Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 02:58

General

  • Target

    37e53eb20a8e5faf4d034e96b06e1866_JaffaCakes118.html

  • Size

    6KB

  • MD5

    37e53eb20a8e5faf4d034e96b06e1866

  • SHA1

    d908f793a3693ab2883d72461bee84f2881e0dcd

  • SHA256

    caa329430e660d7537df269836d3325fbad6cd2d77f73563b96b487a4a87e7a5

  • SHA512

    f33062770cb82b810f28ab15aadefc56f0dbb9fc50c607f3aba154985334f11a85be2a38c725cf3849bad33c4e8b8a4372676e59f160c368419146a4b1e3f18b

  • SSDEEP

    96:xB9ooyG3bAyKa+CEXr8qmMtumuSyMajPIRFZFZQ4UmrMgViHwicgb69dOF1fMOVm:n9ooyG3UyREFOYieIOS8v5Tal2Phv

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 31 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\37e53eb20a8e5faf4d034e96b06e1866_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1040
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1040 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2872

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    2b9c7532638a5f82a63138a417431f00

    SHA1

    1002cdbb9dd03ea3ccee5c4cf6e3061ef1d186a9

    SHA256

    881872f91d4f519e7031abf78ca810f643f63a662b871beaabf6c4e6e975e5a3

    SHA512

    acbadbef57578e2dd892c12244bec00ccdcc4d33e28c8141777a7c0f150e857b5165117d621b1f52ea511b525b42ca88d92819f2c9aa98cb33f1db69fcd99b28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0eeede61bc8c25602595547692d48b64

    SHA1

    67f2f0f0c2069c461b6547080957901db3f051c8

    SHA256

    a4e152537380965155a7ca51aca2f666c337904b9aca2de0245d35c1c33dfbd1

    SHA512

    2d7ff29a230841cb3a8836822b8972184f1c8050f7ef120851594ad870d4d448336a1ace873280ce6ff98634463312b8e9a7ac00fd80e5a7788fb218f9194453

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a0619130cf6b2e5fb71b60706bd25ed

    SHA1

    9c5e9abb6d8c48dd12387edeae71b62666183bb4

    SHA256

    1da226a52906dfae1b84f62c32b0cb02d12852ca8ab6c5dacb7246ea1306b90c

    SHA512

    c04ca680cf74aac656cba0e46cd8177ad28b2ae1c9b30c17b235d7de0d259932fb91d5bfd5ae82bde2bd1f72dc284c1491519da6426b02685cc6d36026ae9143

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1633e8f23fa50b11593a88f04ae1baa6

    SHA1

    bc72d109dadaab4dc2bfdfde2d4c93005d3ce69f

    SHA256

    96d1c12f25883d96cb161eaf0caaed500f72b9cf0314a16c6ceac693da74e151

    SHA512

    6eb19806f145fbc234593593d6017b070665fc56bf3859599ecb5e3e16f248d2e653104ae327b2c9327d9c5532335229d44a85c29a35becfa202d78431a56a0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fdf0031466d9e906665a1e285464e9b7

    SHA1

    8fee85f57aa276e2ac03a0c6d4206ac915c0f5f5

    SHA256

    93aa1a0d5d2bb3102ccfd7b979fb98fcacd29152428f056d2dc8649208d3cbf2

    SHA512

    f5ed5efc0afa58146b293c87a20b37cbd0853b716021aeda4a508c9957be9865696c78f0dedb4a0646877ad0a1764106c416b9d32a0685323e6b0b9ec1fe30b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f05fd1f291e0d14bd5790c69a329eecc

    SHA1

    d15047e88c2fc597e2e2f3aeae6bb9a0cc632b03

    SHA256

    51c30c38fc0815b9e76be5ac9f1c2d4d55df95bf871e448ec333dee64d50c8b6

    SHA512

    22e2e53e17ca2871550799e3386967d4b57fb63d0c1c067f745e7432b7198115520a0069437e99f7bf8b9428977b7aa3f709aab8974b8372b5b4bf5a8faea923

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e931164c6f1d105e05fb0e6d3864e468

    SHA1

    d2764ec19affa960948e6ca4f9f2402a58c95a65

    SHA256

    1b3495d9529fe90061156704eedc2afac0a85b366ed142c2ebf72194632c7749

    SHA512

    a69146adcbc3ae528257cbc1c5d09f80b205e5e15d8b34d55a3f14597640ff21d92b0dbcd00b52b506835dfbadcd58615b7062114c70b9718b4d811002040e40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51d4a104dc5c429c05579b908c3387da

    SHA1

    4ef1c886c5b4ca4c5827abfc0fb4d299a287d533

    SHA256

    11518ba16e723a151ead23588bd41dacc61a35ff4174d9f134c83a2820816267

    SHA512

    7566710d49af0f2ca5cb8b7104461daaadda19fe0a089d39f78ffd484d1e99d232496f01238930bc97d0825648f7662e53d39e4cde922e572589769a7104e8a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e161a5c3dc9184438269a75c3ac0537

    SHA1

    36fb382579a58ee619da730a3fa62f3fc030e7e7

    SHA256

    d886215a621a31fd4fd4ca494ceebd0b325e275a3e2e8421b04d504609a4cb3a

    SHA512

    9a0f8291bc41f8c5fa669358528701ebab224a72f5fddc3849efe0c86cdd5024b530944111e203813bfd30f86602d9855a38107a8957b8761d96a87da23d96bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a1302bf2f2e51902752e0de40e86529

    SHA1

    b320c93c73a6387f0b61d12ece73738bd2b115e3

    SHA256

    9d937f872896a28f40ae8583bb9af82ff665729259dc93f25d745c6dd74d41ab

    SHA512

    a1ce1b8e9088e8b152c03d58ffc2efd61c340f7ce46da16bd801b0471101392cf79355853df96412c029fd1b35d719eb76059b01e15d1ed5530407f3b9d055d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e59c241c33423b4db478048ebd63096e

    SHA1

    cf8217859202433c4bb744f0b208fc116d764432

    SHA256

    140568586db22ea7c61d10b5f3de6f79ad2cbb31999f117f0dd18ada360ec73d

    SHA512

    356de3f290564f3338e738dabf85ea23ad73a25531481b48123f696be1ded18ba8ab04fb0ee1f00cb9ea04bb3d5afa22812ef15a29a020d809eaee536b6dcd6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f2dad479405adaa25365ca593d5f603

    SHA1

    0a09c5b1d09700814aba1d2fc3786cda2174d8f5

    SHA256

    5264b62ea23e1dbe6ebc53564c722d95f7de3bf839ebe951c85bc1bb7d1b2d79

    SHA512

    d9e88cde4f2b213b74bd233acf61c4c65ed573de1dd43e5455928a908d2d662dbd2d9f738c4c053c8787ab9f867c7720a95f9c42fa3f9a25a46a16259daec668

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    dd9927f0096ddc114ab85a658fe17683

    SHA1

    afff4d1fa4c5baef8b20d9b1991dc33e7c366562

    SHA256

    f3b62dda1470705ffbfe6d4d7f5e9eb559859befd86ca646ccd60dc5ceff2519

    SHA512

    e36eb0056da3aec56bc1e998e8ba09ede63df5317d79b44a60121e5750c637789edadb76e803a6c7763066bb05995cd8241ff20e7a3a7e34383c49b703cc2047

  • C:\Users\Admin\AppData\Local\Temp\Cab227E.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2291.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar23FE.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a