Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/06/2024, 02:44

General

  • Target

    936be2815fd0aff59469326f257b2026_JaffaCakes118.html

  • Size

    20KB

  • MD5

    936be2815fd0aff59469326f257b2026

  • SHA1

    3fd49d82be6a6b58124b077de946f6a4c9d39762

  • SHA256

    f725788b3682e01783898b3fa229fa63873a106931216e83c999f0bfaa607a36

  • SHA512

    ab2a8b816efdf65ea189c584493736c273205dfdfb15a8ba58036e326929406893129e33bc4b1baecb23b52c16619383c3f187b24f4ed82c9767aa558928238f

  • SSDEEP

    384:Xu+63Krf/+3juJrwWx/NiNefLLs1heMDKY040b:0akjuJrRGN281hcb

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\936be2815fd0aff59469326f257b2026_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2164
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2164 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2264

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    fad3ae2ae762c030bef321674011495b

    SHA1

    d2c55e708e9d0dcc9f1d222835343d6bb82b53ef

    SHA256

    b397198524453b88beb8098949db809c577e03cd2fc552b5bfa7b6bb4097fe72

    SHA512

    96fc30dd5796931f149de104cee0a21b72f1174a54620392048decef93085be9bfe9646f6a997db0d0eabae6b2b955013135c6827359e04e9dd74b78538c94a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f1a5e8a4024d3ce3cc34d912454bd9c6

    SHA1

    fcab8ebbcde633d6a051fee220066091afab590c

    SHA256

    75581a8adac0b7e10c268427247ab09fc1d6bf2f865af7994cfc393dc348ff73

    SHA512

    afc6146dd49f4f0897f8b33f936579828efecdccdd700ba73af0334d73a2d3f6b3b0ca07ed959df00815c8872934ac10b0bdaf7b61c2948d30713b73f0d19a2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7289413a2fbb69589973c557ede32b9f

    SHA1

    c4981498c994a231fbe572661814f103a5927ccd

    SHA256

    6861e3175170efbbce23c16203754365c3364be27ca3988c57b0f9a03bb8dde2

    SHA512

    8984087ea61ce5b4cdf3b8aa568e82a1cee27e90dd9718374d574a9bf0b2af42bfa3327f04296b54fda1392b3bac095b7324c20fc8b116aa141d405337108967

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e2056c723ec02d2520732c6060a0c54

    SHA1

    2eca6057059d0f9b289fac75bf7d0aa02c31b12c

    SHA256

    0c0fc88bc95cbf3215ef858961bdcb7e64dcf12246a5004014240c9ada45fceb

    SHA512

    97e19d0796596dc79878ddefb6948ad188fdcdfa71387cff101d0570012006febc98b1c280bafe6aba630cdd4dedd70311a74066619ce4dbd6a2e78662b293aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d3c1b5bbd64d42b5483075db907b6dd

    SHA1

    7c67132e8d647a98ca38c00d7fc4adf78b758d33

    SHA256

    435dd802f6c38e4aa9daa4ab7256e53c41bed02a4a6a70290e207db02915143d

    SHA512

    bce79a619a60765a76d672819cd0acdc9be3751d1cf3ebc2c2d397bdec587d863b0854d3468d7e4876241e3be6d9c02d40d91256574e2697068e21073e42df65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a6211e83b4a68331caf9f9cc6b594e42

    SHA1

    31d685ff010f7632ef65a2ce5fb9116996b2f771

    SHA256

    a514647f33018e0376d9c5b726f2c43fbd75a0bbb0242c61c867d7d263933c5b

    SHA512

    c4f07a98893c1b5fd459397d6a764785079e0cc61c5dcaf95ccbe5b46eb9e931bb9e4ead4e4d8bb76f4d0cc10202a383d9699d4d7836bb63e50fcbd9befe6128

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    79c565a13db579e789d220849564e873

    SHA1

    2f8161cb4430cb0b20b2576d51a04aff31600ca4

    SHA256

    0911894aaffb37c70ed542dae216210718bab7d7cf2236c7f4040e8ab3b8def1

    SHA512

    faf20c4a59a52ca346c01e8a476d65bf39a5aa84155927f451ebde39e777a2186ef61098ee2483e5c9375e8cf37fe7a52eefb2250999091f35df1ab7c6aa40a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a54004f52b961992136ab9be9c84c6eb

    SHA1

    9ad8c7250786bdc2b70fbecc7beb4dfd65b63bdb

    SHA256

    bc58141244f564ee87e98d6e79868c95f5e6e8fd2e0762d25142dfe193415031

    SHA512

    d7936e8355dd8506c3e5e6150eae9b1c937474348c7bf2cd368e7db20454948751f2ef1a5777a1ef912dcb089ebce14d670baee3578edc037a03b86a2f3c0f81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70795ab438341776523e2fef5e0880db

    SHA1

    e5c35bc8b046416ef8298aa47dbc1d1b601edce7

    SHA256

    de636e0429c7154b7da02b0fa4e7ee209fb617f52f42b050fb7c3fe45ff8c502

    SHA512

    5de41cc8e43cecbcfb9e1af607e587ff1b26a53dcd8863dd1e62045024e0f03a60ed426b84dabf1b003c56ef31d433a22a3cffae3f0c2c122721f3e8a5fa9584

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dfcab093c661337c8c0329c4e09414f2

    SHA1

    6482a9f7d84f896f77ad1c2c069b9c328b21cabf

    SHA256

    42f326b28ad33a754b758db93ce643eb0525e7d235ecc274697a9e2300006cea

    SHA512

    18e822f8314e1f6db369864dc6f7847b6aa99273efb029f4445560436d86d28bf5e3b8768ea411d9e1c4a78b7769bcd6712c50024d3ec245e096c818a38b8156

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b7d2f6d0ba837d05851b5040b7138c15

    SHA1

    3046f2c9dc5c3d8cc64ca4b33978cdccd08c7bed

    SHA256

    4fcd228c0db622b9f3ec4cd6a4eaf2a0606e79605e4391bee44679d04599817d

    SHA512

    e2f0f821da843061a3a688b4627c07cde6d7a96f5bf448b303fff48cc1deb50d227c65655ae4e11ac682cf0e402c49e36b2e8c5e20ef40da5394e028793b63dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f6320c2f8ea1252f52b4657f3fea2cc8

    SHA1

    3fbc4488e85387087a3dade8fef572b785738f90

    SHA256

    f638f12995b3f1201e025e1db09dc04b22e88c8ef279a21e50e37424b20d775c

    SHA512

    095d9ec76ab0ad6fb35e0a735fda5beed0e6f36d88b92fa044692320497c5e34a84bee7f8e97fb841845cf4f9953bb70b154bac0d306e95d351e8f91e159f869

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05d439cf125c11fef24f5603c20aec0c

    SHA1

    4ba8ada92087cae2892f8788e201d7bad16531cf

    SHA256

    731c83220bd8ce4617eef36e3d2dd1c02b5b5592277fcc6034867c65adba59c1

    SHA512

    9119a28b0e2e5b3bff405b3553a584483a551190bf49d0c9d94b7c1807d30b455f76a8eb3dc2f322579186e5ef0cfa4af33935d9b715ea35dd112e2b7846ff45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    021ab45a52630f1ad8ac29f6ca3e7f6b

    SHA1

    7ca0b84290b272de74123a306b6d0b7a20b1b141

    SHA256

    5b52b7936ce76c4f7d879c936e44b0dce9f5f98110c27d45348931e67362c2a3

    SHA512

    99c41b2430c7969ea81f9b3ee46093aa0a1e2edf285ab30ebbb1689c8685edc33699aaf33de838b908475fca3a9e80341f5593442984953e208694ab1e21bc37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ec8603449522c6e695568ca7637e412

    SHA1

    eea6785f416eafdb927e43354fb17c1a13fd2996

    SHA256

    26bfcba6912d5665820286266651614e90788a72c83dc5eecdc5d71978c1bfdd

    SHA512

    f3508b548478bbca5eb407d3b5b605dd08b630a3889264b10f8a33e04af4e714104ac3739261a1e029937de8e6e9a7bae1ca0c0cc93e96d168573fc8512364de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5fecb04c3c31011049344b1627b5100d

    SHA1

    5fb2a03c4aa28778394f44cc49a9c8767f1dc9fc

    SHA256

    e56aa8ad6118963c5fcb18c2459cc110bca30ef0adc06a72fbf43153ede4a73c

    SHA512

    a46f35a1ed8a24c6b41c40387d619c0beb8e613c5c4c8b4211c3d3a0a80a17f7b387578e04f10b24297b9057521295db20ada8635f0e721a514ba7af6b2475bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da568c4de6e608de41ec221fca0adb9e

    SHA1

    016072e1d6a41457147ccd69297d474399a7fac3

    SHA256

    75539be9948306a34f7525d7c8ed4b8c0f4cac4be824dfa328c76d0cd3ffe9f3

    SHA512

    1374a7d394da564ff3af1ff4e98ad88a5a208604a5921e8370738ec71a667f782376c9c5debf10d40d136a3142250defb1ab5a1de81beed972f9f6c0f653a217

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d748634454a70e476f22fde696a9f33a

    SHA1

    a4767ce5e0bc04e23afa69af532517a418bb2f1c

    SHA256

    157a6d939f69c183c7f5fd70ba1e0d726083dbd69afb0414e299f335d897309f

    SHA512

    481bd6eca3b0209456017c817320b5ef33c628ef315f742ecaaa1b5176c6dfc75c4334c790794f3db1c02fd165d28e8c2fdc536d9dc5b45b205c5e60c44fe147

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d25cb0d3989be9a09d63e6b0a365b3ba

    SHA1

    c30361b24a8e6b3d67a27bdc4981480ec53d1bc8

    SHA256

    c5622199811a2442279f7bd6c4268581d11d89ac2f7d407bb331c19e3f8afffd

    SHA512

    c93d6bfa9722464d90921614a8d3d67d990713c1f7970703b93877876b2fe8e2fc768b29ea939148ac9214a34db7a50cde663d70a11f82392819f0da847246dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e47d08282fe8aad43f49e3c3ab1805ba

    SHA1

    1fd39f415369bc930025cc5c65cbdd1a005ba04b

    SHA256

    e43587b376bb1eecae967e9f0e4543830d24d69d6b1f22174178941ecb9d5638

    SHA512

    b2a628b1ba56879bd2cf96e9b2f04ad8a6bd4a95d7655f3e250a5f8d6665242154b903ccd9a005a77ecfb83a81bbadc78d2702ee8e0aa4b8fe570b6f3a0def26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f0dd8e78ffaac61ea94c3c870a7ce156

    SHA1

    0e4190efc1b85f6a9572062869a381d1d0fd7695

    SHA256

    e1d9fb89e7e8255270274d5acc8c2d58d7d7b2cf79c7c386c6b35d530d47db2e

    SHA512

    f40197934494546ca5e1f1835a71da99728f24c9b3be260cf90f101b0607eb74d535ed5be8a986619d50307e4c8fce5733d18709a1d7f9a63257a2c22a71aeb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    7d77201c0e42e262058ebee630b71f01

    SHA1

    52cf8aa3a1a96c39aa93458a0757543db47b26c9

    SHA256

    b582cc5a2d516de4d9145390b30ebc985de16c991da966f1fdd0fe8e1453b69d

    SHA512

    71c5284b9eb6d10e615da5ba860713f44af452fc9bd94fad5f6b4ddac5d05ea54a8afeee25e1fddf3fbed03558df116472b496b4f7c34d8ab0ba33fcbdb469a7

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9ZQLLOZN\style[1].htm

    Filesize

    125B

    MD5

    59c667e68f22f5bfe03316534f7f46bd

    SHA1

    d212c6eebdfed902f0c3947d01781dbab036ccc3

    SHA256

    1a4b8ccaf792d30eef41182e697c350f499a0b70dacc2aa8b4196b84e11f8152

    SHA512

    0b800145a3cf976184e23f66eb437bf2133b526dc298ba532668f0b579865d5da322d1f9a06becd088dea2d7046a996be6fd21e345d3f4b8643048add618fdf2

  • C:\Users\Admin\AppData\Local\Temp\Cab370A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar370B.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar383A.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b