Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    04/06/2024, 04:20

General

  • Target

    939b1cf6dce7e0a8a8eb1cded67696a1_JaffaCakes118.html

  • Size

    44KB

  • MD5

    939b1cf6dce7e0a8a8eb1cded67696a1

  • SHA1

    b490447800388b80f76dd24c055083895c53f0d2

  • SHA256

    3095502ed9f5e2329d55e9f1c763da0639437091d3ce641b318d566f4ce3885a

  • SHA512

    dbe3f8de07b1dc34c26eda368a329b89f7fe3a77f61d1d2f38056f6c00cc62d495610f1d8708603cca3e6d4bab4e2c96b43448c102212f9eadcef85b34856633

  • SSDEEP

    384:RuAyr3G8Cbl9Oztg+g48Tk8R++P2HTuW2x5YqLHCQnpl4lIHOOFjopxXuQzj0Stf:RuAyol9hTBJpl4aOO2pxXuQzAS/zRsAn

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\939b1cf6dce7e0a8a8eb1cded67696a1_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1680
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1680 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2612

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    001ced33b838025566636755cb25591c

    SHA1

    1b1fc473169dc0f7c20e250d12cf5d6919783aeb

    SHA256

    5a0638f4ca83b86670645a7bec70f75606a4513d8135138befd52434694eed34

    SHA512

    ef13f054f65f8d689833506a6bb6e56b2659b65f619d6bab9072b82f69238d7db207b6eed6f6c2e41199f2851a54eb6337841841d1d923ae838965051a9a5f0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    99c65ffa49094deaa724ada41d42dd0e

    SHA1

    21f057b4c01b9b1ea0633cfe35fd127460109817

    SHA256

    3665ae3c18875342aa93f788a681792309abd43198923fb9bb3172a89714a4f4

    SHA512

    22e4eee9fd381d7eb2eeeeed142b17ed947687edd1df46f16cee86765dda36da9763d0d3627644f6d87dcc678a7006f47de02764d4bf88421330a193c5e6174a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c242e5371fc5acb150af1797e21416b2

    SHA1

    1cccc2c7bf900acd6955d240cd09852d86ce456d

    SHA256

    c4a037a2d1058c4b2dd945e7a50e82426f013c7be191a1bdb3092c298558ff21

    SHA512

    e7e9a43e8888f86d086522169674e58ab0e096520588d22e309e86d73eae97af4e773326994034a95551de8bc0cc2590aaee5b4fbe3419525286e0c530083958

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c26046151dd94550832d0e11dbee03af

    SHA1

    4592b4844565110460d7e51870f67c50f41c26c9

    SHA256

    9a62acd312e876aaa09be9de0d270261e418a9d0e23785f1ac2232b95e2a6b85

    SHA512

    4751f9b00b7c97ea6733f22fcb14e472dc20a746d8bd0b159f7bf4985b5b169ec04ed39530123bb314886257582b0f2ba2b88caff9c3dc9ef58be31838c5f577

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    46f8dd578d14b3ac7d345bd5004c94be

    SHA1

    75f4ec562a197d331a9c3f6a1c0085fff5f643e6

    SHA256

    f157cbb50de82e054dbb2e6940be2d10f6eeffcc8c48b4abaf26ecee8fbfe8a1

    SHA512

    47c27bf0862db2ceaccc5d3a179bc61605155ba1a8de79fef142117b8471a88a7b5b8b39ac31ba8d8bf6883d27e740cd8e64004780036fda6921ef5a5faeefb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a583ea09630468d06c863de8d4c229a9

    SHA1

    3150687a400c7c1dda6856b7926230c2fc987e45

    SHA256

    52a235ef4b9d13bb0379966e099dfe712895e601f99f7c175e47abb135a2cd6c

    SHA512

    3e5afeb34ac785ea4cdcf39812cdd1b0ae82aab964462f2840570cb4b48ea2399dd3e3052712de4fd96e9c5dd1b1713e6f7a8ab38008df9e6316a34d6b489950

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70b66af82aa4576dccfbef8f13b26006

    SHA1

    dd90fd4df38d65adcbf6ba66f376f0a71c2b68c6

    SHA256

    6f1b1630e02d85800362ff2ad46b005ff8481a674eca4186eb26ef674bb7f956

    SHA512

    e6fe9c6406d35375386fd850ef7c3ee46380139c24150612bad0e578ca21fb01ec2071c8eb8cf07530d8cec467f1b16729dfc6aa9754d8034a79764426ab3eba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c48b0dfafcbd95f7b5a09b0894f04f6

    SHA1

    13fa197de8fb29baa66e188f26bff7a609ee3a9c

    SHA256

    4f5abcbd12b0dd266fe3f48cee0b94bf081dcd3214a7166dd5c9a8f372fb861f

    SHA512

    c99e8f6fb309db05129a1ab0da64bce059b3d8badfc6071ecd42e8e7666be4e3bf6508e89dff65c2e584e8efc91943c7a05f6eb2ccf25d5a87e959b92ab539af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d727a893968d2129c5be56cc0061ed6

    SHA1

    5ee02f881349f06a5adf1f1903adda2c76fa5a0e

    SHA256

    47e1e2911d9e6072a2965938f7e4f0f4ae2a2732b2a2ed27d77e181c7218f94e

    SHA512

    57a31729d1896f7247ae32ad69c76e4a5b15f4c39221210f273413503da45726a266091d61a7af8e3d42a757059f91de075291e1e5f182d44060fa6300486ebd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a2b6d060fbced5ff66e5eda58bcdfb9

    SHA1

    13901240e3f33212b08c359be8868b40acee438c

    SHA256

    7be4012325df76761f26d3f4580b8094e35f3b1def82cb49719758bb46c82b96

    SHA512

    42b3061b254566620dbb9d1a2544b5c47a3a6e928a60dd4296ba6b1d3181be16add17dd013501bee8c5014d2cb652a005cef962512f0d0ba338d766eb91526d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0c0bda522abdb0f9a52c26125c9ebc81

    SHA1

    14a78d55f571f0984cd93f9e6063129c14ad59e4

    SHA256

    573e4c05a1fa9e950abfaae55009f7a7ec68d84fdc182f41bd40972ad6df2f3f

    SHA512

    525c1bea0f5e281c860ab6bb02456cc59e9e3077e174c927a5fbfafdbcd7938bc508a6225d57c95f4fa0e668047e5f9e03261bec70bf2c223b4dd2d1fa258f7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a84b3bd07bb6d75467247063b86a08c

    SHA1

    754f36d2ff7c6cb32a7bce6482355ed89f8db249

    SHA256

    7830b6351e903db480c56dc5f0d9e8c15bde3ced510d38de7ed3978c2cfba439

    SHA512

    a722e136da70336171dd0be101856d308b460f2f7e7d1c371c69aad805bcebe6f71ca3f38ec3c56a14b58dfb6711551302d35aa8b8867434c1db070000c15af8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56fdb5d504c2dcee2f082ebb76fc833c

    SHA1

    4997469f68d8be407d98b9160e618d19524258c8

    SHA256

    ae8d3ba335562de519acbdf064185582fb061f57344cd6ef0d02ac95d6ae1fe1

    SHA512

    c002b7d5ed2c89931e1a3fe0a5e3e8f010f74d8209e3f102d20a1be2fb9e125831754c99d249c4954593fc0dec5cf893210d7fa93e4283065f1fffa381fdd733

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a80f85525d14a31bf3a2b8974fe491c8

    SHA1

    185f7e2e160e5f189da25cadfb2d9b9fa56ebff6

    SHA256

    42564d718f1d0567c2c6ecc6cbee12e5f89f490d2f1d6199306e07054c605b03

    SHA512

    aee1f722c07229f4f3a429203334b95d431593fe45a71bb9f1b72999df8f09cc3953c99fd6e896ae8dede3a81f886291e16da4d886885ce4292eafac1cd05816

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2de8b01b1b29ae903ddfbf2f1735901

    SHA1

    5221251ac99ad1339a47e5ee4cf46a96ff52cab4

    SHA256

    eaef51e853de63a2dce767cb88cc25ccdd17a8487a6223c3d60839e07293a20e

    SHA512

    a2c6958520cc1bcf6dcb05ca2d60306b95935efb2986a71c4a03a4390109afd70c6f37276bae99f055a5e15401932d791342c5d1a9042ec98348631d9076ffe6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4248c161e7201c15f774881fefa7fef1

    SHA1

    844f2cbc779749c54111afbee98f0c502e45ceb8

    SHA256

    1ec1326a264c5a2553f0a69b3cc3db5a766cd15072a25e06e5bf4065a763a3b2

    SHA512

    08ca35cf8f449801aa88295f5eaeb27f7b5017b63fd5ec5a58efcb94e603af410c0ebed9d012d0155de59fd2a6a3ac0a3bf46ff0b44e92f23ba7af2a00d54363

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db9f26ee64f300aec2de8e3432395c86

    SHA1

    73272d5bee6978fd62ac1b3e3d3df64be3143bdd

    SHA256

    e633178b59a63dc612142904384089d12364011510bb7559675a682f113fa52c

    SHA512

    c2c6ea5c7a2eb83234b48fcdb0b39c96bd69fe21aadc99685721594e4efc7c9c7486248938bf807ff1cf740ffd7accb9e61ab95bf8843b5212862fd538ae0148

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    99a9c8dd49692122d2bf4764d4e2b15a

    SHA1

    5d0d20ddedd4effaf7e13bdde89c04adadc8ea21

    SHA256

    0ce121ec1fd0fc5a1a2872ed86148c7e639b702da97598f87693d3fb7ad01dfe

    SHA512

    849d41ad8d2072dadd23b120a8058999139aac76b94e84aa35cb76402b207c26ab310ab3ea28621b0e2af91e18e75cb7fd529f60ed4eb1c97399d9bdc8b22644

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e49918400c958c57fb19904fea06fbd

    SHA1

    a4513823182b00fcdba3d33eb61e94046a69781f

    SHA256

    2349f52b92d377c40d79a7f27ed48dfcabd3de180b1673b1d65d2c597aac756e

    SHA512

    b960e1238a11955f9d5d0129e847bde0d117503583f81b296d03d0dd6069cc2df5643f7fd83199769576e9fe35321ab246ccdd2daececdfc7fd550b3570f1e81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    edc923db55b8a7dc1ec5585e6fbf6ccc

    SHA1

    d524e86660aefe8ca762a04733e4d9900f78eded

    SHA256

    049feece9cfb3d14c02cc637cc47e12b3c87c96e2c1d7ed4ec897dda076fdbd1

    SHA512

    612f0af0c6c66cda85c446a98cfe047d74aef7bf17aa54e22b23b9ff8bf411cf6d5376c9795d9c5b219a6c6907b9c26580f1d9bccdf3ee4d5134032a412cd31d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f76d5ca801da648e8a23ca25ae6d7aba

    SHA1

    73c41d1b303edc7974ac5a1d9aa8937c0a312ac5

    SHA256

    8ca851ee71a4176464c9a1eeb5c6375b24947a576cf8a3742f9d812072119432

    SHA512

    9fd22aa96a45537c07be28993037243e18a4dce1d4e3e71d0c2222e8a8012c6b5b6efba1d83095d404b7611641bfb2952a1c1e382735d5b015dfdcf8a987df7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    eb0cd87b6f84551e99e421148414863c

    SHA1

    f78d6a919dce1312ffe0cab82d59bbc328289851

    SHA256

    c6eb386e855f3d53db19225a6b946a83bf06afab76b5c387c63641749a156769

    SHA512

    558f57f1ad1b384b1549b18f58f2297ddf806ef3c51eb3cd4df030706a6883bb2c54895f9501ac71583f3d578772bbaeb2852f28677a9d33674acbe3ecec0606

  • C:\Users\Admin\AppData\Local\Temp\CabE8AB.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarE8BE.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

  • C:\Users\Admin\AppData\Local\Temp\TarE9BD.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b