Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 09:25

General

  • Target

    78ac0c97f201b9759b04c352e13e5b85_JaffaCakes118.html

  • Size

    36KB

  • MD5

    78ac0c97f201b9759b04c352e13e5b85

  • SHA1

    aab3d9e1e6b350bdb2ec44a961fb635d45803172

  • SHA256

    59dab9e63e473c1488818aa285ad5be7269ecc4f25da6f4a735ff66201ee43e2

  • SHA512

    e1bbafd049de7001415424c0183f0dc27e568db129f0eac596719516bc46c1128cccb37e7f7f4ee2aa43c1f4a7a119a1300d30b3083d073408b854441375e990

  • SSDEEP

    384:GpMGbNTOcQjAcR4EfDyD5RYXe/EpLj5KOPeaj1+aYs+2mg/YjBuAa:obNTOIcRt+DjYGPm

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\78ac0c97f201b9759b04c352e13e5b85_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2268
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2268 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1836

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    95cd589c3d272debf6fc19856c6542d3

    SHA1

    906baf26dc39b5069d76ae117622da00c705beb2

    SHA256

    bbe3029981be9a70956fa44d70cbb5cfa6c7675c9c41f20207cf412e09d24ac8

    SHA512

    b88ad8ee29192a39ee473973a8c962cec534e314c7006a4bc2b8c5b7c0f964c992dad1733b3f8dd5fb25c86ebe8e18ab108fa16a7710b18d2b4f471096ca8c9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99397218d85207f03e7f2886d0f4392e

    SHA1

    555584d1aac7f38499034a5c8bff08eba9fefd91

    SHA256

    4ee02d4cbe7667f630ecb7ae4d0a3b595f3c315280ac418653e8050f1d154c69

    SHA512

    92d3bacc0abe66af03229d79503140be20a7172bf7e7f7d17e1218927748deb67ee9d8b5338693dd21dc840f0feced3092b202302d7aaf56e06d0d6ad5137ec1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    612f39c9d28b01e495ca0aa3d2e42b19

    SHA1

    b550989dd2e91beaac0de0cbe15563d87047923a

    SHA256

    9fc7739370680607f6598ee4939ceeb4561a3624c12099fc798409a7f16d3179

    SHA512

    e8cdf481c4ad482ade1a6a2484938b4f0fb6d764fbc9a2ddabac71fc476d181dec9f8d900b9c1f854a565aa37ba42c07f4ab79aba9bcbdfe639fd8d192fa7db5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    562760af8c70b025d400bd40a65de505

    SHA1

    a16cc4d28d76dd710622f92ad6b85790d1d5d62a

    SHA256

    6190ddfa77ffd0cf8685737ca7af3d9f8f997c6232e7b7c4851cc8f569c57116

    SHA512

    c59b8318223f67f0e8ecde17fa077e745f2bf3252595dec90a22b01b15604e323363511f671b80b754f0ff3456e44114b748a6b85cc7829122e34b49495858d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8cfea90710d98d823a00666c832edbbb

    SHA1

    1bd834b72beb0b84f24eb47cc3869afa360280ca

    SHA256

    c51c15587b5d537baf09889bed51b240c2a1b972dd5525f8b38a6a9e535a8cab

    SHA512

    639e479836408c7c12cfb1d3859112ab4f2f0a9127027759c85303e72464fbbf5d098b0e54a980141618ad37b3207e69929bdec8c4631310a87af5132ec9395b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1881dfaeaea25cdfbb3987a4e07321df

    SHA1

    694a854a33c287047de0edbc698b96d1e01c9aac

    SHA256

    f572ecaa194d8566ce3a0d6316cd9d49b6dc7812291b8c9e1f189a669ba4d92d

    SHA512

    56586f7593086b3694a984210e8e0de7badd9cdd26893d8d2419a7e1dcf1fdb57b11ad34974012843aab387b79819d0188a10eb5ee6b95e4e491c850bef4945e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86be7675ea76ef412ebff042f55ee55a

    SHA1

    7ddd2a6e5352c45e349b39a21506cd12b02a944e

    SHA256

    4317b6df28adc2dfa3ce117416073a9cf8e22c459f492df415ae6ea64e441ee8

    SHA512

    28d569e514d452b9cd28e48b19c12d61cc4280ded03a896c6e022f3c38f026b4903e9bd80723cd6e7c006f093bc9e6af52b16c416687cc0eb2e6fc8efdea67ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e66d895e454000003cabfaafcabf7ffa

    SHA1

    849db56d60b39640986696457be7e1399054bf3b

    SHA256

    59a94bf4cbfa7a84d95627862018dc2c81ce07016cfe48c0858571f692e183a7

    SHA512

    c83a99ab914ad57588231e72b7783b21a9f22fa4db00ceb56b1f62ed9be172d223a31dd2c12efdf7d00e51ed74cd6c0e87213591d0e6b10f552ffb73179cbb4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea152f5ab3246310359537d94813f63d

    SHA1

    bc324d4b6c5dc50a0c1b6c05bf83968c0c28cbe1

    SHA256

    e25ee9364fda50dc2c07232c7ba8db840e7524cfe58fd986bae49aba5dcc3f92

    SHA512

    0a8058d5a7b32a9f0c75adaa1bbeb3a001d569a5c44945fa0c9c1b96371ce9e68780811006fbd4bc8020cd9d7a2a42306a7512d5e1c10c6174b6f155f19a58cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a279a1c4175c32a2fccb2ce422a9ba26

    SHA1

    0887e94721b00cfaba612a409bec0ab4a49ab6a1

    SHA256

    d551405c6f120c7150f2315758ad9af29248a0e4f3f87b0d209902ffbcf95012

    SHA512

    eba19bb0c56b572bc89fc7ec7e4c10711d52fcab7ac3535e3ae6945a5bf0c3396b0df994dca80c71e58c5933deda4500f546a8310b2094a9104bb6a9b8b2510f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    281fc75726f51a29f1b25a1a72c3deb9

    SHA1

    c823aa55530a397a4a4f1c19d7814c25c0e2f88b

    SHA256

    b56ce4e1edf8210efbdf46a7ef9066341d0abda2a492d98698bba351af9ae965

    SHA512

    be917a5e4935ce169c1c2de9a110842b512f018f03d39b1f9c49c2dcd67dfe09541daa4752a2ec5e5385f816c5d090c09713eee731416af1cf8b21e56c890196

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ad339ec2293cec1a5a8d493e96a19af

    SHA1

    ac97c0bf938d7f3caf8d47fc6570f4a4f82607e8

    SHA256

    b54dd44166940bd1f2f1f3a9c9512a04161aa3d65d06f0bc10fe414ac22d6743

    SHA512

    4d1034d5ded105529a8bdd6d8bf03a5fae76b4a17dda687d2799e854e1d520b17046b4a06bf8c82e6dc295f96d5047a64329551dfcd1f77ed18bec704b74c91f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1abdbb309a1c529150a8e43133b24ed

    SHA1

    ade472892a9f247dea49131c148279a634c70d54

    SHA256

    459e211bdd73c3382f128a4e70dcf643cc796283165bef48aa848557109478e0

    SHA512

    170a485f5841a6389a4b31f3f904048d39b229ecf23baef19966d884b435362f50ff57f6b54cfead8eb1e8e25f3e9247141f85cab91e32142dba9f1a5992e23f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c02bcde4d2c59252e46e156bb1939f3

    SHA1

    663ea56b579d62a06545d21b6c81570cc11fa8da

    SHA256

    fc2417632a17732e4b8ffc9b20fdbb678d7b9f2c5eb69a5652a12c7dad446c90

    SHA512

    1fc8c9c61899969a5809056e0a5f671d0f64e226a5f873f7ca06c9569191595d49c15e20fb84c760aae7119017d3a772b0c4fa892d1a1ca644dba02636f61afb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71a3ce056167a9e26405230292886b3c

    SHA1

    d6184965b28eda55bc10215f08caab58345c4a37

    SHA256

    9402f315ff579502b6b7ecd09421b0760c5fefb02ce6858864aec465f323d07f

    SHA512

    93f8c965decab4f368c40612d2daa21e139260ef03840120dc65efa044691a3de14eadf1480359c8952e1ca1dc41b845476462cbac23a206431acc1c6c405386

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b68ba63334d3984ed2335e83abf10082

    SHA1

    ea094ff64c1a39937d2a19755ef5c9d4502df39c

    SHA256

    d41e02c1b3cc2d911ec2a0911e0367bdf932cc548b5a13857e3b1ec545408964

    SHA512

    030f64a5d0d99b6ed10fe95b7aced69330fcac1fbf1a1fe197050ff90340e60b08b3b9efb48f25735562a6f8d711e6a4b412df896fe72475ef1630ac573ed057

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8600bfc4d32f41b0460cdca070e603f8

    SHA1

    92d17838bc711d20d072d47620782eac697909b2

    SHA256

    c5f7a897c3420724bb5689eb45004a7b41b73d2edd646f5fd4d0d4a7c4a8917c

    SHA512

    c48b0c318a4cc9c90119f76598cf1cfd89e0a77ca6513932f9b7f9d81575cafcebd575a739dd7b03e9015d1993c781eefb3c1e533f855d702d757acd845dd90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71d09786c8a0940f5bc80723c61c2d36

    SHA1

    65d05d6b861bdfae6dc5fa81f59333de1b5e433a

    SHA256

    d93b85b645d495c5323d0d628e018cbbe14618e932996570084c090dd4c78fd8

    SHA512

    72f691a3ac00a3b227392d260adc186dd1179c68553aef56ef5ebef2137cffdbcb571fd1433466f6897690e2da172cc2bd927faba6eb49b0651ac26e11dcfc0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b36110d8fa3aa7fa68ef50d0c431658

    SHA1

    0300286bee12113f713c7f7031b5e125ed5b40d2

    SHA256

    553db3d62709db3ed7b24346e9f99b0306d40e9cc43178de11734612644a1922

    SHA512

    5b4dd9755d10ff5a29e5b3ca2aec3554ef0725095603663dec83e71f218c2985f52b71c56776e338974471cc1b9f7e726cccc9db901d839b3d28f5c500b06d07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b387f834ee890975c4569a6985303b5c

    SHA1

    48c5129b1e7ed0e1ee3757b579851c0248b454e7

    SHA256

    29ebd43a7847ec83ad43d5494bbdc07faf760f0c33c69470cf66bfba28c9a58a

    SHA512

    4d3c5792145a04f879b6477821ca01baf65d512e046357d43b06969cd809eaed3a15e3b51bea0245320d585c40f228aad49a7bb30edb33365dd85d03b926db96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    257e6baba15faf0514dc3b0338b0baae

    SHA1

    872b0e1dd5c2eff59e2df99f7847bc3e2eb8db60

    SHA256

    77ef1b58f1cda9699645c0ef3531b3a23cc117dadc2ecb5d0a25f70ab6d14439

    SHA512

    93c96a1649d1123013999687678ec2bd2005c2eb70187889ac3d934912ebd02fda91c83a1ba68cee886f60b492006e427eaa9b9bab7afbd1365f8c03356680b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f09fbbdd45342be1788d4395bfb60fbf

    SHA1

    3fde70ced29405eba8102238fc5b3650fcfb413e

    SHA256

    1f20364a13361be5fd264a89f03eb6dd2aa727335459bd1a042a835e130b356e

    SHA512

    cd9011515e544c0ff96c23851da72a64fc5635c30458dc1728bef91032b2a72e61ff77442f2ffba708adab46fee1b6baaa3a7676145850f3cee42832fe5f1638

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bcd5fbbbbcb06bf9274ca27b972e8699

    SHA1

    d89c5f4dd2996646b5a847866506ed4dd5681603

    SHA256

    9a896f5655161dfe1baf7d00c7e7021ae9da4a4b72e4a35da5c23059cb6f5ffc

    SHA512

    e61c87f883d5c5cc0b8470ea6e4533e67f1e4cd13fed0e743d571cbb1f2e33a98946d9d9f0e11660d776632b15a3f83bd4373cceb6556adbc78b570b3a19ca13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    53d170c8195dc95571e7a4dbabf7eaf1

    SHA1

    46a1fe7e14da89b1fce6af8e2ed6f9aba15a9a77

    SHA256

    9a714dbe5dc1269ce3edc17d77a86105ed8a2d8ecbe32e409659b00f68d10f56

    SHA512

    e9984fde37bf29f9a965df81b93c3dd022c2565fee155245413b6dbcd05c70516d6b41bbb326498139b570b14d5066ed9cd4c829f21d0198b55d52d94239bd70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T1SS3AE8\invoke[1].js

    Filesize

    10KB

    MD5

    dfa7cbf0ea644123c3bf6ef2a9a12a14

    SHA1

    8f2239df842444c344358d477ebaf4d0d2f6725d

    SHA256

    7a8e0857227f3a7dec14c29ddce00289e14c3328d27ab6a7b16389d086fd745f

    SHA512

    4dc3f42584f7da461b2ff191df487de69830d9b24c11d470589e296ba8ab9f1151ba67fedffca7cbf6d03ff03c02fed31ca854c60726da08fed253d9b1e3638f

  • C:\Users\Admin\AppData\Local\Temp\CabFEE8.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar44.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a