Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/04/2024, 09:30

General

  • Target

    eac296ad9c16ee321f15ecd8aeac8311_JaffaCakes118.html

  • Size

    26KB

  • MD5

    eac296ad9c16ee321f15ecd8aeac8311

  • SHA1

    630378b7330cbd8104814b51cd667d520159b4c6

  • SHA256

    435ba88465be4f1c4553855991c22fac39120048e69d507b43b336b31f24eedb

  • SHA512

    39e497a0bdcf77226b06ef8e7fa41473f80de9c399b0e3d61b7efbb1a0b95e33b11d9b2f2f47c52562ef85f484116f6a15469a5aedcfa22676f987e313a980f5

  • SSDEEP

    768:WIRIOITIwIgIiKZgNDfIwIGI5IVJ7SqIRIOITIwIgIiKZgNDfIwIGI5IVJ7SZOh2:WIRIOITIwIgIiKZgNDfIwIGI5IVJ7SqE

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\eac296ad9c16ee321f15ecd8aeac8311_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1736
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1736 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2976

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    874f6259e524782544692f2fa30040a0

    SHA1

    c6349c205d2461fee4b648c0d160aec0a5cabdc6

    SHA256

    49f566d1948d1108c90b4036c23ab2bc8d9a2ce3c53b770744be4e8be91062e4

    SHA512

    ea9130f4ae39d871e20468d3a98f73bff9dabbfd04443e35eda7fa6095d4ccf0f5588b7851639447d51ad3c77d618471c7355ba87132422979c08a10cd519704

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c567c10b09c2897ffe58ab5119cc2b9

    SHA1

    a78285914191e61eb10e363d0ec48edfa4d23429

    SHA256

    c5cca154b9c4e57b4b4b0f8b487c8479600b99143ab8653f34841a0c8cee8563

    SHA512

    49dd8a8ce776227ded7c260d66e78047fd6f5a99d0e154774382d436faa297e095abf4bd84ffbfacf4036369e5cd6ea87e90dad20f45445c672f6041768f0c4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c457427db83677b650a4d2b5bc92744f

    SHA1

    61ded7d7f0a98833688a0411c7c5e39eaf3a4286

    SHA256

    8ff54045d609de3f40b9af4d048fc620e0545ea5322275c1e1b6f2919e24a0d0

    SHA512

    0a32eac8cd308207aa1b8abc6d77e35ec61e55bd7d5b594a26ba4eb4121740ab517a21acb16eabff647deebed94343b00f589d3cb6eb4572c537f8bf0d342d8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ebd512ae81ebb1d0a5faef89152b172c

    SHA1

    a4865a34a68a5975e5c26b21ee1f2e3ed73103b8

    SHA256

    895754802cae142926727c5261e3e7ec45e232e1401e9cc977ab162ff53c386c

    SHA512

    4d2c32dc971dd0dfe0bdef7c52de2258612203cee48c62c37f6293eff6e89cb4f7a0a740840cfd290c84c4913438eefe63545b0cf508b00e2f12ed16630c58d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17cec3eea65e98de97465adef16db91c

    SHA1

    4b7d0c2df495bb1a1c528925bbfda894e8fce01b

    SHA256

    5370a930580d975eb28720e489a6d42f36f59456595f5ccf29b23bdd3d6e4b61

    SHA512

    84ae2eabf63c6008e26576b089a37b403d05a4d366f88598026bbe0f37f0a61a4e35e174b9a990ced94d695b7fb0f089bf1e08e35620f1898b4705ff4bf41d9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    985b21b6cbeb7e8d10feafb9c5c1e010

    SHA1

    eeb7210f4ce2301788e59632fa5f0c91366b20dd

    SHA256

    476b6dce858abb5ca5b22b9f0aa732108c9be207f02d082bada38e7f5c6c0732

    SHA512

    23e6e1749205877fe99623def8b199a42b5eb7927c6c9daf98a857c60845c01f6dcbbd32a2ef60b366e13f7da615a66c32d377ae0f818de1243354f4d0683103

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a91c5fec26da69e29d7efe050c5d2b62

    SHA1

    b227a07fdf3bae65c2a215c781445d52fcc6799c

    SHA256

    94a7fb3667d543171b1d95e87ea3d238ba45d74fc9e2e16752a1b210fc958cc7

    SHA512

    c46a441c9a7896eaff9d3c0065b03c5fefadf086b4e5ae6a949b6b2fbcfa5f38b211b2d9b6c8d668cf55df5a2fbf1d9e902154e4576757f9662e6b36fa3f328c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45f3e91e2bba4bf2257c82eba4ddb60d

    SHA1

    c83677e14423b94b90feb0ed6226024a71571c74

    SHA256

    18537aa51004c8a8d36457205124329766d9af37d78bcf74a46a410663d83c9e

    SHA512

    6675afdb8f4c7b3b7235079fdf55c1a8fdcd240d0f1dc3609089e045c125db99117862f968242f337f0f08a69a43069c79a5ddd600e62f16f2305f3cd0e4f60c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    489f94d323ca9f8a9988280b3f8ad8f8

    SHA1

    b1e15d0e5adce88b7b0338dc7aadf2c9ce1b561a

    SHA256

    86db5823e57589b4f51cae5666c64f56ac6dba4feb181c10098a0f1ec1e2373a

    SHA512

    471356f0899575efaff94c314a5c63b0839c500762492e2b5a91d1d5b5488df9be60935dcd79bf2333f7766aca38d594ab5edbbbf13b26b8fb51fd4a479c72e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a95667e93250bd8e0fec7b8e164862a1

    SHA1

    d03444c9c2937e6b8def4cf68d78575a92313aba

    SHA256

    4df47d6e27bbb4e36bea7cc0b771bd44a6637536984a3488fbe02e917d8a7534

    SHA512

    920fe390a019b621b8931e7caafc13cbf3a753e3b852437a8e9820bc029908de4080ef7bd7e9fe6705ce6f0e2a4e00d7f00465afce663dcbfb473511efd920c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2634a1187961ccaa71f063703eba35e0

    SHA1

    11c1ba11670b518bf5911c8439f1b18d9dba9d3c

    SHA256

    312fd59de97ff45d9697b0aa857f7dd2f4393acc62a9450c07122bbd038a5f9c

    SHA512

    64f83b0e56bc9ebb4068ad3d215d84ab8ccebef17e5ea00a2a34fd56521cbd4641992da0b5d2ec2c2cbef5c4f61cf5a35c90b2f04f17be385e0ffcefdb517391

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5b950cb9d253d6b64f446e11db0d5e5

    SHA1

    8eee40a60ab1567b4ea96a639d10f42d4900b5cf

    SHA256

    5d96ec80747ca12abfb7827f0c44f3aa4fd07bc822314cb9c5eaf3914a6e198b

    SHA512

    7267921f61422f17cd38ca2480751a6abd2fc4629ab61d60e9ad0bcc5ef6e7234df43d8771675b44f8be47be2f23301af7ca3538005ed94112c5c34ac1fefa7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e7f5dfd5fd5ef35331323790aea2bbc5

    SHA1

    6cefb3c57bd8eaadeed60eb0a3db80d8bfc3a812

    SHA256

    28d57120091505ef1f19cf77742e6e0ad92685d9c88cd41c70a8e93212f9a92e

    SHA512

    3ed0887e806bc2ca3443d7c2c2ff380aefd93a41539739eae121318b252514eb9e57fb8a37308f84274764254160db971afe0000b8d57d81aa4c9c85979cfcf7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c7bf350b2142a778c2d56bf058c57a6

    SHA1

    c43cf0bae3e71965a46c0ab48390344998f826ec

    SHA256

    8c0cd786188c66083fe53a915c31ed660f41be157d3c003c263e3d3f6d201bef

    SHA512

    c4c8e6ff8487a40630854340f66df78f1dd07cf81c7e57404c38e34116d8c56c91007b7b4c1c5dd70910fc81f6de5f3e4a05ae0e9c5a2cbd0402e32c0ff0f33e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7335c9837ea8fabe52bafd520617d30

    SHA1

    243fd2f24aac9e376d5ba23f114b0ffb12fa93e6

    SHA256

    326f935a2abba06b3eec4d8d92fae3b394530c54aa32cbce4685c174d99da966

    SHA512

    8427f436498ca02f2c55d29913cf747df9f59da7ba7bbf75d46abe94fde7bfe879efe61feb690b2ae2e5d38d93ff44315e727794956fe98da9e9a4a0d37cbc64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e839046e7035c70618b18d1a4b8714eb

    SHA1

    31f52588b0aec15880e6405ba440cabf40b74f7a

    SHA256

    f8a352be68070c822f717d9ab4962206c86a4fa2a2018ed110e155f777898a34

    SHA512

    c296f60ca20a20f953ba1fa916b4dceda8a022016c41f1b99a172959a3472ad922f29f34b0b6caeb30c8d0d1324d18a75ac28165c9a0bce75a65d9edebcbe3a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43af051e8460f62ab05bca0f4ef87a49

    SHA1

    790ed0c803bff0bdb24cade209915d4db7e205c6

    SHA256

    81a35fc6397d4653550bd59cca16d2900d940a39292bdb440a1101ac46d797d2

    SHA512

    4e9eea1688ec0722851a32f659e51a8d5c9c7ec688dd773394e990f7c472811df48f76dd1a6376207ae1327da9ffeaaeb72ffb1391d8a1fb97c8f6f64c66054b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2844601a18e502c753f82125c6188222

    SHA1

    dd19e69b21cd28f6ba18f06bbf39be8ec6c204e0

    SHA256

    3bdd8158f1cdd953ca5494bd1ce8498d14f101701e82e95539bbccc2a60d16b4

    SHA512

    ecccf27391adbdd106932ca3852a6aaed8f6e774dffc6321cd6da68116d9b2f9754b83e0c95e7815f918be71ee4b58f894ab34385e60cb16b16473c48d4a80b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    829e722e1e63b5444a993c2ec7e31f03

    SHA1

    d2bfb32603dbef2b2c42871b48dc2a3216f09c6a

    SHA256

    ea18067b2bf53311dadd9e5ff86811543355102abe4243b4a2ba8b6277d8f8a6

    SHA512

    3cc66c24ad6e951e2d1bfe37a7631d4ceed042cbd1bff07849a52a2670fa2a8051a770e62b519158aacb74424c785062fe1905cf784052300d2318782f487745

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d9c405c3f6d1b45ab69266a86327bee

    SHA1

    616356141748987d556cb04ad98850a791d95f0a

    SHA256

    a4188497b0ac014696e4e976aa46eec076b0d7624eccde731c3283c7e1b31c73

    SHA512

    202070d2753f712324704efd572e6077e1d4234ca25b5015f34f247b191b598904ff25c600196b48298a04c90c939d040bccc47a4092e64ba96e5f3c25b0f90c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    511521c2b11434e6d394f7bfed3332f4

    SHA1

    f2264f81abe693f73a518d5857c563a9ce9dad80

    SHA256

    d0b32e40a2f82431522f7c6fb21bb160dd46568f0919aff8f792fb357bd52f6c

    SHA512

    be032c98809807f21f084acbb231f4a24aac552b9d6627239a665726d41de1b7f7a9a3d8588ce9f5ab2965885491ee4a81c38be9cb49b215badcc031e3f990b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    1d708843c2d5ddf6d61c94d320fc0996

    SHA1

    27f0f077eceb7209cfa9ca9fdf32f760abcf1103

    SHA256

    cd5ef8d9114cfd857ec3c1ff6fa7eb0cdeff87500e1d9793eeb190d6256f5073

    SHA512

    8854e2946b8af477c86fbd82b620f8b93c83b58330c47fb1c05f8b6be92a15ae1f5854aee5356b8c669a74801a8e3e32f068794ea01af317272965a65a92fe4c

  • C:\Users\Admin\AppData\Local\Temp\Cab2EDF.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab2FAD.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2EE0.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar2FC2.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a