Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 05:16

General

  • Target

    2d881594baf9f42c0bb8c3f70ab2b0be_JaffaCakes118.html

  • Size

    21KB

  • MD5

    2d881594baf9f42c0bb8c3f70ab2b0be

  • SHA1

    84c4ce5191a7922ec9f2e0c1c370eaeff44a057c

  • SHA256

    833a8f892cf4da139d45a5ac6bafc69d3ac975ea8936604d6542ba65bb19c7db

  • SHA512

    dfff22c9b114dc9502b13d86b26ca7cb43961acff6543c5f9a0e0e38dc7620c0ac28922b6d605ee0f058cc7a030b67fe6039f676b217a1d38674005a2afd0596

  • SSDEEP

    384:ZZ2Ur8PV6Nn8XBf1cX/DUXiPRM+pVO2FyH03EFx/q33QzQ+uU:ZZ2Ur8PVe8cDe2FyH03EFx/q33QzQ+9

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2d881594baf9f42c0bb8c3f70ab2b0be_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1368
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1368 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1864

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0261492a0214964817954481ba3bb8f

    SHA1

    8608f3387e26428e78534a49e4bd5914f77dbc44

    SHA256

    52d4e8e371b3237af3e524d675d51551c4d18042fda0cbbc6a929c4ca4e4a352

    SHA512

    28298933ad188ec7f09ceb668bb7579b952e4079d54ba6c8fcf47c2cd0e502c1d1157a50fffedc92c3cab0e4d64a047a66f5e4c04c2927ddab54dfd7d8c76561

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8728279b0a67b44fbb94d8d09a9a79a7

    SHA1

    0b0d5c33a6951fcf977a4d52db6f79122b0743e2

    SHA256

    5545c0e7e48036e7d12fd2f31a19499a297a578405a40bb383eefc99962111b9

    SHA512

    7bacc6f93a6ff731f77174cf24133db78145237c9de4e5a0c233ad2a9184d03030a6b6c8af0108e40702b33ecbfd4ce4320a1b35fcc54d68b4cd3111368bf36f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a21cf890aa9d247346fa407d78c21633

    SHA1

    e2924866436cbba32d193f3d4a07fb1d85e7331b

    SHA256

    27248e7102daff1155893358b604bd62b547f850a3186831a77e31334230b51f

    SHA512

    00a859ff8b005c8ee0586f2d203da29d81dc41ff96e0e8f6811de734dd48de5ea65bfac78176aaa83e936c394a22b9440586f606103737371d351afd97ec88a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d834667c29f9032d37e20450768daa23

    SHA1

    6cdeea62c0e1d24a7477d9ed14b7c6a399d28246

    SHA256

    10b7c340c134046ab2d55d87cd420e67ef8a4aa11c952c264eef7da898e2cf83

    SHA512

    5add32568ed5efb5ee8420d390a5857208f4f29ccd2b4ec07413257301f276238f970e74aecf326fc5bf7dbcf548116dcc59fdbde06da22d2e94915d7f1b822e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a88da0825428c2b8b02f47e097f8a3dc

    SHA1

    101f0225e8fdaae7f55024ab76cdc888c2c411fe

    SHA256

    e69d1be216d41e282d316f9dcd969ffc8f7cadf5777c782419fb0a63d008d3a2

    SHA512

    2450bbff0b7fb8767803a592e3eab48b9ea8c7fed027844ae0c5347f22ee93c8dca7569789801856332828f7b586e6b92b8e40dee66b4cb9e25c9599fc8c693c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61a0f8f0d7835b5fb36b976b398dfb21

    SHA1

    52760ce62e34c6713abc7c12487de84f807ec645

    SHA256

    665b3598c933a3f17c353e9ba02cbec4af8ea98a8e10d63b5ad29d11f9bb0f03

    SHA512

    702730476f133fc576d36602877682ec532a7d1f2022cb8e1c96569c2033c2df6d50edf9fe8dc4944e22232edabad1e16d5f38bc9e76910616c40af2724cd453

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18f80f1ea4f223e403b6317d8ee2065d

    SHA1

    d0138eaf31f097c5c2df93290a714d094c86ea41

    SHA256

    c6069ae8942b4f50f4b61357f4dcfd9aedb54fa083be8181b44bc8201a021ee8

    SHA512

    a9bd8926fa53e61deafb51846009bcd152ad74058ecec0d1870bef29cf82bf0fdd610ad5582a062bddc6ce957a78d0183b0264d447cdca668224495eabe3b5c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c54390110fe3de48ce178530bd99b769

    SHA1

    cb89482ba89da7a1099349156110653d2f5a8b93

    SHA256

    187e118841cb3f89e5f89f24ae68d8b2f6bc6d6bdcbfbbe60e35f864859faf2c

    SHA512

    a64611d5e70fda4e23de5dcfa2cc418a090f77af537af11960f7ebcbde502a6bbb6177e421f2f705ff5dfa3655c63ee27adbd0d2a0ad9ed5dde6390c3f587a49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    68c55e42a335c732480fdb5d02141d44

    SHA1

    3399a147d59f81713aa836505d530735a6971069

    SHA256

    e0acad63d5e2ab9ee92b4cd384a4aa8c7d8b1de917706c78d0072b7c997ae380

    SHA512

    8aa0924d4943390deaa0df34e9eb0b81f2ccb620bce69e52ed56a53b643315182b663b4e1ed2399c0c71b46f48415b8554c6c027fca69e071fe855eea1d4c086

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38e47e84b0521c02c9e8bba575fac7ba

    SHA1

    1671cf371cf3cac8aa2877b58ce04afd876eebb0

    SHA256

    45986955e0cf0021ca4af8d5a94893c481d85c968b7397afbe3a3c73f19cd9fc

    SHA512

    9e69d594f20ef8062ca056f92c354111fe88cb1159fd10f3c41036fe03191a8247aea30c3a880cbb22eb3b233a44877ee5269bd0b57c94e5443f237833335650

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7abe49455f5debde64bd36e0833c36f6

    SHA1

    7503ade865ab6ebbdb727abe804c8bb89c1fd7dc

    SHA256

    b4e3a601509e81d85f5645eb43a7c774979398b93a44b7a299e2ed53e825372c

    SHA512

    3647fd06a3da888b1289d0700d400ccabb92606df1915bdfab670c1834122a5df7a7aec438a2e75c6c7520600aabe4f3cf13c8b097e317b8aab6cd8903f033fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45e69c9cd8d06f223ec8712dacca944f

    SHA1

    81eb26d83525867f78c599f8a606c490429c4cac

    SHA256

    5de7ffc2be174a87153eac1b399e47202cb21b5e690b6c1f50f09aab987bba81

    SHA512

    86c3dc3268aa6c45f3c5b44c54899cd3be9fbf98698e4414208319207a058766da4f85a86ff792ad81e9b24e8d12e90201fffbf0547b448affb96027550b7e6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8148d9b31ecc47450a744db0c6cd111

    SHA1

    ec3f96456cbf44df90a83ea68ebc1a84fe775761

    SHA256

    d023f58161fda7b4cc7e030b0351320a955cea7173eaed19c3316d541d2bb823

    SHA512

    2698f83ee3290d91d7a53304facf3567b701b86e29e0c29d0af88d5c3cd3405839a214dfbe349f009bc0b83b529193433f579907c50864ee9a56a60b54f4bbee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2ac637e388b90e05005a4f42f27fb03

    SHA1

    a945f3b262ec74cac0611ae5f2b643070c450b7f

    SHA256

    f91433bae75e4e7f05aa4a04100e181ad85d17f5f8d43e74016b3cc29eab90d6

    SHA512

    39f0e48bd319620320f7aae1d854dd2d5e530a95bd60fcb833a6edaa402e2df63fa975f238e7c0eb1bcb63273c504733503b5cef073e221ce02449aa06133365

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37c522fb7d0498b7b441406a10d79c37

    SHA1

    08837306b8fcf8d00494aca3a21e0a588c0f5c53

    SHA256

    b171d6fa7bad0f479a88b6085b211f75c0a268e1362da9ca9f7ddd6b03c6cd02

    SHA512

    fe43c1c964d556ed27f3b86aff253c9b0bd3205185a843a261946e21e6b2fc592e9674f9b3311bc29476c5a899b0573a87c41abde38149dd4cd69aa75217985f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9df3bdbcc7acca955f0db01647a26a33

    SHA1

    f9e482d6c2901b38efc30f359a60f37a4284c0cc

    SHA256

    59555c49905022520763386088d9ab31cf5af8095490bb6ef3ac1a65ee73ae43

    SHA512

    b6c84308e58468ed0c1508972dacd743fa21f0ca684db5c46fe28454daa07743eca8556a0bbe8bdacf6cd53574347c105014febd4bdfc194fd39dc8f11df151c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27a68a27689a23b62a8272ece40d3c1f

    SHA1

    1cfe3f23c83e86aedbe7612c7d8f702195951577

    SHA256

    f6f21035b67c58e8afbd65bc8b99808b4135c2e8a13ff9a02675a2b5a017a135

    SHA512

    9c791597fed64b6269b659b41b482b5bc94a3f721341dd5e9af825973ec442079c1945e381b68f874fb1060245a886caf49feb8ad88cfc71c0f5ede69c25a750

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c456fa574d604ed14d0b7ba357bcb56

    SHA1

    9feca384f9bdc853b774680f66717addcc2a1ad7

    SHA256

    b3d028c3069ba74823f39c3d70e16d1a4db5d09a6c15e9490a3b03e3d2b3ae31

    SHA512

    2c25e070dd9f528da91dbee01c0d6ba39556f53e659a37ad94e4c70f9d3537a88857455dd79796a1d2fe7dad384e8dd924a02fc9448443f0f4eef888a05f2aaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9533453699c9f66bdc0995ab2370054

    SHA1

    35341182066e992d74ebdf3dc06f31160f9eb4b8

    SHA256

    a3f5bb25d7425093f82dcc4cf00043169f7c97c085e14a445998181bca2b2902

    SHA512

    98d012c9c6bb902c665862b24a1467432a0e2f66dd7a8bad8d20c546a1a09f31ed3c4e390f96b75277c362f6565c28b620afeb213cee18ddabf5e4f6bbb8c246

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee5aaa032dfe988b4c7f39bbc37d1df7

    SHA1

    d335c8a2be528f86609af0fb075f10a65ff89307

    SHA256

    f1cf4eedcd47d3e18362f0aaf6a61a42f6aef58a72cacab4bc4db2155afaff6d

    SHA512

    228431262067fea4895db5f837972cca34a128a4c6a590ad0e264b7b5a23f4e692e48306fc58edb11cfba0a672ad6e77349b4613f2ce73a4586a070185308936

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15129bd6f9706247c8ce64034119cb13

    SHA1

    7880922308197d78fd3bb3f1e51f937db1b3ffa7

    SHA256

    bac0141cc4bc737974b3e7868dfdb8205a8cef36ff658af33b932fcb4b4a83a5

    SHA512

    e3461dd09902004379bb3ac501089addde96c525fd63685c83a9c3cee2af956326f2351ff3ab73c128c3668767a3696bb01b99eed1015f6415693a4be4d214bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72ed86291239fad67c07a316aa86a864

    SHA1

    113cb1e48bc2bfa9c131b754891e9520023454be

    SHA256

    4186452396cdbb7f28fbf10ef11553f2a86d0aebf72f323e8fee89e1047eb1d9

    SHA512

    31e936460dfe34ec31961b0b990149f17ba224c4d9759bd1dfb80932d0a58416cf5544bc0bd7f94ee673b4de3dc93e69a5e8ae2059b29f9c7addcf694e3ed422

  • C:\Users\Admin\AppData\Local\Temp\Cab33A0.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar33E1.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a