Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    146s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/04/2024, 22:12

General

  • Target

    01c7fc1e4980ca504b0f4c645f9b42c2_JaffaCakes118.html

  • Size

    9KB

  • MD5

    01c7fc1e4980ca504b0f4c645f9b42c2

  • SHA1

    f6055b5a714c511295ded9fbce50217a94127b18

  • SHA256

    6b7cebe60e497c631f43ac4270fc56e0d33a8faf00c121815e812b369ea5b27e

  • SHA512

    d284485c3292f2e360ac938ebbbdd31d04e2563c38c906d991d4546a8549d43852060d524c54f8610e8f8bf70972b8ed017fc3666623cbd1a7b3c2a291f66d29

  • SSDEEP

    192:SQKudPnsZGX5gSZY5Z0YBs092rsI24FB0SM67UWNZgHZvt2zKFztWz6zfzjFhBBo:SqFYBCg+uFrY

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\01c7fc1e4980ca504b0f4c645f9b42c2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2008
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2008 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2236

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63fbb3d03f4226203707c099c92f94d6

    SHA1

    1d71180ce2287063bd5c9e78d7ad58ff0ab4f228

    SHA256

    49cd4c1a5b68b4d60877c7af79eadc22174031e3f47da22458fc95e8d564dbb5

    SHA512

    e159d3fc6b443d94ee278999cb2de3f583aec1d4fee6d944ccfb8aaee1b36936e2f19fb03c72488d87f7c35f41822c213c763cfcc62618216f43be8f0b3143fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd93b0628df2d8fdcf365c339eb856c9

    SHA1

    a23319fb1e8c007011c558c7d6a1ddb94e5f9eea

    SHA256

    a36f152bf4c9be99e43f6d4f31ba8d6c122bb050c66e5f5c5e2268089af1494b

    SHA512

    dcce559e35cda63b70d0852a09f0c92b3bd5741e4836bd8f0fa8c683611b19416594e26025870fecd30a32905abfcf8ae0dca45d77340064e9671b4535093e84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca92a1e9fbdca93a042b9b3ca1330549

    SHA1

    8372888c29c24bbe108a8eaca8c62e8237f0b0ae

    SHA256

    5ed37352ff2524a028a2b3384342c151ce5c955dc4ddbae81640f48f2409184a

    SHA512

    2828bb957a5f6d0a1028a8f7d35295bbfa953fe1c93ccf87403d073b99b744ef91c8b36af4b273fd8ee1bd0ebe9bc97d80a094b5ba5502d5ef055b8a5885452d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9cd760dcf17f6c65598306eee8433be1

    SHA1

    5c4ca7916fddf9bc45ae9a924654582bd1dfc6db

    SHA256

    00675c93d108916a03e285b99dad4ace390a35451da61991be5639c4512932b5

    SHA512

    4a3ea977d0663076b7df20ab7909d95b3dab9052aee3d61338eab01409c1e17cd2d77f82dd0b503dff97e1d7567dac35975a9d14e0865a412a016ed9c49e0995

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ba5e1708ce3b1562710c321b276ed20

    SHA1

    d5477b3cea804f0eadf3644f46c037c5ec6a5571

    SHA256

    c03ace273ce61365ae5939198474155934eb518436e70f0f077c306aa68adc61

    SHA512

    1ff768d4c11a224b60cceefb7e0fe6e04273447ac6c3a4de4ad3a9bdb3df9f4aec8796c0326423047e8f6f149fa35c34ba9ed3026174139c8d2e1c68e7674c7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59ce69e3aeecc4b45adab5c4cfca0c0d

    SHA1

    4763ead5329bea861490f30c88aed4163059511b

    SHA256

    4aeb30c135b16d3a1f64ee88e1af8a310c73ec2d4a22d3a31501062acb71548b

    SHA512

    a9a503ae42a7564869dd4a9ac32f5223e8f2aeb579551d7b7c949770faabe9214e65910481185f6b7ff8865a3e0e77e311bf03d4afc2f4dd26240f5a43068bb3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e0e8d1216467cc4a110f5b98e35445d

    SHA1

    6e39cf8ba94106a64f4e15d9939a73225f2c911e

    SHA256

    016b14bd747ff7721b0b3e26c25d9699e2d7d1b937609cc904907012f82423da

    SHA512

    4b472c47293532ef1a3fa4f38c22be1c4654b99fb747c6febfddb6b47a64543b9d2eef3487227b38b64ec9ffbf52709c1dcb666e6d5c05bcd4ba4075d175c1f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3bf61ffd95f651566c55b2bd3f025444

    SHA1

    109d4f87b75a195aa44ecb65eac8f30ab06d3d49

    SHA256

    5f6fd83ecba8ec5df3dd79b393066a240abb71673440ed58005e458f2c4c7cfa

    SHA512

    23543d17e4721171aec4f309a18090a93458713b44ed1729c50ed598c26f400474449b73cfa360e8df88b3c1131685d2ca9ce0289d1e8a42f23713cb905c1f5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    729de0fa17077eb5da1056f061289076

    SHA1

    7208a151f0621bfb1d40da97bd502189bdbe2c47

    SHA256

    a3c15798a94c97c987713fd9810948c339d338d2d85200e693c86435c5eb1f03

    SHA512

    a75688e8fee41648dbe86096885d0f5e827cf7b72949ccd3b107704e27193d347f90d20e50eb2b9f011907d9b0158032ed6b63f9a2228625a334e886e090e9e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e609dcc3b536012dd8cd7bec27cb419

    SHA1

    e8f75e5cacfd03927d00b8766ddd92156cbe84bb

    SHA256

    da5588978114dc26b0e92a082a9a73505f56b5f6860a11e0836a8d0f38b79f3e

    SHA512

    4ef0d6861308100eb3c14cc40aadff688c96054d6a11502e6c631737480a128fd1bfc7ba8ad5f4d8e87e5947ae8490728777cbcf5759e708f4166f1fe1201d04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b1ee2f11b7ab0234b9f5b0d6944f32b2

    SHA1

    51dc690d3986989194796b9b6f82a659cb425611

    SHA256

    d21c46309f787aedcf870e0533c71ac84f395cca6f5f950368fcc197465c8959

    SHA512

    f9bb06aff65092bade63d1504d282b7ef97bec35f13d58e7e953a541dfd64b2de856ec4a2b73fe59ba8827339cd2cec9fe956c6468eccf1fc8abeb88bcf575df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ddaf1a5b4f5687f57d7727b2578fb679

    SHA1

    63dd818ae883d229fe6e6ef883ba71f93e5b9372

    SHA256

    ab4b822d6b87244d53601539115e4bbcb3e615dbb4f916f338f0f88166eb9b9c

    SHA512

    eaf13e4d5b5a13b642d2ca1f7fdf1b406dcbafe075bf00a6432f9601a19cba5b8e42e71e6e6b6cb4e3c1e4c4a3aa4a41669d64e888fbafd755234627bd9e7b9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb240ea9a825519a5a41b02a16a7fa04

    SHA1

    5ac767182861a88f4cdec6403857d1c9a180e464

    SHA256

    895e26e5511e4e67c616fe918dc862388da11f598ebb4e0984424520474287d9

    SHA512

    ee7120d95502bb7048c63c7998ed30730d737fa78c5857a2f97c261d327cd474055efad179bf05ecf6a31e51a30d8b8fa87568d13a1e33a4b6cd130bc76e1509

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f43fd76e876684ddd0b752772346fd03

    SHA1

    3d682e73cc61e3e1ad2e146d2bf442d5a62cc27c

    SHA256

    4caa9927d4f88b53df972379c47137fb44aec6ab1476d8a4b29f6070f81dced3

    SHA512

    98a468013ade335686710f4ee674c16be88edb37c82ef5205664349068ae7e7c6f8af2fd0e45bea197b481061e65959d83ca9dc295ed01e4e69176131fa29af1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f0ed605af96259d1678d80e00b9e7b4

    SHA1

    730ab27454010f5a6395912209f80d5e3ed459fd

    SHA256

    5cdf7d8daacb68427e4fc6f7901925da43117b57ea82d43c234f363b290f3d86

    SHA512

    aa4cf03298ae55d074fd8d0afd4e41a1146d94777cd8b738f902384269976875320ebb578f5479cce9a943b91a0de25a4f36af46ec5fbcc9cbb586c200cbe94c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c606cf076dd3af857772d4782b0b96c8

    SHA1

    e7bede7e0067d1c9348b1bb1185aae9e13cdb37d

    SHA256

    ebaea6a5a39efd879e34b9ac391430bf8c92aa52f74e3324d040068e3345d8d0

    SHA512

    085e8ba42bfeeb774c2f0c4e3225653278e6bdd87fd2b1a902808d017fddca5d989253e72a7b42bc14bb063cadf4eb61038d1e21c6b9d1145962b606f8d91d90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3417e41e3b31cbd6224b5cb670ec1c9b

    SHA1

    e3525b84711c90d715b7eb257901ec0858967f44

    SHA256

    fc16e0132cd11b10d2c821765e3de7ee1415f47cade8bde291371e71d544ff16

    SHA512

    6b3bf889bc24308891c48b6efa56c988161a766cd5cfa6880e6d9f08c1897794e250b3a4015ebc57a0de440b5b4b6ee4cae8620b748163d44cbae249a04c6fb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    601b93b0c57d4c6917325ef70ac873ab

    SHA1

    6d6f8aa7d61ee8b26a955c30dff36a041494dabc

    SHA256

    b1dea5886a5c567062d197a97c3e78f11ef894a0869823d223ebbb7a985cd873

    SHA512

    06827482bae6a77b568725686632b6e5c6db5e2901afaac9d57a35c237da6b271354232d5d8916c92f5eaf55416ddf94d285a9f5881da872396a65d1d39da59a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72e0a5f5d10c3b1da8fde52a1f388e17

    SHA1

    b20e843465b7eee744cdcae2d0dfc393b637b91b

    SHA256

    2114a5315120da3e44b80f2a2fc1f1b44391dd7e3ca6589b648345869f050f41

    SHA512

    49c45951450aeed6a2e98dc4a7818804cf6b3e7d4a5ae5b830776f6c6be49607918c85b831e5e96a95d1a439f8b327a3e9e6ee4e7b0722e03272d9bfcb12af73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dfc946684d73bf255d8583ad77d55787

    SHA1

    4c245679c067a0204815e22ca20ef54bb9e61339

    SHA256

    51890da5e8efdcb28122a2014dcc4044428a98ffae7c9188b7238f7a838a5600

    SHA512

    27f52c415804581544e9d4919ed86425dd24cd771ab2e99c285ce43681a22c778d0350e3369f17da5753ce5ca33129ce8593a36eab57afca30fbc14630f6efc8

  • C:\Users\Admin\AppData\Local\Temp\CabC5B2.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarC73F.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a