Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/04/2024, 09:47

General

  • Target

    ff00cd2a6c959b970ac32688113bb9ee_JaffaCakes118.html

  • Size

    2KB

  • MD5

    ff00cd2a6c959b970ac32688113bb9ee

  • SHA1

    5d4293d92560637f4cfa9fdf944e98d617a2303a

  • SHA256

    735cca1370d49ad9b8295b7181aa815e716642eb90fba0f25a189faa3b32935f

  • SHA512

    a6c74847c36c5f1720659f7c018ec24361e3ac77efb0169c98bac132f816ea6b7cecd47c38a41bb9de375a63927de31ef84fd462e34364f74ba019b655dc845a

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ff00cd2a6c959b970ac32688113bb9ee_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2020
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2020 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1384

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d88b91d7f80c2449b70569a0edfc53f9

    SHA1

    16b066ac39c0e48192b2da916c60cd268d994f9a

    SHA256

    e8961aaf266c0f3619c0b481793fbcfa035cae076fa83421697efb7d37675b84

    SHA512

    f2a6cbb04dd1a1b10325f0974ed0c570a25164b55fbf5f7fc85097ff0b01c7f4bb6f9494833a50c94a642f82380be598be45476f2441ef1c29ba1fe67a67309a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e63f0f9d44cf1a7900174a27e8872d1

    SHA1

    ff90474580d5c2a651849c8a051eb7c385aeb8e3

    SHA256

    51729e0ccc0969a81008c38e4ebc64b20be5327b3149d9d18610956af515b95d

    SHA512

    caa5d4a4eedcb5a36b0505e1a4c56342995a2934897bee9991040a8eec1dec5b50bef9afbe90d61c88fc20d6b81abca7448db3f1348c1da410ab1653693a0640

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff8d5faa654fb7ab8806e60bdc79d9c4

    SHA1

    cc82b3a51da6cf6b7b7fc4ef347f7d3d2ae0ea32

    SHA256

    56ef3c3446006fc25d5ee78f5d64fb17c0d684765357bdeb8aa253e84a9b6b02

    SHA512

    f52e7564f2f9c9fef6b937a354dc3083b44266c889cb03fbdc750dee807e55e406b63d32c4a67435f9bc5a8f1fa8660e379fe91c4f6be24c3821d83b627c166a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb3fda2d15c2cadd2b9eefd26a67892d

    SHA1

    055e955719de4b788745818ffac0c73945077f3b

    SHA256

    8d4e3df4068843a41e33d1ca3ca291b1ee5a1af8e8abb5ca5bb2cc58739c3c64

    SHA512

    6ccc5448a9c5d7f6b0684c821e5886fb44f306f9af0923b6e8d6a44c21f5ef7973762027bcc4e77e6753a1c0126b8adb4f1c7d7ae2860a7c351ebc599757b782

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d12d00beea578f32152abc1098c2903

    SHA1

    b6a66275c1d1b71080aa39735042a7d26cc1a7e2

    SHA256

    14ab77e07186a23f3b248aff75b8d436967e4430ee8114dd273489b79d77cf19

    SHA512

    d846758c1e4ee78c97508db2918aaf5b2ed9824f7d2cc61d4a3498c43c314acdc013c552bdc73c61b5e0d7d68f4b2a5cd41c1e8db300cf1a67c0f16bee5dc642

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5640b666267b463489bc3753d0729d62

    SHA1

    d4a38757deda87e64e41381b29b46e575cc8ffce

    SHA256

    ed11876d5a6b58204d004dc284f561dfa3fccc2694cadcc545a42c15487b92e6

    SHA512

    00c3b9bb0024d854517ac2a4eccc078fc0707b624f1a74c942c99d90b56cc22f84e2027a136cac2bfab939da6c7e9ca62e1c83fd6aa097fc24c04271c49a024a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9cb63a3cc0d1855b5a7388d0c92841b1

    SHA1

    c312e1c9503730c885b9f25e181850fd5bdfaf1e

    SHA256

    11d6393ec99f7e5f6ab588216da54847c6c9021f29c045aac78c72e06bc70ecb

    SHA512

    958b07a0a72d05b352ba529a6c48942fae362198dabd880478757d2c910436af7d9ecad2b7464e4187749a2c1298045f2716c7bb3a9e93d14bf5aa71b4dd247f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b40bfb4d8c66dc4951941ae44a8c41c3

    SHA1

    6c6d5329a13459982fef76cabfab68a1e1cfee5b

    SHA256

    6a9c04cc03021001433cc8d38514930583f51b8012ec7ab5ff8806cc8dd4b9c3

    SHA512

    3323b162025ab02a9b26af2783c1e4c6c7dc37e6273231a0ebd07cdec6503ac95260d1ea6861473e80dd7ee1d97134236df6f6b19afaaa6c83c40909feb0eff3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a68f244a92b2e32ad337e7d6cecf5772

    SHA1

    139193087ac265438e65bf9160e3a2111a06ba00

    SHA256

    de4360313696589ae0fe936cb59dc4d491296be44b3fb629581933fe9953b5e9

    SHA512

    b2af8f40f6d5eb156ae03e2d9c34abd8dea57ff01db5461ea4f2ffb265a8cf9b30eaf09bd56815d9a342b1cc99217b7de2521d2260d58226f8ba473c5a39cd59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fca06bf1b03bf68f450eb974f116b3b8

    SHA1

    a0f41f67ca49cf3f2c2216b577981a8a9fe29849

    SHA256

    43ada275f207c5cc01363fcbf515674f894f94bf4ccb9424bb2130b19fdaf12c

    SHA512

    ba3ea6d133336b656cf8a33560b1cef9dc2b5abc8d6bd304f8056cb0626315551f49959b59e1fcb75c362d9a5e8b2137a425fb962d6fd00aa87ca984778e9d64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4585806cadbbeb7ec71b4606a62ff45c

    SHA1

    9809fa71c7cf9dbd36fc51ce5d8ac1916a15bdbf

    SHA256

    a1354e2c9ef954ca8fb813827845393d3959db998d58bd3affda572d963dcdde

    SHA512

    5395e51f03b27736f1f6a0808d3529009d44b1cd89a4f17686d2c9a3e8f68402424bcce562f6c9c43c8e8339083832b4ad7f7b646ca15a84fded0636540047e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    301bef7b07237e4e5806015045757153

    SHA1

    a7a71871994d580f0910435b037260ca06260140

    SHA256

    52100521df1e40dc8476ad3f1f503f08ad4b36273d0ac5a461bdd790095e6d41

    SHA512

    35460e52be880f02f5a7edb6c03a44d1e69b194a8d5a461573cd004ca563ff3d94d70abe62e88bd1f733c2335aa7e94fb634727eebd94169cac3432d1376e332

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f7a630987b861af4e9378ff0b567c5c

    SHA1

    de8ccafbd98d51afe3b31be151bca849dbf50536

    SHA256

    caf3304ff161c375d8dedfecb2bd5ff845cf52899908d1c9a62b8f07fa0003bd

    SHA512

    eccc6b09e5725231fed6eb2705362aa84eaddf93589a6d8825efa6b59cfdf5fe95428e7ddccc992aef9673fdbd1ab5d401af7d6ce4f48b910645ae73f88c7a3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    badda9f5a6b48f264659f11338945e63

    SHA1

    99b79236d184ad945362505895758a2fd810f0eb

    SHA256

    addaf9b95e5ed3bbc6412d5b89e7b3440ca651aec3a40a4d67c93b3c89764b3e

    SHA512

    6b36400121cf260705b646609d3a2fa14414df63a91e31394b44e20de70a5d3b2d6297bb89146dd044214f0c2bef75d20ea556503bdacc75a2402e405baceaaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ef189a09bc3df617f6159afe0bffd45

    SHA1

    6538f6ab32b85704399001606603bb29841b529b

    SHA256

    cf4d74ce8983c63250e251a39a7585b705fc8bd20549e915ee715ab3638776ec

    SHA512

    c1bb6c546d0601bf330ef8977ad28b074c1cada8c226ac2e37d2bf3e10aa93747167e110e1b8717b7fda74743bad2a84f49fdcab87ba8abb531f7f1f36bc8021

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24b2196b92904ad97f78d385b21d4a78

    SHA1

    69ecf2ef4ce23427902f70f497b0f8a9afc794dd

    SHA256

    0905f1750dec1e9708c44d56f6a2640981f82b6b2dbbe659cff4942209471f0f

    SHA512

    f6940d39ed3a81e9e1742b6eb4d4bd5ea898469f9c16e84130f0158b5c6d0087b96d79e235ba859fb0b048e6873bc69b4ee195c888c51db8ce37260ac01acf1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab06f141c6078f458ad8561e3273feac

    SHA1

    ce41f84b689c8333b282beb0a0e288fe51272dd2

    SHA256

    e9dda4f9427d64e3069ff057d3be942fde5793e4172c8604008b985409ecb578

    SHA512

    8fe368c8fbc4a421276c879e57ce1c00abd4d0307e635da61b77ccee27e8053830cbb4ea1b8416ec9953f9a8a66be65d04881e0f74d39185019994763f87ce2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c57b1eb7a06b62744b846932ab760e9d

    SHA1

    b80623cd881fd441cb3add5c2611eec64ed2e475

    SHA256

    4cb396127a0d4a619af7274a7f1624b7e0ec6a3e925d61119da8ef389f7f81f9

    SHA512

    6257539af1241792d94370fc83feb2ba3c9e8e3b0a6c52de3678b8fe27dce83fe964d4e8b953c2aa959697ca5baa38efe8c489846f1a04aee1499cb97c8e91c9

  • C:\Users\Admin\AppData\Local\Temp\CabA5D3.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarA7FD.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a