Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    139s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 10:17

General

  • Target

    2ea3549c4c94231b6f14c311199ff5ae_JaffaCakes118.html

  • Size

    193KB

  • MD5

    2ea3549c4c94231b6f14c311199ff5ae

  • SHA1

    6f82159ddab001fe1680d254105c8a06166f2cd2

  • SHA256

    9a7b0c59b9f312fa02304ae03c30d43ca716d9de132ce68557b86769ffd3c1dd

  • SHA512

    22c8d41d569459484f55ef9d1d62e96aa7eabb6a76f74e612dd104a8520d57700f19239c6a3468fb647d14337b29389eb631bbebe6095e5043ff0b7db85706df

  • SSDEEP

    3072:Sg41nsyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFis:S31RsMYod+X3oI+Yn86/U9jFis

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2ea3549c4c94231b6f14c311199ff5ae_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3024
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3024 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2516

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c987b0c034d67a09b769bf190d56507

    SHA1

    bdab63d9916d8753985265f2a764f69ace95a05f

    SHA256

    a7c0947705319060fee81c5c6c4464b77e2fd04f85e313d83ec4a4ef1e1045bc

    SHA512

    4fb73fce450986645605e2a948a8724cbfbd985ffbfc5836842db308e3a2a853464639c4350eb464ff3446c1a9b3fd994e83b59d837425bdf97ec9ea2783f7d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a437a159019f624832d35dec37abce52

    SHA1

    9024eaee49d0e2958f06488ad83947b1aba6eba5

    SHA256

    489fed5eb08652c1257bef40d38ba547e85f466de900011edb1f36c00eb28a49

    SHA512

    40ed43f76d4bf4d926c1f44e1fc575c108a4ab5e9e3d9de8bb1a3fd735385293bc3c2b5f8fd27c7bd6ba154e717c9f205ea4c013a7fa16e8fa5776e2c0cb1310

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    371ae11f1579e383d60b01d89271af3e

    SHA1

    613c9cd6ace3ce1db71816894b1b933adfe4f9d3

    SHA256

    7d9a9b9e5bae260b1f3f27150e43809c2eda6a0c7e4e57cd7e224f0751f61b83

    SHA512

    aa1f49c8a5fef6d9bf3cd47f4be733d753211da8dad832292d773795a1fb8466813b23c8244d2c0565120460b110d2602dc65b73db5611a31185f4d58ac38908

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e22edd72a0c4231c2cd704afe000256f

    SHA1

    d1734691304985e7f1a568b57913f24eb00d351e

    SHA256

    287f1e60f4a85a6e100a7125f92bfb1c682a47278799aac112dc922cb8cdd53d

    SHA512

    9d821741b006927be02d7acf84bae95e09ce8038f0502c96d644639bbd03d5fcea6a17fcd56e2dfa08111a180dbb7d517c0ca63cb587ba0621a27b6d17a4d1b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a050a5d00c3b17b87859bf04c81fd88

    SHA1

    c119ca04c8b9c6a68430411d23976d1a2f65f5bd

    SHA256

    cbcfe4d03c01a92134fc44af4a046ed1dd9c0a68259dfce1b44c4e7e4c93a642

    SHA512

    ec6a04f08ac0f61f9db7cb38c1d7353a3fd4bb83c76857643d0191fd20e0afca6c237e0aafcae9ef0438a7dc71e32a0562c39316608954f8f97e370704c7cad2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1a059af303837376c52dd089ec55fe4

    SHA1

    3aa5b09b4c6d297b6862c434baf6f1ad3ac892e0

    SHA256

    70adb21bffafa34b131ebd31b365226d2e2a4db83b7d06dcaaf7dfeba3afaac9

    SHA512

    3af4a9991eac8207972fd1d3a274cd97dc7cf1564a67b5d4c158883204f296216a3f74d9e5a910e396fedfb779e65829f9fbdea7dad241b136d40461988216a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb5d742d32693c138351adf1df5560c7

    SHA1

    35e7847f7824229349f81b759850644815bceddd

    SHA256

    6691f4b71968cd4aaddb2030084509967bc309a1e0ebe49ff575415818e94b92

    SHA512

    367bace3a40be176c8f6d6d3ebef06a6a1281f3ae2bcbbc4f1672b6e8f32b99d59e6e56fe215a3562e77dadaad6f60c709c3c21f89cdec159d19f55564ba0790

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e72d6d15f81de9d091e498dc7859bf3

    SHA1

    d017040f8e7c0bf154b6ca4f65e8daccd01252b5

    SHA256

    ef8e78dd86f7f389f28fa7ad57e25a037390c8cad27f23c87d0a7d5a20b84ea6

    SHA512

    ba8f0f8e4a2f642586652685e6601fcd1fb8169485facd505781492837a1f9e6a59a9a7af5a444e843afdd3b1d5c7f4a5aefe6f6da0a6fe70435b95fc2444138

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2d20d7fc35836d9d606a7246896697e

    SHA1

    9bd8d76b5fcf6a02ccb1078cba597e23ac0f2a49

    SHA256

    538e01b8ada99bd916ebcce91472116fe543759adaee38daf37e48a12c35eab6

    SHA512

    7855c7cd3df17301b97e90f7d7ce00b1559b03740358d7c5f8d49ee0b72390b899e8ba324d060c63e78e7f9ea5a3a5920370f94189c862e8463e25ec8aeb4ad2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9cdff34356c3e121015ec76a434cbd47

    SHA1

    02733a8ac4ded5d31b0220a9df02f1002ecdc2df

    SHA256

    5f6715e835cdd388e6d3266c12fc4717abda8eac80a77e04a72e7e7c8ea1aafb

    SHA512

    5136980eb8e810abae8de8bb8a1df02a44c63867ebd8f10c517271d67eed164c6a7001a11a7f8da48928e3c95bc001592d26e986ac65cc2872d86384e11ec782

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2dbc62c1372772c51c7169da99a55f71

    SHA1

    3394e153ada5d393e2f3c9dab061ee32bdb36661

    SHA256

    f8091f01faead7bc1787e7e548ca0eace17b13fe008338a1fddc1b083322172b

    SHA512

    27a008265ac6a7005eb9d5fc37353759cf41b62eda14730ed0402f6b862ee2ace14d514b8fa3dc49b39c939a6e4a5525136e128987730d159185b9669210a900

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6357f4bb111afe5c9adf6af7b783dc39

    SHA1

    3b7f831660d0a20f846ad1dab390ebda470fce61

    SHA256

    2e3779643ccbe99932ccd19341e4bc67efeabdc4bb1e2ce0b0f6c8cb3fa43192

    SHA512

    cc7f7b21ec0ec8d997c6eab6c345540bfd51db0f82ff4c9f81b31c334a5e3986e1eb36375f198c2370917d3eb93eadad386e5a3231ceca94a3e55028e78f89ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    321b87b6dcdbd6ca0f438102fa60f390

    SHA1

    6e88ccf067c661772922efae88e79351c90e303c

    SHA256

    09589e99ebf8b9ac828bf53c99d4556ec9870f7af0040f623652cedd87a0d250

    SHA512

    3023b00a9b2ac713a4ac6efd019722d4300ac313e437c8242805217574fd13d4ec8a2f34ee3f77b21221ffc047d6e8d5deb01d87ea2707a03c4ae772d3144392

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1248f124c23774ba18a8b0532a372044

    SHA1

    5fe2dd027cec3ecd6a4d599bd7a0df39af0280db

    SHA256

    182b91215c2c1512c187fc0cdee2ba8403698f7c6098671d076ee462be58f54d

    SHA512

    d1a490aff492c44a846744c6a8fdeefa7d857791050ef0903a9eb8d02a23840e1eedd84925d2e59ce4c9b0dfb0719ff274609849edb7718faaabf788ed29def8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d2e54b730fe07b1c41fb5bee4d13b20

    SHA1

    9cd9419e3d46852585fbd6e86f0d5816684e2d9b

    SHA256

    06e09202cb5fe8dee5ea364bbd509d7bad344e86c0a82c4d43e43ae74351ee7c

    SHA512

    61b36d7e7255a2f08580d01219f1ac72d20b3625308cb094cec05e88cdcf827e904cb8d49a0bdc10b23468a1814f350b6d1ec92bffa604f9ed6ebcaf30a2cf57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42dc058e8694bd087047706467666cf4

    SHA1

    719ec6e111db88fa0dfc3eda0ffe03dd087a373c

    SHA256

    e68d39bc083a64150671676952afd175ca027b20b3f79a7b58c082e8928166c5

    SHA512

    56b345c4bc432752e3d096ed3b07b701fbe6df7397ccd8645c258446390e0baf90dd64adf2eda1191817e68cabb3ecfb9f496e0a95686b0db8db60edfd14c71c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65986df568f06a87c4690498a61b2771

    SHA1

    b0db3e2b9a99fd7f51e7e94f46b1a36446810b4b

    SHA256

    bc850e66af4868b7ac8c9a271b681a6f0b96c9f549676ca9c1bdade4bdaa9f91

    SHA512

    8eefb4c9c60640658beb58c5737bbed2c9b13004e5dbd9c06b6fca738c3677a99ec377c0b68142a6f273ed24d9300038596e5fa6d989a04e121b7b6427bb2537

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4b1a990010f09ebe8b67f30601143cb

    SHA1

    03ad760f2176c29bc1c1e810388794e2b85f9fab

    SHA256

    8ddf13ee2294c53e070c1fecc5109a79fdc77a40596e54ce1a07c04e65c0e0ff

    SHA512

    c1d0535d2728539c8e5af4c007fd70b2b525afc654b6973e5799cb872ac4a0a3fec493b5be1ec5cea8ff1a028a5f93ddd714c3a41ac55558dc8256054f744c4c

  • C:\Users\Admin\AppData\Local\Temp\Cab6BFE.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab6CEA.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar6D2E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a