Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    17/05/2024, 09:58

General

  • Target

    4f722c0220a86dd82f5cfd64a3391f65_JaffaCakes118.html

  • Size

    55KB

  • MD5

    4f722c0220a86dd82f5cfd64a3391f65

  • SHA1

    5e218a1830b6bad1b4d9be19c8e080bf65c47687

  • SHA256

    f9b1af3859d5eee07e97fc70b2cd9c7fead23155621f31abecb997332906a480

  • SHA512

    872dc7176dc0ff84d23e789781f93ee92d07f8db065f068554b984ce6cb7f0ebfea87e42fbac2164aec17af7566149318e56da3f1f446086c65873ccab8cb775

  • SSDEEP

    1536:scIRIOITIwIgI4KZgNDlIwIGI5IMJ7StIRIOITIwIgIfKZgNDfIwIGI5IVJ7SeOa:snOighWKouFkPHfo+lnXhwi

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4f722c0220a86dd82f5cfd64a3391f65_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1936
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1936 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2552

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    950e1a7e99690f91088ca6aad843e6b1

    SHA1

    9d60952a5455ce82172948a37df227866c2f4a84

    SHA256

    dfceae7d6d9c5e81d905a2f9e0279c25b42bd91e99f619dcfcfe4886cbdc4d33

    SHA512

    4f246e4dba46132b11d683747afef6434ea794e321b12d2d97cb87422e7802a56f5ef576cd0ec7293e5f14c0d57428ba8c0028ab710dfd99bf5ae166b7688227

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5fd39361dc6daa90009be11f6d25428e

    SHA1

    a964a5063f371e0d278e18290e91c6ce66d9e97e

    SHA256

    127cd7b52bbb67ff5b2376ad7504b06fb7543785df8dac874b68877e220b146e

    SHA512

    f71a33ed07b5c9ee0e11f3169407b99a7f1af20fe49bc220892f89f4c126705013cdbd0404112f258e6dcd49652aac1937a82cfd266173b24ce5cb4e036f1f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41200c50f7d35b32bd338d34f94d3e89

    SHA1

    ed13535ca080c81d4497e325a86f4ee9c126727b

    SHA256

    1672e219c6a8d4c56f61d3d46ca2ce153b75648ef6747de1e4368aece6cbdeb4

    SHA512

    55d0e050d329a1a9ced6f97b8af8622d87a79b3bdc88c3bd5b2b45fbbe3dfae5c7fad0ac90c036ecfdbf0875571ad1a3265663145ab1d1ba5da669d9b05a6506

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    614b7d1b062ab3a98721860e2fb26c81

    SHA1

    4e2e339725e3c17e76b907f9a957ea0e621135ab

    SHA256

    adaed379fc37fea6ccc32bc411c65401d310da44120fe6d15f3fa3ce32e3fe37

    SHA512

    4303ff9f907af95566d9152572575c7e79ff44f6af44c8045efda35b1e4b4dedd863a1f6d1ad302df67ce161a5af19104c76a44933d582293bb17b61934e4271

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7dada3f220ee884bb3e235c8ce17fc9b

    SHA1

    223bd5acfe6d9e7a28724b0f63c155237743c5dc

    SHA256

    e13f42ec25e00bbaa01d453b03703136526ff093c908b57a30938685d52ea205

    SHA512

    7b71fe0b725cdc62627f4c5ac5b69c927830ee025f0f96d5fdfa3944b5c178c0c7cf6795cee7dc47a0256cccbcc775c21aa3e507e1a88c4afd6b2f1d0bb7fe7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31eecf6039630b2c9eefd42645dd8997

    SHA1

    21e4aeee7d642c793b0def767e5ff46dc86f3ad7

    SHA256

    4ded752e96bc892f2d7a1ecc8a5774c64e7507cde2797c922fa2ba638c0128cb

    SHA512

    905343b94b2a1af74091d4341a0bf3f8bb088e525ad20854499fbc2978801b70a36c7cae8caacf6be929829abeb1b99da05e744a66025566450cc37f67eed0cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45bb03841974f429f1f9966a3b02586c

    SHA1

    071717b52f9bdbd2b649bbcccc072be05ec9d8ea

    SHA256

    d40720d78de8b6763be1344dba1f47ca0a339b305082b04a2cc7b615fbfdde9a

    SHA512

    957cd441f6a08761647d1e235102c0db70fff4343e3eae655bfd46f088982ac2a1c25e7fa39876f7c96b43e5a4a0f0d76cebed532d0c086d2b71c59776e21e5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c448aa0e30e4693c822640a2a076974

    SHA1

    2ded23c2bd917e1ab37b71cad783bb539e270d5f

    SHA256

    32b325062e8bbdd8ac70e61594978592b775060cd5c2bae465433d4b9121b736

    SHA512

    9c3106eaafa738b06e9d6dcaa3388f35f98cd3e8b3e88fa69733ceaed63344b8ef76ba09335f35171197f2f7bfb2a6515cc27be1d0ed8935d4e60dc30dd12223

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    487c026f44df76d852aa965d2113fc79

    SHA1

    393a99f873973cf73b4019c7c11241af900bb2df

    SHA256

    c90dfb070f31c575aab3469761418abc8221ee9740c6f62636df56ddb7b6d038

    SHA512

    873fec292824d760d8db10fbbbeaaa170d58a8a8b615b582f29e0a49b5edc821616192e6e9f2a117c24e9d564af9138612e6f5be0549a26700c82a80876fb2dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20f89912ff16b11655d8d98bafc99120

    SHA1

    b923478c7b0fb7ecfc86f47b1542d7f9a8f94759

    SHA256

    c5b962e28b392f475ac61cee8b809eb93a700d889100531ef85c7352ca10e8ce

    SHA512

    9e1d0b363de53ec0b55e34986175aeb6723cdd16486e2c46cbe44fa3a4c2e65dfb7ae3afc965e77bdd5f3dd4e7581804135f7aeec89ab6c06cdfea81818e47d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d25a2174055325c0c2264a2a7fbbf44

    SHA1

    6a06cf7fb4f1266bd59f10a0cd8aba1b4462402e

    SHA256

    6c0dc403f8c555b0778733a4ab5ccfe41c9970caad0ee061b10acd2d7e6811d0

    SHA512

    f77af0c37853280fa530df85e6778dd85f467973f08e1ed5e370368025b9ea4cefab6b13e19eaf66201d6c075765be8faed1f536dc65a654140a3a38133a70f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f098d8230065f6827d6bfa4c5b58b71

    SHA1

    4bb1392f6e89a5b3e2b2ace4079364d402a5e88d

    SHA256

    2b385ad68b57cdc2a22303494ec7787472696a9060e2a12c122e9c7abf444242

    SHA512

    c9650885efb9b37df01bf1c805a5343b2bdf436fc29672d7e1e8ae181b831deb89ba440cd75a4abe672a8175177ec4fe8da08506c44ef2e14a0a78281695c1d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2b021809eb8cd10085e5d185ffe4ee9

    SHA1

    0d3fef215854cfeae6d688ecea8235481f981cab

    SHA256

    a5ef3325cb99c7e7b20f04f554c99997b7efebea638a7c30febdbaf4c0312c2b

    SHA512

    cfc75eed5b8ea416b1b80da2e50912eb7eefdd2a7780790ae62d3dd36cf93fd8c543287d6f280269f2fa6e9f616ee72654e568af575f0183a7cd91ffbd6ea599

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45ddfa4e84f28c12f417c3dfc29d0dc6

    SHA1

    c9223ac48d5782f4b4cf38f8452efd573db41ee5

    SHA256

    bb0498ef56fbcffe41b2e7a651e5fd89df0560d7bb3da897408462b839818942

    SHA512

    63170035d72a0d801a1ae4e14deb12a903c5a5de10b7f7d9a47612565307eacea5f2a4a49dfa77bb4566998bd9a542f1c5d6f5a94b29dce9e0281bb8a620a19e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0f5c9321ed059321065253af0ef4812

    SHA1

    1bfcabffd50fcc91a0c2f2e8523603fb7285e66a

    SHA256

    ce3de9477094510731271558d983fb19717e82f91dda15b0d4938492a5c991f8

    SHA512

    400c23db010426aedd5b458ab3efd28737f8e88faa02a1abb3a2ad2ae10f63412a496307c695b240c7e9a810a6bf45c24b823d895708c052cca74c15c2258c23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02d282dd58c462eb32a7a6fbc280f90e

    SHA1

    bc1260fbec197e8e684d45cc42a5327f58c47d40

    SHA256

    63d62e9547611a7c2ec3b06fb25bcd8c608aa50fb55ccdddaea002cad47eec08

    SHA512

    5e117e126d3130cd644275c2e4e24d751659ea55f1ac5760185ab3dc9c9577513b1c7ecd441a8e27bad545ec68801647cb565f03fa0390d2c889bd32fd36f6ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45f172d01d46550e9b77b413300b834e

    SHA1

    f52ba521ae49c71102b1f22c64fc1d5d87f43406

    SHA256

    7b841ce608be0a2687d7b683f4ef5f76f04918a13831deea2974d7adc15bd8af

    SHA512

    ac91aecdccc8a406f4c2feaf1e3a5270a474c102560991eeab7e78f17da09ace547979c07922c1623ee50c5cf2a04a4d083c4fbe66c6138ba81d3353307812e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c3132cfa6d0672f54e9748b9700580d

    SHA1

    cb3b46782c8e20c5ddc93dcfbc6623a2f36c2f3e

    SHA256

    c32a172e0d7da47bfdb3c2845c0044534cb7ce1a91842b644a9d310bbe365fdb

    SHA512

    4d19db579085f85e120067457c16198c633a58cc564adeaa2c71a3c7a9accd5dda7a46004b348130751f3c2235bd6aacb926187e27e90d666af9a843d3281724

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51ad8511c5df5d90f73a8761527c6b0d

    SHA1

    33d2f9b19c48192ea13fbe5af7c322ee3b8142a6

    SHA256

    7dc1f2aa33ee6f6b648f24a0b4b8cec99038c5023a97a86020ae354ed6987245

    SHA512

    0e36fba4d2be3ca6c63f8d3ac59c36487152ba13a72183d64c0c668ff790e6997f5849612c5445152ffeff000202de6c5485f5db9d3a9abf10facd6ad4f0c16a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9af5c3f7f5a71866add3cedd6b6e8739

    SHA1

    fdcf99708cd496535dd692179707e12a942d8f00

    SHA256

    4b1e5f5ee9c727caa02644293a9c0cca424b76a0192ebf5fe1596eec1e43ff4a

    SHA512

    b4d385b1a5c3f4103ff36973e1d7f6a55cef6cac0683a03395959f46a4aa2965c96355a8150396cf22bac96c06e74ebf112afbdecb3b91ff996125c5513f68c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    82f082f1d828dc22a57f83ed57ac014f

    SHA1

    daa3efa21c9364abaf7e6a4b18ac3d11a14ba240

    SHA256

    9e667f0e1927e7c23bd96e581a04bdfd3380064a50cca063e34168eb9ae3ae03

    SHA512

    5aefd21337e287028636019f27fc96f88263acd90bbf961d3428d826f24e86fe37a237aaf8897a9e0ef01d969b4cca664f43b05228e8340679fe464ad9fa445e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\TarEB5.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a