Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 12:21

General

  • Target

    3a15c2708a8770f14dbe72e79f20fc48_JaffaCakes118.html

  • Size

    249KB

  • MD5

    3a15c2708a8770f14dbe72e79f20fc48

  • SHA1

    c715b93c5b5b420ef6e8a52961e64d3d77f88240

  • SHA256

    26c98fd16b0915a2b1211691447b81a9533a0c9258dc2e17bb705880e0e875da

  • SHA512

    52f10c5ab8bab5da0e5c1bd3cf3b940dc11b39dd5bc01abe903db09ba72f1387203bb3e67928d044d4b41bf4dc8b0d47e0b74be0fc79a031fa6d050b75bebaf9

  • SSDEEP

    3072:SUyfkMY+BES09JXAnyrZalI+YhyfkMY+BES09JXAnyrZalI+Yw2u:SZsMYod+X3oI+YksMYod+X3oI+Yw2u

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3a15c2708a8770f14dbe72e79f20fc48_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1868
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1868 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2956

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3217AAECE20956500C22BDB70A7D005F

    Filesize

    471B

    MD5

    dfb02061877bd9d8d3d3f933606ae9c6

    SHA1

    b7d6bdc6a7a355aa8dbf7b7590fe0526ad085de4

    SHA256

    06616b5ad7766056ad40313945ca3ea5cfa4c8236f9595cef70abc991837b68c

    SHA512

    f549aed8eb47424ed72bf3ab5a1729920c62f0510a751101feaf292a359e20ae6eed896b215f95f1c47bfcab57e597e4c92f0bae25bd35fcf7f7d64c1c90f4b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_D14B79B440CDC26D7D21C81855E2C04D

    Filesize

    471B

    MD5

    f0ae9db6b73056b546b107177ce09859

    SHA1

    c92276281e7225179751312a2075ebb9825733a5

    SHA256

    acde17cd960be95c2650369ade9b3fc676beac5c08e451d40958247ef9da1627

    SHA512

    1f1e69e67afa48e531008699d1cc69ff63769132d8a99f2a273391a8ccf03329d3bbdb382004c6f8e71402eb9d68b71c9cfa069152f4abfdcdff476b261177fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3217AAECE20956500C22BDB70A7D005F

    Filesize

    400B

    MD5

    2ad61e51c85c3c957f5535f2315e7542

    SHA1

    c396d161f625783086faa5081f5c1418537757b5

    SHA256

    40c4a2a594bb60c3cff2c660f586ba6333f6d5f9bb2cbcbdd1bfe1ee3b420fa2

    SHA512

    a3cc22cee88ba4bbf314e4f0463448c17310eaf60a95d1c81601511e8d7e46aa955a201fccec959de081920b6fe4e1e0e4eb8be339e292babd5429c28fd56181

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9bcbd1b0af7e5ee170aacd95b8c1154a

    SHA1

    c46d32eff80c06812d32e05cff1091f1d78a62a3

    SHA256

    d966daf0a51aa9a23480307b493fb48baeed5120fc88979f7d2b7251741bae2d

    SHA512

    f48cd42e53c13ed51090a4c484ec48bebca14b8f5e61e3a3a307aceae9d0330fa4d2acd2c23340e7d3ca21526fd5459c5b7bb8d6cfb1d5bd33a067079b0ffcc9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54192475f9510f4aa005cb299421a88e

    SHA1

    9f89fb77ff20ad435a6fc7f548fd0fae57e0ec49

    SHA256

    6cac17679e76764002b031e7bbd0020a5ba4f59f45b27273a8ac309321112288

    SHA512

    8ff7a899300e9efe903a649eada1dc4ccac2c7fa69deac42cf529093e63788e7522a9fb997251bf7c39322f0c6138c1621228233e050ff6d5e518395b22f8236

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2afbaf6b5b3dd80e72e090949c31382

    SHA1

    1111c7f7259a3b7cb80b1f0170584d69bc1de238

    SHA256

    9c07e49f33c3859a250af991d1973cd63110f5edd2ba1062878afeecab59a25d

    SHA512

    288844c5e790dd25e94f8c025837a3c5449207aa995b8ecb92ee3c39eecef7cdb90d668a34a0d248236499b6db2e6a62cb5672e5614f6809223e69bf3a73d082

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d8e55519e00f1e0908457ae3fc8cc46

    SHA1

    8aee7cd6513e988ffa1877bbe1f100802dfca8ec

    SHA256

    20957f0d50ab28938a1ea6f739c091f671933f76fc5d040e88d48c1e38d90fa6

    SHA512

    d1dff164d8115bcd7e0c569018360c224eefc6207c03addff030e2eba9dd6ac7ce94a668f4f0628441edc9de85ba6a26015cf3f64a3d8a8a6697a431a6dcf477

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27b2ceeb4d2938f2e126209da27908da

    SHA1

    d178759e615082a31fceec47a2e6a6e9011b61f3

    SHA256

    5b153f02ac7b8731072adce76b88b01c8ec8beff4a0bbf61d7e14e85556eced2

    SHA512

    6029f6ca44ccc640f8546d16f3eb480151bb1050c25a74e0e3883ece7df51b83fdf93698498d4949cbeaaa1457cbdc608532332e6558f9f8a6afe1ef62d8e1c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    85d31ea031bdec1bc91074bc104ef230

    SHA1

    a8e823c6f4033c48d46480a954aad5f9254640de

    SHA256

    2caca6d92f290d9ef04735cd6080b9f6b294d03340600fef3b722b5e462c13d7

    SHA512

    204464a4e12c29b4a3bc1cfb3e8981bca7af83aac20f3e83b63b2a8155a97990935f4d9b13aac69b32e3a7d1f84fb34bcbff742223c3cf5bfa232a1c3f67c818

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71c0b158b7f3fd2e85b97dd935e0f5e5

    SHA1

    ba0768304f3cb34b19c2d5b9bd4a757e2f2071fc

    SHA256

    d1305313fbe8437dea7c8d48c7c7e6932b8814c78b4416619ed36075347c9416

    SHA512

    bf072c11fcd4a6e38cc37fc943dee5749a3c60543776f6881cfe6c3042dffaf6f0240792403c01f883cd32d32605f7b3101c54472cb653c5d703c9c4aa19ce5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c664b5763656fd59f2f788a98504101

    SHA1

    8a11239b338488774ad1b8936629e4168eb97cc0

    SHA256

    30fe3d508d0bfa1b284e2a54d642fa0c9166e8eac6402407b47ef283ebdad9a9

    SHA512

    7b438018581d8bed424624d2120456ca5afbd948a64407f83d6b258e8fd67352d0805085d79643c0aa9ed7832e19fb845cf958ff2f7e47ddba28b47c96cf7610

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    977c049b28f2c5d3ad60c2a245e63b6b

    SHA1

    41b4d8f8dae28c299bb16cce81575a512c80f095

    SHA256

    159132b4c447d75bdc1bb5afa237a55221cf0855c7c3ace59f12bee4cc0fd636

    SHA512

    98c5b2d3130e6e522bd656971b26ac4d6e97a96b9c028cd0bd93896f1fa7ae230a19c3769b4ec1713445294ad22329e8a64a43b131c53db8ca7af33889f90d7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ebf36068584a742233fd0b015bdbc5c2

    SHA1

    24b90c2dfa268cc1134e9fc289e83825c8595ba6

    SHA256

    47cbf6cce8df9aa976ff408d01f0df668fbc709f3c0248a0bfb515f0c1940216

    SHA512

    af2633fc6692fda110184d42206bc690273882d8c844b770f0a2c86c305428a74c0ba20d995d1a3771086ae2f7dbd31522b6d2d29805e31ec68b4aab07bfb8d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    131125a28e09719dbad59afec28cb5de

    SHA1

    eee939ec19b7fdad2aa746251c6e17dcc72def4a

    SHA256

    30ba637c1b5c3f014b1b5201a91d2d72b74a1c5f5a8240294e877c9c8fcbd763

    SHA512

    f651471856d45217b1d29ff9417ea628612d61f0e6a9d18e90451fa1d71c512e0bac66c156724a30055a9f8bb8044c4a85d4872df4387344cb67f5463be20597

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1ff048400b7c86d97b9e182eceb9cab

    SHA1

    d4ffb0ab6617807e394c5b03f16ac92d71d20046

    SHA256

    08a5d5bfb96b3bb4c2631daa8f0396f57a9c8a460c6cea928a513717ffc4df6f

    SHA512

    310273c6e5a029204f8de272149010f63c0beb712edfce532c023c81ea31bd9b0d2689ae366a46b89e3ff8aabb7309cc514740d2cfe00e70044c87caf0d36d9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_D14B79B440CDC26D7D21C81855E2C04D

    Filesize

    404B

    MD5

    8b4c901dbc55c5b057df17c0b33fd5fb

    SHA1

    800737c5a0fff545ba95399a04177b1d6be26a95

    SHA256

    42d0bec53bc358635027610dd6dd1631ef0049265d77a040040e887ddf0961ae

    SHA512

    281105913245ef877bd0f8e07c873fb99f3d5b91207b7bb9b5fea5b197cf2db8bfe1c4c0b6676588f6c00321e5780bdc4f4c34af973dce0c145c2081df3fadb1

  • C:\Users\Admin\AppData\Local\Temp\Cab3AB3.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3AB4.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a