Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/05/2024, 10:05

General

  • Target

    1729d61da796c8a0000571572e4a1756_JaffaCakes118.html

  • Size

    189KB

  • MD5

    1729d61da796c8a0000571572e4a1756

  • SHA1

    f4c1d512435b7c679a187df7b59e55d2d1f037cc

  • SHA256

    506d9907ceaa09869c0263ecff7ce206738f9d229b9abc491b0b821c47be12ee

  • SHA512

    25de2a0c2f2823abde92e5a5e91b138882eaf4bb6c755a1f226af860415978235f9fc74e7255f1c732aef14cacde5958e439b99f906fc0c6497b4962e1137f0f

  • SSDEEP

    1536:dEmNGZqnIYnyRZWS5ogpuz4fQpp1dVWHGZ4srV2ERZTxAHjLcZ3xt3VSmFgN:1FkyZ0KN+LcZ3xt3VSmFc

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1729d61da796c8a0000571572e4a1756_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:360
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:360 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1680

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    b51ecc0b484965101a78909339ee77b3

    SHA1

    c0e79e167fa6480cb74635eb4af8c632183639a1

    SHA256

    9b73f848707ccf33c5c732e3e07512c8c2c69f47a6ec824744d86c76d584019f

    SHA512

    6a1c7d2a2cb24348fb47f3961bd803e8cf24fab7df87cca2aa0063c6863fbb93dba2ffb8766d9d52e663fed1000a13e5387c0876df1cae2bb58980bbe9440c87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73d9209e1cef7dfacb8510be0c68c399

    SHA1

    17511b160764211d6640f51d49a3c3696eb28bb0

    SHA256

    c91dfabf38c77daafea5d81f3eee30e6d7f1b664008a7398aece65f525be2118

    SHA512

    2d949ca61de4b41a54a990fe9a51248aa1026c74ccb7f483da08227006c17005709ae7ce6ec0f2f7aee7edd01eecf2e24ca0bcb23609be3288dface227453758

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0e5c8fcef52bc0628b753308d8f55c0

    SHA1

    235337c4f1a60e99c0a668c518821d6f0b30f162

    SHA256

    f746e2568c0722c3e5dc76be946e3f23915292b1d3891930e6f1b85cecefc398

    SHA512

    d8b58429aa8b932fd84ad2bf5371aa35ac7ac86135f1964e8c20a1b891776df609b354a283b8bbaa001db93b1c73eb080d27a74eed33ffe23e9b0ad51df08888

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c4419d522e17832999f0729346a77de

    SHA1

    4bbaa6b0487618f5d81330a404c7227557eddcdb

    SHA256

    ef53fbc056a2a5b76cf7b86d4c8a180eaf5711590ff0b88c8bc609b0c7b40c17

    SHA512

    ee89610d85ac6cc5cc05f3308210d19e25bd97ec5410d6b581604d00d0a074fa83ec4009970700fd585298b510391c4da088402a18bb31ef609381759c54a3bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2dd7fadb604b6e4a04b37e433260b1ff

    SHA1

    1ef76f0af780a3d01b03d13b366d19125500d8db

    SHA256

    5e79690c7a1992c3ffceb7a6d6a726b5f9f443f1c4026c3172643afc1eacf564

    SHA512

    4d3c6bc37050f008ea2991b04bb3c4d764522dd41d43a417f15d7e09da12ac548cc0d48d67d50b425d8bf49ea9c3d443e5ef99f9da5ce7aa62297382549a4078

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b4a40c913705b9b174c972723d19d1d

    SHA1

    799a3bb78fcd83219651c60611590f82defe3ace

    SHA256

    bffbfbd0ac95dcb94d0bf499eeb28466ca102d0d6b3b735198a4c2fbb4ebb549

    SHA512

    2462064aa931ddb515d13a8dc13a604c7d12ea88a880a3553eee232f8d6ad64bde517a8fd30ae0945dc1234bc767e292e7aad48bd3b2e6f6cd427da84ad77f98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3cee05524ae6747013353cc9110c731

    SHA1

    7c2a1b8e2ab37bc2244f142231b952b65e25a54c

    SHA256

    fd1739026c5b9e7c0b3955bf5e531b33f1d7bd0394be7eafc67cc85ed4522f14

    SHA512

    aa6a73bf0d75dc2cb8abd53833fc25458ab732f810e9d97b6c46727f7501697b46d2a24def8751afe61676c90e19500f2ed97a9e9a3a2b75f5f3c35671cd07b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cae4b57f22c90faed6e398137213fe49

    SHA1

    98eac1425689ccf7698ce42086059d1a08844554

    SHA256

    5a39b0bc2f5a386f93e07b60617046e7f78d7445a5c7cb1b97f9e865377358a3

    SHA512

    82f8edb387ad9fe04191b96f08aa90825a0f001b0a86c3c01e88714525d10a791f1d965238b4acc40d01e09348dc03e4a93342c6ca3555033b665538191fec50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b98b599766c5c0b67559032a273f78b

    SHA1

    1450a2f1e5ca9c2137f2075b9278912c1e098988

    SHA256

    a4ad0177924c06202fdf870300674634d0fe821d0830846fc9b13e1d7a12b24c

    SHA512

    2194a08cbac0e465c1aad3dc48f9fcdf2dc502931d7c0b1f2cd89a30594a2fe99b7639dc850d6fea8444ce70bf37addec7b0ddf90b9aaf50a2e3db64b0b29e89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4dce2f13ecf9c5fd18883afe039ef4ca

    SHA1

    faa594f254bbfa1ac844d91d9ce1d677c1ccd878

    SHA256

    ddd2e9783065f51c63a0911171243fe60124ef8a168162976ebb67bdbbe9f7a5

    SHA512

    78c652e3890f4eee4ec81f518992ccb528333cd96cf7023d3bc7befa1135293f8d5e301f3f18c7fc78a0a08588a58471ae428fadacb4102e0532fe9c9994ca75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bbcdf108f8ffddbb9e3b08010402459a

    SHA1

    8d6130b6baac5978407bca626d99d4aefcf1119a

    SHA256

    ef19f20b612b0eeee4c2c7106b6e21e33a3811851699168c5c80cca9d91cfc15

    SHA512

    375cbf7db7bd07f9539822e4e878503c4b04c4f54770530013a85a4d22318bb08000fe031d09f16d0bb90e18ff351c7f48ea291cfdf8d8f7e303f6e79ecaf41d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd4acce3b59c0e3d0577d8ad33e1a95a

    SHA1

    c03e8386253a8ea72208db054b1f17f740354465

    SHA256

    993a03295fa6b3c161abd5282cd35cc06a4e5d036fc8b74359a8f923ad3addea

    SHA512

    c057e7189a3f4d877dafdd297a67b63d941cf53329b36aca0370a2776d72f0560b2a86e2ffdcc2519a46380506a49a158a55a8b8ffc2e806a2cbcda80ed8f968

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a39fdb757449f36d41b74692b87a21e8

    SHA1

    c42ee0904cecb55256fa513324781888d92e68f1

    SHA256

    0005c390ab778d2079512e6ad94819db6cf7fea4b09266a2043847e0335a5dfb

    SHA512

    4f6791858ab500d8f833193e1791323833140fcf7ce8fb14d54f5159e2b18902d2e0ebeafaddd6736b358fd18325c9da3cdc8ceb0761a36d5be0db2829d58c45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17e21bc5e1ff678c18c3c908484287be

    SHA1

    ca1accd55fea554ebae845cb5c1947a6ee3963c1

    SHA256

    c14ca4be0760d55de5da185a5cc7ccab9a7f12746008b92ec1c0a618c44fa7b0

    SHA512

    8fa9385808b8d2e609c7fa626b07fd8358598b9b7d329784b590833d6ac2891ad457b0aef10021e6117788413d60b60e656d5ad2813a670347e2bee1d1ca4f53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b8d9afd079cb4f92a47675a292145b3

    SHA1

    d27e0a58b880f796d4f466c78aeb670545d5dad8

    SHA256

    1285639f5881d7269c37b27cd1f54585889ef3cfae09dbb3126c3f9ad80368fd

    SHA512

    14042ab0165951de2136a2af81db89091062e06ea93dfb9ff1516c3c97709aa5d86d43d4dab3d7603f9e3d4e81cbf9825d2a75226896e576efcfdf65fe5772f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37b18bcf1b933c5bb6c85c0c284d0c46

    SHA1

    c0809cc61d683e64b6f5da0616234d9fd790de85

    SHA256

    937d0152686af692b7618d7e629b9d2cf0d9cd6f13001e66fe1180acaf1e268b

    SHA512

    14bc46cb5e58368332674f41c1922b76d52021e24fa15c336fecb4ea13ece4e1ac6b55a34265e472fd9a9714cd9315bd7b3758ceb606dab9670528de1cd42704

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f4250b1a6cae7821ee9b4481f1d5509

    SHA1

    ba1cdf011cd92779532e9a2c02548b524ae82e03

    SHA256

    32571871f5090fb32bf953e305723f18011cf8471b5aca226f6545fadebd8ab9

    SHA512

    a79ac0aea5819ed0d0741de228e763845311d30c4216bd8e82deaf451f6de42fe34543e787377b761dd54fb1d01dbfa6d60c610947da7fd6ad56835341951d24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73498517ff2f596c703aa3cd6e011aa1

    SHA1

    9ba7b5752a180a5f8574bac4648040c500f854a0

    SHA256

    f1093d594ef99bd2211cd43018bd427d2875e6ea9f934dae2acbb59942d5470b

    SHA512

    52c6f5fa0cb93dc04123b1e102ac61aff8a0f87749804c59e0ab4361305967fcd3de54b0e8f701250c037bdc675df97d08f1aac744b5604f4cccee728998a944

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ddbaa12c4d9e78030a561f9e499e855

    SHA1

    91f5196ad149293f5f56e24dad2cec30453d8bda

    SHA256

    16c7069a95b998c817c4cbc4d084cfc03475c4c9945f8287103fc76e841d6077

    SHA512

    44faa55c6b996c3eddcc526f9568b9f94337c74073c07f78fbaafc886262855346bd5fecf40e55c7bde6cab899502e2feda36871310ef067c421ff355b49b168

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    501d7d040d8013f359e4cc02967e30de

    SHA1

    4c095d73b72806feed0f65dca42df9990d2c8753

    SHA256

    cc3c97f7b2adc75a1707a4d7bbe8863032ad15679b37cea66ac97fd56a991e15

    SHA512

    616571ecf65ef68505ad837505693f56e9ca43bee6fcc55205723858cfefdc13d799e191f95bf983046f5d9f3510fb1823e39f001a011f90c39953f073700f45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    771c10c4a4b6f67de019973e43bd2ff3

    SHA1

    a6d6bc835642e0d7144915ca63a7cf8d643497a3

    SHA256

    7e81bce481704e18afe08261137353ffe410a5fbdc318200179e68acd541df92

    SHA512

    036f48e11508bbeff05fc4e4a867b2539b0f94312c36161c47685bdbef2f3f2fca4d7a32e336ece9d0aa4f3f3d0fb7591b641373130726145d34fbdff3407fb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    502ac9148a4fc48b62dae4c647944b06

    SHA1

    62dda5bc71bab7e45bc084a00a1d621be9797d75

    SHA256

    53333e841f526d9cb51476178b711d54740d93091d08e5319571717a0e165835

    SHA512

    7c117e8205ee01b5916a040c31d6b5714bf9290aed7fa72c5b1228fbd33eb8023e2ca6366321074953864e1700d0d64dace09cb9d4f34400dbf1fab11c67fbed

  • C:\Users\Admin\AppData\Local\Temp\Cab1989.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar198C.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar1B18.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a