Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/07/2024, 20:44

General

  • Target

    26262a55e726276c84c4e33ad5240420_JaffaCakes118.html

  • Size

    5KB

  • MD5

    26262a55e726276c84c4e33ad5240420

  • SHA1

    30d08591f72986c100b1385120a86aeb51890075

  • SHA256

    a3cf93a32c9044d7b07ed5d1be2bb443a5ca46e69d4635c19d040a7fd8286972

  • SHA512

    fb727479746973f9235816eeea356196402c213210b5f4400adb25f33a59ba35b721fab97416cf78eac1c3b74854465fb570a3b065013afa7fc74e667ca6be71

  • SSDEEP

    96:1IPyCQ6oISUKzvehCZGaXbrI/zvXdC+ioAaKLah3xVFBcD:1Ie6XS47aXb4zea1q

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\26262a55e726276c84c4e33ad5240420_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2252
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2252 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2504

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    376df60d02f60a4df18501d1f107d9fe

    SHA1

    bf3b4c0291186728c61de4f54a9ef9f985bebfb6

    SHA256

    13b3ad90245e03f18e4958f306d8ad3b0e6e4120ac967b04b15f59dee4e1c325

    SHA512

    664257f3c34f804b289eb1eb703aa349894ef1d653bcdb7fd700ff90f9354c12f0f5e9034d457868b41db3369f0b9fc4ec1789a138e5f7bee417806c41aa8b1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    91e96c1a444c776de09b554e65f60f20

    SHA1

    86ad3050b97214bdf6d290ed00289c59fecfab27

    SHA256

    c79dc600100d0d08628e0fa9cb4e533474201e8641b41895b74a46e5d7e83597

    SHA512

    07e83b29f64679c0b8f7aaa6cfbaf575bd3da15f36389bf4ae6581558b9a1b5367a804c973f4ad9687e60cd9c06342505ddda048fcbc24a6da73cf4e18ae4390

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c766d1c891938438f0dccc73076a4d3

    SHA1

    6e30efd411c04ca2576c3224fb0de540923c72f5

    SHA256

    37a80145b99cc4a889609016e21a8e46fbc54792d971ada5b8c8bb7743716279

    SHA512

    2423a83ea92ea3d2346d8599a2bdeca1ca8a0f3e8d89d1c0f55e503b1f404e8ae28a62c02cf8dcc95d004d9a2177fd0e5877eddcaf99455dd05b46b1fb487a61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1626158f6f7561b896f3b960e2a766d7

    SHA1

    6c8398bb8ab75a3a510950c0c42d566df7765760

    SHA256

    2bbbb02f295bf92838d92921e71e9ebd2611583b535fb5c624cc64c7c0f52f18

    SHA512

    86e51364d5db755c5b199f8e6aac7913e53732cf0676e39e9be629ad4f0a46b7449cdd84d351759bfd08c720129370712ccf048db7797884c74baf2d36163926

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b8fde1fc2cf70ddce50167447af103a2

    SHA1

    7e9dd753b3661a433e36efa07f0a32291ec600e4

    SHA256

    389ebc6e0b7da0fc91db5477620eefbecaf4fd17ac055ce10d75bbdbe2483e54

    SHA512

    9c96ba08d2a61d290b29e974bc9958dcf534fde7b0b768bded95e402668987e1a7ec806f6c4e65aa4c24b120ca7ceae2664db4068385d12ad0ed3f8638fb4fda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3418542fba00e041e7a8d0c4f97ac558

    SHA1

    eb8722b5123ef978f60f4ec165ceaa3a6a53d730

    SHA256

    01bcf027ff72103e9526f721b5f7497858db3d15a8c4d36ce6beba5b02cc8d33

    SHA512

    b3e55cf0c0ea7e691f72c500c92ba3ad5e3a37a2bfe50ce0b220778a2da0ec46edc0dd45c4e3f5f86b04f1486613f7be6f07178b2b36f3601bb2b05feca3ee79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    929fd0248ef3a0cfe96f4c487d5af727

    SHA1

    f0b5ee7c074932f1c374f32e6eaa0a32075e6c2d

    SHA256

    53a452a2c695c16543b640f66fe5623a5eae8fca45ca61b21553b03104eda58e

    SHA512

    de39d2c1a0ee0ea5e7318b54ab5a00b7b0fb28c24abe3d1a95a36ae26a7172f19d4a04c5ff5837b14feaaa48c2dadec117d2b495b1477ded9bfbdec480aaf3fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8fee284a93055d635d52a280fecdb66b

    SHA1

    b9b2c244128eb9a5f5206ed04fd9799f68aa33ea

    SHA256

    2bfbed64247d509cba38c3794243c44da1561b82cf7dd54162d122940640dd44

    SHA512

    b20e4d23a822e47a9c1c19619862b0172a49217d8f0c6b57abaa187f3bbfbd1578437928cf9429f6867e7cf2e731994635c3991e31246ad06a3d60723a399c1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19634516d0c091c91af23038abd84fd3

    SHA1

    75a3f6585269ce2cff9d1175559d5cb2a4ec590b

    SHA256

    94e59564d99231424ca460da930c043091239a4d932993c4773b5b5dbd7e7e6c

    SHA512

    fd4c88926803120737f66d64571640cf0b6bab72039b4ccce778be15ec23e98c4afbd7986c721ab788d3504bfa7a1690d83b6013695d8bfbb495c5f8ad5e0dd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0557b4ab33b4fc4e7f2add1864719c84

    SHA1

    302487fc9b5417a7dfba69568a2c1a73d946bc6d

    SHA256

    cd8376ad170cb8b89aec9f2ef2ef01cd5e2e8a59c34c5c76fe81eb5835f3e30f

    SHA512

    b59f44edcea4fbd8810327f40dea5555f75c1bb98fa6eb2d9e40ab7e76328a24a7f318d5f81991e28af01519be5a948dc7b1f30cbdccd931509cccfdafec27ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f0829cff619691cec50a7fd38fba1e61

    SHA1

    da15e60eedb9d410f2f75bbb0125ebf090829777

    SHA256

    4dfa672e0c63ae913283e99d8855851799098aefdd4b45597a26be3f0961cdaf

    SHA512

    32f9ccb830a66e8d12302de7b6cf688804b95ba01f7309fc22aab1d090956b50cf324277ef4e6e3daa95b02bee50374e46b290b84d91f9b3302aa4411d2d4f69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26a910d5cad3c7eaa3f82326d4d628bb

    SHA1

    1a4e42d960f68bb7312f51bf2427f7292be14d8a

    SHA256

    e30e547c5a806ea13ebb26ed2abb1ecd4c0a2175aa03242a07f1ce4bd13284fa

    SHA512

    d3a91768c31d6a7889dc8c33fba25a9efe242c605cb12b4630e62403d83bb7af7707bbaebb9199786e7459db92d135d7b670c9594303153ce91ee7d9aac5a051

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dcc298240ca4d61bc7bae8e315effa31

    SHA1

    2228ea0282deaa80b10bc007bc631bf54215e362

    SHA256

    59710449128f88b538d76666f2316139cf591d2f95d0788676ccc24474428eea

    SHA512

    4554f8277d464c12987af34d8356438dc9b00859fe032623c0a62edea8205e3149ee66aa28a19b5de3ac10a6edb6434bd9c48225d43694b464a0f1f5aaf6176e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c9caa7e483a48061fd71caf25c7acd8

    SHA1

    4a1f252a073c6369af28e166c0ecc54654bfca39

    SHA256

    a10275654753548c78eb880c3cc3a71e506c7de606f7bf136b80025438eb6534

    SHA512

    67bf0cdf9a3f043cfdec3aaa386b98ff6c05d997ca6cfb1d2127bed485e5ce0e4140cbcae5a32c2b4b40b0e5f36433c1eb27cd10562f9e481c55f5c3ecca38ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    46afc94423b3394e4791a3d01ab06f1d

    SHA1

    f898ac4ee0029087d555e267e383ffbbbdec852b

    SHA256

    1f7e4a5f5c127b5e58a33302afdaf5d3d767093b4eb2a6e77cae8e5c4629ef81

    SHA512

    9ee6a6f353921f5c96d3229a46e5bee31ec125fc982c68bbb6e1e9b8984f0e41e722b7013a815ded669e691903f3367e8d930826a0bc5aa64a3814e15337cfff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d36a5c94cbd473abc661e94fdc29c96c

    SHA1

    d722e90bfd492084655c20da22329a1844a90f00

    SHA256

    109ad8153ec2d84e240fe744d3208a7bbe1f3794ef1fb3817d85f30b0bcd1703

    SHA512

    5cecf2f962ed04e1a95bb8e8e9321f236ff8fa419722dee64202fb299807605ddf92798f2587d1dddb96ae3e2ddc2c0acbf700059a6330515f41cfd2edbdb7f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f9d9b5fdf2f24588618305beec77a8a

    SHA1

    bd599308dc8a36a6976c1c94789f590bc3ad3b4f

    SHA256

    b433dd0cec84990e593283418af5aa18cadd75d297a71d4f3e1df1ae20c49549

    SHA512

    c24d644c187e7f2018bc5c82800c321ba8c1c34fbba52de1622300265a3963e30c02823f1c4e86485dde5390116106bb9e00f7aa0b07c2ab79ad3252fa99e7bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b5ac898e33056fcbec63c3a931336393

    SHA1

    1d17c7bf60480fa4695ec01d0ef546ac612cee5e

    SHA256

    f90cdbf535adbc103a9078dee3f9d5b008c9d4bae3108c050d57466c55c18ec6

    SHA512

    e77be039f29517dc0be65e34a73b8492eb5465be392fb620239d60cf3ff04d94984b914953dc3ca206b31e8ebb66dd8f9fee5f18d6bcd7ab12953bf891397355

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a639b0260df4cbff1231ce28a0332ca6

    SHA1

    40d77bfde4c855dc9fa78daf27a3c3e1ca50f9d6

    SHA256

    fc6a5e44422c203cfe8773484654068afaf3ac1b7b077364f8bfcb4a89ae4906

    SHA512

    957ea5cbc96c775631132a7a87fc43e5aebbde83592e605d13b9b9983171024ae11a4271bd4e378457f5fd776136554fc66ec5a7ec621a20e54349bf20216da7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    14b7dd3728a8db09e13b940f98d7dbe1

    SHA1

    24d35d01f064f0f3f8f0c79f8523483728ad62b8

    SHA256

    eca068fec5be6b549914b04dd5640a7b28bfffc351ab12fee0dc8d52d6fa25a9

    SHA512

    eb34791a48e5c6cb1e167b6ba6197b481816cb69e59e45ef84b70fe9012430ccf0ea335f8760b551c5cbf2a514ba239d3103b40b826e15625dcb0e5667cbfa9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    faa25f0f61ed0d2c90b90f0ccc1e6092

    SHA1

    4eaba83ea3033575dbbf6a041b1174d2d13cd6a1

    SHA256

    9fdfd3654811669b62a2244bfe440deffbb0e9224cae959ca8697f691e3b03fd

    SHA512

    a356bc4cb118184f93a25df2ea07f15c1707cae76f8f8f7e7ef9288add951d360d3d8509c5575f18e6344b43c444b05d05f8afe7224e2ffb1f43fe4e498aeb41

  • C:\Users\Admin\AppData\Local\Temp\Cab4481.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4585.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b