Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/04/2024, 00:56

General

  • Target

    08a7e2c4a583c1228a45bf56d797b5a7_JaffaCakes118.html

  • Size

    140KB

  • MD5

    08a7e2c4a583c1228a45bf56d797b5a7

  • SHA1

    908d45cc65a7c37c14b881e1ebad5f832449fd9c

  • SHA256

    99dcce2c0cd02cba9e7e640d35fae319e8f5c319a008c0d80efb1976443524e2

  • SHA512

    0fabbe66ef285002f475ee28bd439052fddecf98944d373e6a237e74fc1b1fb499da22617598e33bc7b3d0d5380b1a2d409b1027f75ee9188aa381c40de72482

  • SSDEEP

    1536:SmztHv7irSIRYlpyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJA:Smz0SIR8yfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 43 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\08a7e2c4a583c1228a45bf56d797b5a7_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3040
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3040 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1196

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    3908af4bf15618a7afc0b17fe5eaee33

    SHA1

    3e1b8af56bca585fddb55e9101d9bc18f8b6af57

    SHA256

    3eb190bba2c979b56c52f8fb5cd5fc54f74066ffa4f6f34180a4dad7ef8e2110

    SHA512

    032d1641415281ae5c6ccd6b09c530aee73ddf1e41893268cd9b58f261c2b31b0882905eab3fad6c0d17038523393aad19fb279a51801432b0d402ac72fc96d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c2e913fed9922569f20e62638376030d

    SHA1

    03c1ecd631433642f19a738163168d867ca2e55b

    SHA256

    1a8d589167036e40b94ef0b27186b7ffc6e08270025d266fccd9269cf991b291

    SHA512

    b6a7b803b01613151d19996fb1325069a50f6a867ca439499321813bfc5d980a798cb01d1522fc54f8bcfd432357e5e8d2efd7a4b8badc1616d4fd58398273c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1e2d7e1ba5b9125df1d44788c93fa44

    SHA1

    c4b93b83ffe4de38fd9b083aed4700ebfdc267a1

    SHA256

    8f036683e198566402fabdbf85499c2074f517ff60eb6db80a30ef592aa10f55

    SHA512

    2ab0600feb548586c5df2558c7192b97cfc9aa5448a29f7f222e4a3b8fc1504b43fdf4537bca2c8c95b74c5a8373f012d126e1982ed9c242b50e3b787dc740de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6247eb6489e095f2c1c92083ea2f4edc

    SHA1

    9596caa6b2a3eaa1e123277165d1c1a8713968e4

    SHA256

    e9409834c9fc2819c329a0795ddee9589538d33ff51dc45d715ee3357cd68d11

    SHA512

    f1ae708c86fdf8ca12bf436990c08a3e648295d5802e6435b5788cfe44982fea20a0a6ba671b0caa1151c30a04daaf1f1a15c92c0de5426977e06752a48822e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7c06273852d2ac5cde82b1247c92e6c

    SHA1

    36c523214fe44709de03805105537f9ecc0c7422

    SHA256

    b7f287da7a1e40a55859454354f401a094f9aaf97e88a5841f7f457bd5eff44a

    SHA512

    633f7120195cb565f80c554f9498e732c75d71774b34214beee688c28650be800b5715ac7271081c49c4825903140b97ea79d62d8e2191fe864a7ad3400c635c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ebb1e1f319e3b86d9277f283654cc86f

    SHA1

    43b1ecd5bbdc9659043de3829db0097a58395d32

    SHA256

    4e69b4f320e2f73439d2ca6fff0a681105996a495613227cb7f6656d8d92f652

    SHA512

    22a86568c7e6759c12297005f4ece7069c19ced93d19715dec265b8ba73996c2121768283c956aead96e2fb5a7e937b0906c1bf86affc8bafc90baa6d0ba8ff5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d023c176b1e589f99c567b058b3b8fcf

    SHA1

    19865172d7ee73e13c2fab5e9765486e060ee7c6

    SHA256

    f7f141e78db01ae1d690a997bb175e137c1956cd1197fa561e2d3cec3bf92603

    SHA512

    0a19ba1b53dbe6d32e3953cab59450bc0588470c0baebdefe5d28b8b5b02ce8ec176919741d982216868174251093f21397c6aea7d8c90e8d2c8aabbcaead003

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75f272d5bd65fce77fbeaba94e8f536f

    SHA1

    a3be3e581dae444d857feb372bcc79a079580f26

    SHA256

    ee0f19894c05e8666bfd97e38aab58d25032e43c50d4f67b15c8475238834b45

    SHA512

    8c1964d7580266d23c79ac7f53ae64242b422d997ef1c781463d62c6305e25fa0ea08aa9e415b1c5770dd263b86dbb870ba1ad017743e4c93a61f1304f445ca1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d7a5cbb7ddd646eb4bc8cf7f74775ed9

    SHA1

    1054ccc179ca4226a4a85dc44cf1ceefd0c14ea6

    SHA256

    97d7257b5c2203ed47937754edf53d98e5e9656cb6e93702ac3aae6dea58755a

    SHA512

    b35b6979095f2db778e3b311137addaa3f8c8118bef3795e1d5652ad87f1f61364193486e2ac118084da173151124dc8c7bbfe6d9d229f3d8d5bc270a9d143ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2a69bdbd2d7c742446b3adf023a1189

    SHA1

    2ffa9026efa606707eeb69e000a321e61c19973a

    SHA256

    5fe714d11a4df991aab4745c2658daf890c124265523c1213c067fcd63df1b6e

    SHA512

    9bb40f3fc2d5f1720c3944dc4ffe7f785aa3a5e47cb5e21d6887b8fcf2725cf3d9ffbc8c3182d17b9bf87e1990cc808cd6ebc0ae867ba00bb70be55e15ac88b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    061482f5bd1cc3a7c16cd24103e355fc

    SHA1

    9f983f460eaaf2f69c0a6053766987f1725220ac

    SHA256

    2828f0f94d47f00d97144ff9daaa016ad26a5cee7a65a14b41eb56838ac654d4

    SHA512

    23a5fafd024bc323975734ace2324d3e70c47f2eda8bb806d006bfcb7f452802e7acdcbd873049494bccf1d88d984c197151a3d19c72c6f4d0780c9dab73cba8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    841f084650fcdb8aba16e2f63f3cc042

    SHA1

    43f073bdf7c7de6a7c98537aeb4491f7d7b19e1e

    SHA256

    3cdce4866d66f95d779d1b06753d6e0c30c5d2f0dd3e855949f21485db8c7b2e

    SHA512

    141d62af2ed328600918c57f825b37dee2f0a005dd6f7284e318b7f08bf1d3253528fee2598a64a7f69fa91cf9f339d4f31b7385b8746f42ef8836c4682330ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ae8af9a29f0e11f7adfd95efd843539e

    SHA1

    acfb3ba1111353ccd0c8ddf13d43aa90e972d66e

    SHA256

    e9b2203c12d780a5fc7e1989aa959c4635e226716a11c4a11477ce0ba56afe8e

    SHA512

    2d6d7cd76a5dd4ccede7001641accabdb10773d40886ecca4ba460392fee89d5a219f55350618b3f37648e74f3c8ec143fca2096a25b06c65e2d567b8cddf533

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    40802fef8ba8e7664353630c19417e61

    SHA1

    d7678e393be18c2ebedc4e8ebe71091342ccf71a

    SHA256

    e2873831e6588c38b8c0bf21f83444c5c2457bdf15ad9258d311bbdc1ead989a

    SHA512

    7084f30ea717d8001fd47d91d496ad1c6f1aeed1bb384549020ae91049bca321f77376b350e7210760a2c8958f9164420f4806d4d0c407038127a896cd691599

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4aebde4d9a2389942e6fd7b2877385a7

    SHA1

    30eab3b48fa565ab5c209fa51d970a9fe6b234f5

    SHA256

    5970bf4152f821f7c58366a1e39425172c2e4634cae6fb647bcc666ec9b550db

    SHA512

    c68cff0213b43d3ab425b251dfe3e909d795772200fe4e6c06397c2c75cd942fed3925250a4302cddebf82f1815ab49d201670cd653c1d6c50b10cb03dace9eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b605e7484f7606d9bcc97e3bf7eadcf

    SHA1

    793787ff33ddeb932a0ca657ba342e2242b246ee

    SHA256

    77aa4d448a9261ffb2c77962cc031bffe86c61acff6c3c661a36758ac8a71f8d

    SHA512

    db07f6da96e889cd50954047d7005566a4d0077c8412f2f9ecb1e2408412d9ae10e4efbbdfc479f3bcfda7f22c30b41b8b3c9aef54992d1d33e1169e4d18a0c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af9b4aa3ed708290135f6454abe03f7e

    SHA1

    f9e4c285ad118e136f308d85abce9b0443b9cb3d

    SHA256

    797219c7e7f6ac31c39a208fc80dba37af6cde293b936191262ff1e40af82eb2

    SHA512

    c4cd11f5c0032ae6ec6eeb6ff8587edb7bd847d2640044d10f168bd25de3e5a367ecc4a5a0828d4a5c27e4cf839755263f1694676150a4fb0044da472ab60abc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    215c693b543614ca0a355b4a1581710d

    SHA1

    0ce72780e2752382a94a78b90b720e9ab173760d

    SHA256

    6dae06015951cd10b1ce93d950893aa16039347d3e71ff53f23752c0c65b0f13

    SHA512

    e3dead58dd5bfa1eab99ef5b9a00ef85623b10fd77c3d5a87d6c449a3e5de614122e52814a97cda7a2880bb0350aa071da8c782ca52cfc6a139c54a19ca5e95b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e6e6e7c18732d7108642083f8868d1a

    SHA1

    aa76131c9b4058745032f9cbf27f581dcd3b3746

    SHA256

    4c81e9fa096df2e8d3a0058eb09d04e337f83d60ab05216ae0eca6fdc3317615

    SHA512

    9b9a11461ead83b3d8d9dd4dbc1173accdb16dd487fa87ad8dd8649cb85d691cff550e5b2a0efb7bac8d45863182978913201c9e6ed0216ab982b5790dd64bad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d952912970879d093c2facedfeef363

    SHA1

    2e615a285ea8832533100f10052764efacdd40c4

    SHA256

    8d6735138a00bc9d82ded095396adb1f2b44e8187f1e18a973c6c98d2c666bd2

    SHA512

    20bf66d5bc72db77301f3ffefa7e71bbd601ebc6932e5dcd655ebce087185108a7a4da24ddb1263f4ccd4652ccba5582ff5ee582f54e4231c82637f82b20969a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    d2f492d6a231466858490b15329a3f9f

    SHA1

    517d1dcff34f8bd0c1056c02abc31222875a8720

    SHA256

    c74b1514621dbca5519baa39a347b247b37d30751a7c6a7b4843f0e96cfb6124

    SHA512

    e9dd6fe134f4547e65f6c180215e9f6de011a045ba1845162fb976e07a59844f69cc841783050a29122e9fa26a875805ca8a6c039a50cb2a849273b6fa56f893

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\92WCEUGD\ads[1].htm

    Filesize

    114B

    MD5

    e89f75f918dbdcee28604d4e09dd71d7

    SHA1

    f9d9055e9878723a12063b47d4a1a5f58c3eb1e9

    SHA256

    6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023

    SHA512

    8df0ab2e3679b64a6174deff4259ae5680f88e3ae307e0ea2dfff88ec4ba14f3477c9fe3a5aa5da3a8e857601170a5108ed75f6d6975958ac7a314e4a336aed0

  • C:\Users\Admin\AppData\Local\Temp\Cab193B.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1AC6.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a