Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 06:03

General

  • Target

    2386468ae9859ff6d3b760f7f233a48c_JaffaCakes118.html

  • Size

    461KB

  • MD5

    2386468ae9859ff6d3b760f7f233a48c

  • SHA1

    14dd6e51abfb75b0e7a2c154f0325f5982fceea3

  • SHA256

    8096a8a3c7e1b35b3acf20e419f2508dbbc662e12faf5b60feb5061ca825c042

  • SHA512

    41ba4c5bbfdb1582018158e429d49fac84f588401ad089502a77b426691632b4fdeabdc832655ae8d11bf7560f75c256565f951da465ababc8611f43f820a74b

  • SSDEEP

    6144:SQsMYod+X3oI+YJGsMYod+X3oI+YhRsMYod+X3oI+YLsMYod+X3oI+YQ:35d+X3Hk5d+X3Z5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2386468ae9859ff6d3b760f7f233a48c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2356
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2356 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2212

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    1f1d7e1f1cc95fcd82851b512435ad95

    SHA1

    2827a8e757431cb527837eb665e5d3ec17f4399e

    SHA256

    73d963a86b3f8c16f5d1b068b3ea6044b985474ae3fc431a36e8d7775f52e223

    SHA512

    dd08cffadb6be63f8976d6047091d5b6256912834102ec5f1a271ea44776debc3d26450f3e75b3fef21fea0f5ff0f30fb546a6feda36b0547e53165b644a892f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    68707679d43d60676b10a9726ffc17bf

    SHA1

    dbc606599112020d38b0be23a6d266d0c8a9ff66

    SHA256

    10cdfaa9484afefa14b9137265e7703648bc9af24fa9d640f7f8f7f4411d8336

    SHA512

    051e3d5d824080a792db6901dbaf0b70d3f707479967b4f9dc8229b03ac4ecf626a3798833214578313d3d449b174b8ddecd8be53ba0daad14de99fad36c03e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1570457d300dcec4483f1306768ee539

    SHA1

    522f920573f7286d957ed879f0e187037f03a0e5

    SHA256

    e059429a21a558a5f6c937f1bcc53038126bd5c1c970f125f9808762c6368485

    SHA512

    2f445b2d96478c1ad7a5ffed2b88c513f599da7bf1f6f2f3d8c6bf08624f98b0f069b005e86d0944ed156cc6f35e6c04e780a0912c3a07f4d09a32fc3cb56318

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd570276c3c42513c505ebbd2a5dac3f

    SHA1

    0f1e1e8ab934e562326fafec48e02ab621985e0c

    SHA256

    7ed495dff82a7c3eaa0fced0109996da4053049ed6a4fd39bbb3e63d716de788

    SHA512

    163a5ac1c68823b62c54af934df23bddcb4a28ee091f0b17aa4a0045b5e9cc7b327cb42e50528f5d62b8fa0692b7fe2f03a518f8bef8ed2e6f06b2142329debd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec83abf1d8fb43570bd52f74b9f7a8ea

    SHA1

    69274d612d24a13c3ab7076a41f611d15205fc17

    SHA256

    83b848a3b715af536dd8e956e77551ad6d986386617c99b5b5e8c5911c4c9225

    SHA512

    3009560b0bd821e6f99edbde4844c3982ab0a35c38cdc5cb0a3e2cd81508cd3aec80abac81bf5984d0c2e0f3c7fb67c548de7948a0f570f0896b6640782869a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ecdb2c21f802b5c354bcdf2b8a08941

    SHA1

    1c343376d0e8acf8ed5a8383d1c4f3d53f01d71a

    SHA256

    bb46d8e54e357feb13bcc8e618c5840762c1854deea748f4d6c3a28846ee544d

    SHA512

    dc51530a4564a15a42df29249bfa1eec502e9d6952d8027b8214c8bb25d88ee09a7926ea94ec0b79048577458353efd4ffd71202c88a2551b71ae249101e21c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ddec8af7002e2eb9b792083a5576c9b5

    SHA1

    bb5946e9f9b8a947d214eebbf6880bb14d8232ec

    SHA256

    d2bb5a9edde68603d8c32bf4192f837e93165f4540c8a2f489c8bdfd61249c96

    SHA512

    2f2afbb998b79edce576219f9724c640ce82cdd010d59a1e6bd80a52abc3cccb72d024bac39be1da32c3d0f8c9ce3c6e095f4c2af2156e1adc9bed0a5ab84405

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a3b83ee66ea809eb501305b46c15440

    SHA1

    f3a47e2052f53ccc8ca6e84415fab2c71342223a

    SHA256

    10cf7047f32fc211c48e0e3c54bbb170107617b49c5eaab3a3f6a06c72e34c68

    SHA512

    1459451b087cdf852829429be34ce20a35710796bbe77d47395b83d02e523b5a2651264526a098122a02743bc80ee474e0925bfd87400d482e3e114aac47a1ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    727d6da6b84af3c7e7cc41a714769ddd

    SHA1

    537d7ba859a19dc3afa5b0d2820c827d7636947a

    SHA256

    fc0abe346d6a2a10b05318696b2d2f8c4ad1ad374201cb71894561509145e2df

    SHA512

    67f8a3779188266d9855c9ccef19b7259b2320a08b2e730001f57b3fd89200cfd296ef5dddfa99c3e4c40a37c53b0917ac08d8fbdea0cc280c0fe2a9ca21a013

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d244afe76382b4d36e96dcce7b0e30e9

    SHA1

    ff79366d64b58e88905ea979bcd1181f24e160fc

    SHA256

    3ffffbd5ce82b7e109fb51c2c8e933122da98ffc884714ae2d0b23c6449d032c

    SHA512

    3528b76ff9d9a1547b4d549ccfd05003b38e42ea03aadaa2341b7ec19afd9ace320ce174994c14a92e7b20244ddf071c0dd024c1d7e0d6e25e87f8abfd03711b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66b6a0ffd1fdf1b6abcd95effac6c4e2

    SHA1

    2dbb94f10a7d70624664aa29c555b06ed795f014

    SHA256

    140276aa19b074057a42f3ccb0b076d4890b7142f80d2023d523039d3baea519

    SHA512

    4f87a35984e8e2fc3648b1b20156ce2944166306e94f39bc011c06b317abe73de9f0afaeabb48ac7120d8d330178949d9603c081df532af660e711a63d8ee53a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c62d2a109083855a9b19deddc27d7192

    SHA1

    d02d5cb59a557c69b93aaae02b3323d377c979e1

    SHA256

    26ed125c8fb74430d22aee54a60dccf70ae3c56966b50a62a393e59acf516e04

    SHA512

    30b03d64987270a6ac89deef91c662a4622bb10a712c592725ef9abaf07755ec21d1b2bc74ff51f5c8f9b054094573ccba63830d2affb4355ba6a2c43b24a875

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c627b02284ac4ec914a1a3e1c86b481

    SHA1

    384498bfa9c191b21ff9715cc5b8b5e1a627f5b8

    SHA256

    4068dd671375883595f19a8d40f8babc7f60a0adaf7704aad1d16f74776d3d7e

    SHA512

    874118822461cfe73cfd7d53ec17a34091af62c718ec1a42f52a81b231346db1de06c4ee04750e4d76aec536489acbac45c8cd5b54456f4ea29095ad98ff4d28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    720fbdc21b4b0e9a0e96e029796735dc

    SHA1

    508314f55a9962b15efc06724f9abf9298574bbc

    SHA256

    c8d250864a834bdc1fab2a2dbe76a6da144ee411ef048c4786c98e33c698b818

    SHA512

    ce8972312ae491ef94a01e42f49da1687d44c9260001a9bfc4d8a8a750d102114b7a8a5b460bf0dd5b057225e1951135fac203ceff8bb29aa2f4177af83f2a56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50db8f9faa2dadf3dc7a6bcbd6efa593

    SHA1

    fe89624609e1b6bd5b4b0bba3690c0560cd131e2

    SHA256

    8600fc499e151e96732dd675e092bb16a0a1131e0e0470c82b51a4bcaa59ba18

    SHA512

    18bad9c0138fd6a913d1e3d72d4922d8a87691c05b639b5381d110c3bba59aa96d917b9977e3f0a825e9af7ab2324641efda861ec8a76b407d650b9356550775

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e727fb418de9c6af0e34158bf7a7c2d5

    SHA1

    0870d40c9a465fe071e6c302daa2ac4de530a37b

    SHA256

    4ba1d72ca7cf067f0fef1b609435e30c90b8ef07098310d2e9105e60f93dcddc

    SHA512

    250a2a30eda96846392da6bade049f570da8c90bc5e84a13cc7568373cf2a5900573177a157b98869f10262e54f4919a6cb6da2507747d635c2187063a2f4b21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a86a768ca735f3ac4d89cc85d8cc4c70

    SHA1

    a8153d5737f8b1334d76fafb9c6c9632d83f65fd

    SHA256

    5b25ec915f65169ac75642894d7033d271b0f178b65e6f12e317ba348b68df33

    SHA512

    e76067c809e3fd376a803578bdc9148dac2e0c70679b404d61beb533b64bfbc983f35d9a9ca711395edf11789999e98c6c12296c3c912c304af6903a4444f349

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f299284a1d519b05433fef299f267095

    SHA1

    7a2a1d9603a16107c839772b73435bb900b33ed3

    SHA256

    5c17ca85779cb81ba94557c23c38daec641d5d67cc3e5e60c14bde248b2f81c3

    SHA512

    c5a19a519737017ca1021598597f6b0757ddf3961138d7bc0342eb9468b7f4d75f51b886f31a0df648899b4db30093758ed26d36a4e0f5e8c4628e06edc7077d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43af519f14f07f1b5ce4d47187943bd5

    SHA1

    c4d74e973105bb4d615de34c581a8fa9ad875ab2

    SHA256

    7ce19cb0452d29871b16647502bb5c58c242e5ab7afa46fbeba6730bfcec0b22

    SHA512

    f2fb98b871434de819087711fc8656244cd8244b2b995e71acc436f46745489a2cb34269c967a7be4352779cd06bea57d0c245de8c0a10c1a8d7d3aa675cf1ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79f88476acb2976e3bdfa091864e04d7

    SHA1

    b186a53ee41cc8345742e6b067b3ff1d9abcbbb0

    SHA256

    36ddf00a443656fd6523bd0db6b582927d686271c2d40ce1cb893e784b8de612

    SHA512

    5e1fdfebcb429d8ea911f65db8cb98b57c549dd961ae18afd492beef05e205f63eeb85d2cd20cc304dcce9b37a262cbf58d9d89ed12a33ce1f99c376618fc5e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    f733f8fa697e915d1abef6d933fd8989

    SHA1

    32b64f51e4b1e5eb79a54f074a85cb5bcadc45f7

    SHA256

    c6673af0dd1e8b25e9cc9f6e7852764bcdc1102160f3fabca3e9a6356e7ca812

    SHA512

    ed7bf30052ebcb5716abb0040991c3d003ffd8d4378db9f2ae3c43ef0ae3dc58b613589fd0609dca03494d7434324f7fd66b49e4a78893bbea01c6af31cd48ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar3A1A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a