Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    11/05/2024, 18:31

General

  • Target

    35f6033cd5578ae4c32acc0de8ca592e_JaffaCakes118.html

  • Size

    1022KB

  • MD5

    35f6033cd5578ae4c32acc0de8ca592e

  • SHA1

    352a0f8e811c1516edc8f211bbdb3b66e46c0eaa

  • SHA256

    74ca42ae265641f2786ac76a25b1a64068be3dd8bff60f19ddfd9001b517b6c2

  • SHA512

    acb62f29ff3eb2c241d47db111a7a9d5aeca8613a661770a27a0c3ada4405eadba8ea7355eab0c9840dd5a4c38ff85a3edd62eb4987ada30826bd7c4ddff15ec

  • SSDEEP

    24576:6+Wt9BY+Wt9BN+Wt9BZ+Wt9Bt+Wt9B6+Wt9B3:e

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\35f6033cd5578ae4c32acc0de8ca592e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1680
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1680 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3028

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d7c055181f681ba11ea832f7260b3f4

    SHA1

    826372d64e36e1c7c3c2f77ecf197605c6d78bfa

    SHA256

    9457d0a478b9fdb642ee0ccf22d6976003dd917b0c2a92cdf0cc0eeb596e184f

    SHA512

    7893432bf40dff0b91b62bf293e2ee80bca91ed181faeb48f6d4bdbd4ece34a1fb135ba26dbf34343d663c7b6eea2436b356546ca4839967f9d28080c39c2578

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e5aba3caac81cc5502f0d7e6f626f24

    SHA1

    b6bff04d994f9f38a98ca4d2490e4a63f8c6c866

    SHA256

    daa55176d8275eb7a41fdff030b5bd1eef4504d44b361a72a51fa35236fa3e7e

    SHA512

    b87100fbc57c136ed92caad69c573c379c4f59f9a88c8ed7116dd19565a75a45190c1716881c088287fe043da76504e616c5acc6ff32efa83f0b8901d4eb3dfd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de37234cf9644964ec6b4194b02bc704

    SHA1

    538e92957857745369daa49eb80267745a36f33a

    SHA256

    d28bafac92e1bea9937651470ae149f95f6472a0c16af4b13c6ba9d05637a6c6

    SHA512

    b392b2cf4f57c584cb2e2ff4ec23fa9ac76be65e434ea647afa0bbee0dbf0fbbd5706df4e6c861157cb36b09b5b5e8b330aa2be47100d544ff3e8d9421d8a009

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82ed9afddffedb507037d9b906be4374

    SHA1

    46375f1912b9f03532ac7f17c7774249c92f58d2

    SHA256

    72102de28df55a7de978d489f059b02eb7c1e1597576527092958ea01d07f8ad

    SHA512

    a18fe1abf65136b5a60baa1e0cb86621f642cab8a445ff53f43c3918bdf2903a92fd0eb04957cbf61fdbd4e5a78b2ba713b633a268a473675e68e1bf60aeb5c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9861d736190b34140f907da292183a5

    SHA1

    f9baa7afc19df1e50c4ebdb2c7e71c1da6e27d2e

    SHA256

    aaa2a7ca4271327ff9bc5fcd33ef828c37edb5fbf3b8d266104844ba2a5ce543

    SHA512

    01d54fcf6537f9701629c8d846f31b9536c871c8d23c7f094b77c38252bac81c2b3a8e5b250f7d1e0e41761dd28a5c149a8f0fcef3834848fd9322abd7fb96de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c6deda5b8acc0bb5fb8ccf139c635d8

    SHA1

    41f386d3516b7469078883067e9df3ee83d3d6a8

    SHA256

    c4858567ca3824403f0b1b7656c8ffb7f99f2566a121a4d480f6774be8996fbb

    SHA512

    e6a9cc278620c94a10db372c58627f2c9dd4d3a3687e092f2cb78600392c13a3bcf98e75145a15f066b62bb3ce72d9ae7a02838bfadf9e7fc927317193bec50a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49504a84a5df5a223e701c6d751ba14a

    SHA1

    5ed69dfca556fd77a80c78c3191ad6652d3afa08

    SHA256

    074c3e58478cb655ca1700f38a94cd7633fa0237a14df8abcc66a20f58f67ef4

    SHA512

    5b919d57e4e170b6d2759145fc50f9a0823e0928cc1f8bd0120e53d2faf01d0ee0aa2e02f956ff5e8363ee1124d2baaffc136b1cb880fb03bd99b13be41eb567

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    925d677e54145eb37d9a7e9167e68759

    SHA1

    66adf4a3cf7bbd68fb8e79879f6c5934256b658c

    SHA256

    9c8640cb067e6893d2de0cb88b1fa036ce18a1870e2eb3cc1c731857617d5198

    SHA512

    4fadd5fc511edad4f8570acb09cf7086cb5781529f63728817a6e50cfb9663ad0286a85f36c1c6791b905d86ed1834026c1549977affecb3dea3e54c5c95e40d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d48fd19810b7f6f9d99068cdfce2c572

    SHA1

    788ad24f147ae019114519a6f83ac80581b0aa15

    SHA256

    5dbd1bcdb28f6c5d3f64ee07bc4f4041b517c25688bda0cbab51f712128cdf7f

    SHA512

    bdf92a0c132b507f33cc9ea3fca05a1c400e4b637079ee2d41861b815cdb3a411051a346c901f1810d398c2df03c2300ad9f7a6ff7d839b63f3c8b3c72ecc060

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d14d96d392442ab660190e3672a929ee

    SHA1

    9354b2fbfe13871de1567684b5ee08d515760aa2

    SHA256

    0877386993a30ac60cd0f133b5931dec3f07f13aa3fb5c18f0c21a7b220913eb

    SHA512

    4385dbf61ec9fa710f0a0681c237e01b4a090c09244f0ce3d9427d41053b4969d1ded27f24750b014235dca2d4013a577c82490efb119854d2b57e15778e4d93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b951fe8dfa0dcbef8fae4b676b6133f6

    SHA1

    4cc6292db856ce5b4f27371a8f93313834ed700a

    SHA256

    3e2d687fae7d308231f01c0f6832e223f94ee04da5a9a3b4b13de6d7c55a5f3f

    SHA512

    04b5e35e3fc147c0b51abeb03deff034da7aeca24a561ad586433f9736892d2b087923a472ae0d0a5e3f88699bdd01c5616fd527933396e8b4a1eca25fc83633

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93836123f3feaed54d40302b8749259a

    SHA1

    32d7cb63a46b2af772112394fa2a662321284204

    SHA256

    f99a6a65500307b24e0d33cd66f227b227acf712d38e8522079d3f3be0fe74eb

    SHA512

    0a37bd8458a21abcfd76101dab75ea610f05f7ad922efb1cdb73060d7c08dd09db8a4ed02fb9d1126691dd00d9604e2aec53aee355d443a40a8be6572fce1de9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2420e9c1e4b604c741827a634d01c926

    SHA1

    9a18c68bb67a38a5de268004f014eadc9c714991

    SHA256

    734013fcfd3bf786e996df29acb90407dafecd6245b61546f0b9b369f8a5168f

    SHA512

    e910142c18fa2ace66a312372d326d2de2975d350962bd459a2447cbd2fc7a4c608657bc1e310a3be0ce34be42cdde65e0ba31ba7a0ccc752758206959e6428d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4ccf21e23024324e599ea7d90556bb1

    SHA1

    086403cf8f604d2964c0ced8c25d83792de41aec

    SHA256

    6e7a3ee59a39f3f3d917f51895d35bec876acfd799442079f8244c4cceec9167

    SHA512

    c9e663a0e8707879f77eb0599a9e78235cabbc2b37705a47759aa8cb151a035d2ac54b64ea6ff1277b7c2cf229c2ff6af29b846e54216bdce1b08480da9b27a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a14057806b23c94b33ee0c9e5c232614

    SHA1

    586b6bb797da6b82b1c413af3d04d4a56f91ce79

    SHA256

    013cfd7850c0ef23f3de146c3dac902a0e2eb99c44762b9cba52f2b48e8ab5b7

    SHA512

    b2eaa4af0f85ef5ab4a956e821a3387bf7a02d00d444c7ebdfdec0cd7b59d726903d76c67d19c0cb7d9afcb356eaa4d6e7c999390b3c06865d422e876ba66a0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24dc12ee15d9ba6d6c1fda91fbedc752

    SHA1

    654b1af119e66386e9a1f4f2165bd979c0400851

    SHA256

    e8bf9b1fecaf834f9a221f027a09ac24798995005a80ba0956e35fd1e267f6f4

    SHA512

    ca24fd802e9fbfe17a6bec9d282203b6dce22709633a770269587b351c2ed6b01505eee627c52e7a5441898309d9b5bd6de85a01da6602a14b2b58e00b3ebbf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0156e1af6fd4d4dccc0cc7fe26c9a048

    SHA1

    4e58ec2f3afde584a7a7828eb0c463afc130e0ea

    SHA256

    f9616078c539ff2e22c6aa1b12f1ecd808553e2af8fdafc8bb53386913be0975

    SHA512

    559b71b502f70d11b5f1ef6e5f6123cc1f90245a4b69a1b8068ba1cc08a55ffbecec097c1ab6e751893dd3d63d0175fcd51de9c8d8ccd30862a92d6118d64f3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9e336d0c1a31be7bdfa7fe2182226d3

    SHA1

    bbaef925f079d9a7b9e82c5eac8f67ee2cd66ffc

    SHA256

    4b34430bda0429d73262c6d63a1390685c92cd770d731cb1b6f65e2029fcdbad

    SHA512

    0cfd50444d84fed85d5115094e668c2f759c6bc1c8a6723614767fcbcfaa39edb85138c0536ad312790ca4398b240a4806df618fdff123837d1ca03801005c70

  • C:\Users\Admin\AppData\Local\Temp\Cab2427.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2478.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a