Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 21:04

General

  • Target

    43113dcf7f46bdb6733f2351c6f12582_JaffaCakes118.html

  • Size

    27KB

  • MD5

    43113dcf7f46bdb6733f2351c6f12582

  • SHA1

    fea2e71a4c8f4fe798957a2ecb17d3e5080dcdd3

  • SHA256

    67e9ee6a186bf194b9b245ffe31b49c432ada717d90d3f158de550fe785bf7b1

  • SHA512

    16e2f829f16c1440ee24d7a89c702a4583f9f76375616c17160bd307e594fea5a3f4cdf8edc60a0030c0f8e8c00a8ada1fcb19514048ae43ce8986c58ad3b5b9

  • SSDEEP

    192:uwXUb5nNl8nQjxn5Q/4nQieTNnUnQOkEntEqnQTbnVnQ9eH4am60vpvQl7MBzqnA:sxQ/Gqp4puSRiIn

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 43 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\43113dcf7f46bdb6733f2351c6f12582_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1936
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1936 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:3048

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    2e23d08486633e1b51a7a63a1d26aeec

    SHA1

    f6e20b76d26736d21684b0ccf0e0025596355835

    SHA256

    a140e9fc2891ef6d24b95ac230fbff8acb73dd5cf3602c931474ab28164cee5e

    SHA512

    f590f8efdb140b0bc38ebd1c227d7853f0a736913869de48622851e8cdaa91fd7e02c1f10219cc1c2248b3bbbcd0e07c72fd829f0a8accedae92d12ea11c323e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    937f79d08745fd385d4d3b9e522e5e74

    SHA1

    ae31d6ac79f61787dca940a57d13c008884c30d9

    SHA256

    551ecb44c9b96b4ed97050cdf04918d2bd2f7d544646fc1dcc1069a8befdba44

    SHA512

    ebf8b4cb5fd41441ab5434424d99a377957d5f61dc9448adab4bdc603ab9c5645fc67a3b994dcad8c9278745b24d1e89d652ef9a9a076bc1177c7c71e3c2df64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5555479d40c6256b75e309e05d0d76b

    SHA1

    d1663783a5088a76a8f6b57396c2c69da3a33d91

    SHA256

    f73393cc238e85c46b3e92d3866fb18381a02f3abefdd3a7e8691553cf5656e0

    SHA512

    c401942c15ef119cc929d509feacf4cda2217b2ab90ae4b5dca922598a3343f50f77972c6564a4aae90b75ff1e53d42fafc87130b302a6ea166a668c7fa38d45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b23991f616220e8e8a6ef03eabee7f6f

    SHA1

    ae95254fcf50f2c3942515a81a2ad365a1628de3

    SHA256

    2ef4a0b8a0eed4c1ff2c397fc51c85e3f47c48ca20d7ab0f7301d2ad93292cd6

    SHA512

    f6a12abc488ef908c2451cf3928e5e4ced0eedf8b4c4f3b659ee70716eb49710e46bb0aa45c54cc2fc324c3e6722fc8d4d614f5a6a9427eb219a64603a52efed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd812f5ade306a1a4c7d672a83a5448e

    SHA1

    b8f6963d877c952153cfe5fece95acf7724ce9f5

    SHA256

    b01c6064c6f21c86f6bb4d757a60b8eca49824f0340b75950434e04e543c50f0

    SHA512

    f42d8f4b1afcace129d7716ab4f028c37872e8984932096c4ea543b617ea7614a11c6232789677dae55910ea2d0459c1d5bf069cdfb75778aec1ee65c7e3fec8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cad3c1e6a6284351643b0c0fb7edcc8f

    SHA1

    b15afe6f32dadf762a7d4682a082840980442632

    SHA256

    9c0b718f2401cb5982d5f828f68e08c903a4fbce4998261ac679d2bfe2237d57

    SHA512

    60154aa02e89453ddc85e116dceea4555a2a3a619a10b87bc129496c6441565fe3f9107979ca6ab5a84da3fa5354dd61d8a1414065d81dfddf99724f72accdab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2d9a616666abf5938005db798a90413

    SHA1

    279a062e250aa6ebb68568ba4931a35138579d8b

    SHA256

    782b0e91822384bd0c83a29ad3620b2e26e32ab4889f2db3a1abaafc7aa5086e

    SHA512

    f8c33827864b082990379b3db48a96e44bef6739a828af0d5838f524080d49ef0f467fcec31b6e74f7f7c7bfe594d416a1d809698de9b5a51f450e81f85f2d10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    87aeb58cad13e43e638071eb41856d10

    SHA1

    ace9d24b610146b0544ffddd01d82e650c700040

    SHA256

    af15e6f914e3294369e3b03917ae6f250a668adabcafd30e3ce3c4da39742e96

    SHA512

    8f7330c6ac2b88c4eceb3fe4147e5d00650c73f3edc531ec5410a6ad36da4addf4246119db01d724e15ea70d17753842564584416517357eb820f43ed3a2d5b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d75c62ffe10b01b288220d24ae557c30

    SHA1

    1bc28c6d541410e24bb16f862ea99d6e70be1149

    SHA256

    cd081c4de16b5ae241d4a57f133001531eccde3d43cdf390cd69faa48087a468

    SHA512

    22806b433b39e539dd3513ed3fa15b5f82fa987e1cada57023819efc5b30456219c216fa70b46b6cfb63b745ed5fc69a534146cb04c547d63e1811839cb37e86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d77689ab1a89617a6d2a88f5a0c39015

    SHA1

    a9abcc447ea08b0dbf9ca11aa36003a5f68b1fb4

    SHA256

    6d2b830ebe3d71f3961970b812270df5669931ed5226ec8f65853c9aaacb5193

    SHA512

    3de92d5a12ffe22ae1a12a8e815d170991eb762152f63bd69954b4107bc124279e5232e688dd823e78772274a9808e9ab99edd8f3f3d60bd69452cbe45958962

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b29c5a103ccaebfb9c69a39e1a52fe0

    SHA1

    f4226c2ed2e869bd641d78bd3c810781817dd419

    SHA256

    9b27028d6291aab5ed740f05e99d9e85b083d67cb18b5127c930fed0a82c2f29

    SHA512

    7093673e08b27f44c830e26b0572f55e78b0f7be2684ffa99be581442411113033bdebde97d316b62ae20ae32879c64b79d6365af5d685edca5facbf769566c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2bb11b9ebaeac7ff32e72a4599ed4969

    SHA1

    25946bb3680327f5a7feee688db53cdfec2f9389

    SHA256

    95dad21e7221b0a39d3756c15b1691a8ee2d33e16c88c0aebfd2a954ef7636d4

    SHA512

    4a2e44e9175c23d67dbc3885f86b2be7bb1f601785b64cd44c24bc057944b64eb18b9acf904b70b470264099a8bbbd4f3f81f07a12f52ef13f31f42bf4ec579f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2229cbef159c40d3b4968e86b948437

    SHA1

    695650ce62987e5cf6372bfc937f17f5b2ad0682

    SHA256

    7d543a3a5b9e52e895faf132b3c4e308fbcf0f0ed4881bda5cd034b51f7a9dda

    SHA512

    85e26fc264ba51d386cad6728ec8921d1a8450e05443e16e4fa67138ed3930f7e9202deb359082b9119499e7eb319c44d62607d73c4d310e10bfad004955cba1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57a8a6bfac30cf4aa44b6798f33802bf

    SHA1

    fa93db9cc6acb600699b71008d511f7b72e5b6c5

    SHA256

    434ed83cc82f98aa2475b8f4c766a8901ea3089bd5112835a3505eb6a91e2d9a

    SHA512

    a443d80867d6ddc3c1b4258033a18c9c575f0d835c0ab3eedb8cf7adb5f3adc4614dff3ad38ead8113efd9c9ca040a4f218a128b7da351bc209740f229d9122d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94ed88fc3590c5f4a3482def117878f5

    SHA1

    e9a998b17265ae21be83e484b28af8ef3675d63c

    SHA256

    19f39bbce1d9af9c4d5cf1830db28625ba7a7765d0da8b95837a6d2f83842a12

    SHA512

    83cdc74bc88274a75e5019c6117d56d24f1c889ea6f0e771cd4b293c7fac0aa28d1ea9ff2ced9f418bf7a149cd01df04f91e0b1737eeaca59160b94cc0b33fec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9672bcce8079d108d1d05b96f1ea615b

    SHA1

    e555fb8f9af0ed531206a7105999a5a3b475f6f2

    SHA256

    1699b46e441652dd393d980790af1791a401bde5e891bd2ece3622cd354e9e8c

    SHA512

    43a0785ffbe5f3e8b335665a1bc94691b40a6bef67e954b9f481d59e45a32bd22291b470d1b101fe94f3761451059fa554a115927f9d1f45b9b3de7a4676d6c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1049c2a13a24c5edc24db22bd590d20c

    SHA1

    2de49d1492a4aa22a4fd5dd7fb22fb10148fdab7

    SHA256

    b2a9d5427cfe9b833f29dc13d08dd8505f94406cdbc0246d09b48165c8a900b6

    SHA512

    206b3b9b778e9f02b322871993cdfcd3c1108d0768f11a832b24ddf537c755eb52923252948e3a4062f6cc47617c8fba2b0c9260cf5f03f49dc1786d72a84dbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e369e90cb591da76c74c90f0a7d116ba

    SHA1

    518be0ffa5da9f841db99cd2b101563eaa740315

    SHA256

    377c55d245f0fd2becedc9132429634f7debc480cd26a7d44e52dec616ef9b62

    SHA512

    198845ce7ac63fdc4f5e585c0332ae273f2fb51350ddd1b94b80fcb32d4ba90e1ac2be8bcfa74d733d0188063f9c1bc749660529b1527153fb92213917125ebf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e13f501627c36340cae9a90769044b45

    SHA1

    7e2753ffdc8450554036710e1e4c8e382bf219c2

    SHA256

    b4d1f9e9b791696ef4f0f946092dbad92d4bd78dd9c420fe5c9b11979eb9ecd0

    SHA512

    d9aa5dc0f6d85b92d3697564221daa155769481b01889f39fa70a85db7d5df6eaa8db19c2f28a222b01f94929aba6bc5552aa92358461c48e122eaea01be4cd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    cbbf19f8fdcdcef2c26880ed1851af98

    SHA1

    eec354c75e5d6a2157dfbbae18d6f3e8bc2df745

    SHA256

    0122100953682feb7a51b302399e4426f1d51ac854f376e749dd808164123bc4

    SHA512

    f310c144f77701f67cbf86cbda75e265ecf38064ae3b4fb2bf6591f1a946a5aa91cc3ca97192f91b0c32ad99d2789e555a6bd97ba089a0f87f64bf1f39a61256

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar282F.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a