Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 02:46

General

  • Target

    3d9ce90a65b36ddd1e7e1d44a851999a_JaffaCakes118.html

  • Size

    30KB

  • MD5

    3d9ce90a65b36ddd1e7e1d44a851999a

  • SHA1

    790c18deae929f0dfedf3f2d09b983d40a31ae50

  • SHA256

    246409d3cd10a52b7e8d76a5156a468e5a72ba1f3b74a660a08dd71fd22814d5

  • SHA512

    d1c504f37dc31646a9146ecd5a25c6b5836bbd68cda8e60b56709f482296f0916da4630c914c3c1594afb37cee53b01156365cbb3ef7c8d32fd4ae2382d78f68

  • SSDEEP

    768:QpUcMB7+wI/mWXFRNG5EyvHaCoxon7Y58T4:QpU/StR1KEyvVoxKF4

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3d9ce90a65b36ddd1e7e1d44a851999a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1484
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1484 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2648

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6ee9cea4c3986c225b64aaef9253610

    SHA1

    ad7dddf2a8036ed1888a3bdcd6f4aca6d79718b3

    SHA256

    16598b833ca63faec4d26bfe412e9975c368ee4eaef197c869b78a10270fd7a9

    SHA512

    d988e2b72d0c0ebbab778b839ed435dd92021cb615da2e90b70a98374b00bc2f9a528f50be7ae2129843f420cf5ae72629afe66783c541d77b2d45e09ae96910

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28760c75a72bef36fa2baa444e73f643

    SHA1

    ad3756dba0d9065a0b303406386289369d51bf58

    SHA256

    77b3f779bbcee1f0a7d276197fe22b673a2f42dd7345f168fe8bdb962e3e67dd

    SHA512

    c35944dab1c0b9780b909d4d245b4aa625f1a4f46da434ac549b2a612d107736c4cf785c491b82b096124d371d4ca41eae53835c2869a07b5593d735628efbff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab0d0b422d5a7f6be418153de308189b

    SHA1

    64e52ffc37622cad264bfaf47f71b9eb5ade926b

    SHA256

    2a91bdf7bfb64ed1c2c7cd6de46dbbb8de46af66b7d5380d79f280d21fc7d00a

    SHA512

    cd93e94c9590ba4bf0bf526abe213c80c04d924a5fdd4a1945db0fbee282027b3d7e1277af35465929513ca54bccb39d45d674f0d9890aaf94d50f1d83476629

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc395af3df5a949799c197bddf1810d0

    SHA1

    66fcc1aed89a4bc6366d1999a77b8f914ecbe1ff

    SHA256

    06e1302d9a43bc7fe68019b02e6e8dc40d1d21d731e1aa3eb86f4d3cabfa7a4e

    SHA512

    62a2ba117dc27c4d07262a35afb1a855db36ca722d3cd6a33ddbe416a18e0ec7dd1d079a3aba2b295c73d37c4aaaab53a72c9f517fea5f5e2271a4280d631cde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f62b5d518faa523e7e30f675bdd59245

    SHA1

    55447a64a9005bca85fdc620126fedc00f667990

    SHA256

    ff733faf643d52797b13231874bb9e4b74f22fb8cec80ba3e42ae0b1a1cd3f0c

    SHA512

    aa5566a95c599613c424bbb08ae9d20ee7fc69046e0e1d862bfa73d6e6c92442682fbccccaf80a9f28163e20fe5d20390db6905323055f12b4c33dd112769c89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c17e8fe13ae8c4d3013e6e7d80579562

    SHA1

    268516554d6414a9254ae782357e9b5029466b34

    SHA256

    1cda94035255cebbb6ad59cfa9e65024e62911873ed0ea0d4624632121881ad4

    SHA512

    87292051acb397a0bafcc4a53896c58192c3b4a7b44ec309cb685993b2870aade2504f4b81f8d9a99088af27ada1d2ca2099e473659e97f919734d1a5bbd28a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be7d78900379a9f5987342a1602c6032

    SHA1

    b11c3a506ba742e16f70d2c711738574f854742b

    SHA256

    1599ae7083c044f1033ad7159b9b6a8fc51d3b3e699c02dabeff88d4b3356635

    SHA512

    d8ed9144114760af88aa972220a08f1dff638339ae7847ec97706058fcb6206217145973575ad289899cdd933d18973db98346159f531735eb2f456a4609a197

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    924781d83724bc0828368fb5c9b9266f

    SHA1

    727674d3053a83df0397bde3fcc8cb9325cfd723

    SHA256

    f7d04b5cc3d1e8fb4bd339b938718af2fc210a71421fee5ac003e7512ba1113f

    SHA512

    2a36a55e2ee3df2b2376664f1439a4d882828df2c5c41ebbf06131c48673f6b6f898db014cc78d5cc5cda0ea39877e69ce049c184607a33fe2ea008f65f15cc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d34cbb9002751b548c40a0d5aebd923f

    SHA1

    2e6b7c6cef689361dea134400a3bfe7a62dc144e

    SHA256

    3e5052d4e5aad1efaf44ef2cdc9a21e41bc6385ac62796524d4f5467d235ada8

    SHA512

    a293a6c5f8d11d984da6f4d9d1e49340703865c6526017caf276b94f048da98a4d6143a90114dc9523a03c954722c7e746c0ea4e2a38b27c028a6a59779c1bdc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b8bd2a8a7e44438079726ff675e0dac

    SHA1

    88b8a42066be3c633a58539a54cada654c3820e3

    SHA256

    b175e45de5660c2af4e120446ce1b1dc832be6c4803d3981041dbd2996886073

    SHA512

    84fb11fa1a247803cf1d14fcb561db0c28caed2c55a68deaf90baf6fc1564824945add80c7f193f6d8c10367ac6f62a09ed69943cbf00b8e634115cb0b7cbe8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6429d26ff03f7a10cdebbf7fa176fed1

    SHA1

    d750013ee30dc86a02d26b793b531207a91c928a

    SHA256

    556282f3029943fb9c5965be332a706ef4cc2b8240ff6d27a1b3655447a1aaf3

    SHA512

    c618a78088b8671b55ae10123b9be2a97c64bec8b7ef3f8786e3b184c24219d5f4d910a43a1a8cb52ef5d735dc8134d8c3b4526d4574a05fa7a8c9ac07adf103

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fe8896152789462ada52959ac682b95

    SHA1

    4c192cd7828dc170220349d874741fd485ab2f25

    SHA256

    29d062bf8d34aa2f11c021ebc09654044b2b5fd608f9b084ddce24c730c2cd66

    SHA512

    2649ebbe0aae32af2db0a7f1e06629746b23fd2f184be1efd47834252b017ed7ee0e6569e95dfe0231a167b586691ee2d05c1997922ee22744d4f8c05363afd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d0d210b5d0095518234dfd829dea7d8

    SHA1

    9a1d09bf7261043bddc30a1ebf21a766adb447d8

    SHA256

    c5ac8586186d10cec522f27df207fa3e70cd14b1d82ad05f3dccc9ec66241869

    SHA512

    1393ec6e2f63d9f9622dbd867b1a017e01672c97cd82de09fd39c7811df02a4a9237885071ec6822ea77dca072240b81d191f242dc3e109037fe70026164c088

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca4fee866e1a07164d7cf4d1793af8e3

    SHA1

    45237f45b92699036dc371f7af82ee8c3b22740a

    SHA256

    66af0a36d03a4acfaf83c2bc6a25836e7de67ffbabef9af06572328f1016efc0

    SHA512

    82a650e86b5905d9803842d2e46afebdf90f3ace42f5f83486ec1a61f947f81400557dabcc36041d267a1cd404b286244a684d7efb8138a523e95016eebbbeb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cee68d7ece396397bc1f79127bb37aa9

    SHA1

    501b6c79ab1ece212a351bfd2917348d35e4c138

    SHA256

    5096104411b43e220976c0bee63ddd59cea5a8387728ac8b3d3cd8c71ff1eeb8

    SHA512

    cf85b51493a182bfeb63390da2ecf51d8914fea781a06f49af8cdb332ed51b7609afa6d805f0781e4119d0ed870e8aa0697ede1cc1678824364f5c8276448f47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72e8bd63658db8fa373d682d56f5369f

    SHA1

    3643135517bc8e5f252184aec117638119a0501a

    SHA256

    902a2eb20c01202317c8119ec61aa5f2177d0ca6b8682c718c219274fbd891c5

    SHA512

    6016f474527a7d0de4ec78bbddaa271eb455a79d64a8dfdfa28443d7061e59290b09ab85367b174e794660eb4f3f1472ad2cacb87dc3749eedb00894923df46f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0901f645e3432b0bad1e17a8aed992e6

    SHA1

    05d3c803ec70ecb6da7c7cec56e7c6b8bbbc30ed

    SHA256

    9d9e9de5c03c9b99c1f5e4d81cbf2060794d5c51d37bad087feb6ffb6ca04c82

    SHA512

    caffad0a17bab4efe5f73b21800990561ae12da06fb2d438804edb4963532cc077b4087b55e0e50dd37b68565d1b337bcd53414c2ac28316cdef2b578376e778

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec017476b57b6ca430c0aa2e47ac07dd

    SHA1

    8442cd236c4f9f2cb63cc4a348c611a780cb97eb

    SHA256

    419fa3401fd453e95638fe1960d759cff1c4f166801de9a9c60f247e269d4a09

    SHA512

    8a63edd03346f004d1c8334cce257067f1d749ca7000038ee6eaccdcdbe5175e77e80ab8c547a051108540dcbd785deafe19c1c78c85c89ba6101e9d72ec8252

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e33269b4ec8d34ff37f5e7d94ab3de5b

    SHA1

    dcbea8b23222762b5fcc5e461124cb489cc130e1

    SHA256

    2bcb8447ccf2f2efd1dd9d926a1bae56f32546bcc273b2c6928dfb65ff7f82b4

    SHA512

    7c52947536252747ac2e2255ed89b6d099a26fe5ff460925f76447c1c1dd5d7428eca259c22a8106aae16abc7c36a0f0a343c0b0068e213c40184c30cfa91448

  • C:\Users\Admin\AppData\Local\Temp\Cab396B.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar39CC.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a