Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    19/07/2024, 11:05

General

  • Target

    5bac6867d3dee98cb0582f4834951aa8_JaffaCakes118.html

  • Size

    32KB

  • MD5

    5bac6867d3dee98cb0582f4834951aa8

  • SHA1

    d8b48d84a503eb83c224570c694a38ec0bb87a3b

  • SHA256

    9368a5ab3210e89c10b065b53b8eefc81512633f9ad4c78aeaafdd1c739b6210

  • SHA512

    2c3bfd3e42ef9d52d41972d369a19a95e4d40d4f91be21e80c462dc8fef0d9563489e013c3214cec5194d4597bd6fbf584f047dee978908255f0878a49b2baca

  • SSDEEP

    384:soElIAZatn4PWGTHVWl1NeCI1lm5nakto9IATGJTHlSqIZ/geV6YVtuLZ:ANWHrylWnaEJEJg6GLZ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5bac6867d3dee98cb0582f4834951aa8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1512
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1512 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2012

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0be56f7c7eb80b49b05c3a6ed9343fb7

    SHA1

    7a8684f7ce3e1dd24eb1bf5c9c04bd5c4e00335c

    SHA256

    269842ea787f8ef9093de054a95e615d518cec8154f9491b7297a2a0282a382c

    SHA512

    f5b22f213b5ec6a01a3d3eb5faaa533a9a99d8788e873aaccd77823e33b247723859618c7ded29623a4cfe72491e7468764a1b3f85872310517287af77f47d4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f57a0a7ce59f0827dfddd78adfbdd735

    SHA1

    926298cfebcc0dfef7266731a13e25e77220233a

    SHA256

    55ab8aee01c1b95995e03758bc40ee2f7e2a5d503cf86fc1b8601cef5ea0e2f6

    SHA512

    ff525d5e14335f15ba6d2a727dc60885f6a5f2dbd4acd46f0a91e734cf079a1111c1a2ccc67700bf5c5329c75768a64769f6c405dd4ff0f3c7d18c49bfd6707e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    939d88bc42da36398af28ba6248a52f6

    SHA1

    182194f1f69882c9d9a9293ef60b87b5e7ac5afe

    SHA256

    5c4579bf7100e91f1d21b202f209af8cfaf46e7a669719e50091ba4c5dae15d2

    SHA512

    676d9492fe42f3f335cc4d7b51ed9418694855047bda5414e000150f75e8ddaa1e436fcc32197f4944126c3344f6cf2fdc7e7071564ea5d6f0c012facfe06c11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f95408d0f9bda80658e64e960abca66

    SHA1

    b0525786b1f3610648ae322c9e50b1785724f9b4

    SHA256

    55c13a5d04004587d2c743e31827e3b7a62464d0089c6fa55bf777e6cf7a33f8

    SHA512

    7c6e7f1896de650a5ee07dd700daab72079bc1330e3f47b4c4046d7f1b4fbd63bce46dced05aff9788f42297e4776a7a0da17d846803e48613efa49e4646dea1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    378a6c5c2e3a38fcd0f15f311de4f04f

    SHA1

    1e27018fb2eb87f1539fd1a05905abe225b07d4b

    SHA256

    dae76ab634d16b5a27e28d7f381a408e91035a9f322ff44bb3441f095f16f48f

    SHA512

    15a3c63f64348d08eaa01343b915b6dd140d7445ec09609ce6b7d3bf3b70fdabec7079c3518c6613f6c484b1cc275bf8b6ef17a32f00e0cc359327f88d712bff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0c8dedb88091e257e0a30cf5c9a6f4c

    SHA1

    57f58f1532c97ee6f3cf607b6c182423882c764b

    SHA256

    6b79f3073a8943ff98c4be9858c242268128f9584d243dfcef49d7b79b694026

    SHA512

    055bb288ed5903d8ef3a3d2db5cf00241a8280d4046fb99f237ac0481c18c6e3d154f4b7604334636b553cb5c21d5192c5237255dc35ae3050e30565b20f94be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98f09943a580114aae1ce623bd1a16da

    SHA1

    63e4824672040816167461bbfbf6d86acdce4386

    SHA256

    d52cd070395e8a06a474e53ae1b5216dcd60de9b0074587646376576e1374e6c

    SHA512

    c9763727194c927089a0e4d4353529ec1117c84310ced253a08a8765d7a2f4f2f719ee1a28e56d6b8885ee8a1d3b0c938a4b4b6a5ecba5b926b9829c1c22cf9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    701a428ee0314b3511304dc9e34c9d4f

    SHA1

    f574a888f7cd2bf591e739c3bd83e309b81e9526

    SHA256

    45d22772b84e9e422920d685b2f28977ec0a9124a949b29205782145d0a3ae40

    SHA512

    798c13940fb1d8a1d88731edf463d93dbea7229f858585d48fe85e8d864ecc86573eebe3557ba6807ebc78ee4f45baef08f2899de40f2836e38a33d8ecf22024

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70c1950145b590a2412725d87e42851e

    SHA1

    0341ff3d52b5316895ecfc2ca853f3ecf0c1adc6

    SHA256

    20ae19544c3d04b2b3ec10c0e4bc61c5ab183c7a1a856c34bbdabd7426bd4691

    SHA512

    a6379af540e60c524cd954dd9155facad8cab69685090c90a5e521574863ebc9a3f5c2106048405e462520658f277909f63fddfb56bc86ca7336a6d08ec4f253

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bb04b303864873a10a8bf8f488a0643a

    SHA1

    ae237508d457040837eae9d4d23d32ed81b3c912

    SHA256

    35b830d991a18f99f13c62a6caa3ce168f12a389b150fd07775145c2b93f6687

    SHA512

    3cbc096b9c4c0d4daa89ec554ec0d10732fe89c17973ba542a2d71c316e3871ba7e54f2c0f93c737ab6f9fd6e768c7a12f083be16db64200e203052b71b72a67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c5268be9a55a381fcef1f1aeb018f5a

    SHA1

    2fdb88b3f1f63a0b0ce5c7042ee4b78b95a1152f

    SHA256

    24e2cac4d8d997db4f04a3de36aa3417e3eb3f6beddfe0bed8f8454c284a5dba

    SHA512

    f589711b9e3f8771151a3cfd006e036714d84e6f4a2e4aa592c886093276f7a31514fcb521a36b0502024ef73f81de73432410fde77fdec0e8640d0e791ef7b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2cca5ed9d97e63e72396793d1c661f8a

    SHA1

    f317ac2b0a7642d7e5f9877ac8483b559bf4bd68

    SHA256

    ab62618793ae8221c3d243cbf19f4b2998e2845d6ba4b9d23c0f5dac4689932d

    SHA512

    11ebc131ab90282ac2f7a17c79050493f0e343da278c3c4ae862a37b32f5a490a20668a48be2928d91df7caab8558179668379323e531d3892834992bfdedd45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ca8a5462ba0e4eae57a76aa0d1f83d1

    SHA1

    82159c599d3bc5fc6dfec3ac7a078c616ca86644

    SHA256

    83f419a79195e3d442db88f7953446b7bb0ddd7e5e2a97e8bd2f3aa4dcfc068d

    SHA512

    f264e8c1929a139e8aaebd7c1468e4400ee3b20be42c1c3d2c2c6e1c9e324bdc3fec2752821efc213571817d8b6789e8dab1f684844ab391794c015871308d66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f88977d555b4d0fadd502e19a88599f4

    SHA1

    72b63178f9776a2882754aaa7898a982019d8827

    SHA256

    1e7fc5181e43dae342b193e076cbed8dfa6498ba893c16c016a0c72b56de60f6

    SHA512

    a8f8f3650d7516f890366a63ec9da16c92476f3f3c4d5bbbbb1f788409852e588fa6c44dcc172b0b16612683c6ba9accbbb54f2ec42ed422d7164c009184a82e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e34d99edf2793a18ef187479aae2ed30

    SHA1

    d7ee0d3cd9f9c94f798e29bc18217e1c25b6c418

    SHA256

    b47364487606ac98628aa0d39c848aa1739d0c9245ffd1009b73c6e2500fe676

    SHA512

    d3a9f65014f53ec7267fef5a756c8e067f96540159198ba2efce678d9f03ad8ad334632a81c4059589d241c67e1c38929b5346bb1f6825c215757fda1484cada

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    584faa80a00dbcad51437dc306fe5bf3

    SHA1

    ef10075601a16e4184902e06935d0740e82d6419

    SHA256

    f33beca94d6f9d16fc6a306b47010abb02482c4a88beda7b6384a2fdbedfbaec

    SHA512

    c0980a38b70352ab170459c403f6343c7855409e4d94396fc6fd07ae7a4f0f7da0f1286c888d4c16b019c620f14f801929da8d6fd73c133f2108b2fa545cf4c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c0deeb30df8d895a85b4402c7ade1acf

    SHA1

    74908b1a196ff27355df29785fc89b23bfdcd78f

    SHA256

    26c23523cd67e7af03f8023cb7ff8d429e709e5c2dfdc823c96f776b195005db

    SHA512

    471df4191569f7519f315832f284dd7de22b1821ba7fcd2a1485e18ccd9066189bc49e7ad9125396d40f7832fbb08b37b20d872a9e0892d94569a22e9f695f99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2af4fc9ac4e307f2f5d9fd2314f1b4d6

    SHA1

    301d3c31205c2b6e557f5fa9cd120a082214ed67

    SHA256

    e2f6a846064166e1e6f4087fd814ad0ac62be7a93fad43e3c658398f37a99dec

    SHA512

    f0ce41c2ee3a4807811ae4d84d7709e03c1a89cc5b7c8a6bdb50d9f4be4d34ccc7fb3d42b9ac78adb321b08eddd76efe6cb7bc509de1b6d2ba228ed9b4748760

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2756c40ca723d6d0ffe120b2de7f6907

    SHA1

    021c19e84fed02c4117143a59e809281f7983be9

    SHA256

    6fae4d1f9c11e41f19124f4073e7ff270816c5f88c9320640df29c6d4dd35ca0

    SHA512

    ed3a6237253df9f1a5cadadc4a05cb9656c58b5ea6c041a7ea0f79f0797c40e20842c4c4bc266481e4ab9d3f34c4ff768490fadbfb615e51577606f5a2848b67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    77535274ed9c6541333e9427683e0ab8

    SHA1

    4dc18eb4f83ef4277b263f2eed80454b25786cf8

    SHA256

    cec8588106f968b74c018da6253f0cd68d0b5ba606294fcf74e31c9bd9b746d7

    SHA512

    ccd17d10838dd774ca2f2d16beabbd6fe285305f8c1942b4fefb1588696cb926b463df2e149ff9d291a3ce09622ad7799d7a6e34a289a56094adbdea28e94d36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52bfd0bdfe09c62b0bdb5a7ce8d21a6a

    SHA1

    26ada5ebe70ae0b1b1795f9f7bb74b188111f84e

    SHA256

    ba5f6fe4c9e6f03c98a4735ffdeb009708be03ed5620b63de0595e6c5b111269

    SHA512

    8eb32f313ad838756fdc328e1334298e936055825ce041010cd3a20790e7e2ffb329b2d40f35c7c77541bcde70c29f1a2bb52253330b6b8d174050179d5fc7bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dca879108356da3fe3badafbb02297ec

    SHA1

    bc58258f816dd75412f75bbf91cdddf77426fe41

    SHA256

    7e99e5c2b19ee26e9a4fa40a8a52a6454368680d740cc61cbaf57ddc403e5f22

    SHA512

    491dd551eba37669210dd0059022a959b7c467d5d830070538f3eb89fee1dd4e77a190c394e487dea1862cb2481f8ec07c0ee2948c13fd58d98b73d76f5bca99

  • C:\Users\Admin\AppData\Local\Temp\Cab9916.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar9977.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b