Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/04/2024, 17:13

General

  • Target

    be0cf1c3ed33b2450c3b3f90cef1d271_JaffaCakes118.html

  • Size

    154KB

  • MD5

    be0cf1c3ed33b2450c3b3f90cef1d271

  • SHA1

    9a901dad6179628c88ed8c0407b1a5dea73743ef

  • SHA256

    f09e76320413868bc10a7b05a5010ba48a4fee05db55a4fc81fe010bb93ded17

  • SHA512

    88b2823fda425e1f9d011b5870172f7a7eef435f22e944fa1315db3576d1cbd3413b25e9d70e6eb580a256d78eefa5147ea21581d7b19402721c12bba8c88414

  • SSDEEP

    3072:SmLmP18zpEQuRxcyfkMY+BES09JXAnyrZalI+YQ:S8mP18zpEQuRxBsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\be0cf1c3ed33b2450c3b3f90cef1d271_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2612
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2612 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2332

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09da313ccdf03ef1f5ea3796bb9a9947

    SHA1

    db5917d6a8589fa669d01724878bed451ef9696d

    SHA256

    d4df9a7c69837692acd74885977c9fed94d17fa8ee7e3c39071341a03e1696a8

    SHA512

    2f0ab982c217ef89303853e3d81c568a41a1676d85c3d8130c51e0e5540921a6593b483f57e3624bb3bee1c29830baab0d2985dfd3bab88f7e9a10b8e44b0153

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6763fb95c1a28aa577c46a953addfcde

    SHA1

    5eb04f2d9c02745dbc2e801cd354481624b248f7

    SHA256

    5294bd877be41efd63b387af5284257f12d32cf5fc1d3109bff018b356f4e11b

    SHA512

    f338b8e92ace9db5923db628949f9797a77d7607568e85e4132b108e8d4ef53e52766fc7254bfc0b90a7de239d3904a01b80af1beb9f6ecde34d013196883810

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9cde87b80041a2f519aa7c96dea355d2

    SHA1

    7fc0e69dfc2fe355719a922444d37e71ca859de8

    SHA256

    4e1f9c793dcfeb9133af10c3adffec8bde08a2c4a38966284b185fbb094bc542

    SHA512

    d522993ebc4fcbdc88bae297f71357ca4539c7b6a7c9aa92fd4446c336af190565a146b333e9f4dc56925605a9e4e55f71221a92a07c7e8ff0263b7b933546c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce8270edbf670d048201f7c6c23e0a78

    SHA1

    6772a3054ad4c1895aaeac7375ff5ad87be7b4bd

    SHA256

    5d9f8a2f2c1744565d83a505f3673aeaf55a1860fc5019bf7a11f9e59280bd63

    SHA512

    1c4cbcbf8e4699ea7ccce74a688f39ecf648e52503efc95e518ff712c0c029d89788faadd0ddadb2d4fdb5c5a26f28d10987bb67401df5d91d2c9180dc2a8b47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    034cd8bfe1bf71202b5a5bc88d00877d

    SHA1

    c123954585ba4cc535de95e61e8f0e8f8aa4fbe6

    SHA256

    5486bfa3c22dfd3dd06e92e66abfe2217b0342cc825eb298dfc48fe1a8e22f93

    SHA512

    6edac15cd3568f43d596556dd46c072a682fafa47dd589288f685be8c3d69b427b8358b33781d49a53fbbc55fcb6a8cbc08cf9a21d3c166419bffae038916932

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21530595b5ee025456a3b8eae6cfe553

    SHA1

    8c8042a5a12a2cf93ac8a51824157406110798a3

    SHA256

    d9792672cf5f0857cb04d38499c2188420381936b35817865cd3e689f39e5cc4

    SHA512

    966316c6911344547cecce6446cadc86aea4f4c0e00db162db9686c2a927bff356e4e2a5271470eec80c57e140a76a8fc174f1bead27e0ac064d0becc75d9f4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8acc502fb48104aa766ca5a1865907d5

    SHA1

    9e60a1f7ce1dd316e4f0f65912d875326f7b14ee

    SHA256

    2cf555a4cd5aba65f23d354447975a18dc13ad36330281e974164ac60933606a

    SHA512

    5362e3d50d16f62afcf16bc2ca609685099640d54389b8d6ce4ebc81a8e89d796481420bcf4da190915beafaf5deaf7ebdc6b2601e698d19ed0a1002459e698e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71397a1971ce312ec39ec56ad2c799bc

    SHA1

    8a4beb61e78e09916c58ef90d9e1cf355316daa3

    SHA256

    92c9105020fb4cf8259a5e8f126ff090c6da3bf169e269788f1a99c687c5fbfb

    SHA512

    b442d98246a4c2c0cc0c3390c71aff7a718caea60bc492c5df247902f852847953ef8785c4eb34b25c16d7fecbe89b9717fa01ee76e78c7b8dac0dc735a4b4c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    414d70c17d2ab50e09fec202510f424f

    SHA1

    4c939e31ccee97f75a67fa7e5a0811e6b772a1dc

    SHA256

    9a189278fbc6d23692ea92caba0888c5a10e176678e50abc84660774492d730a

    SHA512

    64d0aa63aea4de9efd6e3f5df539e4acb2b1d8ecc21e390a57c0216ebadaaddeb0382e9ff1497798f3b1a8a8bd3da39033b4b7a106d82f9410d2bc3c8efbc889

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    47680cd8817044a4084cd41de503b05a

    SHA1

    6c801651bd7fb205f2bcf806760a7e473a86fa81

    SHA256

    bc910877d3ecd660dc88146fd888cb9acbfb1b54b58016446df7225f9d26c722

    SHA512

    0604584faee694613f9d5ca338f12e118ee4e0126a0a146c483f337f5b6dc3ddca8dc22cf5096c52d87fabf0f3ea1f0247f99e12f7cdc381e2608e7df6bca4f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    504e37668ba194319cd271bff7bfb6bc

    SHA1

    84709acaccf04f939c6f686f183ed1d432593c97

    SHA256

    9704a9d075b34f15bfa8cc92cb18fe3d3d21f6560e8aa9b7b372bb5d12109160

    SHA512

    d03f161c5ef4b64a40ff6f8c903523b307abdc206ee2612a4e64ca6298255a9650576fa294cd5d240b84facdeeae517833ad946fba0035542120fcddc8570cff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    682c40949e6551ca58ae3814d5602c57

    SHA1

    bb236a3b38656b8b14757da5928220f488be2607

    SHA256

    42b88afc20b4a41a6fe255e81b69b6b651313a99b9f8d501a74d243007300e82

    SHA512

    83598430e0fa97b2f75144a9031ae0d13e9d4d2bfe2888de817d6a05724e071513a711430ac3d3063a60a35a5586fdb9604948461aaccd184ece82c7b9c7ea07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ebb546937e0147e1a6dd06c451cbc9a2

    SHA1

    09055fc022f2369a2b7b5886e0ccaf28ee2af047

    SHA256

    ea5658b0942a0810d267d01c7bb8d223c975484f01b19ab4e9efed93aa6f09fb

    SHA512

    8e1043fa8138b20d24e98c6fe86e90ecfe654ee49fae8ae79f3f83329e678d86d8e9e5f99ada635d4c17bf58505af0c170d503ad0b9fb63b61615f0d30d68a0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    224b2e83464659f0f52ec9a0e695719a

    SHA1

    0722304dfca376e23d30b0da6b03a7571637ea7c

    SHA256

    b5e321a8040422ef5aab6470fa1fa422e4b5b409aa0fbe16915f8d295751dc0d

    SHA512

    e01275e943bde612d56ddc9d88bc81da8a03f000387479a415fd7c648048b596146d085c451f7b8dbe1b1fa7b61a9a81dc399af9c1f24c36985e8ebc214e4fdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad924f2a43742ba89ce9ec5c89c66aef

    SHA1

    9b3a37369370019aa5824c38ff9348a688c2ffc3

    SHA256

    48703d32e66a289a8ba68bc0b93c102b7d27a288527c7ab12db5c2a86c6a9cb9

    SHA512

    408816848055ea5d12a7d02e3e3c4076485a4a6875fb41c7233fac9aac5200d06bb68ff324a1ddcb5a50df8ced4847660bf43269d2fd2016e54ced3fa46d65b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92e66ae0bd5c3a720fe75d1e861572f4

    SHA1

    f94d62d561721be2312c60879826d6bee8f6707b

    SHA256

    d0acc2c61117fb700930d6b0feb2696e031f03ba7999ebe80df1de3874127bae

    SHA512

    c1f9318e3adfb8112967e122097f14022b1cde579627c45c684ae0686a98838d62d2a67acb0ae929f8cb254a4593a4f710491011df559706d7ef06bca3c2e9f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4275744c651e7bfa9d5a57daf9913b9

    SHA1

    da1bdeb2e11d2d82e6bc257e36dc4a83a4ffadbd

    SHA256

    8cb6fac8f3cf7ecee116a0a0d04a69e7596e7d8627b95e26d9356c51b6e3ea52

    SHA512

    bb7f876211414dd28cb82740b62ef3349f276b28976e4054741a3e4b20feea59beaaaf860c1097e9c1ea085d0ed64b30e71b7e48227f61997f5b99538939be2d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VIF0OH2A\common[1].htm

    Filesize

    429B

    MD5

    257464e8443d9f02147df10a7f1ad142

    SHA1

    b35bd7e9905b73527b81f621327adef26bd8e9e9

    SHA256

    83dda71c0efed5f4dcaf0895887263891944ccba12353335e904a30c415a9a27

    SHA512

    bd22719dabe23dfec22d91adee991468c2cb1583ca24d53d0952f996198a305328689a635a73ec0dfd68a2ea2278bb730c822391c7fef265a4af2b3f80ad56f5

  • C:\Users\Admin\AppData\Local\Temp\Cab3036.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3128.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a