Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 10:57

General

  • Target

    9186eef7a266539204529c0aafaf97b6_JaffaCakes118.html

  • Size

    36KB

  • MD5

    9186eef7a266539204529c0aafaf97b6

  • SHA1

    3a36e3954f2e80f7a9384d935c711ec2733f4976

  • SHA256

    e40570df0413632ad7ff4897fbfaeaaa7c02c01c7ef61ffe405e91cd29c2b3c2

  • SHA512

    880a94c2747bb750623eb02f062287b04bc5d73314727dd3ca26aeeade0dd9d68c8b97b63144cdc97531c90a9b860e07c90fe1a736b407fceb4e7caa7bc7fcb3

  • SSDEEP

    768:zwx/MDTHUO88hAR2ZPXhE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6ThZOg6f9U56lLRq:Q/nbJxNVNufSM/P8LK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9186eef7a266539204529c0aafaf97b6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1700
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1700 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2180

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    13ed5e0369cedc64c8437eb9a493a981

    SHA1

    880053c91809fef7b2a3d688143f554d5a05c0bd

    SHA256

    3560614f2f62c19498d2ad6c3b9fa8f232883167479de05e924a5a3ab19a8454

    SHA512

    18b3c940a3b722b58c476af4141ab987ed9f7557c1e52f3f20548b2c209abd67c943761d22e20ed59c36d69f8cd911285aff7efdf2d20f51c35cad62932aefa0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    724B

    MD5

    8202a1cd02e7d69597995cabbe881a12

    SHA1

    8858d9d934b7aa9330ee73de6c476acf19929ff6

    SHA256

    58f381c3a0a0ace6321da22e40bd44a597bd98b9c9390ab9258426b5cf75a7a5

    SHA512

    97ba9fceab995d4bef706f8deef99e06862999734ebe6a05832c710104479c6337cbf0a76e1c1e0f91566a61334dc100d837dfd049e20da765fe49def684f9c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    f1c8961af127971a6b4b2051de1fae48

    SHA1

    d5e4e5170c1311c9642a6aa41e968abf211dbde7

    SHA256

    84a5523a94553e796c6d04eb8804a4f14cb11870c026f529c4eb3140351ede78

    SHA512

    d4a6b964c63337683c1f7199ba95bb6b12e3ac7bfe8dcb1ff8c40f6decafdcd3b7ff3204ada44a147ac868b2e6195f35193441477b0a14b76975f6a3739c0daa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    707174239d18acd04a039a001628a413

    SHA1

    b7021ac508ba21bd16cfa3f297b1845c90952bde

    SHA256

    87fa06117615eefaef8143e86fe06a21dd4508c0e4ebde700371bc39583fd7fd

    SHA512

    d2bc98d78b5912a191fc7aea9f1aba335d4bf1dac7e2743ae26606021e1bf41a59abaa8d1b0e19ddbe29ccbecaddf8135d3fdacd0fb0035f2f45469f54581b16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b5bb9f63ef984b2532ba92a959f74b8

    SHA1

    1b5e1c6827484569b7426de0fddb14792055a604

    SHA256

    b448235c9606a233a2593292d060c69376cdb3e6c61128e454020bd490ae38a0

    SHA512

    5c0195a0fb4568a23247c3999d5107b33d14b6c2eea4270d61777f705285a09dc7a66a18152c097802b7d5823324f1077d675cf5fa125e0aaa1a51b45dee2da8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d4cddd52afbdc9133d2423fa6ee9245c

    SHA1

    47a27924097f9f48017e126f8a26a4956873a774

    SHA256

    d1cffc74713346a522672f3c5d45ed5e7dbf9badd024abface56b820f38c6e74

    SHA512

    50a0e970098341596160db7ab8160b2302136035e3d557db14590f2606824d1c8341d642b427d67a9641b625b19176ea778ee270d8cb0c3417d0689cceb07af6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b2e8c93b411e238f0dacbac43df1ad2

    SHA1

    bf1369a79b451f2f2b5f3cccee5e42bd2766ddc7

    SHA256

    34dff8734c75bca152f359b8b6594c9de291ed56e5a8eb33cb388de19929db74

    SHA512

    9ccc560b91ecd66c449482bedbbba68aa2963cf9a9a79e0133aaf8ecb25566b9dd00a36e6b8f667ca41505590f73a5c897915133dbc89e216e7aa6c7aaf16b22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    21cdcf8f9e5a0684e98c317542389819

    SHA1

    a075f501913e796dde78c90d2612c96060b71fc7

    SHA256

    9483a8a500937f802edf917631923005b6080c904eca4db3c9fc32156cb5b389

    SHA512

    970f4e224e57b7fb83633a4e68cd3299b00ed75a38dd73b9eaa8af4610d94647c00adee5cfaaa46a8087de830432c32371b0771f69b7f0b43b3efea95f7af3fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    321cd99698ea2cd796a9f4f09b3243c8

    SHA1

    085111c8be9a3be7fab3f2e61907be32e4b927f9

    SHA256

    7055a1ed0d0935a8f0d4ba9f3cf52da3019b4fae066ba7d81cc674a8648d8cc3

    SHA512

    ea5b3d9b05207023847041068851e65eafe4018145b6fa85233bb67059a22692ad3944b77656a414f9d567bf9cf58745c26a8097974c501261f28959bfea5d5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37ddea5c1441fc3637467810281d8320

    SHA1

    cba017f30798cba712b0e1ea75c523caa353be8b

    SHA256

    30d0eeb327be8390725d150dd7fad31e2010672bb507c0bd759a431834c3cb01

    SHA512

    e2c34c703386bb93279a65338846838e462a13733acd5630ab12e77dc4f5ba61fa3fdbb50c360a58cd8f61510da1ba36e70993449987291012277850154cb87a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    90bcb44e7264a8408281ea10f307332d

    SHA1

    45f6927ec4972f68cb82b43850ae4baaa5171ecf

    SHA256

    0548a6b4f3f974d68ebc60eb1215d9032ffd913b260254494e6050a09283ff77

    SHA512

    6c1ed1c19590f80878c92171322badf597763529eef4e8ecbccf1495fdbb4d20ce4bf381511ba6a06d03883686de8d7693b7d89f9156c5fba90463bdbdf5239a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f17373d88121e122f9dd7b6a43735e9

    SHA1

    e9ad9d7c3d382cbe5d1e538a46815648597b18cd

    SHA256

    48adbe427a9c120e9d2a80050095089923b5288ab0200ca223889ace542169c5

    SHA512

    192ca5bf69ee53db92105f0618756cd77cb759bcd2707a1e055fed4ce62440bdf4060fac659a3249d8330139b0afb5681c2a152a4747eb684b3269593b273bd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff8406d2c347743a09581f59d8953a8d

    SHA1

    1a4adfafa5d65e13b83a0d3df36f512e42c26015

    SHA256

    d3b1368602312c2d04153698b14ef338ad61acadf15dbdbaf831eee886ccd0db

    SHA512

    d49c7dfbbd9e27ada4164babb84c4167b82fad1924592d230cba8c0471be319ee634c7c224171ad016ae9778ce3732a54853bea38c2613c0afb813efa1a46fa8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b5c0a190827e53388a524483a4045cd0

    SHA1

    2a9f9bf33ac8829ae21d8bd8062ed871c2895a16

    SHA256

    545c5a7cab12d95e2bb4cabe4b2d498459b0c3e5979864670e6b3dba0b202a02

    SHA512

    54d936c7048e4137618c474f1f007a5c299460bf8e3c69c82af10a6b01faf9fb613c9e2b3baf24faef24b71f7fdc49a4bca16fc55587ab847098341e740ba63c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c7d0f1e80067544180f7ae9235783dcc

    SHA1

    a611dc46ba108d6db922598791aa714ebc9d659d

    SHA256

    2ad5e2c9a23db5e6d68df38f5a76c0026630559d1d38c7e5d358236f5d37fd56

    SHA512

    c93dcd2276098c13f924b6b7b65f393b324239df7c694c30fbe5802b6feba4bcf2fb5604ec75d8e4499cc63a5cc2c685aabe318491a19e0e6988777f5ed39230

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    81696fe4635cc84d10428f1dbc585722

    SHA1

    90e03006d9f29dc43ce0f8d4b1880a68a6eb797b

    SHA256

    e605b0de25717787b6cf741cc194ba92101974acc81c4af62e0f322b6ad43dea

    SHA512

    55ae6cf2dbd7cc6ce324fe59b98a19c44e7d2887bd01312dbeaf89206e20085ebeebdd73be9b83c4b35e9e64a8a9bba71e0eaf8e81bcb0227723e30cd0ef004f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e60d041b6008b1b5f33073c68953558

    SHA1

    e3243c3f357822ae28ebd5989212c5fbd5d0bd02

    SHA256

    72f65d1d92cb6647a53827ed868c3838bf82d6e6243d3efdb9a26f64cd0a2929

    SHA512

    8be70ab5cac01630b4d8a4a2203a3d9620eaa58b669b08c703cb02092dd379924471d907934cd6765299936408414f793cb98723b396a760a870c2aa3f16bf92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    74500d94e506ffaddc2c043d8f78bd52

    SHA1

    38f5f01f19f946463307c75b207d2efa575ec9c9

    SHA256

    964ae0d4e9747568174bd386b6111747b15b34f2112c49d773b90f510618e83a

    SHA512

    82545ebf6120766f76884423665265f2344dfbf78b705da88a98b8a7e93d893b2112baa8aa16f6e4e10e25ef11cea5b7361612caf03043033efb9b24da2808dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c8cad0ae1c87c46bd7cdb4cff39e9ee

    SHA1

    aa3cab94a2d0b328b9a2472ab6e65f452ea23292

    SHA256

    c3b82a07d30c2f71a7584345720a19b2ce1056abff15fc61bbb8f35a5fcc928e

    SHA512

    83e8777a10f3a2a473c66758cbd113c8dbf348aff63a0a8c87fd19f6b639b296f79b32ee256572c799ca2c1e794ba104ddd373e4958531967133332d62f024a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61a00f32ff3abf5e30ecb59a28aaad35

    SHA1

    d4930115f9dfc53b06a7257bc1a8f3527005296a

    SHA256

    f0ca5c3a3768186d8e716b04a6050aedf93d0aeb539552a961280ba58ada1afa

    SHA512

    894812bb696d9dbfdbfde92cc9346e37a8dfa6fe21106f4ca3624af7aa2c37df36dececdafea81731fe14a68821cc3013d27f2a2ad993c0457b94f3be133d459

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    38c0417a73ce2378fe28c6726029b72b

    SHA1

    f994d7f5c90929bc16d88610ecd8f01ab67e54c9

    SHA256

    8ba750cd1484445a27c0b6fd734e68252b643c4bf750d3b74d35ff87de3112c2

    SHA512

    7cf670080b6ce17c7bedaf5e13126caa6ebd2c1c3eb7c848a553d5377f72e48593ec470490d3c1314c5e623fe4ef69fb67b62db03e1e9fdca8fe64a894d7ad7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    005fe3116600dfce7ae6340766692973

    SHA1

    b7d2295e00a7ad1da847942f7aa02ec2bf5e5bd1

    SHA256

    c15d174bda9b20d46306ff02f4247a4b71db2788bb574da106d44c8b644c951e

    SHA512

    f727c657d872c15f1fc4ce105fb452e42d3be6a4cf9f9479cc2e650b53b902fe448417d92f8d5d75911497d37f54c6c158191e7ceeaed158305e0b8e3ad56ff7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c3f92f8265a7953856d2e4b697dbf56

    SHA1

    72d73ce120f19aed02bbc10a286d27c30ad725e5

    SHA256

    989a8369d550cde88c5c382721672ff0c2029f93d6ab3ca3abd7a099d8a0090e

    SHA512

    51a814ea96cdc66bab1954994ec50bd7b7c76e07616dbd1b5650d05d062de502e171a963b134d33439b1050323dc79052f491d7b84fc3b00e1e26920a82e42b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bae85bfed1535860e2fe0d3ce6f811ab

    SHA1

    0226707b2b6bc5126f3a7e639b6733d22c3d6fdf

    SHA256

    5fcff06612968336840a5039de253ecdba3b84f20386303617d9ea7782137c0e

    SHA512

    1c5d87521bec69bc387deea3966fa3241cb69e3cefa77a3372c8b2c77537e59b11d3e50c85b528804da3d3dd290c97acc090d21e761ca6b8b0690894e5c4e2a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d3ea02301921355912c9359d7e777d1

    SHA1

    2d8104e85a2b23a0f58b82cc30d5de6b5037f319

    SHA256

    16a30a0158f169871de19075be6b5b834c3a43eaaf5e42b58177a882f13f3903

    SHA512

    1cac89a75a680180f93b86d064f8eca838c5b21613db0789066d89a6345bf69eccf861d029a8304cda1e302790d285344764c7d2028d3442faf2b832728f0c7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    392B

    MD5

    653aefec7295dc0f68da359e73b2774c

    SHA1

    060552d161e68af27632e4c9ed74bb009cea8836

    SHA256

    f624c0fb170ce343491c4785e8a7aa4de1d537b5596831bb6d83b42b84a74e82

    SHA512

    4f6163cbaf0c424eb627152995b65a7b0fe68e2fbe42def60286eac8c75a82a3afd6600aef4912fd2559bea74e5bb4eece6bcc08c3437c58da9e1f0fcda24c2a

  • C:\Users\Admin\AppData\Local\Temp\Cab1880.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1895.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

  • C:\Users\Admin\AppData\Local\Temp\Tar1956.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b