Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 09:03

General

  • Target

    4572798c5720e617769da72d84f7635a_JaffaCakes118.html

  • Size

    139KB

  • MD5

    4572798c5720e617769da72d84f7635a

  • SHA1

    6d8a33146008960d62aadf0ef928b3b46384ddb3

  • SHA256

    806911dc709d3c6376727ce4196c723cfff0ae7fb8e3ff1e2e6f364ac3b7a699

  • SHA512

    ffa3214d3a032920d5abfd9677317b984d2e8ec58e54b50f85695c46db4b66d206dfc16e7c64a03e1f1958de4c150d13c36aaeae1f04390b082deff47f831f66

  • SSDEEP

    1536:SFNhCcxltSPyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBw:SFPuyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 43 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4572798c5720e617769da72d84f7635a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2140
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2140 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2516

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    2fffc11663a063e6adbd7fd23fac2e07

    SHA1

    d688735016737df7b59bc58bd1b3c7967275c85c

    SHA256

    1dc4295595bf9f99677ea2b23dede01bae3b93b556a0586db0dae07d422369d4

    SHA512

    6992b0fd80b8ae172ce5f17fcb9c9015e407d071b304627a4e0968784227a624e2268f0bebb783692664ebb64e13947d9c452036328f35b993d0ff82b8f9c425

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4afe0530b3779b02e0e3a659f90ffa90

    SHA1

    a173faccabc6669424bb8b4f4dbda1700a25ccdb

    SHA256

    82f2338d8d36f7a9a4c4863be1ba4619a4d3f1560c56e22041d189af896ddf2a

    SHA512

    609f8fbb5b6413654fae4f51e2094163ce6ce3c13897f07268c45031038e5be036fe36ad03173032243861720a33acada32d32e3d80effae6c26c87be2598c1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    894eb42079c2eb117cd2a089ec22a80a

    SHA1

    f97424f28ec2b0113a9cf715458c85cab3c3f4e7

    SHA256

    b63eb41decfe31eb33c922aa7c7a2a8f8ae00e98288903f525fa768ce34c4a6a

    SHA512

    a3a99ef303e47f71af26e0f0f3a2bf7e24af2fdfcec038e3e59fb37cae578cf7fe2dd3ac2154d1917d717796f1710152de37dc9c10bbed2f35d6daf388612dcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af9e608ff1ca5dfa665397d9429e4ad4

    SHA1

    8016914abef20cae918e9568367bece540b21e85

    SHA256

    5052c4b6686b784c543894ba3d606b662e6f6824bd532436727c3db9b58ca1f3

    SHA512

    fab3474958674de71e97e7f6dbf4ed13f92f0ccb3e025671265ad03fffcd505227d2926dd0ace68e53b50d7687e425bfd9099929566cc8a3f79608b4b2186b05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0610ea8cd0e31cd96174ff4952bfef0

    SHA1

    1662e35cd5f569e952d777dbfb2c9e10bb8f94e0

    SHA256

    e57be5aa14db4cc4a4676f7a9e5e0cc1b34001b2f909f7c6663a099c2326ffe3

    SHA512

    2a3d04e9f732d2d1c92758f80ddc1ce091ab15570c3103467fafdba3c2fde925f356343d6ddd3a5cc3c2f9d99f290b4bfbb5684df8b92a845944856c7d563211

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    341676591b22357e8fe4858b524bf5c6

    SHA1

    9a1aa96c67c008b15a5107b880c28261e395dbcb

    SHA256

    6742024710da2edfdbb236165677594a0ad3049c28607f09feb00dc97d29222a

    SHA512

    e36154c1e5c8431732b8b2668d69bacdd2f54185d295e450bf09fb259f2bb7ac9d350a077815129e5df579b49cb29afd196c509c9e39b42a8c8ae78ab5f07548

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    655f8e409066d8bb216900ac03fb138e

    SHA1

    f3a04d24fe3f2a3270cfb9c185ca9b57aa514912

    SHA256

    412aa5bb83788911dd8748220e7c45710269361fe66354a6e8250a40a3782588

    SHA512

    f4fcd706d29f16cabbc05b5ef24de76da2a2540cdd53d412a4c7ac7b46365178429619b920264cb7450e9d3522b1c94822142b7658ef198740ab143b0a3bcd9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef0a2f08f9513d148a9a77a5dbe100ed

    SHA1

    d347f9895b77e7ffb84c2524dbb7520112210496

    SHA256

    d91228fcfa35378a5fe97207e26b0353f76826e8e8c6eef8de349467921daaa4

    SHA512

    a43493496f3c265e97e2885d4db0e421bc2d869fb0acf5f1ab27289dd994ee1f7d37a1c215e2f455fc8d8476d9759df9d3d11eb077d116eb108204259574ce2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5464fcb9ca4c4b805475019746ca5ec

    SHA1

    c01bd5e9438a1456461b9cefafc8ff2ae1c15e28

    SHA256

    4a85a9a575bfce53f19c6a132bf3f0ea2560f60824a8322fe38eaa2283d90884

    SHA512

    a4d6f87a643a189c9972d0a065229602ac1105e1c7d7aeb772a381bafc0079a48b74e98f541d70d02230d5f4a1e6a2762ec96f783d4009aee7cd6e6dc60587ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cfba02d176f5f7b8547ef29de2301c07

    SHA1

    eb98d738be836cf11e3941e5048a445bc98aacf5

    SHA256

    6c291b9b57c9aea80df181c83dd67e2fb7a41bc35d1501d3500e10452adf2fdb

    SHA512

    4a1daa6f50c9c995290f9472ed25a35b4c95465f39676ee7a568bb4c65bcbb6ff4c954b8a2641a3e3a35ae38a0d28c062a18d31fe04c46ba177ef53b269bd4f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb8759373c3955c5bed06adc295932af

    SHA1

    d216e4d88499b5dc4fdc42c45203da2772709438

    SHA256

    c4ca3da4ea8ae43863ff983fed7b23732df5c0c8928b4f8151eed4572acfc86e

    SHA512

    97e964862b2f97efd988b3df2fd7def39b92086e808e16737dc5d0e90b1ac61089aa7f5cb626ade0c3a696735cdb6dcdc001970f373f0a6298bf0feb1df201ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d580df57b949fca15254d86c0f13df7

    SHA1

    85f5d73f13a049ac29f5e76b5e14caf6e1cc9682

    SHA256

    feb8c8495afc783bbbf4f601f66772608ef98adfeb6ba1127beb7a532a903c9d

    SHA512

    06a8bcee3d21d7636dddbbc7f9eb0e741b5de5b7c4a19ae64348a79b4d7625fa33fd1a2e9f3c3be32a9bd5335f54fb24e27d3e35e3bd375d138593c191238340

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c34ecc453cd100cac42b0ac084558c2

    SHA1

    0053cbfe97293cec40b993f9ee8aedc28833bef5

    SHA256

    275d00feb23e86b68af5b05651b277ec92387aac1756b03a5ce3983c497eefdd

    SHA512

    320993bc7d21571268f71b021199045a017705ec801fe10d03892450cd0f4f0d1612c57a2e3c9e05def6b3474c586b8a229b1c8d5262bb3e6a8dea4e84b974a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a25d9e0d2ba4673218aae98b72d7d2ea

    SHA1

    daa7e3d29cca16692dd00bfe8867cb27bc520446

    SHA256

    c9023b64d00c4b4e1d7c272328dc4802ec80b4e5ecb83ca32804773988ebd4b9

    SHA512

    db4e7d394517593e260d6e5e8682e7dacd924e58edec3868aab0044beda00bbc4064e21c361bd68c9075513d27993c7dd38b49b8c720b27f3d6f8de1dfb19105

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5dd96e0addf8121e0ea583eef6889d4e

    SHA1

    14a4b4723c876f2f6a363325b7542b91bf1141c3

    SHA256

    3345e94834a1cab6b94e77b15d48c85297fc0bf91b9d3202d711995278947248

    SHA512

    1241fe3ea61b26119bf040f66991f057ce5cf885cd14e65e365de2629e2df20bfaf0adaa828a175bc0f977bb732af193927f495e7310e6797113d9eb47ae5918

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92d4f6af59820c2dea4c99f7003ae86f

    SHA1

    0337abbcb3844cc7494dbe40d6a005d69b6dbef9

    SHA256

    0c5e5a5f070b28a5db9e52f3321fdb61f326121a887d5495d79d5174b5ee3210

    SHA512

    095146e3229344ea272d87fd240f9a1a0bb0c9066035999a183cd47dae53c1a56b52dd0bb32064e7056b528838e7ce0846ac1f1b5a1f9cea0bede7ad99e3426a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2c7a92abcca471c4aeddb4d8e0fb402

    SHA1

    1ef728b884b5667ad424a44cc7bf27fada42f0f1

    SHA256

    a5bc64d5da748e39db1be14240a24a1433905774f04de8ab88cd9db10f8f0aaf

    SHA512

    af0137039a3217396089b0b3b3a0097707f178319ceb21e3b54fbe01470558e289b0019c872d2e677f87b3cfe02ffe56472dd9707471781c26c756fcb52ae77a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    44fac0fac0c3d5890e117d1f894ddc2d

    SHA1

    f85fd72268b6e2e52e89a83114992b689d8e4366

    SHA256

    d55a962cc07f1756302e6547791586803d7c759ae447b4616e0c1de7b0e25f1f

    SHA512

    e4df17352bfd17f2361fdea8523f3172fb23a4bcf97740394d572777debf8d993bc6c95527535c071ce5ab0708fdd75c01434166bf3f25ccfd758d7bb121b6d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar1A2A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a