Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    137s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/05/2024, 01:31

General

  • Target

    156131a8dfec48a6ba7409bc95820eac_JaffaCakes118.html

  • Size

    169KB

  • MD5

    156131a8dfec48a6ba7409bc95820eac

  • SHA1

    f9a5a2f86fa63df9bbf04604398e644eef265625

  • SHA256

    32c7d557780cc0f57304a2bdf0788af8c79dd25418e39ed1809b7f67b01902f5

  • SHA512

    20075b744590046542059e14182bdba96e08d9184a3f3d800114aff331e909505b6849677f3a5a76cb64c8458c39c57007e1f38d00e974c5725965687c668c88

  • SSDEEP

    3072:Sc4EmaHARNN65lYEGx05iiG/3SKzWkqFj14ngiXYfvo8Up/ApDATyfkMY+BES09M:SlEmaHARNN65lYEGx05iiG/3SKzWkqFv

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\156131a8dfec48a6ba7409bc95820eac_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1300
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1300 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1312

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd81393086034dd93c1e418f6260bf1b

    SHA1

    e76efb1f6cdde93e3ab0960ca68cb28d1d5224e1

    SHA256

    148c77b370895dc87da2e631c7e390ecec07f3527597a2b67441f5ab84c0ced5

    SHA512

    8fa4fef263b0760036f4efc2eeb60e1a596701d538d000f0a880b58758c7813ba03151995d4656127c9d16e3350051be0d0a1d5e590142b35ec9672629c74210

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4631f8525227d57259bb96db8b8bb2d7

    SHA1

    08cc393b94f94d7f0d46337f880b31e4a77bc30d

    SHA256

    796567d080abce18a09625f0d05a88f75b2afb468d4890233a5d133b513165be

    SHA512

    ca7a091cdf37d393b8a16af3cbf2a8b0ff3384a68475161f7c064fd0f90fcf0e4f9432b9c2ac38eea179328ccc80cfe47c48ca49d4e2b6056a551df7d229bbf3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ad78643e55796b7d6515a6ab6c45511

    SHA1

    d545cef52255ba417ab2adfa044f626ba48444f2

    SHA256

    c496690eb02a76fdbed132b203329d2f6b42d0c1709974dffba3e632911d3f99

    SHA512

    7ffce655288af663c2ed429684ddbf93461388ad9bc4d15a318175bd38e52a9d0107ad5fea1a002ddaae66ab407388e7f3fb54f78483400389115aaf8c253403

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef68467d699cc5e13c27d00b7ad73700

    SHA1

    ce681c7cc259d5ae63d408274845db9f6e277ba3

    SHA256

    71dfdb005ab334572580d4bcfb26d30c60b5683ff9adac8d9bf7634e42f3e327

    SHA512

    af8055f9b79fb1a062d628ab477ec47bc91fdd88018297c9f11f6eb512a6cf3464291e7e11c5fd22ed61af4750a0ef44d9732f483f310ff79c6383001b5ad418

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    535210b4a9a388391f6408d0a6e1c62d

    SHA1

    3a91e0394344b9678519b3822f42cd765aac8cd2

    SHA256

    57a128fa03a492e8e0cc279f050927d6900d8f4f45fac63210d3df8f986d5047

    SHA512

    1e603ef82c61d4514a593301a7f501867af44ddf14273f595eefb0777cad3ad34af155be87e47eb6079c5ac0cedbfd2c336d80c3217c91df426810ff875f5b1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb1b216419da6605567be3dbeedb0e33

    SHA1

    6a09e1fb6dcd0ab2d50d18a6748045f5c1606e3e

    SHA256

    d7d1cd9e68420f25cc5117aae33079ee97fdbdcdfbe227511996f6605cd96d76

    SHA512

    1d6c014715473a5e1e88abc631c54bcfa01afae890fa79fabd1d6c5686bdbce28e5a70cdc2e6c95b9eb2ff08b0eb689d3b68caa6c47abc18a139faf6385e502b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b718887e5dfb9323348d04943d2dad0

    SHA1

    da7872b67d273a969a7d43f7f709909acc1ce87a

    SHA256

    5e272eac712917167c3f7cea2baece415199b315518ebb4ff2d37b60d91c680d

    SHA512

    7ce7a73167e0f0c2876866e6b579a9f728cc0fd03812ad11ab5d345c77e4d57a66a0552dea96ac7c4ef18f32987a810323a0397e3fcdadd972400b5e64ae1410

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc2e3042e7d51c9dae55f6689995dcb5

    SHA1

    da5867650c2c4c609a123a82f7b79f36069cd42f

    SHA256

    d6bea56eb3602c40f65598a27b6c88ac2649ef4230113708bfa5a3261908dbeb

    SHA512

    47115f667262a77dad5461daf47dc2fb931af531dc31b81f7e6f418aaf1b7e0b690405c534ec6aa81fa60164e478389030ad1ab6aff45419208966dbf214f086

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    583c60c9d47d93a10e8f64fab208630a

    SHA1

    e61abe0209783e6bc6ed1bac1377979a0829a104

    SHA256

    cf5911d626f8d95be1b6808eb1b873fb979f32b4f9f30c09c2ad33b3d4ab2ef1

    SHA512

    b6e7c1f7ea8af4b0d3a50e3521d2658547b43808093a35164ab02c05fe8a818096775fce2ad479b4bee365064d9b42cc81bbcebbd7624007b2485006eccaa668

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    26a130a83b899ff9532e953d82424e70

    SHA1

    f5cbb8c3d0ef9bf7b11d78fadbb645ea560b5770

    SHA256

    9f3b12d5f35cd9dee93264b26382d0895f8e7a684b1f2c3e974b547a7acf112d

    SHA512

    0a0d4e0a480eef39ee50d3428b37670efea5d733fd762860dffa5ad084bd5f16f594de389bfe8b8a7a16ad2e95db5e4609b8f66036b42ae2930f5c4fcddc16f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eab0bd17683c6c9fede1f20fd6263dd0

    SHA1

    4b92d37ce688b75278deb18da7d0d24e5c6924d5

    SHA256

    9af3aa91282a83ed451000e62279213900ec56258161748dcae783239fc59a68

    SHA512

    85e4768825a6d6fb98821ebc57c630013b0b0296ca182be6cf5c88f3e08bcf6784ea59b3af95561955d25879cd33115693c9de9bd38494a11dfe24a55195c5b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98b6e6eec0f5f7f0cf92aebeec890343

    SHA1

    644033134dce647ff8bacfe3af403acabd627650

    SHA256

    21eddf16626b05642394248742f316313cdbef9bfb337436818b55c37df446b8

    SHA512

    85562f553df385fca0183d0a77700caa75c2dd6722e064ad50a7f7a3697e30d3863631df3092027bcac5cffb4547738f97579571c25db36a82da8705db4e0367

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9547140c3349c0528c004e46040ecec

    SHA1

    e1da2ddd50dce92e1fd6f1c48aec8b94d479d1e4

    SHA256

    72bb64d27990c5d29fbbe932f613de093239991bb5c693dd16ad400c57bbc7b1

    SHA512

    3237a2af2f64386f5f92cfb7feb02c07ce927c2432055479bfb1891aae4af4466ae5aa1d570335deb5d9b301a06ad9c006ed54efbb641f830cb404bdc0496c17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1574a961989efeb97351f1e1eca8f22

    SHA1

    1755f5bf7afb8b608d3e2921f56978374f50a0b6

    SHA256

    db611970a0b2b6000b582522a0f36f4cacc941c4ec2b85fd8240c5dd40bf2140

    SHA512

    4590a95cf57dae34938cfa19beb2465193ca0b97ec9b6aa19e6e99bb7ad1ca61704fcb538d6ed0491a544aed2799bd867d86f648560fa2e8bc3ccc93c224d619

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cfb5e702cc47b7a0987cf2ce68b0d901

    SHA1

    fd97c5396d667f8cee71a00553310f0e5d47167a

    SHA256

    3f67ba931b6ac3b1aa1d1f935215516270586399cd85e832dbfd300f2e33de1d

    SHA512

    e36f8d43827bdea3879ffe22445f54601235396187c59b925417888b5679f07096b85793861aa9d99505eedb225451debff7d0d17c15042967f3b5f0111c6361

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5d7af31846980f3d329acfe32a44c12

    SHA1

    2641f21dc0335a7d6f664ea55b35e19faa6d53e0

    SHA256

    10ba9784b4541fedca5e914c73d6a4dccadef9e1e75f452050a4ad9501580c8c

    SHA512

    87f949f9623e8950a7564535a41207407a83e89e92ffb7a83c6edc9300b5669c947ee6f46d541dc738050cd24cd0a99b0885d5f045905dd7a4cefad79214ddff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8141a4de0661bc42bb9bc73e77a9846

    SHA1

    5e59c0b01e272b483d523a97214d4dd544abe9d8

    SHA256

    f710fcf65df3c711ee5158774e99c134489312f41ee32d5d6ab86a171866a785

    SHA512

    55e70cb4a0ab672e0ea885f4a162baaa92f20fcd27e83372738e38068c0325ae47809140ba4717cfcc7d6bfa469822a0e835c29d25497127249fb583049476a0

  • C:\Users\Admin\AppData\Local\Temp\Cab8E4B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab8F58.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar8FCB.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a