffc1d5cf84b7

    SHA1

    8c590baccffcd5a0f6573e5d77fc802f42289f66

    SHA256

    f4090c55ad390d78861e3abf9fdbc70dd56b785310b8f8a88d20ca30e05c03be

    SHA512

    b1e099271236bf950eb9ab2c4b66d386a8079fda0e6161155a4c761f295916ceef06e562ce8b99301955efcb26146694a9d32417e99a856f27b05f1c16c16a5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df9d990a4052f52df2d813efdfb6de9c

    SHA1

    87ca525bb2b5bd23c91e57bd3f5d6cddee3986b6

    SHA256

    44d7b3ca479f48b9a09897acd838d55c42ffe5d6de79548f73255c4086278896

    SHA512

    f446f958050c5f02d2fe0ac96b4f7484cb1bad8c3c69e160db8d8288d8a20eea01e53dd090b5ba6d07e74af75be185a0e6c19a9c8e0e252c0336105ac23f63ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5b52cafa7e79939b40d4cfe71d304298

    SHA1

    4acb5a57db11073c09a1e41e8b7830bec5192496

    SHA256

    f4021bf8e6f9f281561ee37c08b9f5f3a31752caaa51555ad7e68b0f182a5492

    SHA512

    1a2e8922c111cda4bd62bd52c5a86633f9e21f7ce8af629ba4f06277d7cb198e002615bcf8dc02e5ef7c18f6b559fa23cc9aa06061a63662d8182c82f2f5aa8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c35bc366c5964f32b27722b9ee3494fb

    SHA1

    d43ecab177c76aa9e1de57307adb8d1757119bbf

    SHA256

    757226c4fef8eb3390e3630d6db8c8d995dfd0537c3b6723adc108e47abfc8df

    SHA512

    0dfb112397fba820ff06edbb5d39dca48f3ed70b3328cead4b5b106723ffb408f6d6e617f88fdf057ee3d64a9f96fe189d589b76525f2547fb225b71632b77a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c4fe12a1b02c9fb6404972d9cde7a44

    SHA1

    cacc0ab440d43b94b7ac37855ff7dfc082dcc214

    SHA256

    d77a9107a077d98193313640015d350d976389a7c084d2c98e8778fdebdeb21a

    SHA512

    16c1421e5b8f6d639c1d61a9e115f694a083744b035b38787acad76be2e56fd03aafc39a16e9f499a4055e3fd44405029ad84367defce1930b066f0abe6ac819

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5be7fec2e9234f680c1713777ef90b4

    SHA1

    5d6b6432b86af36afba186cfa7ec86b9a99b4316

    SHA256

    1a6c3d8fcc3f46703b31cc376e2962cace86e503a0a0610be6eb013f1d2fc6d9

    SHA512

    62072f822744773f734b9d74d3fceb842a07bbbd1465fa1020c34ac5ab09a58ef043f3d77655c026ae43af2d1189b551843a4d575a1d3f1d92eea46951c36623

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cbb124fcd1ac13e0c142a9be3e03638e

    SHA1

    9f5a8ac21a46827d2c631b71ed759232c49e5f81

    SHA256

    542eeebe759c938e7e282252bc82093e66709808d1b5a8c103ed8dc1de6ec783

    SHA512

    b90394dcb9bc63daa6b9c440187a7ab87c5f1f5a1fd8e01d20af6dfd53e513c3746f4438d69bcfd47d151397aebbb2d1195dfd09a2746912118921f862a7b47a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e9e676336730d29fcfabccbed0cc46a

    SHA1

    68fb1542883da7ce268a8232fe83b1fcdcfeb745

    SHA256

    b0c71699046fa52f20584932d25d4fb69f712fb839b8fcaf7ca7f97fd00b5653

    SHA512

    0f6ffdbdc1d3fc1ae04724d4a3185c8d5dfe5c2667120d3d5908d968b816fa6694bc3dc9929b6d04d5cda5cce3c4bb14451308ec5b57245d028fce4ab634ac4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9faac3e3160a3e8ee94b06d7f478aa2f

    SHA1

    7883cb27edee8e040e38697e624c59e56b3025f9

    SHA256

    6ea32fef716a429b23a3d077bfcf5bab8dfe76c6771585e2c40930fba4834de2

    SHA512

    a743449974b7ca69a9d2a3b699ae602f30cff13ea6eec069b3ddb92ff51b692c8c0053b0453aec8eb98bdbbb9e541287ea7662e1cf3a122c48f0520445f39c17

  • C:\Users\Admin\AppData\Local\Temp\Cab3843.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3934.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b