Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/05/2024, 08:23

General

  • Target

    7c4e846556dab18ed245f7231ab2efe8_JaffaCakes118.html

  • Size

    463KB

  • MD5

    7c4e846556dab18ed245f7231ab2efe8

  • SHA1

    b215bba8e3018f8336634c5a218467b0f6091433

  • SHA256

    35cd3c8139717470a6dcfcc017f46d03deb054dd0642580f6a37d82b78cdb047

  • SHA512

    7d821db7d141792042cd86730c4b3486c081577d257d5bafb5a920fa0d1fd021d0e8d90a42635d661b0da39e0f761d68b1cc46888ac17b5d27a35ec9ca72d0f5

  • SSDEEP

    6144:SBsMYod+X3oI+Y0sMYod+X3oI+YSsMYod+X3oI+YLsMYod+X3oI+YQ:s5d+X3c5d+X3q5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7c4e846556dab18ed245f7231ab2efe8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2168
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2168 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2536

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc7512ec7464c5d22c182db360dbf294

    SHA1

    23f8ccd08c62a3d0189a7f2e463ab8e357efbe4c

    SHA256

    ab2d5777c12a1ce454bcacc90b5afe7f3504683d25881d81fac495fb0fc3d96f

    SHA512

    b49a8314d6bb25ccc6e9d395d9cbd399dbbf2c48c9890d05b70f0479440d43af4f24c00b20f9fa57c7099cc81aa496e66b620a53b6c5240ca7dca50e8ed5316e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cacd632cd621b260c6900d8dabf00146

    SHA1

    969213304c76f47d9f7f7c078371f689a2b45dd4

    SHA256

    c3f18822942da868d6e4ad8b4ef6996f18529f9169fb8b6a75acf2699959f8c9

    SHA512

    393b9778c9769422dd1b83cdbc787a1d84db8db968e96523899a1266af665ad9c3bc6aaf40ad6c925f667473942d069f2f3616999db95655bbcc0adb7e2a3d96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d379b0843f50082a6e16517b9552947a

    SHA1

    3c70d2c1b6315d9add92ba90ac0af10edb2a2341

    SHA256

    436d82d069157366b5ef270356b883ecf817f868aa35043447e9345e5a894504

    SHA512

    02d21d93b9af671e7541882d8f09e09c2bdc946c865ed8a1f6ba2cf4170f4aa4a768a8e48981e6ed027e505c673b8e0632ef98b6524ea45b65ce80f937f94249

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    296dd4302ea841e2422e3a5d315b2980

    SHA1

    2aee58a84850b7d8e130c0ef0686ced957479b74

    SHA256

    5c70c619c079771d1440e66988362b60ae17a1bcc5eb4d9b52ace257c367697b

    SHA512

    2b34b1e8605e1a00c60a198140c37da888df5f914b79b545efad48eebc6c6b2e489b487183e974a52ec69390951f7d4d048cd6222b82597451516499e8fa7c54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a35378896754dc07f6d8069ff61bc801

    SHA1

    734191e9973aa0017f8e16a52ec8ac2d9b3df53b

    SHA256

    2ac866a2bb10064d2bee8666433dc685d3a16d5cee5ac9350d6fb5eb1e3a3938

    SHA512

    92bf903a58ed54a972d3e233a5c1119aedd0f09c7426cfb2b09005fea89739ce67c6c7184e6ac74d0e90d52bc192df98799c024219e3ec2d98d6cf1ee9b24241

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5fb7d7fd15ff63c2b72238f3fb3035d0

    SHA1

    6b4fdad1267e0632ee1e69824d18fa41d539285c

    SHA256

    780cfab9b4d86f00ec37017f1d01e830ee70b1f9b14c611eae380806a1a6e7ef

    SHA512

    ff46da18ad34a4590b6e67a9d1b2603810d7e04f3683c945703be62c9f263d3c88d2fac1de943b2539c416024c9f3c7ed36d21114b99b7b44547a525450a6642

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9078abfc70e6fabf4b61baa85c57bb5

    SHA1

    e9dba675a2c41bc1690ae53746b7a1e095f5a143

    SHA256

    d75bd8e9844c68252e47e7bcc18b8037e6dddad3931f478aa9f8dc97c9069dc5

    SHA512

    58fc95e6b280dd288efb664378b3f4a7ca0e67ade00d6366d2cddc69442ecf55542a9457370ff05a813c4003d195ff9cdf50afc3096d932b8744ac3a04bfc4ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01e49264440f7fee1eb84e7943181459

    SHA1

    fa9267efcba09cc0de4490625229d8844725e519

    SHA256

    44853b97efed0ef78254f6332e2dc577f54f6be5331f4257651c83909f7df731

    SHA512

    e1779d3500e2ea268c2b73a34e7562d8f2c7537e1d20c7b4cd5cd65315384f9fe10741f41beea0b53f57007845f45aba399a279a7b1dda1685ddbd5e5ab15023

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02cb09878fa5c95fc1429a8fc44901a2

    SHA1

    245bdb30ed779e381d98b6d02de2a2e0687c5567

    SHA256

    ff56aef7d03fbf26f13c5d591c9cf5900c3119d3d1ef2b507136f443294029f1

    SHA512

    3f45a6b753ec2d692ca752a73275f298cb2fa1bd1dd02ad6b4ce6191ce117b3b8fa76b87093949501e0f2256e455e8e0fad33b1d2bc74a25896b497e53c410b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1b0786c2b1c165d661debd60c56fedb

    SHA1

    922fdfc0e9f7d3663dc7fbb81f54be7b1c50edd1

    SHA256

    68dccd037af0653c63e663ca795b77107054dc42d7232cb3c308815dcd3602e7

    SHA512

    8eba758cd4e5815d9cce84eea4677d6e76050e1688c56573dca4415952be8e6851deb42aec1bb27aac6385df6a1b48ea0e119466fc9acbf18fc5b1078d9c079f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc9d41c38bd46fee8c095a73fd3fb7b8

    SHA1

    f705ebda7c1c2a54a60d4a05e3acb221a6712214

    SHA256

    50da05bf0136eaceefbaa06c0af2d9ecb4cc74d706e2536f76db374357bbf9ee

    SHA512

    7448ba21b80e23b4ffec123e36335ae7f6c7d4200046b865e55d13d9a2f78c6d87a88da61d44fa72257a2712edb5bbf0945821779f30bb863b14a7f77639e9c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9aadf447a373e18118ada8f24baa53a

    SHA1

    cf7dfd1d092275f4e43e736c8009bb26f030da80

    SHA256

    dd6fb79ead729571f66d216f7576bce1b1657421aa52334a5a72b2a0f70cb81a

    SHA512

    b08cc3f48818834a9b5bb1a734e7cf9330c4f60121413038414e1a1272fd006ecdc761ed4642df56364e40f17e6c32a4429659be22f5d17f87d72603ea1d3328

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03345caadb50adbcecd240750935ef00

    SHA1

    6fe50972ab1a6519a14ec4dea1398bd648d1b7bd

    SHA256

    3f397844b93d4f4cd75a98368293b4b25dedbfe1caaf1ce8dc6c0afb97edf3d3

    SHA512

    06e8feaa9bdd38e9a630504d4c0e9ee38dc89daa47590c6298c93c4f27fece52eeab29579789c2c2a0b2408c11a4ecaf84ec449bb50ca608792606b49e6d3e9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07b02c93209473c8b771bbc750d6914d

    SHA1

    25c674622b60e815eacc6aadf8fca152ea1bc82a

    SHA256

    f0d74fc2aece1507560df5d04d93652c581067db478ecc75b8d73c4faa47a8b0

    SHA512

    1ad88fd377631437a672c99a28c7ef5556117ec4d51a977409df6e08fa7045059224cb90c95ace6e0fe53415d857089fb5ecf5e648cb3c510eceaa0f4fc4fbdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80fc93d69249fb366601c43d85cd796c

    SHA1

    6940763c72f6a39760a5ff89e08b60a1d46f8a2b

    SHA256

    c8e0d86e049a0d59cec8a8c3d0d691f0c185ab79bfab59e3157ea130d1502aed

    SHA512

    21fcf1b8bb49af8188247f6e5826020cd1ec7145076577c30c9fe31b08dc7b27c0970d5bfd1462484d258fb1f5058dbe86d089c7df56bfa322598cc106af8556

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef16c32bb9fffefd1f71331dd17a5bea

    SHA1

    d36287e4ba74a89d7427908f165fc64995adfe7d

    SHA256

    f481b53598be1750d2df70f9956dc453b436cc53eb0f5d8e2625a9c3952e3a54

    SHA512

    e63c21ebbd83e512e2c7c4ef596eaad87a651881be201ac59b16c58ae730f7bd5f1a6991d1a3166439a88c05db56a5519cbf360739b96bab7e31a793ba25e53b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2b2b030712e87d7347306b9191c529a

    SHA1

    9c666f94d9f2504a15b3e6066bccf4ed5ea9a6d8

    SHA256

    37ed671e3ead68d08322eb001ac42b420e8bb1dd875f3c10c4bf50faa1a31e11

    SHA512

    526edfb4819e49abe7686ecfc858a2027ca712b0a22e622c5e1856569783bc782aa6e2e5604112c459459904dba66c8b4996800c6b09103aafa54506e6c4cf9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d207a361afe6c593913071e6633eebb

    SHA1

    adcbd85567974c75f34e35b2319ea9139e8e4286

    SHA256

    61bf942a878e7979a9f3f05a9fc64f31e87d1b2ecc44bf5370cf081d4ac19c44

    SHA512

    4c4d33275dc56332bb0d3adfa30a453c49d08ee6a994ff628385c8f7b2a971dc425861744ef3adf50f043c3548c5d58889f240a1588151c0c3995702f0479173

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3a2bbe7f62c77eae26f5a17a4529c2c

    SHA1

    be58e50c9461a35410c3dd518b9ae215807d0c1f

    SHA256

    73ce6c9379884fd111da86a87aca02d296551ff689fe856100222c5cddbc86dc

    SHA512

    0ec89c4104294544407cfccf09852161c072ec59763c88f2438b6b6208c343fd048768c0226f2b09747710185062bb7a7f7973f11e584a38fdb0f457c13721f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60408a034604939617269afa63eff4d7

    SHA1

    a80e884f0f120313a9b9a717964d0cb0596064d6

    SHA256

    6940b045d12a8c0b0b4e4fc7add226dcf0879e5194026e9cff1e3836654d2fb6

    SHA512

    6321ab85a3c758e60b5ad0232f7a04b52b18b5290123a661630bb25edd6c02b8d05a2558db1f180dc46fbaa0f8be4d5efff3d1e9143ea315e725659735afcc6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7015511ff3e1d019456c0c1f766bdcf

    SHA1

    4a5f154c66382bb638e6ab6d647925511607a230

    SHA256

    0bcb3d4716e7989dddcb85167b1226073e947a1b7dfe9d5855df9d17a111b4d6

    SHA512

    66506d944d54cfa388e70801ea20b7c7fe5b8c93d4433492d4da0b7b7f38ecdb77f30f524c817294645d72ff3a9795cc034a1d627d1c67adfbdfbe95ecaf7904

  • C:\Users\Admin\AppData\Local\Temp\Cab4F99.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar508A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a