Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    05/05/2024, 04:28

General

  • Target

    15fa3d6732ec1b3a6a80ec272d3cdab7_JaffaCakes118.html

  • Size

    483B

  • MD5

    15fa3d6732ec1b3a6a80ec272d3cdab7

  • SHA1

    ecbc91f6ff04ec62d2b5054caf511522c4935cc6

  • SHA256

    9b21b389df61fbcdae212f904c5efc45c5dbff376e806d8a693c586604615c4e

  • SHA512

    2d0eb211e40fd56273d6adff1d7d744c7c5b8574b1bf73691bde81fec0cad8162647c696e506b08698e53aad1a839ec847d54375bfc4995403f4c600a7492e66

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\15fa3d6732ec1b3a6a80ec272d3cdab7_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2936
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2936 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2848

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    b7ad123e2b5c0694dee24dac1abc35d3

    SHA1

    93bfe1a097cec4e304ec42805d0e679b4d27f80c

    SHA256

    56d58c9af4b2aab29dfe35b71ec773fac63cfc9b74bbfa9097f6702091f9886d

    SHA512

    4152ff65f6429569e7f084f445dab67e01072148e7571bc8c6b04b559a11a4d0f4794d20fba51da595af64a7edcdb21178b15eced213061b10462e8446277903

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac39243c9bf18a1e1382bada6a60b06c

    SHA1

    a48a70342e781e7b4af0786c8c18905056447cba

    SHA256

    9e9b4e0d244c2245848688110bed83183e0034f39467340e4adc6ce9a2cad187

    SHA512

    b774390e494be99af96c0bba33e65074ce6a7ff27e0be83c69c4236a3391728c0de1e4e53fcf8dd89520a5510a4b60065fff1b1a1d6d030a2c6eacbe6822c06a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6dd69560da4045606593b8df076bbb7

    SHA1

    0552ce9f34821d2bbdef4156fedacfea44a58338

    SHA256

    29aefbfd1a6a49a8f6b0d49cecf5f246e0488ce80ebafce93fd81839921ee4f3

    SHA512

    a92343a06b36e0b5b1c52170c668f4bb6a8dd5c0b511c03c1527f1dbfd7819a3b62620b2d58c640f6f9a9634155f33c95fdc50b22c241ca779c87d08786d8ad0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cea6e933db5a45727595bf9ab62119c1

    SHA1

    1f5da6973deb0fb89c5f4ae69d2da1b4a5aeff67

    SHA256

    be5a3ef075578ba06a5314d1fbb01270fe22954c35011b4ddea70dc0d3e59080

    SHA512

    6ca92eec9141db00b79fb37b2c948051869eacc5029f9c59a818cee5daf95d7a5cea79b8f9bfa86d89252d62bfb9bec9e85db827b48f4489ae4d82e0d88f01b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9921ff003517495d2d46dd822205eeee

    SHA1

    405fd93206dba7c4f99312f11866fdad2e51322e

    SHA256

    96c81f0be49668267704aa72168235ce36b9e394dc37326d9f07503b600977c5

    SHA512

    aeff20aaa211c4e146d63f0107c0bc4f51df2d6f0b7cba2e75013721f4f92b817cca7fb0da44f61995e2e83723d99ba7f34ced00bada5d461bd18ee548113ca8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d9dc125dc27db75d05b2a3717f11132

    SHA1

    c2181db782f136bbc8a181ee2bd4f268fe2d0254

    SHA256

    5e5455b9595058d9a654c10806f19e2fa776b48462f865f4cf1dddc15af9aa50

    SHA512

    977fddc6a55e7cfec809d399ee3a804b45ef357dbcb2c83c2c8cd264b92fb36ae58827a28248913970160cf820fcea625b0f2364cd0297d7678aec041e4ab044

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8ecd3a6561271e7d1a7a6f9f48a7d71

    SHA1

    5745b28b0fc79cb26304777f745589a6ed18a534

    SHA256

    7d8052b1683e40cad0e50300ab80d64ae61c8dbfe7df42eb554ff7f79a2bd095

    SHA512

    6dbe10cb9eff055df990d6d6e78bbdb3b95555f07a6b021f7383ccc0edfb66416d5c382b8e39946f4a418c4388a3a116b67bcad63a6f6498f2fe1908ed261fa7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    215e1f1eecba6d89687d54f45a40e0ad

    SHA1

    eb6b001bb458cccb392f34779432001db63847bc

    SHA256

    4058332c5e479621eeff03ee9b97af9b2f18b62af6366ae7f3eef7b86ed9a3d5

    SHA512

    0829e03b3084bd34684ad223d195e03ccfd884b87e0da5d31b0dd752380749c397081f20fe9239313cd869772b379df15d319e15bda15750652c4a2ec5240c9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0550c92b182e3496a8da9a183586cf07

    SHA1

    dd2b8da8ccec6b586ce291c54c46dcabd3cf231d

    SHA256

    d97e1d49d8e5630753e14c7480b5b093790f3bfa6779fa6054e66a5fa10238f7

    SHA512

    38962c5659a6f3c61c5d52c5f41d15b3d260caab7288ff6265eb63560abdac1575a0d1c4fccdde5bed87662d993f6cebfe14e32df71bdc965a4f6c60cac88cdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb78a3e04d6a81a14374ed6167fef5c9

    SHA1

    f5b0313d6251c9b020aebabd6c488132819e672c

    SHA256

    4d095e92c0367e45d5c1536d17393e9a6b2c34411eb787abe5e2df853f64bbb8

    SHA512

    3452dc5912fb4cfcf895308fcbde6b6c851f31a9c795fa3866744373b8732037e24e59341c6ecec9206d7bfcf062cfc046afa80aec5835e7283d2f9e84767c64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcec4949902ea6a90e637df180f883c8

    SHA1

    bab1fcf6de93698143c4dd9d399e66c3bb96626f

    SHA256

    76333ccb8947a278700e550e1aad20153ee02239a926c35b08eee21d2607989d

    SHA512

    7a08acde06d4d7c897253a00f99022e1c7016702e9496d4d630a285ee5630c89de2f6d12f204ff1962519f2b24a37bb697a7376a4368d5095b4dcd58d9df5f6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    044184e7406ae9e728b6a96c5874564d

    SHA1

    6cfee0cfc89e94a2ee57551e44584e233959c88d

    SHA256

    b57377d85d00f6b3a922f8adb4b31c9137d769d62afc66ac615d3b623a123db3

    SHA512

    4b0103279a027b48ec2e5e1ca2248726662d7379cb8a8bb7c18f9eef8da2d5a8db603c8ec0039d5cab828c29fb91e103eb382586560769e324d6e25fe08b927b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc8000d78067e7d0f174e2ae23d303ae

    SHA1

    fc65f3f1f3a5ca9563165297bec044ed790704de

    SHA256

    ddfab8a53eedbda9b107490280f0bcd04adaee2659e1df642a61123e8aa18ea3

    SHA512

    3b2bd2308c86494edcd5386e71f94973cbd661ab92894eaf546d2d634a0dad008bd4a78de4f3a9618e2934ed224e924007cf052f070e17a89fb5759b2cf15543

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    113330b92f805669a02a6160791e4444

    SHA1

    5b0ea247cebd4538714bb26090b474c3f3bd58fe

    SHA256

    9fe7022b4287e568f1cde5663b80b45985c2f77c3cc7ed1744cf9b7ffbc75874

    SHA512

    f96b4a4f6057be72870b09d55c61353350a247d2fc0656ac3fb7a6acf7e49c5998e39ea86b844e50a161bffc978462b0f580061c893ccc3799838f9fddc1717a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cdbe1fd9f37ae5dfab56c968505e09ac

    SHA1

    9bed879d333ed456d67abd95fdf045945977a87e

    SHA256

    edeae61e87ca2b95fc308cab5c10fe4711265de4fb34f23fec0947f1face2617

    SHA512

    b9563b93a50f6ea71399237cef996f2dd585ea418ed442a3bd75b4274d1b93082e773a57c1eff16bac5371d86babf597ec4695f88f64489c2a4de8db8e0c1049

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94b553606b77e76bcb0be3fecae8b17f

    SHA1

    856840cceb039138f1203240e7fcf232576b9a4f

    SHA256

    e9d8612ea98a3b52c50f9c9bfc0aefe3263a316742bc86c404f4c442e04b1f60

    SHA512

    a6a93aa9e3765c859be7ce62c350932f120c357bea80f696d9a2457af02ef87c686107bc45a1de95a1f10ecc307251f50df227170a1ef4e069d9574520ddd9e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fa0c904efe69d8fb2d91e01b24aa64a

    SHA1

    081ee347b16dee7a5cfc98b1a89b237bd89063ba

    SHA256

    9dec0539c1032a2c110d3e3bd389a0874a23f9e14926fd0352a9ea20542c7037

    SHA512

    fff9239ee254ea6ed1f838dd1726d5a30c7470139f68b165bf3f8783153c0622b092ec70931f6699e0a5cf9f2a1477568416ae64312dc436e27bbcb2dd255b51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    19dc412871bdfcecae0a3b805177542d

    SHA1

    15ec3c3a5872802e415d6391260fcec9f3861726

    SHA256

    a1e901e7199b372e224fe0e7ae23f6eac3ad52fd52ce97885b1ace47cea8625f

    SHA512

    0c478f615ba849867f5586560d254a3599786bd8e3fbf68d24c7d5f10ba74ff78fa476abbee89489b3218eeeea0ff1f210b3e24898fb13979d306356a512eeca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar30D6.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a