Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 10:13

General

  • Target

    5e884eb7b2909ad237641e5a6e633ffd_JaffaCakes118.html

  • Size

    22KB

  • MD5

    5e884eb7b2909ad237641e5a6e633ffd

  • SHA1

    9f403660445de46fac5a20857c21801239497a26

  • SHA256

    70ec5c3e1f9182c6f8d131bc6cd1a160c45a95f5a09155a77013197020eecbe5

  • SHA512

    67e7bc59eae3294277751978754682ad47bfcf90355d204c40fd795f5bb63930f119e6c91aca4d736dac882e011000a97a6f6fadd2dd1303c1de70c7ba22ecc1

  • SSDEEP

    384:RpA61olRpTJ/qn85MmtE1QNgVFiQ/Sd0n4nkK8guROyBzXEz7PVtnbFQRE:Rpl1olRpTJ/qn85MmtE1QNgVF6d0n4nP

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5e884eb7b2909ad237641e5a6e633ffd_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2960
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2960 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2844

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    38e8a9851ad455a9791f6b0d0d34094d

    SHA1

    030e0f7dcf07e2a556341119d00f2acb0316409b

    SHA256

    c8ffaaba4c9436f74fd78db65e307bced470cb3554c2577dce056c503ddc063e

    SHA512

    1c8f9a81b7084daaea91a82a8bc0c74597e44404f4472088934814e972f8bf1b2cc26d4e609c55d555d9489418a51e7b4ea1683af1ac2c99a009146eb96a85b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9db36678117f05531fb30af6491d7abd

    SHA1

    be92d615f2cd69e2601ab6637f053437c9329522

    SHA256

    1e903cc4d32e51759c58c8d60531ac70592123fde68e264da0866c4367b0c106

    SHA512

    acd81ddf31932293f4764e54629862ac97e04d0ba98179eb375927376fad7e627a3a6434b4e66b2dfdbd9c425bb4ebd4edb26157c0b8f15c21c4127ef8feddce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04dc629d323861542ca42e262ede34ac

    SHA1

    79d952833bdefa8fa3eb5d3dd63be045327b12f7

    SHA256

    1ae32a13efd344cf12b3218fff76cb2395ae45335f0a05a566d7d378363364c8

    SHA512

    9f02650dfe084d453fa1565dee20880d9fe19ae4a6241e3acb902223230250ecfdfce290bb4a266cfa8acd40244d814a7b54770679b38d996ad7342629dc1b35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75708e6364467e48f0a7b59a5770d706

    SHA1

    477d918137e7a6e970b8ccad28fc81232cc31d2c

    SHA256

    64d980e72e194fcafaf77d00933921021f366f572928cedb18dcfc1d0e30ce09

    SHA512

    1a1b95e96299b425bbacce770378ffd0a608ef199757e5881d070add54fc242c0c672e2d2ed943bf514e07ed6930e5d5c88fa07d9867ec2da8401c7ac3114f3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab1e68e7618eb5062040d25e2a145a16

    SHA1

    67b4b8b2ee8636eb5f1c020441477149943ebfce

    SHA256

    9814f7bf7fb0ab3bc0dd4d86c8c4e65d0cff73e0f2159dee98fbca38417f1bc6

    SHA512

    c5b70bb08482ce279ee48706e9cfbce56cba0fd68d69a9dfbcf14e478cce7cbe960937e181b5a454e9c53fa503111058635e9c8918cf9e065084ac78d61f553b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5659ac3459eb3ede626a8b46f996e44b

    SHA1

    5bdbf2bd7fbf4fbd9809bb632bee03410be38cba

    SHA256

    3cb5c83b4b5f68b654e8676e91cf07f5a6a16cf5569004189c4b811e34a0c284

    SHA512

    e8222a5e6f3431baf98d36c9434a4ed57a4e53cecb691bdaf9e1637d733d936c3196b99097f722f37a366325c504fa2e6255104e57bd33fe6e7170d902ec761c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69c5579263f7554bd254ac783fc9bb52

    SHA1

    f6b95763f776d79f3c4b51fab27bbb6a8a10310d

    SHA256

    9606d0dee2a3edf3475ed7d946625779e98ab5b59e0124479f894bfa3b6a2903

    SHA512

    b5fe06c28d5a14e52f18f29123281d81744be9889a9b30b4ac1823667f9f0c9a15bd10af61cb7f022dafef8920837701b8f3fe28fe33e1e667d193ce0e3f285f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88da5a5aaeb42ce7901f677f5c4ee055

    SHA1

    a7a89be8f26da89fa2bf467f225a1005ceada058

    SHA256

    d0a4b68adcbecce3a5b950b4b1644175c8272842cc94bf9efc929d0511f0afc0

    SHA512

    839971f7054c65297a734249e13fdcc63b0d44716657fc73912a8b212795ec679ef0248e46eaac20f71f77223b85b8bc361f723bba8fa86c71893bf25db976ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98143aeff5c97cf15139b4a678043cf6

    SHA1

    def64115d2d7033bf96e991d38ad2998ea84c593

    SHA256

    d5ef5db177d8f474224c0bf229066edd38a198ee3f15233a6e0817471ed89c0f

    SHA512

    5025aee06b0e33847537f270fdde1f953d5bc8ebc4195b86de9d5a8a4727bf9c77a27aedaf1d66d7b7ead8171de25ea65ce81ae9f7f97beabbb572d80532b691

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f72d180d2060aab35d173d5db8c53ef6

    SHA1

    39db8d385fe779999e565b67d07bf2816d285d14

    SHA256

    157b46d77e362d789f7c01b0d62e324e75ee49e90b1810acdd0f0945863ac5f5

    SHA512

    c3eba04f4e614fcff8bf9c6c7ee2a5257e979830079e4445dcff61059760eea89732096afe226724b193188606d6b3580ab96205d7af9a2e6848a65c1931fe12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20e25162b50ddbe563fb41213a6e9d16

    SHA1

    3319203ca14c0a258204d58abcb1a25e9365e8e2

    SHA256

    a9e356a635a7ecc9ae06e1eab570591694ed3826cf2a4dca1e3438372bccaec2

    SHA512

    8d4c99a98d6b668abdf9fa6af53549f94372f3b755f3ceff2879f968855fb22891c2ab310edb6979bcd41da000ecda168a2d5fd6f7b5b2e7b16f8d8a84bd22e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77d8782ff112fe7a8c68e50c2bf6b055

    SHA1

    9e456e614d74bf37a14a2dfaec7329e7cdee25ec

    SHA256

    bcaccc33b5c3ae3e890813838df46ba3911f85fa9dece73d65fc3ba7e9619bbc

    SHA512

    a2f20c9eef9d6310279c7035a602ba87b8987fed5213e7ee99edc78f718a154e25de57744dd0119904484f216b7e25ea796db11c51b7e0e8171f9615eea9fee6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ff46d638d0e4dbdba709062db74a062

    SHA1

    072c62dee1e3883ab9e3fb76c6d0e7805083acfb

    SHA256

    5e159393e70873894c218e6cc2c81b344c3a25aded8815cb9d7056e0b9a5a6b4

    SHA512

    3bc6698fb5bad785d9788096176ede2c62b95294c656afdd178770bc85a950d22a6899fdbe6fccefc504deb7a6759da4c4e31c3ffc8cac12bf66f0bd58d3eea8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ceedad041eaec253983827b49671af4

    SHA1

    c88ef1833acadfd64dc5e0a5a4ea2e4c02266c13

    SHA256

    bde63aafc6d50923caa313437f725a27bd108dfebab6c22c0d73065e4747b2ad

    SHA512

    f8de4b0e0455bc139c3e0cc75d5f0c7bab1d7a50728a2fcb34b445e6f1f2c8697fa7e172d1d26efc30107f5a962e5a8b91155ea8d8b9896f8a7bc802cd44bc91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc952db9b5895451bd4074da4b46c32b

    SHA1

    bbb179d04a4fb2d235a1404c2422641795641514

    SHA256

    1aa0bf23fc1904d7fb8b7359ca906670b33cb22bc5cb1752bdd13dec36c76a54

    SHA512

    45d30706a0f07287fbd487346978b77b7ff181946590750504442d7ec7f33c6e836bba3a484b5ab128ac801331d69fb1dd992d2047e4cf72919496be1eff93e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2f1673fe8e6d0a3a0e71ca7ab188cbf5

    SHA1

    5f02a842c9d67f22f60c98ee9d64005eaedd771e

    SHA256

    477c298309b975835e0a27206528a767cc8d6d5ba3d61c5ea09d636db1fcd7a1

    SHA512

    6f855619b13bee235e7f1d3a80a374ca2bb6f08521ed545864807315151a75bd2f51022b19f7b4ffc24fde63021a068123a98a21f332c469a60256eac5844c7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    008d0395c7eafacf0b2fe81f5e235b2b

    SHA1

    d7a520392b7c79a29b9ff643fbfa9651a60e7846

    SHA256

    c527f908dd0c8df373e5222bff077ac6609c553f5fff24a67954ddf5aea92bf9

    SHA512

    b152e1c8f59dbe3608764daafc972757ed9921d9db20cb5f2a3a8d80e19c0e08ae7262d66d400193baab7dfe75622d1790fcce3648b8978f71aae91a361f1dac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cce1bf308e4bed5015644947e10d4d9a

    SHA1

    59ba8fc5aa4512781ca2bfd62dd7eddb27b800ec

    SHA256

    315e5e1912a79b33e4f301fa28264e831c730e1c1d2f360377afc9d3f99b866e

    SHA512

    dde1a62243baf3a07155548a13895322651411de83e915150fa64e3a59bec974ad86f8bfe5be815d9c916866094c7012c4b13dc3047f01474132be27120d3717

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e257dc5d24f12792a481ecbfda0df07c

    SHA1

    a98c90f00cf588dc1940b02744be76c065077a6d

    SHA256

    2cae1f150e189ddd4c22379840d94333832b95313c71c5a24c111c33c9dc91b2

    SHA512

    56f58972dbb464ff3ef2c5b390ae5b0dc3d19490d5fb0c87619b2072cb7ee559f34d004476d8bd77e126958b3a4b0ac04ef2afc2f880e02b1d10b6d94ea78a5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c74c62d602329b41173b7d9265155adc

    SHA1

    35c72999a976c290da9340de2683759fe361726c

    SHA256

    92e9de0b4a97b4c970d0692c84b7480916b4cbeb7f16592be6c1b6bd3d54d39d

    SHA512

    64a920760ca95b187f6e8e0ac9161479239987f59ccca383e49653a4cf0a4485b0ff17cfab6a204a1ef02570f2cff8824e3954b60bb156b62774dfea059a5664

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    6c5a91dfafae0a682972876cd365d907

    SHA1

    60684d50ec1d88eb62c7f30599750d51d9896bf8

    SHA256

    9bec150a4595276e8758c01eef2554d34429df17f8ae61e17e160cf5dfb4e531

    SHA512

    badfa5326769d8f77d0e1343140d0dee5a3e75fd966bf7c14e659c2ad5f3cd0ae8209c8c9a35f7aecdd3b18a5b9033e146418eaa5f9bf03325279c045ce7dcce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Cab317D.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar32E9.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a