Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    07/05/2024, 07:45

General

  • Target

    1fede95f70c6ce2665f8b37909610e63_JaffaCakes118.html

  • Size

    139KB

  • MD5

    1fede95f70c6ce2665f8b37909610e63

  • SHA1

    a6d8ea4aaa7405b1ece72c799fbe7f93a4a777b9

  • SHA256

    b46a1040a3169d2005f6b39c978327e14a89c1ffb6b38c98261290907be3e8d3

  • SHA512

    c9bf0c36ba55024db5ccdc10b438a23169634576d0a2e1bf5444d764d177cbf958807b1c831bee83394d5f25a6c559a9a71a2d03c668870d851fd150c907b9d1

  • SSDEEP

    1536:SlR2nQIilct5KyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJruH:Slgvt5KyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 43 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1fede95f70c6ce2665f8b37909610e63_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3060
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3060 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2660

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    7a961a2f1e460a1cfb39882c3573f9e3

    SHA1

    2661f930603d3e73a73df3721f974fb8deb68ea0

    SHA256

    acf74440a3c725f02ada3060e8be0496e2c17217e31a2f01a0b99fe781131d6c

    SHA512

    bd33b45b0faca8c7dc23bf6cbfcec674c00fd47428e12960b4e7b20b6a9d9f200cf996a30f6acb6d0b7b74453e1cea4a7966939dff23eea1eeef638a4593d274

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ce1efca40592e59d6e103fd4f242e739

    SHA1

    b49c979cc4a5ce3b8b7a31242f1be9ae5a40ffef

    SHA256

    75db50b3d90ef5d943553a7a38c5f20eb4c1d2ea17a493c9734f248f278d4880

    SHA512

    a7189c58084902d2159ca8b76d1b477ae038f4f3c5137d9f867d4f99bc4ac4a4256d88589bf73e554ca3426cefb3c73fbf3b6379de4ec3f4e514d71c0b46edbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e8bbcc69402791bcc8f6b74739ee399d

    SHA1

    137f6180b0ed418437dfbec1cd49094465c8cf08

    SHA256

    0fdfe4e77601ac696e948ea7408d50d0004c3232497090153e0244f94304e461

    SHA512

    32c90bceb5e89e14bffade3e95cedfb1356c837ab8639fddcef5d7057bce9c898bcdf55dcd0f64b2c46135c16abec6a4c878e1cd4e8d2a3e08fdd42823a8495a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    c125a5fa6992e830c39c141c1662c7a6

    SHA1

    fd3744bda11f1a68d953781b2e37887196c0e005

    SHA256

    34c667c4cb7b957336e2f7dbfceca1c1a9a421e123c3c6c4019bcb5b347a1b57

    SHA512

    10e410b5fc7dde3d2861d535c924043b3e50af8dd5cfe738a1769b852a6848d1300efd0af755b73a1430047ff29ab7c78c80b70689c222b6eede8913da59088e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7021682b215eea59db747abfea1a916f

    SHA1

    c538e69ad9eefe069b0008f4c2cdfd3939480724

    SHA256

    9c7152aa8088a314dc5e03685bbd6da8c3ef0ac900f51063e58278d942f7c70c

    SHA512

    d1e9b3fe31a118ce9a9c17c0d00d9d46e389f082d95ee248c2468e16b5c4e717074581b4ee99b54e812ff6854d1da3b2e20f3ca50cd2388ca5b3454159e88812

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    da4b09422fb3cb9094a9d0550762f7d4

    SHA1

    560d09d759a4c028bf6ae735287f67ae41e33d0a

    SHA256

    4be74acb89241fa18315b7daae10b0fdbf055f93b25f465ef4046d84decab038

    SHA512

    f8e9f43695bb12314a97bf2a54d853094357e656f00370f9fd200fffa62c1f012115b52495dd22b6edc1d67635fa5d486090b5a82b4816faece56671bdb2f78f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    603ec3e61519b9fd1620037ba184e2ed

    SHA1

    fcdcb1163339e93062028b2f6f5204e252767723

    SHA256

    e6be1effc0c46c9dac49840b4e8c9e19f9433ab5bbf718cfcd22950b6e918f8f

    SHA512

    1d97d3df9e10b090825e8e235bcdde19e8c9424b7be5fb9563e5a2e18e3c980a7b07a41859ce6db2a880c9af09a48e5395b9bbf17b4f0bd455c489f90da2f1ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    4bcbe4ae0c3ab770f08dd1df6627428c

    SHA1

    127afa94c12780ab1a8b61c261160e1b655440d1

    SHA256

    c8c314b8c8bf762240690dfcb60de80cf5cd432d557dd489ea4543a53593fbf2

    SHA512

    aec8725cd449917bf6bed129cb402a146c8e08c6d602961bdb4703ef9859189db3d264cbf5f5ad74a9291a81da2af43d5baa8abb056e7c5ba214ba7168d8083d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    46b4e1d3be50e373adcb666abfd04eaa

    SHA1

    6ca8de6f30d1e1dc6ae41e385f7999d60d880f45

    SHA256

    e7b83a3a27b8f15d1683ce2798fcec9861df50f77c81245896cc0d8d1ad7ecad

    SHA512

    d18a0e433b053b0e44f4da33bdae856ef5868aba78bddf409ee53a4c1124f84c1cf7541d5c68b93ee6531c143a782a1f94dba7085810e8b0c77effa6f1454bd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    14852a3f339d15d3b2a2c16fdec4c90e

    SHA1

    3c7cf8daff1e57d5db1ac88110567bfefadda987

    SHA256

    c81a742c37b9d8deaab6a107634d0c66fe2c794bcd582837f034429a133a6b6d

    SHA512

    d7560b60b7dde0c2c54e4700cb7e5fd7cc484896b375849309c71f9fac5ef460b8216b6103f6805c2b5e5c915f78abeb027bbae3f1e3cafb07e68d9b26162ec9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    beb1551059e1c7abc3e31e2ad44b4200

    SHA1

    d90728b8f7eea0b69a619a733f1cdb5aa749a12c

    SHA256

    0f96b5466eb2e20420a61f285a85a0f6e5916bd53ff26d3260ca22388f388008

    SHA512

    0c89f2c5441fccff7385f1a7b1f9e9828322856398789aaf31400d0c7334bae56002bd70366c5874fe796b3148785d0a1c57908545ea1aa995a2665af5f443fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    d3d20830b3af4e089a2f0fd824aaede7

    SHA1

    7021a9e9387d130c3c41964b7b3268ce97946e21

    SHA256

    a8cb1ecb513437ba1503904ed4ba055a188ff849705bdb5b781a4e232d470da0

    SHA512

    c131b4dad87b9b8f830d11a36b4892cae1392fab0fa3e5d10e30f212789e0a138e444dbca20559d05eabc286714c2a31c2d76c1df98aac375e8a3e18cecc210c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    724c5d46cdf5f440add8f9a0b0d7514c

    SHA1

    780885dc7b5247169a2cbe4ad4ba3541e2d44c11

    SHA256

    88e992fec97da2629a18bfa93b5c9aca11562f4b5e932404c2d85a877c0acd0c

    SHA512

    ec8afba8f40d07ea47e08731a00bdea7ae4b9720ea41c4685602cc200b33a97c173990163587b297616b5c04b9486fe718e5decc2244ab74e12045971eabdd64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7eba83604d479e1438ea683ba133fabf

    SHA1

    c4e208e2a2806a8e7f9db0d1f2070b8335d8de99

    SHA256

    0d869411da6b1e8d49fc9ccbfe8bd281edbfe97abfcdf86a22f14d2cf7bbef6a

    SHA512

    470c69366f79b0957f26caef173d8c2940c82d25d26aff902aa9bcc61f1b0c5d42c76043bc3f8ddd1e44b16899d97c465b7e928d3f9d75b1374b37c543cf296a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a0ea8618a9f2f9068028022239803aff

    SHA1

    071ad0f77224b778825966bd34cd26edbe9a0c0f

    SHA256

    feaae8cf7935520547338ec20b461f3b3e1fa26178a3f0da2def9e0bd12f7f6f

    SHA512

    6414f1b4c6ea61c0018a04dce2ecdb50a4ba58eacaf0f6c71e2d8ce5bfd8464e8cd71c815feee76bf95bb59777bb63ebd8970455df8a941c5444b8a06ea5aff9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b24e592c656106cb9a5d92dddd432c46

    SHA1

    9cb4476c06d55396bae6bd6417ac9f9b7566d7d6

    SHA256

    d4f123969224079c9a43ca2c6ee275e5c6fb12bfa3b748486dbe461f9caf7c9b

    SHA512

    2b2253e84e4c1482ff9b38e17405dc0c895179c08218c587f553718fa6a4ae4c43cea1ee7594213cb3f3ce2b9f5b73913cba68832def45bedee195206998e182

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    6bc2395bb6e68fa5e9aa646d64b122e0

    SHA1

    cb60f75fddee0018d32d7d3ee75a3655f8195b39

    SHA256

    b94fb3f93cbd487f5abb876a4dbb93562758b41b6fad324bd594a31577512329

    SHA512

    c7de7e262c5d5ef7c28d222d98968082c35ce6fe6d74f2f2d76ec0c02c91e3d4da2a9c3f8db8522f5cc229032d21c1aa2b6b95a3dcef3a5094b411bea70c0f4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    51128342d31388dbdca22cb333bafa3e

    SHA1

    8063d7fdfc315ece57b2afd1c54d1fd96cc15fe7

    SHA256

    d20f3f748c3074ca38ddb0f95757366a6b5916fa483fc4e58ee11dd484495b20

    SHA512

    7defe13cba0186db770beb0bded2ba3c404fc27a0fbe8369510d7e30aa2efebb5de6e9f0bfaee4364ffd026f8c3d29d499f53c07d9e599d77dccc75a1c390009

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    1968f1e6744e8a283e257c08900f0687

    SHA1

    000e221cc0ac24a56223e313dadcad967a4f5c80

    SHA256

    c2f9490fd1b42e1441341d03593e0c959f26cef670b8e7ce4d5a3987d30a7a24

    SHA512

    70f6d3905bfdd737a0b498b997787228293f306dd6fa50628d4b0bdfa43df340f25eb69a8e9fb977eb3f2488f219242589434e1fd652d268570f77610b0aaad2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7c5eabb5a3d37e16021d8adfc22ca0b7

    SHA1

    92303f411e7cf82db5863949be8ebbe18d166a5b

    SHA256

    8bde51c1b1fff02967e2a540761f34d6cb53a4eb0558d6b277a5b8a70e7559ee

    SHA512

    a5ab9797bb62160380928c5623ffd8ef383f5d82d120a647d74183cfd5ea9fc5eb88258cf12fc75b16aa5fe31572b57f96318cece1ab94db5c17b43b7d8bb221

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    92cfc5c996d74dac6fac656c9c401dc0

    SHA1

    921d4efaa753bb265ca41ead46d0ee0ed4c107f0

    SHA256

    3eda48ef1426685840feb25ccdd2a81b2bbebfcbd0f8fc9c90f346bd974a4fbe

    SHA512

    58b4ba9a0fb886302b1d475f4425554d315a9031ea6f20b7009d0a6d66d34cb51d30eede72673c0558abdc2c07c029a5b9fd4de37fbef0da1aa0792503e87224

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar1A78.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a