Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 16:41

General

  • Target

    1398df9ec81c165a5f30fb0ccb7d77bb_JaffaCakes118.html

  • Size

    23KB

  • MD5

    1398df9ec81c165a5f30fb0ccb7d77bb

  • SHA1

    277588690331eb23ac8a58c3e01eec55efdb8d2b

  • SHA256

    d4c84be544b0c307ef66906a77a6bec3bbb593a286d3ee53eab2fa0864591f8a

  • SHA512

    526d734be97db58cd0395c9a7d4ec27ec91406b255f00cc9e8f9e8bf1b65c4662cafb3c3981964b17b5cd2fc4be6468f5f39185a379e5a69e398aa7d230ae47e

  • SSDEEP

    192:uWXQb5nEOnQjxn5Q/bnQieCNn9nQOkEnt5hnQTbnBnQYCnQtIwMBiqnYnQ7tnSYr:pQ/lEM

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1398df9ec81c165a5f30fb0ccb7d77bb_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1348
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1348 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2012

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f483aada0a21976a2ef3dcc339472864

    SHA1

    ddc65290d0e43e9ea53ffdbd5a2876d819d61e84

    SHA256

    7014c93d2f3aa2d59c3522b9bac0d7d9a466f330678a7220726ebac2a473a204

    SHA512

    fbc8d9984a96ab8326a1cb1ca6a3af056c9baf042f8dd9caccb76089a254d94d219b1f4635c661d00f9d55a4cdc4893d93c3e239f716161cbc6e5e011ae5711a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6e807bb78bb56bb10e396507554a187

    SHA1

    56d588417ffd77348b7e282dcdf6bd3c41f970f7

    SHA256

    b736de0d38b778157a3b2176cd4c037da1d730373da7dab08db5aa8702f914fe

    SHA512

    d09809ad845c34364d0453ae7788b7d555bf0c62b2780d66b49c1dd7e70b0bdce1bd21d7a05b5a373c14f15b6fe0c32db0c6f4f82b7e3f5c5a076f1b1c7382ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9f27510b0341b455fa5f111178f07e0

    SHA1

    089fe965a8dd613928491586adc6812d2d1a4c8a

    SHA256

    8e901a46d1806c41a59951b5c1c2bd7473fd3ae0f099b876565fae9099904ddd

    SHA512

    a8ffd26c2f6d3c93c5eacb6388f6fe5dc0afb5a7c7967d4937d40389b50c999a5aa29a693408c379d3a025bd32959e8ac34a0151c79dd0945ba6cfd4841962e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    766671b7d0abec90eef0681d1b0ee029

    SHA1

    b15a27690ae239cc30072795c0a092e3ad6c7f93

    SHA256

    2912f513a7c407bdb4c65c5866d5377ebed53c848ca0eacd876a9281fbe1d410

    SHA512

    c71daf4fec2976dfbcd0821782771ff093196c373155101cc7ff11ea92f4960f80276d12cf11ba13ef1c7f06fd57aa6269cbafed10f351303c782628f28c2ce4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2087ac4445efd07b79ceaded94922752

    SHA1

    d65239d3d9c6ab1de556bdf91b8aea964081ceee

    SHA256

    ab9a012ba2580c88caa90b85cb8fe98f9dd2f6f587d1683bc4320abbda03c8f1

    SHA512

    973e0927182278f1c16da13761fc9ba52f3a0a06dcf7d68efb70c881e4ae76942350c49140601b6859512aea035db92c22173e759b343d9ec5a8642fa95b20c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fd3aa4c0ad97a02b09ae0d03cc400be

    SHA1

    e1cb991d91a104ba058c6cc5916ac07e64bba747

    SHA256

    2ae9faae8239af8546bdea11db015248a527ba20c7d9df5f1de8a642e11ff371

    SHA512

    2e198b94cee085d1f52365ef8d8e7778a2b4ad5849befb99f93a0b6012693bafade46f6a5fa4452079dd867e23407046442468ef83b911ee0355250243542def

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f234ec24862a66baa499c7432e118526

    SHA1

    36b863317a430947ffb78fe1bef315d1648461a8

    SHA256

    a025bb1323e2f88de0ef77be0deb169ba5cfcc40f55645a02ca51fdcc5efce17

    SHA512

    dac75de330845d2f873104eecc9c86e2878fd17ba743fc3ee16d358b468be3835869119b9e6e2796c9316f499cb91d364f37a9d8471d4bec5b4a089be4e09a74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ee2a20fb8518b9f8c0e7762ac6c384e

    SHA1

    418947f951260e6e30a815232d4befb8aeb70124

    SHA256

    bf46dd44eddb9f4c1f5a0b01d2ad92556802551fad06557a67478dcba83e2b47

    SHA512

    5492b8cb8ee06f9038f820e2b47559b3cf32b0580aaee3473dd915a2737ab3429b2b61a799d11ba6475a13ee09bb16bd86288b536d30171103b0c9c9b0d1b0ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ee3c724be0a14bb8383700ce1890f45

    SHA1

    22d155a50da084e90c6d93525354892d9d9b6537

    SHA256

    4cde1d7e173bec583f36b01a1e189114c19271848910d6ac35869cd4ee7208ab

    SHA512

    7e619d602f8a0aa523c991d2ee096c13d74cb576f52889c2e478e36c15286dcbf3abc18ee57c135cde6e96abf1664cbbefeced454733ba28d4af7d75857f4518

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54e44503a448703c4e60a78c6f01ffea

    SHA1

    e785d1e909850496dfa4d1a3805061b7d93600d5

    SHA256

    795be64b08d3ba642052c50aac6e0945f0d0b3aca4d4a9024999f0eff35cce55

    SHA512

    74278084d1033f1fb344b798a1901db2a262ae41e41bbf5c843c86d6220d02504e91fa5010009cdafb32b282ee3450e41b94d7b13c1e8ada6ffcea9c6e4730fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d4d7034db1869810faf3e5230da76e0

    SHA1

    8bd9505fb630c8e1a821458019e839661128cfd4

    SHA256

    34aabdb9be46eb29fd1aa90bb3e06980dc59eb42047a5514112c053f5301c15d

    SHA512

    7cf48583a414cfcc420e276c4641a1ea3ea73813147b90d4f0dfb038cad70d13ce680f7aaf70a33aadfca4f9e81cd951a1c22bba63a890341490ee78cb49436a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    821be3b21c7bced56a2e805389230580

    SHA1

    8871b27556734548831de8e2f8330d5d0b422cf6

    SHA256

    29e091c21eb7d86f7ebe2b48ef5f6768aebb850376e2e102eddbc1d34d48f6cf

    SHA512

    85403dd098e49d2893457f6bb747beb967b5bb658e52603434fcb4f1dbe4733724d0e3d93ae63604d3f043cdcd3a8512529f95af288fa0e7b8ab6d87ce10bf9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93cf3a6f2f2b73b916e0a2faad13c02c

    SHA1

    5589a37f8b867f25ab5340e9288b64a1fa1e37db

    SHA256

    d4a1cc5a47e973380e5c259d5bfe100843988638f1250f1aaf66d367520dcfc4

    SHA512

    25d3accf33b6eed2d794b314e16b7271415fad886a344e33fd91ba5de07cd6bdd499e604fbc8fdf1145a98eb599719d353e19b8c9cf7f4bc618c1fc213cc523d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0cb3c5af2d3d79d818f82a6d80f92c5c

    SHA1

    4ff6767d0a40f2bc2cd226e69a7680142b2af425

    SHA256

    aed92d48c33d50c2aac518f2e1d9b5279dccbae4f84b24e23633491e24662c68

    SHA512

    495b8f9a5aa87ae9a53904739be41bd51bcd159158d7baa64a21de022efe137060dfe76fba8536a15a742ec01685b57e2b6a4b39407b0cec9c4e745ad290cdbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9fc0d0a3049a955e2bcf355f849ec67

    SHA1

    91b26c56877b402806a9b16c2325c8c121e833a0

    SHA256

    a555798b781ad5bf2eab89e8230dc609b4cbb0ad60f27cc0477dabd807104c79

    SHA512

    2f0f7fec064d8403149d4966c433405feda247721fbc13a045aad8a4591b4f33f8eea9777a5c9ec0ce41e2110ef928f52b5614b951cbd4fb7ec1c6af2ae8ab61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17d744fb5bba08e44394f260d5780a96

    SHA1

    0214f7edacd84f17d15e69716ee82c99514fd38e

    SHA256

    8b8d34c28eed9051b362accdcb18679ce29896d1bfa8c44354577144969ed191

    SHA512

    d685a5ed8301a04c056304b290563cd45815d75f4875d6d208da3eead24710154c8bfa51775a0ecc92b47006ce0a2129e8f352b40b96f1cea1975cd4a34150c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e0dd7bbf0624106cbfa5bcb295a72d18

    SHA1

    85718cdbbb25da21247ece907237d74be57c0ca1

    SHA256

    b16dd3150d4e903282f6a77c486c23f6e2060cd4a2054c19f2c1a15b54b29a89

    SHA512

    328f8a4cc504ddfe17b605c31805031a518bf4311de3ffcb8d88257747171143a042788ad8d4e9b6b6bf06a884a43aeaa6b81aaf29e9a1820535e94b98cd6c74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8fef7a3cd84ac35dc937ba69025b13e

    SHA1

    7886948d72e0408bbff4f48777224eab6c8f925e

    SHA256

    6efa989ca68bc7c2b75324e7834dc27bf333ff7055028d337f55d5ce3458c1e7

    SHA512

    12ab0ca79d1daa4d642a263fd1799f0dd75c9587cdf4bc6082c6e6a97bd143a7b33f9d93781547d573ece7c5efbda801719dd85c12783010df6c78ebbe752dd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d9e2cd6e47d75f60e998f3111c0838f

    SHA1

    d6c391b0fc473d55398f2ec12489727344ed2c1f

    SHA256

    55c14da61baa6905536c02b1396f111c5ca16a79348487c3004f0ad800ee58e5

    SHA512

    a1bf084d1ee5f78d42d82c6664311317fa6d8ec88a9e6cd6d4dfa1deafb1958c9357d9225b449b8e0c23b955d37d90a31b01667358f33cfe13c5b03b8052022f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43eeabf512940e7d5a5f6574571f6fb7

    SHA1

    10c754379116a37218c5d92b42baa53ceb2f8461

    SHA256

    186a2dbfbce0c1de6ab1b926ce0f20bfe49674be14efb68425472746f196fc73

    SHA512

    63abdf54ce9872cee0653f4f83d88b9080e5c540273beb12ffa4910828b7caca855bf843884ff29c504ff4aae080e72baade4bdcc3d8d48fb471910cdf31eed1

  • C:\Users\Admin\AppData\Local\Temp\Cab45B8.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab4687.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar469D.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a