Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17/05/2024, 14:42

General

  • Target

    500a3c93a2c38072f6965944265392cb_JaffaCakes118.html

  • Size

    139KB

  • MD5

    500a3c93a2c38072f6965944265392cb

  • SHA1

    9e67204ff590596526abdc5e3b74ccfcbe72d733

  • SHA256

    10aca8f0209688ece1c2b83cdd8e7a95ddd07e68a5c189cde16f8a7742cfa7b0

  • SHA512

    4cb2209425268961221d48023a58fffe106c5a8c8fe1211726152a7a101aa9b0ac70b8212eccec1ea63233bd4078231d5aad3944cbb30dd7f540f07d1ad90d93

  • SSDEEP

    3072:Sj5nSwsB9Yr9MSY6fyfkMY+BES09JXAnyrZalI+YQ:SjJSwsB9YfYsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\500a3c93a2c38072f6965944265392cb_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2244
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2244 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2872

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49207e26be9141ff281997331d6d71fc

    SHA1

    c722e4a109ffb741cc55d3e45721659414d465b7

    SHA256

    644034b14d0d57676b19cd52f8d08d6c45804a67f7951e9a3a610e3bd2725c75

    SHA512

    fe5f5aa6c81e6531f1a4a423df6ec1fb8a5666239761afe0591a00462f8a1a7bce19ee1a661efb545be6820007e97f81850742fe3c63a11d15431240d0631af1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa6c11d5b79abfebccc41b64c1f22271

    SHA1

    2568a3c82321f2eb1c4563299a47c27da4801a70

    SHA256

    44645dd743f7dd99324aa7ede136b0361885c2d8a926632a7c0ea520bdc107cc

    SHA512

    372e05f7da58644c3b6795e28b752f30bf0749a461b04fca5d2b3576ec375a9d6239f30e2abaa5f7f8e53ca24324332f0e3cd8b4dde417d47be63341b35b6c18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b47738db7e20abc6d1fc74b56ad33a70

    SHA1

    65355687d7305d59bba3a1463d543be4510fa06a

    SHA256

    eb334a431643fb39de91e2bf6dcec0243dd7cf31558a6f2df1ae880078a66a4c

    SHA512

    17ee34df59360da60beb228ec60bf32ff4569964f907880e93a630f02a059636b96eee172237d189924ff23fd05d5bf927ee49b85452f3b2e25a70cd277543e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b6b84936089a9dbadc133330f9eccc70

    SHA1

    f94d65dbef620d8c8abb308c4288eb55b319e811

    SHA256

    e2c9311da885392d50fa488fb3af0e8692b316d99e6fb87f16ac878f363d46da

    SHA512

    89fc7da7dddd16758c7bf9dbe54baccd09df4828ba37d1000d6ac03e042d8c66bd03cc6435ff354f468e7628e2e4583222450e501b98102acaf9ccc7a3e2e09c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d6005ba1f7ce49454cc7be0f8e09514

    SHA1

    a335bd96a8b5262a196e12404a67b698a047dc6c

    SHA256

    c2a28f98a9033366dccb6e24a955fddd4dc4222e71bcad496ebbf6fb5bd654b2

    SHA512

    c34fd59fbeb9dd701daecac3f25486c05789548c00c3b2b43921e44ea3008486e48b1ad95cf9d17fa0fd52b39a71f63104262844a844f8d46ba9b8f73c7334f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f107f4c05ad3f695f2833cb2f1bd23df

    SHA1

    141b9f7840b971e67d156bd9a8fb56fe511a3c8b

    SHA256

    84e387eeb86a4f1231aa68c87a043f457e05f9b7328c0487ed65e206acaa8b9f

    SHA512

    c72afec85d14a0ad4f5fea7b00956c974e4e75172f71baf91a915b3457d3f07ca28561a573535318a42de0aa743e0b274dcb0a54133e44b23c76621f7715f14d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36bd1ba4c478352db4d58ab3a3068bdd

    SHA1

    4fcc5bf44ae02de96e39409577ee690e0bd0f860

    SHA256

    fe99ef20d446b244ae543e86d3cf129ba558d7407cec261c85dc438d0cdec774

    SHA512

    c515dacf56fc5138ad6f98cba08d8155c64514993c085f9c656f34c50fdcfb5f8cb0be88c9efcf2334893bdf2be46c99a48bcecf0f0ffad88b2b832f5b444088

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1066b53a47702bc433950cc3a3cd56ec

    SHA1

    e3a019769f3834edf9cfac523af9e73636443008

    SHA256

    1c8584292f2c170c5a38b4f6561f2a69e8edccc884a388f49b057d61238c14bf

    SHA512

    a8171eaececbdebfda7183631b116e6de4333dde3bc0994452d5590991e2ca6ab4d34cde1d6bfd3126c5f640b999d4005d95521f50a63afb17b033c4379b7d49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45cac03f93e134dca49f57d6978b9a37

    SHA1

    ac07fad454b025b02eb2d21dc23d509f181241a9

    SHA256

    de31c363f1788786963499c6c9a3f2e0799a479ac2ddc3d804e3ed9f1aafa698

    SHA512

    fe5f0545c995137bd2f96d57aa1707eb07280362bdd587e301588a3691e58bf81f7fc080c2dbf27c3ada161d9827f8368ccd3c4857238415a6210220d3432831

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ecbcde821dd3ada573cd204f98498c2

    SHA1

    2d622f5a72202c7a8f42d693e035a88e85ce3a10

    SHA256

    f9e7dcad9e1ba161e35c7a8119fe1094a14ebbf879ee86864fcf7a6f90c6bb51

    SHA512

    3162da113cc138ec6cd3500ec4a6e157b7b6f9e39cef522599f7ddfbfeaa62405b1a3e5d819f81a0a860c3d05ce4096f4e394dcdb86d6a178fcc20e3a42f7f6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc2d2ef059f08fdabd63f220d080aa92

    SHA1

    4311509b7cf3d3e159af59e0f2142bb7917cd59e

    SHA256

    3a69fbafb122c8b4920c9cb6038db2f47595429699c6d5659a566e0e6163f4c6

    SHA512

    fa6c0696815a7d6d3081e99f26619cbb1c39321b07e0ec2dbe4acc604716ac73bba201cc7110cba5e6f96b1c69fcf45ea7b13201a50681d28614e9a374669760

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea8c18464dc01b71691148ce0b59dc1e

    SHA1

    ac56a1dc65fdb43ec3b063a4f7259cf683f8d590

    SHA256

    4c741e9f0e06da24318cfde29a9c4086d6bc0cd1486de7c81e871c630914785e

    SHA512

    f7ad54b352bfc0574aee9df59d8146674f1abf2c46d156ca0150da7c8f0f55942fef576d7e893447fd8fae3b5bc5365bed5b538f5b225755418e5c61471e89af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac0b3b1e6bc1a6cae9081be0cfb863d6

    SHA1

    09aec20e44926330c08f23c3938347a649ffefd6

    SHA256

    5db3cbc489e1390e9d8dcc55fcd134e4d9ba1fbc134765c3a864ae9e7a0a8eb2

    SHA512

    969ba557c68f14468e5575445f45b0fc9652afb095891fc9bf267701ebfe76deac45b48b730c5a3faf266ab9c9d693bc857f8e118346d49112033e7eb9c0d756

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ff9c0b0b35c5837baf2726e7457594f

    SHA1

    793c657c8ba0fc5f0c92757e4b8171c457b1626d

    SHA256

    4c07e2349a66867cba169bee1cb259b19508c3bd4dd323775b042ea8ad212038

    SHA512

    ffc46567ae1b00419f4a9207a078f2395c883fcc2366d1f79ccdd624a1e750f8e2d50b2f51c0ea541eafd485e332bd0245b19956ac5ff1df428e4b091275ef29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d7034c9938b4762a8d996d6f0311328

    SHA1

    1badf9afdef7ae34074bd2eb1d185fd18140a237

    SHA256

    9ae32e0d1b0f5d6117121b88dffa00daab21d181fe5f47225ea747d77078226b

    SHA512

    c34cf3626107415402968e516360f90268c58e93612f3abae16bdbc800ec357a727e6ef87cb3074b8857f45433ea7d76dd6b16f1bc3520bd2691f3dd91c7f958

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3054adb82284cd69fc5ca066bf93b6ca

    SHA1

    a1efc7864cadce2027445267c503111375f9c6d9

    SHA256

    dbd620c978614c6c19d960cd3e5e7e983d1a0b4d72027e8d4004316fea730daa

    SHA512

    e8f26f11959003f0b2420a34980b8d260fa8c40f57ec905d61994c963804affb6832c49121bcb5eb8c1ef8cd646439d615b7f14f62faba973880d2724a35d16d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c84ba6c6676b6292c5211b7818c55a8d

    SHA1

    7aa9bad5b8f6498d4af202298953bd8fb2f522c2

    SHA256

    c38fe278e2a576f33772be636002446003145f39cb63b9a3c5286f71cbef0441

    SHA512

    be2b1a2242293fc53b3e5b666252ac1482d4201c385acbb8fcc998a5e595195a7b794725659469a81bf794dc27861fa355bb5e57462634e615aab7035673f0c0

  • C:\Users\Admin\AppData\Local\Temp\CabA0A5.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarA1A5.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a