Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    13/05/2024, 21:57

General

  • Target

    3cba06fe3f24b4b3d8c3bdf9559a6075_JaffaCakes118.html

  • Size

    23KB

  • MD5

    3cba06fe3f24b4b3d8c3bdf9559a6075

  • SHA1

    1b0ea0162921e4cc0be810b20be6c3ef018797cd

  • SHA256

    9185b8fe44bdaaf7c63799a9c5c334ab9ae983f3989ec1364bf7e67cb8851e23

  • SHA512

    b9cb970c338af977c0c44c1349bf4896b7334b66bc8c09a071b7050866a2e7131426df6bf723879a53a35dbc23193a3629c9860cc3080a2f044ed3aae3ea9399

  • SSDEEP

    192:uWnMb5n1ynQjxn5Q/onQiebNnUnQOkEnt0CnQTbn9nQ9CnQtzwMB7qnYnQ7tnMYE:oQ/w5P

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 43 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3cba06fe3f24b4b3d8c3bdf9559a6075_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2168
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2168 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2868

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    0692a57eb8ec7baa7d16a9893e5506de

    SHA1

    239441a4eef9a5c4820c13000df4f39472abee11

    SHA256

    b26fa6fadf95ece0c392a71678fb41507282f1f96e1ced12ff8e8c0415ecaa42

    SHA512

    fb3727c90e2f2a1e90f4f02d85298137eea0dc6fabd9f2ef5803664cb5a2991479b284728a3f8667d92f5f2a4eb349812081cec63b657d623c3806358b3fb8be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b02be39125437ea7b935898c40694304

    SHA1

    3d6e36d3c9dc1006a83fb822fb82d615182bc297

    SHA256

    b64e5d405861d37d65e085ea9a43e226605044d9d83d1d4e6ba372a1c30a959b

    SHA512

    46046c5729d28d70735edb25f474f0df68072d4c365037213c3d5713de7bdf5d0e0b846f789c5ea1f639de54e20e794d448dffbdabaf9ca97bb923c62f8caeac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3022aa7b20c9ee6c78ec94a9be8727b9

    SHA1

    2e40a6e1a912f7cabe0b0eebdb924555124a57cd

    SHA256

    04e79d2fe8f0b1151110902c763ba6caa1a440b9e780f76a578c4103c85e656b

    SHA512

    f6412e0278970bac3c896d636c2dcb2e34b84e7bcc485f4d1b6195a61752b831e49be3946585853d613ad9b60180b159a2c809bbff27d1248066d34c4492bce8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea548b46401fb784ec2dfbbb54da1e20

    SHA1

    a4f6a6af3029231b3f2c04f69abce13fbec1744e

    SHA256

    a39be6153c64c6fba69213ab3e3f68c8f6412fc2109e3ee3ab0ac95cd414e544

    SHA512

    1696cae1df70f8667fa807f9873a13f89acc79461be0137c1773bebd8961ccf7b82cf86d64b59353c4b2bfec9d4bc2d87735fb6915ffd00a16d90ca3ef861e61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c55093610b84e2333bc4cd91754d0fb1

    SHA1

    f5a4ac02f4db7e86d28528dc9a7623ae46d1ffea

    SHA256

    afbfec609a8304edf4db8bf26df499a3595d844a36981ba4403b986d51a4e167

    SHA512

    05bd9c96d8a855682f1b601d215f873cbc6f6787b6e9237e98a06d359998fffc5ace87bdb7d83f8fe3f162b37a78efaf965d33242ae9d0daacd4b5425d8df62d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05c703b5d4e2063e7347af1b1697c26e

    SHA1

    b23153a8ee3343dc3e07e3663ac7a8e461e49bd2

    SHA256

    019efe0e203a40c95f41569ca8ed43a9b66dbebdcfe2f8666be991e18d842e9a

    SHA512

    94b4011bee09d0adeb760fcb3a97d286e9a1ec587d943da9f34ba2a359f20701e4a6944945c6b8688aa056f35749af811a6bb8e41e9a6c02e67d43490c2e1c42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    95c74de6ca2aa1c77d335a16b114ea36

    SHA1

    1e62ecb31ab10b247eb9a6ba1cbda5e764c60462

    SHA256

    e91ab74d08ce7d277b04eed25cbe36a7226df0109c7f544f9e9ff81a64db69a4

    SHA512

    42dbbba245e74cfe09f8607d4f14d417a307f025f1f93d7e48e821fb57b89c2b35de2dbd9347c86dc84c4480d153dcd2fb1490124302ae0dae54cc7dbdc503b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd13ad3ca80aed113bf65cf13b4fcfa5

    SHA1

    84c85f32ebe839d155a1df1cc0e75eed224d3e59

    SHA256

    1fa7c0b698922ac75f3380732a0ab049fd07e2c84bc028415118134c6d44ea63

    SHA512

    3482f5418ab779e06f23278734ad2b74a8b20bcdd531b5cad0544431853b35624cad60fa810d6e61dd5fc72d2f91aaaf7a929778bd76a9cc4e1f6fc405970caa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e7814c3dd586da040c9e341042bfbd6

    SHA1

    c9cf04d41967312af9b53008d4e63e804e3eddd8

    SHA256

    6bae3bf125442ca0b1e2e3f1711a3826e0620af07f94159a97ad31660b5aa9ea

    SHA512

    5b3f1cbe5523a10bdb5f2c67e806b39750203f2debf5227b9ad5c0397a37e6a563571c3432cfdaf9b2c834e982a8b901055147f91b595b5e7a98c7a554d3749b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    774eb940aea7e104eb4ed2d2c6e79372

    SHA1

    e98f81300904fe89ba42ff4999c968af35b014f9

    SHA256

    a9e3dfada1a8d10d05a26fdbc61d167d3c96da7c72f6ec008a9398a865bcbf0f

    SHA512

    3835d6511f3053830803fe19dc338cbb5a45046ce1a96f3e9b8e384d308b068db576c8c0361440a98de0e493daa4a7b3b57bb78c06e00c62da517780d3f9fa93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3a0003784527e214f5b202109cb598f

    SHA1

    0ab671fa5d414ac7bc843cf0f0d49d306d258cec

    SHA256

    52bf4be6c22cc54117689889b9448aa3559dab5f80e3ed25a8bc3d706bcdaa44

    SHA512

    b2531fc4692152e474ad092344eca375e2a6d18a578452a0ac6e8f61d1c21a3bc53777a8f4173a3a74af4171bbbec5d8aec3b764c60efa0ef478d65b240abeb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a1d8e2d4c68f94b4d18eaa90e240dee

    SHA1

    92a4bc622afc66c1a0de73916a0f34f8e221439b

    SHA256

    1d1102066689cc5ad2f33264545045f63fbf997c4fbf5ea5b2ce8a116b17bb9c

    SHA512

    afa42824d453b2273d6ce2ccc2c339117467c683086808c858a294b174e6829e298d4626b993dadef76764034fdadb91b24e88bff18ccccbcd58acdbf191de10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5b07a6305a811ca6001be6c1b58d5f0

    SHA1

    e527f7acc4ae2af0338f1e7ecebeae5e9543c8bd

    SHA256

    6a052f7ce02f40e0c17842c66e8adc0b1d85c44d8936447538708467a530d484

    SHA512

    800b7b53fbcc5e44a6946efab65667edee87ab46bf40f7a0701681dccba4f8206aa468e5b5aad4d83c9a7652c3557476cec87d6bb1f8213e1bc9a6368cd91dd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bdc5b4a6ae8435c775b0a9bc937991d7

    SHA1

    1069383763d57ce1640047e7a9f7ca2d9232bfbe

    SHA256

    0741658b93d73aea570b7231cae844078558dfb40abfe579f6849f40aadc56e5

    SHA512

    580df60da30106559c974327beec2fc52a764d13ca195f6ea982b83a86146509c8971ac15c553bc7c81816ff6509b6e97d17eb236586f83c2ffb262ae67971a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4400d1621a923794c75172f604592ae1

    SHA1

    38dcd5a5ed1f68b18f371f1f86a103decc223bdf

    SHA256

    2871fafaad7f47393802084718b0ac56bbcd515a83210ff9d482f26ba0fe783f

    SHA512

    3414b762b4339fb2f386aa38114b1c6b13d3fad90a4d9d3b5cc127bb6c5b615f7fc628e0566d42394a789c2941c25516fe1811d8a8bfa9801e1518bf7cace81a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    884d8f6babd941b9676707e4ee7eb272

    SHA1

    64d3a14a1d85441408f9ada7795f1a8964c89e74

    SHA256

    ae9ae83b9b59829808818e3e8e67e82c3fba1ff86c647f518cdcbdc14c93e763

    SHA512

    c2675945b886ae96c262f6a105f03965cf3302a214a81df4036446288bc91b9cfb16c61a30e86e09a41c0e20a18906ed79dbc5e0bcfbc6e4c29f1805b787c01d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d56312bb998af2e69203f001a70aa7f5

    SHA1

    a6f9bb179d6b09b3084d3de5d956aa5ff129f52d

    SHA256

    b9dcd6a45c1fe78abbdc5ef398481258f2599ce24f751df25d67912264654573

    SHA512

    29c3f8b4609c0d54eb1cdf128e3280d47898af2c90e7ad2a636c966b01bf09caaf7cab5b0a9df66d19abdc6c6c7443bef560ad60ac06531152f225a55715cfc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff602a6c1ba1f1897ee329741a81e799

    SHA1

    42de18028fddc203f4413d9a15c036a7a72f21ca

    SHA256

    aa8bacfaf37a6745f9800ca2a289b2221b15677de05bcf7bfd0e1f860e0ff209

    SHA512

    c6d8f46c39b9d09ee77dfb50baa46fc7957c3a9b02f791f39e653322357c9a05dc706ff539d8459e0681fe12442eceec27158bea11cea598f6366ace9e430641

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2dd6a86b7d9872d3e19156a9a8d8d66

    SHA1

    82db0fcb975f72ac4dcf5d5deefdb7e4e261269e

    SHA256

    dda99bdb0e4655d9677862ba82763958902f957bc5a2ca2ebc87dd37595ed4ac

    SHA512

    c23c56914b77bdfb360a6120f74d9bac28bc47b715decf669893abc76adf02494bd5a1b3000c3882e3595ad4aa02558b6ac81c3477051bdc4e25dd9d2a51c2e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    84211e4043b937fc2bfd0070026f70d3

    SHA1

    ff30926bba1f3b8d4f96d94ea83a40e342ff4989

    SHA256

    d7c78100dfd0220344abda205b20954c204061dfc86b616df64a944fbabdc017

    SHA512

    30fe4f8c81ff275f9edfa19bbe06ceb3d153b0830b7f634918c7bf2598c70d5e770c98e8fda382f64aac3ab4b92fb1bbc63ed61fe7971ea650cfe2c0998532d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Cab1CA6.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1E02.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a