Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    02/05/2024, 01:40

General

  • Target

    0d218a6dc938021091fb18f236c2683e_JaffaCakes118.html

  • Size

    18KB

  • MD5

    0d218a6dc938021091fb18f236c2683e

  • SHA1

    62a196e80033051ec179aa82f1035a1b321b2b0d

  • SHA256

    4ab4a6798c4cd5c60d93e89262be5b4fa1acf8e631872c5f0c720a8c0c59054c

  • SHA512

    353ddad484bb9ecc54a7a7939cd2b3057a0649cf7444bb534c362a21ea3cd731864c81d223db79a3793cf3a0ed5b8a5b431adb244a5e0c54b4350037dedb622f

  • SSDEEP

    384:jSB6+ESMfL1q0Y0zGo/gpaQfAdx2xLcgpbhQlIoGDRXnW:r+ESMT00Y0zX/eZAhgpbhQlIoGDRXnW

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0d218a6dc938021091fb18f236c2683e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1704
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1704 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2448

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8db91c48f6fa08295a8e0bf9bbeb2ae1

    SHA1

    3912885796ea7600dab22cb40663bed64f23441e

    SHA256

    aaf1758be3a443710c690084a81e5a49f4cccb43766ecf04526301b5659fcd4e

    SHA512

    97e6ee02c4c908740e99d80b28ec23d83f56782aad416a20b59b15b50611d168ce38aa874fa87ee07a14804efeb3f0e45dd08779cbac2e0c53980150eda76c72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef8f633b194db9b34e4306c7b69fe7e4

    SHA1

    2d8c45d5cf9a250a9642ebe4c36718045984b9f7

    SHA256

    a2a474c02a9808c65b76143ec7fa584dd46eef0482daee93eac0c847eb45b98f

    SHA512

    c4ded81be35075c4e5a2c8404cc1cc98305a49de8fc2aefb036c431238271abf6f80acae23b43bc233eb505b48b904be15b3d377c5e0fa42594531e0341e3795

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de3a325dbc412d650a55a08d8aa0935d

    SHA1

    23da936976b34561c2918c7a1f106b847889053f

    SHA256

    9ee082f8d81de2d370d6f6408c5152a34864a01a6b28b3760641598ad6bf76c1

    SHA512

    ce0366f9f6c136a49782a40d7a9c947ee6ef9c53ae1de103ba32397b69e9da482cb379601463ef761e0349b755cfae9b7f07b32d6c509de4b4fb279545f1a114

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2844e1f4afb9ab019fa30d062c1e7f59

    SHA1

    ec79a715e6a7d2817296a530b68aadcf92dd6acf

    SHA256

    e74a5721569d26591506580640795c78c1038f4a41a8ff095539bc0599040486

    SHA512

    a8e1830736d0438c0d17751ae1ee748f5a9b7aabd2f4c8dcb2e9b55c6f99210e0fe96d724c48d529fb9f7999d43fc784729b4014f5db89a55f5fdf0f23ea43e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    266b2f4e845fd9d8f177b2d18f8dc766

    SHA1

    a3c8cf6cdb579ac716ae45c7a5f6f9e4c7ce2ca2

    SHA256

    8ad10c7dcb665814c6a4693dcec5a5f92ce2d8c193f3ed8127d222d5b102bf42

    SHA512

    79c51a8ad3697ffa4101ae367ed1468f1e3f2dd2c3d9d594a92734d3e17fe9cf5688b3d6e03493e1903d370a0aad7278cd1c830fb5efd9feb541d1dace281001

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6824bbf52d517ffb7bb2b3306c59dcc1

    SHA1

    74532d14dc165d9d546f3c668448e9ab84c31da8

    SHA256

    d9613755f317245df8826bdc5dead4d4b880f236efe72109aaa525cab4092ab7

    SHA512

    58687ab27be557d71f5fa817d891641caa52a3fa4bcfc99722563172895dccdc3bafb5413394f5bcdb9c9a4e936ae556e8509c0732e2c2cd1c90413b36252bbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c734615e5f10b44575d39c27ae6eccf4

    SHA1

    835a1f7ee94773d7172fdcbf6a311a807d89771e

    SHA256

    5feb8e975e272515ed5447b8d24a86dba27aa6794c86af4adc3b5212d7ba1da6

    SHA512

    64b69c3a1bd3af6bd335c8bd71562e089899700811a5afafca46b01c312a5b1b54d29117f245ad7e6721131b36497c76a0bc0372c650869e436cdac3048a2a3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92f89c6535b1aa8d62948a6020d09407

    SHA1

    f274c9945b846ced1a2f2b846d8374a42666a174

    SHA256

    72d5450f90f7d082d08090a0cdad01934738174a8bf2b61d0116ed8c7830ba8b

    SHA512

    42d1d7bad841b89acc6089b581abb0995149f0d186586abb16c8b2909cf2379853f73c165fe7a5b9b5b4dc41874145a82adce1f89f8723ebae2abc43f441326a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83a81dfa2644b7f80d39487402487060

    SHA1

    f1dcc50aba9983d5551dbd5e882f74cc23b51061

    SHA256

    faf194e47f31833502a7bd07009d6df4bd493403d4b4890d28e6f63ed67fd539

    SHA512

    8acebe7674b751aec1dd2f769ab492449abb6f80035a3203c3819c87ab199d33e212295f63f4a76f10ee559c940fdf1afea69d7355d17f509f5d4d06c01a5d9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3b47257f9a264313caf9f4f51c5b0a9

    SHA1

    b6d0d6a14d6b9fa764424a4e2de256fc852d3bcb

    SHA256

    ecfb20df6023ead45da883baa69d8ee66a30b89e28e328c05e362c42034c0067

    SHA512

    953b9cf8d8156e79f5061b3154b98b7f76e713ee3989c7f4f5299f16d8060ec124c589100b905c1ac180b4ae78b0f88a5d1ab49df8fd5d805abf527809d29190

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b68c55e1940380dbb0150c1e7d667c58

    SHA1

    a8964f9913dcf0edb33a8e06f43ae2ef7bfe5d82

    SHA256

    d4eaa38615c9c09759ad727a94b7e6c7b4d2ddadbd2bc4cbd48217cc3d85f7b7

    SHA512

    1a7c80b63324b86c5b5e60d55f440de561d01d6bdb23807156e8c0d7dc20c79e34d39f647f590818824f3f813b395d4dac4da419227a15737a7e689f7b903938

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db7a80af54ee0f44b7810727c051a8e1

    SHA1

    6a7d00a3472a44ee7ffb7c7a2322d1eb82ced6f2

    SHA256

    d630e83b8d38d014f692c9affdf3a292ab85138a4be5e0d8d638b72ecd4d2af9

    SHA512

    f79c014173aeecc1a8e49c0c3cc1d07c175068bb23810dc7cca72bd3cdab2b852632f72d2bb263d01398d896126212176cd3643b130d2108711434ff8d8743f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c4bde28f03703f72770eef3dc595880

    SHA1

    3f7f8d341fc08c0fb39c650a0d3cfd8ff833e07b

    SHA256

    cc452ceef79ed40d7eb2f8f9eb60d98ae844ccd749351c0cfbb933392a191a6b

    SHA512

    bc34672ef23f0bfe4aa14cbf89d689b22fa3c0f14b55f7f926dc0f5af6fa887ada82a7b282dc658fb6037df02c8a092c0d22e8dbbf5dfe4c2c28f04d8f23b923

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    761c2c824174e2d4a5713fbf45ad87e4

    SHA1

    3ac7f7b0abc2322fe5315d879075debad7b7d0de

    SHA256

    5138ab167fc46493a48daab2130abca30a00f3602c0f65ba33356a214ea1de03

    SHA512

    281eec76a19f364ee1bef92ffabc56ce120abe3343d2cbe7d39096ba618b792c9d5e8d69476eff8010b86977e13a7604155afe487a0fa3aba8e914ccaa4ada30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8abc04f61b3571457df33e2a0a499ea0

    SHA1

    4d3cbf3d0900d2d69a0928b6543bf9a43ca47e01

    SHA256

    d03d5e3d79aebb3cfe127ad038868e792c9ef0f45fa3eb886672d867d46676e6

    SHA512

    f51239adc9aa432753d10268c5ebbad30b60faacb73874547c725c182e5f5dd56f5b566f0b0d4f04ab2b92aa067b6040eccd64e593faaeb8422d71e572b22160

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7302a79f61a7c27cf09a8f76b7d13a9

    SHA1

    5640abed9e017524f2146acec93ac58f22df06f3

    SHA256

    aaa72fd97475e0495a468013c399deb03cdd6ed11c059bf9fe9b1f53e34a6980

    SHA512

    2434aa9d6558a90129fc46619afabd8583cb59221c08dde15d5f3d7a7bf4a2218af431f4dcfc331f899eb6875d514f07f036387ad88de642ac5f2ccccedac63f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d685b8c8dc80096a6c298146c7ffe2c

    SHA1

    2450254df99b9fee2703cc5f751042454c453c2d

    SHA256

    249bdd44646353c308580228f4b1852a2312bc4ad5676fe4a6510c42515931cb

    SHA512

    166189e2e9a04a68b100492b473acbb9960a34a48d7ba0c25975089c0cee98379657ce0fe90feedfab36a68eb36eeb8d7110eb194e17cbf63ccd483d6d3c9533

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1cc55d9697a6c73299eb994cea81726d

    SHA1

    4be8d9dafddc83abe8855c9190cac87094969b9f

    SHA256

    7b187bc3c504309e7d82390e45a52045fb1f4e4d1efde5132845dfaa1caf650b

    SHA512

    b04bce9e1a723039437a181a3da6adcc7b3d1a5f4af1d5ec09348db6e0e419fcee4cdb49b517adc17ce08d9cb8865af3b8349c2cbb524f953e8b718fbca992e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66c386866c4b83accd9a5e54aaaaf7ae

    SHA1

    0e624693c10db6d919587dcb8e79ef14de938b72

    SHA256

    1743a976bfc53bffae9ecaf56a7ed8bfc8ab33de465ede8a4375758bd7bc6873

    SHA512

    1c2a3b6bedd9efc826478cd64514a82981f4ac3aaa8b06698efaee43daee15df1a057dbcf7af3e21757015ee092ed8970926f3ac56194448d794e45b534e932c

  • C:\Users\Admin\AppData\Local\Temp\Cab1882.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar18E3.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a