Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14/06/2024, 09:20

General

  • Target

    a8f002eba77b88edb5206f5201aae262_JaffaCakes118.html

  • Size

    8KB

  • MD5

    a8f002eba77b88edb5206f5201aae262

  • SHA1

    403d1445df5a693932ff37e10df99fff6950b544

  • SHA256

    d933b7e2447b6fe9de55f198dbc7331dfda10402386a20ecd13dedee280d8efd

  • SHA512

    aa76e0665b6631bfaac15fafadb4a1721185df4a7acde60c67e3895e3d2822ef3217047e7975e35b5be984c9cde4f47d129a51e43b842f2ad0717fae2c2157d1

  • SSDEEP

    192:AcBaPd9Fs0s80kkS3HvaDVrTHE0vhjnL4/Xh8S0ajqR7BiTztVwJBm9IK:1kPd71ukZ3H+V/99L45iRhq5KJ+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a8f002eba77b88edb5206f5201aae262_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2160
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2160 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2956

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\349D186F1CB5682FA0194D4F3754EF36_1448C2ADE06763B7161EEF1787EFF4A1

    Filesize

    1KB

    MD5

    74bf5381799629b2a5c8d679ba125cd3

    SHA1

    3ea52204a34a79c8a33f7838fc7b3b234a8d785e

    SHA256

    4fe608317c719481708695eba4051eb5a4f9adc6fb97aeae33fbc90cb1951dfa

    SHA512

    32beda793600ea986d89e073f9f894abccaf87d980821aa1f01c6866af1b9d85f985a1743751f9cfde34dd0a39f73dba4f7f7ec116f666e605a53e14ced286f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    cebac28e28269bf19e375e89728ad859

    SHA1

    9e7b9252a9526ea59938a6a0da6db6eecb63e498

    SHA256

    1a69c138d8074ba000f0faff81bb52aa6cf1049ba80d389245a9c3741d8085bd

    SHA512

    0ab03d507cbea1f7e95c44f060b126834c3506b05c1f609da8b865591ce46241264ce3d40faf97d4783168f2fd0dc3005ac99521d4dcc786b174fba16a714921

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    65b4a3a387882217f264ae41137c35b5

    SHA1

    4b104974e95be1fe1dc1060ab03d47ac4b9930a2

    SHA256

    487b48aa5a36c18e0b4d41d26b01e1c1c708f0f40cb535c8dae34403f6281a1b

    SHA512

    7bc8ec0c8fe2f3267c50e476e5f947c6ab405d77dd55da0c21f679ec157a7b2c38c8b482dfb59625b045fd5e48e2c32696654a41b007b8f38e41740919db600d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44bfb5395302c8cd9fc7246719ab58e8

    SHA1

    47a2521eecb5c5591c8a697fd1d477ac5b06fa28

    SHA256

    7d8b10f54698aebf26a48b27a682c382f84de22d78c9e980741704a474784948

    SHA512

    e4e900894bc5752c55889f56fa22f2b6f2a5ebc3552b128d619daafeed53a6b61b6c1b17afca1f3ffc6c3132ed8e2831dceeb077471a4c6b3635651a2d5c6f11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b972e1e76873607c4eb9823c7b7794e

    SHA1

    82beba61826b3baae0a4c1c48feda00027fad988

    SHA256

    c97754f777ac7db14d358f1f403270d20988d2c206ebd1d1d2a6fd36ccfce468

    SHA512

    5cab1e8cc41a65b76f1d61fee616e0998cabd15da64601951f9e0863908af4b43ae64c70a87677b7a6285270edb73a0d29da04f08b2f1b89fe4e648235a21f62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31003cf5ae03d218eea0aa4c4a15f6b5

    SHA1

    2b27029b13c6b13f75852c04355728f493ac2665

    SHA256

    02abcc833e79ad8085919718c89e35ce65ad91921e995c70f5e8c8677a441b31

    SHA512

    e39daff17b8a8ace6ada207a24f599439d2b784f663f2b0d2442ebf7ab3c1d14b67ef8dcd4a54d8e0aeac61e877d0c3076b2cafd1f3a25ae32b1a6c5670bee04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a876f3e4877559519cd3d52c603e6422

    SHA1

    91e2fcd60c82096e12f15f7f77e8a2df8cb84cc3

    SHA256

    070874d111d118c25fcfa486bdb6a24a14fd8c46bc14a3a141ec3bb9423fb91f

    SHA512

    88e168acc5eea7071c96d66491c0887a3f13e3b310740962260e826c2ba4c1bd0d5f8be91321c8824fef3663f0e218cf4dc8830a82dd3def763eb3d2e28e3d69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb2614c7eb260a56cd77c317885dced2

    SHA1

    df198aa4c98f2f676806684a023cbef947c23741

    SHA256

    f5f2aeb19faeff3b521e971a93f667bd232c15c76198bcf716a22df224912ae2

    SHA512

    19405c4fdcab6f04ac0988c9fee7f206cffba40b7a944e7625006110d27ba17e5562eeabde8332892e132a8e2b3475d13d72dd800cdd9a8ac4ae7d2c9b4d12a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7aeea1ac0ce993ace4fb417d380421ce

    SHA1

    7f870682cb993ce92166f2908477639ecddb6eca

    SHA256

    6cfc787970f791ebd6296ba3d4fb710b847f961ecdc4b61ba47bd223720e3013

    SHA512

    790dbe50febd28e730e38792e1b618b6d6347469b20f89487249792fa90640780f9c58602b3c41fa20f84f50e6ba071ad20815bdba1934bd89bd42a0daedb3a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ecfc66b69eaf2b207256ac6fbd09e81e

    SHA1

    2502a4cf3f6251d90aa82953918323fe2f091326

    SHA256

    156d151d542ab771b8b935f9df4ecf43f3a56aa9c95880b838615e8ea9aafac5

    SHA512

    52708633dfcdd5d88230ff2d29a4ae8ae26192007afe0916da2be65b0f8bba84e4419be8c4b1f23e5ef96b7d1952026b152ad337adeebba034c7b9509adda5e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e3a5c4c6fd9ffb1233335ad9874679b

    SHA1

    1783e79ee1d6add3889c3d0a1c9022c65121a6c2

    SHA256

    2011daae1454a66f9422d55c6b380ffe771e603665659e149875abc1d148b799

    SHA512

    34233e04d616839b2fc3b4a76ed1de715bb91ac85d2ac426a7eacdadee4ce59af6a72cf3677e2ac63e1f4b3a7dff0c8ece346758dd9e2768dabe38ee5d1b6390

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9795090194dd1e17bbd91a56d0890b0b

    SHA1

    052827f7cdb76997fc4bc1498c61801b7db9765d

    SHA256

    08753fdefd0abb61584b869d43b131ba26524e6a5364320dc9e7b571b525d871

    SHA512

    404189932e60796cc4657c622364282623b93c84e652387a45c8406cdc530880c2c21bd860c75848f36914cf892d207f75dc30293e53052258b81f6ae4b54a11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a6ba81eeb66059690941a3f47b2c8b14

    SHA1

    5c1de7ac8b86ba1c4374d383184fa1924b165003

    SHA256

    2088511d8a84ebdc52c71173ea8d1f3b8da6db1090b3211dc756aa315cff83c2

    SHA512

    249a25de6cc714996c2771a2ab827c9ae503936017c608844f2a15b18bfa48716567ff94b469db3df4c1027fa17105a630cbe9f27c2fddc4a06852fe055c82da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0bcd4de80e7f2df02d050cb794c7a7d1

    SHA1

    b8cf776a5f53acd6bda4242ba70b16695f3436d6

    SHA256

    85eb0c4b2c9130eed73b17c5daf59fc07ef40d6e027b8873378353555ba8ce29

    SHA512

    eca8395e0882267e452e590fa0bb8f978683e7800df1e10396a1d221cbeefbb5fd143ea27fb71cf2f90dd2aaa52e2f157c151030a87ab971417ec47db2ec7367

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    54fa50c3ddb7f4e4034543880a816ffd

    SHA1

    f730f1a4c90f67618fc7e07f1c76355110a1e80f

    SHA256

    5df7044423089cc8725de4c34c894ed5c546ccca24c8ce737a8d8d482be4407d

    SHA512

    911fdc0f8c889415837b816a54e7f058446bc4497cccfa0553b906c781e628f5158d1833bb08063c480b9a09bd03250643b02469b0b05ac0afdb394304baafe7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ff73dc3ec1f7efd07966b13ed22fc70

    SHA1

    82ab12115c5316f9147e45206597250f330453c4

    SHA256

    32018f863357a557a15c22d7f02752f80252ce54d3d37b675bd5fba61d993a50

    SHA512

    41ac01b65b7f79709e4c28ae5896487456540309db847de46b642f5da1608d103c3cb487ef7db5f69afbb2650b7e8ca69e1e5038db3a4053e1143134d4aba13b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87654dc7cc84cac980f1dd1173c250f4

    SHA1

    97b916e736ade733a43d11f480336668abec8d13

    SHA256

    0dd644e6aa0291e3bac6cd297a453dc218afd82daa53fdf6a23772293edbd2e8

    SHA512

    04253dce166635c7f44f9717a26b580d279edb32107f634ff2fa87db8985f55a3e2cba7c0bdac19d78ca95cf67f524ac95f42ea8f4914e9b6e863e6fe79634d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c42df6a0e179f922452a3158861d93a5

    SHA1

    8bd079b96910caa989497b5376da8b8b6bf11b2a

    SHA256

    3297fdf0f72142fc07fe2e5e626ae324cb740e7b91024cfa3c94b389fe6dacf2

    SHA512

    59139ca7b6f304fda17bc1d8fba06a72fd3932609a488d4bfd49e0478a11e114aacebc86d927f017433f206029a1cf499501b71e23a4fb197d7537a2e35d7c60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eff9f2a9ece277803d92b417b202c9d8

    SHA1

    d41e03df8a96aa77b60a721d3efb43daf327add2

    SHA256

    48b2590ee9f66f6d2318914dab31f4a572399b90cdc6158750ba42d3cb072ded

    SHA512

    02de8d36eb166731673a3b2df04f6a91242f1e986e2d0ffbb88e22a7ef0f0d7c398f16688b0889c4a6a625d0d12348d2053f3ee3a40a00e75282050d8bf4c6f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    426760913880172079618fd2a68ae329

    SHA1

    6ec8999927f0f2db9743ded5167c856caebcedf0

    SHA256

    62b4ef061efd32ed2ab66222b622847844b4d1195718932ea06f85c07e7f8b1d

    SHA512

    4b3a987820b7f5fb5b57c5e74a00bf4f2f2c71c35ec2628b31b5f8aba41935065a7bff7c0ad5d46c70963b6e6e905a87aa58ba20e07fb7c4935a2fad74f708b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8177e828e17d6a72efc8d0070384ae78

    SHA1

    92140647890fb56559b2b401d33ce841bba3d725

    SHA256

    92b02c6e994d7024a81a626f53e0bb70091fd44f79c239c3edeb88406c910d6e

    SHA512

    6860a5382bddcc376bf55417fa100b62b36eb3d5e7edbdc98b1001e0d27e061bed443a7fd8f02ec8c12fe2bcca9994bdaf0ca0b82da6a6dcda8771a296b2021f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a885e8fedb18c5ac64ed3b08d8deb253

    SHA1

    583e5c57f599bdfedd5a81f73bf0785f416b5d9a

    SHA256

    629eddd51a6459c34738927b41feac8ea40a4e298f4e9ffdc9dd7f42991fefa3

    SHA512

    d7ef9cf3f5a48e1de093dc605679213341d089718444ad473fb3bf94475070d45578a30c9be4c2bbe22e34b2deb922d1572dd3025723cb8f8d4177b13bb916da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    b62bfd490b1f8b5abbe8ff06303e45f2

    SHA1

    98f2c01efd6704b5c29e732315d1362a3fc2b7c4

    SHA256

    2e064f511f37f030fac9fab3e8ee868c53437bdc5df89c2bedcc3a4833782b8d

    SHA512

    d60e4e9b4bb3570583565c65b7ee30d0ac56db08b15cdc25b477a98b8217e0a776fc6a88564eaf2ef709ae37aee364a9fc6e29276cb07125b328cd40c5d67406

  • C:\Users\Admin\AppData\Local\Temp\Cab3B9D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3B9E.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar3C7E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b