Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/06/2024, 01:09

General

  • Target

    99aca20be66fd5d248c01731160a74e8_JaffaCakes118.html

  • Size

    49KB

  • MD5

    99aca20be66fd5d248c01731160a74e8

  • SHA1

    5703898e47de1ad4db7259e4f433b96b9471c51e

  • SHA256

    aa049ba055d501b66d13a1a5798786880ade3a0787eb03fff3461edd0f067f20

  • SHA512

    1c2025992af78c9c3764d29eff5a692dcc8a917a55b29dcee97464eef1bf2da0225f4b7deb607d7eaba4a2110ba22e530b7335819d4ae5f133e0b06518b9a9c2

  • SSDEEP

    1536:uF2z1xtAL5VcT4tQx5j1vzphYP/ZfJfP/3hhRPKSPssVeLxJZphIl/sjytdhrEaF:9N1vzphYXVJv3hhRPKqVeL2l/sjytdhR

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\99aca20be66fd5d248c01731160a74e8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2168
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2168 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2536

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    ec9f0a396dcfaace352c476a744938d4

    SHA1

    f74766aef0590cbeaf9726992ad894a617607b1e

    SHA256

    d5faf71b3cc2e6bc0b7d9d2be92906991ed998b8b475b0e8eac01dd30fb62318

    SHA512

    b5a942aa97eb0146fc7551da27482d176e2d28b8201410d1ef164b5676a7b6aa7f7eb477c2d4f2410e25b98a78b0016ee693b95a575e9901f7c1a14094420b1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    46a750a39938dd966bb49423da65510a

    SHA1

    ca640bd0ea5995ce40e078e7f368ba0731a2efe4

    SHA256

    973725d2087e1c085948a27908e7e7a988b4b20cd731d133ba8985f0a7b423c3

    SHA512

    a8d1083b3e212c200c05bdf61634d3f17c6f28609b8e4be2a77483761382a0e5dbb59c302161581f3e25893cb271d0afca003873d18fe1af713f52a44675a55d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ace680f5351826c0c5649baadf39b15

    SHA1

    62d09dd33761a1d323d11fc6a09db379e544b1d2

    SHA256

    76a121a1f09dd1932c1e8e47ead584f64e90c3a7e62e849787efc363ef0e8b24

    SHA512

    3d38647749cf8239fe857ce54a19620e6a2ebd7090bd8fb84e1231a3de17684739ac121cbb8d0c3c0b0f76942dcfc25907658d62bdbaf41ac073cb6b1595f40f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7c8917d7fa84c980371aaa039d2cbc65

    SHA1

    742c484fddc183227f30eda41ecb3a7ea5135fc9

    SHA256

    380dbe73cca94a8cadd0571168edcab68dc427e5ca9eaf296d70f4e2dc4e0cbc

    SHA512

    090cc261045b8a3631cbcf729fe3e77e813d65a8aadf4108dbb8918b3cebb53494fda12171f4a5abb075f5522b02fd5e163820d0f74af46468d603aa57252318

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c9e01ad580a26a1b5def60a5f6fb8646

    SHA1

    0b5be1d6258fc646f59867f2a9117a8f4748808b

    SHA256

    6008ac01f2fedc6c36e17e82104f01d94c46ca818d77dfb29939b3d63d27ac36

    SHA512

    e0b515f211663e6734f42bf2ce4dcedaea97952e5a57d75a88c0da12045fcfb7a69021f521705984ca3f07d6463517c909b4bbe76a89fa33f5953d59edd153c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e80c4e4d9ff6569c28e0dd868f3a60d6

    SHA1

    ffd43eaadceda96dceee4ffe8b6f4cb551e66671

    SHA256

    c3b2afdaf62850a53bd6e5bec66f7c0449ae591148ac461cd112b7b24755e215

    SHA512

    31ce8fa47effa1c4130dc89b5707d4f3c83d11066989e645ade9d65f0395c847c6bef815a67f4e7423e6a20d8f50602727f7405f718d24c5e30cbbeac6d3fa0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    46166da6543c880026bfcb4d58a5568b

    SHA1

    9e733bd0a9c6063eca8a1602e2ca34b79f292328

    SHA256

    a01a3c2ad7b84e1e65b8a2ed31dc0099429fa4c02b8839f833ac180911b36e32

    SHA512

    93e1d66fb3f5b72a5b9ea4cb8adb85b1bff0248f2b8720e68a7e4fc449f598b30ff993cb1699068b21873d3c6aadfdbd72d6d796b1e7bd64173bf9a72f506985

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7600543130cc9ceb465837a6c54319a

    SHA1

    5ae50d4c7d47ae87724635ac343b4518a15590b4

    SHA256

    b1ea8d4cbf573527990f825f2793322678d3fe3e9450b8bc43ddcbe824d00f81

    SHA512

    c8388b1ba90df1d67073797781b20a112118d7b3dc3cc8807311b1bbc79d806b1dca9afee78567b230848892bc5af43554e5f81b568e09a8c89f8bc59aa6cacb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9982c856492885a0b9083b8a45576304

    SHA1

    a7465cef3a9f94f0be31d9ea6ecdf0a239c5ec3c

    SHA256

    2943771bcd618810c0d8e72028fbd5638031acc0b70946c019985da0f22160a6

    SHA512

    d2171107bfe2fb403c066c15c1795899fcd5e2cf3e2a2f8203561991432888f28b86973a6173a0aa2119e25a9d47fae64f7a874e02b622b84ef6e072a88933c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4eb114b84969b73e7803d48d4af61ead

    SHA1

    36696af32322c22b8a3dc8bcfc199f7bba43fbda

    SHA256

    1f35d039845d236c94b701a57be212a70984302642f4160680b45a87e208ad46

    SHA512

    fe7ccb3b3f8bd08b28d513db34c85f98ff1879f54ea83959e43d6faf7a67af32af4cf931840a83a8b96818f5e5d60ce850324cf7f553d40ec8b5a51d2aacfd9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    320c3a267a405a81c764dd4064b11ef9

    SHA1

    67d43dd2d5ecf2c5695ad298d999653d06e96cf5

    SHA256

    03706542b5a19d75d80b4583a25e79e30966a824fffcc9b554258347f58408b4

    SHA512

    673dc6715028de9da8543e4f64e3e0e7543747d4f03a57c7b65bf276a9cfdcf6f19d2e1a919a4dbe18b4f2e12db5888a06fa9e7ad9fe1f041f6385a844748b23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57f000802290c18c8a9842e61ff501c1

    SHA1

    1fe76bb5eb4daabbcbb1a256f08d1ddf6256881c

    SHA256

    ef8493e6b06863a7e0034754930a06b6946e75e6b2f4d6ae83509290b32ff150

    SHA512

    b194520d1586f0881c02b5408af2b4c7eea53d3ad8e3479e6d2689e76aa1fc8ff0e395832022f6c69f7439a0414c5453e04997a90274efaceaac73758a7f2b44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bb3eef16eb2dbe8cf6419b7685718355

    SHA1

    d0bb7fa2694431537bf1ddacc23f4f09d6566221

    SHA256

    4db944a5de981b14462fbb32e709d20bc648fe75588f131fa51681ac6e44718e

    SHA512

    8335ae13754f8e00963951bbf1df6de7e30afb37e7648f56f35c727b72a7b1995bbd2f3b12d8bdc985ae5e7bfdcb03e4f119b61b7489ae31608293f939db17da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f90b26f767a043c400f3b284b6574e1c

    SHA1

    1e6e7bec3f8e4ef2c3b5e49a5b544acd688af909

    SHA256

    71ca650f575dcabf92a443233500780def08ac2eb0742ba917ad80f367eaf044

    SHA512

    d7c3d49de8e00474f8a22f281c594a485d81cfc60572a0f7f281bab93ffbb1817154bd77bef1213aceaaaf4827fd823008290faffa709cb2004f32f357217b8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ac1ecdbd6be4f83b8177f2b3edd5e93

    SHA1

    61542bcbd608f5b56a32c86269ef3b8cac1634a4

    SHA256

    8f65c7031a862f178d1c6d1721c5b7b99b0c12f3268a9433750b17f76ac2e3f0

    SHA512

    4af1f659f5dfd005887805842df3b4a5f81e81f9baff54c426f85f816d08cc9a3906eeeee2d7751f0573688a6e1fd2d729edde13f51d2c5dd2ead8afc1349046

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44f311d1a964754e7ccb900d07b939eb

    SHA1

    2f41348a7a4311a847e431441b721b718e1ba651

    SHA256

    aa13ac14ff17f23e4484c4c0ca1c495ae59650b924d18e04c6b43174047b83ae

    SHA512

    7057da3e44f0e283debe88c6e2024aa7a1b076634e45f02914d69e48830f45635b7b3975f0135e8e635a825be5cfde61c79672d16838bc73e6b9e95cc4624ff7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f54eadfc8dd9eeea3917ea9e7ea5de5

    SHA1

    a9385cf1ad54b18c2524bbb7171930290aa267bc

    SHA256

    6fc26dba837be6d4fd81ed9a34cd11bd0cbda4ca171fe7c25dcc1be9899d2557

    SHA512

    4de038b6b7657c880fa999ad90bff62b246990766587514594079062b707eb6f12cc0ccd389f6f167394333448cc5c4baa524e5b4a8580a3e3aaf11ea72cf229

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eac37578814fa185325bd71f5ff68ca4

    SHA1

    9b642de499acf1ab4270c685425522fc5ce41bb0

    SHA256

    28483c1c0bfea54553d1df6d9fe2b8791a92c923ec209e7309e7ede72d5816aa

    SHA512

    bd150c7429945eb65c9707517a0a20fc2dfbc961e84d029ad98a295e47addddad0cea52f11c248294f5aa5f2387acd8d256ad1f075916da0d09c63a7e07794e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    08ad07eed0041c3398e03f4df6b115ba

    SHA1

    db5ba87a941594e39ace91c9898a91f4b5031316

    SHA256

    1d07699e21b5f0452b338e87fb370c9e6ecc243d830ab457f1050bb0fccd3369

    SHA512

    e5fdc47104f4ffaf513353fa1375dc9e5b9ae30746883ca62f84b371dff95224672c766bd444adee8b6ab7a24956aaf9a3f5e786c34af92b9e781aaa365db0a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    a8221602ec8f85902ae0c0ceb79ef8af

    SHA1

    0fad5c1da5a4e94f820824b00c6bd86dd8b11f38

    SHA256

    dc5e28228dd4d3160100aee03ec27312989435003ea87d0df93ed97849e91002

    SHA512

    5a415433c9593c7ce4faa481cf5fa971d39e9a0bb951e3f26b9b0069b8e62b035388a325c81b9f82732b381945670cac3919a3c6a4b0d9eb1c92f9292cf75fbf

  • C:\Users\Admin\AppData\Local\Temp\Cab204F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2050.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar21CC.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b