Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/04/2024, 16:29

General

  • Target

    f17deb78efac53847cb56b0250a6356f_JaffaCakes118.html

  • Size

    115KB

  • MD5

    f17deb78efac53847cb56b0250a6356f

  • SHA1

    728cfccc77ffb5524d45ad2ef9e267bfc2d98716

  • SHA256

    a8115975d4199eeaaddb2a42237aa4342fd70af97ef4d9d3437028759af92e80

  • SHA512

    530ac903a9af35d09207aef78f1aada80816d6612d38457ce8ddc2b34783589b589801406af07f89c72f32c835278e37c54765b3d72f282a2da7f59aff7aeda9

  • SSDEEP

    1536:S9AxN/+yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9w:S94B+yfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f17deb78efac53847cb56b0250a6356f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2384
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2384 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1060

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d220fdf21a81095a8f91a03ecfc4a886

    SHA1

    0dc24b2eb27ba1a6dd3e35be06dd80453d224ee2

    SHA256

    b37ee3d773e5ad982b3750e998234db09d49b69348a6ac5d52cc4162210c827b

    SHA512

    4cdb55cffaf9cdd931e5a2a79be268fd257d0d9a08a6f4270a9c1cb437aa113f627f57b4be872f9f86b80de8a6616f915688e5a8666693343bc7bc086f7041d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0fc86518d38b9fe7d2c8582552b5ec77

    SHA1

    5b23742bf11555e8c0e542db5baa79a2c2b908b2

    SHA256

    f5ebec3536dd2260cf696b656523354926109b3bb5c57f96ce2577bb6e4858c6

    SHA512

    0024d6fefa8db02a6beed52d0a88e9acaf8135185f8d64205fc109b56d438f01f9e38c45187a6b373e92993f5cadc78c41add17407937b1c071b2fa5d77fbc75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e70995b23e1706d46e8b2fc43964113

    SHA1

    b43423445c6e693bc956c8828d604b77d1c0bee3

    SHA256

    bc646c8c2b6dabe6e84c18220daa0a73d0b222e82f380834c6285167777c8c97

    SHA512

    b7c4fa3078bf527c75ac016f492dd7005b07b84f6c5b7f1a13d58eb4bae3379d8ef33f2fe20f7d82ebba81fec66613a2ee1a56992b92a29b75e402a9c78934ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1e5c18514f5980ece3f613862777efa

    SHA1

    50d861f45591df5be2aacfd9328b4901df372525

    SHA256

    7f6000d67e540d6a34ecd5684fd3f0a5c8c03d47bffab83ff866da32c8a7939b

    SHA512

    129738a14e372548a111194112de7448fb41a6073849a3a32373611df88bbfc82241de37642fbed8a30e778c4f6c75925ec7de0a1dc29bb70a18ea747a82dd49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02c2adc865fcd792ae5a2a4308e9c7f5

    SHA1

    b1e76afde5113582064472fc7633e20645cb1209

    SHA256

    3dc7f5dc31fe36750ad8c0b3519354b3dde066ad4b7a2b8d6155fb9e9dfa1612

    SHA512

    f72f128591b9847ea6440b1ae758b73dc19368e114afe26eaae76c0ff66a8bf5e9e6ec33c6f930e15b091a29426b6d5501820a3e572b329798354cdfec0c045a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4eeb90e4774ae330a4b3d53dc77799e

    SHA1

    4ac830f2d6aaae89d959e71b70b6210e746f2365

    SHA256

    a551fe392e9b7ca1e465d0ec4fae337b0b0ebfaf549df72f70fbef26295a7cb5

    SHA512

    319c1684584b37743c13637a1f9078d89d208a34a3df6c2a8e65b35349b5d34e52ebc0f0d61eac5fddd9c47263bbfed55bf731eb31081ddafc582edcd3a2f01b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9066c452a6b66dc2d50ad08b7215d27e

    SHA1

    1cc91c78642125e70bf8dc5de3c723ff8b45ba48

    SHA256

    850788827d9c0fa3352093f29bb2d2f80547986f356a5502b8ac14854b39c525

    SHA512

    268be76c622bc09a4c20bc8ab8f158aaedcc8e413f16534d92559c928ae2bd8f49c84b4dcaa9564033696f59822d9d9bfc3cc1ac7e50b449195b29201c155e35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ba99cc0ed62d48baa7e7dc9686b0c1c

    SHA1

    215bb227dbfb38c33e2a1341f89eef15f2de71c0

    SHA256

    29129245bef5b45ad6aa86b6696db0466c3a89b4475b6de01aac60eccac19ea4

    SHA512

    2ecb86b76ae57fd9f130fc7cc672b7941952b55349b75d8a01aa2aefd56df44c0ebcb2daf994c44a793584d234f95ab557922763c23803bdd64641c383299404

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a181059c0596a4316678326fd0577e0

    SHA1

    11a418fd719c6f3eee7404625f1d0f0c9ea41cf2

    SHA256

    b4541ce09b947d01f1e569c46e21c94124fd36384354c73098469c40553ec8b8

    SHA512

    d717a9a7ed2e9d0f0e7b268b66c36a00d42762ca31eaa00947103cfb086c4e99c55dac98971810880858b789e338c0e12839e432ad5547601d39ef06dc0cc040

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc952ac4a60e9751d8796dcfa5589600

    SHA1

    1fab5a2e17c5a49a08b0a3e799948febdfe36ead

    SHA256

    bb3479923d6ab280dc9060bebc50a933ac03c8e5b9e6f5d95d3be5bbac53ae18

    SHA512

    42dc50fd4b0216892004ba719fbbc084c034b93624685d1df314547ace6861f5644938c4b04174a550911494fe9671eb987f6018b1c5dd9426d3fbd9fe645466

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d4eda42909de8e3ef46bb2656226163

    SHA1

    66faeb50a8880b57a32a54420ff79949d599303f

    SHA256

    fa78beaa701c10367723e7976e5e3a5e9ea29070e38459da664698bcb5a88c22

    SHA512

    d49594ef1fd115d9aa89672913baeda1ec46b87c8d14cd1ea1dccf95280253930b31eade7044fbe1cc3255075406fe66c3494e70aabc1ad0016e17cf0f9c3f71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57e52cf7d2e6124873837b32ad78ae6b

    SHA1

    8e4a7353ccc6956d061afcec96ed1c304654cd45

    SHA256

    8bbac9c7237a3e4a3ff6fe9f831c9e1999b192bec412c17eb2dbfe6bc5ee8bb0

    SHA512

    06615815b2f75ae652360575fc5fcb708be609d250da7665aaf7176a98490c3b9a78a8081696904c618c92dcd7dff4d5619142db07b521e12c513dd90a753ef4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba2142793724dda51963d4dd64554127

    SHA1

    eed25373ac91901d123dea6036a02284fe0a99a6

    SHA256

    d603834e92a2456a6b13c688a300cd2ff9d293abdfb5a25822df91c74dbdc258

    SHA512

    5d0d06d174f6ad5ce8333f6e212059f775dd2e1c9f0aa27d475e799be915be3dbfeb039a707e9d0f1ea09dcf610c3808a2ea66b92eef1d6eab674c212685d11e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    85bc6200793730c3c6ec4a68997a477f

    SHA1

    cfe3c8ff8428bf18ad97afbb01ef94e174891853

    SHA256

    d36de7ff8b902661a4b47d0f97a66de790785090fb61a61d753a49f514d9e976

    SHA512

    4c33beceb2aadb8f2971e5ed878f54973a2d095b366f45592ff964e0b5f3077b9907fa934eba33d24de7faef75f103518b18c264ccf02da8d02dad7c8630bf5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3969be8e830566e7dc89ea6ff4df6bb6

    SHA1

    f32fdff489250237e276e6580f234ee4696db2da

    SHA256

    eed5ff81d8a070fdbd99dd3bca3269b827af06fc660cae04616d1915f3496444

    SHA512

    acf07f60aaca1ab48a8cedd3707d5f9e7b7a1da85e08dd4f336382ff9f5b4ee5d39eacf604b85a9ef027a11acba00b0e77728017ed2801facfdb6c6d6573ff5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69d2df28e68571c781b9bef45746cfc4

    SHA1

    b89bf1916e6ee6910c7831361f3641ae7f60e546

    SHA256

    a39166fc4694863c2305f644392734201a7c142f2846d9e0da9a9e4086ba2faf

    SHA512

    266e785b82d0100d595459b46913415ea87f1ebdd34237a1756b12ee93b504f32a118e9625e21f3a8e0c1f205a86730c7d7c33d1455856b705e1a0f31a9642d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6517361cd4bf49745516991504511222

    SHA1

    ddeecf1d56df941264bbf2ddc3c03989aa19d1d8

    SHA256

    75b457c124845edec36c857afbb93c4043a0adde07cf84d01b4235c44b58154b

    SHA512

    a9f0eb95d383d741ec1ab9c5b3518318c6425cad81d160d7fc848aef16baef9cabb95ecc86fca864a3c15854d5104e9bb3e53166d9fb45e27b953ab6f2aa9e10

  • C:\Users\Admin\AppData\Local\Temp\Cab821C.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar835D.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a