Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 17:04

General

  • Target

    3b2e06b33090a7f88d92b1bb883142b1_JaffaCakes118.html

  • Size

    34KB

  • MD5

    3b2e06b33090a7f88d92b1bb883142b1

  • SHA1

    3ee2293c53d99138427d2045747f316dbdc9b3f9

  • SHA256

    10235bac19ab352fcac06248c4a31f9e95654b4091b91d2467428a3e4168428c

  • SHA512

    e0dadf2317c482face0d9e816796d86964bccd37a69ffa0a4ea8df2090f1f5a80c08aa39906926ae0d91755c51ba1b76753642a01e97f97ab7d92933ee98d748

  • SSDEEP

    192:uwzCb5nuWnQjxn5Q/Nd5nQieMNnmnQOkEntTdlbnQTbnRnQOgzcwqYcVcwqYxcwa:ZQ/lhdkv+AQWYLmu4kE0YLK82k

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3b2e06b33090a7f88d92b1bb883142b1_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2420
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2420 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1788

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e00b71fa4be25d9c4f072c51cd027a3

    SHA1

    554475d10eb57b956ecbea9cf14c8becdb6dcaa7

    SHA256

    286ab2fbde262f296d101e1c025202d9cebeec74f7fd63ebf6a6c45fb67502dc

    SHA512

    e18dd6af1ea6894e8489738aad4c99eabefa164a7ba6151b52b338d18ef5d0df8e4b2d3b9a22070fc0da13fa5b7ab8849cb737ca27d1a5c5a0b3c1a10eea0586

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8abfda0c8dfbd2fc4727b601b8ce40cd

    SHA1

    39f8029d8111a7d48905cec479178932914432ca

    SHA256

    14462a4a5646333683844beb0de3d493d617cd635820ffc5ca05063758c4b734

    SHA512

    29a5f39f200f3ce1f86c36db7fb5f82f537db592b88e532c92dbb50a7f49db0e4a3716c6b102092278170c3b9018fa2bbbc4def64b4dc60e0db3d14532e4c12e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8ee6cb66b5cf6e5c3384dbaec71fe81

    SHA1

    8bd6f013ec61ee687726751aa01f916186cd975d

    SHA256

    15aafbe90a3a9d00012c8eb149d347952f3a838c47a139a4a097156d8ba848df

    SHA512

    bc53fdd36038078408f9415a024122782d51e50548774b7ad4ea5979a48cb4e26e519a7dd553754816a7f011c4e5003ebec64178d6496ac02d858f443b9cbb29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4e53d081e805eb5fe738ef9d5198fd1

    SHA1

    4561261741392d6795fbf92e870b3c62f6b2c836

    SHA256

    ee80b9d6478e399c5855624c26c8ec7889e3bc950a7cd9e505400bcdfacae084

    SHA512

    bb2a3e88633f960679e0b92c9be898eba00aa48ee5e5d948b0aa8a53436ca5a875cd1ef4fb95cb4b08ddcf26a240acae8b0b2bc431b341f5041828438af138ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de0007033501094edc7ea8f6ac63ff27

    SHA1

    532d686f76856c42b27937adf3417a1ec12e4595

    SHA256

    371e8456830fe42ca10fca85220de8d5db1c1f2309e4bc665f2cc8f52181385f

    SHA512

    89dafbb553eba0b027f0ea74b1e5db90440650c247c36bd90e75001414e20e9f286b662aae6b44023da0d4eebf5300c47f3068e2d176adac9513e7de272e35da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5111507c0281cc64fc7775746937a599

    SHA1

    94a28b4392cd2f5fad097976db223065f85ceb16

    SHA256

    b9138d833bfb7244f32141541a1ab3b791faf21ad9aa54cd0662d7378b041753

    SHA512

    2c20c61c400d42adb2ca2e0b4f89cb16d98a0cd37d4c409f7018e2782fce53b2fd9e2abb9d9c6870e558acd93a3893aba3135a063c0c710c04b8c7a8634ebe07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51b91c6a35726f6c59e5859d461b0522

    SHA1

    c9dc3e42bd530372c9a2ee9dd3661aaead20a4ea

    SHA256

    283f7c24df36c517ed971053da46b7869172915446e4d009c177b7888c0b3783

    SHA512

    399e4c66ea1cd36044a7e56865f5b480ad429faaad96e2c3038dbbee3e35b10f12440cb33109f5b2653e09f51258e855a3761f828c0bc72f632b9ab3646e52f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    417075515299b71b2385996c6d76ecce

    SHA1

    df33a923867a927d7b7391733e1fe419a36f45e1

    SHA256

    3a528922a40985560cf19b5aaf37e7580628ab96563f56c8e12dcf2d860e1cda

    SHA512

    5b769101fdbebe3e7808d99c6f7e6ec87d7a4c21e3463314a6a58a17ff765791b43293b7a47ab5a6fca507654485f628e1801bb3ad3b9cf96a5532e10e5fa17d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef097f352457e52b9830966bf44e8b23

    SHA1

    79f4def9edbd332e7138088681582ab7d21834b2

    SHA256

    511f6c081fcc7a01174f1ac836c6b2f4ecfc3c2cf6ea02985c4cc0ee8b63594c

    SHA512

    0b036b9d98c1be89a57a7db930108bf7bfcadc047b738be9f738d2766875ff22cb8d69db7bc35d8a6a00fcd800f91059be7063aa5d5675187026ed74d4dfcb93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bdb6d826e2beb674dde1c3a1f5dc4ec3

    SHA1

    56956baf130cd96f854edcdef76e57d6967456bb

    SHA256

    64ace57362a9f2fe26f5030e0713e2f03d7c89f5ac319170ddf165ba8e9cda1d

    SHA512

    73a2f621163e0124a08cdc00c93f2fe62824ebf5070ef2a6decf48c375603ffed3747524ec0d8e0e65d5bfac22a7af6116f1d98afe956dfb7acf79f0532b433f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5dba179fcb95935c5847f23a2cb210a

    SHA1

    80542e5cdbe4fbdb02b492e80bfee3df52a4b061

    SHA256

    b138dc56806c87d11d75c444fa8cd3214d7a1af7ee0729c8ad374752e0ed1c81

    SHA512

    9e94c4fe4ed7372b5dfa2a1b4509d289de549d854d7f1929442caa79fba94d754137369bb34d7badd48a57d43315baaddf5f73e95fb9d7e3164e30b4f5a79ce4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34155eb2d73713412cc38b5dc7cceb37

    SHA1

    9505ceb48d19f05e5794657cc1c773191c6bf159

    SHA256

    7eb3a45c2e3f4f14a049b7635683b5af2bb5c7bbfdb6a1a17c41e6764d03f7d1

    SHA512

    976ae08f1b67f70d8bc453c0aa5f943219afcca6a4d0ae30c612227d0aa94a425e9ca07fde2b3104ebf1bc459260ad338a3579b3462859c463b6b3f11dce4ab6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    812aa40f17cb6f7024f1f6b1181fd6e9

    SHA1

    2b0c8372d56e1cddc7f052aaf50c55a05603796a

    SHA256

    bc43d07bddf88e8a9f748723e2eed319f5efd7d54c3f5c5d56ec017c5607b6e7

    SHA512

    3a021f9963b012d564ede13a6d02ac23deb1bcc1c15429ff5563f3d004ede01489e0185aa5db5c1ed7eee0a144c5fa48cc16362584cfa6e65e82ad04699b92bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    935a579c8ee63ea9a48081390a148d84

    SHA1

    c5d0665664652631629a209689b37c555307b069

    SHA256

    e4a25b0127e5fa5ca9d1860e950002edbb23b9aa461c8e2234efa99487621826

    SHA512

    8485603b61db747b2a5b2030f8a75c5e55bc0c52f1a4de8b0fb3491add3f1ce8b8e2d90d7162de59ecfeec69e37398b36e0dcb0f6b67c8eef2976952837651ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5aece2960e8eecdd7e630ea59c749d41

    SHA1

    25f3064c57818de9bb79e470561c0e8fe9857457

    SHA256

    50ced5b32b22166d3219d013c522d385c6bfe646b3c0f338a1bc9ff0c47f2f42

    SHA512

    46390f70d281444e7de5d2b93cc6b659ed3c058458145b1b29c5873b17867cabaf057fd5ad39a04aec0a04d4e6f69e8d5be363dd0462485668496df620947e79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    babd4c1be94e5570c8816f6f94f42db9

    SHA1

    6d91799b2bae0e23257328d337ef8bf5a1266578

    SHA256

    68d5b28cd7f366433ff62e59c6372133b1b7b10e4b623d22fa4c336ae0bfab31

    SHA512

    892a3c1420209721916a3e699745b1f48331959c6f9adb5a06cca7fa0dc83cde70c7f9bf00f454d8ac5e425e8058477a7650ba3bad4441c1f479d33714283a64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9323a9e6fda75a774ad59276ddf84ba2

    SHA1

    ed716c3f29a49d74f3431d2995e082ff4402f301

    SHA256

    e3f17b0f4d2537588d691ad4fab201cddf40cde6b0c7984d4c5beee94e269fcd

    SHA512

    7272bfa6d9f765e911b825f31e2686628cd7f3a6d4891d880b810d4a0d0d86cbb3e043635576a083fa4e1d40fbd85448ed8edebaeebae9ebdf015088d74e1714

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bccfad19ab6901ada8b13c61a3c6a73f

    SHA1

    8d5c57926a9b94ae3d57d56a2d49828351d5346e

    SHA256

    5d47ec01a2ab75df1c122244a75f7255624db704f1e0dc5dbdd19cea6d93c805

    SHA512

    00cdde5ef535735dbc4ce18ad59119df55b67e231cd678613057bc817b7e84d94245bbc22755ce2dd22a63c7f9f98402ecb4f40e87084334dde5a76f2ddd3cc9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9a2ec415e4890b2a8f583470fdb6a0e

    SHA1

    6a1626aaec7379265a5147a550eba5febb944444

    SHA256

    99dc2312d6d8030b86697e3bbd48c93213620f64aca15b2e66da042e751c872a

    SHA512

    d85dc6e69e99c505aa6976b88ae88543c68af7ec792dd0716b479e459b2eae704255dac9bb88c4f91a229d901bbcd33e49d919739a360c600e3be4648550bb23

  • C:\Users\Admin\AppData\Local\Temp\Cab2C41.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2D25.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a