Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 21:11

General

  • Target

    b539938600d952343a900d0df77c9175_JaffaCakes118.html

  • Size

    146KB

  • MD5

    b539938600d952343a900d0df77c9175

  • SHA1

    41819ec6d05a3ae45ea80a36f32c7403eebe6c66

  • SHA256

    c7edba9ee4bb71e2a2fa19999e50625a7fb6615e43f29217256a9a2618747abc

  • SHA512

    efce775458c69568a5bbbccb6b565260f2832b313e8071c2930afa016dba166f8a330abd820423e1a88ff270b4b6866585a2d0f87f7d70284c09f16bc9ecd9eb

  • SSDEEP

    1536:Sjt0f+KyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9w:SjcyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 43 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b539938600d952343a900d0df77c9175_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1972
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1972 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2160

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    30545eb02b3298c1ee8dafcaddc117bc

    SHA1

    ddba9423463fb30394382baf056cd88bce1e7fee

    SHA256

    cd9a7c99828fbfbca832a008c92a4b7b60b0bfdccc0bf81ff17ef08b2e3fe859

    SHA512

    521023eded72949a63e264e607978bc5e176d4700377ff70955a937544febdea09d75e8cebabc034a7924ee0d0c6d12cf151198edc66a58461e4e9df747d2db1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fed7d0dae935f971ea9a40cf45451dc5

    SHA1

    2cca0d801d4e82c6e67f022179408fc64117bbc6

    SHA256

    7f07ae9f458b738896c7f22cacc16d77a11a827ad3a82aaf1eade53fac9be2db

    SHA512

    24f20fbd7a06883ecca5e99b1a535b44192aa47ca224b45a8627f70fbc8e9a6aaf182ded6b6295d2c1d087e684fdaa66658a5c0deb7ef0fe18bd3f2092178e31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    579da196a0fb5a19f7bfd14703687299

    SHA1

    3c7a83f4e1825ae126ae49fc9e2d8120c783e626

    SHA256

    ace91b3d7dca8071c2e80ea49d847b7d06dcff440f3dfbf1756cfa99e9565494

    SHA512

    6a6f2bc5df4636b08ee2cdd0c845032bba57e122e854d171b010e48eecf25981e9942e6d58d996cca098f9a30a93e66a1bfc3380bc0f82e83f28fa1b06077fa9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa6669c41202fbdb9e6c215417e97b77

    SHA1

    30804318a8338c519a8e752f8a9695696735da31

    SHA256

    816d141de49659995e0fca753a5f5299838cae78090947d17ada66cd4e8f0fa3

    SHA512

    886c7c43cdb44a0422427f35aca1de2869cb80b5c87261585dc6d4cd3a3bdd1286d6df37a9630bbc438eded542afb594aff6c94477e87ee0cacb7d23cb7c83b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0245fc9f8cb0c2728be7dd366e9f7d7c

    SHA1

    5373572d11bdccd65c458036a368d608a263e9f7

    SHA256

    c6fb9d5c24484ae4ea3b5b48ec2626b603991b0cefb127f4dc0dd837f03b03fc

    SHA512

    ed771aa4518cce071abc32c7369678cfa7bded13aa249eb03592a6abd796d60a0bcbbd4b6af5d935fac75752816d135f00ddc200213e7e5ce6e57d4a5b0f34cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35bd062a0fdb71f0a5e1aedd00a76e6d

    SHA1

    f7ac78b0a0204137cfd57db1051e22e7ae15db41

    SHA256

    9bbf7b7dc33edc6a449d8fc7a498dd843bd775a53b3d04b394e4f1fc15e1f5b1

    SHA512

    b2b567632f9a267c7e1698b5b31155d898fac4c07724976911f1c6ba772e4bfdd60350796d85e55087cd4f35743d87ab519c10d4a760337a32f39285e71db8df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    64080c22eb63e1045388d1dd168098ed

    SHA1

    78ac6ba2a426d4a15c3522c56b97c5a4f5a32c24

    SHA256

    fa7b702242067241414048c18379ab0911cbf74e3f2b564d2ce3e5f36faa4539

    SHA512

    bb1529e622256aa0e826c7875aafd21732759d81a3dd27d6aa447905d4043e409270d1e2c713f66cf0caa81b35d9d300e0c6cde47ea1045ab7b887a95ad58e49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e79a3a901b8d5d3c00769ddf89142ec

    SHA1

    167883b029ae04b3f629db8966a0147b913e9b98

    SHA256

    dbb695bdc66aa61aed6bffdfe7cad1d38d4f50f41b3f1afb9f54edb2d85422ed

    SHA512

    2a6ea01d80324ff93a9b95acda08d0754a29ff1f9355fe4cc39f5b319010913f8706ae0984ada926525115fdb0e0fe27833d1da641a08cd27cc2d4fe23da02ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f8a529e9b8af7da60a11f08b2efa935e

    SHA1

    20bb2eaa911d2e5453ed92fdf99e2bceddc712e8

    SHA256

    3253ed1963eecb27a35eb9bfd7dde43913da75fc84619f0a3d8a947738036c3a

    SHA512

    dcf723b6209881059bc3427d23df83f1bee20b456e52bd6397f64881ae018a3d31da6804a798c1aab7fe3ac10d6d51313e2264fd0f42a2c7a832d29f03894551

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    48bb4e7f838d03a4012ad1235860dac7

    SHA1

    924622358e65d372c7fca99528710773a90c2f12

    SHA256

    49665be48b838b70d1df88a0b6c9f10ce3496816c6cf45ecdc7ab203dcea1753

    SHA512

    f389f51f9452f0e2a6f0a92ab70926403f5bcb16f06243880cff0a8c05c7858f7fe6075e26a6462346e321e24c5bbcca2b423d482fd315de494b1e496662edb3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98990dc86b32945ae5e8bf6631c6ffdb

    SHA1

    162979c8b491aa699a6ca6d1645ff43d49e6dcd3

    SHA256

    c9f4d2d3731561b364d5f6cbd7f59eef25e59741cba3c3be5759162b61719ebd

    SHA512

    7844f2cf7b93bf09f10582704edb85a0855418d32a19328515b233403c4bdd25e14871ff969c0362dda7307958fc9cc38ecdf7bbbec70229eac59d79e8d6ed45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    10b7bf418c5b1140dcc78cfa33ae4957

    SHA1

    f1c9fdabce5218608e26529b2eb2a454bdb7da88

    SHA256

    d2890586c9cd5736df0d0e745d5fc04dd24e293707c53a02a552049171c88245

    SHA512

    63207cf2eee89b884148bd3dbab49203b2fd2d112a2aa9f14feecb4019fb321461b37e276fd992844d0fd3cb12f231b50a0cdfef7786d0ca4e48e4a0c7f757e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8dbad97ea9e6f80f43e3fd000286e801

    SHA1

    ac35cffad6397a436d27bef38ced6640d9acb206

    SHA256

    5605943a08e11a6e19564a4767e90508d6bc2a0a4284fbaad52366b48ca0c215

    SHA512

    81ca12d8cc28842b2c11763ec8d75ff04062e3338a07a3e9c1ce6096b400b8685bb6b5e7a8066dbb265a2b4553ac2aeb391a564d52c829e08fafe73a98aa796f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7700821e0b84370ad84e0948c7c220fa

    SHA1

    1aa93a73e07d06689f7c5ea3c3aae3c0dbd12960

    SHA256

    ed67967be8608c2dd3de128c7fd38eb72ae22057f7b02388c046903ea6cac655

    SHA512

    2ffe911b839619844069d7f6af7315cc21645bc60a1b333014f49a6b519d0f6d346c922abf71fadebdc33fda87509e7370b053396e787b9f0544c8177f532881

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c507699543705431a609d85e469a7eca

    SHA1

    7626d6a20d3a70928f4f26d7a1c913072f747f09

    SHA256

    3ea4e2892083637bdc66f71c56a2f1adf4ba13945a50ba1e9284f23f3b94cec4

    SHA512

    35ebc1236a2a704c18f81ed0c353493f3f08a77427f5b6dbec2ab7a5e625528c0840f077ac968aa114b49e2907f06a8c84a986fb648e66ebc89991ccdbbaac6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce3c4098b00fadc794691f4616105f5c

    SHA1

    ce9e0b38399379f0af3032556811f72b12f248fa

    SHA256

    2fc29a90cd873cb38c92fd8646abc6a733b618a64cd8b60f1dc00623823a2c8e

    SHA512

    d5afeb686c20f60de76d3d3d0328edf0c4b4044c4cf7f3a210c9280e0272361edd2d4ce4e3ee6e52ad26208b23bcd5950506433b94762f4e5bee17061c0c6c7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    82b5f6c629bceb4832b75bf9d9aba948

    SHA1

    df2479f171f4d151806d4fc90256314b1db88ae7

    SHA256

    96e2a3aadb453a7f83c024fcfa75cbe6e14eb7f213bdc1ce74ab4e7a2d9d25ed

    SHA512

    1181fe2f1a08dfcbbf1622c398fedbb4c19e11c0b194ed211f019660f723bc58dfc5558c77a39618eca18c79e9ce178920edb14a52472b566a019c82c475ac45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    405e2f66e6cc1e9547c93697e6968702

    SHA1

    598345076cca9f09e8736fdf6041cbaae21fd475

    SHA256

    5a98d7bbc3b90e51aa9c7a24ff9cf32fc364cd71c345cf6b1ccc140453d5637d

    SHA512

    7f0a081cca7acdc441b1ed427f8e560421ffc5dd51a224106296e2a40775eda596529bf263ee3abf7dafdcaf4462a1f47da3b08a69040d5db66311687d65ed17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    29851363b935745f43f49f8a17ab8d5b

    SHA1

    ef248f356c59cf4fd82a95b982e56e5043c8584b

    SHA256

    3593755da0733c2a46a300060965fbaf391b768a382eb01a4eb419aef2d69de6

    SHA512

    875504549fa9b5940f10a338f819ff384de3c7210fdcbd785091e2d55bbacd0dd00bd095c6af9d385c32d2f61e88f5645d2600cbaa5e74c01aae79a49f926da3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de73994192d3fefdbd6058518a317816

    SHA1

    73ee24ec5b7b7d1902865e988a3936d59fb29dd2

    SHA256

    d376e89366f1b9e3b8d1a13fbb264315ec6e1f4c0874c16fc8d3c89630b19216

    SHA512

    8f45fae9dddf07ea7464d703e61c09eb9de83de52bd925713fe9c716997160ebcc1eab7e67de623b42ce31d749df2d8fd45087d7a2f5190db21825d484cc2c71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    de0cd28a0e732412c6205466f16ecc0d

    SHA1

    c6312f5a9f4008b091dfa2c0f466cc6d7a5bfda4

    SHA256

    77c246f146e0b25e0ea358a86c2a7bbf39cf3720da548808187c8dfe11f0f778

    SHA512

    764efe6a69e55e03cba961441f745c681176698e901f336c5dd14712fd8bcbdc7aad058ab3fb29337bd8caeb9e078484634040793beaf0ec29fc21153cecc55d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar1DF1.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b