Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 05:53

General

  • Target

    289578decc04b4412bb99743a78869c3_JaffaCakes118.html

  • Size

    94KB

  • MD5

    289578decc04b4412bb99743a78869c3

  • SHA1

    89735237b850bde49acbb318aa5828c251496d82

  • SHA256

    88a3e130fccb2b41eded774d5626d443b3c6d8a280c87a023b05082cf9cd5890

  • SHA512

    6854765c28e0be345495cb799d8d78246040ec55b269494e272f1579d9ebb0c06b9b42ef61b8a09540c81c693e515f34c3c69a685831b2748e907710ea4bbc0b

  • SSDEEP

    1536:WMLiNkavdf/eC5vce427L01FLSuzXELqY9ZYyriBdkrY8mgHC+qpEyW:WAivmhBdkrY8mgHC+qpEyW

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\289578decc04b4412bb99743a78869c3_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2040
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2040 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1972

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    616d3a0bed7936822842b629d46e9a67

    SHA1

    60fa2c2c89a29154908a6978bc73b2e36de7a5fa

    SHA256

    06d95532d7e2c2c44429519df02489af9e2b1b658251a9d26dc7750e237adb99

    SHA512

    b8e7a4dff95e6c66028c55ce76d77c346a0f53a6a518569569b097d39d34ca3c6640c3c237f27ef5bb2f09e08dfb2740310a200e4b566d9691fc3e24a8bfd8bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5b1ac3cc7a96ea3b48ee06740bad11e

    SHA1

    7f1ee4e4b23a90fb6dd456f89740ee207adad341

    SHA256

    9705d26d92de9df057f96ab360360a70053f98e9da2b1ace40be45c1bec83df2

    SHA512

    1b4fec922f8a4767bdfb82c924a34776006b021953012ecbc7a968486ef2fc7e3f96f312883d0a005005995abad0942b9b2899de8d5347d9bec3b753eb8ddd73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fded4c0ec5ce956e8fb412a0bced466

    SHA1

    b0060cf5e480608210e49e952bcce19c433b793f

    SHA256

    8cf2e248dea7fa6ad6d41a8ab78948434eefc06e4b8c847421fe460463d0c5b6

    SHA512

    4d8bf2a08dbe36c93af12befb706e5f1a4f704e8ed5324dec0a4540b2a755a691756d7063201e681499fae9cfe1ff89418b0353ca58cecae1ee83b584f4d88d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e80e555bd094b46aab00ae7c1ee0b72a

    SHA1

    a5ee7c7d81c3a80679a06b875cad5f4042f4e639

    SHA256

    a2b4b0c9ba1576ca966b9d87b518ad3b4f43c0d1a7d9114d9e505f6bafe40cd7

    SHA512

    4f687c3740fef3299894cb720a4130cb2425cb0c181916e359b598a93c9fba9af47218979c9d77f4c28c1a221f85d484f0a3ab2fb44f3324a119bf47b6828dfd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0fc5ba60970476521009cb1ee8cf470

    SHA1

    1372583265ab9ceb8b2a6af983382f17e5637c60

    SHA256

    4b863ab8c6d237c45be6bb97a622892a8e2437a2dcac29bc52d695b032d30c16

    SHA512

    8e4301a361ad2776a16a9c28f3927647d5cd8c0351021b19641e37e8327ab43b60969aebccba8220e92dac8cd22c58721f32531e815cf94885ea629219b11053

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fbc34af74b661e5f25f9e265ab406bdf

    SHA1

    f62979dcc6f38c85727797a869eeea2ce441709b

    SHA256

    f7554bfef9f881a66c0e0527d4fb52ac677ad297efdb36417aa03f290aded064

    SHA512

    8e9110c46cd7827f480fda67eb9a9890f51b5063ee966fbd24f518be5b9d444de68c986427f5704633594caccf7f9c9ab7d0358f30aef3575a977189fdcb173e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b1ead777c502ced0328e136314144e7

    SHA1

    1fd6966bc3a0b1f88a7f8c8d96f687c7a600c10a

    SHA256

    a4abfeab2f65a5d22228cf9a27e379b9e0059a31f8e5603f12acb82ca915d43d

    SHA512

    f35fc3ae96d94da260a6d52337862ec8909b926cc3bf585a60a8d098811f4ca8bd6c6866d0d128e236ffec79b7bcb24488cc40a0ed8c0b70f1efcb4abe7f6048

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2f193c4d01cfc90c696bec40c5da30ff

    SHA1

    a6d9491f3404828de57c4c55ad208b9f7b1bfdf2

    SHA256

    6a4eb6850f36cf6223792774d520b6291e4ecec16028406daec9e619f57428c3

    SHA512

    23e2c543f171e8c18eb4468568ca1d9021094c54928f2b81cc63d21716914c12732af567b5fcbf154dd5ef0e5f975757acec22c9f45aa4fbd184cbf24e12dea2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5b728e050fa5fa95e8364e48daf8367

    SHA1

    0d944a925d7aec67a34b306167d6933bfa7a8711

    SHA256

    3aa8a3e33b15fdd27ae0c1a9dc28e7fde3629569fc96c4d5d5f6be5a0f2ee15a

    SHA512

    ee7c11e512ffaf4ff4eeea1b97e0dc2fba9eb6eba4e5b3cb56fb9b2343699daec8182843501eb9da9306be72521445a3dc165a0988596a7dfb035266e8027913

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18776eb811981614ee2339ec14decf95

    SHA1

    213f1c1e4d3ba2b2ddaa5925cfe8729377fcf0f8

    SHA256

    b539570f5bde100318f95f8293cb9248f0da59e40d185bb7caf3e594ff36a0df

    SHA512

    1c254f6dad1c9b6773e72e21c98cf75258d44b22cae4da1b04cbce683166087b31eae0b19e0175a7d7b67eb504e10894fb4ebfeead7b3fe8654c3f79bfd53095

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11c4b796880e46475f0513ce5ba63e97

    SHA1

    523e7a3ecaf57e314753da23d2ee4cc85db7591d

    SHA256

    fd8787849edb3beb841b756f2d3b271dfd951d17df8a6fa3e6acaa9d68f04662

    SHA512

    033f7aae61efcfd5b47f75d75ed57c3947ee6691fee921deb88130d777d582923c243a96375ffbc510c06b2257f6afaf2b8c43709652bb99567193b5a4bcbe7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f43a8bf7881f76c6e4ec29e0937c1174

    SHA1

    be3ef62cbc2ff637937e2159154fc5bea2307980

    SHA256

    1424ca0c90e835f526165dd975b259826343a68649c25bfccf4940a76b77f69b

    SHA512

    98db869139a7a135b699a324630f7a1ef2542ab19478efadaffeec81bbbda95878d81bac9681920469ec360843b0b40d25ab932355c828e0e3e22a95e3bcaa50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f441194fe0c2d46b74eeab1e6f19ff85

    SHA1

    072d5844d4e542a47adac6d9819412a92c3d59de

    SHA256

    38bb6a295824ad56ced1aa583b2424906d96caf1df4f8d59295b6cb43064c21a

    SHA512

    2f2772dd9bd1335cad157ee5d28afce38f77f883f3cd66b47c12b5f9b613790ada6415f4e0a5b66df3a9d5bdb94c8ace9a439cd9f5ba095db4242e1086f6f2ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1fb445bba8d2e252e3f311605b7dd1c1

    SHA1

    32cdf5892cf0a37cd67cd9a2a2cfbf513a070176

    SHA256

    6cbcc1e9f5e78eea5ed0dbf0ec2d9be88786f6b5f2dcfd97e6690097fadb5cd3

    SHA512

    33c4077439aea9d6d5f78b0042a00ae0679997e201b81f434918ecedef025b23087cef75eec1f94f20517fecedd5aad9f88bbf5ca6d4054409d3ca2f5f7ed5b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9854d6d1ef6cc695420207bb14c0eaa7

    SHA1

    bcfb4b772169c5fe9fbe95193612df75cf7e009d

    SHA256

    aeb76ed3cbf534d2eb509654bc59eaca24630ae9b74baf044e5dad134a221243

    SHA512

    195181d549d28c033ee08d009371ff46b1ca21e61307b233440e5c5f45bbd6995806c4cf5a56453526dd988ec10289cad21fb4c84189af5947ea7115b7bc07c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7649a41ea67115f6275703e8541f6ee8

    SHA1

    385ebba5bda3023bca99c4ac3f3d2bc9fe1e94a0

    SHA256

    028ddf1b0cc480c27afc3e2a3dd2a7a3f567c6fd1e1d687617dd0fc7191e110c

    SHA512

    9efca892da12100bbe22e2fa2b20372c3c91c280f1e86c967727335642ff475d18bd817460f126e7e628b6af35c031ba1a9a8a46417111499548391a8dc6231e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16c0ff6f47e2451aabb4784842c48dd2

    SHA1

    16920cefecd4af6cc189bbc0345c0717ac28d265

    SHA256

    0bf2b4c3127b118dc4ca17756cbb6faf9a9baed8a2cb64ae9fc2e48e167c87d2

    SHA512

    d35c1cd37d58d8bc51eac9f507e50aa2e0f40ea4c2d1cb447a209b74bbdbe7bc92f50eb5765922ccddbd526386cd223b449ed0c4b3f016b0dcd595aad5739046

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ca6ba52e041774aa1ffaa9f98e49b16

    SHA1

    c6e737cdc2b7900f396420fa8a76663539596e8d

    SHA256

    64914a21083a3254ea92ccd018da69f38e5430d9ccf7b8113cd703d86b4e5784

    SHA512

    830ceb58b6b1b885caa53acfbc3b6c4e134fd78c393f1c0b6062502fb3f9bf450ee95656d12abc889385b3221e58c63849f15411d26ce3863bdb50ef2b3d0e8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f8f2ce3db7bebe592ec0605e46f0616

    SHA1

    354cb3cc7d2b4a4b9e927629ee4dfbe59630f1cc

    SHA256

    639f81cc513eae119c06efff250e3e7fa8a6a90036fba546cc199ccd6589efcb

    SHA512

    afeb4dbee75e19a2d6bb2fda13964b937fa06dd5b29858a945c65fb00818805f3954bb2734c6b085872d64c9e763948ae4badc5c44c5fe514344bb92b9bd31f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4853840f0ba1dcf14da00aff1007443

    SHA1

    361f1ea97db081cabfe14cda2bc034f4a8ee5e23

    SHA256

    134d8336ab245192178522f68309b7a0f78664531c1486bf16c95072c557a60c

    SHA512

    615ec6e27277528555f70810adc8d0efac4146380bbe5769ab73cd8777e8ad23209e7cc5acfd003b17a3a15b15ae579ecaad2ba505f6c7d9f2f719db79395efc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    ba5664b19f10254138ec9b75302d1abc

    SHA1

    2bfc9f587fef5a7a71651b476b2670731f731b86

    SHA256

    9c7aef3bb288da9c358159768a4c48713106d8f22a6df21f3dbc8a90b1c90297

    SHA512

    3b94b64d11ead29c779f4bb8e1b5ef9c4208538d1221f8e1c3dbf71f353b61c0538e373e15e0f06abed60fa1ca026a5d87aded935bc27ab38be011670e6cdc58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EA0SAP2W\coming-soon[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\Tar40FC.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a