Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 01:31

General

  • Target

    43fc7f91e33d040dfc34c345599b0c82_JaffaCakes118.html

  • Size

    460KB

  • MD5

    43fc7f91e33d040dfc34c345599b0c82

  • SHA1

    a17f602a7d1449680fe2a8fa7630804ae1e82edf

  • SHA256

    5ee46164c6be7183722121f3be876ca52a6e066fc435f7b55fa6425d69ebc314

  • SHA512

    ed7dc0b89a82c764faf13fc7add0e99b3d0e29b4eb53d618c4a69816c9fa80237aeedb90f2c54496dbf70d920b58b7ffb3868b27516bc7a81355705a14a6ae71

  • SSDEEP

    6144:SDsMYod+X3oI+YRsMYod+X3oI+Y6sMYod+X3oI+YLsMYod+X3oI+YQ:Y5d+X3P5d+X3i5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\43fc7f91e33d040dfc34c345599b0c82_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2848
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2848 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2736

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eee3a0000e4e0548af9031ceb26995f9

    SHA1

    9a595df01d6f5b1a6856df748e87d9d45829581e

    SHA256

    f46337988c9a398ed64dc8f9ec00a70663aa2d7320d3a89f1da71836c67cdd4c

    SHA512

    8f4024ba14a165eabcf1af92b656a62d6ed96e74298b79bfe4f3183b81d3a830eab1d9eac252b852151392ad924891be68c9a8d9d8a27847c7eb20b07d5fb11c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64d1ba1c73921713be59101e0f72167f

    SHA1

    a1473823df6a4661318a54abbd66b31f0c076e23

    SHA256

    76210396cec7f3980624f65592d6c1a20bdef4b6c382ccd98a6aa6baec180c96

    SHA512

    928337198967f07a226e497b78094306408150e31cbf41b4ff4c32746fbf446469ef2fee190b0ec896dcaa3c2941abe41ff3463ed1d3cf8a4edaa3f46141fa7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef093c9be631148a12fbee3adc173aab

    SHA1

    eb873369999670554b05093850833cdfbb3311ce

    SHA256

    0fd981ec3e8fc192751c37dccd409ca5d96eb52438af054e635fe5a161ee9246

    SHA512

    69c0a0d30870011e8b11a322d29b3278d92fd948c2020059090b17caba4e3ed09998a5ab52cad34532be3bf082f93d4b3c71c6a0b9802e29acdc7f67cd1bcb44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a9779d1f27451aba64f6418aae29150

    SHA1

    387825fafe4a0b35b1d39291515c7601eaa6c1fa

    SHA256

    a0cf6f691346757a650cdcaf87d3e7f9040c15093b0038af2161cc7be57fc268

    SHA512

    721c8123f3525c61e347906226b893dd3765de9017e7ec6f86be9babbbedcbf5f86e85d68bda9fe9e4f1043e0e499fa4a9e8bc365cf705b0e58e2522d3c844ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f094f8a9623f8a78fd5cff6d0433f10c

    SHA1

    2541320ca575220b061821febd0e798baacb3d90

    SHA256

    7cf32e751b5f9c2c2e7f0240ba2492df9efaa331e53845742d3db4a561e343e1

    SHA512

    c9afc05eda649532684670ae63677b1c99dd302567d7c3b949522aed9e82168f5993caa25ac74365055c37f4c8265f811c9f7364af38946c603895ad18d6c083

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ad31b5ae1649990e8bf41c686f7c6c4

    SHA1

    9655a9f42c6a8b10443b0464bf44a8c12bfc6849

    SHA256

    7fa328d854cd43465b07fa0f401cff77c3a957cee1231b9437e53175e6fefa91

    SHA512

    0350b6e34e80e09320521b4d67fd368e54d761a0c761a4446243a58008052250d3051e0e639879e16ec8fb13709561f9c483dee1cfd1c633eebbfc9d5e51e7d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b637abc602a59bb91ed5a943fb247667

    SHA1

    e85225333d940d549535333a3f3552ab92be5155

    SHA256

    9db848072b8cdf31599c2d9b94377167befc5bff3f54da3d11529fa6610807bf

    SHA512

    50cb54d9c3d280bcfde4ea0ce742127e4d14beb457c970ea8da8e316731587613e9871583753c558616bcca81f0e8da2a919125a7f368446f2de4d8316caae29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd57cd07a770e1232ad39f52e3bb695c

    SHA1

    115ed7287ea59545c3aefdb68565dcf8e88a6570

    SHA256

    6f8be75b6d40a3752bbabb7b62a25f51c27d9fce15820a68c828446dda4d670d

    SHA512

    abc809c41145e43d58e2b8850a8a0dd1923ca688078063ebe69b99a0a1e27f2e1057992bdbecac34f3763e8e1622f231811704a3bdf7e2ad7cae5d197efaf9b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    afe86abc3c8aeaf073ab624066705735

    SHA1

    69072e0a1906ebaa543bf5b0f62aa2bbd2862c78

    SHA256

    4118fc058023f185728d1ebef13b5c7394f1ba908cb15530bea647d158fe114a

    SHA512

    172431ede6337065023467343cda8bd774fe8af13d66e1a18af4923476c4c87f44e9d43f9e1d740f3287719d30bba4949baec24ad8c0cf06abff88c405964ff9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2daaaaa13a043eeacb733cb92c6567c9

    SHA1

    d5d85e1428aed5ff823acafe7edcf28afb54cc76

    SHA256

    ed348554f80a931338ee495be30059f70547f0cc3790ce4b59d4f30172b19900

    SHA512

    d3fc1c2df2da5772b2cca4d5d62fea1699321c394f96a772ff0a46ee496eadae7049bbec01d48b74dd5eb4948206d1da7223865cb6c80e7fd8e4147f4b9f1589

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41dd5a36c1e717ae5caf0d2a5923c9fe

    SHA1

    d9f64b17b83994711c3492f9cf93f1dea9a03451

    SHA256

    0459199daf8ac508922af73045417363bb4ae386b7307b5b81bcaf41d933a813

    SHA512

    e81dbc4f2f4d52302035874965d4df3f098da0d6789739beb25d02e67afa42ea117d173297b7f69688e75c39ad7d9db5bb51fcdf1466f002ab028e59219ca14a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3bc8c727bfa8fc3f34a67b0ea55b255

    SHA1

    6b6ee7c4d1c179132fac2a1e930fb17a46e60b0f

    SHA256

    c1246c5da1cb4fd94ea790814e170b391c73ab37080ce09ee43ea82009110e3c

    SHA512

    702f5f92e39060085871a838faeae2b0a3b4e22fffe0a5a0a0a73fa308a8b5246d336d2df793fd04214d4e89475e2bcd388df5ac25e159da6c959f22c2bd1c2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9de6df139ec072e7140f576df074c189

    SHA1

    c6314d56014424ef8a3eaa669f169ac7b2ff9d02

    SHA256

    57df5a644665e412c685b28c8520072e6290cd975a89dc6ee3d8f2cafc244dd0

    SHA512

    c99155fd5f69b34060686cee43423d682062a25c4393d81baac40b217189e58bcad82b8ecc020e02ebdef36e5d567d9b2c3253193456a8ca431226c3dbab11c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4cf88abb8a04eb9f492ff05fb79732e5

    SHA1

    d08e621e891246e6b80e3a7bbe80a72290a70bef

    SHA256

    e999cd90af22ef8fb17c2c512b8be0020a58045f67925731c21a2b076d241f35

    SHA512

    1280108bc53bef1e9a4de2d0a5496e8a49ccf82f2ccb5a6ed76f84664753deef272744ca56a897473e2f035e63f1e3fd3c47e0845b946f210780331938091cdc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c5b09a28f7e811f646ff1cdd7a1b612

    SHA1

    9dfb99af5e9592946b5fd7a78901d3f653387eda

    SHA256

    33b801e20d7e77e20a15dad1ed0f3a9fdafcb12aa2d7cfa2603fb0fe5db8c378

    SHA512

    cfbdd95ce2a35f3b5f5867fd371b5599b7dd0bb5fecafa8d170714f51dffe650ec901406956c49e3e6cabb32eea9f750c7996428e0280b12740a6f7bedbccbd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62357c0c5378882bad94baa91555c0e0

    SHA1

    49726e0a8f74c5c1cb2e7b4dab9a5f443fcc426b

    SHA256

    9180b34b16e662140aa3499f846bedeac69b906c08bc078c5450c59f5f198e23

    SHA512

    7d197eb92ae41509badac91c78aadcb1a3feed2f5aece64a0b327c1bb08af9700ca01ad1a896746037f00bfaa428a605aa31f0cf398b3d763a4fa61ec291e6ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    535694638f378091fd83d3b24a41fef7

    SHA1

    abc1b533df03728b05e6078d6a5e032895254e7c

    SHA256

    9f4df9225a9e8aeb93499fe11c4719355ef4b6b0b6d75523d8f6d1f30fa26b38

    SHA512

    d325aeeec1cde3755cbfca369ab8da92e517077eccbe42e4a10440d917c41199870c7d64ad7c0abbab5b3ac62cdbc99bb2b26218de2a49005df4cdb6f70b1497

  • C:\Users\Admin\AppData\Local\Temp\Cab48A6.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4998.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a