Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 12:15

General

  • Target

    29ec9f227d66d686a8138acba57ff156_JaffaCakes118.html

  • Size

    37KB

  • MD5

    29ec9f227d66d686a8138acba57ff156

  • SHA1

    1559726d958987a3862b94a4015f66c0bb9b2875

  • SHA256

    4610532f5ba0065f46f1f80b501a5fa06075f60c610c5ab7ea351aa6b2c47ec8

  • SHA512

    5acdefc775bfe4bf10da30c877435c13632c19ddcfbb3ecda7c42117040b67b450d035ae33d6d99e277a5cd4406ba0cf43f8035b8f7789e0af91afc824e65772

  • SSDEEP

    192:uwDNb5nDinQjxn5Q/6nQie5NnDnQOkEntCEnQTbnVnQOgscwqYNcwqY9cwqYQdbn:DQ/c2P55dbv6LbUMWdvF

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\29ec9f227d66d686a8138acba57ff156_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2020
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2020 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1384

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88612e4fa10343e379e98a9ed2d9427a

    SHA1

    30a7bb85c026d0d0c2b8dfa6dee6764bf0cf8ec2

    SHA256

    bef1035a6d1ecda2a68b1ae5768a983fff9c85e3ca062d3dbe66d32272d51518

    SHA512

    acc55de2847f87b3947ee06d97c23a90f9b95394a486c11c355c511955f12e19734ed785b6d1d2f309c8af2da4e7573f7598136228a31b18ef811f4408c58c9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    258f0b03f2c3c7e7706ee518b78b10d3

    SHA1

    e87f52031efc44f3852c72bc9a754b4df504e18c

    SHA256

    e97612a134460d8f06419dc1023286ebe0b16842e81fb70ba9de56fb9d14528e

    SHA512

    2d8f3db86acfbce79f7d44f58b73dd28a42b9f82667ca93d1c669af99dc3ef9d0686fdea15d6345625448fbc6873f1ad8c6492d6ec3f50db3990ee17968a0582

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a75fd70603f49006ebd2b85e6a16e33

    SHA1

    60d6039b7bc4a1281ff409005ff1f440b35c2c68

    SHA256

    f09f3081ab5598a456d609dc50ff2076f6598d75f8344516a7513c68b4cb0395

    SHA512

    79e32d0c8cf0ec08221ca2ca7127c24314c3527cff967864ed53ae0f52c90fabd84f32bf5bc3068bdd3fd4bb00f1ad4054da32a5b4cc6175726bd51d35246dcb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b63bd2003783d4fb01a957bac70efb0

    SHA1

    54ae1fb887e5a03723e71907903fb1e5f71e140b

    SHA256

    3ee5ad58ba8812c5e5fbadd65292883143b2113739162de09bddba14994c6519

    SHA512

    948c4d0e936d0c9bfc54d154aae9b7fd1e4c9d2ac2e5ee5b25a5f99d50bb55167442773fe4fffe3bf17d93eb1dcdcdeae088b9aad81b957f1121ef33d0808977

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b23a6b2b6fa48e5c89de08445d7ce0b

    SHA1

    72ef3b3929e5e71591046f841368da6a3e7db78c

    SHA256

    bd35942e01d70c5405337b0099a6c704c9ea22e67e31a77baa8afa502f667049

    SHA512

    f3c8679c545ee82e214086ea8954277e7469e1a28e1bc661c2536c6a90860d709e515cb5161daf05dddc4d30dea362c12822f1b08beda0ee52b8524a06c16d14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb8e431c4b860922d9c714df80d9e491

    SHA1

    7641521e19829b565949bfb3dd5c322d8cfe2bc4

    SHA256

    2e9ede59a3edb5f231796cf2b7b9faebcad9e18ddc225f078d512721cf35c4ae

    SHA512

    963dc3ccdc1dc1f4404a38e9bc3c2d5f6de7acb861e895643ccf2f22ba28f83707ce6b6ff3b607a244c38fd57004210223875e833c57d4bd42438efc85e3dd24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    788781da9c409c8f5f66c5726a7085a8

    SHA1

    3e7214e8c93352768a451678c41bfea1bc5281cb

    SHA256

    a38c415d29f97a6fdfb0a112a420f790ffe7b3337d3cf67f6c64f0b792af63f2

    SHA512

    f230e6eca14aa67c394420ab443031b862de52aab8c465c8f7078d838def2cef8ffd7583b70479c3dc004a8b5874cdabb36a1e28e3b2f31dec5ec24774595e69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7656fa327b431c80b367ff1bce53f968

    SHA1

    435578ac77a513c3f3eee746a4085724096561e8

    SHA256

    23fe307d9ae902746a6eea7b9bb0660e3fe18c5c3753d01594bb58952cd42628

    SHA512

    65c1f5829f9a06661a8605a78e374d017ef67c1dbb35be75fce84ccd2977bf89d042dffead600a86f2c45662d4991b673e986f500b23813217d278b0a092e9ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dff3a106975bf34ba4015325364760e9

    SHA1

    e59fdeb93a63b42124a5e8e85f131e5ee995c35e

    SHA256

    b82bedacc76f7278c7d79d44681122e04b6462683d58f53e050e6eb28f2380a0

    SHA512

    a7b7cc1cdf8bd5b16dbf80e75872edb32c9f70f302ab7763b519229b915e92f6075f21c8f187fd0949c725441bb2460e1ed10a6530039f269fe08e0e99174d5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14df6437e0fcd5267b56860703aea50a

    SHA1

    f80d40d20bb89185218fe77b63502f8629b32435

    SHA256

    b1609a473750230e5db6bed569466a27278a4d7b952093b17a5d08ff9a4def47

    SHA512

    7a877e0404f8709c21d3fa17d6187327f608d3876a01fb01ff6799aa454acdba3cd222c59c14d5a9b5e86bcfeda18cbc915a9f01d0bbfac39bc39b80f194da4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79bd9574a23f8dd4ee489b6734307f17

    SHA1

    8b733782f5c9635d0b0378ded04eead3438396cb

    SHA256

    df9cdfa23e6ed6dc9bfa6dc1cbae3b9c0dbe42c7b778d8787ee0476dcc549805

    SHA512

    bdb95e7813fbccb4815eb206787f06ca2eda8c22aeb009580186e947a8b998d83701bb150f7ff7a66b4ba59040cc36c451f8b5be57d37a5be0ead38f2174e54c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ba67abbfad2b51c98425f0829a306e3

    SHA1

    1771e8ff337ede85e1763958b3744f5d2e9fce37

    SHA256

    a32e96720999a3285cd8dff342f043772eb74b01f8ea3692e55110ee3462e085

    SHA512

    c761cd10dd177e694b6f1ff93bdebb07acabbd0626687cb99a8cc650494d85d5bb71bef5920dab6bfc711619a110cd83ca8bd2ec610fa2596485a0b520ecef59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bae7d3c47c5d84ec1f2df3efc44b3b29

    SHA1

    0e9953fc782dc25353a6a671734479b385518cc7

    SHA256

    345d06b13a82e6249b0074e6259c4275461bce3cf887ef3f0aa24eaa9453a2ce

    SHA512

    954ea65e389b851108f70aeb45b2749edb48c6b36c155dd380c565d1a508d36be2eb923f11cb8ba558201aaa88287474dda92674fcc72af63bbd930927daade9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f0c1fd32e9fe81663d246545545d64b

    SHA1

    c81cd6bf9c84398d9cf851ccfdadc6947d19456a

    SHA256

    c2a0e37edf9dcfca2796a2a3e88de5d7a6ef9ada5a7fd655d55f03cdf2bb1ebb

    SHA512

    0c5d714a91316fa39eddf35134a4d0073ba5bd45d66f061f7c40417571fbfc89c989fa21b337383549e1c3a24ab16fbdd48e0ab8de209d2ff01be4cf79acfc31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea057d53407a85e9923b8a2953f00c4c

    SHA1

    4ee0ab9aec83550ff08b06c316855d1d1b7d5dd0

    SHA256

    d9413698898938a7ea27cc6f9895fd36967aa6225ed8278770e3d4001cddca46

    SHA512

    842a94968c81b8533bc6f38caed57660b2bda265a3ee4630b170e7919abf9293e0e4e3a9166f957f5a6f20b9be09e46ef9cb44ae38fb63717e365067b9e46b59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2033d52037a02c39dbba1cdbcc144db7

    SHA1

    f83337b65f919238c9df56f46289b886b59fe132

    SHA256

    e2b108bb696b90befc465ca8a073f41f8b46bb56ba9c1d0903d856c9806f9926

    SHA512

    ba95b1b18b50bd03c15d4bc4edef5978844f22638261881d2e3086b0a85f3c5e88ad5bbcbc28895cc20d6c0962b087173ebd573c7ae9cd785e51fa54ff6ae31d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b6a12b80cf21799d48e53f168f33603

    SHA1

    2a07f2747240933c0eeceffbc3803c1dc184bb81

    SHA256

    d3d7a968469b06c24718208b014930046e8bc37d510c640bb8e476c992a01a89

    SHA512

    d5c667ed977d036b3f7b986354174fe24794b6db029936146745d720b0057d7d83e64300b536fe0301f7eed040411f23175c2ebbb295ce08b1c1c2cd30d66e14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12fdde8d82a45ccb5818d954abf08bf7

    SHA1

    1d3210828daf80c74ede349a3b0de197cec68ca2

    SHA256

    2aa095db05d689811f12f3ab325a719691a167bf6c2a78880d8be77dd1b4fe4d

    SHA512

    49e36b24ea8170ef8e80f2c02966d5bb55b4e9666a90b5fc0e87d643bf47207f0f843fe645c5164c0e69f3d1dc79c978bfe6d6ec0347e316efd469098fe01390

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    26540125a5b5c1e7e251a06297bdf6fa

    SHA1

    6bb58f3edbf31d85ccd3226ecdbe735e42d4f447

    SHA256

    1fce6f8af4c24cabea43dd99a387adfe1ca05d215726ddfaa3216e20cfe2919a

    SHA512

    0d8827e570e0559281454abed917023d4bba55870a1d96fc1af5db801c1591e61ef96f506862e4ebd1cc3d1f2fda77e790560f35558d1536d656bd67b0d1e0cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8bc56de3daac7416b2e8a10e5d1fef2

    SHA1

    691bf4b234df07f7f9cbe8a01bbd4cf18ef71c81

    SHA256

    ac4b91a4a422ee1a340e4be2fcdc87bcab13581c91ac6c1e266b40ada496be8c

    SHA512

    27bc4be2d25646c047676525ba2bce8ecd3b1dfb57797a1848df477eccbee6f9bd6ab87b906ba9a20dd0ffdeb1a7bce1a0d4a38af25d055de3fe0da5fcba8c5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60106302de35493ae9dfaaecdd2f24c9

    SHA1

    74320fa1d40013e44a2fc07000a3643f036c2239

    SHA256

    a82fc0bd115c5873e38c9bfc2770d05ec25c4ea36b12f818f15b82faaeb0ef45

    SHA512

    2eac85920fbfb6c30aee8028934d11d3c711782c5091fb4d603d317a617ecece10652076341c8cb8691dc483028f661256c3d94c27555f80a97ba47e350b98e7

  • C:\Users\Admin\AppData\Local\Temp\Cab95DC.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar975A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a