Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    29/05/2024, 02:06

General

  • Target

    7f2d9525ca3807e988342e724db563db_JaffaCakes118.html

  • Size

    23KB

  • MD5

    7f2d9525ca3807e988342e724db563db

  • SHA1

    f99620c85681fac92e865362fcd563b8578a8291

  • SHA256

    032badfabc935a084ca17d301c7075fce024fb916595fb2009903d8c0c170b0b

  • SHA512

    2ba78b86b6ab8cc4520794edb81a19d05acab4bd2fbdee8cc49b4d5c5e8829111838d087a26613867a4f6a7fc8b3b7407f6c9f8153debc8c7b1eeb8a46e00e24

  • SSDEEP

    192:WLZLwKQCUO5UdQ/uQe/lCIBlp+PB+nDPi6bRL5WafW8OhRuIlZ9Lp+gW1ThrTRnG:fGU2/INflMFlZfA1TC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7f2d9525ca3807e988342e724db563db_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2168
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2168 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:1136

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    1bb8873d0d6d09cbe9a03277f5f8d860

    SHA1

    cb626f47bae7142b34f1f2b16b6a1005d77fb6d2

    SHA256

    e488974c27977b56694672dc1fb0a88eb08fa1e9763ed909252221d11f585c26

    SHA512

    b47247bd893dcdfd016683522e72cbab998f9cbca97da70a06d1840852f2e95c85d7ddbac342d8fdb86f22c7a9b166e2a452a1e342e5f2ea1b382fe6412ee223

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f7c64d10b94eb8a9514463473a42713

    SHA1

    7ee8eb7c6186b0f8c4e041e8741d2f736f5f167a

    SHA256

    d33b248d4f1a05dfd5278d3a2972cd807d9a00434ecbe7a32718dbbff79cc934

    SHA512

    8d3eb9aed470498e6cc8e98765cc0d0200a2d98b8ec57b53880c703782ca8d7a856f39908fb0e83edcca0d5c0f48644844dac048b3ae4e732f0ce8c8e76b211a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e6283b39d6d19aa90964d24905e8bc8f

    SHA1

    95e46b63e62d3ea0c50311690f3e1cdd5ef995fe

    SHA256

    cf03f27b71c53ea5706a644f77c6cbe3772a03f81d1d4afa0d083b667ff23195

    SHA512

    99276c274c1c403da9c59e96fb80c0fe48d9fa27cd8a46304a7c4225e6ca8da891dd1366ad3313995da568468c0a775e8aecffe93b0fb69f5ab78225afe0990a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d36bec50fc2951bbfb49f413cd39014f

    SHA1

    0c12b278c0d569afc841860eb14005193475f47a

    SHA256

    674bf2146b4c4fe11c11d1828c385ca9095adcfaf314e098c11043d67f86cc18

    SHA512

    1cdf65a128fa032af470260e7bfdbf1cc079dfab71d93a69dd45d941b4e15e665b2911970ccd417d8fae6459abaa47499d502af3c4ebe876a76feabac8f89f77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d17f62db019f145eb9f2e6a78dc5ca40

    SHA1

    6371e61d2e6e8daabf4a15e19a9ec10e20f20564

    SHA256

    2da89535793b91292ffb5e69d153fc9f60cacf12bdb4834738e54164833f093b

    SHA512

    9be9cf2589078821f93931c953b06436013d1cdf8c5e0e5d7a646e157844c91c381e3c4d7d7bcba7a81cd904e455668e55561cad5453f4e89ecccbc0719bb358

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    996fdeb1158151f708958ae9a5a76096

    SHA1

    1afa3016838ab352ccc6f3b36eb22eed8482bfb2

    SHA256

    57b119021715384023ee4775a72fb9c3b869e731f258c933e2ac0d37a582c2af

    SHA512

    8a03d6c2b4cae2ae7f017a3191159b4e2785d86288600c1ccb9c03392a439a44430268c77b4c9c1c4c6ac3026b4f61e1c34b6d27dde80502e1ed388ba4a71778

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a35a3d5c77f09c6fa08196952108c635

    SHA1

    2f5ba3a7c2263052374565027afb3d88a9e0ac65

    SHA256

    65a06e92031df59f4c4231cc74b98567c08d69daacee2970b587fba51e01619d

    SHA512

    6f5f4598dc239da997142f7c2a555fac715cf21d4c537238c9de29a707ff5ce301794584db2c7ee638f9a6e670e61221237cfe4ea9595756e4769dde40f55c64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9032239b0f4b869624d5ce42594d1cec

    SHA1

    07d020b212d6dd137c2161c6412e61a284156b52

    SHA256

    68d43cb02e7811ebcc6d662a50665c9df314bd5c3da497db71e9439ecd4c9f93

    SHA512

    d55309f4bef042a078a398eb41734ed0c07f421085e81ec6edfac517e1dacd75b1bf9b22e6a155657983e3dbdc89b90ced1ce290ee67ef8261d847fdba23ee06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    18862285ac48934ea385980e654720dc

    SHA1

    ecebee191fc719c6d5afe0466a6e5c0f5a9d004c

    SHA256

    5b273b255667179d4fd50b3bff30e3cf73c2602a036869e29fe889e550fc2a43

    SHA512

    d03efc5f50e4b22fccacd8a5c1e24251577799434963dcfc0ba0cac533e131875775edd8c533efa2d7ab7e536706822106e28f53f149536dc5c12a1a9a6955bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    570587a943a9a480756c1edafc633bb0

    SHA1

    d826add48ff33a9bc609f54b36043f620f52c2c3

    SHA256

    b0e412454e9564decac040f9c41766a6dd833f0521d1afc47b88a36fca328931

    SHA512

    dba4f3e1f20a4e7ffff615176f7ae5d1cb5941ae4efb18dea0b46537c2b54014383b84a1ca1d2452aad9f3552df7d2874ae8299d91382b880882d7dd407ef0dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b22cf0a88325b111a27415df5a7459ba

    SHA1

    08673ae52d313be4071e9d5cc78f72f86ea236bd

    SHA256

    94de79d5979c588846f33b0252fb9f8f1fb4cf546d63e7e5ce3cd1daf9f0688f

    SHA512

    73b1ab9ad2b2c9e2fb13831d7b49df4a95421677ac64947af2dbe11bdac0b282e9ec67d06a2c5d8ad89bdcb9b2d438ef9bdd72f9f16c342d9a8e7872bb6749f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    24d5d5e418107ce413848cbc824cca5b

    SHA1

    df572600386e1a98427a2fea6876da762b4e96f6

    SHA256

    bb9330a834816bdb7df1bec0a1fcbe1f2a15ff10827fde2e5e0afa0793b12d48

    SHA512

    4e8c1d0fa50460b2bf81b86f0a31decf5e5f16461b8f2fde207e8292e2784f363eb7765a55c50ec0090ebef48be7de6b49f44c3abab81eab2a4d1da432b4605a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3073b5e6c22adc29e40f23a682db9d0f

    SHA1

    9e216fdb2dbe268eaf239b54c0c0fe744829754e

    SHA256

    d838c5354c8606b95adb1e251b7137ed7175add9e03a7e77825ccb7856e6d910

    SHA512

    ea6afe9efff10b9365b9b1b85bf02dc91fd331242e9afe7e10461268fa5768a32186486ddf3ab92de23850bb125477a98ef1d05f703b3d5e6a8f8153a0b07921

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7c572098f58105a7737edcf535641b71

    SHA1

    8a80d39b4b1dcede0cc79affc964078229cdbbc0

    SHA256

    2da0100397c778a5836e13d4f9e2518139846c183b0bbb94449d5eac4785192d

    SHA512

    3dab7245125f03675872a0eb64f874235b54edb6c4bc8c8af1d1ff5415bb35186757df1eec2684c0066ceed535ba3976a18aaca31b392fdd24335d73bc49c2b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    38b26da53ec4611dbbb58eca19a4b87f

    SHA1

    d2ce275d418502ebadd93b6da4e509c02a8c1fe6

    SHA256

    f905413d8ef861305ccccf756d795ad932ce6e89a2caac308d4a6a7335338f13

    SHA512

    4e909c807fa213e92ca61fc837dc5c5c1f966ab103f6ee3e24ed5fbfe8688f12dbaad743d378573073054dca8f5bd01fbb7c10d1833201b7c7adac58e85b82f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9cb9a953fea42416234e6b406c028796

    SHA1

    cd082aa8ccacf81e0e1d4c98692b8d6c63f17558

    SHA256

    e4ab389d8604d1306840af7d81ee8296304e30c5d601d8b090bbc5578b142eab

    SHA512

    e6a8a586bc6d6c5a6ed6f0e33d6dd8c7019d3c7a377b374e157a67997b8d829d187ecdcd240df04b3644bc8545a2e21d73431bf5befd77e09ee4dc3862f20563

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0db71c6c79c1c40535d39f1097e66209

    SHA1

    3ccabf7960e241455523598410f060062a77a64c

    SHA256

    bfa296db1542c408b31d9216965c9c51278dd2de9d279b2fcd6ea5eea4114663

    SHA512

    afb32293eea22653a956a2cfa26b3f1f688d77c7443b6426bd30b5524f9bcaba6e00fb7f28e2281b8c55c8b1ca8aa8a1a972b4d1df8b2cc6a22b11c887c5b1a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7868b3b15d20654549e7abbcf9564452

    SHA1

    5dfc50dde1766ef64060f308f677a2832580a227

    SHA256

    cc7653a42b9f61134921a1a2889b6a154b67a8de971d6eba7d5307e405757a98

    SHA512

    bf808b256a38d2db7b109d5fdd38106e0f831d6133911119bea2347d772c1c1697dd4bd72e8853637a8833277775186c696d045246a24c3a1b559d844f5133e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    795492dbb9d1fecbb370fffbd2d2b16f

    SHA1

    cb5cd32aed615918b4f52a4f759b246172ef4c57

    SHA256

    f915e7e16e408f4638ec8d535eedacdb455fd36d86a2d6ef86e0e0e52b0f8dd3

    SHA512

    d8453c9c1b26293af2a671a5c0fdda1821846dec8f8a3f9c15a4e4c296e345ebdec3ff179d9692a41066480a4733df96c1f852e3eb68283094da7133c9dd5ca8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    15b3ecb29541034fc87ef0076ea83215

    SHA1

    1447e617f693391abfad604dfaa6613880267b20

    SHA256

    1d3cf685ba76c9cfffff7e1dab741d1b050fb9d6c80888eb2a0cc5f525f9d769

    SHA512

    9c6750d0f414bfe58a41ca7075d18a836cbe8edfc33cac1efa90e676841beb82331c53a4439da70667dd27d2bc8716408aea1e1c6e67bed5b6ace1a0abeb9d6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    c4855ac4bc6d29517b37f1fbb17a8023

    SHA1

    00e9b6bc8d2a85bc77e0c42064145cd67a8d30df

    SHA256

    c487317ae73abf381f601e74e8427f846325e271f23dfe16f03c07b48fbb646a

    SHA512

    1ba693a037c349663a85c165cfa5939946a8db9caf2b3914589a3bfb9011e2429fa51e288c4c8eb581d6819e90acfc05b02f1144d117d54629ad21b237a9e389

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Cab26B4.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar33D3.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b