Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 05:37

General

  • Target

    897fabe3566a1a296d8b6131ac86730d_JaffaCakes118.html

  • Size

    9KB

  • MD5

    897fabe3566a1a296d8b6131ac86730d

  • SHA1

    01d0189b7882022b2d3611341d825dcc3716df74

  • SHA256

    de675bea990968fe6b0915451a27ccfd5619240cb1d2fbe2e753f582fe38d9eb

  • SHA512

    cf6b22db811cd8e71b7dee1df2bdade27880c16b223d2eb7092f69151a94d6eef5772b5211f40bb0a467091407f2f65a202c44a602f927e1af75a82c1a9059dc

  • SSDEEP

    192:DziElWHdZTA7McLWwkscIzGW6kBhbRYDLFPB40wxlGbFcJ30roi4B3jsaYG:ZgYEG

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\897fabe3566a1a296d8b6131ac86730d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2896
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2896 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3024

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    c5652047256f5084cd167c9eb2002855

    SHA1

    455e87ddbdf6e79961a25bdcdcc236d357198635

    SHA256

    0bc8af17c951c122c5f9316988712ff6f0b7590baff8004d9579a2bfe63139d9

    SHA512

    0f02e14aca66c9c44f78a11a403dcb391531ec1e83bdccdb224cc38760de0ee595f20a64c0ccd49f17c2fba452f8b60b2b2714aea41b6a0dd4404b05e6f08fd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7fc065cd2833f5905ef7fdd70b23c4f6

    SHA1

    0db177d34a77b6249e521c433dc7bb2a95476d5a

    SHA256

    9e423efc50c7160480457595d9a41ce2d0bc9aff9fad0fd3c2f4683825a7a86a

    SHA512

    aa5f77630efaf0745fc3aeaee2bcbd5f485d48ea503e9487bd4dae6c79d6c1e9b1a1025da77f4a6352073009b28977119b3a2530b8ae57988527751c91e08f27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    f54cf0366f3367892f3f5fdaa4a22b82

    SHA1

    fb60d0c390ea92e7233dbc278e18f86843cb1a1b

    SHA256

    1f13fe7a47e6e446ecf987765f866c015a3361b3c94aaa0551c19aecc1d5cd70

    SHA512

    569113c48b1e2177e1b2c0f992163ab6270e773ce0c88621adb88018e991a78b9d413fdb27a60776270b16b875222ea71aee81fa2175578635854757dcd9b178

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    f4c937c82a526297ad38bfbda2aa663a

    SHA1

    850bf0d3eb2f239517563244a07e2ffe842a206d

    SHA256

    98ceb0d7d707be0c7e4b1eb6f0e337fde269331ca0d048675793852d1cbbb9a3

    SHA512

    4dce14226d7cbd57a56161a1235c82b794bd98587771f18be171f014d4f10b9f72e8defea4513e686b9b003d9e3727a592d534125b36dca514fd9d58a773a549

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    197d5673eba6f5db8efc11a05e413b8c

    SHA1

    395ce331e4bf47cecf5dd81f9bdb6a85dc0df4d9

    SHA256

    340eb5d026b0dadb43bef41f4d50eed1f16d27b45d24c24070e3d663a289f0c7

    SHA512

    24f7f407e43673189b41522ce0ca8b8f7bd752e170aace0ae331b9e1c5cd925badf7540e72e331837acd2b0303d71c291e11ade61f2fc1ec1ccd8d26e5693c75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7c4b18e1e0653281022c3086e3d5cf3f

    SHA1

    bd9d8bbe8ec86c694fd757ef72b7a5e6de2097a1

    SHA256

    c0d66e6087f50aaabd3dcfc15d4d0a5ea01a014411e275a434b2c4edf9acee9a

    SHA512

    d03b44102afcceff972a23837be4ed40997cb503d64e18ad5e2f645e27178cb188b7001150f057e19bdddf3809adf765fc796b865c696c74852360b2ea23c0de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    68d47c79743c70748b6d6ce7bf26e222

    SHA1

    7a2d473f95ac1c49c40909677a5e241946953dec

    SHA256

    45a1e3a4b88c85efb486b7022a4a770ccdb724e11572c83e3a7c036c17865258

    SHA512

    bf4234b565bbfa99c522cc909ba29afa673eb988cfd708ae5c81662d56b00fda2dd9acf84b0b5fca3aa8aef51d86c3947eea11cf2d76eb0e8ca2c3802445630a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    37795bf9f8063cc03d05d30fd53b9ced

    SHA1

    7192a03ca95811ad0f0dd4ebc62eaf46777f04c4

    SHA256

    6381dd714ee9e56242b5b04b8cb50f7a0bf39d066b9cb785d5e5abeeeeb2b338

    SHA512

    597f86118a471c272aa8a999479e8b0df38beb84b19a457f132ffeea78fee952809dcccb8eb7632dc5928f8e83277d7897c85def095018ac706df9e230680c25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    f8bcf68930e9e423cdc76753f550b4a1

    SHA1

    6e418b141c3efdca0f7dedbc341b70eef9ee5782

    SHA256

    cb81a191abafb23414e4dfa57c79da6d0d67cabcaf48cf1c46c0157adcde414a

    SHA512

    3fe57ed6e74161cbf05a9d2b214892b1b1c3f13280051f73b7896de819bcd1b491bdb55fefcc76e9ffbea0f0145738163ec3fc141ab0ca77117c9cb73ceb3879

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3f24a59aca87a4dec9918ef7570cca5c

    SHA1

    a119cc869f4af892624bd695bb0319d8d853c828

    SHA256

    a7bd00970b2c138578d8866aacd988449e1c38d55fe75a65028f7bd4069255b6

    SHA512

    96f3adfe8dacdf335ea75011d4ab9091dfd5a188ba2495bb3f24c82f42f2481c97f83234a9bde10f6aa37a45d6db6f0cab6c53d7088d2e0ed207babeec10f572

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7acdd2c59cb31175e799448ced36d4a9

    SHA1

    0926d75881402e322d90452a4759c1769492d913

    SHA256

    be35acc8b13a244879659de45afe7df9c8299c875c544d7471f4d89926aa9f6f

    SHA512

    bdb76a817b72687b1db32f072cd6b1a9db65498a3eb8b87e8f8fcccf3a2981d25f8a72fc123f38387f35a0b88e2ea39a1aae6de82251bcd78cbde81133802e76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    dbce5db2a8c433ee792534509be4bd3d

    SHA1

    15cc70f4b31c45151d21397588f3b11c7919dcb8

    SHA256

    d38df5153fd165ba1f1a3a7238a790bf9f3b1cd8ff3a54d13b59aa298193a141

    SHA512

    a24a1efab43e384e5eb70312981178ce71042126915df4e392a7540da687f5aea4e0ad1238fcf760cd278ef38cb4f621199ce506929f11f320a17b0e01c1fc48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5c8b72057323b887548fca15ac4ace62

    SHA1

    8a5481fb21a3417680c39ebc6bdf3f4321b0c9a7

    SHA256

    3b358e9e8df7be227fab221bb9d302e1c12138cd2ab9d208a90c202b6006e936

    SHA512

    93e481077121c1e6dd92aa714805162e43b158f9c5b2417e91f80f5b074bf6b7ec609f9c9d415c905f33297c32d15883bb64f43e700cf42ba858d80542dfd4fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    abcf6bbcf8966dad23f13124fe74263d

    SHA1

    1e47c999ed5c3dd89f128fadeb2e97ec5a5b79fc

    SHA256

    ad9d356b2f422a2c1c8bc5a9bd3b3c19bbb4d68ddc68786fd7c3385e74e20635

    SHA512

    58aa015a898d2fe847bb3510eecf87cd306241b7d9bb46febd45661503f52e1d8d7df3ad0c38e7d9546488fefdf44ed0a7ab0087d5e0dcfe8d523135e4e72dbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    80e2b5e167bf42f9a5441b21a1edd360

    SHA1

    494b7abf8b1385a72c14aa7b1e3e35b8d724b840

    SHA256

    c396598827e5df0467923c2696dafc3c6ae3e82085ae8405ff717a1d38c4a86d

    SHA512

    9c5dcd1390d1fe503d7a19a9f3fa40ee545281dec152a73ea792eac4e48973b0bf3fd9ea9bce9500a3ffac1a30f1b931f01d801a385ce5c40423966bc9576b1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    1738dbb0fa28eb9d4affc61bd5161d79

    SHA1

    23109d6f24400b082e42f9632760215c02102e51

    SHA256

    1a95d51807ecfc955c19b8fdcc81304508cc34e6851e336d2ad772c0ec98b5f2

    SHA512

    3b2c2431bd9ee20fd9d3928da1c0db4ae6adf6f1e34fbcf94b566bf3f399403c1a5d0f758b29a07eb24c95ed65ce8109a3292c71365521b7a1840acd4ca8b2ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    608b3536d98d360fa6cd52ab9ee9e7e4

    SHA1

    96d6c5cc02179d6d865349481de18db5e4d55d39

    SHA256

    4eaaba42915feb7bfdf8d9007c01e35e68f71825a7bf0d27a85adc1e4c87477f

    SHA512

    10fb7f67c2e0bc78744437f1c2dd3a171dee4705d0b8d33d2a08ce1234f4a788834bf100b1b5b7585a1a33c47dd8ebd3673e14c320c457009d2b3ed4f0338705

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e1271b785e946da85f8d70300d8eaa97

    SHA1

    9df9795cdb45c529d309bab92d626fdea559852c

    SHA256

    fd95d37243e203104734566382037d39b642b0c226ed780aa49abf46e646df8f

    SHA512

    4c685c2ee87088a7b2237e583f7284ea4568fa5e883fc004a487dfab72f3e12fe60d49cce399744bd5ad3e815b6269baacb92d6a020c5d46b8e91e122630874a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    be2e9d94ea6a43802f4a19df979e1a63

    SHA1

    23b3f2eb8a3a00ff50ddfef47244ba6bc0ee92fb

    SHA256

    fbbb6fb451aca711536e5f4591168fb4a2566f70f0781278d2dd81462f00ef9d

    SHA512

    e7cdb5723d6cb59e6c5cb9ebedcb826db85d815ad241abf828f4438dc4094816775814c02b48333619c51d3744b69660111c37753db5bcb6cbe0767ceae3ab94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    8e78d53fb0139fc674196663f59d22dd

    SHA1

    fa2fe9120e8a918cd90491e3cc6ded3ceeb1fd39

    SHA256

    f2247a6fe4b879f54efbf8c3042fa998a95604980ff590b28f95171d6ff58992

    SHA512

    d6bbda7293326477c4f85bda8e8309a25c3c7246b4e2155be44ce00f6f4792285a405a813f53aa12d73bd4648394c0f58dac570a9c7691a25c3f7690040512c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    0c6e2033ec0a219469dc15923b3ef47c

    SHA1

    eeec5fd9d2acbf19e369d1fc77593317b7191a77

    SHA256

    476aa08c30167721f6c1fa240a008e54317c08bc30378313e4fa9f82e7f5da16

    SHA512

    eefec533c380aaf9ed8a926d54e9a87e38f5fc6195e669a703b92154dcdef18d870a60c88577ec698a23e86455a87905ac6cf6854bab6787c7cfe744ebedef9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    fb81717e556b37a1b91abd53f9842403

    SHA1

    40530021132441b908285d6fb0a5c1b48a47d70b

    SHA256

    7409ea07491984bf975ae651721fb91424386af40699b2e5f723edd1d62e572f

    SHA512

    6c9fd1eeb05730c02fbcdbc7cfba1ee220934fc0b1b0f6864e3d60538137c5f774700705d6f9f935ee9eeb9fc5b40790bc04223888a22515fe160af4705404b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5c71575a717eec5a27bb04f311b22dc4

    SHA1

    752a90a6354169cf1dcd939630b324f38541c810

    SHA256

    ff60b440f023375a2f4b992e64508eca7ca6061d98e4b1e236401dc7dcad52e1

    SHA512

    390d1d63d984c42a90a77ce2c4aee3c52ec87bb7bfc8656e60296253bf98d517b05082e316c5153a22861ee844f295cb26f83d59a0c97f05ca2b7c9269d40889

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    c1c7b920496959065de53ae9ae38b81a

    SHA1

    4c873812c0ea00f78eab24c25d4cebfe2a7e4196

    SHA256

    27f35fa2d204173cf5bf8e134fab5fb5a48cd02b5b9fe9a7fa2c25010f39bf3b

    SHA512

    069a31efb9bda6f9507215d1d7345d65ac08afa675376f77c96deb45a8baee777f3fe779d0271c641a5c9087629d2c0c73cad5d7eaf00230ac69028f6e5a8e50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    506881b247820cd10e8c7e4c5a706a4d

    SHA1

    1b9b819cd3143803f1e0a4f99569b9fb66bd712c

    SHA256

    27c9399b6df2a111f4a09ea6aad41d86555d771adb4fbd438196d5b3b694abcb

    SHA512

    65036c9e5496dc70bcf78ead29f73fd059c02730b68bc74eb258ceda7cb3ebe84e46fe396d564a1e916a3181067593b4847b50e04bdd68b54c2296116c0047c9

  • C:\Users\Admin\AppData\Local\Temp\CabCA44.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarCB26.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b