Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    30/04/2024, 06:31

General

  • Target

    093e86a3f5ed2ebf48f5ec040b828f1c_JaffaCakes118.html

  • Size

    11KB

  • MD5

    093e86a3f5ed2ebf48f5ec040b828f1c

  • SHA1

    84f160f475408b27a2bd97356439ac13b95eabd1

  • SHA256

    4ae4fdc4240b6a815fc8996206f289a4540988e2069cab1b2ea8758ff51325f4

  • SHA512

    f1ad879c7cd9035f3835c5181205d97f7fe4e08be4acc2df4cdb9d3b717e9bb78ad600c0d9c1a5d6e6114a1edc4cf290ee7aac303d1f1a700ae14fa6ced904cd

  • SSDEEP

    192:SV0zLbKLGsC8iAVbj2qzTU8v4Pp8BtmsoGQKHl5MpMyyuDRTiLq5ugb3Z3:SSMimeJ8BtmGH4pMLuDxd

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\093e86a3f5ed2ebf48f5ec040b828f1c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2868
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2868 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2148

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751

    Filesize

    717B

    MD5

    822467b728b7a66b081c91795373789a

    SHA1

    d8f2f02e1eef62485a9feffd59ce837511749865

    SHA256

    af2343382b88335eea72251ad84949e244ff54b6995063e24459a7216e9576b9

    SHA512

    bacea07d92c32078ca6a0161549b4e18edab745dd44947e5f181d28cc24468e07769d6835816cdfb944fd3d0099bde5e21b48f4966824c5c16c1801712303eb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\FA48197E4A20A271AC60BF78FEF7108F

    Filesize

    503B

    MD5

    fb8ebe5aeb7fee76abda7a2f5a052d48

    SHA1

    965198027cb21dd4fd3d52c7abb737fa2b28da06

    SHA256

    d2ad36ecd7797f4fa8ef2d0244192e8f37d8b60facf1d60e657b0dabe8d8721b

    SHA512

    a203289666b022058dcbb529990dd8cb262f312dcae0ce04cad7936c52ac9c77a9452102e20dd989d580c6501e52051daa25d1aa4dc967d16b36fe067a4e8cde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    f9ed1a57258bf6e865fa2c048f07b9f6

    SHA1

    8c21d2b6280ffd526246f45e3d3952a54c90d556

    SHA256

    c6298cc4052535674453d33ce53cfe2718246bc30a153a5f2e15dfe69a51db9e

    SHA512

    554f891dc150e2ba24e0f1bde99d772cb11f9e36cbeb364abce73cd2e88c37b94b619311d10249a6a7005ba8e141698bb8780a65c008be549d254ed7944bbd16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a956d9b51578b7395de92747cfb3f26b

    SHA1

    bacffef180520e80a7a236768e35ab5ce8827e30

    SHA256

    be0c5aa75f3d19f8baa15ff8b97ff943530794fd06d7887db77d2716ec8de2b5

    SHA512

    bd625a7eed61d5409ea3fc7e402ed4190f4a6789017e6e6b41912034916101961373341bfefd516f9b61e520f3c0d00495a5e1a13be1b4b7183b92d2cc468617

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    dcaec92e3ff2511d420bad899e5ebcec

    SHA1

    3983678996c4a9fa4b6676f1c2af3006c0868f73

    SHA256

    aaf69a9e2b01ecb672293f0220ca2a9e5d9f4a8ff1eb71d2311dba415cd9c9ad

    SHA512

    910e5908bebacd977e6624b97c8197f67ab40d946279b871d8e381b615767046dedf6d1587b5e0e5ba551778b5f651157c42c6daa122a5e497f6f3061a2fe317

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    d2f9725203e34f99e3060ea7ef3fe7b0

    SHA1

    cca14e2b5f42329de93545f65216a74b642e2cae

    SHA256

    6e12e8e50f08ef12f9812c5a9085cbb35aa0adfa2e26fd7641ffe309e864198e

    SHA512

    43a76a620d960daacd328d25222cc3346620524bacc1d217de7df66c40a2c2956aaa446653e01b6b9649319dc575d590bec07a68e42c46316e26afa631c7d6dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    914aa58747a8b6250f003ff24b10462d

    SHA1

    feffabdbc0f591b08bba8da4b2b454ca22870182

    SHA256

    f027b88b3d974c966988ecc89912a2117781c6df8862e8d54368edf32b468dda

    SHA512

    e6f81c45ab8368842bd12c52a608b119e6bf908006d2074171ca96adfbf40c78ac56d23c6878e717502aa494be63441d59cf9070a2002a2a5a6e5a0dfc0235c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9097aabf34815051f27015e56f50b9f2

    SHA1

    21f535465bd704fae68f9a164cd8c3f87b11f84c

    SHA256

    4aa72dc9b7e9f49f3703f25bde1f359ecc050a98fa0a268635fd838ddcc78f0b

    SHA512

    70f1e3620f42e7fde5056ee4d4914af214d67b8e0b2250813c0ae95e0ceabfd7edf2df8145d9b502b4e94b9c58639accd0cff81a194c842fece543cc84b6d64b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a47656033a279c46a3db30d270b2bebb

    SHA1

    528b18683c385bc830f9381e52d0324c543ff1f1

    SHA256

    6a5009606b3b39cfbe7083c2c3f751e2db06358bb6e80ead4d5931a29d188c7b

    SHA512

    dfa7700d08d349f8f33b23d55f8d63e4a6dacb6544e11a17698416d67bd81049e729b0d94004dac5a6ff6f4f265864fca4375d5da1188f5137c527ecc014d1a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    8d7f1431e8cd31161933aa60f5c03df0

    SHA1

    1c71c3a6e3718d933b2defcb987babe877d84953

    SHA256

    30c93626fb7dc4767e8688a178a59aa65ac251398db6d08c24d894e42e374088

    SHA512

    ff9d185e3abb75f22c53234bc7763e9983b78913bfa1ca073d70ea30403a44398038800bd0bed7effab37787a55ccdf7bbf6f9ac636dab331650ef85e4ead514

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    78aa19d561e6df4c648d4174fff7f4ee

    SHA1

    af6c0de0fa62077dbf20bcf67dc71992755bc5ff

    SHA256

    5032e5d71f04e376e1d23f358af73023cf300288406dbe1d9fb0f25804f91d9e

    SHA512

    b0bce9bb6899d14dd2d3d509427860dbcfda535dae86f38bcd55e6d377c81e3220b255343eae587e6191d98d64d9c0d9228aa5f97147ffd234d46f9e609571c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    94ec4ecb6cdebd8a837f08315d756eee

    SHA1

    16415e45843c5c69b251339e80298666ccacb9b5

    SHA256

    15ea5d0b6622f264473da670f2490b675b29d1611eabc07d92905d56aec736ec

    SHA512

    fdbbc590ff3c3e6f6d6ebd8b0c0439b137b0531f70ac1d6a631a644a464e331b68b4f0ed8c44287f7d26f8884e636b68ee6df75d715cf6d85bf8f90cc407257c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5b90d21dabdb1a8b31a48c41a5a6409f

    SHA1

    c1f62475f8d77fd7a32107deefd2c55eb6d15648

    SHA256

    c2d649c4aca3acf3caa1e7d89899ffb099e2f29e856461ba659a2d627ce81768

    SHA512

    3fc9709fddfe0f55cfc63ee2297bece21bd42e8df5b982ef10277e123e712e55eace07f4e183720d4e8d4712ec53080dea3475002977fc7693a0b1c3318240ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    cdac7740bf11b6108b7a0baa8619cdbe

    SHA1

    04f476c40cbd438462b4c09377f5fa68e9233fd9

    SHA256

    d55558e02ee8ff669d1fc9c155e09aa8368bac7c3e28ca4f917a6398a9e7a700

    SHA512

    1ab23e2d005ac453f0d746315b60edee21c4ec41a8892c60666340300cf2275b0a81592202dfe836f191ae7f0a3788093b71b2bf420fa46cb29cb359267ed231

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2f2e865c96637999e044a9157ceb9e90

    SHA1

    db7615ae555ddcd6c92a9fe6b877f7f8a2c5523b

    SHA256

    252f6278cc18ce2f454046bfa916cd029917b50995d4900b04ee2d23554b7ac3

    SHA512

    76303e9e40d477dcc6cacb4b4db8a3feed5556cfd7a801eec4ab9622d9411eee1acbc772730f6de6d5992d851705c04f8840ae534cc8dadb39c37583039752ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    4b3b3f86448fc622fa4106004d1a5efd

    SHA1

    bd7df189ff35dad618d7b57d3741c23f4b5fee4a

    SHA256

    3e03c86423caf5ffc7695866e50f5f4461fe0021032598d6da7e2f067ffdd1b6

    SHA512

    7133c1cb0301dcb57cbfb30e162cb0a44b1bc63055aba16fe241911cf4d4e60a9afa305ff351870c46a012b41184e3f94b19d30d048d723d4b0061f6769dac74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    74adf0bcf6d6d0449da1123f593aa695

    SHA1

    80c36dc0fd4aabbb37e169e5eeef348500caeddd

    SHA256

    50b03beafd6a30140296f083165979b8f173bb2e876febcfa36f806c3d82ba56

    SHA512

    93196f5c86669dcf949304230f367c4aa3265dbb7c8221b29dc96da6517c55a42d1085ca40c96176e3d32d7e5c6ae8743a029550f734ed87e8dec145aa2c90f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a8c6e8f8767643a29d514994cbc7212c

    SHA1

    40a8cbc917edc83d87c81ebcc6aa6a3372321dbb

    SHA256

    7a82a75e80e3ed993ab3189b4eba8ca01948d32b3e82daf6b47643f537795b29

    SHA512

    a132cd2cf346586798d166a46a27c6b162ad1410a7d7c1a801d9611d2c6e64b64b36effedb01f7b1f94c3e8999c58e53b6d292638a90f6d07df792c0864a311d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e91242e0bd10afec2800770ed90ee22f

    SHA1

    9f540a66da1886d3beffcc7b6ac0b697b08df5f9

    SHA256

    4ec806e1771c099f8caf4ddbd643ad42172408ecb7352cab3b426354175eeb97

    SHA512

    648aab6a1f6c429ee1ce5fbdac71dfe612a9bfa0038a0f0f538f3561273f2a37def6b971a94df6b2df22c157f91fbf14f23a9c58311e06fa1ff59d61d14504e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e22a22f537e668345e2f07573f65de46

    SHA1

    294f0384cd21b0c24bc8f3eac0353b0cd7491504

    SHA256

    e445b125f9ff7f75f62b77099b8a012bdb676e774a92cd7cba86612a4cc47752

    SHA512

    b72c191a9821cd15988e64538e651dddbc84adcb6242ef38a5ef53b16cbd9834d06f1102b7640e7a9a9a5380cfdffef0615981488d63410b5b2d4dd1b0367472

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    4657340095827ba14c46f89c23cdfdcd

    SHA1

    036e0c191635768a38504f79f97edf1baf0cc253

    SHA256

    65bb68f40fd93b2c726484e7994dbcc1227cd6ce97285519369694ac454f8e20

    SHA512

    54c33dc6edd4cf9b5aa4a740f8346198e3537f13d63422c8a51f53c5da9b669b2cbaab9d6be6e81b22b0ab072b4233b99f41bcc6857d92ad5946a208fadc8cf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ce34605296ad57d1473403a2138cc997

    SHA1

    7cc1ef8c11df53d55c3638dd2a71057f0d047865

    SHA256

    e5376ede078de7b55ae54c1e10a678d0e3c7fd4f502b9f4eba98d11ac8e8c6cd

    SHA512

    07f94076728204974e150db4b63c102cdebd8da4678fa5556ea671eeb5241d38ac5e177db1b371e0538c81338a338b489750139e945634f6c54eb643ef8c67cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    c3d9576b60b8e467892e0826f4843a1b

    SHA1

    38124bb51dbaa04fc7a96b42f959819dbc9a8306

    SHA256

    309c9fa062a680d6a131164408a938133b0fb35ba6d532ba8407742e6de36e14

    SHA512

    2aad57acd3b802708a1ad3c03ececf6861cd93a66821c4b31098bf07e299df23b14250b8a540ee2c340bafae1425f97b2c02e921d64073c4e9a12ef2709191a8

  • C:\Users\Admin\AppData\Local\Temp\Cab3EE7.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3EE8.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar3FB9.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a