Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    132s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 09:56

General

  • Target

    2e90ae3524de459d2d50eb2d4362bf57_JaffaCakes118.html

  • Size

    463KB

  • MD5

    2e90ae3524de459d2d50eb2d4362bf57

  • SHA1

    3da5da13d1480ad154ca727bb65a3eb050014887

  • SHA256

    798c5e09f0ae3de8c1653deb279485b062cfb47700b3e0f71f6cf7c8c27f006f

  • SHA512

    e1baaab6467ae1a17a3bb9b1d750e97eaffcb3284e867afd144333ae075ff7054051881b5c4e3ed466e865e461c07571b1fef9ccf6797a09a72ec49bdc687571

  • SSDEEP

    6144:SWsMYod+X3oI+YCHsMYod+X3oI+YcsMYod+X3oI+YLsMYod+X3oI+YQ:b5d+X3g5d+X3w5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2e90ae3524de459d2d50eb2d4362bf57_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1044
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1044 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1972

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    ae62c79fd315f671e6a386cf6e8fafef

    SHA1

    906e517d9bc4e5a03c34f6b5b2e4dcb947520142

    SHA256

    94c351f8ee3fa58dbac593f1dbac9a0d46e28c9cfc36961333c2911c3d5fdf2e

    SHA512

    8b15864037db861004854c02cd572ffe49d5a6723286c9e3b9a418fb390168c7c9af5e188d1fd8447137a99e577a8471be45c8f175bfbd44987c5c578142429d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f88efcbe94d3577eecdcf3a362d0b58

    SHA1

    7fe420724a860f07d33358fd0ee4cd4b3000c46b

    SHA256

    6f07e4c0fe0739b526c48234bc9612c07b1b077c25cf3374d4b1a83ed02e30b7

    SHA512

    64c4a3c768f4004dd17c9e7dfb2b25237cbf6f0b6a12b9f25e604a8ecb57610759b9ecfba0e8769cc30714c9d0e2a266d1a43ae4c39d70d8884f62d0f30563b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    779986d1dae746999bae784a6788805d

    SHA1

    663a68abaff4131810a2c6fe40eddc8a9ae33abc

    SHA256

    fb61ac961420d0f1f295445d91c8c4d15f9433f8e2453cf215016ae8054f48f2

    SHA512

    0c82b1f056ee37dbd7ea29f319621544e2c2ed421af167e941c7c5fadd184a3ff1a380866b9a990caab4173a81e4519eb2e994441ad60ffd9fc1c9f46ce1ed11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0530da2ab0783024868c984488cfd8e4

    SHA1

    f6b0719a5614fa29fddebcd9604549babfd473e5

    SHA256

    962ca2ec4935bed9a37f9bedfac30d2a85c951761643e8d8a13e7d0c8d402f5e

    SHA512

    88637d76eb5e833816fd2232713dd46fe298799bf1d9b14dc8227e1a397306829c80ca785bc7eddc85768526a195bcb8066d49e582f86a1cfc33b034e2afbb11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c00b9ecd0260c68b4be52a5f67282ba

    SHA1

    768d70963f682ea81c7d770ec605ce393dd00dff

    SHA256

    171ed9d9e47fc135dfe370dbb45de105b4f68fb66335b5b460e59a80bc17cbc8

    SHA512

    49205464510c8fb7922e5024b5cb1da849d43f6731f07a7c4f370e71f3f071f67c570d18b878334f9c3559ed121e838c5cb687026c3998cd9e1cc7b929551e3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21a69c68f3122a7d7c033345e1ba7b2e

    SHA1

    4b960300e3b20eaab0d4734979df25143236ecd0

    SHA256

    45b181fb0a8088fd57dee82a713a724df6cd9f1d0746a697050a573713904050

    SHA512

    aad91c7946a5e7263b49649a410dc9b1bb27c29cbde44ea0ad188333586c87e0876baae778ab1646163b5ded4fcdb3fcf56b0ab136eaca20208a5b3b823df203

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7af4ead1c15c0c817c14dfcff4a87dbd

    SHA1

    dd009f6822faba7ad0956ca0fbc7fb1948b0387a

    SHA256

    5e8a1887545f71b81ff529522a31508e589743fdf4af7380f045b634a914a7ef

    SHA512

    9c96c1d75f5cd80636bf8af5558c68d1cffd385b722c2b662cea49114b11605367b773bd23b75ccdc4f2e8e986d7ecd2f4fcb4f26c2ec92782c9bc4476a00c96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08216c3ec5369f9f0f809917074d75ef

    SHA1

    12c61336774e949b46f6e4d3c13e3a725d22a8c6

    SHA256

    d442f756554b7ee6a24f87cee35bb58b79e5c27aaed2cc379be7376e780fd18d

    SHA512

    a5eefd39e46c7a3988994489995dc2d47df8cca05cbeeed7f3d12944b19ffd50e9df5f3836cface1df70f93f8b61bece6271669bd3aaea00a504f073052cd700

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    084942d91ae2f0bc5c8f8d50266f770c

    SHA1

    8797ce5812abcf41d81564ef89fa37966a7bc9d5

    SHA256

    c5cd029db9c8c6cfd47537628dd5eee3049f0ab318d58ca7e00e8f508e0c9573

    SHA512

    aa3fb06f610f5775080e27dc0f876edf2f85047ba16555a993f38156df2cb6f43fafe94444a9b7fb786d8c9a3ee9553344124bc642f554d6c4cf7b538d88a5e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc278db604c913a36832159beaeb9d3b

    SHA1

    766d6dcaf8b4287fbe7da69028301f79ae89df1f

    SHA256

    847a0d9e54672e0969dbde392740e615657983e25c21b934b7cb9317641b5a31

    SHA512

    9c6d2633c6b2dbaa97291ac5b30b004858c9e847e305adab556ced64c9baa14ba02179fc476d7d8d61fb3ae85d624cf88944a60ccf7418895872c248c6816c25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5c41e9322cafa7fdb350f9d4ef65508

    SHA1

    954c3d3ca8c26c93248eddbbb8da745194ec74e2

    SHA256

    6d72e945976c33be736f8a991a2877d0dc31c8be4795c77ca691db3c3d1930ee

    SHA512

    5da15870dd00dc93d97cbe89b3beb6d57d3a0bff9483a406b5a5729b58f495744376e32b442dd75a57cd51b09660a8db0091ac15d94f19cb6c74292165763169

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ae252e3d76fea827ebdf7bab8dd5078

    SHA1

    fe1dc136ac086094b25bb47a3639fc274800b051

    SHA256

    43cc89e82b631e1ffb31fbcea0d9297f624a71a883e2fcb50824715b34a33560

    SHA512

    4a4435be47afaa622fb82ce69479034fd2850c4536bf21a9f9a1bf6537b3edce4f8f51160d21db0f3a44503c123854d32f229444e5c96ff07ce91ea56236f654

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a0846a9f743cabdf3f6402a89b75d46

    SHA1

    709805e309cea239681130847bae3c80f1711d56

    SHA256

    429761e28dc5a7c058685888d94d7f27063a28d49c7d575fda210c512124d7ee

    SHA512

    b0822b64f47047e6625892349f8d770907dd9dc1eaa8a0cab6e46e5b267d8e2b284fb0011f698408a7abebfac78fe75059541b0de7db9850c3d487adb0c2dd00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f75a4c64cdc1d98f78b1b8f69264a479

    SHA1

    58132639de3a4866440d5f0c3e71c513c333cca9

    SHA256

    3c4f5b49196ce76440cfb29f1106fe72012f9758313f1a62bfff2a3486a113a6

    SHA512

    d24794cc564a53ee44bc4e51d9636a40caf53cb7fc73705184412d0f1826ef2e5fff879e68a1ef76e5d00472504d12ed0feff9c9702c9c6674bfc85e2dd6459d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3d73261d0f0f6983b43724ecbaebd2f

    SHA1

    2e0fb04affd6a3cf4cc824c0dbdcb46a76df283b

    SHA256

    baae93d8a461676c0d7cb92e5372fd240fd6a481b1032cd691f3a4b8b66a39c3

    SHA512

    f87bdced8605f6baff76605f2fdc4a133391212f05b442bef453d2b95c1dd223c933f047aa235382482f42e401fafacae3350b868bfd9a70d94c9a49a9397c80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78adc9760d75fdb9fb5fee137c9d6c09

    SHA1

    cc53d31c32eee365eb716fcadacbc2bdc9b426ef

    SHA256

    e58e4d88b00e78a1f20052eacbf878eb71a8077a24e3f91b1bafec3c1d41d9f5

    SHA512

    6228000bda7d21fb0a1f3f5872c98e6d74a9969b10bc7ce26ede5366946bd60023c09f474174afc1e4129ee06c11ce0c49b89d1398017f8df77692f31e5b7339

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99e0c0046e2e61f3536d849ac274bf97

    SHA1

    c3c4fd4fb7dfeaede6d2d79c2c5562a0cf90567c

    SHA256

    77ea4ba7bffeccf2f546b1cc1b8699ba01a83176d81dcaf13e5b0eca9d198c61

    SHA512

    860a0833d3f4983b1947f0e68c9669067fea4d4c71310acc6aa43704fad56c39b0ea77c2bb70154357a053f6f022410ab5bedeb7bdbd33aa93928fa9a1858620

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5fff3d64ba8bc49c478d2d7c7f43f5df

    SHA1

    3acc89d31c23625705dfdbf2dacb4f556e619b31

    SHA256

    b258728569a3adb5ea2f0950836c8c4b936c692c809420e7a965fdc640f0cef4

    SHA512

    7554a583856df33036c0a7defdc0c2a4b5e39105b20915b90112923e3cb1605f46f400ae4bac67ba6b52ab5529c5bf281d6a33ab1793dc40c2ea23d32963c43a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42ea21e0983596d6e4d5f7f245123cc8

    SHA1

    3ee2e69e99a54962ddac46631661db08a622e2d9

    SHA256

    5ccf3839d4d55fabbbc6dc49954c6b13a9ac0c0188987dd9cc2dbb3dd8e2f27e

    SHA512

    ab6d71e60f01085e0b9e4644e4bb7b50a3cbe3449f4879fb7d7cbd2b4e3fa997d8d2805b7ba1600ae68020b637652e53bc12a531dced6a20553af2606d5f4132

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac1b697b94e45ac5ad257774b08ed9b4

    SHA1

    86b7eb49ff4b081bd4303b84b2cf63aba9609f81

    SHA256

    1ddaf6f4f9832dacd5fc3ef8dbce6acc59e86501d4340199e112e96372fa58b9

    SHA512

    df933ba962e9175e2c73d108d77a77d4691b3afbde6da8923bfdf7fcedaa933c53c6e281e02747008a15650fde05990c3a6d8f08bf29e799364474f9f1e223bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    7306d9e9c351d2f86f8a003c46ca6fa5

    SHA1

    f7b056662d895b3d2a13c7d711b9c5176b66e5e7

    SHA256

    50a649d3d383b9e8973c0f3f72fef0825f1faf0c62b14ca7eaf4ebac6f0f1edb

    SHA512

    e0cf7f1fec746aa9271df545fbad71508bfe61b73f1fcdb4f86a203ed40a02e94a23bcb3d4f46252a5e66671af56d74cdd3e60c6c5132ae9961dd094a7eb71bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar45CD.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a