Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/04/2024, 12:01

General

  • Target

    0333fade9df6ce37b2f76ad9bb31d4d2_JaffaCakes118.html

  • Size

    40KB

  • MD5

    0333fade9df6ce37b2f76ad9bb31d4d2

  • SHA1

    b923e07ff7f05a6da3c0a7ce8f0d7851213cab11

  • SHA256

    5bc4bd9e340b6b9970e8556103e87acc0bef29dfad64c3017815b5342460e8cb

  • SHA512

    a2740f738f882b39b25eb0e61989f610665cafcfe3042590dcd393afc4da6280cf2f99c4a2a625109c1491b8e79d7be582f3b0aece19211ee0199da1a2da0dca

  • SSDEEP

    384:AEE6HLhh5bOb41vSVYFRyr1hsRx8Sx+tLpyLJHm0qINzGal0voz6+moxhCYWn/yu:zr75A+Rx8Sx+Z00aqBnqu

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0333fade9df6ce37b2f76ad9bb31d4d2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2856
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2856 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2096

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f51acbf6b00e96ae7c59d2a44eb60408

    SHA1

    ec4ede27893351ae969cf69aac541e0762807c44

    SHA256

    ea9ffb885cfd5025776cb81f69274e2e9a1473eda5f8b1b566c5e5f7897a6fae

    SHA512

    663118add302e8fefd4bdd7db4a94168e296cf8bb9292b4bbbb8cd1e45ae27e932ebf7732835c377be94da3c206ca5c2b435097cede9bb70336ee60ef1f3eb9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e1a814a11c8b7d805d3395a15dcd3a6

    SHA1

    bd65690258947839fa4704e3f3942c4d5308ea1a

    SHA256

    df2cae111cd4c2a165f69353da897ab776b29e4a5da31d261e07724ccfce7757

    SHA512

    c2fa71c8b803dc86fbb468582d43dd943ad39c3f26e553860c34ed7a2f3e711d43713ab64d2e11151e3dc19fa6443da783d43705ae42a5b9365550f8781b7623

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f3cbff02c4bf1d8b2ccb67aa9f4baf8

    SHA1

    61b9ced979bf1ec619003bc75f1976b8d8b3ab0a

    SHA256

    8fd82806dedf732d129aa1739ee30451091d6c07f72e70094b4f43b7533cc627

    SHA512

    2f5b743ea951fb23e3ba056d03a5d37cadce52201b26d805ffbf6bb9d61e17134c7273c867f3ca4b8fbbba7ea2a39b9c1d4cc1873361c4b93be8f2a980ad9a9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2141bc8b549594601a7fcad4cb61f6ce

    SHA1

    9361836e8d3c43d5dace61f0fe96f219f30694e7

    SHA256

    26dda5bd0693dd39c16e105415c82d52dfda7a8e3a633044ef7b092662f970ff

    SHA512

    62ad09c97a78607182c0f6e596a6b76faff2a7d83682eabd52b6bf0810d0fdc7107cee1a8d9792908d891f641c65ce2139e1df0bfa4b129926efdbf0e7a73a27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d99bd1448ea3406e7259642ea885d7c

    SHA1

    360fb3fd26fbfb45f20fa1889e45f1877c1399db

    SHA256

    a472d1ef5485e150a2e8913bfe905987607e5903c56e5d4f0b434e5b544d4622

    SHA512

    a6cd81430f432728a0acd41372c9cb616f97f9633c13138ac4cfb65fc1db833ef7a7c23969d939961d4225839adf7037b9cb2dc1ae3a3fa0e918fb332bdef279

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0aec5895bad766dbbadf72c9004fa629

    SHA1

    55034f1739f1ffb71b4855b9b5cbbf2d51ba037b

    SHA256

    1565fd27ca21330cf3041dad7632cb34e4721a5b3ce3c5d4d59820b8fb4d8db5

    SHA512

    def7e7357da349f861cab0e32508f1de458cd52308eaa5881ce2c89f18857246886cf88a8238ca7270d67f5cc0a281e87ad5c82712ba40e0e73f799cb4bd6a7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a5c0abed098cc7aaf75aba9dfc33e3c

    SHA1

    1f42816593520fc7b96cf0576a1e629fab5c2ab1

    SHA256

    74fe49fa15e4feee7541081d4807d3dce7eaec8559b037495771e0fe8bad8987

    SHA512

    2d5f9957d3cca4df1d5ffa33ab9a1ae967ad35e5f9117dbbd9c915b817128cd7acd2ff4c65c9d2fc970a632b43ab1f551cb9403847e9c1918893834feefd2be0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45d467c182562e599edc4b8bc392b4ff

    SHA1

    e9092ef65759ba178d1372c74203750033b7f1d6

    SHA256

    6c9416fdbcfc1ffd918d4bae4bf1623cac61186e9aa1517ce060139074e6040f

    SHA512

    1b776870c0bdf9ee1d79ebe9a9ae94146ce315f8522a933c847a0a6f367452356d733a0f2b4526e5115b9e052bf41594c6238ba079fda9b7ea72b9a0f644b9c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0adbbac0f660b35f29daf7b8e58366f1

    SHA1

    7b4f051d3e0576c046fae4674d2e24af678fab14

    SHA256

    8b8cc61d5db9352c210e241dd41dec692103e9402df817cad12059a2dbf97e7b

    SHA512

    861c29e1f83ba8855ede12126bf2b99f658c8a6820c2d7d669fc0ad0b821be7bc43430814f006245c85b35685ae4f1ce288eb9d7ab5f5df8bf153e30878f5aa4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63848ededb8502c40a8e33c97cd597df

    SHA1

    0575f191d5c05219f928ccdb8d477c1af1c9e544

    SHA256

    ba63933d018e452135d04c4d746badb55ef55138dc8cda634248ff30e7e13ea7

    SHA512

    063446f34d03ffe966b7adc6827f3612b0fe457a8fb2e826ebba9a75b1dddad2aea478436140060abf8c1e7c85c86c0497bde3a94d5a79cf2859b9f33509ce2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27c9d72784ab1f01f9e3b45ffa62ad65

    SHA1

    6d68a849e2fbc843c2ce6518073b1651d24e0b2b

    SHA256

    044545be5b3f5c34f9554e9f75d662d24218c9c8174cb13eafb3f4d1324dafdb

    SHA512

    a1f7b40488fd05773ab30f90411c62542b56b17442a8b25f12e273788f66ec4bc6b2cbfead09202cfa1d8f2af7b65055af4013d0ff14932c8b774aa3c65a440f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2dd1b172080d8a73f2f98495e747a27c

    SHA1

    3893e710717348e6d6042c513fca7fe1297eacf2

    SHA256

    eba62cd7a0a09f1eac809a22bd7c132520080d724cb6da102d71daf1914a9f6a

    SHA512

    cba67274de107c25402307aa7e3c46743563d4169ff3680ee98cbf7ca973442ffe53fc284e0071cc11877715021f9cb683b53fbe54dc067aaa53a3bb71c86c3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b34d39cda4a7b78a01a67adbc4b8129e

    SHA1

    2890cd39a5dad0e9b6b25c300b9177cfb65ac862

    SHA256

    a70d4d4c2210bb819a3ac8911f92cd3b20c346e059624b4c7e9276b568ffc297

    SHA512

    de065d2b841a8568f160d597af399fba9f99b122dd89e644ebab1e0c43cb4875e3c4c75554be9f0fd6b5398d616881776193da3d6ea120b6c50fe1550b402fbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f7220be2f7fcedd94374b439149a3cf

    SHA1

    5a15d9d79b84e56e8c051cb46f0fe52731af61e7

    SHA256

    a5534075cc5850de014329ebfc1dc9a01ee22510ed1e535507a2a270d05c1c61

    SHA512

    1276c6a04533d2131571ff38334e99017d17022c3b68e02f0ad7b7d9598123f237c281abed86c8e85017b32f2fbc58ceac98cf6a49c231caeca20247f9f482e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    528854c60dc02239d41406aad54c5566

    SHA1

    0bfcd6c8f94219ee0b00939c5075ff02e61ef8a8

    SHA256

    48642372f0edc38cf7e1f1d9036c39be4e9e65e4687807a3cf062175bd2e77f4

    SHA512

    e8f64d3cefe9021f954054449c39b91e7053eedf72c081a3c45ac17d4349ec7a8db41cc18ab888bfca7949c0655b56d190d50e66b32504095fa0b94cd6ac7c7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af1b2e14529c0df0de46d3a0322dc4ef

    SHA1

    c2373d0492b62c8647b95e6c9a448c96599acada

    SHA256

    fbc8d95bdae9afc6f0d046b1e4d070d12b82041b678b112806aed8752d2d736c

    SHA512

    31d27f990c5ca9d0535aad917150b224c48a206d16610577d2dfbf2c965ceea373aba40e0e7668866072c06e8e71d6419ae114ad17a11066528fb4f0ce2ba32b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79e021ae5c34c85bdf425afaaf63a81a

    SHA1

    e94874164d979b9ff61f343b806bd67957e8641b

    SHA256

    65c6cb9908d1b8c4ff59fc5cd88729990b92bb082b331fbd8a47b70e376184cd

    SHA512

    14bc38a94282d23521f465ba971def810ef94f7c4b7045ea21f28cf25d1c00471016cac0be0f309028219e27772bccc92398a539d2e29d7d93356182b800250e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e5264e23f3cf84865a3308082603c19

    SHA1

    f4dae8af12fe0a4bc4140c1dbe3f5267bdb02bfe

    SHA256

    5289e622be3f1100f2efef5af805734cd34691d86aa3f25ff9bf2ac4cff01afe

    SHA512

    f8dac5216093d31c48d0042a5bc2b5b258b3831db12d30f423119ff13036ec4d979e943d6b1fa268ea873b1fcae369b69ef77e7a214d90faf6a2222581e9292f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    394df940804eca51e378d6e24bd2a0bb

    SHA1

    4b972405070d617c06be7915e33491acbc56478b

    SHA256

    5f61fed86f5fc7c40ab9006683ca370e616d0e9672f30c2958f915644dc8aa14

    SHA512

    ed7b86749ecd46d5227a86b7e83185c1f7223aa4e55cb7d9e39c13f2655656fed7a29715a5f5e163101b7f4ff948fc04c8a48290825a2aae2a5b3db2d84344ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb06d46763f150ff6e3966f78f4b0510

    SHA1

    e4e95edb8bce824232d6180bd244f4a0223d046c

    SHA256

    44033cd9ea17ae5886082fd0b6e0f4d813c304475f55a970b386f7dacaa3dd6a

    SHA512

    0ba2ef26317af992e43acb482e373783e60be4a872dd1286dca36df84fda8a6572d3d0ff33443c23e6c44bb460b6e36b3c57188034f64900bc9b5c3ac17ae472

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b1ee3ed6a671c9959d075edb712fdd67

    SHA1

    36ce042f05222dceebe9b07def7366439d36851d

    SHA256

    222c6e8c88c1d2c5e80489a0ad503b8b3244f44f9cfe5451f2a1b2d70147ee2a

    SHA512

    748be5eda513adc8b21d0d4bf11c7e9f3a6d831ed25e1223b7b46fbbe0fcaa74f7997e0b73b7a15c4c395d593a942c832a920556f286f2012719d943a8c54ed3

  • C:\Users\Admin\AppData\Local\Temp\Cab2AEA.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab2BA7.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2BBC.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a