Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    21/05/2024, 04:32

General

  • Target

    620a0b4f85e043629b426ba9e7aa7a73_JaffaCakes118.html

  • Size

    69KB

  • MD5

    620a0b4f85e043629b426ba9e7aa7a73

  • SHA1

    0941c545282b0a94b60cbd742993b1df63182bac

  • SHA256

    d5c4aa28a968ee755fcbd2830e99555ee37d87a41502450065f13e2a27cf5a49

  • SHA512

    f9f5ed2e6e9f2167c4b24504790b982b621b472172dbcea0c0c935c19ba424d308325486b7581067d06aacd00366986bc8c81de75eead4f7213ed165132be448

  • SSDEEP

    768:JiagcMWR3sI2PDDnd0g6sXN8oTyZ1wCZkoTyMdtbBnfBgN8/lboiGhcRoQFVG8sB:JeBTSNen0tbrga90hcJNnspv

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\620a0b4f85e043629b426ba9e7aa7a73_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1632
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1632 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3004

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    7ca77964abe6f2c48c41de3fd7985134

    SHA1

    b4809e4e998beb994b9392047d0940e75f9afe78

    SHA256

    fba32765f5ca385ed5b630f529338d858c9be3726e086b6b0d53d5d3c6c8a259

    SHA512

    ea9cc82d6df0855c4c66125d9a195d784f385fa51c684799196036b64b20d0d9f7d2d23175f0e9b33a0be60c57a9303d47509792ff3cc59997e804e3c016a5fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4a293981b602575d1db47bb587e0569

    SHA1

    70d4c4aeb26cb280c44066b5bf9f3800909d274e

    SHA256

    4b42ba9f95ec9c53e2f73d3c5e098e057dc2f2c6f95f715eb048e096ac02ba24

    SHA512

    b650bbc3b4d6e02b47ff0eab3c2e3a97a0c614d2c06c5605ef5c984df07feffc8a6d2d9764d8d616c40fb497276bbae1de8c2bcfdc232a82afa2978d788f2e08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4d7084b73d8b8615c40584e15f958cc

    SHA1

    82facd975888e6baafc1622ccd0cd5af365bf0e8

    SHA256

    c9c22695a154ac318890c930864220b7cb892641883ad6d8e88124bb50007a65

    SHA512

    3f9e69e02944e3a71788aff8a8e7c6f829af2698ed1a001b9444af8756213b894ca821e8eac3b6daacd13292d8d76bc0c501f8c5f12289bb39bc972557f722c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    479d05dfc5ec5c7c756298d84f2b4a27

    SHA1

    53b98c8dd489e4af8c43eccd6c3b36de052d5976

    SHA256

    32a3d50a4e21ba62dce328e29cc2d59a3e8ca7b683c3a22a48350aed03c40d00

    SHA512

    fd3adb1e41c86d0972537e2efc2caf5859a957379d55933b79d51ee15feba1c215b604b4fedd34c6812e229c594a911cf597b189c1df3d259014cc7968d6f4a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    768e1f6389261de5f377ff1bc1ca90bc

    SHA1

    6178d38aa27dfb16fe88ec2dd8a694aa995fda7d

    SHA256

    917c29f2ecd5fe787809343164228cb44da8c97560425c9f33214d3d615e6c92

    SHA512

    6f0954855039c20996b95bddb3805aa1b992c1f99f74dad3bd8fc4bff81e678d799ec36f6e67b66f078cedaeed2d218797b7eac49fec168f55e1556762857510

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4995a31dd3a859d081d2bb49a345805

    SHA1

    baaaf1f6a57116f26fdbf40c268421119ce0a306

    SHA256

    c0914abca6cf8d152588d1b787512aafca233a78b4876b68f56b3bed585aa3fa

    SHA512

    97cc235e473ed2c15ac3936c0cb3e0e8b95df5efeb342019fa188c1f27c5f715d352fdedc5364d945c5cde8eefd0dfa6bacbb978dfb0bff5bc70a0e8a0177729

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bff526c72f456124f3042b54d104e706

    SHA1

    8a9c1c9eeb53fddc98ed86d4c2c4bdcab08d8021

    SHA256

    16891059717da57c8c7a19a9c794bcabe3f32d387a9e0c519ddeff2016ac56e3

    SHA512

    53392cf6d2a9318c334e312ead31e56ce632d0e99b1fc37db61d40ab9fad94f724af719d234ca9a8eed5be60e829edcd43b76f951f1d4d54a93b8be62e443663

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5a5766d6177c9a0a4bb47d12bdec627

    SHA1

    b0af50faf5f9abb81b23c0682d2e220b81096325

    SHA256

    b344ba994111e07c837d3958a170b9affa8d55b02f87e9c684fd3f361b6787cb

    SHA512

    ab85d73acce5d0faf0b9998db1bdbddaf73261ac037d3129dc450169ef9e40ac4e8e24796ea3c6d55b9e0ced0a4a41ede581f71db34031680310b0acc3b0cf5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21099df8326c913f15ee99879cee5c44

    SHA1

    00383acd6ccf40b6d5b025302202c6504935e0cb

    SHA256

    f37b948c1172b931752e80d74ae192e0031d41dc88fbe269342766d9993d4e2e

    SHA512

    1e6cc17f29b0ad9c6cacb0bc58233ea6fe8c96b4ef2bd9a847bbeee6303dde79e8077daea079adc0a40eae2e496c4f352c791202acd38fd0dfa0a5fa33301729

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a76726a6d46fe6d1dd9ead2a99d5ba2

    SHA1

    61fcce5f9c90f136f0f8bfb15c84617c8c8bc374

    SHA256

    5f9bb0b78b1270746b11666a577cff078d4ca66727ad697455cd471f68c2270e

    SHA512

    030234bd332a476f85b890022292389e3776ebc44d0b2694c457cfdc551d60d7050fd19bfc426645874d1a54891b9253820a7bb1e52e94dc5fcf068e5c0afed1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b0244c0b4f62c0362659b77754d4321

    SHA1

    ba15f4f181c6dc05786c4e0cb211830c8ba47ebc

    SHA256

    5d70a681069eff54abada5a9fd314627bede223e5d04e305ebfdd55798613c13

    SHA512

    3058612ae3a9d1cd798e99d7f66b91d03f327eaa97c16200d72355fd4f3b64074ca4b6c31c855167fefeb819672be160a4fe55db17b1c58786e52c93fe220471

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55b121d814cb782d0eba32bc20e3773f

    SHA1

    752887a706a9346bc06c53b98115526928d835c9

    SHA256

    745ce87f019ea2378a7fba1f5d848ffd9b2e640c8b964263d13b91ea0746b8f5

    SHA512

    cab5473952703940afdbfaffb678acf9549ca67c6cca4daf7976f8150d77d14fd838cef86bc56cee20a62ca53843ae27f6fc455b655cf5ba74915edbe089a8d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d839434b7e5c4e3e82346cd4291fd681

    SHA1

    eadceb527cfdcdab820077c637855c82244a1adc

    SHA256

    cd55293b27ba1b2517ce0b463e0a55b63e9bb6953e881a2c68d4883a182bfa9a

    SHA512

    8f0b1b69b42f6934fdd401beb951d9981b60c78c533d03a2cf4a5eb87beafc0b94d76701502efa834d61fa06cbd93a41b5ecd2e22d6ade6606661fbf6954c5df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8dcd5421bfe4eb09478a891787b3b59

    SHA1

    edd9355a9cb919067e4fc3156904c94652c19e1e

    SHA256

    70a2e8d171964039dfe529a41b36738dff15e06504c7457db940e7e5581fa631

    SHA512

    e8f180ffcb7aaef74b70fe7fda89e8e6524a1c5c29b288c160a397499dffd0ecadd72a1780e5ac62b9263ee2065ed4176d8e970439c503be062d73a6c7f25185

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53c15b43fd71ed3e90d6ab25849f31db

    SHA1

    f73fd3c3e0cdea5db4ab6f9ee40b598fbf38118e

    SHA256

    b640e0b67288d14f0f2c6e55c3c81f80fe13c67399c8707b8dcd59f4b130cb82

    SHA512

    32e14ac2e43e23fc705cd145403228bfa225e81c604e3b2c5b460388ce9bf3cd3a49a2f1372bbf1202f4d376795db421769de5f64d5ab3c09f9bf9a2d767a72c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    84995a877379a9402e61ba59da2aa877

    SHA1

    ec6e776f53736af097adc85997a1b2f1b31fe3c3

    SHA256

    4d0afa156612246fa14d7f76c4aac344b78ee03a790258a4eb6775e26e4d1574

    SHA512

    a106c50398729d8d5459ecd8df390807f72e80341c368f8279a2adfee9183c269b70c719b335aba43ac014c8dc4f9fedebccd2c64ec3bfa427d8ff9820e7be5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25e4d22033989d4a8b0c908e5cae5c50

    SHA1

    3a606f6c29effd716ad3c4ee70807f27e8d93376

    SHA256

    a4d8ca573b8b50f583a32f8ac3c97f72ecf9354bc84ac46c22aa5418738b44c0

    SHA512

    153e462de94147b12b15de3702ac55636bbbd1adbe51bdddf6adfaf26ac6a823e9dc4a784490ef89e6f21776018d033920cd427583a4fe461fb12bc78dd32025

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    47abdf4ee1775865512c22fe5796de2f

    SHA1

    480aee9f97e74e1e22978b53e41badd7ea5ac4c4

    SHA256

    7c0a29ed2480de27fe9672a0d2563ca6d655d69fa89159182f3152acaf6f3a65

    SHA512

    365b50a8de2d91ebf919a1f07a28b0d72ad69954e7e02a4cd526d78ec3582bf5548399a22ca09b58b5d15d08debdd40d02014e2caf9c5f0e07f7963e22a98684

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28c86c499be41693b4f1b72d78a49cac

    SHA1

    51377ebea98c1d542b95da9471420464d56fc1ea

    SHA256

    f0e312cc931444fc5f8e4cb811a1b60da1d4ca4d97a2c6b6fc05918ae5bf7f97

    SHA512

    13aa5d161e4ed37b329dffba288814cd41c1b424cf49f72553857128c3f0851b365a325b4d0eb34c8351c0930158c54532f7414dfea01152a208bc96d6b4cf0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6fbd283dad597a3739a406b89382d35

    SHA1

    18229a01c061557cbbb3de14daab673f7033e9dd

    SHA256

    c2ac508a0b4ae5eb7caf830ae93bdc87496e139ad7f4a8dfc57397e1aff35978

    SHA512

    545014fde39f926db9b0dddff10334bf28548712f7baf8da7e9756619b72c6c1751e6945bcc367d7555a866d0ecfddc89c13829e0070ce111425ba323526d618

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    a10c44e3e544df1d42395b28b6b6fcc3

    SHA1

    534efd2da973440453d8004c72a5681963208391

    SHA256

    fbe534181e9a4d4496da06f312811449029b73ddc8c82152e094a6179a29bb9d

    SHA512

    1abbd9785bdc4a438660b2934b94fb36881473727aede7bee7a25a9dc7acfbdc3fd70fed4b150c78ef1c8d54eba8a241f8dd3dfce70cd20a8f8b65207569eb99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar32F8.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a