Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    27/04/2024, 11:07

General

  • Target

    031ce94061bf6491f431083354017de6_JaffaCakes118.html

  • Size

    43KB

  • MD5

    031ce94061bf6491f431083354017de6

  • SHA1

    0fbe7ac4df29980cec91249457f524ab77dabbb6

  • SHA256

    eed6763cfc95aa3dfe6c55588fbc83524d0a7baa398c2aa98a7a45358b500317

  • SHA512

    4e2a378d926aec8c6c325a68f0edfb36edb348c19d66207bf66ccc9ff63bdcfd44f034285a38714674557b1e843300d54866b9093f3fc782c7b9da3cb0c5e510

  • SSDEEP

    768:1I+vbG2+0MGi+vZGIikHhGRGXiOgOeGBGlGslstyFOs/wOeng0:K+vt+0U+v5ikH/iOgOOFnYO50

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\031ce94061bf6491f431083354017de6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2952
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2952 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2900

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ea1574985f247efd307d99ec2d57b2a

    SHA1

    b97006e09daf10d845830acbb53924ee4c07535c

    SHA256

    5b98ff26a08aa519c9175198a9326d842961ba404c4014520c2611d383eecb2e

    SHA512

    03b4f7d7a6e89ce619c3ab698e49440be4842d8d16636c9032e96e80633b7f5a3e39f5e92555e594ab52923d67a99a504d97d9777bf4e83208949fb5d039f789

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    416e10b8affe3eb8a4eb5e16407b8e33

    SHA1

    0edadd26aea110cdacfc78aba8e9b07d4624caaa

    SHA256

    50f402ed38fadc85fe2fb47b829cf3db1cdffa9a00acadcf49df2b0780530700

    SHA512

    bbf72b9ef00d8c0e9014df59ac70ebab49339ad4944acec62ec8075c3033c369beba5a0653ef768049a55d92ae79306e540808ecc4484d038d439bbca5de8885

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30f54f48a77ff5054aa31b2ca99575db

    SHA1

    83068c881f931badfd3402df70b54679527cae91

    SHA256

    544b5df776ff9ef816fa40783b87c9d15d2100f7b71dc8d3289615ab32a82dfc

    SHA512

    0536bd29bc3a64e999e3bfc191b368e6e08f5ba671596a6b117882f0c227a55c925ee870ba0b10c4f50861346294474807dae54364edb7b9e9b06348e55bfb8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12669db34abb8e7dbc448c768b8f2f3c

    SHA1

    cf369cba10867a8ccf1ce9a930080d0017c6f13e

    SHA256

    8407d9556011fd9fc0afe9460bea44a78443f8d35dc913ce834e4c96c7176cc6

    SHA512

    23e8c5b087f7831599e41724b6be6f4c408a7a9c904d09cc6339a38161d02e597e528839461ea9c726812619e96063da47542a25ee25f27fb47e14a9db2d2b98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0059a5f253f647d70a333aed2cb44458

    SHA1

    65738656c9a7144482a003f7fbdb3204c6492138

    SHA256

    47929345a065b81c15e9f0813a2be485b5b1db09001af9055dd9b46ee86f7196

    SHA512

    6fd36efe7a9463cce10d516d057e338ce69de535fa7f7997fb52d6035c5c7fae0073ef432c2e36a3a157c8a77a0bf55898de68fd99fd9f4907c6f583d1b7a2b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0329ea8fb386c538a329f4f4f2b5c097

    SHA1

    0ef29674de98f7fbb89f89bca32d2302f79c3861

    SHA256

    599fe72e3cd7e58b6e810e3c49e51605ac4aea44e8c731e756c4b67cdc6c589b

    SHA512

    16d8c64b2d517f6f5bc79c1e6b44e8893047a47808674588cc114851ca6ac4240cc28070f00ab567ab1de895c2d6a90c2bb896b0b89926ac62f86443c79fdb7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b9ea798d43ee1831d9fab3e438b7125

    SHA1

    703b85137cf07c7f5e5c28c7fb4f826aed934faa

    SHA256

    e187f0a746ab12dc31c078acf69b95f0ad64eda76bad79073b7bdda7b767f723

    SHA512

    88aa445716666789b2b8d04689fff31009c37511916c3bbaa7ef0b903c377b3ff843afae5981366e6dc7cd4eb7f61e86d9eaf572a44b215d2f2eaafbce62541e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    029a09b74a33d96430e45f9aef9d5508

    SHA1

    277f6bba29c50a6aa2a390bcd23857da8ae14d30

    SHA256

    7e4f6121435e762aa0e49940ec5d2d223aa0e7fb44236eb55a218069a5d153dd

    SHA512

    24eca790f835e7cecb11947e6d5be1f1758be96fb7b1f735e9986cab7bfedd59f8b008b173e2b9b68f4a582e2015c0be522fcb170f1175dfe51c0d9a0b49d787

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b1ad840629594c92e2b2104bf9e44ea0

    SHA1

    f4de50cb0ea12b89faa9bcd33cbc9b23b7fbea7d

    SHA256

    5c168eeffb148d10710e3275bff9423a306ae22fd18355a74bc9876ab92f31d3

    SHA512

    878b2e768ca6e12f915c67dcd3369bf8d38542d0f51dcdaeda10c232d6d5590b3036b528a638a827ac7594b5fae51b6b9c09cb01cb287d3af0ec5f4de00b1fe8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3a2535c40145c82492e08403753edb1

    SHA1

    7b560dffa4d58954899a590c55f6031c32b16224

    SHA256

    e546dd3ee9adf2d5c75217fd2f81fd9a35925431a4290f3a03b45d8e0f995776

    SHA512

    7dc1dbdb202a9856fd6325e0e3758c1f173ccbba9a46b298299ae445c159eb9f69bbeb168e1aabb411ee7c2728e2c085a5633b706b3cda417bd7b4e57dbacb11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    446c67c0ef49e7376274e41c0ef1cb96

    SHA1

    b7212f3f7177b45eb9fc01093841689cb507a1a4

    SHA256

    228822774175e395c5839df4dd7733d316f5413284fd3ab6a6a91c742a4fd7ef

    SHA512

    8b9781c3f992c8d6a46aba2e7c9f40ad9dc8673c86ffaf8a704deeb06f8765f27749199d70f8607e9c36df4ef3f9bf39b07ad411562f18a17153f19c0980d770

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36f0560abbed915eb8c2e0665d050868

    SHA1

    66078b65fa39cf6530b82afd24b80e6d5555b88e

    SHA256

    69543436950c8afa56c2a9cefb34aba96b86cceb3b05aa154b537c0536063a24

    SHA512

    8ca55fc657c5b4957a267b9895c495da2dac1442394fce9352822eea007ee11151ee41072438f9743805fffcfac8d5c64ffb415d556f2bdd16c135ae97b93a17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6ff7c999a226ebace5356265808a7c6

    SHA1

    5899c8458ece2a8f6005d173a84c6a9bf10bbe49

    SHA256

    6e6f3b17c1ec04c58946ff10d76aef1389f985aa784a15cf8abeeb26d114aa4e

    SHA512

    c86dbf03e6460ba12b8821658f67a076bf4947032324d8bcc2afe0724c20f73400b11f75919aaa565a3e9ba6714b240a30c0a0dec87430d414226790600b02e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca09266dcd2c93bc774735f9ce714892

    SHA1

    06c85acff8efe2677265fc5b17ea42938e29e062

    SHA256

    f7789f3adff202be8d111c195f4044dbe4b20e3545eefa2b5c81da6cd0106e63

    SHA512

    2bcaf23c7cbefbce68d66b2a9ab35234b3e26a03a808cc3c6f07d78749a79946ed4004eaefc767a6e1d1c2fc2cbe1366ca4c2669b7567ae9658fe0fe57a2910b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5cdee010fdb7f807be351495057463a

    SHA1

    9b7cde404d65ddd6a22f19a7ecf40499f94b98c4

    SHA256

    70b4e5836924c5854f861308e2fcfc959cbd30072b2eb35aa008105e4f7c39a9

    SHA512

    c92bfb85a2ab4b5fae8c0df8b554651b8530ada390df17e4eeb34576b80c83c28484883e7bfe59977b687d177d8c89ad3a86b40e5ca90c2b3739d4f73efc268d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d563dc474c818a4d0de5cef17983b02

    SHA1

    a129f5710c5e0a8f48a0ebac865adb7786bef5d1

    SHA256

    f55e93d5a27fd9205a0b781a8106ed588e69192fc0747389facf2d05d6dc4547

    SHA512

    9d3d44f3b6505c74f56024236d7a6a4b9d37da31c875ec7cfa9b2b1ff0f11c5905870c4c85e4d3ef56739d26a643098df2ffee62bdaf4c26abffff74b4eb6f92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97532ac932839813bd1b5ef7fa9fd1fc

    SHA1

    6ad2355f8b75b6f2ddae6d952c0ff5ded91587f5

    SHA256

    32d8207e83030cef9386c52768463dc4fae6ae11041a6407bf319840b1f4efd0

    SHA512

    e75bc657bc48af5e46ae3de5a64273a3954fdd011b4db4e0c67daa84088bfae69cf597939657d984c689bd94e64bb7d4263e54044df70be90b062043ae5af0f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1bdccb37ed22e4c17eb561996b05b160

    SHA1

    e9d00a1eb6d131c829e7c1ab86737f170a0f3c0c

    SHA256

    0d8ae02a17e890d4319053c169516edfef2c42f92cfc7c0f7718ea4483120173

    SHA512

    d702066fa884f72af41ddb08481b5bd7cdbc662e83e1584789c3bc0b1a0af1cdac9de8c2ef5b3d9e33ffc1ffd0d76794192c14e48bcfc3a1a4f03eee6d696b26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5e2a6ca2e53b2cf73caef01494f58cf

    SHA1

    6eb5fbf5d3793099c839a1f73b28be6a39c8ec9e

    SHA256

    3b8706c0f1d3400f8030b13e4dd60f5e60f6dfa2928129e68544961290fcb2bc

    SHA512

    7ca710b186e336019453bd516b50737906c9f831fc8bd796684384183494026ba03cd9417431c776a0a5c08615028d88ce05e375daf07f00202e7be79dfe8e00

  • C:\Users\Admin\AppData\Local\Temp\Cab26B4.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2788.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a