Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    11/07/2024, 05:43

General

  • Target

    37e95094433358705628f7a8274409a2_JaffaCakes118.html

  • Size

    46KB

  • MD5

    37e95094433358705628f7a8274409a2

  • SHA1

    6a2e67e3b385fee9777d3b56e533aabcec33da12

  • SHA256

    e5416da75b85eb334ced10aa04fe47eef24291e4b189f351ed1d8d39b972e272

  • SHA512

    dbed0efd8969f34e0e61381bccd6018f6e85b04f7112bbb5d8c562ec0f4a63a3a5f3e2a8004d531857dc1075491c18d2f37046605839770b045f21d8c73bedf3

  • SSDEEP

    768:7N2EWQApmpi8/Vr7p76YSNxNBtpG44egMUqE4AFtnkb+GmnE3xcgkmb/Bi:71ZS8Nl9SNFS441MUd4AFJkb+MxcLe0

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\37e95094433358705628f7a8274409a2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2704
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2704 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2060

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    402886d44f9f299d85be4ad77699cfc9

    SHA1

    a1fde210bf2463764ac5e84073f67d5170d8a7e7

    SHA256

    bee49dbc8f45633d96b82e821d463d1d7a1c64d1bc3112fef9a68281431093f1

    SHA512

    8c5a0920ef0eada8a5174eb0471f0a3585e2fe7558dd22ad16c388b3ee5d5450399cbaba5c58b0fa7834bace53d9a5d200787d30a75ff595122b767714ca5096

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d68ad84f88f9496a41c3d5d71e04ca7

    SHA1

    ac335c52f125c23ae4412e84503bf3bd35cc9646

    SHA256

    b8462950f3fe3a077143ecb9a02f5d7756e0009720693ecfc65032f1cc278ee7

    SHA512

    3bd2befe58c847b2d620f270e0a1ee5c6ba10a18ac592432fba276ed85110eac236e409006ebf436f78ec4adb9cf2e30d4445da77119fa45039b83e250e5c85d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    23f087e1c65947574bc1d4f91f187fbe

    SHA1

    7ed07abd43c1026a663feb7a67c7f34cb5eeec77

    SHA256

    a763bd5a515a564bc7eccba714d6c0511c2908eb988039e1d7aabcd7c264f3d0

    SHA512

    ddd44329bc3eeffb7cfaa7d61687fc00568ec1c086460964b6fd014d2dfa7a7d25fc000b0ee8c5acdb61e5fac6689ed7763498c953f3efb0c676b6a68852e70b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b9eb82309efcd9f098af3194b26c3f4c

    SHA1

    0e62b4886272c19db03b6859ef5456a31b0315d7

    SHA256

    1d1788cedd52bd035e6419761a8fdcc95a646fc7f165b5066724c040961186fb

    SHA512

    2df1781f4b613c4e58d14bc25b4dbe9469302021da35294694e400ab34346cf17b74aa5893b1d4a179d2a176a39e663dd3176c5396cbcce9c72d66bc9dd03c4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f14ac58a7fc3dbb67adbfe4604d9edff

    SHA1

    878167ea791407b4e985da3a492d2d804ab430c5

    SHA256

    014e28207182f746229b62f533dad0a7c413bf4f9f7d99269f539759fbadc71e

    SHA512

    17e63e26978a7a73d0cf755acf339b9babc1fcc2953758db3d45e929244f3fe8aa0007c4f3d7e429b9310dc085b983e2258772f6c9c9cb147ca0dfd84d2ec132

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a9055236243db5fe2bf31597ebafce1

    SHA1

    8cb3eaea109f6031f98706475794cdfb46c4fcfc

    SHA256

    15d99e1952536b2d0f3a60c140f4ad4c4e67a801a6dcb598724f3bc28a540854

    SHA512

    0c73c5f9c4addd66c1095dabc57207d4e65e716de24aa8a6dc7b3a75d5cef3152b43e7866801682a5a79efa2d3c44dc37faa57cd36d418e0a6394a5dc9a41c17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c98bc368757f9ff538105f3c97b78b29

    SHA1

    d1c8fe4686b099e77e3e89c509f589779c3426ce

    SHA256

    5aecd31c237d2750e260813ddd2c9b818d8662e038879e942d183af80fff14ed

    SHA512

    6cc6351d7a78b669936433eea126574016ef76b1e96a0dadc7814c455dd7504df5d0e84a87cd8c490227ca64b489a3645981efd9708cef3604c3ae4e529fd4e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    64d3ad0e94f95567a19ec3793b99427c

    SHA1

    3afccb6f4c9acfda8d38baf381322cfe6cbf11ae

    SHA256

    dbeeb3be843a82d438fdee6637631bd90b91ef301a802cc0574135253bc2448b

    SHA512

    90887dfb774b7c978bfb1248e030eff51eddcfdfdbf79f389a4efefbb74c15368e23c2ad0687d464f36df6f7878858e525d7fc71f4e4febd8495e64d6a240567

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1bdaf20e62c8f3781575c583ccad6753

    SHA1

    08e3eb8f806c904b0bf3209102cd30b3b3c404a1

    SHA256

    96b724f50e8a550b66cc0f1339e449aa7acaafd21cc06ff0fac42fdfd9e2960d

    SHA512

    9327271811706993389f05082c54a65e423284c2f8c3c67185da8cffbb0d02654bbc781d28a11503488afe29cc67e47371d609b43b5565c9980174f3fde735b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad421c71f894147ee31baf3a34c76575

    SHA1

    7e6773518efcfb270be1b08ecca91d353523c660

    SHA256

    7608b4e4078b67bc93e712d60fe5a7431ee91b92531f3cfa647bd98fed283b4b

    SHA512

    32e16a460b2b21750fb9fef5d7cd36c791287d0b44c83ff1cc3480cd5049da2c7c7699a2bec052c131fd3af7f0341d0eed2bd6ebcc2e7e432d21785f81301432

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a461bcd0f107b9080945b8b3e54b1af

    SHA1

    fc082422e18d234220f29c9287f351b1ee9b4fc7

    SHA256

    7991137d3355ecfc0c8fa1eff75d76cd7cdf5a1c905040f6d9e1409d0d25448d

    SHA512

    143ceda8458e2345c46554fc0b098f221643d04f47d09b49789caba13e5caed3869004f0cd92b5525a83641e575a2fb3e82e78fec3a44429f718af3cf1b2a2f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    79898284ad8f1d4bf5419d43c326763b

    SHA1

    116673919c556a2eb4612ba0a8edaed0c7c59939

    SHA256

    33f66f2104c240d3ed26f01df2e874e1f0ed414f46f1d9e5857c7a04e5f5d54b

    SHA512

    279d2595df38369294154d0d26428ce5ebf7dca7b8af99290ba5f3a6a5f4e4974c8283ba0c0a04ae616e1d801734721722ea50870ab19571b88f900154aaac5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bea69301611238dc83bfd416bde5a10d

    SHA1

    29f7d7503480bfc844bc8d9aaf150557887c995e

    SHA256

    6a3c552c44f655da19da18a533688bb3f34e8dbfc0481cd954958bf4e7a8a1c8

    SHA512

    d87d1633e1a48bacef294a8f2b7b1b67b92f04a52da12538c22b6b6144a392ace285584003624c39a18757fc123d7f9107bd59ebcea5bac3855b4ce93e8f5578

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd845338f8a83f99d2c9885a7dfadde5

    SHA1

    bd95374410b588482c0d7908a475e4fa4b2ebfa8

    SHA256

    d47636d039509342409d77eed3c5ff6c09525be46dc5e2079c712a6e40a2da31

    SHA512

    9c318e247f3793cf77886d8f9d011b61d3a126ae83ca579b619c01cd9a8702eb3325dbe4177348061cf686c1f7e6b7faf47682a00d76db42fd86d23be70a2beb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    93d361dcd2d342747d33611a474ecbde

    SHA1

    9eb4f4a6c3453667c8ce3d16e40e02fc33d546db

    SHA256

    90e86daaf13326098d5643a3dcaecccc72982f852d0e9f23c160231ba66b4950

    SHA512

    ae903feb89602472412db6a79c753db017d349bce1d28b6c7483a212e6ce28d6a8109ba3b4bb2469da25be0d1ab3d70da46467a12db4d96f20fa729dd005c252

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2532d41b8430cab79c34daf82b797af4

    SHA1

    a6d9f8380ea90145ab297c8cec15ff4d3139d5c8

    SHA256

    3c1ebcc5c763a4ee562b3e8d78512a1776c55f3975daf405fadf9de3cbfb6bce

    SHA512

    8e0dabf0430eb19321a74a7b3a82510289cdcf2cf82d4ef2ac9e280f6fcc07f1e6bcd78f19fe6523af500f0e977c0a7504c32115c6c31433208bbd0c3906ced6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    54cf900962032b3fef824eeacdbe5076

    SHA1

    8f67632ad2aa2c900395c912befb04235ee53145

    SHA256

    47da5c8350c905d4d846ba394df2d953ee82762d95b3039ceb4f392f45d86f3a

    SHA512

    5b70fe1c756a06c7c5c0af564100250edf8da6cf188c17fd0ee496229c70802ffba746673aad9e107ae1b7031fb08368546f90918a29a9dd477040a32fd68916

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a69bd89b2187e751656dbee2fa86bbcf

    SHA1

    f8ecfdd3ad6a978a5ce23510316d74c4fc8ac377

    SHA256

    be34de72d1554e086bdcb401ef60ce33d37a0e38c947f472c7c086c4d4d0bbff

    SHA512

    ffca88f0db9a2f5510f661113486c8bc188a426e47281874f06877b0ef0f1c794a0b85dcfbcae97a5100e98405ae0f6c0188ad3515a5ea77201f206894b7f115

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    191987158467030da2e61f459b57bd25

    SHA1

    1380c34b4debd76d54c1d50d9f91a347df05829e

    SHA256

    15e7542adb60243983011dcb0802790fe365b4b0b9e0ee8defb7985ff62e7176

    SHA512

    b1ec0920960aa3fad0e228bf28a18271aed280b81b8ae0362d7a11ad089d78bf20292db7c8bf8768a20db2eaa42ff3df5ab47b587d7ab811f58fee52cbce3e4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    598ea4387a3220637dbbcb9a138c5a48

    SHA1

    0293ea291b31d185333ea320edd89804e27e40ad

    SHA256

    a80fc6c0839298802484449cae13aefec5affe35b6abad2df083297b8959bce8

    SHA512

    05c5140fb219b9bc54918b633626af6d21407365f294774a57c255e5c76fda36d44569c6997148b45ba9bf11c1cec4bdeb3aababe3b55d9520da4f7f07fa4caa

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JQ7VMQEC\autoptimize_fallback[1].css

    Filesize

    158KB

    MD5

    960021cac60c2b41f67d07df87e60732

    SHA1

    341b027ee26bdbce721233421992012beab416c5

    SHA256

    b795ab45e2b898b7d7cd120437b336e3e7742bf378199ffad186188938b89ac3

    SHA512

    3f7f0e95b997a5ede84300a787fd96a1c7501df2efbbd648572b44946daa9d0755f07dc1239aedf9a9f7c8b2954394bce7bcd777b0b1ed649f0fc19e9b2c461b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z2D3H3V6\autoptimize_bb9ab6a11d321fe2c15ecae3d9384bab[1].htm

    Filesize

    167B

    MD5

    0104c301c5e02bd6148b8703d19b3a73

    SHA1

    7436e0b4b1f8c222c38069890b75fa2baf9ca620

    SHA256

    446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f

    SHA512

    84427b656a6234a651a6d8285c103645b861a18a6c5af4abb5cb4f3beb5a4f0df4a74603a0896c7608790fbb886dc40508e92d5709f44dca05dd46c8316d15bf

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z2D3H3V6\ss_dafab79021e112001f0cdb2b20121d99585e35ca.600x338[1].htm

    Filesize

    184B

    MD5

    ce1a246981cd1f6be84e53fb3b6cdcea

    SHA1

    1015019d9970df1a146cb182bb6c4153754550f7

    SHA256

    092d5e8fbc98868f8eaad1a535fd4f1481ec50b5d8c315a77d59cea9eb8df6c3

    SHA512

    8a97558ea903b142ea09d7a2e0f17480cbb215d9144907cbb1d7802940a275ef992678547b75dea1d9b6d08b0a3488e90c70453938eab39400144a2791852bc0

  • C:\Users\Admin\AppData\Local\Temp\Cab7F5F.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar7F60.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b