Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17/04/2024, 05:35

General

  • Target

    f52525ee70850d2c7a3f70871270995c_JaffaCakes118.html

  • Size

    5KB

  • MD5

    f52525ee70850d2c7a3f70871270995c

  • SHA1

    38221d8b77c2c7d855463b0e8ea5101fa42e4274

  • SHA256

    8fd62833b847e86626bd467f263ca2984de24a10322ef5261411c7861921c964

  • SHA512

    4f6b5789ae124fcda19c7164f9d15cf7e58c140cfaca24288cc14e8d05e0a758acb475935e53011971874b118ec301b768283576119e97820be8bdfcbc760358

  • SSDEEP

    96:GM85ajrCv6x+zMgRlSpvKhZMJxdBNUHTiN684:Goj7UMgo+j

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f52525ee70850d2c7a3f70871270995c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3012
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3012 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2028

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7dbf07bd1b44394f5c06d77e6e0c411a

    SHA1

    6ac84dbffc2292ca8a9fca886868cd4bec68d9bf

    SHA256

    2442463c1125661f353cbd2a4b8c796bb69076f1f420f3cb008837d6642f10b5

    SHA512

    a6ce085338ed3c7e5f42900d38ce5b1fe41966244ca304edba0515bf6bf35aa8226637cb3fbac0430f31d3a1962a6e839ad7b5e29fae8f8eda0c90efaf1daa00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3bc638703d321b8f884c3cf0505e297

    SHA1

    bae4b9f74d3aba435b5ae1dac6221b7c29909745

    SHA256

    936a9eda0e8be2d4bd4b7c226aa494314aca0588f178b1ee929c62a3b03db515

    SHA512

    089c399fe40e55b9ffdba48534b499ddb8ea57c053be5bc975e9f25d2819fd4d9b4b390e13a58c04113e8a01c6b08f0f229d038c227a0a8823d762953e9c1931

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cdb91c0646b147006db75e96ba7cbe2a

    SHA1

    1fe388cd9cdd4d36bf7782282285f12882280404

    SHA256

    f8966f4e04ef631f6e54717fe003a07e5aab87a8f4428dbb02dd35780a31b673

    SHA512

    1f3aa8192a03b920cfcffe7d3f43b85e11d1b6b87db80430b9bc06576d8a4c4b723176f6b0f03cb99f108efd51ec633db5a06ed37bc9d81fe856df0149dbe9bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b6c9c2a4243cc9706331e75a20b557a

    SHA1

    d7beefe6da78ddc9a9c20b44f10e4308025d12df

    SHA256

    0be751355012eb92161cc03344e2f7f4033f9c1c767ecc505383247f52553555

    SHA512

    24c5aa62d850c32a97b438fe5289441b7daec5525a8d98d1b66671192f93de7c2dbcfd21dcb2254405193ca28afbf6d32dcc061dbf688a46071de07e74ae49d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de1cff8f7c0257d993a1bc72d875b66a

    SHA1

    c01182afe9409adb9a49b8b99cf9563c186266a2

    SHA256

    d357b843a6b0a3db64fc731d995c71bb87d5ed7d24272006db9b13208f333bc6

    SHA512

    d08304562ddea0d6aa6bda892cedc8ecbdbe560fe4dadb820e3baf2a2ee3185ea767700424bf8828be6e85a2468d6ce066dd51ee9d293ac0b19622574d66609a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2750c0d3339a6ddeb1fdda67211a3779

    SHA1

    352d08b56653ec9c585333f669edc1c237b1e6fb

    SHA256

    62dc8168495b446993c0953f1214e7559a31859d9eda0edb7b4cd637c6e43cba

    SHA512

    6849cd78f2c8eac58db3cc4b0ef86678f5326b30e6336252cd9f9e49b06f1405a5a2c23cbf2a3d85bf79e656455341c9ffc2fdb69c8d19b07ff4ff01ff67fe29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f474986424a3684e814fee9431f118f7

    SHA1

    7e7bf9739759267dc709a8efa1b83cfe43bfd570

    SHA256

    315dcc3e60020b75ae0b51bab2e104e5dcef1018e9207fc2fba50d0c2ed23ff8

    SHA512

    c9c4639faa3db366cf6b305aee8306807a2d97c75f8347ce0e7b75653588626d0fb64e713c3751ba2832ba6c849ccd6efed48efa73f9adc935eb3d3e713251ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3af537a0f7477803db73183ecbb43c48

    SHA1

    0f95e4c1f9235a22e17cd1cbf75e62e982584a6f

    SHA256

    3cc460e22c21ff07024aada1f318863b1d0f4a720b3c98c5b172803b25b49a84

    SHA512

    e46234736f9d1c28c11752fd7d9b1508b75034bc0e8126ad94007d3b73da5cbf182584467d129b716ce00b5de39f82bb11d1bc42f2bc184f6f3ccb58a98bf1a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0516318ddc84dc93adc1877d9add6155

    SHA1

    d851d4c0715eefa8e7c869672e831a71029f0509

    SHA256

    8f4e14dbdfffb516bafee1d500636c82a6b1ebf310f3a6f3deacc5b94638d8f5

    SHA512

    cced3ca3f5cfed2d454ab9f9b7817f9842eb87dfddc77b554ab8e04c00b2ae4072bbd1bd2953734670b388b290a21446f1d3f3b873b24836570d4bbd07703ac0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    714396e47312e9e50605f6b531b78d30

    SHA1

    20d4d23417b7ac9b2330d1ca62bc9a35a881a1ee

    SHA256

    67c94853d7f3c9be912849c5449c65fe11a5d8f00c1044652ed8db98d10c2e9c

    SHA512

    1f9fbc170a6abad036716a3b02489b5c305abd621dc0f912068eaf83aefc635f1f512a911676cb3d2a9c4960c9485e737a53f744da5477e35cfddb269af6933f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1eb88e826c3e68b40978d655799d109

    SHA1

    355c282f35b19f6121098cc58b9b8c8ee7356de4

    SHA256

    c83233b9196c621921510347cb5c01193f6f6977dec7f911167977710616053a

    SHA512

    9d04f447913bc8ac699a7bc6fdb8fa9f7437a05e9fdede03317d75dd7b89af2bfc2f83fbfd983f74cd595cd11f40bc0f2898b8ac0a216d4d7a19fa76d610522f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c62325b5c47177e9bf0c64f466e4bc81

    SHA1

    67b31a3ea75d45cbb59f0f923c769ade663e5059

    SHA256

    1a0cdbee0bc232a75e75fd4f4649a70dd98333755a91559b12a805a235c6e222

    SHA512

    fbeb4c6aa62f5000b90c6692b384c26cd5fa247cc3f16b400f4043e8a8e212267bee591b6f90eded0b6aad636bdfdbf7b8d2d5b3766f5b8537d0481f1f3a2ea5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55db8065908848d4a98b6e2069d5045d

    SHA1

    57459409028159fd3260d0dea3ca3db0b5da831d

    SHA256

    d749a9a65b9a23b64262096bbed71a2424630a2697fb8c2a9c0e5b317b9ad656

    SHA512

    e958288efbc3c9135cc72b9a8a66f27041517e939c77aba8c8992f57dc3c9b2ce1c2dc4f3f0d920a846101624de10e74ceb48440103405e58b360ae573e650c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad16140f49d7a8028e9f8b816934e76e

    SHA1

    1a6bea1f9c8f1e6fb070bd4ad3aff3f9852ccff3

    SHA256

    5b7f1bec79b4feb0e828089456f97a296976249f1af97637c7e3b3aaeda1491f

    SHA512

    2771fd0d4cef654c59d428d48de4e96c669b90bba489071df82318e69bea93397d305579850e1051d513e99d2df7e97cc2d32cd5e77f9cab7cf04bfd0e2bb4b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b5a39f3091426d56ccc8963c777638f

    SHA1

    a55b0e7fe8468da6914886ba9e5a4d1308e4ac54

    SHA256

    563d02330687389b17ccc0add7c3c8dd4432097527fe223c060ab82ffbf23fe7

    SHA512

    1e3f29b40b1a2b0a1e637604f22e5da7f727f89d53f2c491334d21219858c369457dc51e0fff9d5bb4030cce139bbb4682e07853eedd03960ce002a13a789539

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b7361b848420d84b15867220f7a5321b

    SHA1

    001497a0f687a751e13e79ffba460e80f76a7358

    SHA256

    fdf510b8b2ed176245ecd1b975063b84cb3703e77392c3e2f0c3a2a65849eee5

    SHA512

    60b936fe38ab010d01ddd55ae738c8e3ae3d29d58b5cd0f33517f5d1c608042a091a10aea7053586dfe4ef311e86d876ddd2d8ea5a0d2e2f5630965aee6a130b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\23EIUNT7\background[1].htm

    Filesize

    114B

    MD5

    e89f75f918dbdcee28604d4e09dd71d7

    SHA1

    f9d9055e9878723a12063b47d4a1a5f58c3eb1e9

    SHA256

    6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023

    SHA512

    8df0ab2e3679b64a6174deff4259ae5680f88e3ae307e0ea2dfff88ec4ba14f3477c9fe3a5aa5da3a8e857601170a5108ed75f6d6975958ac7a314e4a336aed0

  • C:\Users\Admin\AppData\Local\Temp\Cab61E1.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar62A4.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a