Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 16:27

General

  • Target

    4bff1e26a49ddd2ca69b23db2ff391d4_JaffaCakes118.html

  • Size

    68KB

  • MD5

    4bff1e26a49ddd2ca69b23db2ff391d4

  • SHA1

    c8fefa994ab070aa9b91e21e10048ab60c405cf4

  • SHA256

    c07b1a2fed8001ff4e6dc5fbcaaf4f6b14351516a1d544d6f1ae01737c68e5d1

  • SHA512

    0301be092bd680e823a107700df2dde627543f9d84b3a24cde6e2e77d0e6424c7bd24722c87070328254440a0610b4fe50c53e86c3d54f425e2ab92d8705ea94

  • SSDEEP

    768:Ji2gcMiR3sI2PDDnX0g6yluFoTyS1wCZkoTyMdtbBnfBgN8/lboi2hcpQFVG8s/k:Ja1TzNen0tbrga94hcuNnQC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4bff1e26a49ddd2ca69b23db2ff391d4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1636
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1636 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1332

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b460128d0602a492f11963fe49e7a4a

    SHA1

    962ea54eedee4f5e776f06f67927fac5bff883b0

    SHA256

    e344ba331e038be1f7e5d4d2d45a5cd453173ac40d6779fc3dd1ec3f813b5b89

    SHA512

    548ed51fd7b9a2ca168cdcfc5d7e8fbf25a03bad9ac9d83365128f263aa2fc5b2c9aae6192fcce60449d1aa8646048217d76b9a52ca8411b21e3fcccf49e5da9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78f6257d0495ced045b3e41b00d68a01

    SHA1

    b52c965b874826bf1b9937bfc5350a3d15179323

    SHA256

    789941d9f12a9a2d43aa62596d223d75e1b03a719ae464045501298d53f1a99c

    SHA512

    ecc3c3a9e2594a5184f0347f540cd3bf23175cc464258fd34c9bb309e94c6ca3d60c7cc673a3f1702fb3f0eeac2686df1cddeea0b5ea7fc8d726a11fc19d33ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0254716fffc5f0fa63a9332f26bb2d05

    SHA1

    7468442ae12b69866e8ef2a1695121638963179f

    SHA256

    2de28693a7642cfb4dae86b230ee54676711d4e1d416be71358b1d075f962402

    SHA512

    2b02d27683024fe80759c72c4867400b1880b06235f3147e184b487c6fa2646f568f7956395ec02a7af59059387a0110a4a7f5c998f0f5cf8d146d80aa09337f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    233cd5d6cac86da862a403a8317e17a0

    SHA1

    7b8d2da2ee65960c8825332f81b42d2e80baf647

    SHA256

    be082dc12e53280459bf5312a1aaaa19347de243cb4be292d464a66af74a075c

    SHA512

    3d28094820c12543c712b4cdd1634659d67d08f1a5f332f5b752fc7276f653f5f2f61d0ec97f37393e86826d3212cbb25ba8ae112fe07e9cde00a4c8e07d161c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55cdb9b9923541efad99490eaeedecf9

    SHA1

    6cfbfc6b94288904ace8ce74ad51e79af9b01f96

    SHA256

    44c07bb0ee076c685d11f79369cc015ee6725d32d7d99b70244ac9dcc0736cb2

    SHA512

    605bef4ad63880a7424977b1b39abfa1e7c49506cd9765cefecd1e97f449ab4eac4c0fa512ca8c099bc40cc5eedbb7b7b627174683a8fb59a35419746251935a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ccb44350834d4014c177c3f54f1ae7d2

    SHA1

    aae44cc557acff6d31a9fc871c21deab5d5cf6e9

    SHA256

    217ead910b8fc514b0f16f936fb2d48fb66b9c812cfc3ce0442858c8d51d4506

    SHA512

    f2bf352dfbb8b6e25e10d1d1a74410e72e463e084a97edf3c4570ac9cf6bb08acd308b6539b72c6c3773101676b9b6e7c50649015c46d1bb8330603b276328ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4082fd196f7f133e175c7cbe0c640242

    SHA1

    7f8a07ae918aaa2000387124a7f8d34c7d920997

    SHA256

    47e89f98d52c777753a4e910fe6304b69a3d993212bcdba0b26d5af008dcb61c

    SHA512

    412b090e733414aee0596c8be9afd3b0c00275a4db4612eb08ac30496dc6323bd0ee7594a67b548d647f53528f309451af2c74a3c00ab2d03aa39cdfd3d153ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78221e403e3af46c8bd88070797bb952

    SHA1

    9acc5530a575c10967a8dd57c4ca735491f952cf

    SHA256

    28eab2d8229cebcb7c590c77b34fe3953b3898e46bf011592ab0cba5048d6184

    SHA512

    837c50f5f8118923951da57d64c0695ce59a4655f12f81cf554f2cdce476c4515dc08c97ce1d79dc8318f13dbb5a01fede174d9e867d214da65bb39d81559f12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17ff1d2b10e1d0fa8b4cf17f822140f6

    SHA1

    402699610e21b8008b56294c0085c2d97bbdf7cc

    SHA256

    661ef9db5a8944b29a6765efc89c4ee2b6098e4544a42b14951488a3335c89bf

    SHA512

    823d41c197c80b494494ea6e609198c39c2d68bea8dbcdfe3f5649d4946c0c5dcb225d57d45a377b60c2b9cb5d3dfa093149dcd1df22e0296b70146cb7f85211

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e684472cd7572310258b09e25577c958

    SHA1

    e37581e973b602ae8ecef428907ef567e065dbad

    SHA256

    2061671526dfd2bda9440062bf463dbd31f1ea669a1edb8fb28d3a622c9b52ad

    SHA512

    2c759438b3ae366dc63d6453d32b630be18b878bf36c980efa0204aaf6c5bd9b4c99dbe6dcde7034ce99f86097cabb8e34827fac35aca748e956b582f6a0d11f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc0a46c21d5f343a12bfdc16f88ae169

    SHA1

    602f8417e33a6efc65b186f38e2d5c60b47ed009

    SHA256

    2863455269dbac2e2394e4323722ef6b4aaabe9c65295040ae354bdb9a76f301

    SHA512

    39e3ee0099e57ed6a6625296d32c3d922224e7afdc9050907177b95fdcd23ab741c4541281f749a8345b613487a15d0014c08f2876f8ef61cb39953332bd0a17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce524007f718cf07a2688dfa437d2a2c

    SHA1

    7e623f6c9c61640c14241b62756ad62bd1df5ad0

    SHA256

    8bf54fe035824eb243bf65a054a4520ba5ee1c0b3f1c005f7edfafe6c9414bfc

    SHA512

    0f3a64ce917ea9f07147cec916f74b874bbf378f16ea35d72d19daf18d53af9c5b430618264cd4509e150c6717d4b7933411a28c4782aa87f9f62443edf75084

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e82114d3dbdbc3694dd87e7a8fabbc6a

    SHA1

    8759befd98340ab606589dac75de242fcf071ca4

    SHA256

    a8e34c80877f990399d8467e0aa0846765f25b1f5c09e66586de964c27f39176

    SHA512

    93eacabe31d320850d4b9bee502f4a8b7a4f851dfd76bc5930b2b7ee078139e1763671b33d2cc04cd9f4a3f80dbb87cdee918daa1a77a046d13b27a5d14cf263

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    112567b142eb8fa5a3019c4284eb8fb9

    SHA1

    3ca5af1db207bc9d40fe7307c705350f5ec63015

    SHA256

    337b9fa5f44482f77f8ab85e318d9923fff65f92f75c9da74d7c9122d4733556

    SHA512

    f6c1559afe13d18c473bff49c661235420e2cdee0672e94945822821c433e25388fd41119c499e5983f81429a7b8a9e5b7d535e688ecf4bfbed34d85fa4283d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41173323bb286f80d95ece4cda88c909

    SHA1

    22e25b869931f8cb2260cc4552913a86c93e19e5

    SHA256

    09246a4e50bde2690573df381e29b1d2bf4f449004133fcf97b439fe2fa09307

    SHA512

    35fbdfa14748c68f91a75036c20f6dbe26e20be406179da1cb2a10d6eebbb5039b0bef084c1411d889f326400359b270e67fb83124e5cb8a90fe645c151f22cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8d8b8011c51772562449d7623dca7be

    SHA1

    bb208488c4f1126389543f8698189020c8f3a408

    SHA256

    2c99915f27b12cd9058541365e0ad72563efb2c08be1a397c1152379e60cc447

    SHA512

    b73613c732c1996faf5139b5ac91f36477f7712fcce38a4925e4e5c8260e930fc0ea767f7d17e96e8e573a2b582b6590ff3e772ee1f4d285bb887fa2b5290299

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41a5f276d770c1bbc4c52fe9742ce71f

    SHA1

    72f26492ed4f72b32f1c682c908e677ab785656e

    SHA256

    73e8bda714dd211d60275ec5243a9eca35849713d4d40e46f162ec8068718ef5

    SHA512

    407d62a1bd4b38d01aa1e91226c04c5c5bc039c1b78d1efdf6dcc9de9eb55617b017b3855f8c002e92192652a6f5d98fca72b9342aa18d630fcf15b771e6dae1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce3e577772675efea6e9a0df7c9e548b

    SHA1

    ef7fd7aa2fd1981684f77e0806592917842597f9

    SHA256

    35407fa7f84182acf716350545443c59efc106fff6d322158ce97ec19c8807ec

    SHA512

    c4b1650a272e27f23889295ebaf057bc618ccc94c04a96cc715becf8bb236d0fdf16337143e1992287a9e904d44974f394539acbc5fc750f16be4376ebf0af24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1343dcfe36ed1f243474d8d1725c5770

    SHA1

    d2c262227f84b67e68600143c5f0c553ba351fb7

    SHA256

    2d0297968d541d4f71ba14b71e460869d9ed29bfb3409cc78ec989a06320c9ee

    SHA512

    ffab70557711bee83b79182a8425564c774c9e2caefbdf1d8ee421d5682d28fc4a2e1575923637e2aff9e0621a01338ec5f34971e561556c73cabfc2b95c2107

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6fb151ac4e20841f97ada2722a222891

    SHA1

    44cd231a6caa2aed2d484e4f0da74febc23ca3ff

    SHA256

    38763533f855ca5181059585d11c48a14fa20bd4f0a9d458fe66a15ea11f7de7

    SHA512

    9d7ec3933526e998713b7f8ae18cc8a76d2d1a3d2a7a337d9b951ca4800fb174471f68648d6dfb81530cbc7d43a8c874c453dfe90ff7b701712b390acdcc1061

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9bdbedcdabfee9e90cdece6e6fbe8611

    SHA1

    1108ee6077b9d2f982d858fbe5bfe16f87de4896

    SHA256

    7c4a7ddb90c1c3d1a05a4dd0df471d1fd99679e3603ae042a1d0a1470ab7a60a

    SHA512

    265236049be69407b82319046c065442d986d3b1fce8e1f7c8cd0c460e8ad900846992be98808b397864da3fd1ac4e3021e91007abaecf1cb8b15f9785fafa0b

  • C:\Users\Admin\AppData\Local\Temp\Cab2AAA.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2BAD.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a