Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    26/04/2024, 23:35

General

  • Target

    01eb1cf2b6d112e5a3ed90d0c4865271_JaffaCakes118.html

  • Size

    54KB

  • MD5

    01eb1cf2b6d112e5a3ed90d0c4865271

  • SHA1

    8d3d1e5712dfd4285681eab045ddedd2f2f08841

  • SHA256

    5f7056a4259d9196eb03f9fba800d8d4dd735349ec7798b307494e361e0fba92

  • SHA512

    0bc53a1e24b48257fbba4241b3d6fd5c786369f0efeab2a22d5b63d1bd9d1517887e14bd05414beca0d61e14b9a31312edf1df21ce9299a9f824c4e0b6144b4e

  • SSDEEP

    768:SH5OhnlrZDyk4lpHXlybXcU+s6eV0RG3M100+oEOY:SZsnFt4lpHXlyb9+tc0RG3MWEEz

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\01eb1cf2b6d112e5a3ed90d0c4865271_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2008
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2008 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2204

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e070ab24f82bdbdbeb7ae4e5c3413462

    SHA1

    880ea540175ab35edfa2e6e595a6f029277f71f1

    SHA256

    d66bbbef8d80de542ed15f008057c9c6f1a78c8be1844f7e7ac837b2ef12035c

    SHA512

    90744ed8548c8e039fd1b69409f22f5cecfbc9e8fcd2d50d5277a1d31fdc273dc02bf606af5ef51767844c7b84983288a6d4d1c4c746c9e6f2c1db8c65b722ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc1fbc61b4ddcb53bb18b379ffd18ea5

    SHA1

    b511cdec899d84b35c76191304877161a2531949

    SHA256

    520d306100442206a1d8e8d752d65b87a55de9a9c4f48a9637e064b68430cc24

    SHA512

    8109ea3e7f122b9afaaaa5922a76a5ae751f3e18ee7264a56ee5943f7e2e0ea110bbbb0b2639e092b7fdd9567f474fd20fc966792351b06c62180320d8bbba4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    670c2ae8eac1855b3404e07125212d19

    SHA1

    38b2f1bf6e317f4a3df0706f14eba36c294d9f9f

    SHA256

    91c0a76411c2f36eadd15ab9313a216ff236754d1dc2a2b278f582490d2c62dd

    SHA512

    22dcc9176272833ac643d470592a402cc3ebdc1a1d03a836388dd7ea0f0d2babc2899346da29706d010d68031a41730a9669efc69f595809c36574255025bd05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d694807727873800c1d7d41e6320ad2

    SHA1

    e33a0452554f0d5d651727116b738d613c717602

    SHA256

    663edeec376aa1d2701dd66f22d1e9898c599519c7fafc8989a48b532c84e679

    SHA512

    1d840d6ca1edf60a6a14e0b15f562689574e55ea3809b1932d62b51249d7f626cd9c0434f9a126d402df3737ce1803fdce4a3313c1345d8d349e77d1bcfbea88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f80095a8f35506c818994d7a4999bbaa

    SHA1

    09a8dbe4a93d64baefe7db9b056706ceb7444de4

    SHA256

    b97a5526111d2a1d9fe8380b906587a65088d25a824351b5bffa20115de86f3a

    SHA512

    7c8a14fab190826943d3be8812430781c6a482126f17551e48baf02f7bcfff1806d3ebe8be78643dac2a63870a0ac7bc92833d01296529fe8f74054d428a43b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f64b1c9ce230c6af64569adc89932ea5

    SHA1

    f5abbfbe08cecec05f8a3710dc2548eab7e91640

    SHA256

    ba755e85e2516587373692c2b15eabd884474ad13096415839bda3b35deb76aa

    SHA512

    19371cdcf8bc6490494e0950b83fa8d7208857184e2275c07367d03cafd8b75e9328a9d3998bbb2dc031265c44ae343d8d4fa1da34ec256854e0d4eace832138

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af331c0f8a728842c9434870701a3b52

    SHA1

    355d970e844283c69b827b220d4e7a8b87b2c22b

    SHA256

    ed8776d45b250eda67f10c882209a2fac1bbf955d48715f9f405972831baaa8a

    SHA512

    e364845034345403b4ffb469c5f83e3b4ed9cc492afc49427cd08002e1c3ac30687b7166defb5fe0c98033d73ef23c0710a0e27b4319548b40988c57a59fad17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f307adebf4d21267777e239315c22e90

    SHA1

    aca30d69118ffee04cccee4494f9227a99eb15bb

    SHA256

    a31a9b3318243c009b08379ee7666d26607eea01ffe678c5ffc5b0ab4e79bf7e

    SHA512

    2de422425c7a173db848aa5f6c27f3036147e50646598669baec5205c1d4197db78b3950344259541989ee7ed033fab303c92244380f598164b7a9697e200869

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e94343e7d9b6fa7dcc0814dda30c53c9

    SHA1

    1ce5374eaef57fa617cbc5d05ad4c5fec06a3030

    SHA256

    b7dc1c207c3ae691d68c831d2f056c490f2e0e34d85d2c1716b11e87cef76835

    SHA512

    b349ec2f73aaad96fb8179a07bbbf3b71dbb41a5bd07ce7b0d46b15cdda5e0401125ce16cf507e373350d6b77567ee75138ed6b8eca74e7b532b8733b7c8949b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a6022fd352e190cf04f1962afb06ea4

    SHA1

    de68b64a14c21b9460248f248892fc5086671684

    SHA256

    578012b8365715233b2b1b8bce2931d7ee3932d6ad9f6aa954f29ab5d9afdb3a

    SHA512

    810ab60cf9f50a06353f104d233683a517ae8ed1f004299996c318e5a93afd7869a9dbd3e326b3ab3b7d2b36b634fb17e4b03b0b08910279d181c664f126917f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5636da71c3b5b6fdbf2854f10263e3f0

    SHA1

    fa5603df0fb91eba0e9b6914ccf799f9211ecb74

    SHA256

    4b2076f215aaaee2a8097df59e93e1f622e29661ae85537b65551c6f04ddd5b9

    SHA512

    0a6d7e9639964e3136e958401f3d0f02b4cb5399b2aebcd6c8a3cb4508a94aa1905b245f21572b5a8f3e84648cbb418c64486a1aaee808679da27f5a1439ed84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be16a08d2c4512ef98d893179361be7e

    SHA1

    408c4a4efe97cdf3afdff079ee727bd25891ab57

    SHA256

    95e9acb880666e23127d9b7bb637aaf772a081ac4de4ba9ead086251595b8c80

    SHA512

    59b676ef3e8931b037b75bd8790f5a4186e7fe10b2aea7585ccc05921f775f1924da4696300dcef5cdaf948bac481a2b9fb6da1d359ff9d8e1e5c4a1e95a1358

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92f394cf49dc013a5d5f3e2c462bd33b

    SHA1

    f5fddc6f39d670bef8b99186762ee530cec15bb4

    SHA256

    bfe0d8b6215d9f8f36473331215adb6951a8142adc32dac1a8db8abc01780950

    SHA512

    30aa1bd2aceb127f8107a80570b6886e8f32b022a494cb722fd03dcb1e58eb591caef266ba5258b14f0254ef8c17e052735560766dab3b8ea3e61f4d5e25497c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    344df84239b5a422207c56890defb3b3

    SHA1

    d8f8d1353cbf058f846738c8b806dfb3062d943d

    SHA256

    81c6623adb117d36ab871bee3d34d55fa6bfd48f05abe4e1973e9fb71fa60d3d

    SHA512

    c1c29e636ff88f4522dc1c6a7eae124fee7d2d976e19ed0ab686e37355a3d05b0cf12ea22fb0c492694097f715a6556bbacde86d09626a88b0cc812c4f9278e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    769f71ad1adbc6f20789d93f0b2727d0

    SHA1

    3c928ab008843f00a38aa10d558d0ac0d58dd8e6

    SHA256

    bae35e40a385d0ec824296902fe5bace19199f27466511307cf4fb720d6e4508

    SHA512

    3f6f37f36e6b791cf47a70175e55521d7af5a0151c6d65ec6f65b0af97f11351019ee68df2d880d5cac663d8b2b87b184066d7b8141c80071aeb8bb48419c21b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2f9282ac31920ec8ec8c1d736b6a1243

    SHA1

    6f3f82641c193e0de6125159db887a0790aa727c

    SHA256

    fe687fa42901fa3ac7c6062052b75170705d7c9a1abf395b02c013d657d948b8

    SHA512

    357246870b2c64f1db66c84ce5dfd9b5fbf26835f7f079dc805088254da76b20f2e9a3759267473e91d58e973ccc0109b8f6d1a5d834308d83a8765f999b0124

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    138f5a5fb49942d798042d9edbfef06c

    SHA1

    4796d9286c74dce083b6789b9e354cfb2bdf0be6

    SHA256

    04f09af74c068243c648e8465bd19c1b57f426f7db2cc5094862e511896ab568

    SHA512

    624db2003d40fa75044436d5eb0a11d956e01759ed02d4ecc10fe2e90ef6dba4aebb546eeb260c81bfca0ccf6965972eb3bca4bdc9b48d7423d32a8fd4e86673

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b747c0564499becb596108b6844299e6

    SHA1

    887cf07519fdf083c3e98480ae502b5afed7c3a4

    SHA256

    e1c7ad35bb1bd967c34359742b6fce6d465cb8546eb2497f0c07bab77d6bfb47

    SHA512

    1a422ceb3074c442e4d78ce29311c89708133b7191b4b8aa023274219b0d0b69e3f1866a22ca2eec1a314766da26e782317c2e3daf7e8043d9750a2cb534adaa

  • C:\Users\Admin\AppData\Local\Temp\Cab1142.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1223.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a