Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 11:24

General

  • Target

    45f23f14dea0e9ea23d42d3c72ad756a_JaffaCakes118.html

  • Size

    67KB

  • MD5

    45f23f14dea0e9ea23d42d3c72ad756a

  • SHA1

    7fcec95a669019e9f12b6ccdb27c4d175061eead

  • SHA256

    654ca2096e4186b04d04697a2fdbbfad32c9d3b056e7ac0c8402184d9cc13bfc

  • SHA512

    e0056f764f5560451c2462913f4be51fd7e4d114479f6d22f852eac7ba20ac82a64b81e7805e52d11d092e3e47964b5b556a8025bc492b0bc430ce26d44e6884

  • SSDEEP

    768:Ji/gcMiR3sI2PDDnX0g6+w6Q3eoTyS1wCZkoTyMdtbBnfBgN8/lboi2hcpQFVG8X:JdoTzNen0tbrga94hcuNnQC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\45f23f14dea0e9ea23d42d3c72ad756a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1940
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1940 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2964

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d7f0f0837482fc44570412b8c1219ee7

    SHA1

    b3c9e1369b82ef38e45c42683232204bc7c0bb52

    SHA256

    d06b04de93c1735476a4c69a34c02426af06be243c1164d37cd0663261440fdc

    SHA512

    92f0bf2bc15872b599db13bb53e78c8d822d4f69b5ef49e8bde4ea66857587da499bb3118a3096ad05aef7ea4e3d9be61c514b5454ca42a6ed889f6a66c3a644

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac29a738bfb335942091e0ec73f33a2d

    SHA1

    f6f081a9a791e4e9b86abe25a941a6ce031ce629

    SHA256

    3f859ce0b1a1107baff9b30df67d0061304a0acc2c5a551d9eb2f59441142734

    SHA512

    0aafea60975c5b127361dc744e422a491622e67ed306d9dd656b6854ec981fab9ae93a53b029fba4b20e68831deaaeb59a3c0ff4d893bf7e276a9c662da1f994

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    627207372d5f6375bba7f05a97e2c348

    SHA1

    0dc476d4bee188b8289ac6d2d8a34143e2a331b6

    SHA256

    a82c040a49bdb4ea293d2992678d4719a05cca40bfa3533338db8416e02eb61a

    SHA512

    6d0ad324fbefda9e6e4fd49200c15127eec96e277b90f30e5e1b1b95b227f256e345e30ce8e472d5d0fcc005a0abfbead1d8d21e3b539412db04304a39ac1916

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c241927bb3bf336aa3d4296eb1a0175b

    SHA1

    c53cd0b24c9b22e1009d529d7787571a78296883

    SHA256

    927ad39ca1aec52527339112cfa73d43af8e30f51e957e7ce1d0f8d0a0b7c2da

    SHA512

    56b4961fdd9ca275995e8afc5c24fee2439c5b019558c09ca820018920fb83664c4d1042bc6c2b59590884dcdbbf03219a53cebdf1acef7fd24f70d94ad8ad88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29087ead4f191cb24385ad62a4e6d1da

    SHA1

    e1be0fe12e7d61decb6ec3c7744b9f2e1ce3d66c

    SHA256

    1f5a26f32e089ccf6a6b05394f5d126a39420ca7d244170aee3fcf071a83b586

    SHA512

    d7dc8c84af146e7e8c1cd0f7e1249fde3139318a6a73dfd0fb6e92d676a1d3216d9d6193ffa38e5da3fa5f5e7ab58b8fd7e90da4bc0821cd86bfb89ae9b23668

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9cbb4c89ede5da4a098ccb813625b108

    SHA1

    3c7066799e0932ba49f83db594608f08386ff4a8

    SHA256

    fb8d5c791d66c6377fdd06c13c76bd133cab263f05ea8433132ff4265b2da114

    SHA512

    deceedf623f2595a2192e16264d82a2ab4515607428c21c807359086b4f3f12761bc75573c99d7404b657e3bc098a80ede3fdab3b4ccb45db2b69fbf3b72be51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec84a5d10b827a3646554e1faa09e63a

    SHA1

    ac33cad61aa443084104b84637fafee9b5b2676c

    SHA256

    9c65af228cf54768c6c3ddd38c67ebbabb6593867d420b2c26054da7cab0116d

    SHA512

    e98b8d669cd48415b865daf656810581ca5e0e256effc7bd5f44637b76a83272403eba8f5aaa899c48f5d57c759bab6157455b9a4e4b7ab61583fe54de745d97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c90dc47870b8b05a4bcccbc8fd48bc4b

    SHA1

    200b78af364fa99c9d01561b80602b54c1f037cd

    SHA256

    33a6f2e8e9a0ffe3c04cf6e505673e4ae8ff54918b266a3fa58049e9db3ce3b1

    SHA512

    f38386fde855f974eed418cc83bfaf1f897aad80934604edd839b1f66cdc208537a7f8f4710a745dbef7cb6d9132588dcee407e52c65c23b7ef504d6dafcb42d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ea64d0584631abe8d6bb427c4ff9b72

    SHA1

    0d3929f9f7bf5ee3a0f970d0a9b602de98061368

    SHA256

    84983dad568e412724824fad81388e804359c1dbb402119900da08043a4fec2f

    SHA512

    2926acede7a288a826555cd2720e6c892a1957d8805e6bc2f6ce7c143452fb9311e471388b9dd3e056ebb5f3c2a0774ffdc63b6c202b73d9bc8e969748f2c378

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5857b2f256e410ae6d667a35de81bc38

    SHA1

    4a33318b4e7660f1048eced2b2959560e217f64b

    SHA256

    fb700e2d34b2ec784fd4d4a073814ef6d7875cf8ee9759d25818735a949ff295

    SHA512

    c0e7679a3a6c6589c2d486c104bba02e2e04cc24ae0940617a04c839d4a4adfbe9c76b2781faa0d2544e3e2001ab85ee69d17817a100a7839dd4f9936c7adfe3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6dc7b8363a52e20521feaa886bbf8d34

    SHA1

    472d953ee1af032c471f69420efe3f9235d2ee5a

    SHA256

    d1a4cdd0054fe4658c7daa6ffb421e24ccb3a64675ac73dc130ffcff90baf4fb

    SHA512

    c29ba6ca5747f8f9b287acf4959ec159518ce7c633d1ae07aac4c40d3fd77224901bb1d21d8b481e2bf87ad77bfcba7b8245b64c87708824b0c9ce41aa3d1125

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07b1f62f432b1410b5a5fb788679033d

    SHA1

    5a88b35cff07716639858e14eae329a249b9e5d0

    SHA256

    28f5a674d6b764dc9781021daf33a125359ff01846dce19b8db7701e3f4c31e2

    SHA512

    d5a0f8e47036bc3ed40af667900887b133f5917e98fc443ec011959669ad9b7edd53104f3b0ee44a14b4d4cbfc5046fec0669061b2eacec34099c305027df8a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa3cad0c2776f2020274e71104f0b28a

    SHA1

    c476fef79b59513f81d9d9113539a5d4b74b38fb

    SHA256

    d7fdb63f2d6fe70c3d07db24fb6d56fc93bdb91ec290a98c991ab1aa64011541

    SHA512

    aca4459d09758e7ebcc8dc4e49f8897b10b82611f3c0c3f0483a56e7c1ff1bf58295856b86278a8fc75da50e3bfa923d469fc6f65314692cee8e8f06a5b6e23a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43a19aaf0dfcf8da67fb615466737fb2

    SHA1

    5ecc9c8d95e634f0f25ebcc335c57c61ea032387

    SHA256

    a83d5f74c10310eedcc89a3d82f47fef0c8c606e0a8f75217d9d2ec6c1c72f86

    SHA512

    f74c1194a59f46f0044027ccd09cf9c5ea38b17bd4e0786330f6a341a287a4326fe1d73cedecbeb111c225b3742d6fc05f30d027b5b5c140ae78be17fa000359

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0fe00a68ab53a3c7a30d2e4061687aa0

    SHA1

    b734b1d312a1374b975d6de543db45e883904ffb

    SHA256

    da3e84636934230f65b162a7195c5bb17d54b58fcc3a3e3c65f078328864ecdc

    SHA512

    0ffd13550e66ac9052f87814eb89050fbecc665f79a6b90376cc0260db608ad921629779cfa035f692c99e8893f0429a28a46710c182fe63ccd473d8d654378f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e1787becb587e403ba8df6dd74bf849

    SHA1

    0bc94c1bf08b61923b7c3d43a0539db385b6998c

    SHA256

    e0970c24b1aac1a909a46217d51d302816233e63edfc0b6dc4bea4ff6f1a7c58

    SHA512

    e3bdfdc944e1ae6d0b9e543f7f7dea8d7b383f29695049f475676438482b4441b5c190957ac749bdd287ad1f82e42267b2c9fc0417d9c54f28fe05684006d160

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bbcfd7ce9f52f61db022eea88fc7948f

    SHA1

    8d6c8aa7308840e734174b4f3d72d7bcdecf474c

    SHA256

    481f3e08b47dbeecd4dc189ffbe54874963609e1e06775882e9896eb59ef6c78

    SHA512

    abad967f0315f462abdaa20300e4b9cf28f86a5ff1ca5605df2d4a11beafa1f247cddf0dd6a5618bf03b43faa48d8d1cfd9226129864b2331682cac0365d95ea

  • C:\Users\Admin\AppData\Local\Temp\Cab2A4E.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2B5E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a