Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 01:45

General

  • Target

    22a9c28006aea400842c27055d8cd183_JaffaCakes118.html

  • Size

    24KB

  • MD5

    22a9c28006aea400842c27055d8cd183

  • SHA1

    e2b70afc9b2d50f0bd5272fe8b6aa507847bb6a9

  • SHA256

    377bf05f05da572bb52559764708fb401e0d2418d5309e330bdb4dcb49df6a63

  • SHA512

    9801f4f4f7641e9d4ffbca3d6e5ee32ccebb7929c4f3b06f27f841a2b1cc6b61cffa154f08251a5b412e6f745d9cbbf516d58f15eb6b1bb413ae6392eb02653a

  • SSDEEP

    192:uqN7HRb5nW7unQjxn5Q/fnQieZNnTnQOkEntFYnQTbn75nQeCJVevo7NtIFo+Nzp:nIQ/qygcnnBA

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\22a9c28006aea400842c27055d8cd183_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2876
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2876 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2964

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c74248b6a0d62492dfbd414d903a2a43

    SHA1

    979473905cfbb37206ea4c8f807e3428ace70a3c

    SHA256

    10afb919029ad946e5a33e739574f725f472246e9c1cf4c9377bb33f64ba3556

    SHA512

    e3b3338b6ec5ccb1b79c04f13abc7ad237097c4175c9fbdabfcea9a13bfdec75112f6c0f9533f08048b84bed5838171743b5814708d3c3c0a33bb4fd9d5451d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    961ccc7d6932e37de31771a42c38368c

    SHA1

    3e6c97393a363995882e7ea665caf61956aaaaf1

    SHA256

    2771c9431c58f0bf13ce6c68dabab6b47e373867aa85651486ad82725504a666

    SHA512

    b7bbb8ba4e930eb71750dfe9f5e6becc92853b88033cb50bd0d6c7b43cb4ce9d12226089ec99d3bef938c0443ec31e03a117b8b1f8e0413a39cd30e2387e4c5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d50c034634c1be8fdbc058611bb39c9

    SHA1

    f9dc5a4f3e899fb7c0291f5c3435ba09265e808f

    SHA256

    587db19fbd4c20e06adf57190a5c3798d32b9e9947200e72d1a498ced3f02b82

    SHA512

    26021d9a83a06c6d79798fc34579d0f2946cba732c4a9350020f1c6b50f9760d4e26d5f350c65498e35203e071bebe44368640f1031dd29db376b0fde5239cfe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e442eb08fb3ffe0512dbcdd51ed19bf

    SHA1

    12af0ecd2602a5b5e3469b74b2b21d063ace21f4

    SHA256

    7dac4aeb7f4ea78f5e2d143cfc0b4746001dc40a9b3b4da31e64c2bdb7e25676

    SHA512

    53028156ac92467fa2a19b99cf185b8d0f712cdcd73832552de4656c9795cb710e950c0847a86d1555670cfe096efee7e15f1e793214bddff85d50753caac0e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6dc45e149e6ecba8b601215cacfe10ce

    SHA1

    d7eff4c3698f2aa081549768d56bc24fbf1c0b0d

    SHA256

    60dfb5ce4d20391e2a0fee4c203699c2187edd456b7b961c46e497a39d00b3cd

    SHA512

    7e36209a3db114a0acc282c1fabf47fbfb7ed0fe5c4e167bf733c451aa306e2c1dbc0289c32076870c543d084e4864229a764860227436fb6768c197749a3961

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24b26c1be9663311fc67c0ef51d8944b

    SHA1

    49fe4a89ef2bd683a43fbdefce8c35c0d8ec58d1

    SHA256

    3dfcc3120ac5988662b65fbaa586948682055fe773004e7b2031424166b5e37d

    SHA512

    9fe67e7a58165803766efd5d4c6475647ab8e29d3235e6ba10893e3fafc9fb4b5e2825e21225ec7cb479d48403d4117acf0efba57826bf95d425860c346dcb0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ec3f3f984fb03a9a3cf6472f72a9d35

    SHA1

    944d440f844792d864d28dce4d18f278ea2a0a3a

    SHA256

    09cdb90471f14effc127511220f2378561f2e24fc2fb746086731e07b499a490

    SHA512

    694c21cd6107c278152774051a6e5fee21b4c8bfac4609bf6a013c5eb34e37bffdec6008bd5df4b571e07b4e6e59b31d5f4319b56a82762cbac5afa4c3f94611

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f2e6408ddae6bd692cfbd95eb66bf9b

    SHA1

    1d6bb32f0217d5793ae489abe506a39d9ad718e7

    SHA256

    486fda356baf888df4660621ce4b32100de2995c706b33772d27506d190507a1

    SHA512

    0ada9d135f78d252b07167405b038c30eb647eb0816bfc580968d03addb13e36efaa91bf690fe50d1e1e49e1a5189816f80aa6c1e1ca2f6b692f4d70a5ae271c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3293074edfa92340b648777783bc770

    SHA1

    294ea3d7b254711dd94b28e82a4f859c0a588dfe

    SHA256

    f972e6f25b1a6dec221513f6e8bd74f9bdd6a5d8f18ccfb8605c9ba83c5a701d

    SHA512

    9624d05954a9198f7bbbb0823d76ad1b5f422cec8a935edb45b4b7b048b16413f20baf840a60cd2f7f70a8a8875c90414566a82e66e721b5746a0527070b5a15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    235cd3914aabf12e2be5e2bdac3f262f

    SHA1

    d4e7933211f59607188bf9dfe23edd21edd6d21b

    SHA256

    6ddc9aed775995979cbfe7413c12eb4c4d46b26145de7a45ba8c33a8d49426c7

    SHA512

    333ee7dcfda5d33a130ad56c94d0265af4e9c6d658f02964809159beaf8b63a7291b78efb8f724e9b6fb57de29e384f1364e112ece8b93ce9fc307e308dba957

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd19dbf26203fbd8abbd2e7c53d4b135

    SHA1

    333ac287b6a8212b7738c675b823fd47fa638444

    SHA256

    0fe32f571d54e559a86176ab708c65838f3935ae986f560cf0eb75f423bed629

    SHA512

    7697c1626be5db14f4de83751c3f77141b63e8d1405ea0773305bd8099eeb3766182af3d5880c29eef1d9a76a7e934908a9999899aa1f2a4cd0aaaa71490e61b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ed30d673d0133da892e59a481c46528

    SHA1

    4d5ce127525221cf06894ec912d5d59e141bc2c9

    SHA256

    9332e654e878760ef20648d975dd36d8966c49952dd32db52272b922702b1a27

    SHA512

    ff7b7f849d53fb34fbbec7cd60b7475002190dac4ce618740ea6cb6d604304c32f3216cf33322ca5d87be8e698fb72dc2a09ecbe59817ede9f4f8d9f6b86c327

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d237f10474e201b292bbeaf969c08c12

    SHA1

    ed46737129c9023e1d103a9c4559a9622c334cff

    SHA256

    202e5354672694cf7ac980064d45a8eefa089a3578fe05107e8a3bcd42f09fc0

    SHA512

    ac1e5debd905e763f3caa934c4da193692c8b82bef44e1284560025eddc8003f5d225559cad735ad7055df657dfbd8bb4ea46a406f79d7850b4f504f43aa1c79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8aa16a3fa40b36b577ba56a7c70922c2

    SHA1

    ad0c2cf064da2eb33c011a2675707ea641cee119

    SHA256

    54598c31341cfeb3a4c1900b3f6f71d4ac35fbf9ada2eb06bcbb44e3599f3c48

    SHA512

    fded1f21f9090ab5a3ed6936bf19c113e246a1e975de1e06583f85ad249a709306b082e7b8e29d40766eb8683bf2181ca16148ccd86c12a7ec4c9cf0cf30b485

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f63dbc244e72cf07a36dbf9feb236415

    SHA1

    f25358672995a98a2eb93e6e6e523bd526f82522

    SHA256

    a38a0cac8c352184bd6e26970d6940862c8b964864bcb0c9bb9ec90dced9639a

    SHA512

    9940443a3849520c824439c2b3320b60bb28f8657779774ed9a6de7df4b85310f7c73ea4f959982ba8381a82e5ddedb3feaa1a7d5475a629b99b3e264f54df4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6aa5c5f47caf725e215095a62e6af9b

    SHA1

    00b08aa180997af5fa5a02a6263a924432543204

    SHA256

    a8a46411ed669f6798c6fd37e52dea31cee5d7d03a397efb0e782a4c2f534fa7

    SHA512

    5f26da4f4b5635e171d15a8018a18342e601eb1e58cff8ac126c2a7ec4b8445d9fcd9a14c14c0ae6fa4bc7e94f38dac467b879fcfb17d0396215e58c412c6d70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c28bc90b94923aa6b762de978410813

    SHA1

    2cd586957ad4a791177a3cc7d1df796ffe6c1d17

    SHA256

    99f694c25dd14488471b42b69600a5946a8042ce72fc86010e86ea4f789a47c7

    SHA512

    4aaa8cb53f6cb483fe3f10eafdd90b9c32eec83ff3f11644e90f0ca3c90d5b6d5111a4649f6b2b3e7e83a005a90461818d1e08c055852282fa83da29fc3913a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d36ca3c281bd17044c942c68c778be61

    SHA1

    9ef679bcead64b6fe49ca89b96a8bf3b41fab8c5

    SHA256

    9524d47a2a03cc63243e9211e05d6611f22e9e830cfee48ae13c1f7f21cc510c

    SHA512

    07c2682a28ded29c19b012127056b9ecc4a883188f6d94f106b3f850822ac86da03e719a18136d6b0d81ec7f35729afecc1d5de0f5f327c21d1e1c2b91b873dd

  • C:\Users\Admin\AppData\Local\Temp\Cab36DA.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab3799.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar37AE.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a