Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17/05/2024, 02:49

General

  • Target

    4e1a8b4046bc94b45cc6fa3bcc0ae962_JaffaCakes118.html

  • Size

    463KB

  • MD5

    4e1a8b4046bc94b45cc6fa3bcc0ae962

  • SHA1

    33d68847fa4289846bafc7aaba755e10c93d36c8

  • SHA256

    2ed7a8c4ff47226c9649d81bc6536c4f0561d65d419c25535a26e817330928c6

  • SHA512

    d752ed97b8cfc43c6a83e5bcce3f9fb6dacdf3b77c981a1281dfb6e18466ab7ccbdd288861fb730cdd9ae54fec94fa75e4e31ef941bd2a128df708a8c83d5c64

  • SSDEEP

    6144:SWsMYod+X3oI+YCCsMYod+X3oI+YRsMYod+X3oI+YLsMYod+X3oI+YQ:b5d+X355d+X3L5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4e1a8b4046bc94b45cc6fa3bcc0ae962_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2656
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2656 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2540

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3f963f8aa10779b725a8a94be2f0f36

    SHA1

    45c370c4b46d8ec163f681797eb7eb2d9995948d

    SHA256

    70c2663de86e855546ac48e85c22654a62659b0d11ffa66c7f6d15d5c9d63fa6

    SHA512

    004dbc68a94079e6f9f01f60531f2d7f8390473b4e13ce6e8207f7cd99658d15337b72f2e1621ebc9ed225093e478e99356ffea7ecacd179db9b4a1cc385b617

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b06422cec2f36033aa418b67c736a5e2

    SHA1

    4511b85cf3803cf5c70cf67c7c2ca93174deb805

    SHA256

    552aa3630563ec4ea9308db530391917114c386217176e57ba86376f38e6f93b

    SHA512

    0aabc8f90d92b304c1c1e3da188cdd371217a2691e9c141eff995184ac53ead7cef36df80244c386d23ff9705c66c358d6a19b52589f05b548b182a511d8a8f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13d7b8708d359429c9d968af77fc6dc4

    SHA1

    5a65b20e4ca5f5c83a106c8b4d58cd71d7b488e9

    SHA256

    772464f4ddae2a14637209cedeb63a0286d4f1034302dfb45092ec86231ef616

    SHA512

    37116280a4f2af070cffb88b4fda45eb1847825ef914f1f6790d86d584836a6ce46717e80c1e012e176bcaacffff05bc7afc4f9008a1511dbc4ac82c1cf90009

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4982f7e4341e7a69e7e5fb2c4f3f4927

    SHA1

    b9d95ff2cd43e320c1c9b1374d02e8e791d0f30f

    SHA256

    1ca03134fe128323e6c2fc00e6c9caa07abd3af54ba53d486345c4e7dbf7eff6

    SHA512

    f70dbf736a1e06438642e25e430d61175ee920e1491f804301b3c6b56ad6d15f5b219685a14d81605050a5cfb7d9a19d45a3617d7f364f4ed5fbd52838dbc0cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a043f0b096d086a035e0790b75e4019a

    SHA1

    31a1e156e62b942920c5fa5fc6bc7fd1974f8743

    SHA256

    d9b785b713cf63b642111f473497c64e1543ebc2d9771f44f5b857aae0ac3875

    SHA512

    d2bd247e086b00c70732a8e45f031e8a8b28683e91cafb8414b8b5ac41bb69653e33a6fca0f56b93b4128dbe70c8430aa84e1e4eff20a5ab8cf5b429709f3ec8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    26c3b47240e12b6228384775b501256b

    SHA1

    e6116a494596925485a16a6c4da437f48d3a5dbe

    SHA256

    f3fc44e4a645035d5e5566980c9e242e772cf40525e38b22907c814bb90aa014

    SHA512

    35a87a6a8739b1befeee7c3e97de895955f814d076ee751b192a36ea2b87ebc9fc20d85bd54c46cb5005f5ac7c6fc7adca57c36e9af0d43fe3fb565bb7945df3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bbd5ce445b5bfb03c4a99a51d7774aca

    SHA1

    71b939349252abe50efbedcc5e6b0ac5ebf1b028

    SHA256

    9fd57dadfd402dd9f6fb313fdf79a6eb456af800987c27ecd830ae7877a5f1f4

    SHA512

    0dddb85c7addb5defdd5cdf117d702d1ef5e137f8592f06d051789ae84562ae708bbfb54806ef0059cc391ec647587321674892ecf3d9ebd2c01acdd4f8ad774

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e7ad17dee8c8f7b6cb1c355e4653c34

    SHA1

    ca5cac5b723f9e3d3ff9188fca037b551c332573

    SHA256

    ddc8f8b4a1ba3eb4ed21c5496f777958522af5e8976a38877bc55e6700328174

    SHA512

    c0c3f4220e0c48875fea2df3b5e3e249b186168861e0c1bb0c3678fd0c62edd94f968c810b71c69474c9e406d60d4f14f87c1e2d71d6c6b3a8ebfd1fdee5efef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c2ad664cd850ecd2c84daef6acbabb91

    SHA1

    951985d67e8c3f8e9b4afa558d67ef0c21ab994d

    SHA256

    37e80d9490856a067355d804c3fa890f2cb91af59224a1cdd56e4a64c85bbcb4

    SHA512

    6da6c6048b3b11e83746a8f514e69fd4734e30dd0467517a58f6f538edfc17934de03b90c495aa8a24dbc18cd7064e232bdcd1ee3a8c75e8f68cf62cb5a553f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77bda25c83b7d76d9cdebb3278835860

    SHA1

    b0bfb49b88b7834d25d7f0ff0aed626ecf2d80f8

    SHA256

    da46527ffae5e6d251e5a5832fc0eb18942b92c09dfc019b83bc52b36d8e242d

    SHA512

    ca975b7fa737220ed01b5fe6d489c049200f01c599e1b487eecab9de89f6d871fb088fcda222d1e58945c11a07bde6be1ce9f87f664c768bfa7019524bf61548

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c2a8f3c383a3fb02e30de5c56f29693

    SHA1

    c7e00eb0713de2df72077ef133c03ef98c72e588

    SHA256

    6a551be378d31a472b2fe7899cdb80c6eb63bdda932b12f3b8e2d36e31acb3de

    SHA512

    ed419febbd381608ad9bf0fa58da222e0cf4fb5b91cebcd828e4c4bc1a397e6efaf51adb21a07a3699d64966f0d070d3f06eee9c7b9536a96f2f2dbd5aa40303

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6021b3a14246c63a75bfe10989a0ff16

    SHA1

    dec6f891644ac1a0923312372793dffca75419af

    SHA256

    9854c0c918dc881b9c4fef3f9530f5497e2e0ac4990d987b7fd066865af1e701

    SHA512

    0d70df2d80a5b365d33bb9539c02b683b79930544b05aee561d242a0972df88432a9dbce3443d0ca625557a1eccf28606ae00f67e1148ef0e0c23b5b16622068

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fb7e671278981f5647bf2e8745c89f4

    SHA1

    20540831f49312e4a31ce4452a1f8823d34db735

    SHA256

    173bbece0799a8ebf3ce0a6d74262589449f25a339aabec45fed49849e404664

    SHA512

    0b9cb30aa58b5d7bbb0d261262546d416f1f5f7e9fbfc5dccd4f30db4a03d313c496c90cafea180fa332242b965689220e420e65fdf5add698b7f234b58b74a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aaa9e2a14c7524b51876236098070515

    SHA1

    220e3bcac61127fc30fdcce1b2957b0369a0d2d6

    SHA256

    1e6c3765f0bcb881477858ae9da681810b986ec5e426a9fcd7cd617d6c29bb3d

    SHA512

    09b33888b4665abdc96b0200d6cacb54c7120e8cac858ccd253befd24fa95fce2a982a31dbbb978d9a259e126ec134d848c2c1d4cb5885b365d15fbc1f09ba77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7eacec11e8dcd0e8c8b9497c16d7e215

    SHA1

    a1010157a28720068f63fb17938a5e54895056dc

    SHA256

    fcd7cdc71aaeee679c55299097b3d266b77aa6adcb396916913ff87d4d943a52

    SHA512

    be9b211cd94dcd3907711091e6004cb38c99d010aa2ffeab07fdc5e4a459f4695d39979cf596ff09a339f9320a1ee602e875c3627622048c258961bd3c33843f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3473b108e2f22309298133803b0d80f8

    SHA1

    7028fb331478701f87c1d78da80a32a183a7a8ab

    SHA256

    71a86c3f0dcef95f1641b64bc5340112f9bd2a5558c14a1b4964c221b4315a6d

    SHA512

    f9d1852a0dd95cf75170733c3d9fdfb3f70a235af8d398a173b80de27a51f0fcbcf9bc5d55e82d9a4ec44095907ee39cdb37879aafb0c67038f8b821c500a3ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    edf429b562b91a24254dd8296a8abb57

    SHA1

    02427eea892ed9c07996e493e9a9e213d7707b81

    SHA256

    05350451fa54aadbf69aba4618f6623456d7a46814f09992f59b5b5f8d66e899

    SHA512

    3d8768df878b16e814d756c35bbc4684305e00643994620fae1e9d1ea3ca809bfdfba2ca3176909970b67bb183b1c96766824866ca739525ac3b6a6d9be5e40a

  • C:\Users\Admin\AppData\Local\Temp\CabB33C.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarB40D.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a