Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    28/06/2024, 11:19

General

  • Target

    19ecddaf7d3e5fdee8309b8dc2477800_JaffaCakes118.html

  • Size

    53KB

  • MD5

    19ecddaf7d3e5fdee8309b8dc2477800

  • SHA1

    b7abafc1fdc949ba0a927259b8542d2f157a9882

  • SHA256

    9a45ca0eaf841d99a698099c72e84c0a98aade4d9e3b106dd6012098f8046e22

  • SHA512

    8817c0e4b33e815a9183ea166c147dae0095d8e8428ae3e4aaa676314e4cb82065bf1025f4220c11b43c5c371f7c1b07a1cfb484ad1a9fd4b3c88572030f4967

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUcrunlYq63Nj+q5Vy0R0w2AzTICbbroX/t9M/dNwIUTDmD1:CkgUiIakTqGivi+PyUcrunlYq63Nj+q/

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\19ecddaf7d3e5fdee8309b8dc2477800_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2432
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2432 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2416

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9939f4c66705c2485cae7e368a1261c0

    SHA1

    7a71bc0cdd3dc9e7b9de0518bf8a86b9c48deacf

    SHA256

    19c8f21a5af8f97519e59f413bcbd95370fdfe8f767b2c1e507ebabb3a0f90d8

    SHA512

    3691b0fceb3f0d95748f114743a639c5be436dae2c495e372dbdc0fbcf57f4cbe015fa9409a96d678419138a4f4979f567de742dbf57d4d49ce4d6a107c2b23f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    698c60accb61ee7366909674138eb90a

    SHA1

    730c14d63adfd25b6dba77a90ff21aec0e41e0d2

    SHA256

    33bc487a1f8131ca03f7fa6673e93db1d68226d6e19778fc4424f5564f8af9c1

    SHA512

    d9940c4185499749aa13cd24f22033715eb3499497b880869d04cb7c8202b5106f3f715c268441e8fc491bab9a304b0151ae886a0e916099caa157af1b8e57dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ffb9940872625e3809a43091f7a21a48

    SHA1

    68eb27975b86cce6af05b90f219ad9b8168030c5

    SHA256

    d50b72c13e0c56126227002e16d75aca1d4d4760c86e9c9b8bca3f5cb3e84e0d

    SHA512

    9c9ffa83f028bb8676049261ae3ebc370258847b947871638dcf9f4bc6945c8ac206ca50eea4ad7093bbe1f1387aafb0c818f8af3550e280e9b93b998366ee08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b687a2810abe4cf436d5ef0f3858184

    SHA1

    62694e2957c534127b9421c0192ad2b8a1c7cc4d

    SHA256

    b71b9c8013acc1022589c3b194f4e751c1c28a9933c6b4c478ff1c0a204dabcf

    SHA512

    c98d662a3d58b663b8ae4783638f1c19191296bf3adc36bf21d038b31509cf03eb4aa90ca83223aabc8a79ce5d816c1017d59f0cc17d4e18ba16abc5717dfbe7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b499d046733d5afe3601cf8794ad211e

    SHA1

    aa77d9fe487ccb2e61e1f441ee1d3650dfea311b

    SHA256

    83b5b82a61cb7216280f1ee7c76790b204b325785d9d622505583c589c2a0c1c

    SHA512

    acef5e4692d05ea5d8ec010375f193b3655d4fafdc7ca28ccb0a8d0725fdbb66df0da1cd7519f555f6f5cdb1b1b2211bc893c9e218a72b331c96d0cbfa9a82e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a8b4aafe404ff0f8710f2f984cf7f22e

    SHA1

    6a5c36cf43894214afea0c4049a097f62dffdee4

    SHA256

    40e6ae08da049f6e67c783faea65464734acbe654a90809d5200adce2239ec35

    SHA512

    8f428b455c0e4e5601fc4f42c247164697bf35fad42d675302a4facfcf74e3b075242e87faf24e6052340fa8b2fab19900db074a1a91d60fe867ba1a699406ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05f10b4dbf0fb9dd6ee58f0ac581af26

    SHA1

    3c93eb9628886e00550b44e17835d78a79242d4c

    SHA256

    7b7937a339b06aef2fa221abd6114739b17f0bc678f7968ee8775f9ed61ddf6b

    SHA512

    7c8ba3060f6c833e8137083afcaf249c4af95567f98dc520a1081bf18bca702dbbd4ee8de62e3be2ca8260bac2d4fb4b323a562c66f57fbb42d0ca1f6c273568

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0546a30c6d23798f090731862b810dd9

    SHA1

    ec41e898950551dabdc2136d72e3c495643f3f5f

    SHA256

    4f0feb2a55850639b78bcd814f45b4cf4ef4ae13523b2f8d2e42fd4df46d6f21

    SHA512

    cfd05cca6853d8fb94e70d06417d6597e09aed39fef35ace0e23bdf8dabc80fd1e72cb5f4a574520c55b610e1f320b7ba67f64a736b5678926988b08543ee897

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    466514e77671dc88025e62a12a23bb52

    SHA1

    8e4edd1811ca9d1b68ea1fc7a201eb3a3146ba4d

    SHA256

    fa313e2bbf06f669965cf1ba5c3f6174b3f1e2d663eaeaf4442b09bcb67e5bbc

    SHA512

    1bf4b641250c170311eba245df48eed45d8948bef5573f014a665a88270292a1b53fd7e4893fd121c6d0dfbf2e437c0d8f193f3d5dfa6e9c8e3fa18d3e57b888

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6caf9d79958c6401e16f10523b652b3c

    SHA1

    4d0286ce46b9f6c36f87704e853932a1ff7b342b

    SHA256

    152d5c4536651aed5dd0872efa713c6a5862fa8dc8b771faad36b7b6aa5d1102

    SHA512

    ccf4c2054a216ec09e4aa50ecfd8802b549606606ce595e87b77cd2b69e9b4d22025d94e72373d1f9ec14876e5e851cfc930b0bd7cee281a8b44343372b0ed17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    045c2e6a923e5509350eb82272d0d968

    SHA1

    0867346fbe4b4f749930a7c2a5b886e3fcf4ffea

    SHA256

    cbada5f2e9a6ddc360909170f89515d0376b67b3edb547d51b17bcf33f26e518

    SHA512

    dc69f8776bf0722e31a739751e1edd2f16a63e8b035599e9361d7c37e68e540da58415b939a6db19d4547e40cc5b14839c7004d1b300a54f706b5c4ac07b8c36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44b661fe40db5245190193af370f17e7

    SHA1

    d6d2e9e7899a457cd30e18908cd6a6c2fbbe6d1a

    SHA256

    10b0918d704c3d177faae3853329499277276154f49163f254c029fd525b4303

    SHA512

    5cebf72322d342974efd897db86872dc6af19a90859f51f0f119ae06aa760bda40781617d1e661f0eb77971eec50097454d7e3e4398eb44efcab392b3e2d4f61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a4bb86b5981d1a4158a10f164a98cd2a

    SHA1

    88aa152bd22bbd783f462596e1c5850cbed01902

    SHA256

    a6b23039a05bf093d718fcd7979bf3770ce4846938ddef304e68250208c4128d

    SHA512

    20494dc936ae1dc8109b70d3ec63c02fefa2bf8b4dac839651994a40f05f584459f33431641ba9664db54bd31e9dfd4cc13a279d8165c27321495c97c041d45f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e775d3c13531c92ff8fac7b551f1999

    SHA1

    5c11a74568a1fa95544025b8122045ee3029fa49

    SHA256

    b417b5692f86aea96f708c593229f67196987505fee00fe629cfd7f9622e6aa3

    SHA512

    87ceb32bb4dbd98424f5c869a388b5545db020af1b02c669fd49aa8abdb00a4f1ed42534a72b0058cd986b480625608cd70dc975a48f8e02552bc91bfdf8b0f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7c8bd80137495bc529db273eb2ec6e38

    SHA1

    8eca01f041af51f18784210e4000e76543afa462

    SHA256

    4107d09deaad78610ee0a741133dd96dbbe10d8bbe658937c36c6c3e6d2a4cc5

    SHA512

    47dad0ed70a7f0962b2a0ffd3fcd5b3f0b203baf6fbb846e224c36e9fdacf8ce12dd48c2c78248fde7c141e28cf41dd789d5fcb357968095e06ee96e4897a3db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ef8159a729ffec4f284e25b1799ba5a

    SHA1

    1b2a8850b74f14eb02ba59088dd1ff89971d37e8

    SHA256

    793b87918a4f301efaf543791194f58b0b93683165dfa20c15700f0fbeed1daf

    SHA512

    6debe4b8390ca25d4bc627b40f06b89454e5980cf382f223ff7e5a16663f324be82ae1b5e5bb77028d4947dc217cf71f4839c586dda8ccb26dca7d53dddd387b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98d538740b2288ca8e2e1a19a61acc4a

    SHA1

    cd22459d7b92564fd47516ba53b48b23f8613cdb

    SHA256

    0999c16978abe63ad84a1bd40e79a85c3c0d59eae3ff3aed1ea083f83a5b1ece

    SHA512

    97500deaa98bbaa2c3ad2f923a5b6e3a24017a3b57522b72a7f5d8f5a9c3af7a40a12451960c40a6c5ac960050f4eb1fb30459b203dfa7c6a4a516f8ee0e2e79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4f6e4da67be976543d14e62f53f28268

    SHA1

    ea74bf4870665abf9019b3678871969fd0793196

    SHA256

    2e5c3dcb75bee79639ae24269f1f8f170f3d4a513de337fcb2b99a901e05ff3b

    SHA512

    d1d07fe80010d95ba271d8e64796db6f3ee7bb3144ad4a52af382d3ed4b27e7680b6d75fead218c59f10978f27ab2832781ee2e638ae5cd52d69dc9b71ef3897

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f37363f4828d2327624cdb460277535c

    SHA1

    3495de7b49af9d382bfce69ebf8190f89e9d853e

    SHA256

    d9c5a1aea2aa76aa5d3f7645e527b7f14c305770609caeef223811130b209c00

    SHA512

    1268090e90924877e314fb775ef2194a6eb38fcd9f693a24e2a1ddec969ef93784a562294f43f3c22bf3f6d215d6430f6ceb0d9ef4580a033bc0ba605a9d3e0d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\528EVS6A\script[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\Cab2907.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar29AA.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b