Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 07:57

General

  • Target

    786e25213b3d9ad7ef090a57cc7cbe62_JaffaCakes118.html

  • Size

    31KB

  • MD5

    786e25213b3d9ad7ef090a57cc7cbe62

  • SHA1

    b00d55b1ecc093e76d1f8c87820ae3980974990f

  • SHA256

    f9e42d43ea3012ab590e93389c8778efdd9ccc492af2dda9b57b268372bd16d1

  • SHA512

    4d6774f2c67b332f4c84b24360ba1621fa198606ca63d0d7d46c46461b883ae6fa8d8b6c131ba9e6504e6fb9a20a51074f26417d164232fd69b860586d24969a

  • SSDEEP

    768:wrEsUdkptQrkVfUdRSu2uVuRCKC3C3CuCuCSCSC3C3ClClC+nGRnEInMwC9c4BaG:wrEsUdkptQrkVfPl44XXppCCMMtnGtER

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\786e25213b3d9ad7ef090a57cc7cbe62_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1756
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1756 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2856

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    d676b328a1f0a11529068294dd5566fe

    SHA1

    8ce6518c698e33f48790466b7b069101b662b70b

    SHA256

    8b1be5722bdaad9cb47f792782bba849382fc115f69fa306c4d0b712efb410e9

    SHA512

    4f7b26e56dff0ef1df75157bed6a049103109191efae8ad79b190be696f31922c41c90075454da0b120d6d0463c2ce0ccfc759ac246522d6ee7e4ce20b0f5eb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5466775f3faaf71da90b4ce3bed1e7ef

    SHA1

    de5d12cfb9b4cd6f557d4b0ed29ee458bf03b3ea

    SHA256

    631528fb09bc94897a2616b8e943a496c24eb5ba3d6e28b7cee733778af0bc45

    SHA512

    7124ac84e3c313c7e348da96900e2b933c8f30f3a73271e796b312ebd13ac211972b2c6fa0ada49089967a993a12a233208ee123353f9307b98fcc1a286a6b03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b73355ab455f54b12532df59651476e

    SHA1

    87c56ad059e69b6d6d68e4fda19efe9c563bb390

    SHA256

    8feac53847921c8848902e16e1ce1db9c8b9e07411cc5bd52581fad60d390222

    SHA512

    e95f3d8e0aef2243487506e3f93bd8905348670c78b4e78115d2ac7463636e72859ad94d8db0c236f2b4e8d8662a969a5d156d853440aa82a31f47e64b5260e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b0c8586e6d432b19369533762222258

    SHA1

    c6f46cdd25efed92c2cd4523566a49c6890acf42

    SHA256

    ff013342dec828fa30556410aab227a05d14a41571770eb28649dd56c9c716e0

    SHA512

    8d2b582256a209c9e8d7a4b5f0120e5d0e42d55c5d3c7ffde4abb4b709a6cbaf5f1ff030f65e68d6bf097475658140bf8f718538ef6ce61f366c110716795f06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f98430ab719b639d701fd7775edb8a03

    SHA1

    12e225f46e0b4ee7964c7d350222baf3760885e2

    SHA256

    f0910a043a024f1309cef01850087bf7e310939a40dba32551f3c4f725939553

    SHA512

    4bf1c23045fd215cd05e36ae8697d6ed6f821970189cbb71bacfb6f47a1b18c024eab7b461c5aa4fb0afad5d0999e932d4f4389bfcd83311c19dfef491ebbef7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8567d1bd3e8134a280f9322aa741ddd

    SHA1

    e629d81dcb593b5c1b43e280c044747dae74b745

    SHA256

    e38b027112a4b3ce3c24a10829d667be2ca3ff550fa90100f475bc1f628ba047

    SHA512

    f17a632a58854628d22df51da7a71882f81da3a2f8109a42550f5e4bc03e234bf029d418a04d449a5079d8f0d4e5b64767e078fe8dd0e9390c67f1a0b0318f93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ae30a6861395b1ee14c4422f9e26816

    SHA1

    6bd022dd3e7caff2c3c1533e494a94b62fde031a

    SHA256

    42134598c1e1165a8e6dfdf7e988c3ed5d8e043c5335c658e155a368e6d995db

    SHA512

    7621a42ae9bf903cfc1e979586f1389b0253edfca9050b65954f3e89d9fac4248ebc0a904b32b304c9c0b76ae839cc22c982a93a9d4714b150b5dc6fe09c3a3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54adc41f60d47f43fbc4be720d5daae6

    SHA1

    41cbd5791cfaebc7d1accc7e253cc7f8494153e5

    SHA256

    b847e7d4bbf45fc2e228d9262b6001b79d174e4c7d918d0f16077bd3f86ddc50

    SHA512

    134ae5c71d7fd502653882960b29d72a6eee6214f85e2fa5d1a30dce23a9130aee0ffc05e22fa57e886285bae1bbec93342da3102a2e9875bfdd0a3eeba10457

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a8b89b63f2e959fca1f9f5359ef106b

    SHA1

    7bda49062fee25034bf5221aeb20e2904187e413

    SHA256

    0313ef1ad317123ce3e4ed38aaa6098d490f3921a644e71d71fc7f5ddc04388d

    SHA512

    cf5fae12a3eb41ec5088f3c3cb6d9b1422ccf3e64210c2bb0132a62ebc517ead05d282f3d04b2b0cd1f02d7f3cc25294ce71e709b14676404b35889f7c1d473a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f4eda223ed823e9d7d35caca010f020

    SHA1

    e8c0c6a3e6163e55e43d0aa1e194184bf7d7bd16

    SHA256

    8a20f2b8f198c15cc9994ab3b3c57e5ea689392413a7ccf194e7c5267992f790

    SHA512

    3161a8af7fd6a2e5c0d44a06fece97e19164795925e16bb387b1bab4037c3c71aa5ea45692c8644e89b21675650c3e7d6705efc8b8796a15ee51e9f1effc6c41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc8862744d2c774d6ff3c1217d9d8afe

    SHA1

    42feb0796f387d290abc4ce68a2903db47f0f593

    SHA256

    11c066fddf1a22079f0451144404e4913b5a39a0623a82d0f66fa759c0067400

    SHA512

    6645352e5e145df16f3027deadc39021cd18edf5c7ff14b5a9de8acfd8d1a22f2c497461dac59be72eff85aa9a5369d6db98a7471088cab597b6480180f3ddf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb5c6f19ef25829960f6ff0a5ed274be

    SHA1

    ca97bf563120320b38ff169f050811962445c3ba

    SHA256

    2b5b909139560bdacc04c5e6d1398816e41215181b59b30247d233ffe5fd3ce0

    SHA512

    3e5bb8834d7bea42ce44f83e45902205415374e00d3a868e51eeda7f3f1f1e342e1d47eaf4e1ec4ac601282af99e7541c7e98870750278891324b94b1f6dd4ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e409e329c7f3c5f1f23919f335de286a

    SHA1

    1808814d7ee8c7a723ebb78a7ad5c4256bfb1b2a

    SHA256

    97c5d6bc66393b1ec356b444d30ba3fc5067304297a21218478c33ac15958c7d

    SHA512

    645c2bf6a18856e546fb095bdedba02a84618d8233d17ff4723f9f967ca3fcf619138a1daa66568f50380bf7c4885006f3cf90e323a7d9690a2f40005e5099fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1dd336ac2bcffa028ed23c8ea3a3c61a

    SHA1

    4ccf9f9878503a5a57ccf3fb3aaa52feaa1f8166

    SHA256

    fb7caab471371adf7445f6ac059664ccae7dd471a0c9755de6c04bdb9076699f

    SHA512

    0f04f5d213394c3f6e40626e89feb5ddc9c6677d3576a51cd19dd0f9d0f823c07d45e27f50530a3faa16a60a03275df3d2c9b9980f285b67b94964e0b5f3c726

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8235cc5bae49be09ad756cc58248062b

    SHA1

    9e1acb6da898d6267e5fa0f64522576d9650b5f9

    SHA256

    59f4f56260b77a7da5cc2515167a8fef9f0fbca25fc5053d6b0b24e4d7359e74

    SHA512

    1e6a548ed238858205d4ba5748d2086ca70679f9f3c9122b8453038f765000255257e115e67d4d80d34031b086c514845c4c6d368801be931f3bfeaa21b37cca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2d740b0196b75a421bdef47a16a535b

    SHA1

    2531e978a8a0bed9aeea865f8f08fc07c4450b35

    SHA256

    f62298de81c108d9a146b04c5155dbc9f9a463f02797f3da4e1fcd34a4bce0e7

    SHA512

    1c249f93060fae302e374fb3c16f73b58be5dbfa187f5c44d5a6744aeaf43251f9a6de3c99f3b2ef93aeb9b6a8a33fdcfeab438952b567a1e4e1fdb801e32577

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2559b465180d25e7b9e438809b55df36

    SHA1

    5812e92c0e658f1bde953b7cb14782e559ec7c4c

    SHA256

    514ece6e654c71a708b9679231a8eebc7b560acde71cfe3e44d2171a0444add7

    SHA512

    a13887117f5f39586d823297c13fd46a7d4decb6721c004f9d309b12a36b94a4009cbdcc6297e49aef195d92acbd29ec0e387d66a31a9b554ef0fc90cff7b14d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    646e0ad35d7b17fa2394ad61e358c1b0

    SHA1

    c4f7c0f3a8a81f1f493ba811a9b34b5427628d12

    SHA256

    cd7617d5b7afefc454776e3ce3982190c9f9199c5050056ddee6a41d89f33392

    SHA512

    91bb771a321ef5738f629f06315d3816c5e3a8080b2b15eb925493c0d1671250d0166f570bccb76635d22024975d30cb50e61851d5547c7c2e2cf0f90449cd3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    a05e9393469cc80c12b8406de40a18e0

    SHA1

    1931f66180ec3da72b45320e6bae4fe22263fb83

    SHA256

    1b91cefe128bc94cb43ea388810c30d694c6dbc37369d26f903d015a53660d7f

    SHA512

    55ea6dd22831a2115b83cc56bb51c5414d5d8a274b49a6f3b313ccf59fc0db7f98660563b50cb404620d6e1041e64b0d38cf5ed7e99ba3ca3414966a92bc9ac1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    38be3c1d92dc024275536e5fa69b533c

    SHA1

    1b472c4491a58796119625ca7ee16ebad6277fd6

    SHA256

    745f5a69c89f088b934fe261501f8e239c75c1d429c15372d743d5260e2fd893

    SHA512

    2c4ec427ff79e19dcd9159105b52e51e86b6144a4a37c7547f4588a501aeb99a7613486577183587ce420799ce4c50c9336a749f61c63831f2070fcec7fa4d32

  • C:\Users\Admin\AppData\Local\Temp\Cab369B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar369E.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar377F.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a