Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/06/2024, 20:12

General

  • Target

    0f5f5afbda087941b25736db3e486438_JaffaCakes118.html

  • Size

    53KB

  • MD5

    0f5f5afbda087941b25736db3e486438

  • SHA1

    9433e72baf5634d45708f60467304a8fc6e72907

  • SHA256

    c10ed313f835bb1f2e251763a734fb688d2ae7904124d36d7b54e1032ded3407

  • SHA512

    4f93bdc3677dd0c52a7f7379a4504725393e9bf12ca8d753f62129da508e61b4e60523815c2bc90c31b0e366a211bc234b0ea25889bb72393355780e32ad9a5c

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUhrunlYL63Nj+q5VyvR0w2AzTICbbZoA/t9M/dNwIUTDmDf:CkgUiIakTqGivi+PyUhrunlYL63Nj+qP

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0f5f5afbda087941b25736db3e486438_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1888
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1888 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2540

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7c30b6a25e8a223605ab9b9bf5f411b

    SHA1

    a44531d12bf6c547297cf3cc8d0bf8738db35bd6

    SHA256

    2b159a9347d4dc8fbbcbeed1c32849f317b9831f0759128faa5f0151b4958021

    SHA512

    0262792ff34543683a96dfe217f789f854ea4d7eca76d1490b11717beb09ddba3129bdc1f9ed21e2c55ad92ea4abf19c6799f333870c502e3118a773e91b746b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c0678b0337ad392a41477bd3418abf48

    SHA1

    24956726760f19d2753cd78cbb534de3384457b3

    SHA256

    4eba1e8ba8a3347ee0305e5bdf5cfe9b55e1b122665a450e9ff88ae8cbeccc1f

    SHA512

    c928c434ba8dba8926d48c437420b2bd88d02b2a2755ee63330a500bb342043ebad842a263106861b998c18800e24c5e5afda0791b8b147d26da5f01b4059b9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1a119a8951f08e22f8acbf0964e2c91d

    SHA1

    9ade7f3f2b4b52dcd7c02209690aa3a322140116

    SHA256

    e1280c323f66c1ac45e3ae1299e8fdb381fdde57452f0254e39565a96bd324a7

    SHA512

    ee2e58fa3f94f341199fdac6201e7c16111742fc7e6338a822375b3cbed3aac40f3076eaa08d58c7692e06e86182fc1a8d92ce365ef8e214333b37227c2abf63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d0739bd8d3b8924650faacb37f68e99

    SHA1

    576d0e5f3929309f41da09454b14a3d9760eac4d

    SHA256

    95ebb81e302b7906ccae201cbbedb3a49ac2e2d3769be3619b6b87021bb05cdd

    SHA512

    86d45b108fa231ee16f637f8d5fc79ca8c21f60bec8c6af17df99c2b2f7d0fe9f75a4d2a68d3cfd5ebd29e6483afd96cf08eee33b462e59f8c91a755c8efb1c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    928cdd6c03e44c98882128dbb22de63c

    SHA1

    a50571ecfeccd163e4242e5d89b501a65a70f31c

    SHA256

    f68116b9e5f6ed8091b1b08cc6aa37a38fb6d916250c01e6f403ed01dfd53e8b

    SHA512

    03c2ac1b87a8bd58594072fee453b1aa45f862a6e9a9e11fe36df2a4763a75f07494c0849bfc56147e56c36385f38063ff47b93b4fc9f863b9e80775cfb858a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    efb583c08ddefd24545d5b08658454c5

    SHA1

    3ca4d91290acb7ee74f50dd743c2ec5425f5812f

    SHA256

    d14db1282298dcb8908607757fcc3380425d699b05255f905339b6fe5c2b78bc

    SHA512

    34826330d2de6e24f29c181cbbf3c6a9121135426f4b6da276c942195b107f1f83d9f347d99c4a0936382c0f0ed88ebee29220467c99e7b599f56dc5a881bd58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00e50b7752e07661a88f962d31a20673

    SHA1

    4e4d8eeaadabb2cb206b818eccce84ff0fbe474d

    SHA256

    9172892926ef8e578e8ad7b868bab82884a4377dabbabd8782da71a0baa12481

    SHA512

    dd35e7b95abb7d32f364855e40b853d204f78c0277f7e521b18acdf0ef4fd3df85d29d696cb7ee0f0dc92f2db9a56d5d030a7ea25b012f3a5b8c62a4417e7c75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de13ce01591de67eea5da82614541353

    SHA1

    dc093be7be7b9eb49c71e388b9592ba724c73d29

    SHA256

    0a37d98dd66fcf7f385536dd11ec03c4d52e1a5aa7ddb8ad91c20a76368f7f48

    SHA512

    792486ac6baee734793b6223bfb2ed991921502d6f5f5b77acb6fe12a22f25b5ef2f027c5f05d1563a32987e11e6e6247798a718c7da5b477ee46bff3ee6c352

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f082d77f5d8c1f11ae133e963d7a4e46

    SHA1

    49a3509d6428c3ec7e0d89ac2bd42eb0e767af0f

    SHA256

    c0d250bc2cd1f7d9eee884e04be3b476f0e9583607200d2e2905b9009f0b6cb6

    SHA512

    f9a810d9c1d0b354ea2657102ff1fb9277b5953e787c6a4e5d9574b515660f9d026baaf8dfa9e29be0f12253f8cbdbfc1c726de76377fcf7c960a2c46249338b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b8ae096ceadc063cd0bfbe0e2b6ad670

    SHA1

    3c8bee62c72a119acc90a5a3f55150c54313fa07

    SHA256

    2b1b25efbe8efd0a5f6fae029dd34223be4036779d5ca0da04a22eed7a9ade87

    SHA512

    1b4c10db7aa6dc6734705c75a27669d789fc879f7428e67d9e1ece4d41f8a3a78d4da48de16727c2d526459634a59de45ca43c3ed44f13fe78cb0a2bed3bcd21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35d94184d7455fd910914bf1ae8a1e83

    SHA1

    f95e26d26a623f4e6651314ad24b79327374235b

    SHA256

    f2cae1e0177d8bedff11408c454f7e2686d8c2a83e6b30fd4317b85821f0a041

    SHA512

    d5b293d09ece72b15cf610f89421ad036a2d2eec0f9ef7845bd2a9cc9fa75a5e02eec4b06efbc916e513b6054c679381422a4534821b448b4cb52f4fad9a8275

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    31255b0f840b732c1fa9496cd6e2782c

    SHA1

    56673d9098fa10755c5b9f16c79895edcc72bc57

    SHA256

    0135d3a623b3592be089e649a9372a6e774c36bade4a12e3d47ba5063a36771a

    SHA512

    beefb0b8c943218bafcd5f8fd0374369708eb568ef4912573ed68d899cff0d58cbd77051ce15d71147168c9a6a40d5f014754c786f5071b47e6afc3d1f35747b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f0801c329194e2378b9c66cabfca736a

    SHA1

    656c5d656b8e5b5c98a4afa9a842f9c986e5594f

    SHA256

    a9236a72ef4bbf27e5e9adbbf7ca8fabaaf43a77ee11ed50d8beb8a0ff8d8d82

    SHA512

    39549f9176519148813ffb01c2f654c2b08f6d69a62c4b10fcfd052a08915b5042eeaee04d3d9dffd616abd47bd66f2a18c203123d9907d0ae5d5e520726051e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e50514dec0ef8c47c23f6359f5966628

    SHA1

    0f812493d00e3a016789a6e69422bd53c3934ef9

    SHA256

    dd32104227f647810d1d6d63f71f645fd3d21cc985d4e78ef1de178937a1c753

    SHA512

    ef0b5463acf059fb1142d5f03d6fe4df7c58655769e1b9f373fb43d0016864ff0575187575e285cd3c532e15a79d81687e5de6401c09d87b602449ade4ec50dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22710c7be68c515fc61c10c3c2061fc2

    SHA1

    76a3ca2bd9e3a8584550c3ea8c71e555fa6dca5e

    SHA256

    afb743c094c87c8ef6af7b81ef0fe79576ab3228d993ec18db650e96dac867dc

    SHA512

    92332bc800f5fa92228ec0621b5a450a29090e924178fa0dbc21aec7829ea1b90fa55905d94f8f210f9f354a23d38e80bba104b0204bf97e939b2f2dc07f3d62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b73e7133b6cfce9ee23d7751478f69ac

    SHA1

    1fa486d3e90fa8420c6122119a96f2428e26f2bc

    SHA256

    8ed2bfeb256dfa6571ccdd0beee21e10f85144322eceb88d656ca3b4afb6b82c

    SHA512

    f6ebf835151200b28d0177d35715f930094e8d6fccdc548bc07f7d4ff808762881d6f5fd9918e929891fffbac08bc2ba2f442331a8395617b3e1e2870032f6f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b64f6831a1ac0f14ba6350f4f22c6515

    SHA1

    ff2ba11aa7985325c55718baf05c0b6183629d62

    SHA256

    fbbd3c86d0b10690f071b7481322986db2718686beba24f8ec678100680a2032

    SHA512

    fcd115b6428248d0254261f9d8feaa7f88ff8ceaabcb46a01cc4d09108bde28ba604f1432a91c7e7e96da0be383332d213495a5abb9c8d9c849bd9402ce1d0d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2545ac5607af13972edaf73a7f84a2d5

    SHA1

    4bfa0181612bc613ce9f0a8bf755bc32f118aa07

    SHA256

    407cc603c7b81e3b55d645eedfc6b33e6f2880097ced1ab3d3e988e438d7cc90

    SHA512

    7ff3130d69ee3dd5be8fabce8adff4d35aade00321649a12e2f186aab0268fb0cf0edc2a3312a2e316cb34bb09d9d5695916ba6da364888715d2db83dadc8974

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f840625d9275a1988b0b5079e35c9149

    SHA1

    4b7f7b7507fd9d4ee22eaec90370adf6b5f2ae80

    SHA256

    189966f0639952bebd244d8e9c198841fe06802c12aba1688e7a7fc49b174040

    SHA512

    40561785a37e96ccd99307656cce137d62db094ec06951cb44c3ffea23c9cd76b92465193d670ed2c205a22102f38ce7a4b121d3cc445d350c29a0fdd2be33dc

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9ZQLLOZN\wt-logo[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\Cab474F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar488F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b