Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    23/07/2024, 03:55

General

  • Target

    66096cb4e9fbbe90b8834f09b4c6e56a_JaffaCakes118.html

  • Size

    62KB

  • MD5

    66096cb4e9fbbe90b8834f09b4c6e56a

  • SHA1

    cdcc4b021729c1e0ce0a43476e28c646605ff4dd

  • SHA256

    35a6a55b154b82e00f810c1a88ac7ace5339449440bdb8b0003c894d9555315c

  • SHA512

    c40b734608ca88ec6ece0cfc24921dfc9487503ade6b2279f55604343826a5eda1c63f657b067bd8771140316d54d2b2eecd50cf4c16847fa68a9cbb5a19f2c0

  • SSDEEP

    1536:69+0et+7sI/+CTsVRXIm3FSwVoZrJ0efXwqWJq5ZCGpMbhLuJ:0lwRXIm3y0mXwqZZybhLm

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\66096cb4e9fbbe90b8834f09b4c6e56a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2404
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2404 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2256

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    8d1040b12a663ca4ec7277cfc1ce44f0

    SHA1

    b27fd6bbde79ebdaee158211a71493e21838756b

    SHA256

    3086094d4198a5bbd12938b0d2d5f696c4dfc77e1eae820added346a59aa8727

    SHA512

    610c72970856ef7a316152253f7025ac11635078f1aea7b84641715813792374d2447b1002f1967d62b24073ee291b3e4f3da777b71216a30488a5d7b6103ac1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    bcf142f2c650032287cb31b42ba912ff

    SHA1

    57d4c2590bb885217e454df1dabb111814496628

    SHA256

    d713226db21205059571b5c1ac70ac607020281ed6fdfee781a17bb956d9e557

    SHA512

    32e5034ca688ab356e1ac76466d19daca8267e7fe0f791f34ce19141ff0401be547b853801805ee25add29456b79b6130897e68075508f1007f961ca4fc5dd59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6DA548C7E5915679F87E910D6581DEF1_4ED7285A0D9F2F14F63E84BD08C45F97

    Filesize

    472B

    MD5

    07082e14186550816fb817c5da49d1a7

    SHA1

    e7ff97152a5c78d31f9aa936c81e75047d1918c7

    SHA256

    d67a4c647d9014b5aa65006e7380aff55e9cf64ee10c13ab309a7dbc3fbf9b61

    SHA512

    c22c3ca42328b7123d637903d63e285676232cb3353414869331fa9a5ff9402d42cf421fb8f2b52c3721d8cd5e04ec8655eb39aa8f6c697c39bec8f782b09bb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C02877841121CC45139CB51404116B25_DE59F8C40B88A0DF57DC57DBBEDD7057

    Filesize

    471B

    MD5

    31e7f63877067dc0786e264d8af9f9f1

    SHA1

    c0b519a6b66987ef8844b6b66dac963ef2ab78c0

    SHA256

    80c113d98026d9f7463949745a61a9fcf68e0ff20fc86625141265be1aeb28f8

    SHA512

    de7a15cb72ab7ad1e89223fd25d9400d83b31edc976282753579a793c1d50647a7c3eb8a6c31ce4415f25a4ffb798236242e803a526772f83be4eedbc03fcd54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    5f6cba7ed1cdd40c28a7f9407a2535de

    SHA1

    f841d0868cd0c9347eb44d1e91b8e7843c67b4ce

    SHA256

    c466923d4bad469b597488d25d3283ca58e50f19b0d1f8f2674d80e846943cc1

    SHA512

    169bc1b53a10d8d99a2192c65266489a5208ff404336c9aee4dd78f1dee6f666250612ce7ed2a64c0275920d568a0f82a810b7d46dee3447b7d21240b23b2a0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    c7001a4da26ea49b3f7505a60cd42722

    SHA1

    fa5830dc2bd9a62924cd67a5b34698de8050f42c

    SHA256

    3660832f15d6fa77340bee8965710588422ab7b337850d3261dea15775e93e7c

    SHA512

    722b1048580450240290646c44e8b5e1f1fd97e221a6fd6ae78675604f266795bc5d52c0ac8fbf5503059199e9368b26d7b101685e5a297918712bea52a100ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    1823f78e79c208e6c113fb4e8c64fca8

    SHA1

    74ad66331d82f21af682968504c04796f91cec28

    SHA256

    135d9f6821d0187dfbd0f6561989a6b83bb5cf62129b2cbf3af39e3316464d36

    SHA512

    2807451f13cb39d76731ab96bb150dfe2d82496c27adc8c71f40fbc26b3ad0ef4c7e378ba2ada83204f5465db451b40603c39e071ec8c0cf91742d44c95e9314

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6DA548C7E5915679F87E910D6581DEF1_4ED7285A0D9F2F14F63E84BD08C45F97

    Filesize

    402B

    MD5

    2fc78eaf0add627b0eaf820f2cd8c1b0

    SHA1

    f656636871bd61b6e50035fd29b372047b79eb35

    SHA256

    a2e0550da92f15fd275914bd11f293b034633cb6a8a541e9e8481d1881c8a46a

    SHA512

    a4e2ab25b03bec3f21ee78ff3404e15c010e0c5db83d44b2f5b0e217ec6bba1206c9fe57b96f6dc8dadc34aac62ef3ac41252ba961ba481d110bb707f3640e57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7eaccac80ca8f0a441cdd7e81c3a888

    SHA1

    3235375904ff6dec88ebfd869f4f1c6eb46dcfac

    SHA256

    eb650ae01ae605717f74edab15082fbae75dcc88e771d88b9559b9fc50d9d1e7

    SHA512

    5f9d27292033027f27b975a1d5fbb8a3986a0d486bb392f5550667528f1df185fc46c2b855435e753a0db7f2268fa112809df5fb5212992f5ad38807b5ccc192

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab1e7a7e758ece3df10b12b3e9fcee9a

    SHA1

    396a7a048b0c428a79f3b3795967c77a0d9087b7

    SHA256

    1331d22816f37cd591a21a04c5c5f0e217c76ef3cb1436ac01528e812b57e4e4

    SHA512

    36688a1a812ec4772d006ba204906b80258aa5f7bf013ef171e541a192874e656e640496499b83e889ea65a0c23c618dc4ff9b62bc85a100df422a65ed303f08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f5521a7626d2293f1c5827861a5969b0

    SHA1

    2c96854bfe00eb1d507dbc3a58c3a9a5b1b15600

    SHA256

    660b40261588b6a841fa4d4cd963bd27f93402abdcf2bea4e0a309d7bfb2908a

    SHA512

    aee7633dc86ddcf8276de6cf3a442384c24794d52bc0880259db78c0f39b025fc1b54dba2905b0c60a3aa2aeeb712cbc9b9d9bf0892e36300840efc38fb65656

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    430447a124628755e5da3d992b2db8f7

    SHA1

    178a537f8a9536a77c35099e88d953177d370f4c

    SHA256

    b9959c885e88899f5710cfb19b3483db90a9d582634eadb2dce7f99928a69730

    SHA512

    ca2149cc2493eb30559b6f5d26c499cf59ab653bf8ebf9c6f9b9981d3831eff27f25bbd7f837309faabd940ba9d970c55351ea662a94cffd54dce07eccdce198

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d813cb795f2a47c3e126235beb7da02d

    SHA1

    1e9ff0f4102786911cc94acf3b86895001773cda

    SHA256

    a252b9a8c0aa2bec8bfbdcadc89f993d04c494e394d4b519a52183983917ae20

    SHA512

    1959411a7a5e05218b77f8898845cac0f67aee1d4aee2b60ecb1d7c10a148d604a880c1100faebab4a4023a04d45c57f96c0cdd63e29fec67e2725ec153c6951

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7218f1b801afccff9af014ba3e4cb23f

    SHA1

    f3205089b562084eb016fbbbe0982bf2c012be2d

    SHA256

    faa6f2ca3013919aff02d76ae7688d81ecf1fa095ad8f1220b5ec2a1727cb416

    SHA512

    d8115fd8f3ad923179071565849153d468cb2f86fce99f194cc73547a78b09f9caeaa46cbf04e5e1929ad0fc2fbe8d7ee95de62d4c6a409a464f595e7a7882c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a52b7dabd9d041cd274766bf673e26b0

    SHA1

    af992028fd6db16207959f50d68db59009331493

    SHA256

    372f9e59e9be7e9a792d84c749fb845a6bc0f33e98c6ad68e78ad92b9496dd36

    SHA512

    52e8c4e020c9e32eb2c32164f0b30d01d3d09258119215221178ca532fa6e9062716262eff6670bc5014576c2560cef4df097a53b67ff53000dc8f69e3e2a753

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d7b0223dede32244898660e53a9767fa

    SHA1

    c1d14ead71e4ea1ffb4f107b21892fe551fe4239

    SHA256

    e019aee21dc9db3370c905682db5c57abf5aa02ac8b595ab9c6a43311424afff

    SHA512

    8937d7f2540b5830f04b8ea9d78f5aacc59db37e835ea3df5e288f24afbd04d2840b251606885eec99af7989416908a9a353729ea98a7d82d0eec0ba18054094

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    69d55f9482cd5be9aa8d4d3f6d80f120

    SHA1

    0d21085ef221c29401c25fa131aeb3b53b005adf

    SHA256

    6eaccf53f7814ccfdb282eed00771e0ad30c304cbe46c717fc850b69386b54e4

    SHA512

    9ab432a66fedc0dc8aee821798dd8e784743c8e5bc34eb72594981b1aed103f34c8d05e60bad2a340f9e7457a98397f59cd3b8d895e794dd429de688c4e9e5b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2db22d5fb89766ec44cd46879977f808

    SHA1

    022209e0b10711b07e51fe9132ff342d6872b0b3

    SHA256

    1dc38cc4d7924b4edeaee18cb260051fb39d7f0ce1c65a92366fe758006216eb

    SHA512

    8bae7bd6c9d376fed8191055f2106a93a24f9e697b4106aefdb3fe8288fbb2817a4381ed85f7dc8615a67c8a58b52160c04bf83b5f2c18c45c9040d53a39a1c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    daa4381173e5d19260802c5e1fd691e0

    SHA1

    8e21e7fda93331ebdc9c87ceae6a5954612cacc6

    SHA256

    b63163de6a3eb45ded1b6ea434a7fed355f6621d06553802ea8c5cf3cd3e17c1

    SHA512

    713fcb153425b9af8842ad56e43fbe01639ce2c9037a3843bd76a6875a00daeabcb0cc9b741c90c8ef9411dbd038a29e6b24b0f97418144e7e5d0b64d902eb34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    826e0fcf386afe66228a85bcc45451d1

    SHA1

    44ee83929afb124b27e75d656a7e96f2ce995e0e

    SHA256

    811374bcf64b0f221d059c340bd1700fba219511d050d9c31ec6e44361aeec31

    SHA512

    5e935745bd644b468d7c994553ef5cde41c69796bc6fc03f91b9db02c05ca7bd146ab4085b8f912f6fe55292455a79559d0dedbc999d1c7940218382d8ee9e4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43b3105a84252e108133b25a85fe14f8

    SHA1

    b1f5753c20c25a49084385dde0f27c2d8f8cb114

    SHA256

    2449597d8d9caecb2271a8ce63cb2fe690d2705c40ce4c1143cacc507c8e2b1c

    SHA512

    0a985d0181d04904d3ed0f69a41ff1f2931e9e960a909a77f5a17538901d5ed0dc480343eb8abec5552c3cabacf2883a0ad4e947b5fa58b3a7ee998202b3c3db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    066bfb78c9c6c43beb12f6f7d2179eb1

    SHA1

    3c2b2575d9dcb5a380b57c0a7a98c32d980fe70e

    SHA256

    8a33f61bc4908bb993e6a061ca9c463c25a20368cfe171d9f7ad86056a254a8c

    SHA512

    16a4b84e0cf4bab442d4d2a6552162db4713f813b5f94cc6de7bb75d553e8f5409fe4b90e07a22016917ba34704dbe3ff1fc27d94554ec8e6bf6208829fb296f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e02444ca35730cb7eaec3bcc90fe072a

    SHA1

    43a4d5f9077300f708327e48f499f42a332328ab

    SHA256

    baeade8abd58c746dd750bd144c73c4317ea1947b5c47715e79c50c3d59e3865

    SHA512

    9c4182ac6453cd69dd3087fe17ba5b9d4ab275df8dff4abf90faec3ce80a322fd27f689cd1f36faa89c986c585c5c8b1451811340bf54500b61251cb80c6fe69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C02877841121CC45139CB51404116B25_DE59F8C40B88A0DF57DC57DBBEDD7057

    Filesize

    402B

    MD5

    34fb752f5f53fe00ce0516f749cb76ff

    SHA1

    1e6d77ddce58671db4e4689f34d114b92ad518cf

    SHA256

    9cee156b4fd27e95f93c2c25b1a176fbe6de02450aa50993cfb2a00a220db34f

    SHA512

    05db5e1752eb7b3b4a72800e40d324940b88940d92203979a5f96e329dc083a0b8922fbfc5e23a5b2bca8f53e6660d1b3eb3471cba2e6394a13b1a7ca61a781f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\39GEHZPO\cb=gapi[3].js

    Filesize

    135KB

    MD5

    cb98a2420cd89f7b7b25807f75543061

    SHA1

    b9bc2a7430debbe52bce03aa3c7916bedfd12e44

    SHA256

    bea369fc5bdd5b9b473441583c46b9939232bf1f98c1cedf6bc2241c4f5068d4

    SHA512

    49ccede4596d1e5640a9c8e8be333f9c18812d58f02b2b15adb54172df1387439e9dc5afc4ccd9d8f0f75f092318bed68d3cd577338e88ef4f9373de8a07c44e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\39GEHZPO\platform_gapi.iframes.style.common[1].js

    Filesize

    55KB

    MD5

    881eb3704191d887333d08190e37b9c3

    SHA1

    fb5f7a2259c6e2d0a986f1df7da0017f6f4bc198

    SHA256

    03759f99c9adbff1efc85f512a97546207efcf91894a08b131bf59c2e2b95206

    SHA512

    860ce2d7e2ee0a1eea2701af9d0e01659508e26bcbd2b4456bc926fbada737a067fb5281085c00d136f6294964cc2a6764ce2c12cf3fd32a0f130c117a6e3191

  • C:\Users\Admin\AppData\Local\Temp\CabF5E.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar101C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b