Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/06/2024, 18:18

General

  • Target

    95d2f807ed1a4541d507df07f51061e0_JaffaCakes118.html

  • Size

    46KB

  • MD5

    95d2f807ed1a4541d507df07f51061e0

  • SHA1

    9fefba6b1a83999b81ad4bd8bf820b32067408cd

  • SHA256

    0fa294ddc2b38ab5b7dd022ff8eeec4b6b7b33aaf4f47f8d8a5328b9645938a8

  • SHA512

    3ada1f3e08e22610a18962e97e5ca678e59d43361f5597cfe61d14d50496d2511e1f78d7d7c4ca023793f8e282938c85a8ac1b379834cf67eb129729e88abf48

  • SSDEEP

    768:EHq02VjyJC4WrwAUtHX3lC5B06TOgeJCXuvSbLUTP:EHq0cjys/ELX3lC5B06uJCXuvSbLUTP

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 28 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\95d2f807ed1a4541d507df07f51061e0_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2868
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2868 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2208

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    fa90adceb922931a91d5cede3bf2f77e

    SHA1

    a11e79f08add690754f4d7a138e658000b5120dd

    SHA256

    b2a856b476dd91cb94e421158a21677624183ff8bf524135c35268ba30189add

    SHA512

    5423f4a72e15a5a68574d4b43915eeb467182e72d29225850ad53497a66dd59115a22a49906644d4407e35bda2bd834e349c41a39b6d61fb338f3e695d030a09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd6ce6e1859109f68f395a97ee423683

    SHA1

    b157b116124ccbf3a92ca5ab01faac2b662a9cc2

    SHA256

    7500a0cb2b4c551d6061fb74bfe65e202260c9fa407d2e5f85c7f1287312b694

    SHA512

    6428f02e1d189bf86c86bff2cc0ad89d53c3a56c12ee3680dbe52471fa17f20979c435a8740df5948dd06c6cce249b6c0cea391cccb3c0784f03043ca0814e52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d26ef240349f73cbf3cb422c4311e8b9

    SHA1

    24fdba7e0b580ba0716646b1162c36578f0c482e

    SHA256

    037070ac8a02ee35caafa52ba9c8e1f347efc2e1a7bea51a6573cfbadc9c5d76

    SHA512

    c3d249ced6c274f19abfdc96c2a4f2f8e0585ee14614ced398f71a830db6e866f9c75403a46748d9a3f2759c766125e8f502a0d18072c9882249ede352cddeb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    006444245dc28872691958801d22e103

    SHA1

    465623d93b2482d6e22178ce1b02b3d24eb608c6

    SHA256

    efd5bafe80a3691640536944cdcd3810b9110109e47d1fb8396626b51c1b1e3d

    SHA512

    fe7656cea66fdd5c673128563f7f51600e8426454abdba9fc32ec999d50b3fd7c42c0dd1d27c08c93a7478dc4da8d4382c9a6cfbf80fee4fa3925e6b3d2280d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f20cb82d451f8ff9013b2dba8ce5c796

    SHA1

    06528b85ef8a7ec25a2a7108365d22538fbd84cb

    SHA256

    7faf23022d0ba7588ba128af8d15aa2138eb9e711cd8ef1edc40c3fea352390a

    SHA512

    2062066ee8219a4068ebbb08214f231500770d0d0879375631e58719a8884bfd44b82b92f144125d2faa101c3d5ee5c5e937dc524ff4f2260cfc05d2f30bc940

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47c36f37e2835be0d95051fcac476157

    SHA1

    19e466ada7c670c7d68f13ea760f7e99f18bb793

    SHA256

    de573480f73d6a4458be58fea0ee7cd0975140f9c7a015af12a435c50d779d6f

    SHA512

    5e311d20abf8bcad3a0172bdb586d1f8a935495dd8e1a96980f29fab0ae311c882361dfecc586ffb71c7e58c332e4b720e817d52e4ac48a9d343dc121a85730d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dcde735e691476c66dba7c6659da8265

    SHA1

    5015525d4fc2167343c9d79260862f3bd49ed187

    SHA256

    f40dac93d253821d17ad03e373397d204934ac4b06f2551eb8a3c15f448043a7

    SHA512

    c548ed728edcee47c7efed88acf30212205db83bc1c911eca96a5feea2cbe5c54c3dff5a82685a4afd31fd3221e7239a74e5583d154cc32ce62bca67ad438dcf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    56add200f1365ff0adae199fd1e0114e

    SHA1

    b100ad5112186e7abd83676fa1dc43426c752a79

    SHA256

    78c981aeb79327a1352c5703cb98af329867b444aa000c84324a00459542b08d

    SHA512

    d2d9cd2a5ed588f2e26fda1324579a82b5f001e47c3fc7799d8570bd4a04698b0e0578bbe36ef5baf88cffd313b66c1296f7ad37e2e41472ae0b7c33df150fb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e5e7cb0cae9fc1def7fe241056cf2a3

    SHA1

    c2901b28e76c97b047d3cd558b168f81c4069ec3

    SHA256

    5ce0461292372850d12dec38a2d1f1b700f60ba7215cd4f407e92fffd3ed7ac4

    SHA512

    078c7310f3bff2accb50e45bf25e99b89c6e787887368330f0a225a9a304e80b92ef169490a8ecf647f0fc176edd652e9e0c5910c1a5a61a7341c5afca5529ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bade102269555cc6cb775210ed1d71dc

    SHA1

    ec8043eae604914ef78843ca70a9621930e5be32

    SHA256

    7cae738d40f296032b5025ca70c2c582ae156bc5024ef38aa7481d88d3fba3f9

    SHA512

    07ff0cb53cb54d0abe09191f3e2da47185f5f0dd2e1ad288578309a7da16841276f902c393d059669670fc56ed83310640f6c0003455ec5587588ab2948ae5cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6992adef4a2ed02ebe87488315fde03d

    SHA1

    a59f034f2c08c50362ad63142d7e7d092ba5832e

    SHA256

    b810321f1e42a5f7e3175ff91b663d48192173b9f9fae2ead39f59bbfb0ca8ef

    SHA512

    4a298010e73a3481fd7595f3010bb3890dda381fc94271298178e4ae8b17ba8eae8a5504de51760a75f22f2591f69af1a3b16e2991f893b7b40cc32fc59f0ec1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    86fdc8c515f14db066f04f103d95c9cd

    SHA1

    5ec0b504f1e152d8a5765130f69181efbc1697f5

    SHA256

    f1ca5b0d04e31f65a291327be0ba2b62988a7fc78ff2ba3f94de9e15ee1a2e40

    SHA512

    87ae89fcea09d589ec5a8f582011da71c072b6b3ddac2182350b3a3a29fcbfe2830f3755bab9478a3c884cee70b38f669f3319fc314212b2aa4b9505e32fe23b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    673884254e9b69d94dfb138a9d4853f0

    SHA1

    5307cce2388ccc903f824be57354029691855890

    SHA256

    482db13de9c26c65c6e9d7b0639b19d9c5a53967f81b7284492c5330c38fe361

    SHA512

    7744c388f1afdc137fd4c8397ac91e27923b26cca0cee6b5178ef8ebca7fa919c5d0d070e1e73ddd6210cbea553714497a08231adc39aa337a1ef94792e91b3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f1c20fe78f757a61b780c39bb63ca248

    SHA1

    990932f69bd74af728f7a137faf6086472bdb8b0

    SHA256

    029fc64c28b3a8c9b04bc11912fe86a70176e9f76907274b3a0db154f5d4a916

    SHA512

    fb3feb3cfb94efa8fbc01488fb11ac7c3c916b2d56725c0d81ed69430a44e644fefcb8562f13355fdf2f24695d5079ee61786c32fc8ad2df582ff75991d16d49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ae12259e7e83ca35d70ef52ce69214f

    SHA1

    87db886ec73091393f9d10fcc7e5ac81217e9f5e

    SHA256

    90d3cf1cf043d92a1c464fa8f8c7671f99007728bf4975e1b27b70f3946c325a

    SHA512

    15a2a3f93c8648aa449c0b57026099052eea6dfede22d4a7167c828937dac3ab6eea0be2b38b5c86684f56f5aff9ab14049238da9f04489924204068fac61e7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da04084bc3bf9e76f3707c3aec9585a9

    SHA1

    349dffc8cf38b8a58cacd8d356482a12e2eabb4c

    SHA256

    6bf0973eea74a885184abb6ebb4f15e20f6b73d627f1cace9c71bcece4f3e867

    SHA512

    82905c4fe13aacd5d86019a7373130d4c88e1202c46e16e088e548e9e794509abb0e2cda4eb666c5e976e563a8e2927c52e649c5d8e3cbb5521258fb924f0bcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    636e73e3d0af325320ccfd17400651cc

    SHA1

    f5add6a18dd2435eb7afd84a172921d3bfa41a4d

    SHA256

    5f209db573f11ec59253c8f2ee71d4b39362bfd46fb0455aec98a335a64ba686

    SHA512

    4a452afca356ff122d1f38c0b6ffef8543706347256c0964fa0bea6389a8d04f47880ac45d6d0b146b380c6af2fbe5fdb3939667418c17de9c524e9991249ddf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2602627bc7b1736f23da27d694b1957e

    SHA1

    c7af19f17fba9f2d96eff80676b6465a8fe81db4

    SHA256

    e412b1f42611117424de5ed31d54156cd2014e42c1c1bd107014e8dadcd5fc89

    SHA512

    89bd9beeeeeb689baf332dd9017d53dad1b9e0ee8fe697afd60ff6193fa1e4dcea9a21e3f587cdba7a83730e2344a8c47831c657af31e7aaadf2533cf61c74a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    006f7571b368ad2a232d795369933168

    SHA1

    5eed2c2ed215b5affc7e8c1e34acc7f472b9a48f

    SHA256

    7481ffab2775f6054340acd933b17ebdc50985c80a06e962aafa32035deea5e6

    SHA512

    214982a1c7efec30f327d75bb4d34fbfbac13a0d89ca998ba9bf6c2e52aa93bd282015f24b8e821c42c483dc264a54e03620d99444439b78589a4b542f3b4742

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e082016ef4a7b9cd1b53323bfe45518

    SHA1

    af5216b025b9c5e90f8376483df3d257d4ce2187

    SHA256

    be42edd68c0d4079cf8a0a3ab226dd3185a086bb54c82be49f8ad316f3ee937f

    SHA512

    24f23e680ccaa6c5ebb7be502c45f58f021b3ee5f471262dff9987bbfe6d0db6ff013df799ee7d0901296c683d126818f7e950604489b6262b2182c2ace356a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    225f67374d0a2fe5231132a9576963c1

    SHA1

    0d44e5a549d5c7970720b701505721f96e404495

    SHA256

    5891b7854dd1d7d28dd65332690f848d7a976b49c3272dcea2c280abafd41b0c

    SHA512

    3a33c8d812904de0e59847461bf8fa1342813b01da2e00a9b3b2ba1aedf4de195de068a1f4b1fc083c9d751e9db13b125ff3d7ab6b119ea54ff154a749cbfbcb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd99da80ae2f3cd159a67d8b22f0eee3

    SHA1

    dd0e93dd7f39dad2f28b67a2fd01b31b2654a699

    SHA256

    85470bf58f4c888caf067fb9765fcfa2108a503fe4533fa77ec680f884147072

    SHA512

    54077e529a7e62e953af912e6f4b219be1c7d50df8e503ec1fc26d3f56d1658b13f52c533004ea833fc4e9bcb044eb72eda7445604df0c8d02f079afa4d7987e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d96a081fd5a705cade0a9e1f615a7a08

    SHA1

    2941547a99b1538e92932f7be86ab59d7d694c3f

    SHA256

    f333cfb62eaea79129f79d136154fb8fb96d87f9446fe6f0b3d8ae40412eb3fd

    SHA512

    83c3e8b94cf7afc308a58576c222d165cf0995c38c5898d1b7b34f12a48b8fb8842f3be425c6e292f067097222183ef46b1cea774dd5e70bab25abaebfa1dd98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e86775d7fb1f292dcc25b519e00e417

    SHA1

    9e2452bd9215cdf55fe18b9f7264fe8b91d331d4

    SHA256

    451babfb7597a287c4c37dc8a29044c2229fefefa647d42955db8340961a3d65

    SHA512

    4056524662e86f95d3f644971c3921817c5333adc5bde9edf5f790925d3b41772fa473d7e0b6463a658c3750c8cceb9ad6690d46840e8a8dbb8f3526159cdaaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc967b54bff313a05c1c1920ed13f440

    SHA1

    afe4c53125eab2cd462ed87b7407a80769bcb6fc

    SHA256

    640155e6168db358fc593b58be0051ee637dbb8663feefb5ea28363445556e0e

    SHA512

    83939fd64738cb48413ab3172b002914a23c3e7e69f75d307c13d57a4ab0d9dac27f75f893b863bf9761213e598f3d644602cd91bee93b47c2f917efe92ebd2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    2de452e5b7fe93184bb0113136a64ef3

    SHA1

    03bde252c9abcb229f6a28766b47018347cecc28

    SHA256

    6c15e6bcbfb06629bc5df81ccdc05cbf91ee1056087a97e22f9b7adffb5d4a95

    SHA512

    bc1b28d7736df33a198303711e26e256906a4a6b8dc2ee8bc3dfa2658ef0e304b6ea09a35249a5aadb54d2f7fb4492dc0f9e1152ceaf086935ddcb08f17d5f07

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3NPBB818\cb=gapi[1].js

    Filesize

    66KB

    MD5

    0fe383a7ddb9bbaefc3105b3297f5583

    SHA1

    f80c9d789f251909c7560bd91a9e1b9a10c26362

    SHA256

    d7ad4aad4e48174c30ef21fc32c9380659d2c99a5c39680e10ed9752139d8683

    SHA512

    31de1f59377bc76e5d602d02273867ce750bbbccb7edc8f2803c0188002ecae6752ac3ec31c2108e64b0d871b01e6a8a06711969dc68bd9823303def0e7c1ee4

  • C:\Users\Admin\AppData\Local\Temp\Cab20AA.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar22DF.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar2526.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b