Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 08:18

General

  • Target

    2e30982c2add5fb84edeec26a1a320b0_JaffaCakes118.html

  • Size

    39KB

  • MD5

    2e30982c2add5fb84edeec26a1a320b0

  • SHA1

    a181d4ea51a5e3fd0be1861480139b55a1b8ee3d

  • SHA256

    47d30dcaf9369975dae01a0fd9c878075550c52c151478535a005296942589ba

  • SHA512

    9d1e08d3988a0ac33074e526350ebf28fb5fe58458790b834ed993b0b7796faa31232b64ae2088dca7a35d1bc61a639b6a7517ab32fa83a559fd7abd7ead9f98

  • SSDEEP

    192:uwvp5kSVqwAEGb5n84BalxEr/geZocanQjxn5Q/W6nQieCVNnAz4nQOkEntwcZdN:WQ/WhxCAXqOJa

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2e30982c2add5fb84edeec26a1a320b0_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2732
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2732 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2776

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60e382e9860465bac965944462063ce4

    SHA1

    ceb824d8b906b8a8638fbe00d98aad5f99836a70

    SHA256

    a9a31e58e9c6634f049f3aa42eec4cc8b1eb57c8090c14fe8f27ef3054291c46

    SHA512

    f5124beed392625161c58ec76be37db7c0a53b58fa480c6537fd13efef3b8610a4be90fd84fe0ba19db29d718a04b58b640a98b3cb2ec20d8e7582f03efdeae8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ece6d5d2af0872fc5b3dc71878b004af

    SHA1

    810854468b641730b5bb25a5f379518e8150a3b2

    SHA256

    da6d86590f5f41c6e8dea627ba79a26e2e19b9d89222d660f1cf2f7b5b291ddc

    SHA512

    b4b389a6426b706f184f1e075b370501078b67f2235d5d6781885b12bb0799088d99e10a85da0cd93aaac095a0157581bb662a0730901d50e3bcfcd7f6782aa3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a14dd2edf639baafe2d541ceb209888a

    SHA1

    ccf9c3479be6492116a6c4d8c1a1aac04059360f

    SHA256

    07d91bb17f4a16b4f13101b2fc0eea33750f8bc72f0f114bf4fa01d1cc5ac6a0

    SHA512

    b16245e965643c0d29942acb2052cdb713f5e426bde36e8d1408b0271dc0435c1d484022611634a3337d4ba71fdc83f510714389180bed5585a006e3160014f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de7847ba417f2b11f81bf44e98b9063a

    SHA1

    29c07bac6722874f583f7711498f53c47d4182eb

    SHA256

    9944bd96cab86c6a1f83a4f890c843d5989649e3de672af28bcffb7307b0dd4f

    SHA512

    14808d9ab176242c3233025a0b64ba874a146f59704322b56a27d32576a3faff468bf5681e49326350ab2dd5b16adc77430f796e2c4ff5bf03f17bf5bff2392c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b2f959b9f172453df146e4362798e1b

    SHA1

    0e02e763faf223d6e26569a3d0f5b257dc673e2d

    SHA256

    cf5a4ae2e75385d0576dca72dde04fa3c3c4ec7358d82d714c3e836686ecd354

    SHA512

    06d2bf78675b86e68798be5c8a0d8e52a1bdcc79bdc7ad54f0d9d9a016a50cbdf1a3d84967383e38e5d163ac88bc664754f1063c4d9ee210b7037d01fab09fc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff38aea9160d4dc22242ce092cba6a98

    SHA1

    845a368e6fcb463a005a2096e1e6e0795833c59b

    SHA256

    5a49e49de4c45ca4dd2b10cc4a2894aa3189aff09b74536b8abb2b90579843ad

    SHA512

    614aa1747f7002881627cd6078fe116c3924dcf3b7381244af5df812a52b8cc6f4cea32e80c19529ada9ded204023ffc51b92e523b7a97a651715f454787ef0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ba0100df0d5602bb6300cd4f9f426a8

    SHA1

    1751478451e576c51e31f8dacf048dd0e8ee83f2

    SHA256

    0bc98f9ef3f1a5a17085328676e5daf7c29214b9cab76a4b99c7555a292c2d84

    SHA512

    38a1ade9a4cb6b2398785892bf0b0e35a0634d569292c74b408e6d156f90c6a2b2fa44223829db347b3c1e072912773d07910c16b21c53ff95fdd3d9ad6cf793

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bed021c3ccd31cb787cc22ecb2df7983

    SHA1

    70abaf1b48d0aa831e562952db88e7211e91fb54

    SHA256

    8aa4d9b61ec8f45ea440f6a88a59d06cb45d759bde6454d4292737e6e58928cc

    SHA512

    2e91391a3f71e7916f089af0bf2a6ac6cbcec8c55ca846830b2334ea9c60aeece129dc7fbbfd3142a3b36f965fad11aac14d6cb9c5b5e5f9fff8614c8aca4022

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7463b7a6d9fd3277d2825e425ed9c416

    SHA1

    bbb580c10828c71bdb0ee9d80f90ee9632e723a4

    SHA256

    5ba92f4d5673f631e53658bcb7dd8c97301ad2b0767dc1dbd612b71add2e5450

    SHA512

    ddd7509255ee8a64c3378c524e11863a97064066e19212bb0745e9738b55f68813c9569adcb6cbffaa0842df5db54df9170e544c4601db75b890cd6f23b16810

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7732c3e83bc9367296f405fcb8c98889

    SHA1

    57d833899df414bd587bba543c371c66e2ec1e93

    SHA256

    2c28606ae74a41a2c8e4ff6d03bb81d9885529838a4f9a1bd22d2cbaf114e2ce

    SHA512

    08b0818b6c38c12b621aded23cc50787bcce8f62d310c8701e5a50472740089227c27f01e464cc71e490107fada0c2c2df73255df33d123e8feb073b28c75de5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf4dca67f91e47b1bf73f96235f14a0d

    SHA1

    9a4ba3caf0b9da4fccfa3ba44a682b2bc5630400

    SHA256

    569543980043b74b8094e6dcf73b19aedc412bfbcd2d20dfe3849b6b33124484

    SHA512

    4858f30eb6cefbdb4acee66224785feee56fb5a0cae74ea97fa0efba8c978cb89980c5ae79960024dfb41a98aeda4eb5ef05a91f7607e4fc54cc8e8b566c919e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83ba68b951653cf8a2ecfff88c4d6f2d

    SHA1

    d23bc2e97f5f5d3e453b7e47b508a1d228d5dae1

    SHA256

    e5da31ae2d0b91c48f2b4f759b81dde2a863e9f823e8a9895ea7ca66dced91af

    SHA512

    ae72d4d1f4d440c7127429f515ae73f2c512112b32bb7d1584c2d42e3fa15cbbf9c24173443e1f978a1e002fd95014620ced6d44da7c1f528af01e28d6b793ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2243e40edeb59040e2011e3c9af9ce88

    SHA1

    b489b7568e54dbf742bf6659de78a45ab66268bc

    SHA256

    2cd2d359fbc8ec37cb9408c03ae74ffb55b3a74473678bec5861aafefd725cfd

    SHA512

    ca511f8e5b462621629c6ba8c8a50977db0b3e61e8f370dbbe5699a979b6b50c65598114e62e7f4f69596a82efd7ceda556ea473b0eb5a0c066b5576cf925c08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45216b9ac2ef40f3c0a0dd664a202ce6

    SHA1

    6f05eb14b1af98b03937fc26068ffaf62158b5ba

    SHA256

    1537c8266c68298b985d4d43cc9d25811f84289460ee691c79c0a6aa189601c5

    SHA512

    6db73d30c3cf6260dcf305889c7027d97c7b4ccdc4fcbde4e95d23a9279b6193cf129709b1d85e03ccd4bd7feeb46bc2fb3872c5d46a10cc9589d23aec36aaf0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4996814b689a2fe8a1efc5426c0c1899

    SHA1

    456f82a494aef4ca72fcc3cc4d9045a90d39089c

    SHA256

    d1058c4ec20d2d9dd283688c26aa3181880b7b3d59ce81ceaa2e07d48144820d

    SHA512

    2acc2adfeeb2082d5ab16756e3de8aa9a717ed2c6dd12808505764f37a0d92805550ada5c77e346d20cbba65a8bcb42ce256b19de1eb1ee8d1835ff70a99e1d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14a439a455b482c09ed6dfb028e38864

    SHA1

    663fd27ead5c0bbcc5d65c8a45ecb58bf2c58737

    SHA256

    31b40d3b838132afa974ee6b3651bdabbddffe4ffe70e7c7f4d1634d5a0a5901

    SHA512

    99aad7eeb9ac673df18c23906e55a63be444768181c84a225af7b0b80b4a59b50fce30454a667ce2cdd0da56e166826452997e3aa92ec8f7bd5256476e7bd0d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e56363f5861bd8427678ff2a4e258e1c

    SHA1

    15f1e29399f33f7d5990ee8905175f2f133e1c93

    SHA256

    8ff91d83ae704528acc07e9b1cb421f1d8517f1642b714b92d91842f80b06d34

    SHA512

    7104522b7d6e05da9cc0081121cf30ca2e839ddc272fc98300a0558bce277f2bc2d3a5bd888ea4ed7e0d069f744200ddafa8d8958280c8cf59448366ce4c2aa8

  • C:\Users\Admin\AppData\Local\Temp\Cab282C.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar290E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a