Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    13/05/2024, 09:58

General

  • Target

    3eeda5704a640576764c6bfab3219139_JaffaCakes118.html

  • Size

    190KB

  • MD5

    3eeda5704a640576764c6bfab3219139

  • SHA1

    7a6173f6ed056155b1ce7c35983cd97c0a9fd89d

  • SHA256

    2650df5f167ed8a345adc76597ccd507df1c2dbf7d6637c6b581140d2ff144f9

  • SHA512

    1d91a38ad3bea9231c2ce9ec3dd62b2da90f6ac3822aeec8274906801aa2a46b229d35fd2ae266d7a18a877dc68060e48184bb9c826201c814c8ec7171290d3d

  • SSDEEP

    3072:SGKyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFiM:SGvsMYod+X3oI+Yn86/U9jFiM

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3eeda5704a640576764c6bfab3219139_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1280
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1280 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2168

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc05cffbcaaf4007e75d3d7b9061f0d0

    SHA1

    34a544feb141d2a3f313202478ec92f68fd87703

    SHA256

    7a4a4216ffee2e2b5fac878efb45b7f063555be37b2cdf6a0d6f7d4c48d056e4

    SHA512

    1ba273257f0b6e8bd432666fd0d33e90e411cb9b813978d9091fe87d6f6e6a64b28b57007014e97a6e910b58c3c679ef1f3d28889f56a3338dca74878bff9529

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9444ee22a42c9e10ced01f441676d4b7

    SHA1

    d368add91447c0334952f99ae8431ac282d2c83b

    SHA256

    e9ea58dcf632bc720b06abbe6e8bc8f5e7c116291833a56ad1c929edb0e38689

    SHA512

    4908f613813db033d7ffc26828e84b74267c5b5b0746b2515770bb1a20873514f7d4dfd0ab8d3d7531311458c7bf792b8655b580a5eec242a6381ee1c9da494a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f66261651ec2622b7ef4913b55063324

    SHA1

    27d03d91d0e2dd440b2d41bc0dea00d1f6253be2

    SHA256

    8d9a5031aa8b64417365f246d378a0c0223bc9ae74ff94fa45d002f3df86c913

    SHA512

    2ae03eff975cd720cf4a487750daf6eb9c06329e79acc3be1b740ddd11653316872bea87ef9b87ba68a105c925b9679feb932cccab8c79aadb33b971b2b11656

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44d60c2cdcdd38bb9d50e476bf998c5a

    SHA1

    7734a322a8e921e024f17b1318f97ba35407bf3c

    SHA256

    80d8b41f4e43ba84251b6d6750fa98fcb00ca82ae7057feab27be3878535a799

    SHA512

    eec9f8e8a8f499d23cf8ace31bfbcccc5e9bf577797e09e09a5d30cdd881197e9f8664c0dce63611130b35f0f3e803c5667d0065e8f45916395a7d9bbbe8c4ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f647f64fb7a32e5c74537a6ff2c16aa0

    SHA1

    bd079b622acd568eed92b09dfc6f353d627750be

    SHA256

    f332c260314a5711d610fc8d6dbaaafa8665bf4e8185e4b8faf80703dfb504ec

    SHA512

    1a22cb6b2ab5d4c4e113a64ceabb5401225c73b1391aba95e4b8c20e391a5790391af4e3093813e7ece50678c854a1bcc5d64a58302deca435c2ae41567f452d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c1822d90fd6f2f79df752bc563b954a

    SHA1

    f48a744ceeb9e32a6c737318b5d636b413736fe5

    SHA256

    c96083414a9afe7ac68bd42f490c7b8d1f9b453b4ed53af2d8d3e80bee9174da

    SHA512

    cf96df20892a563e88e3c4d027a3d3afca9a5572a2ee0a53f771cbf3823bd32dabfc2fbd671a509601bce92ffa65f773974628341c80599f5e41450c2623fe42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4506c194c2c8b7e82ece1073fffd86a6

    SHA1

    707e2c1d3574af3ca161d77c1c3249b60e4d26e9

    SHA256

    afe97aace6a839e82be114b7bc377ed1fece8c36c3d2d18e5454d13e8f06f546

    SHA512

    a4a90790434e6529a209a2f712b78d411abe919c26b09d1a574aa0b91b969348b09da3f78e15d1d61c00d61726d98c48825d0a63569bbc2444c0cb31d35604d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38650e5b9678f3a9d76d03d7970118eb

    SHA1

    3e922cc5341deb55c28115112a48d9c326534193

    SHA256

    e7588dce926a3cd357d512912268947bae69dcfc4d09adf7373b51db7f09932d

    SHA512

    fef853854b7dd4620fae3516abe6c886954b1ddb0757f6fdf029b108bec6c20bd6c61eeaff384a81dd3dc58d2143bea802e70dc407129f60bd88c0cf77be596e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41eaf136c48c9ff7bf3d3b3cae72e31e

    SHA1

    b9f42b968a309269ad02a67f0b24a383f1feafdf

    SHA256

    b3bbd873dc55fa374be1f1a3983104fe67374a9c6d33374952cb43fd0209af0c

    SHA512

    9df675a6aa276929e57e4ccebb7cc69d9a4e9da45c557fec34ecb72c500bc7534007cba688e3b13f0ad0a5bdcd5e44f1ad81a4d615035abd5058ced2e0096638

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    81c5ae30da0485f5bc021a077d5f8692

    SHA1

    9fed407a67964d3c0355a96c553cc831ddf8306f

    SHA256

    ebb470cf7e9b01261291476ddbf27cfa403d000b300ef842361c129a015fe62d

    SHA512

    d11cadef6489200e05ce29a46e19a081d596676f075af60fd354478c248ddc334614106255f9d17abebce32268e5b1bd0b88cfbe3d49ff9c462fae0039ef3d87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    429350cf22ee55256571ab1aed81519b

    SHA1

    6c5379ef42cb8dafb133103ae8b5a0e2e9e827af

    SHA256

    00ba0b6e7f9f40af74e25331e99b8fa926b078f0fb3a5537101ce39e807fe9ee

    SHA512

    5bb73242b53cf26a13c8d2c55c5241627ce25b2ccc64981863c4c24a284a1f4d09f4c2e9eab63072a12627de11693dd9caa3137df63e205ee79b11977b8bbbd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0663b347f721d2910a3185dc24bb33f9

    SHA1

    3b1e3779162e124b06c3ff327fbd9c605e111151

    SHA256

    15b34dc57b0e633e8ab1924eabee739de3f55cca0d36fdb8411bfd64352b887c

    SHA512

    12679ee30e96645ca16080e5442c1402655b712915f4e4b6d43ed9caecd282e9a37525cf0a9930d74169064840c31483b719651ff26b5128429ba85b7d93775e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b722d46255127e846cb036bcb67461f

    SHA1

    344e9fab74830a36a33e404b7841df5883bfce76

    SHA256

    d8ae0a43699d16904fd9086e414e53f5c1befbd397c2b43455acbc195cc2d6cb

    SHA512

    7c00b3e9d73507dfa25d0d9965ed7efac60425bdc95f6122f4ce4325297c064b1580cecfa2f09a373523a9ff0ed87aaab69d5d97ea53c1c773c5a3a19f37c9b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d25906f9280382492504a3543617762

    SHA1

    78f395865a046511b5998bbcf429347dc236796e

    SHA256

    93cdc6558a79f158accad05ccd355376015545054ba56ea9ca49706c38854401

    SHA512

    d5cda173467395afd0fbed45731064909dadda9df7affc7060683a06b1f31ba1130d19ec0f315d9594cc7bc8f472a7886cf2e46598e6bfb2ca3f78c48f1bea17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce77cf05c86f7965f168f16627240388

    SHA1

    992c60fed3ccaa85d316b0d6e80109affdef5f36

    SHA256

    992da7b5959cf5c71eaaa17702040b5db972f9ca7a626d615cffcca9199661e2

    SHA512

    20e3fc37c87cc5db24bafc3080a59cbedc0bf25ec4645c2739ad32309688565eb620d3f3d0d1afefa986e946c00aae618ec11f6d9019efa1fa25cb2393968951

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0bd7be499892d39a3c57a1ed5c8bf3f

    SHA1

    d799fdd1ba4732bd7300f25872656599fb216046

    SHA256

    750f321aaeb1310ed89e1c00f4799f19ca7b2361ca3358b1dad4ab59ab8f2ddd

    SHA512

    9e229976c59f1ecf798760596c882110c0be17196e097980830aaa50008c214eeda8b5a295cba320c1923dfb4ea0afa87959f80cafda990c0cea0185312f515d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1973f9a6da079a22611dc84fe13f6f3

    SHA1

    9655283ce3d26d31508d9cea99c6440b50fa446f

    SHA256

    7df2401fde55bf77096f66a18e915ffd245869f40f85977894c9b967b30187a2

    SHA512

    745c70b7576fed74fe8ac148328f6f2f8a26794f1dd51c84c72306704e125a8c7aa577e6cf1e97e95af13dc36eb22c462edba83339e83f3ae557e85b71d51745

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f81fb342bc04c2af4b3e087e675d8c2

    SHA1

    1261f7cb69b84ddd14adc70d241c5b6a43c3e7de

    SHA256

    a34a9e6189651af1d5d904d5700f93f2e8c576530650cc265475b11fe04c3af8

    SHA512

    3ed9143e4b53f3b62d4649ab5ac84532c597de15b201c89e05835fbc7a9cd8ffe281dce715aa9f398e9909e9e52ca36569cb387994ba679632bf97e1d421776e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    824000e34d2cdeb4075f2c62972183d8

    SHA1

    880c2a25cb73ae31242fd14ee1a780e28f8de43c

    SHA256

    08ed59caef653ca40d03a653fd76183dd9e1c77c042f3619ab633644900e8ac1

    SHA512

    cb330e50f8fcabbe6f3d57b9dd6e3b8001f0847bdf1f2690f58028eaa044c1aa0d315de55697852458e7aae9fb2528da6b982d1bc19e1508a3d98b40349b7825

  • C:\Users\Admin\AppData\Local\Temp\Cab27DD.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar28CF.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a