Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 15:16

General

  • Target

    2fbeeda6bd549cd6f47be9731fefe18b_JaffaCakes118.gif

  • Size

    56KB

  • MD5

    2fbeeda6bd549cd6f47be9731fefe18b

  • SHA1

    0fa83d51b73062f9b431ca4315e2b5122bd5a277

  • SHA256

    ff362eeca368db761204508026d9a28df47966f8f3eba4c07f2a7800c18757c4

  • SHA512

    682d5ded4b6b5e763a1d3b72e7e6fa760071a67e94c3bed328cbd0dc6e65c17a898537d2fc28810c9c4f43286f8cf37b2be5e1e5f76c8e22d2599e31c31e1d10

  • SSDEEP

    384:sMiqpaf5rmbIO8NdMAULghgwn7dwtK57CMQ2RRyyVM2KiIHS37wr5NSQo:riqpINQo

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2fbeeda6bd549cd6f47be9731fefe18b_JaffaCakes118.gif
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2772
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2772 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1612

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6844bd1a306d9fb27593bc8e7cb4703f

    SHA1

    d00125709a5415c1eeb6f5595fe494eaaa50f2b6

    SHA256

    27f817e2a85398d5e4183aa0fc32e78b96cb02f53dce72601703251eab09538e

    SHA512

    d302d374defbef5b597f1f407feee0fe205c475b4a61292871e7d56ec0c9e00d80ae026967d0cf45fcca8b23d1d8c07e74409243f844ad3b4ebcf0cec3c49b3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4311c19a5c1aba12ef4b8e623ac409b5

    SHA1

    62f0ad2b9274addce0a19ca97d6fd5a9b9d142bd

    SHA256

    42ee9f61f15d2aad0e834479ce172c103f2090d2f7170b3229baacdd832dc426

    SHA512

    d34432e14606107ac18af4f8ccb04b21d7599d9bf1a5ffa6afd94208f873268879c6981279934afb261889d7edbb3db801848b4ceb091d9ecb4625417f6f0eb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05058ad080201d9ce3b4cb1346b85165

    SHA1

    8631143cbbff504e8f7f66c8c43e697f8a92de04

    SHA256

    9d9ffa8fa1e7fe37b0cdc094d20d836056f24f26947d9d6a455c84ed12033c7e

    SHA512

    9ca027d7e7e8251e756c38b7f37598c7066348051535252757fb2aefc1f4f78f87eb991bb55ce73513e0f4147c77ecea4117f30ce58d6bdfe4e8ebfcd55149c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33d10a6255341e19aed67c235284b08e

    SHA1

    d5deeb3ab8a9ce25a80479de4d8e8fde62d3a5c7

    SHA256

    2a39f5415311bede9d6815cc12f6b05eebbb2e1b9d86a7677d24deffcb64a64d

    SHA512

    1a213462eaa29cabbc32680a7db8b8df4c70adb55396f6e7df30f4ed09edc5719e2ad11dd9f847aa1510dfe4b8b80ad98939a26b08d3b63bb7e879638a11d623

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18cd281e7e558ad3f741eb9ddb08b270

    SHA1

    e5206a5c913604763a3d7b5238d9eaf5e35f9903

    SHA256

    401907710b47f6a5add7364ef5bb7161fc91d43bbbdd6508f8675eedde977d5b

    SHA512

    724b179eae9f403779f580ffe0fb174c9814f17b4694a987151351df1bea63612e053cbc4f38127a5a442b7d0bb0befda86a5c44fe4b37ffe7a930f09c93c5c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dda87fa79b637f1ac67d269bd186bf95

    SHA1

    cc9478776051284231baf39166159b6a1ea1151b

    SHA256

    cee0f35181b25d27d416b890e14d0f0ea3c612c7a0b476c028dfc88c59a9c955

    SHA512

    d49c5ea73f5f509b247fb33794cb5cb2c93eeeaa53d4ce263037a32ff248abf044dcfa7ecd503c71d6c5b35446a3ae87c2e89e31c3cb00c679b46a34cbd11fee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d5d03e3f348e3a82976a8d97efb1f8b

    SHA1

    a5761768a53c736374578abe2072501179006fc0

    SHA256

    4eb97a7d500d311ede7eabfcd0d22f1a11dd8e9a5bd8c2bc6b849c3d5257c47c

    SHA512

    0fe3d2a95da0dc6cc45af51d4b3197e4f226ca6badd9e989e637546e28c63f4a7f31cba015243f42b76abf71619d5e121ad9080479fd57989e6217622f5f86bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d5196e2330aa231174b08bec4bb93b6

    SHA1

    e9088061129ce264c2fba72532439a0af081f1d6

    SHA256

    c5392329a7d19fdd154fcd0bc4da2b1ba81ce937c27ebd0d11fee8e2be7b4579

    SHA512

    23fd47420f69584ea1225011d3554b43adeb4bda56fa85a75d9393b1305ff7ce7aceed6f089c5a3961f70ced102c6bdfc2972d7ad7f7a5a3076688949429869f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13e17cce28a51dced7f588de3b55a0e8

    SHA1

    ccd0d9c0bf4394316e7be69624525a57d34a98e2

    SHA256

    98a60f13848fd32da22b9cbc0c6076477e58a2119d97e495788d5760d6d2913c

    SHA512

    1ebcec70a80d40a51a5c03dca278fc6e00e5f6ad503ca88c8ed77e824ee4022c764de975f258b84e006eb510a0ab9128ca97174dd6a186ef21c537c25d6edfdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    145b5748d0c4aae76ffe71f653c89f81

    SHA1

    7b7e64a20e3b6dc8b05a253e207cc304f43a3a2a

    SHA256

    c95a55a79aeb2ae95e352412e33630e6958fdd43e7e69a7d1c017bed7578ee5c

    SHA512

    95c81c6d8277dd437fc3e687445c71f100d6b8a00cc04fedcce5463b734c7bb61239a081c93a6e17b7ab80bf980493f6d94269766b195dd53ce47f014129376b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f73a75c62da8959e3ee98559df141c9

    SHA1

    83f93f4e381461b7815ac66eec6432e535c82c93

    SHA256

    dbe1e96b20536d4bf8f0e0170386f4e260d59cabd856dea1679a7cbff693a146

    SHA512

    df2709008ff6a15e86a3198f549b64f66e551e97bbf7828599ca67e9c90b8720e996ed19d1413d8523442d5acddfadfef4007fa1ea951e2d825283bea0902faf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e917b88c3e86ad0b20dd5b22ecf6a265

    SHA1

    84e0e5ace1fe6325c37586b05dc2f0fcabb5c807

    SHA256

    99c2d23b2f799b38ba2adefa27c71db19ece6a201f4eb26800b42f3bf9515dbb

    SHA512

    47c48292bcf42f71cbeb37e634f29a0e456a6809a0ac48db32392de3cdbb4997d6a4675c5c7a6dcc683b7840a37873081d03986f61d703735bae66205e4c8de3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3ef19f35ae3e5474be0f750b93f8b67

    SHA1

    549f59d4cd8cac8a9539ebbf3aed884ab764e2dc

    SHA256

    ef6d6295f6ca5a6b4a845f3c3e8bb07a8340aced119510c81826ac74fc994012

    SHA512

    d0c31529be8aa7a2cda848bbe1a301ea667ba75cbf2495a532a56952f23ae3afc981b425e558d761314ac935ff08906cb0836877fc468637823310d6b61c7496

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62b587e92f2b6e14ec87182e86add3db

    SHA1

    a20b35268f0edd99d107e7e42ce8efd8e9e31850

    SHA256

    69dc729a477bd7ba5ca6c83630fb0d7942e86a6e6674f830b04f9e74df7dbc9f

    SHA512

    fc0fc6eb76e3e0ee1e34a5f11168fc87155f2c423ab751d9cc3c644c8aed4a56f9dc15e971d0b6e9a8f9d9b787aa4d7fce2000ef9c291aa510ccede3b3d44bac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da0eb9d0a1d65967c481c7a36085620b

    SHA1

    eb6163b07b3ef11eb2252e48457dd1d5749ffec1

    SHA256

    ff1a8dd3908f4a95f24aa93f8abab27f568cb4b9bb68b61bcc2caa6b1153cc33

    SHA512

    40c92221c6cee6c48266bc5cfe1a2fab7f2294905e256fa11c31329f6e77e0355526f9a93f75050db4d4e5bb404a76c0234321757991670ad8d4a6c61e5eb6ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    660638115c2fd4e685148844a029dc13

    SHA1

    43aed28652d9706d91c25600a95ac77f45213742

    SHA256

    5b87433f75918fcb00a583abec12071cadc97a406f1058e381e3e1a63a8ee8d8

    SHA512

    0a3bcd0b76b77ec1ac261bd7d40ad6927a7b30edd125849fd6eeacf9fea579d9d1954428ecbb0435bf0021352f71dbb6a5e61ad720c8d38a0a58e7160addc684

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28b40eddfa52753e46355cd0fcf76469

    SHA1

    578265df8653cba4a716211071facdf18aa775ca

    SHA256

    7ca295069544d2ebfaded140e413b1bb7c087ca0dd3ad21b27975af7aaaf20cd

    SHA512

    1d9e04b00c300a9ba4c31e9ccbf2cc958b7c5b3fd0f20c312b1c74365dfc38def1d06b75a090dcf2926f95d69320ceba78c922db7764c11eae49196826612a5b

  • C:\Users\Admin\AppData\Local\Temp\CabAA36.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarAB18.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a