Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    05/05/2024, 14:29

General

  • Target

    181aa7f96e9d3ab22aaae2124977eb3c_JaffaCakes118.html

  • Size

    21KB

  • MD5

    181aa7f96e9d3ab22aaae2124977eb3c

  • SHA1

    2cfca8ae356a8609ec44660ef004516eb48032cc

  • SHA256

    a0d1d472fd8057c221f1c102c2aa2344cb5769bc5e6f1a61649e6acb19a5bd5b

  • SHA512

    373d02b251425f3ac7e5877db059f983226d110df0eeba079880ffdce5b90efb3297e8ead1c5c86bfafcf9e478e8f28c1cc16e018c2b69f37f15cebab4d4d99f

  • SSDEEP

    384:e983KSZCV35ikoxnhiL0/eUxBGnASp4CMn9g6C9Piwoss6G/t0dFsuAquvb36X6W:eKq3EXxnhiL021T0xF0dFsuAquvb36Xn

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\181aa7f96e9d3ab22aaae2124977eb3c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3048
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3048 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1196

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    2544cc37bd720e9b81059b50c8a8271b

    SHA1

    8f1915841c9f36c1d3cc2df5b93facea810cb110

    SHA256

    810e33911ed1460e5757a700fbcf1af26422b317783fdc56302657cb4269d449

    SHA512

    b9ece5b4afade4dde0a035cd72bc08467138bb88b9748a5d7819b900cae3cf6255284fb9c064227a74af5e4e36b97b2c3a3002ad6c874a433c8f8e1c18519596

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fdb6972f2460f75a73c2d2ff8cf0cf15

    SHA1

    7bf20bd280339780eb649cedd3144c7d0af37992

    SHA256

    3760bb8c7ba057c1fb12008b2d083ee1a1df62ee69d23fcd3d5e23aae5f7d3a1

    SHA512

    c7f300ec341290e6c1565f6e01f62da854ca66b4de44b2bba7f89b7daab63f8ab385a71cf7798b3d5743d877e01004c87b541611d29fa9855d478907dad87f51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c635649205569c3cd9913905fd8dd846

    SHA1

    7bc43b37ed4a6ed6b34a86a16d9ed60725455c0f

    SHA256

    eae74a5d8c2dfa21011039cd8e2cd77954dbe1a9739f12db4c9c27fa49247efa

    SHA512

    023947ea5badf7ca4073ca200490204edd863f72561a732d84c225d8a47a461e3bb9429cc4162c2dc1ed71b6c04421234e0164abd039954da0477dfc2dcc8238

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3056310c30f34be7f3af45e4645697e5

    SHA1

    b8636b9b7ceef7f6ffcae8dc39b8f8239f2905e8

    SHA256

    75e3fe4ee15e5fbf5bae1e7c5f8af198b39e3588da048e24b51cf5a62e9fdf36

    SHA512

    53e8446dd0a74736785b84d9f0b9539a5f4b20bfb1a6530dd4af018adb9025ff5a5d9815714ae25790be679105b91b8f5b0b1ae449d30322813c453071a1032b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e13019e1aebd52c92d57d373c11eb22

    SHA1

    cb441c86e998778ae275adbeb895d2cf8b7a36ab

    SHA256

    9510efbfd2eb25f80b3a5b33f1e8e6ab8fb2d5bd6602e80d75a96fb9de52be32

    SHA512

    0dc8eb5b46bf5d7b697f10cc9c0532798f47179e22e7bad369934338313964405401279cada25ec5428f4d9d9c39e4fa4624bc38ea5a038d79b14bcbd3601062

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8de4d7849144e6a4fcf92705af41010

    SHA1

    8755523cd024c1ed2ce43a71554dd475a632f073

    SHA256

    d0705fe13ac6b74dafe9970d13ddfb462a102c88ebc7534f62b359a437beb2cd

    SHA512

    a656c2dfe4c516b1a39076b9e269bb96f9f3ae2c591c0bf32111159a63b1b584914c1eaa8fae350d6a91f07fae4822e930c86e27f48c2ae3c9f4e55a67a999f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75b1c253a41e38d437b7ce416e521cdb

    SHA1

    0dd92df301900802b52c088a49bff5830d1c6109

    SHA256

    2b10fbdd4d0038276020b55602338b1e0f65fca7fc9ad42af5b53fe38c503680

    SHA512

    780e0838175f0678e3ca44ce35dc90f6926d653985b8b964b6aedb864461f7e4dbd78f0a8cf3256b44634878d6be4f34916cb1e15b96859ce9364177ce53109d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a36796d92f4f419bd61d4bc698f9d220

    SHA1

    11c1d60f7a039b99eef5426d96a5e39dfdf3db4f

    SHA256

    570d6f8cd402d66ae4d2ea4b96e7640b8634887320f153a9135ef5b717c932e9

    SHA512

    ccbeaa8dfcb5338010cf101bce76b747a3545487091acf75dedbfcf7ef09822ba079fc8ac0a59424ec0ed9f7b885940bf504c9e7c8e25a193d61a4a69b2010a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2996b5ec21e928c885359869e8957439

    SHA1

    7b150f2f444dcc76fe423d73ba87ade816d39175

    SHA256

    e0cee86c5d83d4d11c682d1c99c280ac1109139a0d73c50f7c6eabb9d13748a1

    SHA512

    07ccfd3d50a781fc67d8a5e27f145769114c6698901a4aa369d5cbdd53b434d79e424ae6bcfc4930fd687d9515fec9bb2d1273d31bb5bf21e32fe9263e985aeb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1dbe7ea88920cc773ec957b74734ff45

    SHA1

    e6a96e571ae67690a2e61260ccfcbeb19276a47e

    SHA256

    a9044e5c4cb99989b5a8c93894602deb72cb794b1fe1e96c8ba1b62be26e8413

    SHA512

    7dd088372cc3044362cccad27b1ab486e2b3d5aa244f00d4196a2f40453bfa94d521f3de414e4e6d4020fb3690a0c2542c2cc4f2b4561cceb29a3eceb246435c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    004c0cda144eabe00c1e57837440e257

    SHA1

    e5fad011adaf85125e6104de79adde38bc599c2a

    SHA256

    b56a4afadb51726a52303fa5f037d75097cdb320d3ab77eaa0a6175c8a23b7a7

    SHA512

    85a8a05d9523d9afc49e825da9fac8060bebf9f486fceef7666cf4954e638917194dfe8125797490b12f2740f9a89d61dadd96f38ed6fba871074c0eaf06f02e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e68fe9f1ebcdb51435e9c7d8f4bb55b4

    SHA1

    680b62ea2bdad51b577f316bcd200d727bb50ca8

    SHA256

    b46a5ba650312c2479258fa9ab98d1f886ad11a3fe0ed87074a116c0ffc96a47

    SHA512

    be973aea8f846e13c08cc93e9d79144edcc2e21e0f482fcc691c41d5cd5323cc443f6ae3bb6498dee605e09792e4b69909ea9ab7d8e10b10182cb98b1182f12a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8419f9a421025c755c1be4a798372dbb

    SHA1

    c941840910b57bd23845a21b90c9dcc11f17fac3

    SHA256

    23e16cb41d50c56f345a278f82225c1962cfb014102df5a1c2cd179088b43c26

    SHA512

    bcda449b3be0df485372f33ccc393d2c5e3651eb33c7a71859efb025993c6abac8d4b94ce2c2f23c20017a33f11d3d346c0e3d162f782ca9b8106833dfb4af51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e47f13cb13bf690567bfba7459c2402c

    SHA1

    050cd5e2c7861871a4588ba4650cec2863bfcf03

    SHA256

    2417d1667b3b04326a873bd589813bf23280cf0362e69e701e38fa33ecab0ddb

    SHA512

    1543676290a88dcfc1ab8599e9ac313ebcedeaa804ac824fe217a5c4c8af6b29a6a5301f1fc3c0751e9295058080dc1d29ece0d4544843a0b3e2501e14814577

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8db22572243b0a4ee08020eb6c990458

    SHA1

    ac65bbc34a041db1dadc59031d96dc2f4ac9d689

    SHA256

    21272fe44ca010e4ce61ce9f8f2b4f82c3853fd8c1543b9efebe0b7a9bc005d8

    SHA512

    57cd81fb19f797942c3313b78ee22bf5750e67babb4d3da4b35a0dae90785f3947c9e0c3bb2295087c5fb6a6f045e06ee8b82d6b7501e479cddacea1b38251cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91b1aba5414816d4b9236d8b4b46fe48

    SHA1

    cabd56747514d66db39f808fa4885c7de0c91af1

    SHA256

    bc80bfbf42dbfba9ab3dde1532663cb5ecf1e47c9c967e256235a2f1197e4860

    SHA512

    46183492e48d6f4b27fd429cfbe83623a4f619c601ba62656ae9f978972d49e0f89ce475da4f582c3b600e3d380d338308c5ad2f27dcbac3a1fa29356a7705a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    249e7411c1e9da593e2c2a996079e5cf

    SHA1

    bcf6adda0e9edcee0c48c76f57bea2bdd4f0d9fb

    SHA256

    df7ca35d83c6e314c376e5f2e84d7b89ec9f279d55dd98363214ae60e127dea9

    SHA512

    b7101a029a5688734d4b563544f9c74c88008f0faef678920f3d3fc8b0b79db84d94cd457d9d2543d864a0c3e5534f6c90ede23509d40f33b62fc2ba8bdbbe21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a225a25fe2e1354e64ca888f7cc999d

    SHA1

    219fedaa02424f33d083b8120e43ba2d1100368d

    SHA256

    5ec90a02f9ebf9a1428022c62b16d2167e8e0b424aded904c62c818c66c0f585

    SHA512

    39b742fa8a237e9f0fe8f05d3544e7216a29dfde903f6b24cd97a9a60cf23466a93ced7633876d1ffae48c2a21f77df6e97a5c9704c902c1bf9fc676b247e481

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14d3957a94c876415d76e57415353412

    SHA1

    063405474fb88e8be9ba2f65480af23d248cd30d

    SHA256

    5cdedb4cfb4df22e8c29f3bcb38b957a79b4e5f350eee70ab796ae330f8d2fc0

    SHA512

    4d961c3118b93fd34b2ce220c82f95c645627c65221440327265edafa283285e49545fac1bdc8593c16d1af6fedac351cc3e9b7b20ed9eb8e19a611ac68a4bdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    57920f1ef4d5cf3e403a3b8d924aba34

    SHA1

    66f5ea104de2c9095e0757fd5f3bacf630748587

    SHA256

    bc9030dd57d0f566971abbecf94e7aafcbad54f120ec05daf44fecdcb2bcacc6

    SHA512

    b0fa4a618e0d41204d486e9d4da4f537dd738d3a18f83f936e9ea910d6a333d1a533b2c9cdc6333bc4ce7a555feeedc36043db9779b2a241b73d8c913b23b02d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar3874.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a