Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    13/05/2024, 10:48

General

  • Target

    3f1bf3283b90cacc0137b06bd8c8b42b_JaffaCakes118.html

  • Size

    52KB

  • MD5

    3f1bf3283b90cacc0137b06bd8c8b42b

  • SHA1

    a40828d71dc2d349bfe31de049be96b1b6b615df

  • SHA256

    9eeda47df9bed13ce1fba6ada6b39d0c9229f3351326efedeabe881bd4a28b1f

  • SHA512

    461110f78a8cecd3a309a4fc6b315ac642742690a004fa72cbbf816784baf812acd4eef337eae681c2bc445efd8120d303472dd38886edabccd049b01529b70c

  • SSDEEP

    1536:SE84sB96U6eoeC8LPwM20eejJBv2JCDele3O5:SZMIJBW5

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3f1bf3283b90cacc0137b06bd8c8b42b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2400
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2400 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2856

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4bcf70b4439c8cf969dfb7643ef2c708

    SHA1

    742932e9cebeb963ff7f3ede66c8232d3fe603e5

    SHA256

    bb866ac382164c451bcb52a1dc5bb9e5a88334a52a6569f9eea9d7bd157605ae

    SHA512

    1cd9aa8bac3b077f08d576a75eab5cddb99f81e84dc8181a674df8d374983ec857a158a5db917ffb255d1d7a62a536bf36c55f223f1b27bb2531ba8043f8c7ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0830da326b407ee6a7c6895f0811d243

    SHA1

    1f437ffa393446a318c68a91c8bc2a0f484b29d0

    SHA256

    debe36ab4ac085abac8f0dc1a5263480c751b42659fb7d28af7fa1aa5bb8aad5

    SHA512

    77eb3298d5dc449529917a99cc4c1ef2ab332da4c11b0b084ea9f33538c3429b66477b44c63dcde9a5ca827f2aaa5d8e7cae26175d04e26bac7b4a875f9e520e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b7edb7d569dd663feca429c0b5b7d50

    SHA1

    44a979631191429fd20de309e9f73b6ddf02fea0

    SHA256

    6d6776add27212f5a52b5546d516c0a6aa3768968f83d7dfddcd623c4f644b55

    SHA512

    049bbebe2afde53f1c6bce3f1497b24ec2d9fe52e3feddb55a0b4394737e20d0600725af6d87d013e6507251f1c8624afd89ff75ce79d5f392368c3d1d7d8ce6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a4542a72b2d33e49dd3d696a76265ea4

    SHA1

    73670e2179361cdbd06fbf169baab46323b38717

    SHA256

    d406d631242ef0b52eba34249ec57dad7779977e274b4a536f5c2b6da089f757

    SHA512

    4b22514af5f8bd2d17e759f9faf3d99d5ae5a6fee21fd41b4912aa9b791ad843955d13c2fbf5069f472b9e08d57c18c4dfce97e7dc4c0ec16b0b94e34ea4fba1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6509c906ad62f3760811711a42333d52

    SHA1

    42ed5ac4a4d79ed5c3bbad7aa02367813c746fa9

    SHA256

    94cece29bca2c1240450c3b3dc538dc1b86436a46f5b38e6b7c5fbc8e36a8138

    SHA512

    83db2e4c7716e9bf965b7f16477ad68b6b7525e421b2f0eeb3d5f6fac65acfa9573617f9846a783b01b5837cb26121166a9194865d97e9b6481048b1b09848ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    760b6e02faf19b74841c7c7ff7183473

    SHA1

    36e8da3dc81896fa62a7063e0d775a758df37574

    SHA256

    0e96cdb3d243f6dbeda2f4b6d597065823e4348a433e36b6e283660af671896a

    SHA512

    4052b628c74d2b8cf20ee4b66ba449ab3d61badf7136b863006414af8cd2179399645c078328576334575f0b40bb75a8198a514ed3fc81c4c6658cf82413e701

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d31aa48c0176b8b56732207292ae812

    SHA1

    7562fa45376310965df69576ab486b845279a16e

    SHA256

    92c09aaa1161c65d4c2c343c34f450b3fe24bd089513df0bec67030e7eb94f52

    SHA512

    8440b706f25387b645afeee5b65614cc140cc026105337d3f7d0187387ea0e7aaad119094a6b574a817a87a037e1646f75617413d318fed3e4ae8b32cc7ee0f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    336c60858871cd94e78c0473ffa70bbb

    SHA1

    a6f2e04d49071be487abe1fa0bddc4c835c35e0d

    SHA256

    f20e569fc7e53d27ace5f0ee441bfc76372a802ffda58f6b79eaaf88d77370c0

    SHA512

    2c930486e4504259dd01de835a266d0fb7c896bdad3b58bd55d8a0d465b87d6b44438efbd78c4272899e648c3be5db200d8ed751b11cd2849cbe2d5e6c280a73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c2aaa02f204f7119ac5d438fbe6ffc4c

    SHA1

    6ae1f05914d8a849665562372bb3cdee720e17e7

    SHA256

    7a872431af820412ec4aba9da91b424004733a0e8f9a1261a126052ead33ffee

    SHA512

    91d425d60c32e49bf10fdadff0b14331f9f5edd069994aa0615fcd03f70029e98c6ebaebacea37acb57023acbb25f388dfd9261d64141301ac4112ee3e6fc493

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d9ffbeec172ef91932fd2ae4589db30

    SHA1

    9de19183c1fe0837641f99196f51f28b0e5cf187

    SHA256

    eadb847961dd2e5001e07f9a357d42ca82a42b8c5926e8768ddfb52fb1ef607f

    SHA512

    c2006ffb2952b3f5f1a97a45643853237f6ae7d00d774e293d693c94d0b66e60eca6e2f2ce9e5649dcd2950f95cbccaece72a1e0e03ec466be2195bbcafda5dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b44a7e56058a15057402020c8d17986

    SHA1

    7ac0034e2d12da89525eeb7fc5c6e130b11d42a2

    SHA256

    a45a0a23c2548633f5613b1cfe9a9abed658d123a148daac227466f9ac1d7df0

    SHA512

    f7cc01d61a4dcf63245e500ad5538348c1255b6e23cc4eb6c05ed7523173dec051b6a58cdb7d55f5abab0df57b07db7442a7532e5699dc0d008af400161ecc27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c05bab92d47afb52d8050c6c1af133c

    SHA1

    99014c2390018750ff88319fa111952cf3f5d511

    SHA256

    a8614a89db20b290a2e8bee8119128ca758f7f5e5b5ad8f37d44b22fae1c0831

    SHA512

    166a1dbd835fe7cbe6c4b71f6b07c943b738c9114b7a432276a81c11661abd6cecb848352f38c855159677d1b8054d171bc534405f123b4370c6126ce12913de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4dc50008dd5b4a02fd14b85469c95521

    SHA1

    6c989c6b688fd4e25d015edb156c666cdbb25fae

    SHA256

    2b83f7fa9e1893b98ef937b1a1a882b68a6a031bfc52e864ea1f785a4caafce9

    SHA512

    312382938b6ec870608f22b1b418c59b67c2900a431d44570a410f5a62424797bbf1faca23546a7fa306ef6fd1d9bd3c973c1d774f4599990217de6ffb30ed60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee6bd4459aaadbfb56a1ace897e37e08

    SHA1

    c433bf30f0502d6dddce76456ec761651fc37016

    SHA256

    04eebb9118a6f349ffa8410d3ce060a77344de271a04ec77afe7851e932f2058

    SHA512

    7ac78837bba3d6f272a24dc8c0a29e48f24aae95cae111af840a50904c1010cfeae4ba0f10e37123062999d4ae4ece9816fb184e8db7ba6ad8ad969facdf75b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    456b701a6cab6532dfd443f31a918ee9

    SHA1

    23ccdac5a1b4e9fe91340006bc856275d9ce3e6a

    SHA256

    3db1d1531db821422fdf4ed198ba9c123b2fd085ce67f1e31fd4a2a0cb43a950

    SHA512

    8ebdb62ab1b33d76cf439ac6498fe60e42f6bbb0f6969c308da660b704be9551553e88b98bf2a88b42d1bcfd2309b1d5e6e9e545803aa6a2512ffd67abdbeec4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c926bb6ba61b96aaec9b8237ebf819f0

    SHA1

    9eda13e785110b2afadfb71916f3bdd0a748c79e

    SHA256

    6775d9c3646538a7aea97d93d8db95508f4c4533655f6fd22c64794af4a74a91

    SHA512

    162cfc408f2e4cae641fe6e5b5763116488175e6e202ad4cfe419d2f81b7cedbf7ce2a2eaf67f48c247f252c820ce37f834274e408420cbffcb05841156b8729

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19d112445079a7465fd36d2822f70413

    SHA1

    2124746f056decac13d656b514473fa22a91ebd7

    SHA256

    8c9f33a439d84586d42d44bf6c6b2d8531562de0981570e2b26b39532cb77372

    SHA512

    08e8217a45d3038be09443da8f62b3dc93132eb752d705b9e25cc61404e7948cefb04023d44db5073e4e690a8dc4f2e3e697a7e1df8337d680e15ecdba874489

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a94bafac3b04a63b671d29dee9a4e67

    SHA1

    9063ea2e5cfe15f067b0eabf3a44a8cfc6293908

    SHA256

    26008c4a765e0bac51d709bd4c17afebc6a9387feed40d1fe195d5dd23465469

    SHA512

    64b8cb732b86e499fda891d9592c54d844ec279002d3e6b2c7827b5aea3f8c3aa12c4d99f926614c0ee131e200391548e154fefb97c53410a2d18da6140d2c42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d50aeaee2afffdfe122dcef24e4a8a82

    SHA1

    90c505cc7498d852e21c582d80dece38ae74927f

    SHA256

    f6cc2093cce7a9e910fa7ddcb7a290a8b1398a065fa1248df1c1ef5fbd51ea12

    SHA512

    d3a7ccff491542098141c3e6cfd5caaebd212c3855482031d76bc518b2338ac9755d215f0e222e606bce8de9cb1db4a0ba3dff6bcf11941bd310670dab671366

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db09c8641b2e823f230ce7e76dc4a596

    SHA1

    198d2b0668a815b7b3963fe2bd9dc54e4e535b82

    SHA256

    5e1ea7fd271e695b11d03ceef189b0aae6a4f37e35f78cec6dd20a683b79d0fc

    SHA512

    106f6091838cda622449fdfc52b4582e10bdf2857d7c9bed211c0800e0e91003a21c135eb731c6334f517662406d6a3ef8f7a10c2298b95b27d9d445facf76cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69ed443c4b2f94a2ae2e918f82ec36cb

    SHA1

    8384cfcfe31b2031e99f2a692e35d1303ec12538

    SHA256

    5d7041da7e5ba4f30824e3fe6abbfe150e7e73a1f1aa4573d1da87e010af9bba

    SHA512

    ea897492505374fb08c44ad5aa4a0a25e5db1176f1ff0f482e20d864d7af5c0d2f9599f5fbb202420ddbac23f5a95736a91728f26b9e6068489e5f996282e56b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ebe78dc4c44c6db586aeca47becea632

    SHA1

    8daee1522572971be866e03850e7de88167c3174

    SHA256

    b8b565c8c52ff9ff20d4fa88d0c993104b69eba6dcefdf525a3a0b8405cabb0b

    SHA512

    043e0d2332641f5715e907eb9b41624e822e5472640ff8d3120b926ac4560c72427ad3905e3843151ada67df644e60380a7349829dcebe7a8d31a216274fcd2c

  • C:\Users\Admin\AppData\Local\Temp\CabDF7.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarE48.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a