Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 10:06

General

  • Target

    29753a02a5ce864367f501e5cd99d91b_JaffaCakes118.html

  • Size

    44KB

  • MD5

    29753a02a5ce864367f501e5cd99d91b

  • SHA1

    9e9db295cee289b9157711984844a6993fc2bf59

  • SHA256

    c7de173e0ca74cdc2d82325c8d1eaece5cc18449961e8aea833bd4995b81918c

  • SHA512

    cd74340b373a5982ca418c18ceaa559a18f248fc29c483d00474f8784a6093f464cf408a1e2758d04af90e699a54fa173e7ec6856001e5d8fec348aa85926046

  • SSDEEP

    768:xQlxW+/yEFO6+dgCgLiwKgSH59hkny0+wn9A:xQlxW+/yEt+dgCgLiwKgO59hkn1+wn9A

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\29753a02a5ce864367f501e5cd99d91b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2436
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2436 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2912

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    7cbce90f07d971a0f8a415addf0783dc

    SHA1

    333ad1b142ba5b80f63727b05d82c481e0f1e95d

    SHA256

    181901270925db45c6626c96edf13cc28fa8e43fc3c23fd0d011fbb26c2c711e

    SHA512

    90bd90800ad09996d7db3355b75597c11da1ecf204021ecdd197f9600c83040ce90f30c5d087914a7eebc9665e67a97ad4bfe9f43cbaa96c1741b8193ac18ca1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    8e234064e240706fc6f71f68f4a9261c

    SHA1

    0e78585d97c68dbdb01acca9adf28c70f9d7fa61

    SHA256

    6d84fed3565a6b3797a73948da50002a4f78a0620ac6933f7db892ec51dcc201

    SHA512

    f2202ebe0537ff31aba4d7f826022748aec211320a3755189a3b73abc3992b76bee54c26e473efb655ef0bd304b506903ae63e14014f3da6cf4994cade3e8232

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    f1007f4328a367f2669c8d48e0acdb02

    SHA1

    7c3a2bf32796cae349ad9fc575d4f61bab12a639

    SHA256

    8dee05eee0fb1ad7354803a739a8431a9fda70060d1eafeb50c85d178cae6204

    SHA512

    47930c0283d20c6d1c82b4a8a6487de76b41fff06996b5ad4d03f1f1a7108c95225eb87221dece99d79e1bade699a2b270f738d1268e7c4ad9e9d5e7ed1ed1ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    050900f8372d90206ddfd97252719ca5

    SHA1

    0bcf1862bd58cb2869da0f8ccce75f88e192e4ca

    SHA256

    69db4a047521344e95773a3f30de2d4b30d67aed73a2b008951f7dbb5debb24b

    SHA512

    dc3074ce87d6984a671353740add99d6520440c5322bd94962f5a806d47796b772aaf569e0c9280503eead6a7ba7980f37de9bd601b929a49ebbc8c3c445fcea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    f3adf8781725f14e2bb63a80784a2263

    SHA1

    cbe053883e58711d7048874ca70be3a75dd2df4b

    SHA256

    d8397243c6ba6a1376010b5f599502cde3351ecc608e477d44ae0bd272f828ee

    SHA512

    eab5af49fdb050410888121e74a337eb9d2266d97daffc89f7049d433039ec95efa04bd0f58b6ba4bd32a935b4bd38130777301058aad1012bf1c4f52b9c9225

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e986c0d62c361ff5cb377e8d0c1caf11

    SHA1

    7c8babab3280552290aaea4581f4da723edf8860

    SHA256

    ab9e271ae768407417e84688dc7e9eece013ebfb64ffe036aaff72c5f457823f

    SHA512

    577fb228c90aea730a11c11966db9149fc002d0ae07d8c01e3b77ea10b9afd34808c91c0e48f7670686a242a5432b184c94fb9c23157a08e259831344637a2bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    22eb08128681280b1fb1c8def3fc81a5

    SHA1

    0f22222ac28a42f54befac723c8db5039742e12e

    SHA256

    963beec9fc411687c3f26138b57225216e5dea0aa2dc2a172426f7fa42df793e

    SHA512

    8cd0c0e5b5505bb373ac1540a0a55f7b9e4c1b52acd9bb5e9bcf1daf8e9795f43edd33a20920a2b709cc411ca35364e5cd5c4a7795f78ec1ae35170fd4272685

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a9d87a1537f17e3f7161539afa4e9a68

    SHA1

    10c4d9548c63cca014d9be8b2e3b0ebbdc4d9048

    SHA256

    db7755b331b289394037b86f1b01ebe49e72fc91aa3d3a2e31d415fcf32aaa11

    SHA512

    22615d789cd3f6530a6cf12f62911153385cc2df209d5d4c6d3acb672a657954f07cd0f9b402d6241e64d2f63f2ff7ed7effdd86136632cc0407cc23251d22f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    21e296bd19199543428ca6f74d03ec0d

    SHA1

    a6766cb779bcec102f6884fbb547384bf55e5af5

    SHA256

    a5b127a913e64c8fec27a491cdc31dd615ee55f8e157fd4cabf38f656e2d2bcf

    SHA512

    da6b0abc87ee1461c7beaa665778361699787cd820efc21a9bb5169c64d0166a949c64b994eefc59531819065034da6eafe78d3050391068667df1e790accf7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7699c31546b4daa7ec86ff296169f884

    SHA1

    4784c1a032c6f28d9e16cd1427d020515d08de39

    SHA256

    0b1d83475f8b20773c4d294234581298fcf0672f6a0d95476245bf54099676e5

    SHA512

    ea217adc34e634f7cba96cb3344ce0894dc87e4dd1e4f05bea3e3f4eeb36884e4f978df2d4adcbe947a7c2f05b5ebcebc4344c831277084a51fb83d299b81ecc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    bba869403016386eb71d5ed5ffcdaea1

    SHA1

    31e48cc4d282fce10457a60567e48510405c7113

    SHA256

    b2d3fda9b260d85d3d2e16d94efa3ba2d57748114fba86f2175855c73f19f991

    SHA512

    14721e5d191a5567cf185ff33faa727a388666c6f7da29846afcc6b430fb4a55f85740da9912f6e7ea19a4d279c8805a2dbb8f252baa26979d18fe5174a5bd3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    37ce3ce14db304f7a8d63ef02f591a4a

    SHA1

    1f51d370473b31064210011aaaa89e71c52ce6e4

    SHA256

    61394c49c08e4501f3f66d6ff45ea6bf97957ccfab02e95c453130f932de0825

    SHA512

    caa987d928e9cba056c83443df8e5ce8b57579f889951c8e8439bf85c0bdd6b32340d63e2b420a2518d57cd677df0d8eb8671898e4d63d6b8b7cb664b0d7fdb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    fa5f18941d2674ccb615b57475bd8ce9

    SHA1

    58cd8f230d9ea2cbe1343c4667c551674648b35c

    SHA256

    7083a43d0284f8a9b67e128478b70617f546ea617cc36345f08bdf4c8ead6f02

    SHA512

    f0ebc8fdf381b68f1e29d908eebea3fc22da79d682e1107963896e24ea3b95c09684e5d635bdfaa2db1d272da5e93620251d425fb06c8cba4f595599cea40409

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    0c6f60e08971b085362658dc5d222b4d

    SHA1

    db06dee2bbb8267d6822b0f2b00585caa0e444c1

    SHA256

    670a0fb5954bb9cbc7b22856bb791ac31fccb003a88e65d23e1806f3ad04f233

    SHA512

    f537cd1aa317b3911587561647da7981b7411d1a9803615131101bd749102499662c06b03d5dfa62d5acffce4f82f8863daf8c5a9281b04fc1b7db731dd6765d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    4f78931e2e2208ffec7537df5581b300

    SHA1

    6e0976724512d47102e1ec9cc433f22bead54d10

    SHA256

    d8cfc65927eae0241ed7ac819eccb794bd7dfeb8d870d444b597f8fda328d2b8

    SHA512

    984c9f8268246deae3bf2b0fa9ed540fea6b66403b4ea64cbe77b6a4f4436050a8374d87848e472e87ff1e401b4de26aeb1f662a52c26577f355391c9f8eb381

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    598f2875612139d648fbb4177265bf2e

    SHA1

    ee703fcab210d4ec5fbfa209d6ffdabd490a5e3d

    SHA256

    9338268191258544a48af1dc2e1da2a10a7c1bfade86b306d345b27b6f492439

    SHA512

    6be55f4f17761e52ce87407738a6e8a7912c77a07a13ecbfb9b6ad119f561fd697199529a5a5ec1d00a28308361b63f3c51fa131b8b18aa1ae86ece53bdf0049

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    3e203a8ac0599d1ee8cd9fd85aa99dec

    SHA1

    7f26d9aa1f97e825a089eb23105a42615a512a44

    SHA256

    598be18077d7b84b8b951a4b21218c6344c8451f72efb7762cf108668df948b1

    SHA512

    a1f5ab3ccf398f920f630774828698df6cb80b9d26f1e9c60c66d655b3d285910215fbc167116d4836b682b8b3206ab9bf53a1f4abecfaf854335da89ed0182c

  • C:\Users\Admin\AppData\Local\Temp\Cab1670.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1732.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a