Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/04/2024, 20:59 UTC

General

  • Target

    f451064f618ef3766d97e84b54faab80_JaffaCakes118.html

  • Size

    25KB

  • MD5

    f451064f618ef3766d97e84b54faab80

  • SHA1

    8402677e847b64644ae50851e030a7244d766a5c

  • SHA256

    3836df83be54eeed683cd8968bccadc57c38fa445de8690f94e1083d4054f93d

  • SHA512

    9b6eb7caebeb93c209ae8d6d8493fccd4c730654fc9a48a654fe61e82ed9661fad338f8c3263284196de7c86b8bb0c39e388bb74889c04caa8814f79177026c3

  • SSDEEP

    384:anA4ywBpp42dBztvukeKXXTu9wK6boAOirLIWQQ/U4cR1LeeIYECdG55LkuxOk7X:y13RtWkek+ZDq1k90t

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f451064f618ef3766d97e84b54faab80_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2196
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2196 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1884

Network

    No results found
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    753 B
    7.8kB
    9
    13
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    753 B
    7.8kB
    9
    13
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    785 B
    7.8kB
    9
    13
No results found

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd65b16c5050893b9b62d36767920947

    SHA1

    80ba801faac74786dc16598ddb94ba874a1e76da

    SHA256

    94e7601d0a5f543b633d23907a1a9b875fbc5aff107f389f8d1edcf3dfc62ad5

    SHA512

    5fc33cf89ecd9333089fb6960e3c0580f48d8a5e84eb00679510c8253f4f09d8dd539d45f157bff5adf6975c3a49516d3400091adcb29d43aed562a126960ad9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1bdc374321ba9f56909b4b8168ae749

    SHA1

    047f1bec2e56456a0f6609812ae110a12b4bda08

    SHA256

    30d37173bfc604b5cb52fd02ad18fd92cc7b7c64e9d079a6c9bf5d56c3a4eab1

    SHA512

    f9b418654ecffcdc74629d3b955b814c86b008ef78b612cf39148d2be2cfc92a13275ca30f24240d1b0981653741b583cc9fa5e662afa248e92ea57e0d793db0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f2f71d95a1f1f872947ec871dd6e756

    SHA1

    eb5e1fe21c40048647b518eb7b4d5a99fe72a2d8

    SHA256

    a116c8de39e04bb1b2b34a8adf68437382c084aa841206553ad98ab57a4216aa

    SHA512

    877e6e931a829a1223e9095bc59cdea26173404bc6d6163f505fd27341867062be52d2cfd19d3eb622427223a86fceca4c6c4b0d7e499d8dbc10797514874ddd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    892df15735f11047cc22bc8e24abca22

    SHA1

    b4849fc03cfd5d75721384add344dbb4ada01c51

    SHA256

    14eadd6883e50ede4fbf7dd950ac5eed3b4f6013480cd6cb963e561829d85801

    SHA512

    ab0dcb80379d379ab1dcc6547d22f7cbec4ecaa5ff83773b8812844b9f77e15659459a1c193f7e3392492ca03e3b38cc5bd9d2e4d51465188c30c530dbdc0482

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96cc090b62d880964186c55d847609f1

    SHA1

    1884682827e4dde66b2bd61e62d2f8387fe070dd

    SHA256

    24464131033cc768e36a4fef19675408cf3b87700d94d6da6632d28f3c2a7c72

    SHA512

    a211e1719daa58c6da6fd5fdcdcb059c650215857c595ae7f8da91171df755512958ffe3c30064c356a80e727f455c5cf052e6850426b8dbfb8e96cf2cf29482

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    befdc89808796c9cb012b0e6b00ee1e3

    SHA1

    166784cbeb0da5833f497ccc3af2f9ab7a6352ba

    SHA256

    70630266eb2820faa19f353b8f1def1cca16f70a6d4bdd4841623d3eaca34263

    SHA512

    5a56ef9a4b6fdb41751bd666a23085c74b60ee452bb95c0c94fae5a950fc477444b16a6d31c2c48a8f68a4ea5ce25180ab3a94d273bd2079d5f892c355d78bd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fbb4f645851beb414ade98df61bfa2e1

    SHA1

    23022fd7fa954589672bedcd534eebd0b06d8aa7

    SHA256

    6b871db42e1a16dfb6f1067947134cd269a3997fc84f1bff1895d8e28959d6f4

    SHA512

    0a304d5094698c77522dfc243760ee6a53a4b385d653b75632bdb34a34a299ff0802d763f6cff2b66e681ccaee72acfc03ee4f12325e61e1b5225c810b7bb97e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5e8de6b34336c79920a07ff4f8b5f94

    SHA1

    accfbf5c05a52df4a4ae8f9ca3bbcacb82e2e8fa

    SHA256

    495f4781e705174cfadb3b49edb021d0d7ff1fb452cf5acb4c6bc099fcddef16

    SHA512

    e891b575d1b5fc293881968b1407f4a955d5391e1eaf571e7b3062fca22d8cfc0185805163204cd55928c7bc0a50a718654a0b4669f7a99cc0c08d1d172f3579

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e70f11f31ea1a29d048687c8fee28c7

    SHA1

    1acf4f944ffac1cbca2a0719a6b48381d62ab1a4

    SHA256

    f84a3ab8a61e0893670d157bd9d1357c43066293ce338991ef1f38b5b184f66f

    SHA512

    e86e397695c9fd35b147fe3e2a7b696c0280959c9bf55dd59fec0a24ec3da657ef4c21e9878045729545eca887ad441f8c33bb6fcad840f2514c3f61a617b830

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb9a5f1b030a3e2c91e6dd4305a1931a

    SHA1

    266420720fc37ac2c4f627b91b219aed0df870b4

    SHA256

    ce0aa6bd926c7fc271b892b7d326c62acc7e782811a3771b3489f1ff89935891

    SHA512

    34079666c52b467806de7ae3dcc286a707e9214bf1eb992e39ebc0ee0f8a942a00e19ba46100895212b6bf2bd54b39c693df11fdf61fc30987327c2b9f22d920

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50bffcecbe8964229fb4df07a7292224

    SHA1

    5fbd17137eee04109c0dc3f4c7a2ad1325262b81

    SHA256

    bdb5c0efb3b9f3a4cdfe38f61eff30a97960c26bec7df71dad3af52213406f7b

    SHA512

    ed716f240784e2105f786fc86fc9a16d7d77c9d739d29c532e7f6278e02b9df3021eb011b550518111b1d847fe41efe6c6e98495d9abfde8c4969012a6e7aa9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e59d6588fc730a55bf089664f275eca

    SHA1

    3fea2d626dda1054e8bd45a3e451fd9ae2744864

    SHA256

    39c88b7084f6bc85fd1d7b008fd014416183f6e9c8fbdaf2a3c764f05c6336f3

    SHA512

    63e942aeda68349ef9f92e2047d036aa086be6974dbb2f1de1b6180debfde6873ca0bdd11603b64ab5b8a860be37d16a9c1a16d74091afe5f59e83fdc600175f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e63786bf2f94b215ca678e2f06c84d78

    SHA1

    dcf79a18a0e7539c93ede3c3ee0552489c349919

    SHA256

    c4a17a7300514c5f657764de45d4fd6902bcade8c09135a4080837e6b8ca9324

    SHA512

    1134ac0c66087e48d9fef5c06db80a618cfef59a2852f4be9748acf06d2f1f50b8ee5fd155aad526f705b08c59dd580780da11dfa0d53d2aa24ced925a80b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1df58542292e5f838e551f287a807ca

    SHA1

    5844c71f3d038f7c6048ebaeee9156abc55e8d57

    SHA256

    31ff543698db874ed9db940efe261f14de13c24f2e4274131642ece19a907d3f

    SHA512

    6f9025c8e4961d494dab8e5406302804fe4c2a2c992500e0a338d966463a5391f87cce13b2c4771f7099e4a5774e943a288f0630883544b77bca09101bed9bef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e676fe6f22caf54194d59c4b8f826e1

    SHA1

    6d95f6451721f0deb12b20eac1ffbedf851f3c0d

    SHA256

    8fb5218cb0a8f7e24cc8861b57987295b1176012344ac2b0e00cd7d1edc98e2c

    SHA512

    b3cf8cc5bdc8cf139e79b6bdb391a9748e1b667f2ad907661d7a1054d51439ad1cefcbda4c0e4bdce257b9c5f482920dcb7eab4a0d2b030c9a56fde5963d25f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93b97dbf7c7df24b42309632f664ce7e

    SHA1

    9031ad164e52a6857c531cb04a69189a2233fd86

    SHA256

    110c665b0c76b71a6466dfcba51583d35f313f3fa5821f4c46d08cd023603058

    SHA512

    bb265bd9a88dae4fd6653f367691f27885485aacacb764f15b951c4fdecc6c1a7b6eb57202c64a886b320f1b3fbe889d01ed43cfc3ce13fa126ba8d9220ca649

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be21bbe8b835c9ce62c59e1a9414fa50

    SHA1

    81c0f35fdcfe485dd1a5a51b2fe3753e5beda7df

    SHA256

    bf0d3cfe8a0c6a66fbeb226850be3b677d8fb7dbce0eed2ad25aa4567e8138cd

    SHA512

    d4a95edd86a5f15268f065c42deaea00021c5e08c660a9100f309b2a4157fe7c34f41282581af312acffe8b3ba22ed34f344b71b4d0e6cfd402e4ac448978a23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6db4ab93565cee9653cce0ef6a84a14f

    SHA1

    14ab2fa281b2d685cd89710b7230094e7625f08f

    SHA256

    aa411f80eb207f179ea0037585b2a5f103fb5e2c924ddcdb03cbc5ba2e49436c

    SHA512

    b319cd1c2e4768af52e27c33f312db8f48321f6e125cd694b0fbc7f0ec133b35ed61485da2bd3ea15d70c96f141fad419c1d4d113e76c5c31991ed2976cef8cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c9fbd368ac508238b4b0ff10baaa242

    SHA1

    6fa99bc8a21f8a632c471596e6b017991ff90aa7

    SHA256

    37139acfdb4703d2fbac47e78e265b1ce35daa8e547def87dec30b927a33a351

    SHA512

    d83d168fd6d775166118a0cd2621cc831251afa461c3ee03b6ffad7fed0191ab7957bf807d7d8abcb3fcb7584c5d667cc41b256d65c6814b84ec5e44450b8db1

  • C:\Users\Admin\AppData\Local\Temp\Cab5811.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar5903.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.