Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    147s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 22:05

General

  • Target

    b0534f12b5674fe906a1a720833e60fd_JaffaCakes118.html

  • Size

    301KB

  • MD5

    b0534f12b5674fe906a1a720833e60fd

  • SHA1

    91a8141dbf2671618de30bc5b10978205ed40c2d

  • SHA256

    1e069e31c54d74d533fd719e099851eaa0f3c2822ee05d0f54f51a9ff2c6b4b2

  • SHA512

    a0b091d37eae419be35d6d4726db6517208be56f826cfab6eb5f15e38286fe17b2feab5a8076a11ad9a235781d55618b9fdcfdee81be3d2c624376e35422b190

  • SSDEEP

    1536:YD+SbTTF1SjTm6NkltM/jVII3IbIre0VbzmC6o01JLnv+SiSlSK369dE6evI8XaI:u+SbTTFR6ItCVI2TqFcaiTCH

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b0534f12b5674fe906a1a720833e60fd_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2480
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2480 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2736

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    f8318bda4a16237894e55647688a9a4d

    SHA1

    ba5e79c3c0f195034a40503596e5520120b762c0

    SHA256

    1e8369f2ea61837f2f3de587a47bc149d24f1c8776452cb382ae98e29bac5123

    SHA512

    5156280bd9a9745de5bc097f06885c7e8aaf8ced85717f2d1551854288783f7716b70202df3761194fc0ffda2cde72938abb47a757d375f2b50fa221f64ffdfd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70c569a99338c99b0fbbc1b7f6dc3782

    SHA1

    68f681a595932cde4c030f648f6459f977566769

    SHA256

    8e7028d7326b26bfa3ac1e5c0a9a88d749b8dfca58db24d88b8fc1b5459c85b7

    SHA512

    8fb1bf1b9681fbfc44d5bb823aae9eb7c0512ec60dc325f55873e970a1b72abcefb6566a3851a97c01b16d8511960632641059e27706083211e98a557c5b5c7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4adc6111ce3d4cff7d61f16aa5c8ed8f

    SHA1

    75e1329d8c76425fb654af7c162cb8ba5fc45bdc

    SHA256

    56f79f52f4fb6203e0cef5bf7f7601cfb4b778d3543520823943496140e17334

    SHA512

    0012a6083989a54da421911745de4dac9c89e446058d3f75afbc53b88cbe62dd9b128dd4f577589ec764b84ebe10b9827ba55311242dfe70dc0e2e90be80b640

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f42052917bff9f56720012ade8a9b141

    SHA1

    5099811087190ff40c300eb8bbd811a73750a8ef

    SHA256

    7cb9bcbccf7b3ba4291dbae89a00ff30d633ad30b19cd3430d518c1b00443d32

    SHA512

    7c086834c36a6ebabf4c72cc5f840a51826286845de6367c192d13ad54a47d93be0a87dd65aefa9349c771fd8acf5cf1900a0f9f26c1351056db6735adfde443

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a4ca6ea6eef8be9391bbd17fae28ab8

    SHA1

    3bcbed5554508e9df7cb2b036c79da5a9c670dad

    SHA256

    264c151e2122efba621db98b98c8a6990be6012f818ab1d032e281bcd6505f5c

    SHA512

    b3e07083de918075fc279a7d797ff4fcc23168516aa94c3ea4d6bbf5e7d186681256284841d43771d54be2829cc6092aec48ddafb362373f2471455dd309914a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d7f033319a07147724425e0868e97a9e

    SHA1

    4984cbb59f33768de7bff525e251e112f9c4715a

    SHA256

    b98cb8676d157673f583c21331a7c1f6beae5ba22fbb86fe3b6c6ef694015b57

    SHA512

    b554c827521aab2a4864fe0205622f567f6f0930cd5ce1391982aa3a61a33840f28a5107177963b16c8771ea0c3e4decf1d2de4dabfb7d851535b31bc9ca49f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    903fb9412897269ef666cf687beb991f

    SHA1

    6ff33ad898ed04abc0655b298d09f8a6120dea65

    SHA256

    8286ff31a56e4ce16a08034488d509661768c69bb7bf0b4374f558742f25f701

    SHA512

    8d1153ef1d8f660206f8ba6f4db853039d38a6b2145d0e69d210b0f0a6c955f7a9a2d44234630ee367d523cedd0513b4fb2d6e571841beff712725c5f8e3e226

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf954838814208f7d005b308af220c87

    SHA1

    1dd8c68fb3e014dc3823a7f56ae564a263092b9b

    SHA256

    083c500ddac6261892400dd7b4dbe5052b0357d337249b9001698297672abfe2

    SHA512

    1c134bc3f113e9f4da89a94c3a93d978e8fde597c616a16b2b7a99652e1e2dad150ed2ba46b243026a6e73e674b1c34167c353b78043f13253931bc2ed8b6265

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4bac18558aca5e6e6e025868ef51909f

    SHA1

    1af5554bd16c1003e6e9a378118d7101cd93f259

    SHA256

    fbf345c141c43019f7899d1ed244478029144c2ac72c3ed82e74ea1c5bd8df8b

    SHA512

    e7c4dfa4860fb6b395e3a217f781dd266ec8d70be108f6a6e1e06fe2cb8f899fe135c33d334815057ba9970cd8e2bfd996d7d42beec47896c23728078a68f9f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f7588076dedc9404a405c4d5dedd7f9

    SHA1

    29b086f1f6058b1719e514c7c4577417cf7e4c56

    SHA256

    c1a4b2f52c15a0b619c6d931e005f96de125f00b7c692252bfb92e953f243ff4

    SHA512

    cc7601fb38ab84d1d16e3372cfe36efa078ed0f6dc6e6537b9c12c8f10a6f711b4297be98a228696fef7e82c8345958221532c7f663b5c16651cdd1752098e44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f2c2b7f19a790d0cc56f45e86468b7ec

    SHA1

    72491728dbb315a1f64aebf305189261ebe5d8e1

    SHA256

    cc9a71957d5e7011890d9beec75246b181acbb8d3a47b7b8c88fc87f9fda1af5

    SHA512

    c7c8edfbdb870b01d4838bcedfbdc5bcf999841843cc66445d5e651f8168808f96d576ac636294bd2c69db1052b6bc37ab51923ed7f635cc21d30d0bd5ea0d29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0996ff04c0104d0543c4075f95a6db2e

    SHA1

    ba75f0db913a1ec8e7797a8ea2ff2edd87c833f0

    SHA256

    8dfeec7c2016c9ac1f5bff9dec2651653c38764a87c6d0959d1fe21e1baeeba4

    SHA512

    5bd78c871feaee936c973d5cbed51f4785f701561fbf62893fe843b8ded81d99233c3048c9e948059fe01d1898c96f5f850fddee083dd9f5e4d16230f3431dc1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    94ca2dd9ce95c6b85f1db329b3276b66

    SHA1

    f515c055e67f5de1f30c845f970467fb3ca59ae2

    SHA256

    dd49842dffdfee477bf83918e093222bc51cd8a2e1364d1c841720b9d81c75b5

    SHA512

    fa498e575ab8d6cce9e3a4e7418c2710dc798c67361d8574635cb5fe4cb3a6eca87cf661b632a59e05667669de16fd98028387a42fad476e6ea10d3f785126c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    81c059efcfd728d2090236c747f07436

    SHA1

    1cf269b8d37a88013e87cb51b861145b3e8346fe

    SHA256

    1d82f9138c11e0411e4320fee64884b7e303c6bf2504465a2799aa799706cf43

    SHA512

    b6e8985c957fda5fc1c271574bae90d1036167944f57d24567585f1e8bfe911c7314dd9682802fe72fb803aaa02016e80f45c225d20a15aa1e718c6a16b1a65b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8045671fa3f00bfc12c3da70799ad181

    SHA1

    8e50a22a86bd73b980beb92fac393ad6da67f600

    SHA256

    0c824e4236fb5716acd4996be9752264e5921c0e74ad8fe148bc270bc39d84d1

    SHA512

    bdf12ec3eb71e9ea21eb7416c3ea3b371d893517f4e8b047efdaf4963dae48c61e9bd8490fb66b894541a1b2d21f2d592d7ba12372f4f154bbd9bb1cabfaf455

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7cc6b5b5299018ce0a70ec5a9cb849ec

    SHA1

    0b9f7fe3807134263383268454f57759b4aabeec

    SHA256

    8639d22793c0b344710f0ad2cb10e52dfe41d370f70ed2db40f9560ab35e4af9

    SHA512

    1b82a30173c6a0cbd27dc96126a8db248cd193746e0237b375304f8c623f0ebe96b5c30c0b071238f5f4464a56c90174a2b2c33bd4c691f3530184b6d217f144

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    487d2e1dfb340041ca0dd0f7cd80124b

    SHA1

    a6a52b6023129b96eb0c6c7fe19a4948baa330a1

    SHA256

    d52dd31e6f281b947e54a814dc2387de68d3621c56d37f0595399f51b78d4ce4

    SHA512

    e794e441ad10228a9a3854e394e3a1c491fe53e817f5d19efde99ba58daa56e19aeea32c0c0700c0ff6c0189ecbccd6d3ba59feeba550bfe94f7e8461d9a02cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    919508b534b4d52597dbe49f5312b000

    SHA1

    0ee0845fc058c2cf5222c450eee8a346f64e43be

    SHA256

    a7fb9e2936d4e93f391c8108aaf789935e9e0e8ae93fcfc6e87f2ec2fa2da9b0

    SHA512

    736c8397777c7dcc51f20bedba051f45998dfbde991b8c4b099c1a5f7df940a4851de4a16a8f42a41f02efd7a8c249744eacbb6aeebf94360c6fb1ed10ec4b9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e62cb1a6ef4d10508ca57ebbe01b9bc7

    SHA1

    2503f4e4e73c190b345f48a0668192d9c039f82c

    SHA256

    13a1bed89037d7cc608c0c1cfa3727d90dcd60152d058832c6d6cc7b66585007

    SHA512

    76047a0a700190bc7434df24653a802e68ace335b4c8be0005c35eed67f5f9ccd6a8e62240a3df0c57b18d24abb43a9ca1f3d2c3021cdaa90b7ac6b3a692bf1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    15ab875610727f8461b21603939695fa

    SHA1

    ef08161840063b167b04c8c136aa0f81d392ac07

    SHA256

    c2685aeb9b8d22f76351edc9e6b9e4353a14aa753ed92dbcc11de4086646078a

    SHA512

    0902be6bfa967215c1b1570741be611f5dc755855abf42609e391b0bfd69349286bb641b6b04989287c30a56372bb167f4e610718ea4c4fd4a198b59d85d9f44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78a04e36e6b47c18ea9fc9c223fe623e

    SHA1

    c607a8a1d7757ed5238a474411d9d5b2f1d61a96

    SHA256

    970ca232b3c16444be27da3d7ae945c978ecf2e13d6a86a4fef739daa71d0401

    SHA512

    f7b71b397d57b8a766d0f6e16b92ab36cefb79ca9b5985cf05dad78189abb4129c0d4470dbb27947335382caf3a16f81a7b402cc02fc22f6c2c6ac283b6d3a91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0dff3771289d38d6ad02472bda343ffb

    SHA1

    9020ba6909e1e02a73ab2749658cee4f14ec583a

    SHA256

    d48254120130638d8a375765561bb5da0adea9b0253a4e7f19e372b9c15e536b

    SHA512

    2509cdc215d6c2491fbc1e94bd6839a9313ad22c3cf298e971a1dc8c6939be73092fd1e5c3a086b26e8886b92b49b23ae54ebba03c7f4a8450f24e1b8386b8ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d84a679ca3931320a7a78a93cd19c6ea

    SHA1

    9051e8d745400f611c91cf9f711e033a4749833e

    SHA256

    230f5537ae095e290a49475e847201800b1cf8cf9fda92c6074f89ecd22d8452

    SHA512

    8ce27315eade5ad6b6f6fe76b4d6c33a56867c8a3c7d46b9da6190e14a3128eed03a882ebf666a907e46f378d024ca46f147ab4c83b5d02b05ba74c63c9b2a77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e0a0e18330b46b58e5153971821eb62

    SHA1

    8c1dcc5f9874c0d73218d5f3374814a891c997cc

    SHA256

    8f0e9b25981a5d7a99bb35705798ec87aa54544c184a0c754baa27ec8855e03b

    SHA512

    30812025eee4520512564ef5034add27e7ebdc80b28f78e406797b17dc2e6523284558aa301c28634d2679c6276257cb88e11cba2e4bc8d90165f0bb6734d2b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee45745e3eb21169342d405b93cb844e

    SHA1

    034c7de848a5e795803ffee82f7ebb4bbe7b64f9

    SHA256

    8d3a3f40d1d32e3a2f4327062856da5966bba1a4dbb4eb980c7fa324c98ded02

    SHA512

    2c3972a8d0304c6edc6bc20bec2ad9f868206ff958f40ecd71722982369b7da8039e081fe2a1b31c7a5995a202be5bba0a5558ece25d73f465cf05bdd52e1403

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6F0O117Z\cb=gapi[1].js

    Filesize

    66KB

    MD5

    0fe383a7ddb9bbaefc3105b3297f5583

    SHA1

    f80c9d789f251909c7560bd91a9e1b9a10c26362

    SHA256

    d7ad4aad4e48174c30ef21fc32c9380659d2c99a5c39680e10ed9752139d8683

    SHA512

    31de1f59377bc76e5d602d02273867ce750bbbccb7edc8f2803c0188002ecae6752ac3ec31c2108e64b0d871b01e6a8a06711969dc68bd9823303def0e7c1ee4

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FY3LN490\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    6a90a8e611705b6e5953757cc549ce8c

    SHA1

    3e7416db7afe4cfdf3980daba308df560b4bede6

    SHA256

    51fdd911dc05b1208911b0123aed6b542e9d9f04c94d7504c63d89ca259ef679

    SHA512

    583636571c015af525cddd5b8dc2ac9964aba5a7a9b0acd3908e4aeb4c2ee74cdfaabe49b0aa13d7b142748542426864e91e88e90d7f73bc647f0bfecb0ff7bd

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R54TGSS0\544727282-postmessagerelay[1].js

    Filesize

    11KB

    MD5

    16f1b19cd042265a234dc208fd7efc64

    SHA1

    02f67c09980ab6057f073d29f4c3f2792257d3a3

    SHA256

    509be2bf36ff013c9a1c31ac54b751aac2401f14496662a16ea8af6903d21b27

    SHA512

    652ce3d209d5d4c1e39f06e41e87a14a3174419b8c9cff8e5683846afb51f9f4939c41fb51a7aee67d9d26db80b370890182ab7df089f826479d3e5e2843566e

  • C:\Users\Admin\AppData\Local\Temp\Cab212B.tmp

    Filesize

    67KB

    MD5

    2d3dcf90f6c99f47e7593ea250c9e749

    SHA1

    51be82be4a272669983313565b4940d4b1385237

    SHA256

    8714e7be9f9b6de26673d9d09bd4c9f41b1b27ae10b1d56a7ad83abd7430ebd4

    SHA512

    9c11dd7d448ffebe2167acde37be77d42175edacf5aaf6fb31d3bdfe6bb1f63f5fdbc9a0a2125ed9d5ce0529b6b548818c8021532e1ea6b324717cc9bec0aaa5

  • C:\Users\Admin\AppData\Local\Temp\Tar21DC.tmp

    Filesize

    160KB

    MD5

    7186ad693b8ad9444401bd9bcd2217c2

    SHA1

    5c28ca10a650f6026b0df4737078fa4197f3bac1

    SHA256

    9a71fa0cb44aa51412b16a0bf83a275977ba4e807d022f78364338b99b3a3eed

    SHA512

    135be0e6370fd057762c56149526f46bf6a62fb65ef5b3b26ae01fa07b4c4e37188e203bd3812f31e260ec5cccff5924633dd55ab17e9fa106479783c2fb212b