Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 23:18

General

  • Target

    4385776a176f6d3916ae30924588c716_JaffaCakes118.html

  • Size

    23KB

  • MD5

    4385776a176f6d3916ae30924588c716

  • SHA1

    01b863845be87d20e6c42ab586f118b0a71fb48a

  • SHA256

    d60c5f73b656b93dad2cf2334344ebb12c603d52ab3276f72a1efe355a55096b

  • SHA512

    0a57d377ad8edd085bea4630a45f27bab315fe18b507b8ba994a8d7a16c4e02b1772750e48fb954f44746417a1126ea0407a363b9df43960c330156ab04a7b33

  • SSDEEP

    192:uWz8b5nwOnQjxn5Q/O2nQie6NnhnQOkEntUA9nQTbnxnQ4CnQtowMBaqnYnQ7tnh:5Q/OpKshq

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4385776a176f6d3916ae30924588c716_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2960
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2960 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2256

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b45ea2f906c771d640e1a6c52cc1475

    SHA1

    b686e4b33affdc8a3b7c46016004bd1e800813a2

    SHA256

    843606254b4a921d09e5e955f2fa4b97112bc10015e861e665dbda0f273c8f67

    SHA512

    0333c84d93b5f9607bb4d3198b980562e448eb7bb2a5b8299ae68b4dfd03a7c56d17e5687b2c4605eeb24da2aa669620b46b31cea28114843fe3f91f4f79e721

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6da1d6df2b5ed7421df763de1a63bf68

    SHA1

    ae94596e37e59f766a44d37b8f2849445cb6847a

    SHA256

    1f6c7b64c3d026f7461a1c97c98ad9c130df64c117429b9811fb5cedf14251e9

    SHA512

    c22aaa28ff42805a12e15ac130de442608bbd49c124507776bb02199b1cf99aade477b6eac8c83dc99cdc5b6518a61d62513ca2375e3f0ea240600b5527ab702

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8cfdc954f220a6434d629382bd0409a8

    SHA1

    f4053dfb67494b760f8d52fe13214b4718030076

    SHA256

    b31ce4417173d617121e120977eb828b1415be140eaecbf65e3bd7772a48029e

    SHA512

    4293a386f6b7dd34b2fba880aeb3808590d7cc3148b179e428b725565f8afb2552352eb37c471fd94414ef8e30232d1f61642981e85f18e7bfd44c36b15ec19f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9927352782f7c8afb0861f68365ce635

    SHA1

    d6e79c490632996af9a7f39dc2be3cfeb1116fb2

    SHA256

    a7929b426e726ba74cda844ec3e1595602531a37fa53f0c7ff0d794ce4ed6071

    SHA512

    897116b2d5111ad6cf815d7b3d09c445d2216235a9639dcbe249c77d44219fe0aeda60efb52480a9d87cfadf83263acbbfdb74ef1c15ca15dccd6128c7b9de57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34985dbf952f5d9db49278643a2b9a1a

    SHA1

    3588a3bc7331f46375df3a3ae1d2d61589768fbc

    SHA256

    7b6c03ff1c0c9605775f93024e363c9096dbc6093f9919ccf0acd156816dc910

    SHA512

    d6160997ba04af1ced5fa9463031ed032b7627def3ad8b09f271d9dcdeccfadb0b9bd8be5596e58c15e9d00275204845dee5e49a01132d3fe33eccdbade54922

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5aa68683c9575b2b93d340cd834b558d

    SHA1

    ad30c3688ac097778ea93a675001d08361b2c906

    SHA256

    73c95a5680cfebb73c40c1c66184eb0832846e380f0388c44fa1abe2f64d30c8

    SHA512

    deb5f685d3cbaccdf6806fc4d4e0c7dd129ae9b58d5865ed501bbf4dcd59e28d2a7247a4c11df4aed412c9049533a83cfd50802cc8bb2fb949fa2737a8934817

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8cb47910313552f9308121cf5115feeb

    SHA1

    0230600e2fd9c344123f60877334b0b6baa1d9f6

    SHA256

    5086f8843a0baf6d49a0d5991dcabd5b32a0fbf0edd0d22d4dcb43a2ebff4e88

    SHA512

    fe3ba2d17e0dd5abf80fccf175aa156f81f23591579e1734cebf7a27b1d6ccbbfff000464ca8942c326741ce9090af570063c5d6365af5296a4c356dfc1b7573

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09da3baadae363b20bfa86c867024ea9

    SHA1

    84eab0400938940481bfe41681e8cd6fe7a20f4e

    SHA256

    2dcec31194a9ff30765f081c39ab5434ba455a191cbffcd3164279f36a09b799

    SHA512

    c58cb24103f56c64486328c85ffd5c99bce7c2a19eb9cc58bd9f9e472aef66185537678d6a8e6e9cbc3a84238740417b517e3b42bc8edbf126cf29fefd3a1cc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e164070ccb9985615ce49026b143a2d

    SHA1

    4f3db5d92e43c01a04664e88b6cf7a23bdf7142b

    SHA256

    9a1d7e83c2e5678b008c751679605d0fc984ae1ba093e11f7a37e4c1522e3009

    SHA512

    427361e639fd9dfb69350e6121977f099e805ad0fac957087ee9599123af7690e0cb4fbea45dc48dce5005fc64457d3eb4783e3ec1d145a8745f050d5c4d5c17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ee0d3f25a1fad633d0e2cd2377ebd4b

    SHA1

    3e2c3371b9c0d2aaf8302bb38fa56af2ca5991cf

    SHA256

    def599218e7fa5daa5f1da5f89f1493ff6ddbfd3a46021a72653b6ff326086e8

    SHA512

    7ab830bb9a20381e5c99195f51bc2b6f49c5ce7e172b6253fcdcdc7fc2bd87490a62f394c8b45379cb2302f9c2f71975780c3371e158d7c0b2bdc36f42b8dda7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0b43575aa90474798a5767e792f496c

    SHA1

    2aa978f98a4ae33be7d5c93f1719192eb815c71f

    SHA256

    1a7513478194c70c0065c85056902156e8808f42ee03a3d47b968890b7ceff4d

    SHA512

    9841da856dab4c595f32c5e824c89c25925216099c3c47482af97499ecfe497bb19b7823a59d608db928de6276282f3462bb1663fe8bda99ed12ad0bc9b938b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8984d9cc52df6e1c0ee206d40d47f847

    SHA1

    7078e79b929ade37707dd794c9e0a4536dd820c7

    SHA256

    6dff7d76cc211c9c7ba12d4e51d23f6889cde132cbe33b1d2f1e057f1947360e

    SHA512

    ecb81e9a36837334315c44c2f99fd7c1dba35e7672f9b2a884a72ebb60b8ef18a0d4d66fe408e100d7a21cfb2e1659dbf6012fa952e89e6395771d3d92b2873a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5baa200f325a88244af37b43a5dc5510

    SHA1

    3091efbe0e17b11f6fe8ce6daa8dcfc274535e25

    SHA256

    e8f4aaf9eff6d967d6921b145968b4eb132420d8a871c0eab5a018aa4e5a1e1d

    SHA512

    5f6079243882720d890d42c602d758d9bb7748a2486e36fb7346d02ecb07cfabc9c0a5774c7c6848c37811e153fcc786138a86b7f11b525f950349b39dbb5a97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a99aa97d2248bb20eef89af7342e88cb

    SHA1

    d942b728eb882ad9de34316eb902b34e89051b7d

    SHA256

    85a83f81e81b20ea5f6380a3e2561cd096440e1055d609b975814663c0d644e1

    SHA512

    fd9c12a4f4727c7b65286976afe251f424a88f7d944b5cb0afdf40cee53746fd984acdbd9e214d2be8b4a3e0e6c0348265223028fc5b7d2de151005b2a9b5b95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    26656728ec9c3973d1feb1844412be3d

    SHA1

    8c1b98aa81c42e0e6190c6d855a6ed32a2ec688e

    SHA256

    ac1cc05319686418b5471111469e911f4a247c4dd88cc0b22998a6b840142252

    SHA512

    8e73f0c2e8920fbcc9e9755b5b8fefc5da11909a3311ff1dce2cc3fbddedd40e42d8fcf3a63f1a03f9a891cd6a1ad9402dfae5904f1d125704f282c9e7dfa5a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5255c90d87c0312f5fc37c8dcdd62817

    SHA1

    6d6ffd651870957f6eaab74b45212b98f319c52f

    SHA256

    fc2903b5a9556f405382fa9985bd96b48eccd90135201e02e44428a6f5e3823e

    SHA512

    651546d301fc326a0a23a64f28d433037272e66b7cf60a34b34afc93c0cbbb3dd8c6997260202884078faabcf3b84cc89f2c7f13a48d35e0e01f86f74149b47f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65809b8153dc7ab5c3da5b9d5ed8a859

    SHA1

    0fa6b893d9149b76427be81e7fe71b5562d68f35

    SHA256

    898d6145dfead65bf7f7dc927ff001eec6f79c73a82a6dc880f08a7ce85c8df2

    SHA512

    36871a726329b106a09b0aa773d6899f0acc16200f6992ba872ff7b02da9e0f4775f1dfbc15366b1b37a9e5df0547e40c1a2d3cf72e3a87a1605a579546f49b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3bcabaa048f17365856121f06fa0f254

    SHA1

    30e93ab04e562144c59f9ce509649968e51efa35

    SHA256

    54733629f2ddb5911f397e0f63b9e3e283b3d74cfb11f8a69b5358505cfa493a

    SHA512

    9170fff721656339b4b3d8ef0b5321d8d7c59946d9d6d481bd87ff38e069fa9503bf00594e6758439be8937ccd1525e77ee1ac847f24b9ccc0e4d81a5f135ba6

  • C:\Users\Admin\AppData\Local\Temp\Cab4617.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar4669.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a