Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 19:35

General

  • Target

    2664574790cf5c1fa1b476d8a0fa3abc_JaffaCakes118.html

  • Size

    29KB

  • MD5

    2664574790cf5c1fa1b476d8a0fa3abc

  • SHA1

    44f19d20e30e2a584274c908397178bd94a19dba

  • SHA256

    789b3b4a290754c5a4b4a1ba77f9566e6cc1d9c614eb436dd82d759cf13a3bde

  • SHA512

    2a59650e9cc89f230dfb35e7be96be231b3053ce4e01d4f7f42649c75b237fa629f4754dc0b3bc9a6593bd4bfe0a950fd7d2294af5f6019e2acacfe959cf8364

  • SSDEEP

    384:7s+dN3Eit/WRoWosf2uDchdeQ/afs1+9fkhilEwe1xZ7BLP9QjfkiscSVOmm+ltb:lP

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2664574790cf5c1fa1b476d8a0fa3abc_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1032
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1032 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1988

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d94ba4ee4e7c5e4342748bc72830232

    SHA1

    e29293e49494cc2832671cc1c9b3cb1e8761c2d8

    SHA256

    c06aed24fd97072c0954680689054722daf4c536147484fbc933f2ad655b3a6f

    SHA512

    0ebef6529a7f9be75e84ae818fed4976a64c143da3f32d5de86d7cb1a5e150d4942877883e3020d879196d1c420f304a57d6c455be53c8aae8f86165e8f37986

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0893b5f6d18dbc7dd3390a06cf17862

    SHA1

    3656e7b1931528671a36e156612943809f9c311e

    SHA256

    450e9eea821781878c4ba4eac2b217b90979adbc27b4cfbacd8d7aee9213df8d

    SHA512

    74ec0bab60d3b1450e648ce42a376d72e65a0d35c29b51891ea8c603388af1cb485725fd5a2bd1af80a57869f9d856181990f7ece60f92c69724bce9c1870a1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1161faf7aa3bd149634aba2a7b667bd

    SHA1

    cbd05b36ecdd2466c4e59b65a36b88776e52f283

    SHA256

    a925be542afd5b0c27ff82ec6e8c9505e0729a6f622dbe8e584e5e0c34ee3a51

    SHA512

    6fad582d7c10c8dc8e146a0c854449d0a3a46ed57f46bcf4e74e96c602c480231723b6c3b1572d6e547e66ac72ace9b225ee6310baa09e45cdc0f37a841d9267

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec336a6333a3b88a3b5e2dc74aadfa8b

    SHA1

    5b7ac5da39e00b36cd9a758c7852d437979a3134

    SHA256

    71244e5eca1bf606ac97bc1de574da2c4ec2aecf5c634f9b03095483f5d755ad

    SHA512

    9eb4e9aa98d2e86cafd354ecba0c3c0526484f0beaba5844fcc7f45bde26585ee29b0594341b27e2814406c42319470abdcd88ffd15005d65d1b8ed005cc7fb3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3bdd3e42a1e41f165bb6b458d665b966

    SHA1

    a97274bbf3a0b7e69ac9ff940bc677be099cd78a

    SHA256

    3a3f3d65cb5484cc6ec41c8f3fb0818f6bb0ea6bcaea2162ca591bec3b617a9c

    SHA512

    437e9457177fdaea87e8511142832ae2b4eb40c119989abbf5d1d83f6d5fa87c919f268ec0e290859bff8ba9e8726fdc728aa17b07fa85e327451136a69f1aa6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1672fe829898196dbb3b847fc5b95a22

    SHA1

    9c699365e27c1b0317baa5365d922eddb5cb69b8

    SHA256

    176e26c2e5fe2443b7dbde4985af903de30fcc86c52196c57b5a3387c78444da

    SHA512

    057ce77f00a54f9f91bedea0da1d6e5a50edef428b009a9241c4dfe84bba2abd44e648df2745f02bf9ba94f06c3ae56fb47ac5211323283e183898dc8f6dad35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4438d61276306ca1853c4e132c13f80d

    SHA1

    d4be66f9f571b7482bfdc25761f4d8ed7827b5ad

    SHA256

    3b57f1f3fc78d1ed02b9afdf93e2ef9f18c5d53978c8a75afb5e5f568c79c5a1

    SHA512

    9e6eb24f1ffb95fbdac18ae3ceef5ba8566de051a70f650ea88a9c7191e7ea8d23f186a0bdcff2fcb275cd2412ea8a5ac72309a4bc72b6d295a67c3fda4b4b9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb5ac87d7f089b249a18ab1a4fff6e8d

    SHA1

    cd655b8a752396758b23f00a9ce80611628c5774

    SHA256

    0d97cf6718bfa388a003b20a9f1251699599204ec9644a5ec7c5631b0040cba1

    SHA512

    84b6f1199f68864ee5704dbf51804380145194edbe878c8ba859aa770edfc1f83708aba363582dfcb01cce4ec3462f2b849e2cc0491417d0ee217dac66de4639

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a3e17fe60908950554e62912a0a485a

    SHA1

    cf8b715eba9ab554fcadc4504a0e2a87157ddf3f

    SHA256

    1fe22e7a53838ac93ccaa6ff68cae67002956d4bdb76254c4dbea70dae889876

    SHA512

    8291a26ee1532a6fe6dbe46d76b9fdfcc7f240ebd9bff2930145f5fa44fe26b3f2f0d7fb724f2980afd2e48a8163215f7a8341951b2007b95094dfba3cc8de16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2734b9258c76d3c67a620d75156e2f88

    SHA1

    121e5ac54610656807160c637d5e146de2f594f8

    SHA256

    3693b6e93ea06b4ef6fa1f3d887517e1909bd36606393df5e62b287b1b9525fc

    SHA512

    14f23f206793145035829a3212b7ae81dc3b7d02ea6e054d52382930b427f4930192d6f3f03fb04383287548856d350f8198ff8c3ac25266f4bf8f9ed11079cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61d17048a6512fa501c50a62b8088f38

    SHA1

    b5d1389d642872c8893951b04a7bc2d1a6d229fc

    SHA256

    afbcedc6d86585de7be1c7cbe841867f435cd0feed1ae1e2b24cad91c73e44f1

    SHA512

    9aff606695ccdec24813b83b27832d945664852a5e30163b74c06ecaf07e3fdd50f12f5d18e83d59b6120f1339e09c4e0794b55e03a6ed4e6e9f53ce2c4abf52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a12c7bf5daaca2dca6142b77d5dca79

    SHA1

    36e721accd1eade0f88d0897c8b8219117a4c65e

    SHA256

    dcc91498bdb4facd2a006caf9ba6546dade15cf7614582be7d9bcacd768823e1

    SHA512

    ec822286a4f25e2e0f329404d3925312fb76b77e375e43de2798ead1e6b092966a1d214de22beb77b4b77f02c513398174019eb51eaebbe2e665dd142117bc25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd7443a2bfb92832ee36569c2868dac2

    SHA1

    05317610839342aa7a7cfd2845cf10fa13417636

    SHA256

    e1c6912ba20de06f04b4766a6fa1d212ea2e2c94c1276138aca1cb0b0396f29a

    SHA512

    15ff380308e5ac0a8ea7de2b134d77878abb16a30982b8f5b9afe480e40127bd3045f14ed310928451cc871dd3c61eebf97c3383282f79632a28035d9056dd1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b829bd280a8960b5ff76b81cba223721

    SHA1

    83843191f134a237b290b9e164d591399d5b20e1

    SHA256

    d64faacab55ece32a6b8ce140e4c223a598b70710e092618e7208629b1a703a8

    SHA512

    0f3eb9f0f96c7b9765fe691a0ee64be1fbf498588a32a98ad566581ac993a0a170a7a2f50e15c5b439ef1d744c0b376cde179f9e1804e41e1a993d12c6977b91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4749d75f385ee82cb57e3049c0d73861

    SHA1

    63277105f99e11f7623693456c3657f387ac0061

    SHA256

    230d3c60c49bdb6d8819405c97a9ec4acc9cb242f91c8737bbc75c58bb589558

    SHA512

    4bdaf7d992f344786477eb5969cae1f351a5e5fc32f0691183d3c55fded2116bbc3e4a849c6c2927c5b8da5a0dc009a0c0734736c4cc61bdfe58bb48cfdcedcf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4b5938ffff47a9676943887d170810f

    SHA1

    b03d2fb5fc69cb78a8bea826cff4b905d57f5188

    SHA256

    e595f691b41fd70e0fa4f4057e9e9cf5d2473c32674829fa59eec6d235f4bcc6

    SHA512

    089d8e64f0d803f58081ac22041ea9bd586397109537bc549c2405545ce41262f5a19a69084ca7f0b749f44153fdc7fba97ece36f478eb30e203672bfc4b7148

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61f790b15805187835f6457c50e2a6cf

    SHA1

    86e463ced072a50958e32d4ccc6d128b6d799c64

    SHA256

    355cf3feb0b7cd46a6553e7edb064f290dbb9f46aaefee957f9858ad97e94a50

    SHA512

    0ca2a2f42eda5cce30840dad3c7ad60a3f0d217601cd2d9978f4dccb7cc3b7a721cbd0399e011ec0d36c9de50a7ddf16fadd52fcea325574d12b386249f49900

  • C:\Users\Admin\AppData\Local\Temp\Cab2771.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab282E.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2843.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a