Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    03/07/2024, 04:44

General

  • Target

    211cc859289add99d2aa381e938035ed_JaffaCakes118.html

  • Size

    65KB

  • MD5

    211cc859289add99d2aa381e938035ed

  • SHA1

    900b4801d3b3938a8fcb039e4f69115b9c8d5095

  • SHA256

    94b9a262798665b219618f7f44697ca25427ef6557a1d9d2db6679d526d40825

  • SHA512

    e9e9c87e4400bc46b2c469b7adf0b022234cf551212174efa29fce468b6286110426456765fe63fc6ef33d0391bb2fcec2973e43bccd30abf6009926355e22ec

  • SSDEEP

    1536:1HOrm46BjzCgtEzwdt6aL1XGXM6iUOQ+MJ3rcnPi20:UhPsTjLnpQ+s7cPi20

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\211cc859289add99d2aa381e938035ed_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2192
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2192 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2744

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    917556612b839f78a9712cc6822abe7e

    SHA1

    20e756aba2afe57b46e22d44cca25faf0a3c0bd4

    SHA256

    8f35903eea517759eb746ec78bc0461b4c1bba9383b17e0f3b2fbc150ddda34f

    SHA512

    189b129e5722cf8e9a0ac26bbaf01494c2ed8c8a52be61fc75e699845b3b02e925b24de7cecce1778e9bd21af6b635451c1efd3f93237df40459dd1ed09d3bbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd680a5ba626ea8001fec3f532ee9d08

    SHA1

    7241b83b4131d60662d409b9c617808b0654ae53

    SHA256

    7fda92f3ee5b730e88f6193c3bfbe9b4429cc45fabfc5f583eaaa1fcf2185aa5

    SHA512

    87536365ab89ea3398abb5d7d7e1662bf5540aeb6f35a6b6b302a4a644644b5f33706aaa4a5ad5a2a20b696419a701c07904f7f4a79b0a060f75d176374cfa0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9782b26a8165a34e6ad2555cd9c9a192

    SHA1

    d3b63a79df4aca492fca364641b85f52ac4dc9e8

    SHA256

    9932deaa70f12103c81296c8feb36a12bfc9d98426fd21b51b82813e22868fd0

    SHA512

    b3c0c4affeea73e9cdfda4000939ae773fdd0eba3069aff7bd3b7264f65d96b153e07c850179a680f7b2205e960018885ed2f57026db2be156697c0276b553d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2d86f496288676200d3512829bff05df

    SHA1

    3bedf95251a0d0351a103a0a56307ae473b86ec1

    SHA256

    c8ec83f6c42c040729182ea61f56c6256510d4616fccdae774ac80aa95602ffe

    SHA512

    f35210c747a79313844c71dbbe3f45b6121ac72476208a2bd0e6fd5b2a8caf6f0ccd6cb639d7ce7af70c2c208b3dc9f25b6d0b39630cb8fb421410f453583814

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    475f43edb8ebb776f6a3b16126477815

    SHA1

    5379be885a6ebbe1f89ec1b1f782420c8490fa0e

    SHA256

    61326e2f6479e0a7e261e2d55d4a1c8903b756fc8a88af2fa7820005c19d4f5d

    SHA512

    f35944c66a68e37d0486fdc97589206cbf42e2a8df2d3f76a9766397f390d05ebe49f1474297df93ba21c008db0aa0979613186abf8f34b12371eb62d5dea13c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    874dfce6eed0f07125e64f57be59c07a

    SHA1

    5cf94c1cd1f1c0e0d3fb36a717d276013ae31bd0

    SHA256

    1d60f674848229c4085eb086e00189d36c8f09e037ba24f98cb32c1557b4f5c4

    SHA512

    cd189cb38bb8c281c9d8a03ce36251c880d658588129a1793bb7667ec5a79cc9fcf616e39bf27d6040bb395a9b079bfd8444634fe3d2d9ae78b3f2c93d8a8d86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1ed169de69be2e511873a9e838210e2

    SHA1

    1049ecaee2e7dbafa5c82a28e9b989d012e152d0

    SHA256

    5511ffb00866d4216f757138ec08faaf38000806558310b2a3d3739acebc1397

    SHA512

    c9e56192b1183b129740a47540e8561b5125f8e0bb069febb0ee8b400db6b63777bb1827427601f1fe7907c0a810d533de91b9ddbb2ef72c15646c93241d472b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    706d6d872c0e819d27f89c7313538467

    SHA1

    c43418247c737e5b5ccbaeee8c4bb2eddc7d7a60

    SHA256

    a8682101606bb11844f6f6a9a41f28d8e2e8527940a00f4ecd4a9fbc757ec74a

    SHA512

    acaf4b8c22b6606b043e7736785d1e24cb0b7799a4353124ecad7784f2b462b0dd5195783a52defd8ca7522a3ae8c86542d03b97b75cc34ea159f53fcfab7d50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68ba994a17bca8252d6b95721f31a6ee

    SHA1

    c9340aa41ef50a6239c8810ff7bcc25e7c8d78b1

    SHA256

    3806d6460efab54745e0806b6c059b75d8a4fc3a5a78f9880480ecec846daad0

    SHA512

    596ac4311b2aabfc8f0a1755dc2ad4077eaa6d66d073cb4c006655c5cce700ed475fc7b1781f2b2a257ff96139b25394f3bf7b557b06a69f8c741a0497a4a9b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2ac65f578561f9fee674dbd5dc218d9

    SHA1

    f2a86dbb35644d9cb1fe063cc3487bc79f7bf278

    SHA256

    88cc6d60ad7fa74cab860aabca95df08462c4ac331ad50d9564cb9ab0063f1c9

    SHA512

    8f2c48475ee916d199e7671a683a0c0ebb44631145178ac2d64116670db79e17dc1f30a3eb209ec77ba1c4fe8a0787995345cf5517101bf20e58be685d121a1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c1bc6f9b2063d18ca5ff3c12eef258d

    SHA1

    3e6d3db5dd2d4e9bd5418373a3d6d992c7f905c6

    SHA256

    c5d4116842e60124b898271dcc370bf66aeccf31374dcbf4092a152bf685fb15

    SHA512

    f86c554fa829d496dafc765e3ff9a8e28322f2dc6bb191314abf784eb5a9508f579a5bc9c4a4e396633b6deb9e51194b9b992e4d2312fb6f8a7ec3864e4e4b21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    369db9a2755127d3dff57b130c8a3d29

    SHA1

    0010fe462274e163a40f2d786a04aa034556225b

    SHA256

    0b5bb3bae482e152042cb7a9c563053dc670a93bcde89bb0fc3fa83642d02461

    SHA512

    499df89d80e8add4b2ea53a596329a868e25694ad798c644de4bd869f910ab1a24be2f7eb6084b170a4d5e25e018f54b645ad912ac2bf78d2f7854bea4976cb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    56f5f19fbf203a39cf08c8ff7ff33c42

    SHA1

    ae60ffc1b7fb866de0288848610604339fca7b0e

    SHA256

    f3318b7e48a91d13d084832a8ee5da10122bfb2eae87cef4cb994a240b2b6dfe

    SHA512

    cbee25dc78a300b1bfa349b5826210cfcf07279b54a66bd06c2bbce234d190e0e6e0cd7febe6ed271d2552096ce52eafdf9bfd060992ebfb83043fca014630e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b1e3d2ec3aef04661199ef0da2adf75

    SHA1

    863c8bff77fd575e10bb444fddef1ed9f9e764cc

    SHA256

    605e82077f69352ea24c70c304c4f18fb09597ea00752f3534f4f721c65bb6bd

    SHA512

    dd82e9fb596c2a625124e91277324c5a255c3fbab0509ca515541bda8149edbdc9170989e3af2ccd56bf8b08bb8ea1f4418b236c3168662b8809e1ace60ba5b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    392ce89f0b0ca651a8ea5af1bb3a350e

    SHA1

    9a901792d9103a23ed02152899d264f0a7131b07

    SHA256

    e06fb109d6d434e2340c23cdfb626fd679998c4bff1cf5b0412a8517492c7932

    SHA512

    5e64aba27ba047449aa5b56abf8095c58597d357ecdbe92195e86395652bcb64eb62b8f1d1b253dfad53834986b78031b9d5804ece860c4793c7af45c2eb6d96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf8d0e15543b42ca3f088b85f06b47ce

    SHA1

    89c61f6e70950ac5de375737fdbd3783259aa8d1

    SHA256

    e6942636e359481566879ed0a25c9b53b6cfc70b618231c29096cd431466078c

    SHA512

    175a0b22999af169af64649f8cd5f96890a35a004f3d1bc66b95964ce56aa0d999905a41f6e9ec78bad8f93637c3d2bb268a1ce61df9e2ff4403cfc830942ff6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc67d6a146eebde93cde78db257371da

    SHA1

    352970e2917e6fa19d141d05046b5ee4584a03bc

    SHA256

    1c5efb74a1c4b5ed8cbc2bf729aba3932c34aa417cf3917393c89466a24cfe7f

    SHA512

    3f14eb127615de5471815e193fc83df36fa66791fb57063a40fcae3c23a864ddd2cb39f3fc78368d05118e27d054bba25016e1122e4e4e89e43011272fd0e9ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    208d895506a2df6252dfdbffd1274413

    SHA1

    1e6fd02b7ed3e637733c5970515ccd984b266f4d

    SHA256

    1d93a0e72c7977b3d4cecbcaf90563a73d49fb44e8f5ceac1e3427fd8ae74ec5

    SHA512

    af1cf2af3dfaa9aa0b0fff4972cfca6ea52ee32aa6291b18fb99b3797d6a0fea9b45150a2e62b0030f026c1a46aaba9a4e299e1b4d7d4e7f45fce0699e2d5612

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a296c22db5c8adaf24b51eeb9d7e2dc

    SHA1

    5d6f4c6c8e1b357c48215e30a89e1e94d2d80252

    SHA256

    43ad3b3a92d01b263f931d65814c3c9225f6c49dbdc9c85a6956d78bb30e52d8

    SHA512

    cff057efff296eeeb8198debfa54de48ea9abec8df42c074aea722cf8753c9cc5de3e8045893f6ac6857b57ea9a40f59c4ff112469ab86725155bd5245db18ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d4016cebfa3f6fe00c551624d5699dfd

    SHA1

    4b567cfff8f6ba2f0c542c0b5234cf5d12033a9d

    SHA256

    36d49af4810bf5fc53e180807efc0919228e6ec64be3408b87a68b34ad96e780

    SHA512

    00cd68f1688940f3e5a9d7b6a352ede30b626b30f8836fc6489e6ac2c5648742bf24fc009fc42a7d78851e61964977eeb82dbf95b9cb474d7c61e78361148fc4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b3358cefe5cbfe7e13bf62d4731853c

    SHA1

    66057ebd68a338488397dcfc19e2f711a6810b35

    SHA256

    d7700d2ac7fdffd5215aedb41cc67ced1ea1a2082d842b1355c4896e08e36f11

    SHA512

    3c0d3f26ec43310f3ca636a2c2b6a9d0ff7e8bb4bb468f66a0b23cfb83b20b068554e14a0863998ec381dedcb3b5f570aa12ac8de0946c3da3ba59dafbf40ac8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    90044f21798be1a4d7befce0bb5f3b98

    SHA1

    f16239cf15a70bbce7da346e487f0232eef02b6b

    SHA256

    818a5092e91940bf45fae1ddaa09e97c0638bc3560afd487cba9899caf107227

    SHA512

    b7782a881de4c2fc34bb71069f611bb9732e4f37d7f860e0f4d32a33c13a9d0b0909624ac4562f4d1fb56838569333ad4831bb653fcf3a0a883d73d919c03c0a

  • C:\Users\Admin\AppData\Local\Temp\Cab2F8C.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2F8D.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar307D.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b