Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 13:37

General

  • Target

    3a61ad5221320ab47bb9156e2961cca2_JaffaCakes118.html

  • Size

    158KB

  • MD5

    3a61ad5221320ab47bb9156e2961cca2

  • SHA1

    12bd418787de0b87d95bfb34563dfa8f75b14bc9

  • SHA256

    cabbf6d3e4699cf9b8d44100b202cc289666c9fda4687c40a4b9d5a33feb2ca6

  • SHA512

    1eafb63952e7875ca0231aec3f9c183a17fd09cc01e6506ccbc7cbfe1e4965441c61d9447b7da2de2b24023986e967edb358e7f0fd6989a8d75969155ec69251

  • SSDEEP

    3072:SAg4EOLP7yfkMY+BES09JXAnyrZalI+YQ:SADEOresMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3a61ad5221320ab47bb9156e2961cca2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2148
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2148 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2412

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    996067622b5e724046ebfffcb0872e93

    SHA1

    6a969272684525da05743cb24bc2d7009c8f1318

    SHA256

    bbdc9ed32215c266d79d5aab386f2dae1aeda3004174ef1619f9d619dd90a6cd

    SHA512

    2be0fee3cb006eeb8dd4dbefec147f9eef681185890420e2606c59a718081c1523bcfed957208f56c8dc53a7415692a0dce35c379705805f15ea5742a4b9503c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c73d34ad2a6a59f0d88e2f78390f8d7a

    SHA1

    7cb33db41fd010bbd91e76d6e6e5e5837289a96b

    SHA256

    271d431f278425210dfba059bd8680f0a43683ccdd1d8d316d5fbd5458144e35

    SHA512

    5fd2bb4c529bf211a13be37f029b9b627477b94432291d988cc34942ba83d458cc173d73bacf85553ae4a6adf4d62812c1277d42080b69ee530961d9ded6b827

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    091815270632ba5afd312d2f17e57e63

    SHA1

    af0375bdbbbf830e13649317aa71e10491e9434d

    SHA256

    1950c4ff24b07f3335855f97b9fc79afc94f3a3d2ed0ee4d532080b18c5adbbe

    SHA512

    9ab1b98f07dd04dd16b796baf81c3b6b2b5c03d818494f2e876d5bb9e76b5ed0756ebc7924b1ac0204d12bfca0ff64f7bfc0739a5563f412fa9b7ad058b383d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8610c2de6b7c405983a9eb5734cc6bac

    SHA1

    e3d3b02ca5e69b2b4624fcdd51e8d6e2180f6baf

    SHA256

    612d5e6ba197283d9690334eccdb700ecc5bc103063866a51026cf5a267887c0

    SHA512

    2c9d3b08a1c00ac8876f7bba02fbb114f870135f82ab633658b1f9076502704146d0d7615fdbf2c5b6447dc83284ecafcd40347727e7523d429feef2dddd8dbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b37ae0eb2b5aa72b02f5dc2e72c7d309

    SHA1

    59ba510839dde68d77abc9c39932be842f290a4b

    SHA256

    48f5b46eafb4dcc4e565859aa4998830585fe96a5fc51aee502134e88c9afdba

    SHA512

    8aa9ed86646a045b3593bedde98a1c58664c459b54759192ba9e1ad8ff40623f6401b948de16c7e2e6314f8e3655a0124ef8123d4c52f8bfe7d1bf48a455474b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc6ddd7b8f97be53fb3ae01371ed06e0

    SHA1

    de30a8c49200f54015a97e75028d919e3ead1f43

    SHA256

    fc51b3fe33871c3bfeb0992e45186aa89469f31563abb383b81cab3432227e32

    SHA512

    a08cfe8804c53d23be418695b7d5d450178bc4b94a5a2637edbe29cdc14e99eac2d718582a678aa1cb453c3a44628064f5445e2abfcfbf6d5f898296ec900c28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f11bc4b9dd28e3f27c6ba84a23e8199d

    SHA1

    02a693f01119bdc95708215e0e62bdcecfe8566e

    SHA256

    af4cab0e9aeca0ee1c289a75e9021ab93b708be2b8cb0ae3bfad30eb35ff46b4

    SHA512

    883d5ad3f3282f9623600708fb1b3e507af18dbec56bfa7b03bd9d70a229cdb8c947866cc4f87c6d3dde24da663b7c922f96b13abf99f50639b6fe9710888562

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d0933af51c713efff012bf63e1963c9

    SHA1

    66c2a5a71164bb15973bac226fd1786de4d0efdf

    SHA256

    ffbed242134aed81709d8ad3ac2a637631de83d0dc4da852b178f1907f96fbfa

    SHA512

    d5fcb28179532dd79e62a3d9f7c528144fb52e021d22f833f85882e65b4d708afabd9bc5f8fd454977bd461dac1f24c39a22817c1ba0718cb4e128f6aecc908f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58280f04d27574004b5ff65dbeb4d400

    SHA1

    aa0eaae1ba0b7e3415e3a40e3603c4eb1726118f

    SHA256

    5c64fd4c9f2674c9ff2474c6691e53034f40d68da2efbeab05f171146042eeac

    SHA512

    374a7c1d8d1052e4ef961188a33fe0d6e4564e96c19024543423e4b40fd31dba497f604d7b0bdd8547ef910ad8b4c3bdeae7ab078ae8ff0ab15dd8d7dfc54504

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7bf8494f3778c3d21cd13773357b0c05

    SHA1

    7deed279fb44582e7e8a585b10f1ccc73344b1a0

    SHA256

    f9b6d26b5ecaf86b90767dd06a03948faaebe9d2afb78a1075227793e9d5684a

    SHA512

    4e2b8d55e196524ebe3bd954f09cf5663534266b0ea00aa8aa99bfdda8aff159894a451c96c08264de094b83e09cc82112798cbd25eb8a8771e77c92242b615e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4129cf0b7f41ef48b8bf3a91655c72fa

    SHA1

    8b96fa82814f710f15b9852926024cee821d5a4a

    SHA256

    f0fe4fbd0c363dda14d3e0aacf256d72e926e3b0667e090b8e697234a9e08b42

    SHA512

    cba16a71289f7a91627409d4138a00c541584e1d47894ba2c6d999d5c1172bbdfc38dfd7245d5d9c73a424d2615718ebc1860a92841f51445357865ce213c856

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    adbaef2d0187443222cb43c61048dcd7

    SHA1

    d772d960c7b98e77aedf509a6314a0141471b1c0

    SHA256

    e78e47aa041c9a972087649ac97bbadcf4b681b136f750ddbfb2fc464915643d

    SHA512

    77913fc48db52821781865629a97ac0f8c1bf258758d6425eefb180f66f945738439fcfd9c30826eb6e28547cf2faa5d7bc5f4c9deb48db11ea4db9b6f2b5a90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88b1f5f484899488bc874c7b22deff10

    SHA1

    3e9e12fcb88ea438072d7d3c91136235d09a2f01

    SHA256

    c08201356725cde02cba3715c8e064bf891c1034d7c426f747be6c93790b3190

    SHA512

    5d25c739705608f8fedcf842cc27cddd8b0ee19aba2a2475cddca4bd69726936e2b876919aa8e83af6c2fa448fbd176dff8e9d6f384518efa0f244d06ab13f38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5de6512998909c7125ac40dd3813fb9f

    SHA1

    b3017d1943ac7721f0c6d3208c465a8f6c86ddfc

    SHA256

    0b6a99c4094b07069698382e9e4b73d0f3fead7b580b2977451e7479d3c8a9a7

    SHA512

    9291ef2658b43f1118ce063dc49d28acd3b79314e092936323ff8ad67b904f9878b312d8177854e35a7d7d87effa268787f79ddff510c4284494fb49804c13d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97b9a6e182e0506fed8fc7fa804b9598

    SHA1

    157df5e26067db3de7ed7d58e43cdb167befbdc0

    SHA256

    915170d34491d321717d90fd03b2d92a55269b655395c3527ce30921f96e6c7a

    SHA512

    35d5c58f80e434835425adcc326b5ed5b133da1e4b6fa4943d8776e511a416ca4bb454d5b6f9d7ab83e47976a732b2de65f752870dea2e57c300777815bd7b02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f9db3383f8db2933473229f5493a08c

    SHA1

    e225c53fcdf10ee11ccc02cb03402feb02b7c0ef

    SHA256

    de1a130adcfdf6c04a7fe1de222c01b41da547cc3451250f706f7a0547f65311

    SHA512

    58d703651ef7cdae66a0ecd3c7df9a5c36940004b9627adc3684d49b8a6850fe039b701d6d91f3d5bbfb34f88c8a3aeddd1659bb456b72bafbf2f6d65a0c46c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b7df03e00ec93bf2cd352294d1c2d685

    SHA1

    6f63327fcef777dc53e85bea93ed0083f7fb41d0

    SHA256

    d634087165d55b97ed2b961a054e6e20a46f621efb190db298bbedaada6ef85b

    SHA512

    94edb7a73eb2a7b5863eb16872d2b6c5aafe13581b8ddc4f7c9e622c67d42e1ced0a6aff0db93f5c9ff8a32ccddbf9e577c22e4d614c4cbaa16faaae8edc2fd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08f57f3f2f13d8a3c083f83637e8d354

    SHA1

    d15be3937a7e71281cb8023f4dffd5adeeffead8

    SHA256

    3e4e51c90aac08ab326e978ecd6d72eb9910bbbfd72085f01c125fbb0d10aad6

    SHA512

    011eaf2208058be2f89ec561bec58a458505d5c4f5ad5ea0b9bb2c648d3e9af10055b41ab952784c88a8c65a85cd7fd124dc5f25cf3a68311fa7dc7bcf96d680

  • C:\Users\Admin\AppData\Local\Temp\CabCFE.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarD5E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a