Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 01:48

General

  • Target

    85a4fcb80b7c392e15abb64013f25cd4_JaffaCakes118.html

  • Size

    29KB

  • MD5

    85a4fcb80b7c392e15abb64013f25cd4

  • SHA1

    dd96f323171b6817886f0e56cdffd39547c4c33d

  • SHA256

    18a4f126d41565e3c0577d81f59f3f15e33c71b3dce87f83136cec743b574133

  • SHA512

    e4b0f2cd5bf525cc993167037a1cb3755827c055866c4e36165b50d00e09f127f2a40d95b8915facaef8a520754b18dc717e37ea579e7d4dcb9d07c6b0021d09

  • SSDEEP

    768:Jzn0sVXjI9CmCPCPC3C3CdCdCOB8HtENNyixLwD5Bz5yk6cF6rj:JNVXjI9jaaCCSS8tENNyixLwD5Bz5yk4

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\85a4fcb80b7c392e15abb64013f25cd4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2332
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2332 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2840

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    8513214862ef1f789793f68c5ea70902

    SHA1

    f4930ee9690a94d6a7955a4ad0cce255ee35659a

    SHA256

    95008c056779b0eb0927d11067601230877e21c9b45855dc03c9d1d03f3789cd

    SHA512

    f47d8a78f6df70a4a92c3ae1d6882ec20aa1b2c74d2c83f3d0e94c97be9e6444144fbbb299a238053fac52defbc8d651c42e436cf08f9f40511eaffd6f367d6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ecdc873b54b2038ce709926400e6dd2

    SHA1

    1e7f449dcc3a2a94059fab4343c66deb75d37e28

    SHA256

    7ba512a9443ca8727bc2383701aa8d4e7bfa9c847a0ec89f105873852e8511f2

    SHA512

    2280a5c73236d9f7f82842afa59c69c43da1991ab3db687d12068fa7cd55ab2d3ec1920340f3c2c940c02fadd03af89d34ff93d8b39164ee5d56083d38e9b12d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d1f2588bbdda7a0cd525f1260a7f9166

    SHA1

    f7301bf136729fad493e05f02a795e20f639e6b7

    SHA256

    428d40a6e8e5577ea87fd68051cbdec5a8fb9a104cae431ded0041ea7d78bfea

    SHA512

    cb9d768730feec35b4c5fdddd099a952c1c8b203874a1376d084decc23c8633ff01bb8eab7f155a22b6aeb0b31728fe3ccd16b23dfa30776015c44872fb8f9dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7c48e48a669cc97df1299f7ba0d1ab9d

    SHA1

    cc66c575aa49f14c65d5373f6eff57729b224ca0

    SHA256

    709a034befa7c9463dec9f28ab9c1428349e4a899a24774431e4efc2aa704121

    SHA512

    762390bea88170b3c2db53fb08ca72959293e299c71265570c93627a1b1fb93771146be1340c9895047350ccb748fd58e11c785d32649f051adca44663955dcd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8550b710dafbf0d4aa06dbd0c5b85c27

    SHA1

    c126f664a4c5f7201920fe80e798cfd0a5aa2fd3

    SHA256

    73e08d0f35a4c54526586c52b05680ed21bc77482e68855294117663af2f8448

    SHA512

    986742df9d498473302c7067366e774fc39ec4c5c56451d5756fcae3e84b03c787a8bbf7ccdc487b314a3a9d08ba4155f16d08fe89f10094fe26ff8c497efccf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19b0012bcfc6e3923a9ba873beb6c5c5

    SHA1

    14ea3cdd29d4f34b52ad3dedf16559b11d7345d5

    SHA256

    6b4025a94b361e8ec38ebca48491e307696bc31f3ab13e7ad63ddda068d0f6dc

    SHA512

    e3467f3231a9925ac2aa1a1b0ddec9034bf682ac35258ee4c7573c08cfb28e6804418383b5cab08158751890778775cd6744041957c04448fc466029f6504ff5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad1fa40dd6da6507c290b1b06cef0deb

    SHA1

    6a06024a0bf78bdd823eb012324a292d4d3ec7cc

    SHA256

    6ba59993a39876f6b74dec09c839900376b8be6790819b182e7160fa01879c09

    SHA512

    7b80d5cfc3c634bcb3ee155404b7e09e5dea7f5e923661fb94fe1809a9e0ca70f5f70551e4885bfb98182e405a458c42b830554a164241d135461c3d28448be2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2103518dabc78498d5ffb8fe00fe5368

    SHA1

    5a4b9ff6d40e7f135230a122d2a640f0f81c331f

    SHA256

    1daf3b6eea31628e2968dec626b034329b83dd7e67f8cd74f8e6979db06b519c

    SHA512

    ca1fa0290dab9da1cab100dc804d82f9141558ac03ef6a4601cdbe4ebaadc1d5d44e77694e3d12eb52bd7529677ebd77df0dcb610c37eb2a33cc675e85dd9e89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d3e93233a3c9964e6642fd47fef3c131

    SHA1

    1bafef98359be03375781bfb89c03060c3a9ba2d

    SHA256

    dafbaf18935b57c04f1a0f6a49a19385720123da17ebacaaf49c85c37f7a3f0a

    SHA512

    dfa4c82734d30cb43921adeabfbdfc1771f2725d35103c93dad33ce4083f2272c564205bf21093e894abdf4bd908c9d71eba80d50e17c8e96f4c3be7a1087e5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    045d4cd41de574ccc3b7ceb01d0d8e29

    SHA1

    05204da72fac9293dbda4e194a3b17f8f437b058

    SHA256

    efa776c57aa872261c0fd049ef2b0e8dccf774ca1a828f7d50549adf1e8c3a11

    SHA512

    c5bd04f509e23187deccd8bc867d3f144338b7545bf1b8aa4f533cb7f28be8bb5b3afe5ac2548dc255070d62e9078bce200e23c6e2b079478991f808ae507f3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ff7ec3fa6fd214484dbf4a122b38fc6

    SHA1

    1a20c40869032f119497859f6e0dadbc673c6a24

    SHA256

    5ac9e72693d519122a0f13478b34d383d15375fd58fbc1f8a734ff9872a194ea

    SHA512

    e24ff0bb8e903d857ad32048facf06dc85343856cd88d4752147fb7dc87ccf5eda0c7e9724295de58ba022d82605533ed8838c0fb5ba47089da8f0e47b9580dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3386b3321489d7c23c3b2dcfa535b00

    SHA1

    9831d0f8eb149067d3c6a94f032c57a749410749

    SHA256

    688e83574ac8aeba1cdc2ea7b9255b633d92a7e05d8307879c92985b7bfe4c70

    SHA512

    3bc3aeba6ae7cea67df2c7e04a587fc3bae77b238c56024d8284d3d17c19aa1a6f68bfa256a49ff30cbfb6fa2aeac4974a32a3d40d8f4bfe3b6a63b4eb68682e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    33f766d1908e7bc37df6d3c6ea77e945

    SHA1

    e0bca8fc1a920989004261030438fd20dbd215ca

    SHA256

    37ef0403d1c7717ba1aa0b3b253a7ece0625baecd12882b3d9a305525ceb3c07

    SHA512

    6ba380063d493a4cbc9f5375b81525cf8fdfaa7272e5975901df312f8cd811166bb42a53336369dc81e7c8a9830c16d8e435bb8d9508c6f9ed56f1e847efd47e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    024b895a231fbf759553699089c560f7

    SHA1

    30e9726e668c9a340bb3984dda97ab4db8e15d8e

    SHA256

    92cf520ad9a5912fbe9302dd4fd99b847cb3403ed72b28827f75ad3f27efcfef

    SHA512

    b37d9f85561e0cefa64b040fd32db19090ff77235bedb9b132da9dc62ace33eca9a535f82017ff5b6aa35c3bc5a84016458dcb0d6ab83ad33858a5c44cb8648b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    064ee9d59de4f39b697ce69295512925

    SHA1

    a767d6c6aa7ac29421cca3023301acec83bd8c06

    SHA256

    a564d3f5ec1ef6427f7fe5ea3a0ebc5c4f19c7ca6ee3de277b4d21402565926f

    SHA512

    c635e005645bb8054e8ad46911620da14eff70364cf385bcd4f5ae535dfd0452638f31691845e27c9bbd5139eeb68aa62d4ff63432c8f52adf11b1d3bb05545f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    953960ed807efd94930911fc772075a8

    SHA1

    d1409547ace53003b3a8233f74949ff0f7897e91

    SHA256

    511d42c7871be2492bbf65bdc2cd2cf1ba143a728b3e22abcdc37b6360e5f3a3

    SHA512

    37a87929c34ba671a505c50bd480d31e221e8316107076c3026e45398c4a737607297f69f73c18196ed0c71413b1fe1270cb91092412b128c8ea9d8bf6a633f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e31b61f1c2b0bc29a54270d2d594bd03

    SHA1

    c80edf5c37fd3acc757580dc3408367c5bf2872b

    SHA256

    1e99e328ade5e310c2adf294c9c4f3a93acb243839117efd18ae224333508b42

    SHA512

    536b0c2bb57d776d4126cb4016483ae6f99f916961b1938208e985518677eec8d02a94b8443d531e8082cbb67825c27f9a7a9d51e56b91bd3264c93425a7addb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d2d6cde3df6a320b6ff0129124cac80d

    SHA1

    4ed7b08d9e9d6dc335d47bd5d175104a7ad130c2

    SHA256

    c68a843ff3fc4393d730be23d869712d6111a44d6b1e6ec3504326fe1df1b7ad

    SHA512

    3c3ac75857b83a028bebcd755dab1229784ff1976c53f35732916dc1558ce68400ce7046dc973c820781f3c550dc0ee5bb9b2bf3f281ebe0c58d7de9980131bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8b91a49e547ad120b390804852ef180

    SHA1

    18d2d2f18c0d6f52209474c6d507e90279410ff8

    SHA256

    5625bb9717a57b38ccf531edacffbd30f2583c124b88473275ac8a4b748de286

    SHA512

    3f213f6bf54ac2edf85adda446fa506f64bbdb5c17d9456f91c04aaa5b00cee4f7730382d761833c0e3a199ea64f2520019426b06403bff270d889f439fc82b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5138867bdc93fb375893f00785fc70c

    SHA1

    94703f1cf109909655335bfff1b6825c587a3e6c

    SHA256

    eeab77c54dc7b99be053d3a987437c74b1344fb5f1f02a9cabfb10f4d6ca0770

    SHA512

    e1637bcf000388a8d224a6393715b579a0710a6beae7966b75f5218d66e17b5836b60f14b76e452edcaf9390915e09737cd942417d52e21d2b5bca9e2c3eb8c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc6704b061df9d716b468414e0b8c25a

    SHA1

    2f256e51c9bfd503d0977ef0decadbdc33d3ab19

    SHA256

    d070be868582e4bc730c27ad6eb64ae35396cfa640a0dc1cdd6e3427766582e7

    SHA512

    60e4d0a8171d8926b405f9185702e0f38e2c0cb2f50bb6e193436a8d82b96b4ef707b7c7ffb98ad6619e66e99271ab71eb6b3d68ffbcf39316051959c6509d1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7343ce78b2ae5126b6e97f8c40396a28

    SHA1

    6c02fbb231f5fb8c9ff2a11c7a7f07e0c6e3a35f

    SHA256

    110cfb2c0b8e20cd7e3751da6c5a8f9a55dad694dc1b4f11f135dea44effed52

    SHA512

    7ed72218342db525825b26329ac074a0cfefd3337e24e7b934b2289b873b4472e29d0da58efe0ccd6f92714d047f595b2b81ca7f62a9779cf1bb006180d9eb40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a72fb826c90ef7ccacb70594c4c0341

    SHA1

    f90a3b24fe18fbe2e380fe273e9ee6eacb297f3b

    SHA256

    dc28e90eba89f67a1dfa9bb2516a9d5debd2dc109575df57e5ec2baf75f39c2e

    SHA512

    70a514cee0bf636c2a6a4889c5dba6ea0de99eeb01778aec1b856ba8d5e8b84921fad2b9af190c2e60cfcd09eacbf7df0246982a71daceacfb313af41e6b3d65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    b7e2306fba10ac90a03cf65c0f4e5d5b

    SHA1

    8bfacbbc9929677194a1ff548ff0ec800aa47943

    SHA256

    af3071d7c4604c9aaab7225d193d80f720ef19e6b4686a97061217b18feb8514

    SHA512

    b2ca463239baacc6203147d87644d044687eb8dd02b6b28bc7f269a65d3331934a43217826ad3e0a7e220e7778a19c525214313e01b08b3081293843428f7594

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar968.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b