Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    17/06/2024, 05:14

General

  • Target

    b6edcc062ab5de96c18e02d1600db732_JaffaCakes118.html

  • Size

    51KB

  • MD5

    b6edcc062ab5de96c18e02d1600db732

  • SHA1

    0ab1298b4afdd1721bb677b3a0ce7f126058c81b

  • SHA256

    c2362e2df68eb693484a036ccf32e41ca13cc4dfa74b2f1a217417f527778d92

  • SHA512

    0c7ec746a9af18e31ac129cc90ce96d8998ec12c0fd5dbe84ef1ee1499f26dc13ab3eeedbe1d3f1835622a64277b8e7604039bcfb9ae9454e0efae9f8205acf2

  • SSDEEP

    768:SfYR49z3ZNh7YsxuaFvG/Es7nmu4eyTP9BzTJwLY6uwjg:Sfl9bfisxu8kmu4eSPfiM6uwjg

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b6edcc062ab5de96c18e02d1600db732_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2240
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2240 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2376

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    dcec8e53759d43892ad4a2754c6b601a

    SHA1

    5f22ec503034ed5c0c674b00f323df836901a4b1

    SHA256

    a17adac7b11d5f8435406a0fdfbef12b30702d10ebe5aa49b9c19519150bab59

    SHA512

    5eeef1802ae0c99883aef7ddc2772daebc6fbba4f8dc385dca5c67c03a2e68d2717efbe1aca4a70c33f1fbfa562ee19bcb5d5c6b52fd9ffc4d2683dc0e9338ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    66cadfe8ffdf7391165e9a46e4d29430

    SHA1

    f4f238c4abb668d60ef8caf52e706e6095dbc95f

    SHA256

    0e7bdf757b8bbd66994d22f59e16ce05d0c8312cb71e97fed41fd15212de3231

    SHA512

    fb8471f50051d90b9db99091f55d7126a094419959a9d2684ff1c50cbcd169e30a762fafd418be40c9ce68585e54cf2d8927c42660c4653446761ca48ad7d5a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    210a702ab33add2b1bd75a0a67a56736

    SHA1

    2f98db8bc130a89e8a5cd8a1136556d9cbd5bb5c

    SHA256

    df07b68885163f557a4cd5e029dae36753ea7a9d6e89a870f4efc2412a9ba060

    SHA512

    50c77136de903e7e6e7936f23adaa8cd6917e91fadf409254a8712183acce3f4576515057c2f42544f0e30f40dcc12bbe2dd3a222714200279f4fcb01db3adb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b5faa97fc253c212c99ad50c8c9e0d21

    SHA1

    4c0dd9ace431eecbfab4dd4db52ec7a0000f55e2

    SHA256

    a87ea9c2145c8acd21e58184fd239d91425cedb8c86d150e117de54ca90f8a94

    SHA512

    c40b4d76350763de5d6fe633d348621e48e1ab2b44da8c3f1226b925c6a305c464a45195092243387198fc2e601b7683a62382e9154487674f998f541ce5b68f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5594893cd5f9039ab52dc389db79811

    SHA1

    3ee34c1227bc48455667847ed510e131e72ed8ef

    SHA256

    33431c1a5b3929291814308ce7242c5e1e5f2598c97ea535cd4cd4beaf4a6bb0

    SHA512

    adf5cd04ea420626db9e0a215756f789bfdce15739d6db2061a23aa5645356da89cbebe1317eedc48f8c78f03a01ea1d6061a0d88325ef0fd8e010913e540ede

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    38d3489bfcbc199d073872dba7448149

    SHA1

    a2115fe61756655b7712bd14c688da5b5e665b7e

    SHA256

    33d77674a36ce110668f65a5da599e65cc0e036c3dde8402ba9fb6e6b1746cf5

    SHA512

    888f6f77e88ea4fc464f4557eb7ae50612c238a1b22b5b26b818ce9076764b6dda5436708061f14cb581705fe9fd9895088d62d1db0bbade5d3201629368064b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a62af608792b1915524b7533d2c44239

    SHA1

    0842dc34cc415ce8358402b92bf05d7e9b5d7b65

    SHA256

    989e2d720d2455c8c0e9d9295951f8d216a292f0e266a68d2ef79345c4e10111

    SHA512

    9f4214d55acd9f8f90c268da368a7833536b3bb1833bc53128499683e21594cc98acd75ad1c0bb636f561ef1388e494860b7ef92a8d137509cafd5e17a1452c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    62b21bb9e96ec13be4a845dec20f03f0

    SHA1

    55d7e0f880c109b1d5a73ff6bbeef89c4a0a1393

    SHA256

    eef16235b70087e8cc8c516201f67920787fd1102c5bc532ef0a6ea1827258e2

    SHA512

    8d5ff40b32a464c3c0b46bb6434200c300aedb86ecce23d55b25d836589473b65db89d2ba38462817252985c0a67f426fd215694fe468ddd9cb399b1a91fcbc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e349e310bb220bdbfbcd71600670103

    SHA1

    54466146fa69ed196e9e43a9b3915c945ad02718

    SHA256

    914cbfff1dc7bb127b007bd0e99a90621481283e926f7f43c45c0c3c8625f4b9

    SHA512

    73a1289d05f730c958799fdf9e9b7acc5f84ce9f3d3ef620c32e9c6a82b9f43340f4657ad2f2943a5a15aa55f7e9975bacae8c4fc2e16a8c6968029a1b7888f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3cd518a76a4becd1afc881419b4a52a8

    SHA1

    217d63490f316f0c095e7aec8a070fa8a2fed61a

    SHA256

    8801a22858d9b4ea6ea90d6c3a50567ee5c82cc24c5e609d7fad79bbadc53c87

    SHA512

    6bb5dd75ba81da45b49bdf57b31ebc1cc1cbec2b997bb724287f649992c9597a369b96fe2368574de924c666197bfafb0845a388aa6a1246d0931aab33252dfd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35005f44c840c5cba783b9faad976385

    SHA1

    3f062bfbf9099cb8b9bf6bb68e1207f31aaca906

    SHA256

    73575b65dc4bf28eba76ea8168619b18c706ab730cd41e8ff7addd1368dd42d4

    SHA512

    1fc0193ca185156598cea0bbb8d33256244966d751b82d69b311c14357a3fbc5c8b46642721dca9326f435cfc57167253d683255a72ea56f8c37fd02667eac08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a20119a08ce16fa31855650428234f5

    SHA1

    c7b1b32977ba56227587742d5fd708abfd5acf9b

    SHA256

    aaee1d278b02efe47db3edd659629c8c0aeb804847a1788e046e347d47267a6b

    SHA512

    f5b868c56c45210b26bf67851fc3fd864b4824bf7e5de3fd04d4796603ba72c17cbb7d050db23f87a1b8c1f0530e9665df63d583dc8932f1b6c91b8c9ab0a847

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87ba891fba95118d5a076b5ae8a28861

    SHA1

    3f4dae0e1b2fa560d6362f3672da7e05add10616

    SHA256

    0bb90308ca0ae94e62ab8d366c14d57c337c1dab9453bbba85338dd5c0a4ca30

    SHA512

    2c02cb7825df4b40a2db88859f00a01a8af4340a353cb3db45cb771df1b2328842ad12aec74c7a5b125a91e5a318ebb4555f6c019972473e9a014af23796d240

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    23c028e64614e37ff4ef8bf8fd8fb4a3

    SHA1

    ac28fedb1dd29a0ff0fcec02245325bc0013bc55

    SHA256

    62c053bb81da1cc5b3eaefbc3ff49783858a72ccf498cae67b8bde65a2fb8518

    SHA512

    e03f31a4001935c0c1e5c105eb45f05241ca134e1bf2c0704fd57024d0778e5931d63eb056e1b9c137c64de58c3b466ca70aa8b5a5bd094e48af0ae04af2c885

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f59516f094b9a8c9518666f8f3d0ffa8

    SHA1

    59de1ab4473baccbe65d61677cdf5baef1505e8d

    SHA256

    c75ad619107d7e3a6e6c45eedf645728c4ffa9c94f511b6e99cfa0a13d4fd592

    SHA512

    1d4294595df30ea6b63881a0178ffc3f92f701d2ac1a87a477074cb178b70910c6cb7800757b4416aa4725d2576c6f9ffbf57b409dd933982535318a231f86ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    99e9f7d06813fd82b727b36e42b7d0ba

    SHA1

    4fd5c2673d6cf9a5ed017413239272fc17da4ace

    SHA256

    78f99088042c9bd540d391907f48c6f61119d7891e9c5aa5a88638389f119998

    SHA512

    b463e5d31ddd5387371f85610ae6aafc77bc763abb6878661e0d8ad0d7f4313cfe26b02e077f88ac3d001421cacf2636e41cb51b25fa5af79c7c784fba95ff95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    660d27fff8d742d00822e5a26e4ec9c0

    SHA1

    527e03829c1361dd9db38436a875e4d853a5206b

    SHA256

    ef97da68cc1666dd2c0cd706e6105465760eb956fbd6c9ab53ed613bd7ff685b

    SHA512

    badd85c395d4b461431f821ea073f8d2e6a34ba849bdd96387d8ca9f3c57f148d1edab67e23fb8b254d3e2da8abda5f6f4257b324c880810662aff2c1e4cb2f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26e37de187183248760874294dfa577b

    SHA1

    70a65ce2a8516d14fbf8a9f0175aaf70e4b70f71

    SHA256

    46ca3376f1f134cdc108f58ed4d75f76817f6aafe592bd2424e38f66b06031ec

    SHA512

    b26cdbaa8296e59ead31e68be06b59906ad1e82e64b948e71428aa7bbcab1de13732d471683499c92b0003f89d046248d4db18d52a13216d0d21b86a25ef2749

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb8b579be466318254b22f9b1c3cbf06

    SHA1

    90892475a189535125e5d4cd7d70a3fea3ed2911

    SHA256

    5aef69ad5139cf1a72707c2334ca3a772df96d4a0e941d40c67d2a6174c5047a

    SHA512

    bd315abef96b441881b145b124f3f0abb0a89da7e979f6017cc049d4db333efa662d76e0dc55f60f5bf82744070ff19be955258fc8b52a067c718c418e36e3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    e77e98ed46902aba9afbf3a059458286

    SHA1

    4e72fc216f5c2ebb868272ecae1ea35d168d3265

    SHA256

    81556f8aa52dc1789c35aececa4c41e0d652ff6888b5f88dd81fdedd8e70da24

    SHA512

    eb625763e063bb2a385cc6712334d7fe52278a56bcbbebf40c0c684bd519348589e15a2a94de9672fb223fab2672cc5121a79139cebc77c03b6ec6c849f052cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Cab26C3.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar2820.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b