Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/05/2024, 20:21

General

  • Target

    5b4918620aca63ff8b516dc03be8694f_JaffaCakes118.html

  • Size

    6KB

  • MD5

    5b4918620aca63ff8b516dc03be8694f

  • SHA1

    0f764e773252f13093f445e790caa70f6ef187f0

  • SHA256

    92d36c8244c553dce99316c9acc565d6098aad955082b6018d8d29c717babb97

  • SHA512

    8f5f343be78bcd7eb7fe3f6a3e443ad6074248071367bbb893292757786c42f31fdad09da6dd32f01c7389b2663fbfa48f208dcd451f92039505a259bad8d9b5

  • SSDEEP

    192:IhUPTNPa2EfcwjbhlhJALVWlF2jIXnT/W3K:EUPY2E7vrKU+KTO3K

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5b4918620aca63ff8b516dc03be8694f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2776
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2776 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1612

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b60c8555ba4894840241ae6ea133c5c

    SHA1

    003566aeecfd9e99d0383c1469d211bf52537908

    SHA256

    404abf92701184fd720eeea540262e38fc4105fe1db1d85c8da95b1d9f693bb1

    SHA512

    1c050960a467f0bbeecf3b68de770091161dee2b0869f647c7c024332d9a5f381ff78b0aa0466f1a72fddfaae52f4cd6c78ed1f236547924eb28dc4458cae51b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ae57bcaf0e9d5459a0f74d8a36f5c62

    SHA1

    d0b583489dd4bfd69732d484ed45fc4a7044f2f7

    SHA256

    9bf8fca6c225f485a356e67cfbf49c1abf074a3878fa1f75153c6d5a4cb5cc4e

    SHA512

    d9d08db57e3e5ef17887b2c631e96dcf87a8f0b769b7ded4ec6f534b1ce33840202c8813e7e61d1b788bcf82525ecb005dc984df2aca0748ab654134ce6922c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e8f0ed3f72e19b0ced15d67a650dfa6

    SHA1

    3e3acc3b297f23c68bac19e27ef5a6759c96c02b

    SHA256

    9a55da35756e6cafd338f87b398e07e6450003dd6da98130ff171b3d725b2c01

    SHA512

    3008b2d236d4867625452957d72cac807452b9aa58b4618c6e3d91a53ff1a01bdf9cae3e97db4b819189b3a61caaadddff8df8a1f55c4c368995b778ee9f6044

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcaed45d9ce06f80f1e58a56cd7b19d4

    SHA1

    c4ac793546e75230d8a23ff6587dbcc246a3b49c

    SHA256

    53ead3677c9b58bb8db6214a19e7719d83524b232ba33162ae074dc881884c31

    SHA512

    cb6295fce6a81878d4d991d7cdd134df2fb3a866392616d4a41890218229f24b4199c18a038c78d6b270a61c1cfa425f06ad0f5b8711edba70e382c2450e882b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    276a454c9995932836205ead9b194b4f

    SHA1

    4b4a11ba557c13fb8f2d36034cdc47c79b7778e4

    SHA256

    bd6c2b5b88277f03d36f688264adea03b46a9726b28b44740f13620b94493f71

    SHA512

    df02ac82e4565e6692553810432734c7e7d55ea64e58c6658a088ade2df899477287a541d15707377b5c2dfa09c85e15736ee457c3b06cb7b099934f2c8e65da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0757bc47bf8624d9727ba8a73a3ae70f

    SHA1

    3ec0889e12be237f767173bdefe32ec2517ba4b1

    SHA256

    cd34fc17ebe06900df21ea7880735e6ca0904573f1ef827e2cba8af2d6c2e68e

    SHA512

    ce1a48ec8bf3f016445fe1a66bb5778bf76d433ab89cf503d386358e1614c357b1703f12676146e587e38f153f35327c8b43664f6f9afb544ddfecf26d88c5a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a3cd57a09eeeb9f55b15db712309cff

    SHA1

    17d552eaed1c0d9e32d61396b68e0739bc84674b

    SHA256

    11e7b1bc48dbfa1a5cfb65ea53ed8951741e9904e81001c726d21897e78039a5

    SHA512

    6c9292eb8f3ac6aa2da5f8550da3d76bd2b99d8c401d3d516db44ff094a42fa1a8f45c88f48548753b6aaa2045719cbfa2eda7ed59f3c5b76fe23062fe1ee3c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5756b4beff2a2d8ecfe40c1f8d8646d6

    SHA1

    addb8e8bfaf217e3a94e2e0dce35a411acaec274

    SHA256

    d097c307cba70d59e2fd9863c8bd4e55a5e5ef26225a2c2109371791b60fec8a

    SHA512

    2a0e31bc40c782eadfd88e92011b52f3be0ece05c89b4c891cb428f9a8991ba58771eda308b137e98cd503c90be8cd7079cfc3903c84b6f491da36ee27b2f0c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f2202ed8998cc680bed32295b5504b2

    SHA1

    a9e80c99baabae77eec1700fc16588ff160e8175

    SHA256

    9e6d437b17a5cca28f65080014afe9779578eea075fe3711c4d164428fc735b3

    SHA512

    4a4119bb981c30f9583f221445f05f0f7621a0f05ea1a3e6ee1f007370bb2be7b7851f3c6650484c4a22eb3df7aba17811add8e638ad22427de76bc416b0cd8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f9514e7fe78100abaae30781e24ed12

    SHA1

    823212a9725d99f92438cd23c4cd7db9bca900e4

    SHA256

    5267f47f8bf569a027e28375873b4439715620d13a5d2a48df00969a64b6646f

    SHA512

    1b336b247b8d6c1d9df9b17e887a8ce9d52c966995232b477c3444f9b8144f380e9215fe273802a42e60a7d7551649c18142ee0ae18fb24c0c9704c2526c3517

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd2983710c947fee4286bf9da3191e75

    SHA1

    e4a44d00671dd123282162ffdc80c14fd470c081

    SHA256

    5c86566460541ee297259d2614cebe0c7c49b4c8b374bd987cd7f5d800eb127e

    SHA512

    b7a028d1c7a2eec12c2233943317c0518094b79097db7b7c5020cc458de4388b0e64f4feb27729dea6ccb7378bc704b33416ce3a7036596cbe43a0d116401e48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca469489cee703b45c2c835229d0002d

    SHA1

    7bb0b9c188b16370e9bf008531da80e43837e93b

    SHA256

    5532bd31bed791268b3930c45c05de6161b17ed0aae719e3bc0eaa7b73c0d578

    SHA512

    565c2578635b3887bc0e58940a016b823b63e916d934665c38eeb3459e4344d3fad21e5897c7e28b58159a4bd3c5e7e38d973a675383923bac774770b5824d24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    191a75a9fe296842479d0865bd8cfad6

    SHA1

    57a731543d06b6c74152af3c41fadf6d6e2281db

    SHA256

    62404977d4036e46d003d2fb6d9658ce5500a8d7d55cd98e747b3579acb599f2

    SHA512

    f7ea2dff4f82843e97b97617b0c842a318576bd2536dc00196b374942ca54dd0823e3ac7574b7f747efa47f027a1d05a720b16d728d0dd2fa60d13a061771765

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b4839749d5d8355c481e7ab7c66c5ce

    SHA1

    da79ba8d46485b65be85fab8d77bc7cab23ff0d9

    SHA256

    fc601db3f3888786d2d29e419232ea64dea7ce2882891c296d816f77dd3f69ad

    SHA512

    aadeb5067e045bcb625cd9abe6543870b4ec23a954bdf346ec38d2f8a5e9ff29f8866cfd9dfcbacd0232422a71272578802dd9075210dd2c8e9c7cf2072cdbcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39933a5dcc06f2319055717254878924

    SHA1

    11421b9fbfadf50934bd4c9c86c02b30e19b413b

    SHA256

    47301d1c393bd63cdcaa1935ffe8a27ae239476d46e1fdcb2e973591302490d2

    SHA512

    16b03e24dcda3c6946817b284edc15e873af023d16d76fa0c1db2309aea1f2c87063a7dd1a0fae9ea575667084ce776cb0ddabda3d72160345e09d67174e85a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    327c9f9b0a9a1c5d71f9c90708b527d5

    SHA1

    8e4c4d0225c7261c5ede8e7a5d8229b752873057

    SHA256

    3abdcea136d1bcb002849156cdf2280b45563ca45d0c7a6ba6f3311262a1274b

    SHA512

    0b291b639239db08d4379fc61d99e6f76eb22c4c7c73d82fb246ceb3cf7f75a4843bb13682f9c507dec10b07b3cdf23840cc9349a165fa663f4702a0fd88f009

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f62f7353141d31b19a800e78e72239ff

    SHA1

    ad7d050ebd13a97b9c3c60c73a2695a4f6a32f2d

    SHA256

    c04f2c40e1ce186117167427e150785a41d92b139db60d165a5dd5327446126f

    SHA512

    1a141d96cde8bc7d4e3034d19b82c3269683049d038d71abfa99fad13702d673a40034719cfc95eeccceecf06a0361123dea01b9b5fc4bff09962349e20d78a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe761f463ca9aa54e5746ef7833932cb

    SHA1

    a30606b35e85f8cd8feb4dbd37606430dce93d1f

    SHA256

    9d0cb279d2ec4910b814f46aac5e7cb93bd51ef0f3af28ab783ee553bfc8c712

    SHA512

    e1a5d5e7ed64bf9471db3ffc1449df7ce34251894bf09c537882ca4d5510c2689e9d780a6711dab758c85b5f554509bd6419772cd74d1c89a0b42527aa2e9300

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3c144c7fe664bc12bb82a1c01803f49

    SHA1

    829ff232aaa206993810b640dc3f0e3d1e89c534

    SHA256

    a0b219c4d49f669b3e76cc9d91dee2ded76c494e33a4df4e16232e37390b5616

    SHA512

    ac5cb2613d6c6c3333d1b108175028031f24165e881696d32dc7ba27dce0ad066fee053e943685fa08d2aa786df62aca2d1ffb28d503884d6713c5c52ddd3120

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4f53e8a3589b1e45af7469bfe53827c

    SHA1

    6c8a203d89283e5ab954e7bf8eaf76111bffe44d

    SHA256

    07c69be03ce822dcf9d453b166c4a89b0c5d9fd6ebd2a729e1f3a14e2668bacc

    SHA512

    679e76cffcc734ce311277f3e30a1ae4ab8325de8e00ef9282abaf44d0b10e1e442a00616b07cddd2704d185b113cff4e53d7533c0c9cc72a85c561c2b78a352

  • C:\Users\Admin\AppData\Local\Temp\CabA21A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarA33C.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a