Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 20:24

General

  • Target

    47e16b531969a2650e6d2122ea96e23b_JaffaCakes118.html

  • Size

    26KB

  • MD5

    47e16b531969a2650e6d2122ea96e23b

  • SHA1

    2122a5c69e0028695d08beef86462d8af13b6efa

  • SHA256

    17d17b947958a3e9ccf57b76d9e43b02e9fe4abc0b8b037dd796e33cb5faca57

  • SHA512

    0b24cb4f9e04776a2abc13f4a4aa36d39bc72e13e234bcd831eab3981337b247bd23d0119c82c0628df031269f671650dfbf9d8f6fa342e0fedef150b784ef06

  • SSDEEP

    192:uqB7jJb5njKnQjxn5Q/6nQie5NnZnQOkEntSsnQTbnNnQRCJVevo7NtMFo+NzQ4f:nZQ/JygcrHna

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\47e16b531969a2650e6d2122ea96e23b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2416
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2416 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2928

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c78dea93020f652063b50adcd3b863a7

    SHA1

    9df2e87f80a110ea670a5026dbb56be3163aa956

    SHA256

    bc3656854f59e3ea7d32c374c3a518a1eb9db8273f3e3b4eb2adefb58a3e0276

    SHA512

    fa8b34703d3cb868090ebf4abd897c3550f43c6dca85e4fa2f50d9d424489fd2401eb311fd1bcd824abd9aa5e2b91d098a488a9fc5660047541f84ba050d1b29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    40b114bb49df9695d51754421b06900c

    SHA1

    e4a583e979143afd91c2a52ca1c120e0ee5ff720

    SHA256

    fa51ff6fe3b66181a9326b5ed0c28fea69179ffd6e2ff277da4384781869a066

    SHA512

    74c9b4a68b3c87e616026fd2c860f8b00c788a2eea83848232b9f0bb30852ca078ab9fb7780fe6d9555f8a3fdc000c0ef6aa63dc22d67a0ffeebc6a7a1346866

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc13f10f7c57b0b501925e3abb3ae28d

    SHA1

    4da7080bfb30d3cb3ad936aa3d6b242db6cbd698

    SHA256

    b77b7d84a032c149d343aa3f9ab173cf9caa641ff7f45d0384655547539fb4c4

    SHA512

    94abb5349fffab87907fb4bb597e5b08641563df0e4fd92e6fede62680cb4c0e991f6915c462e72aa89f980455cc6335ff9f4a49b38fb53a4876911793d6263e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c58b70edd67c7dca68d2de8b990e771

    SHA1

    8e0f83b02317997d748b8ff43ba7f2ae4556f444

    SHA256

    fc23e349b83b19ae4b9c4e7c5e8ef0d50f4485bc72ab2ab20f43910b2a084c08

    SHA512

    2a1105524b89cb44b1556b4d1cce56c4af36ae2731b9cef7f6ababa3620435a4d48a853f787b955e6cda300223408f07152ccca86ab74725ef397d4fd52372e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8767456521c5150effb79c7f51419dec

    SHA1

    bbf2f96d56c21ca230627eaf33e4420c4100f4af

    SHA256

    cb75e762b0029f777d3348ad0c5419c0ded56674d36fae75c95846e78085aad4

    SHA512

    dfdf93e625faf6784798ee68eb359792ec782abf08c2ba4348c291941d571aaf13a982814f344c886ae432eca0adffa7a5af984ed77da4a4ba3f958f6eecf420

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ecf23e5769f0246d6f88e8eff9a8e858

    SHA1

    5a1df1417e24cabfd50f83ff96e928152b8afb98

    SHA256

    da768a1a8f8782b756dc0a975c5324a078321ef1ced9d473db24ae0665db0af5

    SHA512

    1766decec6f4cd240582d93eda7355d6a62a5ec15ebfcd7d2361861b1545772f6bb9640ab6d7f3bddec0528dc3179669d172983233fb6a75c6ca2afe1eb7d44f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    835a0f37c871df37744d61aa7af5dfcd

    SHA1

    93eedf2662c245c078f3ec31c7bcbd7ea97e2bf8

    SHA256

    bc2b4f88e518c005838d4f79a37c6c324074b096a3712a37f155c00b5391bdce

    SHA512

    215ad2a85c0958be95a031779b37a4c3784bd6e6de05b7d86b32fb875d46c4053a8db89219949c25d2547b9bc7721f634fc0b7aaa466afcb978865f9effbe9a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3709080066aa86a73328aa855dbf4a8e

    SHA1

    7e67ba9f3fc8c475494a8bb0455ad8caa503d5f7

    SHA256

    c7de5f2e7f247466c6f09f4bfd973e585647ae1c60c403d2aada7fa3d36f93a7

    SHA512

    83294cfe757192bcc66d03ca4a55512c25881e3507cf9629d39cdeb6c10ba8fd931ca0dd52dc7a5247c00e028dfeb0c801e4ad6e2a98033cce20243df2b9c4ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd0b02f6a9c3c7fbf4b3c4ab79f104f7

    SHA1

    1baf055ef214e9d677e3045fb1596930b4240fc4

    SHA256

    c39e7e7387b25508b7ae4a1d9699c25dd3f551419fba54d5124c320f2d9fdd08

    SHA512

    577936ae50b206a6fe67ba5887f0ee85ec02b71eab61084f26d35a9f0152ca22c72b2a9465626592d2859004dcc458b8b6ef196c3308d0e9df62ce9509b02f54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7182d01a49c4ae0520bfe75732dc2452

    SHA1

    566cb09afbc616c8216e6edbad3a4bb7aadb551b

    SHA256

    0b006b9fb7753d843e8e4bfe5a562a747802abc164ee4959afa613b8aac248ac

    SHA512

    f0aff44951320efb353b5b7a5fe7915ce044ab1d29a0101d57e0fc0618292dd9c10e5530400b408f1303bf936208ebbd86682cf6b5873ea66ba86c8d74952340

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4984fa6e6efebebc20ac3af176cf7678

    SHA1

    4cf1f7a15defd909ec79da99ac8b804b49d004b4

    SHA256

    5d408f52651dca0f389dd0b4371eb8a5f9915f20208c9a532bd09bdd421a4e05

    SHA512

    5f1ebfeef683a9f514ddb66e0736f716da428fa78ba0453025494f0f827cb6d3d4815d588b1ac23e4cb204aee4def9f2397a349834f56a7dc2167733cf9bcdc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4690a743c44451c88df2265e08acfd52

    SHA1

    351dfee71679f27097252a8125109a4c11ec631f

    SHA256

    70eee2e350be030b6a2881458016ec2b695426f96e3a78354f81502f1e95234f

    SHA512

    937b4fa99e6476c072125300fc973281f8a222657b55da5ed7c1c4f806d38431ec22c4fb9717424da44e1fafad1fb358e46f0cfe7a1b1d4447fb50f8f0465595

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a1bafdfafaa27c73a3b56461776e917

    SHA1

    c6ff87df81d2def8d5a816029ceb7491a8e76d52

    SHA256

    5759b3b70110c2fcbc17968984d09a817bcea8a1ca6447a724b4cc1ae3eb4af1

    SHA512

    3aa488ce05456907d92fa43d00f651a59343532115730493aabb3e12b56d8b8aaa772981a2270cb3c53ba29b753a240b2b8b8077148ea2c40742dafbb309425f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f5ea6d53b7b8c9ca2a8120dda6bfe70

    SHA1

    ea3dc99a84e3dec7be9c5d0dfe7cd68d083ffcf3

    SHA256

    4d81045479606be06cf6580872d84867e11173a3e9fbc61f37d9e175c110000f

    SHA512

    e25c5c459a62129f093846182871aaf6df8a1eab62e1600a3c310274f056bd89b54eb6c3131615b1b8d851bc1beaf1fb154bae7169f982613ea86f081679667f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a906b145c246018a9fbf5bf554ed070

    SHA1

    16acc8818cc69ee386a35e0150b32c15f6a7f0ca

    SHA256

    dde8d925656283f65be3a6ffa228b472717a4af2d24e7b4d5aaa1781591a7a16

    SHA512

    9cfa21bc54f61ee9fb0af552f2d58e61d5f8c0532d7c0da5e41a8c888f2975d875a655f6cf1b941a6b0fa165394e76c60520b866c4a3cab35328e8cf133d7aff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8b7c12b6778f27e6289b0259384d95b

    SHA1

    77af745c8c75f40d41477d1502a65bfa85cf5f10

    SHA256

    830a59c90556c8a29f0df2a0f4bd7e8f73bef9c5d334c0cb0661774dcc9fbb37

    SHA512

    dac5acffb4f557f5853d97ee11f88a509b6ad4ec702ed74c8ed48d06d4ec8156429d906e0cf248cd5093c964f864c10cb78f41a13d3240df1aa0e739a55b8779

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa6c8b0c6e738e29daafcde5e743c828

    SHA1

    dc89d3e1fe34e878b1e1bc94c6e94c11445c7dbd

    SHA256

    420e353363cb34289cad01bec463d4df6f456052c33072462e0ba4b6d91e4fd1

    SHA512

    110e94348732fa33f5b8ab0079a109866bd901d1a4859dafef9c3b15a7d05f200e912b69dfd7545e5d6d8986170e9d10336ad23e0b2341edca2fff27e6597208

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3311c8fd9fdf1023b0c6dd3c802ddb22

    SHA1

    b3a5ae1d2b7e74b9829a7d69ad77a30fc3015a9f

    SHA256

    d9708357a41aa8c4aa01fc83001ed7960d006e9339abfe86ce811eeeda78ff48

    SHA512

    a341d9a125cc86f4300540e99929cd2bd372d6cf3c61a290cd29f9179b647ec39a7368bfe1a396db2827b3fea01906a6b80396a064982413fb178145da9c9681

  • C:\Users\Admin\AppData\Local\Temp\Cab33ED.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3450.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a