Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    21/05/2024, 23:15

General

  • Target

    65236d11839912d36a62dbe9f20660cb_JaffaCakes118.html

  • Size

    220KB

  • MD5

    65236d11839912d36a62dbe9f20660cb

  • SHA1

    2b2d243f53775baf5905fac16ab45b0cf587dcfa

  • SHA256

    2a9e4cf58de4b5f59618f333b02830b2eb254ec7d7a8cd9fbbe08723dea2c948

  • SHA512

    2978fccbcf200cededb123110b19dba6d01e546e96f4a608b44ec09164e59a157ad456f7b2b65f6e81176fca6e6153d1b0186a742e9cf2705b1fb89b9f12baab

  • SSDEEP

    3072:SHsTAUY04CaltyfkMY+BES09JXAnyrZalI+YQ:SHI58esMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 37 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\65236d11839912d36a62dbe9f20660cb_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1712
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1712 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2660

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    4739f8e89e37cfb9dd0f5e4f99198ef8

    SHA1

    122445659b33376fd4b8e3ca26c0aa4eab2b4a5f

    SHA256

    a169852b5497616c0e8089930ec6cb473b0d9aeee8ea69cac6c5045b4f18cdf7

    SHA512

    4a73edc113fd38bc1708ae98fcd662244ca0c0de87c97b74dca0cd5798534b06c9e93138c2df0ab1ed771aef422c2370f323c5b7e46c2b1c34ba62ba70cccc97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c0542658b557cfdb5cbfb9982f0b92c

    SHA1

    c670d45a4ef976585dd15798f9fa8ea0eefa6ca9

    SHA256

    6ccda99d2f1538e713a411f3cff556cc6831567ea0c4d60e74ba0325415b1516

    SHA512

    20865b532ee7afed410c0dfde18826d45332596434e1184d22f8bb3319d2b3691db814f35fcc2e55eb6bf2950f45e7e79d81ff611196999c4635371536493696

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a8180b64033e4b3963793315a21a04d

    SHA1

    54e9b7de37d1741d904c61f644875210459196bf

    SHA256

    4bbe0e60ecb7cb5292738b443d512e57e9e2485895f7b44c87572dc669996b9d

    SHA512

    92a58dac23a0da7c655567fea00dd5fbf6dea339d997fa6a1b3bc68b439e86516119dcf5736c4103f240cc43c42ed6804c299d86dc6d40288af37e43e7d9470d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2cf7e3874f07d5c03307b54b3058de64

    SHA1

    1ecb01e84971df1cd5249c6954f0ec9ea6503947

    SHA256

    a7ea45e5c117a2c0383980bbf0f223ad534da454cd30f074df202457e861b032

    SHA512

    d5336c3fa64067dc752d4191eff3699f0126bdfc86d8290e0ddd981b185fa148bc79c8dd21cf9ef384af2dcee1d88c2573b960a2ace826e125044997517cae6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    245122744d5cbe8fb139cdf2078c3d59

    SHA1

    a2642af5babcaffbecd5b562f7a29fd9c2150692

    SHA256

    00adc82f1dc037eef64bd74a7f6eba678cd8cdabae21abc80aeff3378667ded1

    SHA512

    be4abd6bf51c3e5d9a8b11255bf2062ba9e368096a6a1d60ffa6b9707267bf8d6845fbb6d29687043980f7773529f8c8eb4639c2d7ef3fa9acdf9ffe6143c3d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f88c255ea223724478e5d6aed43e8dd5

    SHA1

    07ccfbc1d3f17338cb5d7b911b5daba39a4813a2

    SHA256

    84577270c4e58844e1fa19fdab4b9cd5bfb92e20d6a11700353ee8e4ae5558be

    SHA512

    74103770b8eadb357971ad88e2b599d7a43dda5b5a8e30c5a3738323039b3078a7c46229ede64299535c15253196a4a0092bbe4bc6b3f41921ab6c23cd8323a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    87700d4795032fb5a52a1acd16a347fc

    SHA1

    6e7d033fc7a251cc00c4c75156f76a0aa9a36933

    SHA256

    442ae1ef43dd54534206fe6ed4cdf128e15623b49ccf4fde884be5db152d06ec

    SHA512

    2a7e9c07643e277647ccb3e1a12b2d5bc98dc4d4332466f734fe9804ef8dbba714faeca2f0f4a295cb2829e5ad0da6ddfdb263f0de3bf30bd53f7ff4085fcdbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf41b14f58a7d3068a5318cd5d9a3f2c

    SHA1

    03bcb33208336a0207d5c73fdd2ced8cfe74dfb8

    SHA256

    6c92f5d1381345262fcb506ab0ca02dfeb78f87385619ea5383a4166030f52a3

    SHA512

    79f71c86eeac6fcacdbca86be0ae471a49c3d0b4816b0c76d78828e7b3dfe296b29a4637d85b61dece105df9a10097721e25d12f84370b7ef6dfa2095f515a84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd88606bb71207c98f5209f22529f0d0

    SHA1

    11c77e9e505ba52de17a4a76b5ce6d23406b761f

    SHA256

    514d27af093cf0de65863e552061c356f4cc195cd41c488e082f450a402dc6be

    SHA512

    ed21dfe409b708835846854377133ec1c31f7b409fc53a056565f44ba0a09fe5e70fff54be523b00f4e5f9256e74693a5e069ba74f70465934bfd621effc2440

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f7e85cdb581912851267fd0e96c0be9

    SHA1

    10a1c05769f1557fdf52ab7db4b7aca35bcd22d1

    SHA256

    757013af44a552ea38552307e6b94a69c419431189d70c562e1682791c38e9ae

    SHA512

    ea47a5d4bf3035ef357c2303a914412038b52b6074022e434da4bba02895aa54821ad18626ff7b2f6652b268fcde2e8bea6b48d389570ff72e498bea710d2c83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b3e2531c56c20046b890a4481dd76ed

    SHA1

    8b1c77d3101d958ebf3486d0aee1f2bafc8aa3e5

    SHA256

    81f4dae3f3d77426a84bd97b6c57daea92cdee1a82e6efbd623a0c6779a47ed4

    SHA512

    3b1b24e2c78c5339aa3443e52f8beebaadeb855f7de66bcb7b365bd1259a903ba661154bcbba5cb6ac398c87908072987525867c60c0a42d8ef6cb5220e14d7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    201898d0cd33317b5eea50367550b67d

    SHA1

    c15ca6dab31fa3a4d9d66d75d58c17d03f97c26a

    SHA256

    42df781f89f31226bfa70de3b682e986b0c03ade5bf4fa58a16f533a45d8c7d9

    SHA512

    6bdecb9ae951e1c7bd9a8f1178282e57875687681cc9755d36080b88fed94cd122b8c017a2cf1ac5c6765c2da9d7d2b9061129cc863fe1f3a1b42df144318c08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07de16a9bb296d387d71370bf25c606e

    SHA1

    3f160eb571655072558eafcf08b67e20a9caecf4

    SHA256

    2d123b3564093f86b49e6459921b64a00b339783a8bdea0d892c8fefff9ba10d

    SHA512

    7470b3bfe0c20ad8ceffcf2f8943eed98c780c82bb696181d5a1794eca969fb5c201b4c663c13f95d5446b5f6db09de1b880cab7f07d811d9e77cc17abdf7f56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b6777b4a8a1a27b74effb94772b0bbd4

    SHA1

    a41fb3a814159c2acfe774cd99d9b59ef91ab577

    SHA256

    0ba4f889ff475a9f6e5a61fbfa5c8f8ad6b29039053f32d7f41e52787673e921

    SHA512

    ad6a8891e5156d0d8252f3593e50c07ec3880a1bc42bce15f5773625848b6dd72936df77c1318262536af2cd57c5a5696df712ad051bc5a173b0f1e0c94dd339

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    caa96e44e24278d66e81527cf2b093ed

    SHA1

    f616879830a8365322b533888b2f48bd543b057b

    SHA256

    f6f5ec439e91c7c6c605ecab7a67cd39a3c04d697c02179adfcfb6900d3f23fb

    SHA512

    f3bfef06151b2d86a135b6a6931c53497a0eae27a85f63645c33c11b758306560b169411718dfa169494f6ffd770fcefa2ff9953f6c3237b1c8da58fd818593f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5fb1206f64552f7c3b7c7248240cda6

    SHA1

    bc5bc56dd896eccc2b75261bda36fe8d9c2351de

    SHA256

    5631666b02d9afadfd18791b9e9afd5339936086872de442651316bf4a1e1cb4

    SHA512

    75b8e5740b51d7462b7de51d8e4b63f22162db0f8840bda00b44bea71cdc0171248b0a1fb08eb54f1f9eca59fc5df6961ea9d5b1c48ae0bb9bb7c53e26d2a865

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    13b214eaa1d19ff1f6f599277d5e5a35

    SHA1

    9cca961afeb0f6df824e537e8e99ef3357447001

    SHA256

    989645810c4fe98456047b6f202a8f89fe3fba8f4f951152a9e6fcfb9ec2d9c7

    SHA512

    c13e2dd222247505297348b157ffb4ee7ae0b0fe1db61ecc463b2b7db103246225b87ef96161e132d93f08359837a2f97c87bdbdf40c6c1e2853c1c03f823114

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Cab1A83.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1BC0.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a