Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/04/2024, 02:35

General

  • Target

    02389f2fee96f7e4506607a472a665c0_JaffaCakes118.html

  • Size

    25KB

  • MD5

    02389f2fee96f7e4506607a472a665c0

  • SHA1

    b36e002b9370832bf716782e99a05f8adfd28fc0

  • SHA256

    002e7d8a927ce6fee5d8011aaefbe15883ec54d92e2f186e824195a05f67cb26

  • SHA512

    2c8712bfd7b62e69b210fbbb60244a10d2426ca0d8bdce057f8d6bb629392827e5248d88b36cccf2371c8a51aef4765276dd7f4028b462a29290bbc23e25270d

  • SSDEEP

    384:6OKgQv8PWeSd8qguY0PCZwH7KXKDKjjqaP7B:6O7qazB

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\02389f2fee96f7e4506607a472a665c0_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2812
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2812 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2204

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    592d5fa814510301f7eaf65ef1ec7913

    SHA1

    e9370351c7b8a2d599e3344c2b3c97c6fd960b14

    SHA256

    4598ccf53a8143f3c5e9cfa9b079e93333e383f7d562aa7db920a1a379ac77b1

    SHA512

    865bbd5407e3bfe1da601e70f4832db18a805aa0a43ddd0e85667f0e514cf31a4e06a5fd62d9e0fb54615b7128cdf90fec8a76e3dfaf6f038112332d0e50cb3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0cd1c47b8f53bb968e766b6d7033c2f5

    SHA1

    7a7f4266f8b230c50db2b1548f8884e7a53ceacf

    SHA256

    cf4dd7f6e7d5cba815ace9af979182fe9506f51e463f7a0e847289276be61ef0

    SHA512

    4e82cfb9b35f6c5d30889263e5b4cfac118679ac807cc026947ba372a59d7ae59e87d13858a2436a2ad5b74877be5201c081ad9ad318c626cef43cf3846b9dfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f74bf5e495cddc675f0a9fec60afd5d4

    SHA1

    7607ecf40d4daa05d01e796920be998deb88b0ae

    SHA256

    595d23f17efdf2de182fd387272648c90b70eee316af932f781aec5eb4a926bb

    SHA512

    4a6b84a193d94f7066999a32c2459c3fe9b9548248bf60b35a4ab4d84f01949013c294a3901d5189ca913771d7d702a3875dda9742bd3d5d23d6e69c2680d024

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1bdecc8a30f936ac8430f07bc6413dd6

    SHA1

    76b667d66ce98bc9e6ec8a815610b4c18b4b544c

    SHA256

    ec002d4aaa7babcd89c2583c127435c1cfc372c94bf0c19780cee7b88d64f294

    SHA512

    8de43696c188a43ba3ceb5502723566c01c934d04148375566e653d8dcc4aebeeb62ced3e6e97fc3003481649baf43d9b04adca79749615c4d47b55c8c1425f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36bd26b1087a08da810f4e0b01f0ed24

    SHA1

    e6309008c05e7222e1b569f2ef73ae980ca09ddf

    SHA256

    35f7ff1ff58aaf4816df38d28e8c5850a9cc06050b8d6460e271c5f7d88b750f

    SHA512

    74963544024f22f6387e57d14afba6d4dd8d1453230853e7945c06b5263140d383c26c08582b824df74f785f46fde797f076794c956abf1792a0a0cec87eafed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c07eebd03db4603cf5c1b583f6cca950

    SHA1

    b68eb567362130f79fb42934128142ef448ad1bd

    SHA256

    1866f8254d096cc1e0dbb298d3e6657a35271fd9a0ee2b6f078c9282025c6623

    SHA512

    f11f38728400d818028fc1ada096de25be8cc16e0ae0ba2583395aa1b30a3558c9746e168e7e6844c4b563aa7afeaf804dd47a96daf5033a2c16fd49f28c90b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef1fda23045cef9cc7a49d23872017d4

    SHA1

    e98dfa70f743d3f6153611deea01a09fda5a32ec

    SHA256

    4fe5b2a0b61c2907543c75db7daacee8ad5e3ef9d158b443a6160170824446db

    SHA512

    c7bb9cd130cdb17ddd9f5ffb735b45f5e26aa22c0718c3ae947f0fb9f07a358d73e4168c376fd64f8978a2dee894178d049168436b9ca7b292a66638260caf47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e91eddfa1ee50aa7a1df3f7e968702b

    SHA1

    f7081f0fa63a1dd13e01ba64c858f016f8dba14d

    SHA256

    d42de7864ed50a50b85f26cdced4e5663ba08f030f71b7a8f4439f9668f9bbbe

    SHA512

    825d64aaf182126e27c9fbba23a1a2b7fa7d9ce27df7ad3a78ebbfa26bb7c7f8b68f8e550beef1ae7dc1a5ed362888fb2dfa3bb8fa28ac191f285779e1b25739

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d7a76230a2ca2aca491c2d99ba5b912

    SHA1

    7831b37aaa45e77393320f615ded5d5ce9df06e8

    SHA256

    889ebe92b10b80413029720d9121437596078b6758e9318961b4df2e88cade79

    SHA512

    1201497d61848301ec38b774a4c47cbfda4b85a445efbe61e687ba14877b0caacc2adf2f19e1c661147ada9665c82779e909bda7872cc274d78443c652d80caf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e959d6a683af7f21d8b0530ce5e26c01

    SHA1

    9829d2283b48de7f102e034660f9ca1cfaacc8e9

    SHA256

    198ebc628b955a812dd2450a7debdced1d2ee4b02472e25796e410ce6a2d5f65

    SHA512

    8558fac7b2cf583e9c72a09b576a2f814da931db0dc57a4c42d585af56fc48e3e28274553e1dc067006dc393067b4278cde24883548441183464c1875f04d9f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e68a233fc91eff845bde7afc10aac36

    SHA1

    f4f1f11553c35299cb78671ee1eb0d6fbf556d4c

    SHA256

    1b835536cd0c71f5c5ae434caf00bd4170ea760759576f1f18b747a50165c7fc

    SHA512

    0691f84e20b6bb7d7be59b87ac57c330c0c1f261d7e0dc55441ef59e98c1232cd1a690b69917404fc71425d5ae2d409beedbadc9dd20b2d01a26828c46206181

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f49ad5f92ffdf1d018effc4054e78d12

    SHA1

    8ee69cfd99a423478372437670fe8ed0e2000ed6

    SHA256

    490adb1dec64194ec49505f625d982342fe196da6fe35a32d76593c2eb356d2e

    SHA512

    8762d29538a81eceb17110cf22a4cab265c45a0bda52b62f3c6a6bbb27bf0bf8989497c902882517e9f25f57d7f17ff0cef608033c6ac69209f0903201ee8b49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    124c2fbfe43bc00f147fe1a4758a2fe8

    SHA1

    00b3f167094e4269727cb64531bc176d20da09e3

    SHA256

    e1c0a6e132255ee9bb6c79ea4659f2e82d3de7996be364e4b92493624a273e7d

    SHA512

    a35ffbd7c5904886b992f5ba8d5b3421337dc70f8cec1c23e47ebc79d2848e73c1438b7d27f796f68862249f916a9deeac0b72584a378be60855f39610a5f069

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e6d6aec5c826e960b5668535577836de

    SHA1

    9df5dfd7a3a1f16eb33e049eeb861254ac0441a0

    SHA256

    5a369c8a1592eae3e6f1c96e62907e45395e978d4cbd3fc2d58fecb578d6c55f

    SHA512

    37e7f6318d6c27e1fedb888d42bf0ed2ad74ef6e923d45ddd48860b570d8207b9edc5501be97b839c3caba935f368438abea571e14c4c18805897d8fafac7dd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf32c164955c01ebecb1aabde6fba98c

    SHA1

    9c09fb1e7db5b47b602528d3830c2f40c92bef4a

    SHA256

    f43465c5b9ac7574757e8252d9f8765323a20e4863ff49051dbd38d1c49a298c

    SHA512

    045e75811b208e4a8bacf9f8bb7f3bb76e57447fa19605b5e92265bbb8d7abb9ee1228779915a56ef2ec754b60c50502ced7ee7fb20b64bdec8f233953df0dc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    999ba569aaad699c2804c96ce46fb647

    SHA1

    caad80fcaebc7236ad1370a33a091d180cd8b658

    SHA256

    fae1a404af34db69d7bfbb6d80940d92b44b3aebfa5253607fb031a03d71b89a

    SHA512

    75a83f2f59827073c854ef8563bb6eb9cf60fb6cefd832fdafcaccb27a426d800348af6b8d193054ae3d8cb62dfc57d4eb1324a124bcfc0c2e4de6453a7883cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cba3f96d71176bea80898d5873bcb9a1

    SHA1

    ce2c2e5ba44a06a2b20639bde19d7453bcef93dc

    SHA256

    41f2ba486a3466d264600ca2629ae5f286772df31d2ae03643ba40f6344d8927

    SHA512

    55b068ffe587851869df0d416d087a0cd255c56a11420c4d343e996e8ddfa5306c216590e1c9621fdbbdb3776fdb1b6ba9cbc5fae6f08256d4ec76de86782802

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eca7c9720947911b969ccc1ec7abe44b

    SHA1

    9669c5e3192ce681704561c577e4284d7b8e584c

    SHA256

    5ebdedb9034bd26332f1b7bfc0d05757154e9399e387151483c8a32053bb95a8

    SHA512

    ca019a748dd33cfe43f107ed298036447c42513fcd0b980c0b2a0dd42ea6f1e3002f3db501aec04249bc3d776db74f436861bc989f7d68c8af8af5064255dc00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb6a0f07c1af19ef27c4525841bc2215

    SHA1

    822a4e1c93c1cf2691067e36e1b2c0a4cb208587

    SHA256

    5967ac7c6e2fe91160eef973ef405b51a06f40432408e0c8447a4687c24e3376

    SHA512

    f60d670437b516a2e921645e7af2c044b8e8dd789f4e64e5191697643029c63afbb439653e4533817e861dfdaf51af3a8243b581199c4951569a18aa9e5f878f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    903302eac12a7c9d1a54f66bc8496ae3

    SHA1

    4c82d30442594be45a266e0848dd922dd77c471f

    SHA256

    41cde660377950fed9dac31fd7c892c2a0177d46a37f37b1d3fc3225388c4296

    SHA512

    161b07e620713d3ecf37713cc22dce88782e7d11630098eadebb870eff28a6e1861fdcf95ba09ee68a0b707e1481a5515fc445c6a6cd2eb06e633fedfafcc5c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc12cd58834c6117f4e3ea699499c92d

    SHA1

    61b72694ace37c06eba4f07f709c077847a7d937

    SHA256

    53d56916986d72f9630dd6e2303b1532a8ed99a7fd92c8928147b8d87cb1be39

    SHA512

    a6d076b9b3ee8436b8941dfdc30afa506e0482a734b089677ca7a2657e4b33fe8494ba628ddb502b814c7df3e1e7445248f85cbfd0c9fcddf943f13784ec6a04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    93b38c6fb2907b1b6fb5d8113e8da4f4

    SHA1

    24174204da63278f3174eefef7e9ad0733b80ecc

    SHA256

    072daaefcd6b3004eabb1365598426544b726e91114b08224bcf57af878233d9

    SHA512

    2f49a54861bc5cf61a652bbac877fdb9c234b301ac81f2214d44736b5ac63c8a801f4ff9185ff6991e0d52c5d3559323a8b7001ac2ad597d89b9dc41fc398009

  • C:\Users\Admin\AppData\Local\Temp\CabF519.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarF53C.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\TarF66A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a