Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 21:44

General

  • Target

    432ea74b3756a0d568b0727bdb9726f5_JaffaCakes118.html

  • Size

    43KB

  • MD5

    432ea74b3756a0d568b0727bdb9726f5

  • SHA1

    0b24fd2d725427f3a95afb8244998fb0de70ab3a

  • SHA256

    55aa3f57fb06de9499ffe62d411499844b0a798b4c519880ed900cb2bf4b1944

  • SHA512

    ba2249c47f04cedd31180552f9ebd71579793377dfb3e9af6c89b149edcfee6eae56997bba69c6404efac8148a10a977afddedd8e0e1005efb63751b53d3bdd1

  • SSDEEP

    768:1I+vbG2+0MGi+vZGIikHhGRGXiOgOeGBGlGslstUFOs/wOenO:K+vt+0U+v5ikH/iOgOYFnYO1

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 43 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\432ea74b3756a0d568b0727bdb9726f5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1972
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1972 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2160

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    99e223b4689973d89083f0a4d2a9d475

    SHA1

    b5abf1e1d79d063bd4cbd33946444531cb0ae299

    SHA256

    4b7b3cfe956943f3e9a0de33f65852e36dc870459e478a159240f545d71e532d

    SHA512

    1b715812e75998d5d8a6ff6175c70a18b9446bf4e734bfcfe0b403b497e11569542fdc70ead108c872250e30fc7204111f52ecbd9c09a79cefa1216eb86b45eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0571a0eae281a63820a4634e38c63cc

    SHA1

    d1e5eaf87abc4166968ef3928cc0a8b166740c3e

    SHA256

    304797c255809a383b5f7486d69615a771f5c5f8a40393203605220ae5595eee

    SHA512

    32463b9a3367fb04888163def3478680763af7120e4b70bb48add42ef457d6248f54c8e3e94f53e49a9407d59fe32ab53607ff5d76c83b70991ce14799a17b6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d814b7e4890bab38ce8d4922bdf54ef

    SHA1

    7d5f4a58d29f9b387ca0a9bf9c88e8ca579ad430

    SHA256

    d014f82fa02eaf69d2043611e249b6c323edb803ea8b1be0b868ad25e0be7d1d

    SHA512

    fc67b57746fc37b67c78b3bfd9fdd044f5b11be61a54e8aabca92a232ee0c42d6f2f35d24bef4841a20125ec056eb33f2e456e80671146d03493d2f47485add0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9879e42f66e7c2395a9646529357f30d

    SHA1

    9aa2ae10cb1795bb36073b41dc56e475935c3eb2

    SHA256

    94e7c1e585f219607d91376061125de7929b89c5cd8c36556abd339a63c41714

    SHA512

    d6ebae3e8c55bd53d8e2e7e9e424c075384a9334ba284cfd2f3ccbe25fde09c5487d41c0499755219c45f493a8e10e86bbf7fbc4cbaa525085ca27f2be73a0ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a0f615032639b8a08b77ee0b219e1273

    SHA1

    4b778e1399a878bdef1ee415755188db8ddbd0b7

    SHA256

    485ab615da9af99aadb80f0c4e109f5b6a052767cb8daca1dfd2ff79925200dd

    SHA512

    971645b065bd2d6f36617466306c53fe854b9b281832b268ddbc2bea08030eb760ccd65e9e2fda3aa0a58473ac061d8ddbbecbf6ba2b6ef8b110b300d30b3d3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a66dc365ce8a4ccc45e2950b282bfcc1

    SHA1

    601c4e17648e5e2fe2f19318a3887c88ecd6bdea

    SHA256

    e09727b2c8275a291071010718e6899ca5c45084cdaf61e2eabd3d9fb257f2da

    SHA512

    79bf76b863822d0b7fd49d9ddd5f0488ca042e24a8c506b706d9adfd0345e6794db00bcf60ec0ef42ec801bd7cd208903735b8f03e7e71c2d7cbb66826dcd7de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f5e1eebd41871723d215f274c079075

    SHA1

    ea2a584d9dd83264de7de6fe059deb74681cd8eb

    SHA256

    bdb27d56ac3539ba121ca6372dceaabd11d133c8a70107f175c7f6cfa68e3f04

    SHA512

    998183d1d72f73cb86789b6a8a812106ab263f1e0af464d12bc07fac898221edeb8a689987f26b296aef77cfb8565ef00f313778812acee901443e688b0d245f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e0baacff1552e60448f39f01e7a78ef9

    SHA1

    207e117fdd1d42e80e7f99b5ca036b020076b549

    SHA256

    4ca9dc2dd46878e69a36badc6189bc1b7eb722ed83eaf56b7d648a697210b0ce

    SHA512

    0643fd91d365dc6bc65bf206e90e2f9327bdfe9fccba1d4b1dfa9c71be4026a904a68b02d109b70fadf1917b9d85d3e0a6d2ba5d1acdf98c05e14967983a977f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9b35c1c8eecc22a24b8e22f0e536e51

    SHA1

    b84ed347b9b1523332649178256cd39ee11bfecf

    SHA256

    027d8dc115fd97cb8e28297d3131a45073e9351d4f56f3bf0b087eb72e4f3430

    SHA512

    1b67bf5f35d93944848e5239dac51f28a6c259bf09887b7a5a1d6385f39b893e615c911bc7e9a93483e1e41551b5dea3a9ffce10037e104441fb30d59a2326cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a8ceb93e2b15c938c458f8f3d07bf31

    SHA1

    30990113cd2072479908a31f3247c71c9427ca6e

    SHA256

    fc58a1beb1b909be1ee8ca31a9f905e35ee3029b8f7d2a156e78a89ca9bb06e8

    SHA512

    016fe35a445dae00bca806f1dc2c0afc7c7e49f0f64d36490c7a4a973868221b6c367f9403285ce2d9d98aab06e765f703cc19d6f36c3048c539baea3a02c34e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab7349dc80351a0b1a0f8bb513a84415

    SHA1

    32e9516ca32f0c80f3151919c52c78a1af25b1fa

    SHA256

    a851ee6a1734ef81762b0830d9694186efa78ef8593801b3782d03017bb5bb2e

    SHA512

    fa5ab804b635429fe6cf1d5ee22a95e50fafe99a698b1fe1c1e843fe36d0a20f4d7be9990a0b8d326704093e073582e4fef6d9fdfc0efbbeda9a61f80caa8b7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83ae8114991e7da031663d7a469cc003

    SHA1

    f40c28b1bba446d48e31c1a1ceacdc77d8ca6b76

    SHA256

    9d2dec17bfea0cbed2ebbb9f381323b5b5a2272e46dc9cc19e10f667ad5b2bdc

    SHA512

    7c287643cecd45fdf2723098806094111bccc5b636cce9ee9a633e99e5cbbaf29afac73a45b8353b40b22abd131771c11bc974df0bf70b9ced8454c81f365b20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a01625022bbb173bf1e16411b08705f

    SHA1

    ba9ddf90184250eddba069a1d4cc04d867b4e963

    SHA256

    794da1e6dc7e9881f8871fbfdabe4b1809b5ffc3abb4556e15154e35fc8a7295

    SHA512

    3a549275f3ef4882838721822afd591c4059203b3bbeef082a1a043db72b24a766c91731ca15fd0186e9b5e6b457fa4fa2da9af24457a4d622e82c0a3b2fe8a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9bd761964ccfe35c6b572ee064e8f7d2

    SHA1

    c0c5e68345d89d74affb43df7d53aca64fa95fed

    SHA256

    b74d773414c4f1404443a87b54831998ac479e1dc2b7155599b26f3f5935f6b7

    SHA512

    b0a0c33219f48f0cae7a70b7d31dfca8267798e08bb29c233a4c6db405f92a3d8c89966f1f936429fc42565ce1a3d1d0b18b83a86a1434e4a94398b1ca9e9519

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1b0b9f7ab57a3534981bd37162dc748

    SHA1

    13a974275b4df9d6acb56022b2f4c8e7c7763272

    SHA256

    141a29e11b90d4b975cd225bc23350b7bcb2671e8369cf74b534ea9b996be9d5

    SHA512

    55e65143891289f3f982952c8a2f980bc25d0eb3e8103fb22371c20710198bc850acc47375b28f9ffaa587462b5ace6ac4fafb1ebd2c8632b993a265e8ae6540

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    856dd49c379e986d0b2c444d5a766fa0

    SHA1

    9fbaf29a328b48a6bb4b84d17b9ced5cf712a77b

    SHA256

    5057427b7a22beacf052b78fd7706107ebbeca1d42a38a736889a5337414dd00

    SHA512

    92161af534b5ed961821ee4965bce29a273b5b87bff5fb69bb9576932171d56cb0ede6d48a2ae50e166e3d540be45680a5c31b6b22758afe7a29cff050de549c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c6345a9e1e1298e7add8ab6bfcfcca6

    SHA1

    337ddc0ae1ad2dc86b71635cd750add7b35d66ac

    SHA256

    227397d33255fe6a313fa91a3eee2741e3c0b686341db2e3c92ed19be669dcf2

    SHA512

    b6c9a685a60020bce576e03db6c49695956b698a62bf2c1d1486d4626b0a89c6ede6256519b3519cd0be230157494723a00179bb1db593c2dc5850f385880e11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2ebc1912c1168f8129ce22d0d34f9a0

    SHA1

    e425085b692ce2a157618bf99f7650f2c7ad1173

    SHA256

    bc97dc8ccfce2fc71e7b389fd32f7d5fa8e1091df8d0d1180d558fd84ad52d6f

    SHA512

    99f23be0f95aeac3b8672c58e263f3ac86ad3f637a83618bc8dc633babf3f38a777678e3b231c62f956f8916cb2893dca93f26be71cc236c3c38b40ab319ba73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b644e56ab42cd9773816c5c0ca270c1f

    SHA1

    295fd8197f7842df235ecc186c2c6f4a5a3c93f7

    SHA256

    d17d27d326648dd481366d10977571883a36c40b32839999b31e3099cd80c089

    SHA512

    f30e8dc309c4ec769397be0e7aa1ad5888144f9506b4478f49c7ee1ec7e9d93d33629183dd5ad783cdae2fe8bbfe1604be6dde5ab2548fb6765c065d180b59de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2f95142ddb2a71662f7a399f7e87a2e

    SHA1

    32172e0c45879d7eb8e5ad45e2393267280a3f09

    SHA256

    6f99a37357ead04c22340ed0d75177b1b54b739f8a2079a6ef938681076316da

    SHA512

    f8dc6a321a0579daf955e743f8057ce6e954ba98e8d7000a7f217fe1bedd9c5c33367a18e7139590d5423b670bc569becf422eca2c01885490049abc5416c734

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    90d2d09fe13fecacf482defbed76c7fe

    SHA1

    d29c2bb4a3029bde02fc6b71a0c3795c5c6e6487

    SHA256

    e265dfecb9e5c0b6ede53e139dcadfe01874fee40aca274fa84182a12a72a95a

    SHA512

    443eea77aee372ad095a133e36a816e05c6b613dcd9702a66a1e0d5ac1dbb95a4aa91a22acb8c44b15b76bb81edf011216fd37f2936b31c7253d2254e09300a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar375C.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a