Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14/06/2024, 07:53

General

  • Target

    a89c424d6f6ec1a5cacf72a9d62232fc_JaffaCakes118.html

  • Size

    182KB

  • MD5

    a89c424d6f6ec1a5cacf72a9d62232fc

  • SHA1

    e21c51c4e8030a42baa2aa6ad6e8cbdb5f41aa9f

  • SHA256

    253958c8509662223a2c56c7c5444ad9a9cb2c58159c2710352f764f84aa2eda

  • SHA512

    98807428cd4330c567717a6aab93c64ea041b64bbaee6964badfae4aa22acd1d7b0ec47beb4e2e05e3cc114c1be172e709822f66c917ccbb7e021bc3c14bdb1d

  • SSDEEP

    3072:2Gb/YPoWfqYecY/tswrbKOYPF+Vk2rXN3AtBAgG:SqYecYrX5Atu5

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a89c424d6f6ec1a5cacf72a9d62232fc_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2220
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2220 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1156

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    b31f496d385867ac5c4c5d99ee52022d

    SHA1

    9d31c7a5de967eeac2ed82931c98c28247bee96a

    SHA256

    7669f66891f2761dba261d78eb44c73aa035e6a3747c1a5edbc47dbc0cf74e1e

    SHA512

    6a7d4547a0646774c7c8fa79decd856bc309ccfc33abbb666a548329ddeec76b0ccb8e01bc6fd3a800a7259422c96ff7fa7ba7eb6526aa8f3d0871a04c7b4f1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e87135b4dd80919a9def3f47f0c94d5

    SHA1

    57d00040b5865fd9b2204be2dfd3a2b217395b38

    SHA256

    a2cec71bf17b764397ce2610c0ffcf0befe3652ade9f4b99d3857f5053eb189b

    SHA512

    52392ab1cafd04f378bdf16c1a39404747aa93e03cfbf024198199747ea372a55f5a44445c93a395e907efa2c9a929510aa5c7a49733566c85bc662c35a39947

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a629c791f90089e22674e9c785b6ddfa

    SHA1

    52b1e1224018713cf77aadba7aac2919d5a1f053

    SHA256

    d8f757c40aca660fabbb004026f2788cdff74ffb4a07377ccf14187a1f27f38f

    SHA512

    ed1d80c94ae9daa78ecc0cf3c4653c11a725ac29c2d0cde5f6a5482d277acd6a4bc59247b66c8b493e3e0e756b7f00a8e2bde17ea3bcf82601a06c8619a614d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db8be8f123b5bcaec72249999258ad5b

    SHA1

    c11bfa53f0c2b5354d646d404901159007456bac

    SHA256

    a754f6fcf0310bc96be52e4b98e12c1ba1bfa6efd298a16ae0a087332cc100f7

    SHA512

    616c7f421f7c16c5c2db721dd0586e4cd6428a27b1e4a46143f85996d1b738fc4bfa81ddc8d01a7dd918121959810806f365419111b26d181160b12df38b8ed1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff3bb6bab2a6463401912bf4869beec5

    SHA1

    5f97da9be051474c134072a4f3f4b3b3e4a30515

    SHA256

    3f94f237514179ee84ad1dc5b477a2f967d05a10f120d9cfcf49944ca022154e

    SHA512

    0e5e71536bd8a475923753baffeabcc4e46b0fadef74e2fbe2b0da656bc3cd69095509295b62763165a6f6410058822204f1ea85e5e557728b0c1122c9247d76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3c56aac8ecc016fd72479ede6e468dc

    SHA1

    361b943bc0cd354359d316f3c8ae735ea3a2d087

    SHA256

    3b6540ea84892cb3b74c85ebfc7cd5e312546d131456a6b0801f3d297e71a4d7

    SHA512

    dbdb99cd68dfe28203dc38d4d2bdb0a02aa060b790541227575ad21172d81849dd5da75042a277f7ecfed4db6db625ce311e4d2418d39319b6f792e202e389d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b12ea81e4b3360cde46fbde9066ca4b

    SHA1

    a5d1a4506d8a81f54040effbbdcb964cb2bed360

    SHA256

    d167d6a543414ffd6e21841f55284131e97bd7627094ca773ac243a5701ac9cb

    SHA512

    7275ecb6cbee140b0d397c499a42e6f549f2ccc2ee96864dc13adf43b203ce7e6936b347bdab4405fb1843376b9346228bfdf37656a438cf126a5359a1cdc445

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    15777ddc457677db21581e2080cbfcdf

    SHA1

    da746210d5fe2a5ce2464df0169c8262fd3f4e77

    SHA256

    bbf33dcf6a961ad174c83c79f2a50187aefff705a9e115f91d268490529d460d

    SHA512

    835a3c6b0da695b09a5c71607111f9c2746745f934657adcd9c5f00ffa12add5415cc732d089c19ef1cf47271a784121524a0060295ed215ddad58c3a5925eba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b8cc3139b749f3ceef2a2f6123667c6

    SHA1

    809100f9b11a4e19bcace9ddaebea54c0e842307

    SHA256

    7d5ea9081d6ef9036473038fd13872064fceedcf24354b6fbab780231db4c908

    SHA512

    320551ae86cebd2c238c4c1808be3163c935e4e5594f92c22d5e58ad19f3d19a1818ba39f3e0ae37df73906d78efbc546dfe253dfa680277b7674f0c72171f05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a5c956b14ad218d4dc1c9662cac83e9

    SHA1

    2c948544e65932c8dbd510b20c327fb83e6e0aa2

    SHA256

    bf13ec7d37499752e4eb629ce4c464165abf8e06c0a073cb059bb51e5f14b84a

    SHA512

    9ae428e8ed9969070f62d929ff08e6c03a7a0eaa84d0640f8440111e8b0bf9ba765e479b409549f55bd54061c416ce11b0ee755b0fead2dd109ff6238574ca89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d54f01aed8d8fd3ce6887286a23d788e

    SHA1

    00eb53fd61f9e7b5dca639ee434d2b50a6bae348

    SHA256

    b9fc9c556a36bad9e43a0a57414a90da94911c52618f204604be708dc5c6dea3

    SHA512

    2a2b3bdcbb06945f8da11d9f0f740dca98b7b41437b9ffba8ac0349efc949b9eaa61639e0114450e3284ff6fa95dd88fc56570e04342a25a60f7fe8a09090ad0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    939459c0903ad20dbbbda7823bffef45

    SHA1

    0f87f4aab5d8424a95cd41334dcebe67743757a5

    SHA256

    3712974a4ff8d738750d42ccfeecf263fadc843af325e2ecdf4b28e9bc5280ee

    SHA512

    f63cad93c30ba8151ff0ab2b8f336b1e98eb55991b24e2f96919bf51a0a4128326233d480deceba80d6edcce174a8654f5059ffbcf4d3db1757db767bc323d31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    60f79c8306cedd052f6068e76ba2e4bb

    SHA1

    28f1d2496c4cb9b091ac0038a21c88012dfdc400

    SHA256

    017f07353e88eb5f05e535b0a09d89c643b6cf6db27e0caab70b2f4fd0dc132c

    SHA512

    55919f755741dcaf6a02a54ac4450085c328d5b0665d00aef46dacf9d363a4869eeb19cb0f690f2ac8761cdf01fa916b0b914cfd7d033c2b1ce32d40ffb18b4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0581442af1c83760a7dd9ab8df158f69

    SHA1

    ff73e36eae78949b5ae0f752ad2bb7f5a66cbc74

    SHA256

    de79becd3665c2c63866a3311387831c7803a683fa2cb52505f8f5e1dba3d340

    SHA512

    2e6c29b4f80185628b06ebc4aa8c8ef04b8f0d40064719a923a2c8e1d1bfb1c7dc962f797b2b4cac3f517f5266ba0ab2da422ac04be2445c8a63d054634cb25c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    492d1bfc8ed01161bbb395354d7afbc7

    SHA1

    955363fd0ab8bf8fec94e3757501aea3af521ef6

    SHA256

    ee5e0da153f6cd224be51d60ce8b7361d25547229c87158ddc9693a410cd35a4

    SHA512

    1b476e5f097d6656498839bdff78a90e57db8ae86a748bb6a361404eef7478f28809b2410a2cf4b9afd98ded679792334451f9120f5a78993d2aeb7ab17c9989

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d9f946e7ceef3cf945cc50d77c102da5

    SHA1

    5a9c0bc4cacdb63529d77966c40cb144efb032d8

    SHA256

    6ff86e9460fab9548708f17d0f3b9bdf35f20a3037e4ec1a20b7045937e7eea6

    SHA512

    3258b889887f65e9388d8519743cb4e33cf9f591d174931f4afec25bab7b65d943c683f432183bdeaf9f01252293f6d6a018f91d77e88da1ee10f621d4edd572

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bbb71db6a0c1fc59d811bca07eb8ed8d

    SHA1

    4009defb99ca7020a55a0cc1692bac0054b7ff14

    SHA256

    d7f7b963b029ba2d07d682c4c15a7ad1ebee5f306c1135d82f1423c833c641ec

    SHA512

    1fcb54c1db223e38926beacea5a7ac52b8fb9830508397cdb89579c81fdf3327a314e8bdf11cf6b2b8a915baf7f7b036e9f7f1e99a218ac9bd6b8c45cb174670

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa00dcf5260758d9f8074d865c4f47ba

    SHA1

    2583fe44f27d44006af80dc0326eb895e06b769e

    SHA256

    cffc13e4b59ef5bcce5c8de978b7999c301fbb85b20598a070e0dbe1637f72ec

    SHA512

    1f6ee3a5da63892e3230f2a2ea4191540ce3185f9f26ee15deed632d5152ee2abd44fe95be8e629bcf281f1a742ee59957473c6c52fcc3caf50c54aac16d9c60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    83f012ae429f342915fdcaf28e6d87c6

    SHA1

    caf13d7324e05184371227da1e893affb791ff21

    SHA256

    6aec4a4879ee5913dcd1f27fe53dae077230ad749e73ea492888afec591bde83

    SHA512

    5b0d2bf2d4e71ee48ae63a29fd3ba5ea3a88879fc9ffa2e9188f9f83304432a49c0a97e007a95de27b685cbaa9d57636d5132e1bc1064982edbb8ace61dc4a12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28d66d3f19ab8df39a33722fe1a9fb29

    SHA1

    54afce7bd97ec64b284d058c7ea821f7cf8b3a61

    SHA256

    a5d2415a524ec6e0e45a057824772b2747a5294ec3ef36bec093a0eae17cb834

    SHA512

    47bd722e5031839031331cde6c9fa219bbce8be14731e09c836dccff3d705451dd7774b63e5cfbcad787a25e03cdaf2959f5a06f12382ff0929901e1ffd61181

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    c295da90bda68d6a8cf21944453fd64b

    SHA1

    d8960cec189712ac6e336b4e68260e884c5ca825

    SHA256

    929975f3029f32364ec2e00dec52fba270d09c37a6affae2d0aaaa01b4ee603d

    SHA512

    716e22f7f0ff571fe4235ad476e98b774c5e662de308450ee0e3cb8441a4628f603c4b89c2bdce83418e651f1531341b067065b0a7a317941ab5f13ae15859db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4JZQ5QLK\errorPageStrings[1]

    Filesize

    2KB

    MD5

    e3e4a98353f119b80b323302f26b78fa

    SHA1

    20ee35a370cdd3a8a7d04b506410300fd0a6a864

    SHA256

    9466d620dc57835a2475f8f71e304f54aee7160e134ba160baae0f19e5e71e66

    SHA512

    d8e4d73c76804a5abebd5dbc3a86dcdb6e73107b873175a8de67332c113fb7c4899890bf7972e467866fa4cd100a7e2a10a770e5a9c41cbf23b54351b771dcee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OORQXHVT\dnserrordiagoff[1]

    Filesize

    1KB

    MD5

    47f581b112d58eda23ea8b2e08cf0ff0

    SHA1

    6ec1df5eaec1439573aef0fb96dabfc953305e5b

    SHA256

    b1c947d00db5fce43314c56c663dbeae0ffa13407c9c16225c17ccefc3afa928

    SHA512

    187383eef3d646091e9f68eff680a11c7947b3d9b54a78cc6de4a04629d7037e9c97673ac054a6f1cf591235c110ca181a6b69ecba0e5032168f56f4486fff92

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OORQXHVT\httpErrorPagesScripts[1]

    Filesize

    8KB

    MD5

    3f57b781cb3ef114dd0b665151571b7b

    SHA1

    ce6a63f996df3a1cccb81720e21204b825e0238c

    SHA256

    46e019fa34465f4ed096a9665d1827b54553931ad82e98be01edb1ddbc94d3ad

    SHA512

    8cbf4ef582332ae7ea605f910ad6f8a4bc28513482409fa84f08943a72cac2cf0fa32b6af4c20c697e1fac2c5ba16b5a64a23af0c11eefbf69625b8f9f90c8fa

  • C:\Users\Admin\AppData\Local\Temp\Cab3A53.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3A56.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar3B46.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b