Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    30/04/2024, 03:06

General

  • Target

    08e1bb27c29ac1bae249d0ddf1e98e7f_JaffaCakes118.html

  • Size

    218KB

  • MD5

    08e1bb27c29ac1bae249d0ddf1e98e7f

  • SHA1

    d0beadf46e5c99d0a257611649529baac5ba2f03

  • SHA256

    2a69eca897c4b77359811837203f40a078e664fe844ef4a4b99d5e4c10bfd2db

  • SHA512

    3a1e68e58ded996ede5a1623748a67e7ec0db391378f01c892c0de9d5d75a188790a2bbeb368f76a1dcf5ae6c582e4e495870450360d962f0f1dbaf7b42188d2

  • SSDEEP

    3072:StGmKWxI3f9UOyfkMY+BES09JXAnyrZalI+YQ:S8XyIGrsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\08e1bb27c29ac1bae249d0ddf1e98e7f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2084
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2084 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2804

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a3df5855fda1cc8ca6abb8dd21a540fe

    SHA1

    26956f63d26a9ebe0b223da6179e46e61701dd78

    SHA256

    0c607fe34dcbe34b458c1bcd7411548fb4dae0019c707643a6936406b085a7da

    SHA512

    756538db33dff4e77c15e21f7fb40daa9fb89120746bfcf99eb9f1492fcbb58c902434e699eaf06b02179cc68fbccf77ff8b45fb0015935140b7b999ed8c49c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    4854bfb624ca831f0a6b410d802caabc

    SHA1

    4b2c411b55ae43f8189eecaa2030d96786ad8523

    SHA256

    d808f140d3bcd8510abfcfd4b7c0e20660d972d9b48bee11298285628debb4fb

    SHA512

    1d492fb3f02da850f9cb6c1d63dc354e6003e12718053d57d754f106da96f28a7d51792fe59fc5a3087cbad6cd8f9bd3c67f29b237413a2eadee29d3da504b86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    19f098863ec4a3a8b4d6b59b73634602

    SHA1

    c1d1969c30df8bf6e2c31627e7ec7850fd173ccc

    SHA256

    0bb3e0e04bcc35b5688fac53adde73a2305c59e2af55a498b06cf2fd49e43341

    SHA512

    9ac568b65852bc2451b91b5ede09f52ef7c94398002ba7132654c4a84450855396ae9f1e47b9cdca9861a604d1490219dc603c70c30f7e158108902de8f39298

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    eac5c0aefc86562b371b00f0fb93a576

    SHA1

    f186aa1da380d02638b2a3680ecfcedc7c9dfb24

    SHA256

    06efc188753273f0ec690e28e14c1a2d2a2c17773291fde8591d6518ef4fb337

    SHA512

    7187a23f25ce22c2c956d6e163f7150725db66f3618b0885e8a642b734f582441e6547ce264ba34e03d0a062140190da37c710bccfdd50d550058a699d42fa09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    249ba4e59b8a96e9500ce725ec50a0d4

    SHA1

    3de5996bb7b1b39392547211d8586398222a1bf8

    SHA256

    841bb0c98311c2600c299ca7dcf0409698ce296c294287bb558d704137e44d44

    SHA512

    8c584de1ac6492a4db24d8e5073fd866685ac266b4854d164eb016779b146c26ff3f4128efb568d40ffb789dac1efcd76797e8bd1452a9ed1595b3dd882bb3e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e0e61d77fddd946333099cbcb02c7cf9

    SHA1

    bc88bcff7472bb3ce554bb6329ef6a4c59ec6374

    SHA256

    08fd1a66ef2f8f811a48ea2cdfe263a18dee646670f0a8b7f5a5436984188508

    SHA512

    0c78b338f2851e6abe372acd4ed1fafe4fe4e4bc878f1eac906d10f79acac9bf610929409f1ff2a6a9f350c8e68884075c4e9b9d15a0a4cb60e101070303b8ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9a6fe84d19815a8cceb20fa98d00d4e0

    SHA1

    d3ba5f85e92850bc5d1117b9167df54101be154f

    SHA256

    d81df57bbd78e235906a2c9880c436e4de51315bd920340f167bfcc83bf78aa4

    SHA512

    f471c5dcbe8b9a4246217938801c12459a3f2d9681373b75ec6963ebecaa40f0d51ede31e4de93d986e206447f7fd721de17406de0c2a38686c3122c270fecd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    01185a3aee0e64cc9fbb8407ca78d9fe

    SHA1

    af851eefca8ec185a45fab7adaeed9b02cadb8bb

    SHA256

    c479f1100e76a6fea1d24f8a57de7b349a23f550ad3771e72a1c4a92b64cf1e2

    SHA512

    b3ce1c4852a0bd55771effdf7722f8b2c4a0f3e7ef8d157fcc60e10759d9875a614c664cb3b4932f9098d1f246701cb8dd026a46e6b1e5693167fc579d5d3e94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    6385c1b749da5af53f57e0dc912d38ed

    SHA1

    be5117422a3ea83905886bb6fe4cb30161dbd5ff

    SHA256

    7961c12f0f0170aa852410149c70a06b598531ce52fd82eb47c412fc2666acaa

    SHA512

    5e487e348da0082da2a727eaa96d80c9496963b8d01756bbf3a34ed9332d9ed75765bf71376e52ef8af1d303689a5d2abd1ec76d30e7fd50f32f9b6bd95d82c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    8a2195bd3b1e4454022555c7d8c21756

    SHA1

    f5b19cd3fc94331fe13d51612ed334e0289df129

    SHA256

    ef3c49743161832f8515909184ee48f3257b8fa250a4de1c6dbd348d78b69264

    SHA512

    add9fbf196df1c002ceb9f08915645c7ab448e13a6e1ee75282cef7ba48cfd8b875749969d041991df0678e244e35a09f23016ec9aa7a28edcc65a7b86f43661

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    bb9221ab09df07d592289d75b059fa47

    SHA1

    8a71f1700560b9ef396a5558935ad704cf6ce319

    SHA256

    973a52895c831eefd1a87de47315d0693feb306a952488ae45a35789b4090b53

    SHA512

    ed69f98919ad907f0f82047a0c5a57b1b8351a376b2011ca44177ec38f91aecf99e506b270ddef84636c38e2e439f1e92a907de22856e38f67c4f171b08e0185

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    f50a558b732b155bff50d0cfd798644e

    SHA1

    2df71705d1c3f2750b1eb8bbc1f317a8b050c078

    SHA256

    bcfb73a729683ac268fe77d4e1c770f79d0e1e0de67b7fa2cb984f28d780ad81

    SHA512

    316f753fe23f5e442e4bcfd4a6c7d990997a85d9757c9edff17914410a72c55e29abeb5af69fe68ee344c0a05bbdbd98debbd4a35b340a7b68d3dd9e80d0b747

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2182d00446aaebd9cdc2d801d4f9e741

    SHA1

    0c75105300da6f83ab6fc14e6422f6cb144b13e7

    SHA256

    5e7ac2323cda64e2bb5797564bf8621788bcd534b7c8c85efb2b1333804d0507

    SHA512

    c7eef617bdd7193def63c5f8949182417d236f7fb4883d1af18b9ff013618d92c7e269e147714093bf82bfffb0bb7b33b4f426dcfe8a46b4e74d904860e06abc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    0c2b15f85c043d33d1791459a86619f2

    SHA1

    8433bdd116cae9fecfe3cee8455fb5ce4793462e

    SHA256

    dea324bc60d209428eefc3dfc45d519c0a69701595389232d7da771048b360bb

    SHA512

    d0e47f96364d4ee6f4efb2cd5392509f10fc6a36400d80a55ae6f77808b10b88018c145ac333eef3088371d332eae9b856500a73626ca01075e01bda16b4e3ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ce6b07ac9fbd9148cdf8813dd0512a42

    SHA1

    7b549d35d0443e7838eefe6e7f3b318454607e96

    SHA256

    a53dbbe516d6078811963759c056881a59711819eb225abc54a5a518376a6563

    SHA512

    fc268935ec6821bc5de781b77764e1fc9519af6c30fdfcd77e32a8952a93bdee4f911f00bd1c298daef746866b104b0a2fcc936ebf0ae384aa9ad0fff0926888

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    057ac71beb53ce4136f888c1be685004

    SHA1

    f8116fc38d5ecdbfee9dcabad6c3a72beb226033

    SHA256

    c2d013a11afbb287a344d399575ce179ed8431be5117154b7b1163032f2070ba

    SHA512

    532fba0f66c65e25160869f5259aff87fb8524d8e6c04d240927945ad131ba60ebe91e84a3717032cbfd18af108103dd795e3afba331a447b0ba97fc0ca25626

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    48199c7f902bb770000636ef8a143bd7

    SHA1

    fbafcf4abc39f44a7959ce631e7e0d3f7aa25ef0

    SHA256

    77eb6624e1cf0427d1f607a51ab057b36f850d0ec1f20e336260e36adbac818a

    SHA512

    20d7309d197b241262b455c8c7c19801d87d7a6f30b5aa3b195bb77e1e1bed87cce5e5f01a4fa0338e4ba78da3eb5254c175c5301ce7043318cf31b28e8f3144

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    fcc3a3afa4a6e1179ad076b07958fcbd

    SHA1

    84e3899d0ee05ebbf26b040023c128c07aa9fce2

    SHA256

    5bb4aabc99cac5885352884e06658d47ff9cfdac83bd51abfa1cd488a5dbb132

    SHA512

    5a9852f6cc5c7bdbec55c607e7e994db3169f48c9cb0f010170a7f7d71e8aaae51d9b234ac08677dd8a41e18d7fbf0ab3c109c14a9e9b912a4580625039bca77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    57d96172e13ac809778881547c9dd60d

    SHA1

    9993b0db145406cc4ce46a8d5fdd48090dc87908

    SHA256

    5ae75086b500f46b146a5f9d92a52671f3122c14f884da59de019271d20f9175

    SHA512

    6623e8c7d2d2bdcad6afc0e3b2ff5587ff544d864b47a2dee9031c8d2c1979b24b2e5d7332a27f5f124d0a425dc8a43e184073f36005a9089a18a96a7d6975e7

  • C:\Users\Admin\AppData\Local\Temp\Cab39B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar46D.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a