Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    04/06/2024, 08:12

General

  • Target

    941deb8025a7bcff624acfd3ffff197b_JaffaCakes118.html

  • Size

    35KB

  • MD5

    941deb8025a7bcff624acfd3ffff197b

  • SHA1

    f6b18a90978817bc2ed7ca0c11708c89f41e95f0

  • SHA256

    0212bb71bcfb2541dbfb938a8add0fcb09a3931b3dbcadeaef88d531906698fa

  • SHA512

    374f310fa692d94b79b1ea12420ba23c791c0a74641233424cbb278ab4d783f5256c5c55030c9febcce960bc5efa113a794c6c28784433107b9706cfca852128

  • SSDEEP

    768:fAmQf2qKf42k2F1Tb2KO2krjI4sXEA1fdweuXb4kJG:Iz2FXTyf2krjIDEA1fd0XLM

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\941deb8025a7bcff624acfd3ffff197b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2276
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2276 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1948

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    f02c2c57d1ffa2349e2d915a185f0b90

    SHA1

    2ca5d53d741c4787d1685d033fc252e462f80092

    SHA256

    a35813068d92e339e8330e884ae7bb10589c300cd44cfae9ccfd5ef118f753a4

    SHA512

    dccbb8d078fb1b24a4910ec0109e57bd9b2f5bad6fc0472060c68950b730e4cdd37f0623565df9f10df2e4a282c00de222599bb526c095c640cce23c13f14cc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44acc35d3e6db87ba1ea3df0a5475de1

    SHA1

    53306987e67718f46f5bc3ed3e0a4038cf00a22f

    SHA256

    4fa234f9ade86598182700040ca0522d0108c9ac379fcb1729cf62942639e317

    SHA512

    135e92cc26ea5983c9d84156f872a2af766895092a7a6b7d9bd3df237d20ae6eb6a6b106336cda61cec21a459b0ac5fc96ccb1833206aa7ebe16c40e3b80cde0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    64d6ff52b0add1bdf3da5ca327778f5c

    SHA1

    6e562592eed9720bd772d21f2340bff3e0cbb455

    SHA256

    5c474c632963d9a69687782116bdcd59ccf0ed36b7a6eeef783122b25d5c8f49

    SHA512

    2226be600a5b4cab3bbc337d01e87567d8712fc49ac4893b0dbcf62530901f45f8bb61097d06d661969fd0f4b149e7c30cbcc58056e0d5084076e3886d7b5a04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dcc99953615375de7903db092a9a3563

    SHA1

    662c4c2e0b0477e496743c973764cafc9fcd1b05

    SHA256

    0c26673a8f834b3cf7c6b0ebd96ffd91ddd1a27456af3943b9c95c6278680363

    SHA512

    01f15b6587105fa8ba7913257f73ead0bd573573e41fa86fb0a95c08fd02abb25586b165df1136b3daa7e64db717eea445d31c1e83826fd03fb7fd48446b1bae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c3f7e36e1012a3c00bd0d440d6d4783

    SHA1

    332133f414c635761efd15d4f6584a3b8b0a4b8a

    SHA256

    9bf49c703f5535cc52f6a81a12ab57c2979481af426d8f0402c334e70f6eba77

    SHA512

    16b243e3ccbde258d7ec3a580b82442a3d2e771cd0cc32e8c94b900b3fd82e96a7d894e068b794009b165522e2ffaffc2212a1a221a3290e4bdee6bb1f756f23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f13191dd467523b857b16e75dd453ae

    SHA1

    1cea24423cf6124d14624d184bcde54b238e78ef

    SHA256

    1839aabc104607f86faa5e0924b220657b39800feda554bb5f57ae19891d4df8

    SHA512

    03c9bdab6d1fd604d57d755dd8c83e02b4fa8247aa59b15d996b21af1199ee22805d06392f76156c405f1745fe3613bf6898dac0f6edbccb86924537683ea3ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fdd2d43eb154a505f1cdacb28b853077

    SHA1

    a7bff7a8b34dad03f4feddca966a2dfa38169c80

    SHA256

    d0bd884cbb570a6b8c8c16bd7cbf3f9da6555ae2e9b1304f775073145b95bb4d

    SHA512

    df1cbdfc24a19621b2fe1439ef312615f8d4f06a6248aceb02510e0ad46c96a331daa69e627511e834f3e70b46c0f8c77b4c28f916f4a1ff897382bad63f23ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ffc55a3fa3fb9743979503a9df21bd36

    SHA1

    564d49c9f380c68e115b89b5fbd19e6076be22a8

    SHA256

    59c0b2adb4da05da77d66fff4cd301ce7925cdcf3363398a5c0b6bbea13b2f5d

    SHA512

    d9e91ccec1a8a8de2cb35cd0264eb2272ea06952c263ef53999ff7af1040dd1bf3a4b14d4d67dfef8eda166f7ff00b37c45e179f386c8c2e2afbde7b89592a7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4fc937e6713f86a98f1c513f2fa58d3c

    SHA1

    929ca0c021d45c0c16d8740754effbc531a94509

    SHA256

    f456e01a79b04fc21294f31b60fbe1335f609dc78a0862e499e10c48049c1d10

    SHA512

    92ba7bce72d897a755931eb4c43431fd7c43a3342da63574332c03d2800982fd28f83d15a8c837c222947f53a64d6de283dae5d2f14b46ab4a98d3524c0ed5d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    273f34b5065d704bffa5cdd1428dc9cf

    SHA1

    8308735d5143c0152f0961c89194100016991efd

    SHA256

    343085bd0ab8d5f2a48e315e3cbb9f9f125a5dbbec7f0d47cc2462e26d8c3cad

    SHA512

    e6d2fc293132a06f12b6382d30c87871110678d5b0f53831514f7c0b0c3d7f3c8c8227cad599129142955876fd5aa8e18e3aeb6747be669ea81fe81c32a5f429

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3355c1f26ae7ae608b7ff502050aa38f

    SHA1

    bf734b17afe6772fe566bb491540f65403f446eb

    SHA256

    5f4f785eb06cf7df8e3db9feec44ac0e8e12562f9662de3e51fa26f0ed7bed9e

    SHA512

    9435df9988060c75f1805ec5be0111c6659ec94dd66f730bf2320960856b2eada042d734b1164ee3566300d6670d30077463b70fe40d944374ccaa8e45c63904

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aacda3c78c5f2881476be592b91a3a43

    SHA1

    280202093868564a7ee8d47d03b97211f1947dc2

    SHA256

    ab91e2733d84560c42b5e019dc6633186f8f37f2c64687971f93839b6b976857

    SHA512

    6877ff781b756d94b1ead73549d506d65591f91bec8afffae194f4170441c63347097b2b87002c30c24332ddad943e240cbad3d615458aee19ab864d81aec6ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    13e70c076e3dad7407575fe4b1f83391

    SHA1

    f8916abe2b8bcd240654c3483654f01e1b88abcc

    SHA256

    c6b7075c0d76f349fe09ed96c27f0cd860bc3ef2772c67d3bb519eae933b8a23

    SHA512

    4a71bc64513829ba11ec47cff12168ef9845fbcb90599537781b214074d40bca83bead640fc5dc2dab7363807140c193e52fa96342d364fd2949cd4695ed890a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    354b19eb9fe8cc7324b7e991b022188f

    SHA1

    d04062f3ea9370488ce1b5e1078d17b7e2aba1a4

    SHA256

    5349efea597dee8c12b484dd5ef3fb180d7dfb753f6f6f1ef9f7836ac75b88f1

    SHA512

    14b69a01d3757e962703979516182e517f56927dc52b04433bc19050250a452591de153159aa431af88cff953924e98630b55d5f24def07a50e4b39f8c6625e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7eb58ca90ad80af65746caa41dd6c006

    SHA1

    295e12bb5aa77da1386c5eab9b178d7d7a96e906

    SHA256

    6b927d642ca9802d092319a238400c4b11bfb3d2fe20f463229f5a8304616271

    SHA512

    13c5a6fb314731304dfe46b5d9f44569bbae07d54063628b8c766a468198fc7446d40c065b171435341c3646df66fbabd313503098b490c1409ab9924c0a08bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b0a277fbacd385c68c1b97fea02a7cb

    SHA1

    5fa5ba1006e28313a6b5906993f787175f7abd8b

    SHA256

    578a4da1a69ca1a575d415d4607e4856b15380bede21cb1a1ff47ef812b06599

    SHA512

    9d3c2da3ad457f21ed20696cda2300a2d2ba674729a072093dd0e58d2e95e51444851196182168d9f593e199858dcdcdcc963dd6a801cc13534062874aa9c040

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4827fccf89e81d01728de5280eaeba9

    SHA1

    a4e6d76de8e65e54fcb19fe85e34b0e583f3ccb9

    SHA256

    593cf5ff9ac2606476e8c1737c3ea321419fd11a0db5b9b0a840968006cde881

    SHA512

    5b56d04e93fa33456c1bc29a26511105b7e5434c2e9e606eec0040982c3ce84676b6f41069703f3395a8e04518711cfbf10b284c4b78de53ffc73ddfc3d090d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    672129baef4b3bb176cba9e304c95233

    SHA1

    6da6b3d7ed435efbc49e588939ea0562abe10deb

    SHA256

    3288901841ba19363aa77df5564ae1e0733007cbde4721db5992cf4f37a5baec

    SHA512

    6b1ae7592ab334ef2024a1e6e3d5151cd9fc3e08782946b353a6686a23a90ef799f6d9bfd11d57acc4dc47ddec77c72c7cf694dbbd29a16c8528703e4d9ba20e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    097a82836a2dfccae6c3768c0c7fe358

    SHA1

    d9e04395159d2460bc4ddcc80bb5ff51978e73c3

    SHA256

    b86fc836bca7ad78a91188f575c21c12d6d2f8bf3d8f48ee4cdd6ce5d897a2db

    SHA512

    fe9d31b7813e2dd5ba562c84890be38099f9b4d9bd3b55da02de94ef8a31dabb26fa15157d667fe91bb8d9b46a692ac5489dabea050f38f149314176dad0ed44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f4a389ea6680d1e25c69c0ee6d41c0c0

    SHA1

    ca2027bdd2438f17380164c469f4b1ed0eede841

    SHA256

    cc60943f85cb7e471b4bf7105ae35f399891aa5a946e58d2c4dac43620f7e01e

    SHA512

    eb1ee9d4eb5ae948b144a392fa9a2c9f60de75010cb1d541abab84dc31f81b8463e349f13bb4275babc57f5507a6d04f93136f5ec90b03c96ce1c995c43fe086

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    daf2da3b26afd12b371647678764ca69

    SHA1

    08d4ce319248e55482c1593e864a0698ef0b8f37

    SHA256

    f0282c57f3d6ecf735fde1927dd735d5db9840cb9bc190715766a99c6503e483

    SHA512

    4e149ac500f86ac622cea722fdb5cf5bd523c63b23cfc158332e79567f07603f449809194a67c7f6bd40e91e92b8baa0ed9d666925eb8a9783724a313c9beda9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b390352e6b459c6b700890e7f627737b

    SHA1

    5875220b829c129af08698303a230cf725d2f952

    SHA256

    51f12b506b85cd970c8c5ce5128cf5d2d8c900ce0bdb91c766ffa477bba509ab

    SHA512

    8178e418617d071ada0486f4dbdafd4905964bab65e6b13ae85890b4f9dbd28fcac1e2e515678b76356b0cc54a909047404373044a3debd7b4a33df7eb3caf67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45598e9deab147d65a87e3808236b16d

    SHA1

    0dbf64be18e353adb335981dca3e4195e7d9be30

    SHA256

    9a7fd3f8b8faa682dbf391a1c3e050d410613ad0d1b5a747394ccc0c9945406a

    SHA512

    73bba6233d3431bf4706fcc14fa040221f21b4fb6843a51e7c7d22977c0ca4b5af6423e720de849d0e370604da23ae1e7e97e6b757b08f9f22f65c45bad43fd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    14dc0e25eb992cb04860b6dd769d9201

    SHA1

    66138eb86a7e66d31c6a867f9ec87f4627bf61b7

    SHA256

    5adf9578e8a8ae6e7ea87696005305cff83cc07bed0eac0129c81b3a07a67ab7

    SHA512

    4df99eef77aa38b1d9f81681d26aba63b3965051bf141c08852739962d867432844f00316edd6ed2f07757ba9174cb76c8fcc0f5be5a7ebfd046cdd54b5f2dca

  • C:\Users\Admin\AppData\Local\Temp\CabCAF.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarDC0.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b