Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/05/2024, 10:09

General

  • Target

    172da6329b84b15078918078899e571a_JaffaCakes118.html

  • Size

    152KB

  • MD5

    172da6329b84b15078918078899e571a

  • SHA1

    5c5e56275173bbdb597376e20c92176a0d66219b

  • SHA256

    651c1520f9eb62a2f1433b6b494d774fd891aa5c13a3161b89321e43c21d100f

  • SHA512

    3068f5c014005b2c9dc27d75b9bfee38446189049f6914f545a8c927d16b01d69d30075c4406bd530780ae0eb8e1eaafdb356f9e7838a0a7ddab7d7953e119b8

  • SSDEEP

    3072:SPkaqU06/yfkMY+BES09JXAnyrZalI+YQ:SPkaqU06KsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\172da6329b84b15078918078899e571a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1976
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1976 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2916

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73c3c9942a21cb5ffe5f331a59f5f0de

    SHA1

    e4ddea5f342f127fdc7510535f351d513c7b1d60

    SHA256

    46ce40fa5cfd968eec9f6c04f91ce6a72bf148f5a5de47657695392f60e198d9

    SHA512

    3f4eff255c0620e44249b836fe4e856631b7d5fed2cdd762959cf52b481080d31b2cf9dc0a0c1a8e4512a42041b0f660f132ed462df24918de61b9f852d0b340

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56ce672c25d5dd2b97d4b4f25cab5b1f

    SHA1

    8c35ec0d229b322d7d81e2bfc96c8055df3e455f

    SHA256

    483a5e16307391d7a22f11af1ecee61797ef1c9d9bfb0281a49197ae965eaff4

    SHA512

    1955308e90492b13ddf7ef9770e21f52e3dcb7a345a160714396b94a4bd2a4c420c537ef848ea637d249e8593a607ea77f687836088626dba5577e38d2c31d37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7563c2361951a91c56a60531d53454fb

    SHA1

    67d827540928f1db88597211f5dcc0b336d7033e

    SHA256

    e83348cc35dbe7771d4756e7432ed010b912da8443745598b7c28c8674f6349c

    SHA512

    f432caf91f7bcd55b5464be636c00f4b3f4098575b17b15cce0446bb428a7c05c0b116c042f9f3637a4750a5e5e7f31123de0d058820126b38fbfedd1307d5cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7a02b7648840c9b5d566d555ba260a2

    SHA1

    cb942491bf11efbe615027615f26a03a273d6ad8

    SHA256

    f9f52accdb249e1ea20a4b70e544d0852d5103979c0d255ca07ff83d8ba9d2ba

    SHA512

    568ff67d7821abda1b51ef4570ee45821ee8c6fba52812a7aa6559f98ccfd5e1fe70b929cf68659a49a12a59aa8cc443042818428231eda41679b6e690bd74cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea4b854146197fff4b6560425b24400c

    SHA1

    c94a18e42bdf3cf20fc50caf1b68b636da758f00

    SHA256

    03100b7e958b30677b9b2851ccaff9a8d4ec773d12f020b444d99af4fb2838cc

    SHA512

    51fdbd3c030ef61b88871533e3e055b627c757280f642cbf6696c7816332ffb8575896de4d6e1fe55f6bbc6853cd067dc8532ef660bb7195bdbf4ee985c6d402

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c012f5476e5a0eeedd0ec70985dae279

    SHA1

    954abfca6a6ae045e113119051c1cce710f20a8e

    SHA256

    64daf4a8fbb6ce68eddc0e87f1adf1112cb6cc90c4530dddd3f615a29ec1c7eb

    SHA512

    4c26fcb66be7cb3328c765e63366944bcbe34f163ea523dfd9aa7e8bfc9af5d3da9a4980434c89c5bf6e5d4476274a382c9cd89f609e261230e158cc1ef19164

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13ecc44604da7a52941a7cc854e11da7

    SHA1

    e3fd6dffd4b43150824c586f72376c584ef53e51

    SHA256

    be3690d936f769989246be7c202b45e929ce9ec875670a1d3bb93796e06471d1

    SHA512

    2b58bab0e3e60049a6c82c137d38a359fce6b892509e26cb771ec4901843e6a6eb9dbf95d144a4f5c0d197e68a87b250f24c5edf81f7ec9e50b247aeba373cdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23c4272cfc2e2563f9cdef262a4194a9

    SHA1

    9a5bb2b40ac4820f467b7a0c553927fd88b5eef2

    SHA256

    ad81d27009fbc58fc626f028ae3b45d6e997e29e65c685555d4d8563c3045063

    SHA512

    095010211c470ca9fb64f33899661900ea2d60ebd503a62f6d7221c301cc48046dd5554eb86441f495e8cdafe2f8eedbec14ffde028a663b1c7382398b0e68db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed23a74594c4fb80bdea27933b165c53

    SHA1

    a6805732cc3ca5aac28eaf38f1dfaac56ae09a97

    SHA256

    d525ec0692795e595418d3a6b0c932e6977152d502e5a2f0e3ff181f939350dd

    SHA512

    1027787ab7b66fce96737e59d01e41555079966da752d08209fdc4d601ef233ec80e174896bd2b1cb8a6e6f36620b08120e41ff185e8901c7b6e7b5ecdfdfc83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    efcc3a4c4457f4ddf199aa06025f3f29

    SHA1

    834859f406a619a61936c9b8e067c4ef9a8eef90

    SHA256

    026e5b057f664d7c660959ff2be3e49f67ffd49b56e68fb8ff90e427b87e30f8

    SHA512

    a2bdacc75dd5587a2ab0201ca669e3fbf480bfdc3fe84d96ba77b1f00c41375bfde095742f439d8ab7117e17f9d419d2cdac60f65f1a3fb4f7f4d8e3378d82d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dee6750853dd69ed9dfd959c3e9a18c3

    SHA1

    3f6fa1335e551bf6f1dddf57b10d62aa750cfbea

    SHA256

    3640109f0ba0c456e2629606989cb1f3746136daecd015d6c4ed516977dbba10

    SHA512

    725933be9a64624aad8ec8f5f7631797de8821d3ff65c7123b72d399439ad147ca13397a85989cb330afa86c3e7b032d52460501103746b2161c2fa8ed0fe009

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    caa73f05257025cbba02b69c48b6d2e1

    SHA1

    128a0f50d2df54641c6c755c5c1528d5f2be3142

    SHA256

    4731041d05009c711a8f323207640e3fe2606740153351f9cbf356127a1383fe

    SHA512

    af33326915f61bad7ea7f0cae7c3abc6b04fac21e65f32aebe8a204edb8589f24d2cb766d48da9f3588db689aaebdbd799699f086e985f13ff759496bf8cc000

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b008d6a5d3ee1e55b7f27ea9ce874d0f

    SHA1

    3ba4975eb3cc9ec8d21d6367c3fd9f904428ac06

    SHA256

    11cd6b554e6cc7bf1126b400a8b4b70bb501fcf6256f0f8ae57579f903db3473

    SHA512

    21ce345931f5ee80f2f45f2dc1b81e8e1c0714529648d3645708b0e017b870825d4e1b83c0363b9088c0d7a5aa925598371e587bf7d5a716284e9f785571fe61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb2fdb00e087b8b8e95ca71e486af4e5

    SHA1

    3257815cd7f67e15fc27af216324836bcf218673

    SHA256

    a9c50e40ab610c39bc76430ff7fbe5219e5a4ce09fb62ba1617c22cba6bdf0a0

    SHA512

    591b821435ec2eb4fbdccbd0f5bc75a21bd9672b57cd458ad8c837aa5608bff3d9e1be511f98bb3c3808bda5d2033eaa713f9a065bb10ff957de3f9a70d93bd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cccc99dc559390279b971eaec0453b83

    SHA1

    d42f7f889194a238d5b9c3ecc78a3787f77c62e6

    SHA256

    fbae1cfe6927dc969ed1f84d96c2dff050e845137e8c5a32ed3e5d4dbe664194

    SHA512

    80df7e169fb46d8b3eab3ced7f4a66af5c6630cabb12441b7cd015d52867b353c2fcae7349dbf20cd8ab77c0609f22c3ce8f4f3d0326cc325e1910a8249a40fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    109a691af7bce2602975493eebef9c9e

    SHA1

    e6c02429c82343194ad9ee34df0bd1eab35ada73

    SHA256

    7903433fd2cd9b27f0bb68118e10afe14b179087b3cc4bf10b3dc1791b337ef9

    SHA512

    f9ef64cb93790f3f330beebd87f432f7f589d1abc5b16e4f8274839e7bc5aa18a20a0ea395fee29ec444a8f5d3ccd4a0af7d6c158db6ee760e16dff655961fb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b142b233dcb120f88456b4a60ddab480

    SHA1

    84ac894ebe97077af247963663e4c07c24536162

    SHA256

    41c515c2a0b60d5ec071ed3a5b0d262454a3dc0b55ac0fc9d6887eb2cb365a3b

    SHA512

    119e2acac51aa3b01cf9b81534449e5bc379799ac658b53efa65c650e96b04738c12728d331128fd51c2024cd2525139d881381498f9872946ec7b52a4d10675

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf3650a5a536c20343e1e28745ff702a

    SHA1

    f2b420504b22cb026b4d173e6d315de3cc0d4168

    SHA256

    3d2d9cebecf4e7769ca9abee1cd671269356bab0165515f82ab3b2f42d33e916

    SHA512

    b7123ec347584d47eb2f262b1e5125fdf81fad97bebc8d776af7749d2841a50037a38ca344c2779c81ea739931a35aa191fed845de12406ab04791b599ec85f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    410b9f45fb7277bedc1f410d02aa53a5

    SHA1

    082977c10803e19dd35a7ba26960a0865f8c6120

    SHA256

    765527cd92e219fad2f18dde841043942f3e1ded53d642155c9156f8e4b126e6

    SHA512

    5941d710a4b1847d2549a2bdc1a372dd51951baf6f2f7ff969938e51de54d179058ac9833d0e2b66335d3feedf77ac648450d8d3087d47c14af58b1a243a3e69

  • C:\Users\Admin\AppData\Local\Temp\Cab21E4.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar22C6.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a