Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    16/04/2024, 03:00

General

  • Target

    f288c2596d392f8429de7bdb6a112121_JaffaCakes118.html

  • Size

    15KB

  • MD5

    f288c2596d392f8429de7bdb6a112121

  • SHA1

    4df5005e000d6b9f59270ab11b35b8d7d47accf3

  • SHA256

    6b024102a894d3659ddca5ce2eda5578c44692a569493a0828a21f115621a3ad

  • SHA512

    b6787d9dbecbc7d8a92884e40c288c4e959c005857cf2906bc73ff7f861a58483468c013f7edb6734ed195c8e9630096d788acb88a963f8d1624a0985019eacb

  • SSDEEP

    192:tLWIt/Pw9Vw4AngsutfylPXEqu1Tj/l/Kh4+3deeeIKzY/l/p:tLF5w9VsutfylP0qaTQeeeIh

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f288c2596d392f8429de7bdb6a112121_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1676
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1676 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3060

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    727c891cbc29d9ca15892a0013b741a0

    SHA1

    0bc55076e62bc774584dea39d52cac74637f8447

    SHA256

    1f8668e872663c0f378fe9cd23f2c651e06bd2020a963446ec21c97e624941fc

    SHA512

    1fd2bd04c4bdb7a674ebecc7204dda4c50549db115fa8a340f1c3006c0d9f64865afbcf732d3e339edf30133791076feb2d60e02183cc01a166401d00d6ebe44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c956990a3f22ec768c83ae1b81df7015

    SHA1

    db9212f15a3a7ba1b7043d2835de175909fb9f07

    SHA256

    fe618c8de35ee4a45d49b02595fc47a2efbf08ee40d1e452e090e294d2d4802c

    SHA512

    eda30bb3cfd7066b03fae08ae07a8baf62fe70bec2bb189066053483fff48cd5667ca796d3fa1e798cb30d76e3c97c20fd6665122f2e0013442e1948f1e5c029

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80ebc9d51406279b41f65732ec486de5

    SHA1

    237af8c4b4ac4d36bce74e096ba1e96a7865b742

    SHA256

    7e76f3ae93eedfafcd9ebb6d529f891c5b2934fcabf3127d9fcda95bdd48869a

    SHA512

    8b88ff6b7cacdf67b5d430a82932036f4a3edc5265dbc43519f14251feda0d12d1c215dd49f15e23a90ce07635b2c1dbddbffa613f64ebf6a4c16afb405f4545

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    640bfb93a20f4bb05c69620358d4b50f

    SHA1

    48471e9e85fe1752099fe376a7cc26ad1447a698

    SHA256

    5ee4ca44b867510f943db2c260cab136cf1bf2a81dd4f6148e6795ece07e7357

    SHA512

    758d8d1d2675b5e6473c4924e55e965b142130f467fbbc1647016dd5330422bf7aa0fe07b3dc3ff0fe910032837a24e26b5718c35699963dd4fac75e85bd8a2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93bda4e4ca3cc7c2f7774914d4f87bc3

    SHA1

    f1f5f1b37e7a5ba0238f3ce75dcfe495dc8ee1ab

    SHA256

    9a510308809b73ab446af57f6dd7360f8aea6209d9b6423810abf10c5b04f884

    SHA512

    1d99a2879c07392e84f1d8f227ac76b8f00a3588c5b4df5f244eef029c653c74596ce52476c822ac4172328020342ccf549a554ca17136f182300859d3d5f9c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    724ae21765722f4e552838c27baabd10

    SHA1

    879d132d3fbb3857ba531f3b80f16715fa8145e4

    SHA256

    64d44eaaff1eec2e95090bb02a5b0683344b63eb0a639f8c484065167df78d51

    SHA512

    79e2b23f0b90983db887a6147494491c0022bf6b9895717e036ce26a9f4c80e10d321a2ff5f1f460e8c434e9db7f29d449a212e3545f6185fb2802f590e25edd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e72982a4160fa58936f464b1107e1006

    SHA1

    291acdd5a269374bf3dffcaea54b0eddfabd3e31

    SHA256

    825b0e21d9bc2a1f1be30112cd7544901f66358ee9dfc9d2fbf91f39edb883d0

    SHA512

    5037d77f6eea87a60c7c77a540e1f41a66a907b114f940e39896154555ac8c5bc557c0261af52a29466472f79105386ed911488c06323e86debcf8a2b59e7cba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1282ff0870c87d706ac62ad3bc4e1033

    SHA1

    42d6b9dc57976111c2975ca44dc74a00b06b9137

    SHA256

    780c6252616f8b0d3cea979c718c384fa1a11db7afe4cfae802ed185f88df6ca

    SHA512

    219f969c9a2b8ac87b4f97777d89c2fb6c8bfebeaa7676a2a82b7daeb7660a5945e705c17e8f47b654e42df9eb2383d7a1a4b75f39cb0d4758d26eaf2001d3a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6db88264b5651618b4b49404aa68c627

    SHA1

    a5d8645ed7879f1f8febc06733ed454414a3d3e4

    SHA256

    1145f21ab1111d95edc7ce1391363996819d2f22969c0b06fdcf847d7efcb498

    SHA512

    010aa8cd80f6d6de9a83c0642a8da8b58bd082f49a3e6a8950c6c246b1ff3b7bc89b4a88d0f3cfbbbe8e03b07d4c2786a545ba614a37db2dade768a10c8f3657

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61c209b8d71e584b76117c6413c8b7d1

    SHA1

    543ce05aab7fab4acb4b30b0e320397badabd9a2

    SHA256

    72587b8e789ef57637400e2a14957d24a8f7b6f9091d1719cc7102bf77f97022

    SHA512

    a72a316d167782407e0078314e72df3e89fac35dbee90ed1e32f07d72f6c87ad0ea88cf55667bd29e303bf8b6ca4e4b83e8cab21488c59a1dc730a2f09a3e265

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e94bcef888c861ad4bd27d9365bfb5c7

    SHA1

    3ea13452c8eb18108c7778aa3af93382100ee635

    SHA256

    b46e98486a26aa71f20e65b33dc8489ebad43122b8bd5794f84b9da48acfe5df

    SHA512

    fdd81a9850bf429ed397ffa0bc434f8a654682917280c394a8edf70797683e291e98e93d317c71b1db00262f24995c66ce2fd3ef0c3cb0995ab45bf5cbf3328a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8934572cacf790de15584b62acc18d1

    SHA1

    ea9b9f781c7eba512bf6227bc91770773ea07973

    SHA256

    891fb0397edf9e5eb6b2ba371943c72f6cea9420a0d6ffd149eda5d2301c0a1c

    SHA512

    b06436c7260072737b96744f44b16a93f0a87d42cc38afbef669f614c2f7fa0716103d5b059dbadcdd85baee14646751df4b896bca626294d26724698df3157b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b6845682579c650da8c7faa717201934

    SHA1

    8c6f9d3beb14da730c3cb3c6ee0da7985bc8b36a

    SHA256

    8f7a4907be4aac557c7027abd599b668f87c9e34033cc40ca3fa65c4aba808ff

    SHA512

    dc17072aec2ca6e98a5009ebedcc338c4190610b13ea8267669dbd35aa7e46e5d1ddb2c95834cebefa577d2eb4169822fbe7cdd2775a6ec3b23b335aec3b6dc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3bf01df336be097c065cad8efa4a9242

    SHA1

    a2e79e905da21807782a11918721fa4ee65e0a47

    SHA256

    af2f998a1a39c08923e8a97e756aba1b70a6e914a667c22896821c813883f185

    SHA512

    eb32e4141e940a1eac5c9691dd40518286f8b82b0077ceda1e260a061bf9082c22f47093e912864014f6b53f7fbab54213784a79f21064226a47830dc87c40a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e4019c0a05bb37b23026207430f402d

    SHA1

    80d9cf2dd6d1d90e35d020689715190bfdbf9b62

    SHA256

    5fbd3c9e2f98b4b3006dfc41e377803816c10e243bc70dfa35cbdd16126faaaa

    SHA512

    3c1e33f5b79d4522552c26e9a39b527f6da5e047f64b039ad4d8246a1bc1313b34d2a6925a7f7c72350d036e3f6ddb4af33a40f8e046d9d044fa586c53d876a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb70aa704bbb2bad857ea5cdbb7c992e

    SHA1

    9a7e633dd945da1e1deff0492dccee0795ecf0b0

    SHA256

    ea937919da5dd09d3ba9b58fef5cbfa83559cf9ed43c3c7e5ece94a25f80c8c4

    SHA512

    dcb932e821f606a5e1aabc702d37ad9b92eba36dedeee650cb50033b4626f3122d29a3255ac0f1d26ebca43f69fd9d7b20900c8204f8f5d08eb21f5abcd0b5d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7cc981ab0f4a7e6d356b060b49ddc275

    SHA1

    8f6ce71217f8271b33815dfb731816a44720e383

    SHA256

    081f51880e7069b0a66325ae6ede38ece015905d647582145e2dce063fcb6300

    SHA512

    601004830f8def02b212dc548e67c8215d414155007e2f1054ad3facf4c805a0d1589052cbb6b9532f32b22299ac7655daa34b7af2d14b17035eb45c68cfa952

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ca95e9c9e9b74cac9584040aad60822

    SHA1

    bea6b179567e7df8a461ca49b8b6c50acfa7f457

    SHA256

    94afa40b9906b5984ca727dcab97c3e347473b9fc43fafbaa2b3dce9f2479edb

    SHA512

    af38d73b6143b37f9411d695728284a2e417f06e3bdad59742f48ffcb5c020727c645540b5bcbdd242a789f510b0d221c6355aa46bc324e2a2d0e85943669fd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e4613436bb1590dfa1a1b6e5b3e5821

    SHA1

    269dd733f0405c275b754f4813ab802dee1bb212

    SHA256

    f7edca4e1bc79fa89ae8813af9db9ff04a918a4ffba7bb7eb7b05d18445362b0

    SHA512

    a92411d9f3501a897ec645d5a7dfc249e3adb233df25971c065105ebc71745908a5e1e0fe18fa852e72e59041bd91a5a36760d09dfe91afe8ea3d2a86c494125

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c8b7ae71fc8c6a89057c7687b49968c

    SHA1

    2c4968005f89d697652bf4c22cfc0e259c1cff6e

    SHA256

    79dc04c8209551a4f4d4ae0c2069304ac8329c65c13f4fc2cf68ee1f2e028739

    SHA512

    a4820b542c287c8a527a2151cdb983c91c215cb5ba02a2de941973a1c9492a20d11a13970e768b12ad9b1f74432d2a3b134ee29a1a0c1078b6c604a63e5cc550

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fcbee18a79114902baf95ecdf3dc4d3

    SHA1

    5a6dc3933784e01a380bbb3adb89660c09748a26

    SHA256

    2ecd3953e5c798e38a117cc57365661022b9e78dcabcc631a5374ba83f1d3ca2

    SHA512

    104ff41995397bfb3dc014780838ad745bc7ff7da9585a7d63507d28aaadf1838c7fd85c9b8a22a447577551a5fcd20cd79a7ca988bd1c98c22415e17e04f176

  • C:\Users\Admin\AppData\Local\Temp\Cab452E.tmp

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\Local\Temp\Tar467C.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a