Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    22/07/2024, 18:00

General

  • Target

    643513dfcca7723ad2e8a448592af9b7_JaffaCakes118.html

  • Size

    92KB

  • MD5

    643513dfcca7723ad2e8a448592af9b7

  • SHA1

    e27aba20999738e288e85ba1cab80bb6c0780e14

  • SHA256

    44daf9b2c22af08f2a3c156e3368d41296e3bcdc7edaac8d2438ffb5e430f4b9

  • SHA512

    4d4f0d0a58528909242b38e4ba399353aca97cd4ff6b6f0780b2c88391d7e4a31a60f72bc80f10cbcde2cd40b4d79681271d347401118408c42762bfcc4d7e8d

  • SSDEEP

    1536:1Qv87QnX6kcKp43QwLSb8qD4uWibfmaWWfiw7u/m9LofuENlx9TV6Z+T3Vopklv6:1Qv87QnX6kcKp43QwLSb8pzYf/t9s5v6

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\643513dfcca7723ad2e8a448592af9b7_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2288
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2288 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1904

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\35DDEDF268117918D1D277A171D8DF7B_8B7D37A84ACF509088E7DB1FDA95EB69

    Filesize

    471B

    MD5

    c7b7e94e773d87d81d66f1d0a92a5e9f

    SHA1

    67950af3bfd031c4baab9b3b980b85824d8479ba

    SHA256

    6d3f7f8625cb2ff5602cd515725910523008413457df8e23ca0badf0653ff2da

    SHA512

    c8e6f36c73ca39764206f0761c8978569d33952145e949d116ce393e98b09c81db9b2ddb17b83e1790ee40f2c2b7686a871f586b1e3ebeb583ead90aadf17ca4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB

    Filesize

    471B

    MD5

    45cfaf3af51c81e8359cf83328245be2

    SHA1

    60d66b69e53a2db2aed519a1bbad3fdc1008d0b3

    SHA256

    f899dbd2b664c77f3037cfca91c31a78e2e98249220b77693d10080720a972d1

    SHA512

    4004d571c01874c64d3ae27721ac58e7118a0d6e49fd04c8a30b049c7ae1fd33261bfbbd2750fc515e0d0f1271e1d7f375f0bda8992c35404ec87290d8c0983e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\35DDEDF268117918D1D277A171D8DF7B_8B7D37A84ACF509088E7DB1FDA95EB69

    Filesize

    408B

    MD5

    f65cc576d1e2f0dba4d6c827374dea1d

    SHA1

    c9446a2a9efce6831a0897500f90ce42368123f4

    SHA256

    f8cc4cfdf389c8ed914088dafd68c7434410ecc30d16b26cf7aaea4b27ad4971

    SHA512

    cfc199938e13d9c6fccbfcc5c505640dbc999b85a2d87cebe293222d38b6cf23eae73ee112cca06d1eb1eb47b35d06857320d46f05c2579ba41dd74d113a9a1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    707a8038f4cbbfbe16ef443445456c05

    SHA1

    81fabac010a126a710e0578a342df7a6359f2634

    SHA256

    6c40ea48a5ee8b8a73539f1174c10e51a4840947d9ef32771d5d12759e226945

    SHA512

    c20b1833ed0a13a031fe038497ba5ce85b1313158fbde61e724a26f1d8d58e61258c6f1d9505598c69810e08a898dd47ecb03806dd0b36c204a47c29b56d2896

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    53a1507234b87ecb359dae19c01cefb8

    SHA1

    505846aeecc60e7c9ed9704eff70f97d8f72dacd

    SHA256

    95915531970fb5c0ad5ada518dc7f0c1b0885261e67db1f9936b5ed8ec866081

    SHA512

    a3407900cb8c4f5961b87f6cff64f4f8870621540dc0a32b19da5ccf18131f09571770b4c7e2b5e9238b3bd39d1591d69c6765b8717ec780ae8a6cb8ff39fc75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de0148c207ed65cadc9fcc0d618ace6d

    SHA1

    99d7dd75b7ee0691c12a9eb02a4e29b5b106ac81

    SHA256

    66561b2ffc5d640aaa1368bdc1e4bd340ca7a6ee3e08815cf11e851b2fde8485

    SHA512

    dbb7e7bd857ec9b77abfef42b176b3c0a0127d6de85e4ab4f32d21adf9715a6cadaf28fedcbecca33c32bd703961d8373ffaeb1f261fc2bf572e5414daae6db5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d501fcb3d10affe1dffb6fb783394c5f

    SHA1

    6a0bee1a96b0f271d20eda50ac3cd1d9cc8a5b46

    SHA256

    60c5e16c95fd889275ef98d45a1bce13addb4bfd4941549217e1e36a4dff122a

    SHA512

    7e84db0560dd0edf1c411a13d93ae0356a56a036f168c32a04fd6d77b5e2b1ccc5269484c74c0d376e24315132c3c6f1859fd4b4fe928a003601a0baf5a152a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    402b4846a605324be22927e6ba36c16f

    SHA1

    c34044d5eab033e326d123e171e30bec404de55b

    SHA256

    77958f1919d30cc95c02ce729495fa45004e6e6df6f6189086734be1d664edcf

    SHA512

    11068b7409c2662ddbd6ee99a100fafb31c93807dc395200b30d38d0f53eff5a85db56fe5686d8427d369856a8931a4325da60863f08e76af8bbaf8fabb9605c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00fb6fcc66216a610f5d6dad0cd93bae

    SHA1

    e20ce4bd3bc10339f0f18f84071ab47ad29a7f06

    SHA256

    712e19a5e4ce768302522c400978b732035a5a70f54ea20215454d9eeae4e7a8

    SHA512

    b63e97cc3bcf362fa4f4407b48a54d1e448914c61f65fbb21f1f5295e9d17685cc3a0961971310063e5b1a7088d4b402698afd0428a9f6f7740de75236e8f247

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3d6eb816641b030f3cd860739bde186

    SHA1

    5e17368e68003564d2e743fccdaf8ab0e1fd1ea1

    SHA256

    a54036f3819de213a5fbf1e4c186ee89dac4b3b167bd28c4a4e4e9f59dd4e753

    SHA512

    b48b6612c44cb473d7f39acffb657090db3129acef4adde481a1ee61ffdda79de95e9bc81c7dfb5c435abbeb6bf66bd220038f2e011b5d2d7aeb84a21fa8ec00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17ef985ae8663551e93df7c344c4f1b9

    SHA1

    84c952f66f2c6105e8c6d43b41a8e7db3cdcc7ce

    SHA256

    6e2474a3a0865e05ced952819e6106f74de5375c3af7e4564380469e696a313b

    SHA512

    76cd2bb8f262cfc0b36c026b9097b84ab49e429471e19f8d6876a92597bd96c2cefe63aca40b5355714c226e16fa7b8d64e1a46337d7d3805caf22d747c77d9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3cd0ece396061f13d3f87e69b93363e6

    SHA1

    fb54566711e41b085828c3d5c6e4ab9d2299517e

    SHA256

    d322417e9fbd16e5750d08a7602671f9f2d66174ff6a0cd34185705e2b317d77

    SHA512

    e0a8b04480c405811061a86c1ce04c94b052cc32dc36ac4a703a2337fc189e91f431ed90b2dcc05b224034043d8f41d11af8151e84d9eaeccfa3d8980c067724

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    353b25ff119ef5c87e99f6eb25c49fed

    SHA1

    f467778380670b48ecab8f3f104494c51bb00ef1

    SHA256

    c308be3c47be03d2a8c611e2506c73e7f871cb776e90e171c5eb4a4c837357e4

    SHA512

    4933264ede0503acd0c731f20400227e9dfe924acc146390faee41cac72901df42440ab8e295fd9ad4d2eaea5eab7bf9d685d84ec58dc65f831a1ab23715ad48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4f29402ae112e2fe1cf856416ecfa92e

    SHA1

    b172f2a94cea60e11b80cdcc84a40b81b4b8e307

    SHA256

    6f67cef4fd7763ab1c56e8e564b7e7a6b061f18916375cabe5e53d7ea60c76ce

    SHA512

    7f7e13f4fb0dfc3dc52f10a0333c4ec201b053d7d4f155fea07e9b02463b9c7a371f11435ca94b7d9c492f71506302ece2124d0b22b88492dd443d2d80aa6d3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd5d190f452bd980c4d4493526e268fd

    SHA1

    95e384d9d52343d9d7c8b22a3241e2f4a14ee425

    SHA256

    8e5b88f1469b8a35f8d3e905b0527d31ac6944b7661e760383d90721d5b25d23

    SHA512

    6b32e9f6bd039b648e4d98e14ee4b4e3fca33d847e67025619ca4b08e43a752d00e25841d6b77359fc51f5fd7360a581a25295f078f9bc78c89cfe353c312c58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    995a823844584f63f715bb254d447618

    SHA1

    fe2b3becd190e6c48f7d36cffa726e595a6a657c

    SHA256

    f9588322467f431e3f34afa437e34239b8989ee7e2c0dfcd4de62e8a28dad967

    SHA512

    a32a6ae8cf5b8c2ca643143c9dd2d5b46c9b6cc5a412b7221a3a53e5f5a53a44a6a3e8c18b35e8e9f959d81937b7a6ebb0ccc77506be929a077a3bffff887bb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b6f3ec9290817358de8e23a871a6e59

    SHA1

    fd5b3ccc82eab943bb4125a6f083d9136082c035

    SHA256

    2f0ee59eb983b3d1a0ba4b85ba15e097c19fc9273a81aee20a244863d16034b1

    SHA512

    a1ce3612f3b57778cb2ca645da305086fe5a2666610e04a59e5024734f4eba43775e94d59e368c5eefc154d5b33b82321efb7094646ef1adbdffa1edf70aad30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    adb77262aa415898a766725afe808f4e

    SHA1

    337dab789c7a05223ee2b872dc9f3561a262c499

    SHA256

    b645fc42eb9874d74e207cbdb969fc13c07e3b048679079fadfdbf7f6d100f34

    SHA512

    3af1a71cff3d5b3a9d3affa64a37d7c2a121b4c99ee4716e2723f5df199cc656a8b9ed05e582dd2885e855c84a8be5c7ba99f63ce736773d57748afe21ae0c77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8b025ba9a964b7e05fdc14e22e96d7b

    SHA1

    5419ad24be9739004f9aad1f8993ef4789189ee8

    SHA256

    e59de6c440dd3e32f0446c00c101444fb2a6b1a01736be2d519e5563534bd84c

    SHA512

    405d7d9419ac4af1deb7649ed251568606f687d5735592d1375f512ad66499d37a745f99e58941905cd5b9b2c16a2435fb8cc4f18c7f424eba2d49e76ebccf8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    307ed0f4c6cb4ef6fba481abb0c82b94

    SHA1

    3144099734dc57761a125c0c62d903030143e228

    SHA256

    444e4bf0cc59f2f3f2c5c510ce4c0f4e2791c0dc7aeb0923383985fdc7baccf5

    SHA512

    b5a7a296097ab911de55a1045afbdc9fa301757c31cc4e7b9ebd218293ad128daa399bd6a9c404d6f28d438f1af714a445efa90628b0a4287e3cd746e74fdfa1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8f25a3917cb094702eb7cfe40aad5544

    SHA1

    e27a334cb81f6f72d816e80f78acb9d6f873bd73

    SHA256

    dc8eb1d64b5ce2367e976b5cb08c4a8ee1938e78fb9383a34f824c435d9f0c93

    SHA512

    2862c2f43f7fd0bda1c728ce802e8cc314b632591bc2496e91f02a8c8d610bb4a0ff168afa2e290c876687b7b32496ce0d74f572fbf6f75bfe7d0e124c229b5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    151f2ef4275df19ee40a2de831d5be22

    SHA1

    726c7f5bc8d639215e6a2771700bfadba011e7a6

    SHA256

    1e0dc85cdf1a4962c6dbe6eb04cd0432d4e68c006b5347d170ddbd959f1658a6

    SHA512

    04a2eb99291c1c05a62a2ddacdf572e99b48d0eccb36fdb03051f4dc07ff7e7d30400721d88fd36b72daf76b679542c8530063bbccb52a1e5a0adbfac16a4f3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    acbcca455304dbb3b2aa99771e477827

    SHA1

    66780e220d70916b9e4c460552f43918b3e3445f

    SHA256

    20376e6fc4120f249053a36b68c625d6f41345d836e34122c4bfcd3155044897

    SHA512

    aea8f0f79530230fec4603a2ff13150ee301a16ce3c46c696ce08c989bef53e649a4c10ea1d6d98e2ad735b67fa927aa2d9533315abe7158eaa209f52a5421f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98a1d7a699aeef138c1f419d0b4bd1f0

    SHA1

    8b11e6453d3eda879258bf093c486091b0b89676

    SHA256

    105ff4eec09be67c47d7be11cd3b455159bc7976253562b3272657f6aeff678d

    SHA512

    77cd739d98d87826470efd654a678e7d09d42486765281a56d2a62a087d9055eed7feb40402ea28f0438b458f35ee4362e03f264e98e24b543d6853908b54a79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e79a523ae462ef52b24e3738034a33c

    SHA1

    7e9c0e6f65206910692ced229024511bbec1bd7c

    SHA256

    dbf0a630bcb8d0b947e89b270ec4d13f8680260feaa4e9c55baea96ef841c99d

    SHA512

    e4d7c179a264b9a103da0c07dc799a9944ed0449ddc0465c428207644121672096cf90dedd8aff9187a8effc3aa74459b540382229a8c14be3ade6da25c346fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB

    Filesize

    396B

    MD5

    a33614093279dfad1e8ebd34f1416218

    SHA1

    84c598a52699d58b78e704d43f61687e44c61a95

    SHA256

    fd9986f103f5f94ea3e96dbb2b3d92c41de6f4907b82f75bb448e5516da48a30

    SHA512

    9e020c9790622c16ad594967a49fa5a2b998e143455468f35a9918e7afdf1f75d767e042324fe1c8dd22642ef5e4cb24302e94c64026bb4eaf1a5cfe2cdc8d02

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UQFHO95Z\84628273_176159830277856_972693363922829312_n[1].jpg

    Filesize

    998B

    MD5

    5027405806368d2313bc0f36bd41fb59

    SHA1

    d56be0f70a8fae6ea758c1c8aa33d4cf56f44b66

    SHA256

    8155998d8e66d0cd7640a991577f76f858f46630d5e2ae38d65950370eb0db5e

    SHA512

    4b0a5c50b2a285b983834cd397793d09c0df631b0c8951655e902de52dcffd6c615a06959cf6c8f65a94fdb153df43cc4f84c5fbe55e250a21f17faf89a9738d

  • C:\Users\Admin\AppData\Local\Temp\CabFFE3.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarFFF9.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b