Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/04/2024, 14:43

General

  • Target

    056c7bd44a736910d6e4ca050085dce8_JaffaCakes118.html

  • Size

    1.1MB

  • MD5

    056c7bd44a736910d6e4ca050085dce8

  • SHA1

    3319fa4be7f7d37dbd78a5ec2ba3536bfd743bac

  • SHA256

    28dffe2f269f683d5e9e861ab9a1337496f768294ca1129d325c2267f52aceea

  • SHA512

    fdcb0a1ac968fec281dc97f79c31e96f082211d445514c3b74e3b2b67d60a1eb51d179142c8cef4faaf3608d9ace88c20f69063a7f30678c9376c4e5b9a7e5a1

  • SSDEEP

    24576:59LYWA4v9LYWA89LYWABL9LYWA99LYWAB:K

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\056c7bd44a736910d6e4ca050085dce8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1084
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1084 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2280

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8616f7e5785b3d7db6996d880a1af662

    SHA1

    ef6b0ea7d18ac202c81f742b1db92bc7d8ede456

    SHA256

    0eea0d308e6375d2689bded4af5dc3a9256b00be7b1793cc760fb55f3be3ca25

    SHA512

    35483cad56fb2d7e501584ad053bb474d1d9064e0ceb7368fb30b9ecd23a169a7a935a4c94d0e4ca6e248540e448aecc7be70b1cf1f2ec8a01c232bf3689c5a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9591ab802d93952497320a4aaac7dc50

    SHA1

    cdc85e1c488e6e796045bd7aae574100b76fe85e

    SHA256

    351201a03a7fe8d72b747118a77452a80a40c2c49a05222ea989ce3a1301b996

    SHA512

    2d45f35e3761302593e4933eb58455ce52b68be1439bfacc61f843720be952fd167fd2da2f38bfa7de8feae9ce0330713550fea5450d9189bb8f85e4b6f91d80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1e50a0549a169ca4668b89bfaa6807e

    SHA1

    0d3db8928a1d01f09923c0d92b6bb6de91f25b18

    SHA256

    0e1da531a1b08e32faf6012abc9f83f45dbb414dc538d5fb7eae02447fc71e02

    SHA512

    7848c81a31c3c223f777f9699998598db6f25d388dba0d6c77ec68576a4768cb3e5dee961dc4a9d3e059e019eadbe59d73e6f81134d85aac6c4e96a5d4cc6491

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce983f2324a395aadc4335f15c59718b

    SHA1

    ab1c142024014936b0f39084e3ec198f6e0584df

    SHA256

    842be374300d03563fa613980162642f4a9729267861a48c8704c2dd1e1af619

    SHA512

    7b354f068dd84a4f5e241a5c7d618a54234a0b9e5ed347b5599199c03f5cab66513ee479355c9345a64394aa24a2f83f37fa04f19cb12f95540d683e239f4189

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0ef41637b1e4a7ce0de7eb1b1f71a52

    SHA1

    46b34ac069ed299c38f27dd3db1beca086d4faaf

    SHA256

    366f2cae801b297e5610f793eaea32bfcc2e3cd499a4f303b2af0c5106a6bbed

    SHA512

    b1388ebafe5a7d251557256aaff7855c96fde0c854bb7dd66e1e5d1475dc45d050d51d70f2f4f7bede7547455d6f7255ae88b644e57fbb06de52dcfa15bba4af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42da3b0ee6159e4984870a609fbad760

    SHA1

    50f049dc2101f918c39a9d177e1f5463edb594b7

    SHA256

    2076fd161215a4087fa0f3c52b2e8045fb5e01b71c14c712dd26c3d6bd877391

    SHA512

    b2fc84fc4239a8bdc80020232eb39902b3074fa71cde932b614d77394450a8e6515489792295d101f893d25a4809632dab163e27d0e2b4e6e36f095a05943d66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    354a4408b67441564e35cd32852c3dd0

    SHA1

    409e6d7a4ffbf77db35664988859490526365680

    SHA256

    004dd77e087f84255859d500e2e32bfcf0e171ccf26120dedeaf8ec942319325

    SHA512

    7df0470521a9be3cd3c7ca361e1977e91cada59726bad75ce8cd77cf6c5c652ead31cea741b8631463b6cbc1965852f04a51284e63b48c2704f806025420c3be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09c3788c6c290a7b1311376239519084

    SHA1

    f8da2d9c577cda28a3e4462f4d559baae4a60187

    SHA256

    6ea1976c21b7b2e9bd599db6c8953a2cbbb229dffedba525bc44cefb10a3bf6b

    SHA512

    9572fcd4c16a28b8732adfe46b6f0c5b7117392852aae86199ef3ce05ba5a5773d3b74d085ecf51c3159b2d6b03d92b6ea4e689c5a854ec0b4d070513ec47242

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54707d5e4db0379d837fcec2bb7aa58e

    SHA1

    e461c9a46529367f933d7b6ab257ee741c85abff

    SHA256

    8b1981512fcc9bdec10d1457cca04b2e0714f47161cfe186d2309efb53dd92cb

    SHA512

    a58c185e92d69f96d9d88056248fd3035b019cae75804846f15db61b60c862887ae87f70c6021e0bfe772f4ddc60919c7d4e3b245b2a70d93acb97641ed73c1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    712e54b95145b66007bf73137f0738d1

    SHA1

    05185ab8e9ab8b4a96fcd9459dcbe7aede0c9f74

    SHA256

    8e1ea3c9dc74ba493e5763d1ef79d8ac35a6e9f137e9d74a0d4ef128e9976dc5

    SHA512

    f5c7f51e442a295b10b5790739792a098b3d80fcffb38a1703d455465475557a504acee7a065b42ff6b588f6996ac28890ee7b850df8f5abef0d13a34d02d2f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b342c08065958a87773503c6de410ad6

    SHA1

    07e3124e7719319cf9d817748e62e916d0a2583e

    SHA256

    c475e1ba30d9d54ed5bfd191090a8a35cf3013239659ad16927a3c8678afccc3

    SHA512

    4d500ec429730158219cb6dd1969918e48c61465db8f7ee88e449b82abae1b702be6a7d750cbf8781a70ad836d41b7dc913cfe6631dd652791c570d7b3d9d06a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3581b09bdf4e625798c1c0bac5ef890

    SHA1

    22c361d7be619756ee281cc8ed61e999413f5bee

    SHA256

    2d6f6e085a89439ff1610263db1f239996efb2f39a9f91ef75329b98b8cccc2b

    SHA512

    e9edfb1c0c470b11933be855f1f70e89de77c6eca0bcc1a6dff517cd67a1f4faeb406a2a73aed9ccb8e4c44c1e8a03b93e0f20036300bffe4e21ce783107e1bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65cae140005092cfb893af2a85f282ae

    SHA1

    d609636ce6f136dd2ab71f51d9492d8bc9ca825a

    SHA256

    f419784e58902d3703d576007853c4e9b699aa170a57580fc78dcb3277f19d85

    SHA512

    40ff15a56272590a867b674fcece3b57a1b079901010b3f41ecfad8f1c53c088b432ed0eaa1e555bcd48e16aa6f62539b12dba25408d945b23a0542bca3c953e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ebcfa54fdfcf78329c9aca006f270673

    SHA1

    cd231932a86025c5ccf3dda8576601bce771c80b

    SHA256

    ef33324d83c216d28cc1fbc4f219b71de39e9dd20b61a25f4cc8af6031bdadcf

    SHA512

    4d0f60e4ebe0e6a8f81e8df206db8c119303831cbaa03c808dd4463926d859a08b49d458770bad7a5446b2176167cb39bea69d31710ac20e33478978ad2fee4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a128d1cdee9e52cc31865acba454dbf0

    SHA1

    3a644a66bcefdaf7d82762fcde59c5b19d334aa0

    SHA256

    a692f69240dfa85c355974efd92fd753b499d194127ec263b7af7716adb805e6

    SHA512

    7be3aaa89756dde1c33cb3674c534fa4116225c5f130f1c00a72af55390fa6cc06a2a68221ed98b66dfe19e28cdea6981637a48aaf49a8515d2fea2e51765301

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e2b2fd2297243871a120eff3d6df80c

    SHA1

    5c7e3d20b022d14589ff5e6ea13cc6038d3705af

    SHA256

    928aab5710cc810fce8309afc3875fe4738e77faf95c64fa82039e9f4b28f199

    SHA512

    c01e80408cef813c6fcc4824db3ebffda5727788892d7fe78efe504042857b188965ea4423c407bc3ffcbb99671fffb221edf16da7a40ed3ebb1ae7b62f98d78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f07e89714e372ed5c26b2e8475faa7d8

    SHA1

    99e45845a072eb649eb287476294e0e9701d5a6b

    SHA256

    8850c6f748fe29e97e3e97fbb1fdf5453e05f5cc3c8c8ef9f79c80e0c90be2c6

    SHA512

    3a5d9696af05339ccb33bcaf550b04724ae6c3a4e4c60c841f2f61c8a42b6df179456c83dd7b5943ca1ab5295f4f5f93afff2c3390c89f86bfd68c6f25cc319e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2f4743b325c49a57a6b76d5bbab49cf

    SHA1

    c195f021c96d9740c2605efd3f824f495b4a7a12

    SHA256

    b4ba7f1218d75226b7ca6f6e4ce6d4d7944a9a8d84c7deb4d673ed8c697ec455

    SHA512

    f22a65d22d006bdd67aaa62af3a405003c4016f51d894f60971bd45fff0f8f23ef5ab367fa05f9c5f1bb604238462a13dda444061a3af983ced0900d61eec72b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    81406ba636d17252eafdd5588a2b6248

    SHA1

    3c75f7c94f97f106756f3a0909b2d8fd7bbf2d44

    SHA256

    5ce31113a877dfded1d724a0d2dc0250e21ab05db4580e9ff174d6240bd41d2c

    SHA512

    5cf7d83a66aaa1f754ce52908080973b54c1de1c0a4d23c5a7d6e3e34a10e53e75e2596ecfc57c8a3385fe51d02ab280b0537f6d78393526cf50e47ebac644ea

  • C:\Users\Admin\AppData\Local\Temp\CabAAF0.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\CabABAF.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarABF3.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a