Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 08:00

General

  • Target

    4a1cefe59359c7000582013448336e8b_JaffaCakes118.html

  • Size

    94KB

  • MD5

    4a1cefe59359c7000582013448336e8b

  • SHA1

    42bbafee612d5cb885178d498b401c9bcc102e1e

  • SHA256

    a3c96dc5924ac3999cf72a599b62652b523093346aa8d96dda9ef49b29914449

  • SHA512

    b923f84195fc39d18a984dc91f0296b9c65e522e24826c7b4476b958bc23d7b8a60861d2b39698d101aa03c2c983537f9348b06ee86e29ef50ec3cdc3df52b8d

  • SSDEEP

    1536:WMLiNcoSFLdf/OpG7LtjA/FHr/LYn/PB3yiZbqoBdkrY8mgHC+qpEyW:WAiaDLBdkrY8mgHC+qpEyW

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4a1cefe59359c7000582013448336e8b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2000
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2000 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2516

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    87a2dac4931d20bc10a9278c4fc3a094

    SHA1

    3d4777dea8f9faa19795914d64b17db6469b9df3

    SHA256

    99432adaedebd5ea32167b8555deb41c5c7cce1267c13b960b05495b363ba188

    SHA512

    551e25a849862e00fd21cf09fa026719fe9cc59db560cf4e5f0282c4f7881999392e4fd44c1e1900412d831903e0a95ad70c485a927474f76be834e04c11aa60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4886427060e00ea6f15ede67db1d207c

    SHA1

    009ce521120476414c68b57c449b4fdf56d5aa39

    SHA256

    08f236af3c47adf3a429e4f52e292c340602932f6f524b86f7d5ea42b1c500e6

    SHA512

    7b1b3c8971c96aa382032d84c0a7ea09c79f61fed62d7e5caadd52a27084d8d99941f35cfa9d403423f0a53a974e645d02f9351a09dd3731f3e79bc0335da7e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6fa5e1723520d3651216afdfc4cc7658

    SHA1

    166e8b7fc743b1ba1c91025ca561578c07539251

    SHA256

    38ed12116fd2aef145c046ee741469a7bf3267edbdffd84a5b0ba31fded7b7c1

    SHA512

    ed74a64a386f5435cab1630e59c515a96866c1f82b06c935d0861b0e18e7825fbfab7c0ef0c4bd461569a1bd3a5c36c0517a1ec399bfadb62101d29cff63c6d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1eb35b6d8556a405469623d392a8714b

    SHA1

    5bfd4abfe6fbb91bb0a9967fca05db26cffc60bf

    SHA256

    373cd42ad4b9bf07f9fda403c437febf53ee9833ffa76079dc9744015804d8ef

    SHA512

    83c65eccbf0e93b331d48c76f3a991b8ecb577df533f480dd25811ee68339480f2c9135507d291a12d0b290423362d2e3029adfd0264f7244502c20ae22e1688

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9182cced66ca515a2bd91b1420c18f63

    SHA1

    177d88e6449e71279cdfac1d749fa2672a448f8f

    SHA256

    0fe8d30543c321141027915d9ad10e8f1b0ee75cd687423dc97031b019f2c702

    SHA512

    ccb190f45936774b3e04df2c33bd81b2ca155318c37ed7ba0d19fe9deec8ef548416667184f4fca04e381ab50e617cbe632c877e1556742c0122f5577e7b4d85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16fb73b5bab784fd34f6eb316b38ae71

    SHA1

    ba63a6385bfc2753fe2e275667c589a04f87c7ac

    SHA256

    13cb622a490aa641060f1ee10debd914fce87c4618a39bc3c3b9329ee0ead031

    SHA512

    9199bcfd3f1027c3d58e24683d4585eaf94243550711520274ce6fb62d460458df8e1fdca11c61ef208844b51b8102a52622a5f830c991c6e59d5b9c46dbb51e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d6c1574f58a9f551495cc22f75ca2f3

    SHA1

    65491f2beb9315a9d2303ed5b34ff5d411a47de5

    SHA256

    2b84f5f681077b29da4526d257ac9d9f3728a430732c77da9799449b0d3d5de6

    SHA512

    65e2501cfc9367a0cdcc7af84bbe02911da3e376be745d4a9851463788682902abf0f0a204101cf795391115a0ea836d265a09a2528e42a8953935d676b00829

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f76adb1a85d9d0fbbb5a041d45f3453

    SHA1

    cf793ec2be1aaeeec95eab76a264959c25030d6f

    SHA256

    8a245e984d362489c5a9cce801411a9c190546658162b462b285d728230f40c8

    SHA512

    d34313149b21ae5a5c8ab0e4dbb3fead46fd41ccf11810ddf9770958b808a91aacf0140595eab04e2cabfe51154e7ab61c84662c2d27e3ed817d89e9b190008b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3a8534ad287a603f9492beac09d72a0

    SHA1

    4001e7f7fa9702beb534ad5564f34265c6c15e5b

    SHA256

    a607e6e7dbd8caa67f515f5a96da79926861456ac5f725f3ed98d3e41c8ad4d1

    SHA512

    e25557d06b953e661f02a0069389fb397900740b64594f730ecaa1ec5e331def5d043a24a38860d25d1494ad87a87472293afdaeb4619360cdd3ae91132675e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed5cc30bde473f7977182dccab7bae62

    SHA1

    3dfa367d63b10bb16a714aea7d36da80b1cd3748

    SHA256

    58ffdeb65cc297adf907c539addc987b281b1b235625de48b2422cc235df2578

    SHA512

    6831ac31f32a5a4b83981608d8236280b980ac1ec793d64c80abfa2f9818775198d658964377dc6ebd8ece99f0a233f98a15c98319b8c547fcf9f64dbe93ac6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd7897770477e0f6bf332aaddcba3f8f

    SHA1

    25f4ac742422cf3d81ad140cd307f638d43da14c

    SHA256

    1acd0d1c0010227aae96887c615c293754473a7a786d7e6ce740e343ad67db0c

    SHA512

    3ac1c89bceea4595a51e766d0f502cb36cc6267f1b59053e22e4310345d514c18cfae2d68ff99b88009bae4e6d0698fe06d6c87d4712514133bbf1b84d69b79f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0163b14cc016aff52f2ad758bddc57c

    SHA1

    02bb55cf619795e63c13387d08ea099972171bc9

    SHA256

    3b450da45f0b627098e7df7c8ec9d7099a57d084e8edc5806a241e201548a320

    SHA512

    af44985f345582bca7091ee048f01a8b11aec622d5179d7302a9c0d7f0db834479f7ce6fc65626dffa67b8d4abdc34188c0108fe521868caf8503d1924570780

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f82f6757c80bd855920f5b51aa6b59d

    SHA1

    eb932fec566521a5cf3ef68312c13a37c18c3c82

    SHA256

    306549604b776b8056227f7877e0d69270c2ee09c6404ef6e25cc48a1c45f435

    SHA512

    6341eed05033160539772cd1ed0008f44cc70340f97565bc90f065338cda65d33451ea731abd99937c6612e6cbd8f1d650b641123ce81e6bb8cbdd080d561206

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14c69d026e8e270ece5e758401f1fe67

    SHA1

    c0b0a45eabc4f41df3c60c2c3c573944f5cdf9c1

    SHA256

    00c69fb6045caa442002f54af4c4533ec1f26cb676348a2fd9ed07f7e982de30

    SHA512

    b230d7648725c379b3e1369a04478c32e521cdca597c8be700f30ec2e561fa9fc48cdedc0dd41363dce516a4f43aff24bb4806052c9d9b178e68bc441df12b0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2346b7d98b35c1b2e7674d35080693c

    SHA1

    78e41fb872a061f8a9a8e64a22f046edddbeccfd

    SHA256

    e8011439ebcc49786356ee6d5fdde2456fe07f22808bf8cd1debc8179959e118

    SHA512

    241e5886753fe684026ab4bc9d4b2afa1e5517af7d410fa647c6cd1acbbaf29a79f4fefd5c42679845241b276f73d912ca76f1b7b3f6cd5c61bf266517bde6af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79aafa230eea13f1a7974c3feab2536f

    SHA1

    1c5df43e94d44c6c3a8becf87b9d7ee69a919e91

    SHA256

    1abeca62fe16bdb9b869f77c6932caeb0aed919f336b1b4ba431eeb29a54abfc

    SHA512

    e8ffa3dd442ebf99afa14e81b68dd75162b9cea0eb5bbdb59971d2688ae0580bbf9ded73abbd31a02617a00cf95e2483c730a4154d0e04c7257d62e1dd4d58b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60b88c6bf252496c59f98c4ce8c69f07

    SHA1

    d83fd4a3567111216fcb5134f806ae6ddff79fd6

    SHA256

    69caa288166edfe297f3923572756755023fcec2d25d9ba45a3e160ad925718e

    SHA512

    1f84c9dc9ce453700a7ede344f22f2d39d3ad4c6f916d9827a2f68fe0eae51fef216a687c755391784704c61cee2a822a712f281514cf16043b81b0433f9afa0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c0d0e6f2ea2d7879a19a4cd37b3ac15

    SHA1

    9cb31fc1724df1d2c48a6978294602632bdb5a7a

    SHA256

    3a208726b5bb8f61107c224d36c87845a85846bf588223843be93af780b6120b

    SHA512

    27ccec5847427bae059caffaadf7c49e794019ffd223ef62902ec31f3964fef23ca26a2e8dde7ddb7254c439781e264398d8ce9d3bfc7070e99184670852cbbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    afd0146f5bb0344985f10ac8ac9aa57e

    SHA1

    7adace28b53dccb6567e2a74ea66d3569015ecf2

    SHA256

    5c0685b39ed900af6370fb74cba6585e386eb5bbcabc2d3a0986ca5c77dbbf70

    SHA512

    3b14fca29576fda2d484f6b131005aef037db60fb118a063e25207f2dcd3abdc4ea5b5591c97618bca32994a543208e746dd67d3d4fb3b924c8ef72781b21a6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2f98f0128f4ecfb5107c7bd007d50695

    SHA1

    39ac21d347bd3f696a1771e8adef8e9e6ec3de48

    SHA256

    8d75ac436acb28c29f72346f53c2fe4bd68443f447b83dd5f3a3d7d55f74c9a2

    SHA512

    06b1fdbbb7f24454184043ddbb053787a1ece831720e103bd70cb51d7b9f8b47af998703b4242b5080d505883358d19b92edb07bc9b896c38ef3c56d1bf5f23d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I819HQXH\fonts[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\Cab3CA5.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3DA6.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a