Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 08:37

General

  • Target

    4a3db827571c6a24fce85c339b40dda1_JaffaCakes118.html

  • Size

    30KB

  • MD5

    4a3db827571c6a24fce85c339b40dda1

  • SHA1

    2aee8c272530a97127673038118a5bb7b2579b67

  • SHA256

    eae58f866bfb8f8fbf05489e317b43832a566711e6e7753b1dba79f12d1e81a9

  • SHA512

    ed92479f9285653876e1363d1d92d1706ba5d04c6fcbac48a1ebd05c43d840ac5a846229f8e7948c053607487eb8add3a606494e03ec245e6111a50d6e2d30b2

  • SSDEEP

    192:uWYbhKH6wLyiQrb5nrG/Z/7QYIxcT26pnQjxn5Q/xvnQietaNnYL6nQOkEntfD+g:+Q/U+rJa9aNvPzXcoz

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4a3db827571c6a24fce85c339b40dda1_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2408
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2408 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2184

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1de755e3b75b50ea3da03e8027a0f38f

    SHA1

    735fe0b21144b0ffcdffab6918206efdc30ca0dd

    SHA256

    d752b40f61ea89e3bc839dd24e6a5a6e810fdb07df08fc15be7e6fa16f71e3ec

    SHA512

    61adf5cc0e4294331ee497d61fcfedea25abdce935958139d8d9371e24f7dc12ee0f59a43343d59de80bde091270a420f11b9c41d248d9221b1e5e0018b65afd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    448f284411bb1a48954845e9b82056f2

    SHA1

    f1997d1c4fa8f6177b2241f3ac2bafc79c8f4223

    SHA256

    7f774a3436befb748003091ab6f9667d07008f8ff17af13986afcb53ad4a5ee6

    SHA512

    86649533312ff353beb0bd7d1201f8b50ded3bb717499088623a9b2610d79a0f13f918f61e2782c8bc16770d136fe48e204e97d6d267ccbfa3876ecf2724b3d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c0a84e37e6be69ada910cebb9392c2a

    SHA1

    a0ac9499333d0b3ee2fb93a4de69465212c07bed

    SHA256

    54e024b1d1c8004784ca83b66d8c3cb6dfac40d88fd103ef1fe9e951a0954eda

    SHA512

    b90eb0af1139a24437d671292726da6aa2e8a22ad9dfa701b278d49b48aaf2a4ec347b34de1bd66fddefb8c6b516ea437595e51438f480fe06bcb2e8c61171b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80b00c57b5b4f91f8d77f3c6f55d1da4

    SHA1

    95c26551eb3c3fb1985eb5ca34ad217a1bc41657

    SHA256

    43d436f60cbf4517af0931307d47cb3970170ee5c5a77570b5c8f7e2df678388

    SHA512

    85ac99bbe2d4d43697e1d3e46ac87afd6f6b8ddcb68c98b6183d24540eddabf9a73d210f637f28e4054a105cebf737b4d84561f76ac5172c85ab03ffd979bd8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f190f7613c097c82d3a72fe235a7ac5f

    SHA1

    2d481417b7b5eba20102692d25e3ad39054245cd

    SHA256

    7d698b170c8995b7354d664f156a869dbe139c140ba5845f31d2e8140528290c

    SHA512

    c7c8c5e03033365ce537c19bbfa6287c876f76b0e728e662cc1f27c9f762eda4a9367ccf717bbfed4fecf60f05d42b06ecc1c6f5a5c53b06211c28c28c2c9e36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d95aeeddd08c0f426455cccbdcaf807f

    SHA1

    502a6f80068fe08757b369b2f74bb1a161e928bd

    SHA256

    2d12640e3f5f6c97a4f64ecfccfce646851ef7b833a4f946fc51071509ab52f4

    SHA512

    08ecdbb17849b83bcc5326a02fa9cdf81327ad47da197845fe8aa7f02e14b926403cb7845096a68c85e2d0124407bde6d257aeff7cdc2b2ccffa72f56e1fec61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cff7eed2f22cf2b9c39fcef5b45aa391

    SHA1

    dab13c84093280848f69143a40709b3bf29b786f

    SHA256

    83d1b8cce253f6ffd14ecdfc3a8c14b48428b68b1a038ca9c38f47d294036bd7

    SHA512

    8b52a88e9ad9f17c9dc7cc602d26b260e7ec7f97586e17e46fc11ee91c8f383b6c534fd377b731b7e3a02d4d02c93063abf847aea41984ea7de89dd8dfaa0f2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b284a92917445e85fde6fd2f046aa46

    SHA1

    1c20d70b13ff7e0b1d68f6e9723267a226eefb2f

    SHA256

    07fa76d59fb06631afa95159b3dec032bee1ff468d80154cb5da01a0ba0a41ac

    SHA512

    9b39abb40aec7ace1451b248b2a9dc67c91d3b47f58770ac5a4bd900a9122b6289a1665363868224c47820b6d732ff3ba1560ad19e2dccdc9c323c18e254d620

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    68a01be7a6483539df01ff16369f59d4

    SHA1

    31e81d6555c1220f6c717e98b54e206db2989d96

    SHA256

    592277542633258a49711143032805175fb2551cb511cc79323f9d0808312097

    SHA512

    657713edb8f8d9b490c641509188c2a4f16d6f38fafb4805c2f0eed6f313211ed4aca997ff286210ac6e96a522c23cf4d46f4bb51a4311937c5e69a01907b423

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    835ee02ebaaa293e2f69d0fdf3604cab

    SHA1

    c4ca70dc6f2ad01b4b8e8e628045fba07a633a74

    SHA256

    97a3e024f148cccd3738f51c3e88c9e30ee704fce80ca9df4725843e1de5e993

    SHA512

    251c540d8e6d4ab9f0f3d97c386bd09ec614d8e9ad8a92490f1426f944e699baf300143cf1f5e98dcafeadb0f0da12a0c540f988cdad51025882dff32dcc5e1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55f67bd1f8e0b14a7e1bebaf79bcff2f

    SHA1

    f32dd52dab770898fcb712d0682da3feb4d91548

    SHA256

    5495a32f17e705d4446baf56701f45c6f3be4b97dd6709a6d4c5866b28e92c4b

    SHA512

    314a1775d7ab94baa5c93ec57b414c122d239c41547f86ed7c3c99fc8f16ef2fb5eb5338bb0c57c8e642e9561066eb091d3d76e8f17f3b850147fe8a4885f9d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d9c303e08b867140cae0c10c49401cc

    SHA1

    2c9d826dbe24dcabe00a085a14a8657cfb986484

    SHA256

    0495f763bde1451f4ac7615562033040978eee5f714b55aee3a64d0235c4ec5c

    SHA512

    f104e34ce91618cd5c804742d1fbca5c0aeac5067ebb76f5e2065bb7c4946f7957e7caa08db9ab6847a989733ca93f836d86b96c7215f23edc8cb94e0cc0fc64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d0a5f81789ac6a999f3de65ded59168

    SHA1

    8f604eaa4d533fd0273e157b947b9327e3cd5d5f

    SHA256

    790af9f75f1a7bda1eeb3a2b3df3de03373ce63c672ab399889caaee4adb1881

    SHA512

    e34cf3a5e721c2930577765abb3ce71d3ada83629f4779080109c27e14ba466729a195707ffd40c142d36c9278dc5a4579255d2539bff0762f0e0dbce0f065b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5218fac046c9886e81f139df5ec1d0f

    SHA1

    35ac0d7c28e4f4c1e1b27800c5cd8d7fcf8174d0

    SHA256

    2f03ef931e498d0bbac4fa616f93e940812a215f1bc66baaca35c041a971428c

    SHA512

    5fd53c3f56156514a6055c82d820fe84340134c5276114dd3166423176aa7c5db03c2477a758c1efbc80cba356ed327ab571cf09ef412878b13b5a0808ce56cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a25fc6092ffbcc6c9ea279a3c460f593

    SHA1

    fd6858ae2b6eb21d1b469484a899509721953232

    SHA256

    0777a01fc6a44c33182b872283a3456ff7e7b17cf10464dd1626142032a8e83b

    SHA512

    c9839c68d60c0bede9da68ce9dc449790b76c5fea21a4a3fc5e65beaefa60dca2008eb7b2fbcc4a7e23823cb91219d07ee19ec32b7f4f3eba303f8571ad60fc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a3fd0faece43dc3cd01939fe34012d6

    SHA1

    3c0fa79fc5daa2d17e6c80acdaddfb363e92428a

    SHA256

    18e718f44be2aca3ae05eaa1d3ddba09aeb297a38a0221957eaf5d540249b3ea

    SHA512

    d4cc64d18af55f68bf2153da8ef5eebd2e69a2365fcbadc4f68f1d84076ada3c56a8f2f1a044698d7d62b6ab72b026103d51ca1ecc981a021278c9d34ae32b18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe2e886f4522537d6615552949a05cb4

    SHA1

    02a50160c53c7ec44001f751c923c1f0a98e78cb

    SHA256

    18c6a26e63c3bc1807322b8a8f900a32ce63767868552813829422cd9194cb96

    SHA512

    3e52f73157e494f16f473ef4efd00ef96f37373af1e8a52aa1c3f0b35299d629a9cefc668d502534e34aff98ae22c467293f4ed0b20d9beb926859009ba0de67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac669297cae12c12f60c2d6f097a3ad2

    SHA1

    939e97d6a61a2f394c7ddc84bfc4dd6716734975

    SHA256

    a3e20eb74df8935fefaa5832af2856ef8234061050f7ce57de53c90fa1df32d7

    SHA512

    1f01152b7908bd90c3873842737667d9a8a7fa97eaee9d3eb5cfe439670f345bdf00bcc823582e8227506a5fa4c7f7fd5e1a81ec2c005edc8add6178b2fb36e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80ce81a3222638d83d3766bb303b488c

    SHA1

    22828a791ed9a457c9854f49347820d3b7f72964

    SHA256

    aa64211e76a7cc2910a3fdff65994d17805ad123934c65f0e9de5f0deac022d9

    SHA512

    6a5a46689e24ce5af15157907528326dcdeef128addc0acfd1334b40336d9a3100fdc218bf80407b2788101567c1ae5808d8cdd82584924dc842e696374a9b4e

  • C:\Users\Admin\AppData\Local\Temp\Cab3A91.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3B75.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a