Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    03/05/2024, 15:00

General

  • Target

    10cad9e01782958d57af0b53973a7276_JaffaCakes118.html

  • Size

    214KB

  • MD5

    10cad9e01782958d57af0b53973a7276

  • SHA1

    5761689e94ce346ebd6e2a8ed97a00c2b95f35bb

  • SHA256

    5f82877541e091ce2ae4abb63f27c3060d63edab57552671c249bdff2768086d

  • SHA512

    ee04cbfb1a2041652f41ea83111059d57e3f8285c6361d5406222a39dbbb2e809a3cf8c30211c904556556c40e6000fa94cb5eec80196c3a79520529920fd78f

  • SSDEEP

    3072:erhB9CyHxX7Be7iAvtLPbAwuBNKifXTJeb:mz9VxLY7iAVLTBQJleb

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\10cad9e01782958d57af0b53973a7276_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2972
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2972 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2204

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    899e453b3d08a0cea0d8624ba8be0b8e

    SHA1

    d5c4bd42ebbe1f3fd5743340b7696ca483cb0281

    SHA256

    4ab0fc10bc5019fa1fdcd791a7716e807b59799a87bbeaf76cfb184a3e44651b

    SHA512

    293b2a808dc0b017d98c8ab65b5748dab87be0125f87e6cd1ca4e4db1ab0ac0807fac3a5bb1f2d509ffa80840c651b0ecba86abd0cc06f42c4ddd0813ff65ac8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6cc879ed1967ff28162968c7d972ffb4

    SHA1

    8a4bfea4de884cf916c679317d115e165ee4c700

    SHA256

    c6a1342a2f72539bf8d4974dd1f7b748d1bf1fc8f3bf60e5669ed7708831f4fc

    SHA512

    3b73d2bc07d0cb95e0cb609e38e5eb12b12377608ac445336f82b213e48539d0ccfc8743882d59f81f3314ad4f5ddf6b3f8e85e2b067b0e914b08d47d67ed75b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c2749ce16e0fb8cc9c03157ee31637c1

    SHA1

    bf494676fa55d38b292ead81a2aea79e6ffbb1bb

    SHA256

    eeba2caa53ed0e7c06dcf57fce82db0ade18c8c383252f7786cd4e503c26ad81

    SHA512

    a248d5b4f8402f6073b80971f070df9e837d1e3dfb0f6a7c6303f9e2efcfb7c3d7d52be2e50ed7d4027635301bfc31ddaa51d5d0458bde8affd97d8a07628bd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e7d86f7fe20b37b58df934d1edb93c3

    SHA1

    c29faebffd5f900ec142920d8cd9db767614c067

    SHA256

    b230366d2ecf2ef329cbe8abda8be44aa853f2ab4d46d304cd01d7d04d8c93eb

    SHA512

    4c78e3ced6e8b06df108c0a143215969cc8a475a9dceb12d487ced62f2487d6ad1a5414338986f8e5562454a2810f3c1e699ea6fe9e1d7298bb0b6762852aa96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c1e69bcf65dad626f740e4d1f0597aa

    SHA1

    27dc1514aad7f00e617ad5fc534d45421699a5d5

    SHA256

    bb6055722ddaaed49aaecc85473e4329b358cb90c46cb924295b431f8d56e7aa

    SHA512

    e29661d5bcc02c2a1f0110398e34cc4fcfd1d916a02d9be02c9553566e42b741ef8e2a0c31b0a320437444e935231f7b9f24a83bd8b41ab7a6ca92ea65e5899d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4932e61bd1891c832f01cd3c27899a29

    SHA1

    12ce6b294440aa0a77968a74b7a92e3636e7fb6f

    SHA256

    6e55eeb23f04246aa1fddcaa5c3066b367106a692ff957fb1a05a2013594198a

    SHA512

    96a85999f40d9b12bed114b35c2630102879063aa4979a0c19fd31bb8707ca2995b564ea7d5a89abebdf631c2f5c8f78e2241ede3858f994541a5f28c4a40bbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c01cf45725c7e0aff17ca4fbf33109a2

    SHA1

    33a91135f44e15fb51d011c7ccbf176625422f4f

    SHA256

    33bc6e1b774643f64f860ef2dbb263c0758d197509e5561571bcb78004377494

    SHA512

    0d72d901b161ea86d78e9f3d0779dab68c6c8d99f14d401c03af77b2298875b5ae9c6140b6b8101aedbde4a778c29a710ff812635aadb4c078a06c33735bd422

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba22597a1b33cb2eb1a9f06a684a213c

    SHA1

    623cffca29ae01207341e59b2f95dac55b585046

    SHA256

    043ca8e3c922331a8d32f3266382c578224d8b6a6a8d0367eb7854f3bca8cd7f

    SHA512

    031de9351da5cb8024dad48f0a22eceb7426351d51228afb515cb7bdb2b33408580c54069a3b0983ec57903927a8af49dca3cbb23fe53a5a6f98cdbe597364b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2772f32e1ec8057aa02034ca0dc2e14c

    SHA1

    d6925f54e4d4ff93ce929db39b685123533b13df

    SHA256

    1b42852ed52ac0c050aefc9da7aa72cc2b3e7522151792751ff3d8c3d82c581d

    SHA512

    0c816c360f792993d966f40236ecc5405ce1c033f4267d8283c8756c6f38288aec58534a72002b9d42315d3d0e321ece6ea363f51958bf7d7f4e99392928b3dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2cf2c910b9bf1682ee3cc9ef1261fafd

    SHA1

    e93c926782099fd03dbd0c05c9d5fddcaa9289a3

    SHA256

    2f12e62222949410a99bbf9cace26c1ee0383f45abf031e7aeb21afaf3376aea

    SHA512

    9a0791e699f46638ec3f91a0ff92af472e75a6042fd2bcac870ed8198ce0d511a96af41678c4506bab2f5ebe7afe5875b46d1257c5afe4321070a534647ff86b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5f67bd5e7d222a57d425d21cd0a5405

    SHA1

    f4257ad9f021a234debf16e36b32ad8edda17730

    SHA256

    76a1ed1ba44c8e10443117d31fb7f92feff5017d40f7596987ba08f769d0efad

    SHA512

    d9595d30b51f3bbf78dedf01767c660d8727cefe7634af8430aed8607a8bbf48c89d8d16d91890633bf1229d340a91325d4d4520e13dc126a362e6c2b376ecb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    306d97b6e99c794097b7dc91c66b4ea0

    SHA1

    ed310e99d22a919a17ec15a5803e07368b97daf5

    SHA256

    e8eb4d4c95813fe0ee620c9666ce5c7dbf7d2fcd055cd34cd3ce4e7c7e998cb9

    SHA512

    50f767d612170e84a6fc487f365cd62b39d1fdb19cc26ae217e139d2d9d3a2fbeb8cd52bfea9164fed13372bd16506b49e5a1da5a4ed773dc6f86d4d633a5a44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f492cd868983bb2708c8d6700313fc6c

    SHA1

    306e4fe7c68ee4ef7a1a7ec6d04a3e37915f920c

    SHA256

    94c67e9b22ab48bc6d57b526625d1a0c967e5e07c8e3ca6658043fee1a0346ff

    SHA512

    48976a326ac849f8cdaea737077f7e8ecdd35e038a1c3c29489a15eb9c9e1b654a436746114c3d422bf0b6167ba3ee5795f901ad7bc1ca22c5b427e1a9a8dc97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44b1776cc0c8d2fe4afa2aa50989f4f3

    SHA1

    416cf8de541c09fa480ff5a97ab69d720cd3e6e4

    SHA256

    50b07b9c75a203539f1c04ff46de158980b4c3d1af91f8f46c99882f0cee77d5

    SHA512

    4825f431bdc085817b07572d0dca4a0a19e6f74836eee713892eecf14e6568e25d86c09522e42d06fa175238fedc24a6ce943b9262035c0afbdb5aa4ff847f4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    536ef68ce70cb9e03da4d71aed7b3dfb

    SHA1

    cf6d36d1d70c9f43fd6272a3c6a9a688bc4142d8

    SHA256

    20cf63fe52e3734c3716c06bc3fcad6f3a3837d4dd27f346c209cdadfdaa1b6c

    SHA512

    35d54b2a946063586287211c269e3fd1107312c2a0c6f3cda266fe0f7beddf06a3b3848f4f6cb6d20f4fcef6eafc7f985dbc075a7a3b11289009a7d91777d337

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c429d6f8567bcbb4f3a2e002e02290b

    SHA1

    07a8cadaca2dcf332a2a6c5d23276189782e6ca2

    SHA256

    c0b9da7cf6bf3fcfadb192eb3b3a8bffe106ffc84df129c8a8ec0d88b0f3ef21

    SHA512

    ddf1718f230f618dcb53acec78054da33dd0161d9e167e726e032c187d796c40a89308c05e047454e7d08eca758a5a35e90d5f689e42a138d7c149517c91a2cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c2a805f15e4429d8cc389428b0bcc9ee

    SHA1

    9ba3635a79bc42c20fe560cbf149cb2d52684ac3

    SHA256

    601995b6030598a238a00718c682aa71bbb6d5b1e117f19166df1cc6426fb2d9

    SHA512

    4e8a84c1060f1a7a33da526795a39677d9d39a5957e51b41fa71ddb0c8c4f1d9d9c7102a910f0890eabc123cae75aba053d9060a6685b609102127f5eb2a5d7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3be72ed0275e7e1f46533c30742e55b

    SHA1

    c6d3583bdcb3b06b57f669ede41aa25d342bc4e7

    SHA256

    8ea223e34af05e36254ae015164d1926f9749df0b4d560889a51ba8b4fdfd28c

    SHA512

    0f2d3a3fe83d1d9c57f113b38c5d975ff8ce5fc85ff775be1fbce4b64f8127bc2e4989b3a08c346640785194781fa88a6f55be0a39e406df3ae06351548e3a61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98b853f147cdd6654fad97530e08c9b9

    SHA1

    28eb5ddd1d2ed5c58ccc0a82819340e32d878ab7

    SHA256

    62861e6dec7a072146703203bddc07205039be76d4cdb27082a1e587e73553d1

    SHA512

    56f6d2186ef5af9c54a443da4a0ab730784210b4fe942f2be07ceb8cf75f56d0d3713e588d83288f8ae43d740d29304cc0a7bbd0ae16f6a5a74d0a240ae419f9

  • C:\Users\Admin\AppData\Local\Temp\Cab11BE.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab128B.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar12AF.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a