Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 01:55

General

  • Target

    5c97bab8e1996c02722ce35041c578ce_JaffaCakes118.html

  • Size

    23KB

  • MD5

    5c97bab8e1996c02722ce35041c578ce

  • SHA1

    fd679634c81d1af770f4eff4fdd739e7520c314c

  • SHA256

    0c14bd4e332ab77a11341d06638f44d3a2be56b4f533487deef46ef8a90cdb52

  • SHA512

    ee35ee0f7e97f292993a1268f53b2d67c80dda48630a6bb0127cbe2ba3945ea97debe2114a8847ba8a6c889cb6e8f32dc45e7c47438deecd708e86f4a9e76429

  • SSDEEP

    192:uwbDb5naGnQjxn5Q/tnQieoNnanQOkEntvjnQTbnhnQ6v06J4RnQNjMBIqnYnQ7m:sQ/5v06kiCg

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5c97bab8e1996c02722ce35041c578ce_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2432
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2432 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1824

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66f0a5f5cc3cca79374511d61fb1eae8

    SHA1

    60a724971e82f3231fb59ca9ae4da4e918866b82

    SHA256

    f76fb8e7f17614863839a174b0c6e807afed474002e478e8be6d6a853b0adfab

    SHA512

    6ca8cc81bafe7d06ab830846f8852a4655f11179a9260f19448272b48c75d0ce362c4c46df2ec54dac3265e86999f42b5c00b46f3e78568c249ca889aa00b5b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63c6cc85975dddb68d3c651c7ee3655b

    SHA1

    1b44727f5b56fd999df2a57c71b3313706b3eae1

    SHA256

    76408121d3a399371cce9042da16b9a531d00d6e617f025f9035a6df81bf381f

    SHA512

    a4d549424e6b9f5c43910596799f4b497b84c730a6cb830ae3373c5d539ae4b4adfb4baec3bcbcbcd114493c568d64c8911433abbb88ce3251a793d81b64ecbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d42c89543aaa7d4f74eca38e0e7fd4e4

    SHA1

    615a5e0b19f5986a982f7f39fb3a887d185c31ed

    SHA256

    a305b141d6a42d38e4fe9445b830aa3a63e958584d5588795c986e50a6531daf

    SHA512

    f6f458a10c82254a84216266efad4a114d276b08efef3392f2a3e98ed114e2bf03ea27ca2de949bed153bbba98a17f2cae68f99f2dda5ce06f79b6f533bc6df8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31ccc95cf39ad6dc356e740686d2db1a

    SHA1

    c27cd3da93860fec7e0d1be91f2371a099cbee8f

    SHA256

    4e52708227dc53a70dc167307f87b415398b919bfed4e5bb7929129caad9b373

    SHA512

    0adc902bbf117cdd86301d54e9198370c44a27549c387b1e03897fa170246ee0ba477d0c3737f522e29e7251bcead512ee59dea3c0b16af0c2d397ff81fda30b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4605ed0b91335497a08cac7cccb3bff2

    SHA1

    3c96720a14ee3b82fc6abeb5eefec0d292d7ed28

    SHA256

    692f70eb8808e5217b145037cbed05659dd68981c6fcf3713559eb4cb259c11c

    SHA512

    67e704ea0f41b53610f603d6a470f195a3ac6469dd87c527977db0fe12565ce2b4d5e797a34e698970e6454e3c586de2f05b5847d0c7f1e61e2b7a317755dc93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c75d2f5dbe2aede9745afd14bf2b75c4

    SHA1

    25f2a6c5d685d6afad15bd733202f902cb331be9

    SHA256

    951ffea5ecee9d80792279845f87fdb8c725e237b0037c7e0d8b79a81e5b7805

    SHA512

    64e28b743e07412865bbff7fe9b2ba2b660b830d752f01a65ef987fff99a1f0fab9e81bb3db9fc6a83009a34a3e2d21712972080053a9389f8caacc1c751ec17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b04b833a0d60778f9a2d9e3deaeb20e

    SHA1

    bafc3895aee4a9e82f5d14d3a382456af289f647

    SHA256

    395af17d649d4545e1af0c3513bcf6a67f5c71c69518df2ac6e1755af889cf31

    SHA512

    6a3d37c0ea4dac0030f0bf853e3417c9ef44e662583c465f65a338b472e0b9b5b973f26d5db7b0f8db6603497ee5b4cba78cacd89627c0f9faff937dc8dac635

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf2a59a81bd77a8c9535b96d43cd71c5

    SHA1

    a640b633806cf04d92ef8937512e4e35083c845d

    SHA256

    b9a003a70b8a4402000d5774c593b82c433ee730ece887b6676189eb7276dd63

    SHA512

    46c9e823a4195a84bbec9a2ce4939674389ce7f9579ad0cebc4555203f4f8b1f7a0be6531f32f3c330f41b6a9f7dd858c8a82f8affa32616600b2f1c342d8c7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58b0742481bf75a41c2436fbd0e45767

    SHA1

    fed61e09e419a869a288758f67fa1594b9733624

    SHA256

    a2b84822482136a8d863af1ad54e0f1b8fd8ce154737b2953fdc82ea7f156651

    SHA512

    1856639285eba8ff60d9a80aff0fdb262a28cfab9c28662de09c553bde6b34577b933a64f6c1715dd330432abc5a43441b6370274ba4e9b45f9c51dc67908c93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39cdfb0a970457c486d9e22767b76865

    SHA1

    4479df5a935014c851fd1d025eb8c2585f4d5410

    SHA256

    1f3acc42fe5f87da58702d35e635bc3c78203a635244539311a3ef5bce0f4919

    SHA512

    9fc9c4d9fce666b74bddd10e3440cd97482849b0a8f36cd4dc81c2e91e2a70e07c1fa71b926249664ad1529dee4b6f572b2cad70b5b0ff382b03d1c47a87a201

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4724845168ba0af2830e2585db36f210

    SHA1

    e5865a4d6fea38548b2cc0f67c99935c535868cf

    SHA256

    ae1b348a4ad76077f7dfee90dacbe54a441be4bf1abc1f89732dcf8682a3a880

    SHA512

    f17e3f5909b5b67f57e8e7ec2e83218e71b90e76c8dc7c57049dd3746b062037df9396eb3c3849d1095519c4a416c1e82a92b90ab9bc75a9901a6a7d57b6f372

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ddacff38dac2757a78324ffa59035d8

    SHA1

    d2dc768f4efcef946c3ae25977bc9c3ddef8798f

    SHA256

    e20cedc6169ced13523416fc410955f14b1e7c659f7424124a35ca18a1fa53b5

    SHA512

    cbc2decd70bc1aae33d9726f7400d27eb77bb3ff1457b1ec441ff2c7b87e321eec893afe8429beb0b0ee10366f7a019571bacd01352f3dc92b7ef4e19390448c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b6bbad6e4268ba24472644c07211f522

    SHA1

    75ce71535474dabd69a789e3b33bfb6c07da8237

    SHA256

    693f4c11fb981a2a36ff5a62201026516d80e7cb01ba209ca3d62f3cf784f81c

    SHA512

    d97f0049733574dc8c47ec2b2e6fd612eb26645703b73297208baf71818e6dbe44ef23212aae312783082bba0ec75cc92c03cc61720bff1fd0aab9ea0c48081a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d113f281bbb17f686dc40d594c8417d8

    SHA1

    d0a54d0f6629744f4c8889fcf42fdf8b59260649

    SHA256

    354fe5c94e5b6e67f1c74a9dd449fe2a663eaf312c53148de7c66cc14337cfd3

    SHA512

    f69e947008fc233e5afba1ff5923565ec00f03e5ed2deac3fc72a519389d1d994ed9269fc691d851c41da58876846c52ae132c3dd1e610541b3461ca53bfa35c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e46e3a4ea8fd330e7b9c4d78bccfd21

    SHA1

    ee25d1beeb857f96f5c1a84e75ae76a90c85da28

    SHA256

    69d97fd37d708efa12c8331f2cb09fb0074a48c68bf8446063a009c3410759cd

    SHA512

    63c886675c7f7aed4725783b0487d3d01a2b6d8cf8e94abc213714d164a5d09e8788a969608e1c3abafe85115116ac40a3024beef9a0e0e20001a75f63ae004d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55d0cd1dcb55b956dc6cd07c79cef007

    SHA1

    7b1e16fe316772fb94d9ae6fc0b1c80f62bc0917

    SHA256

    397b88c276d5060a3bad92e56acd6ef683fe3bb6803c2fec7fcf636b4735619c

    SHA512

    9c50aa3128beeff9f9e9df21596379908ac4ae76e2d1ff1e4c199b70e0e3e8294bf7fc69db65877418259422c63f1f7e8b3afbc1ad2d0b4a2732281d85822ebb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee8b5fdf0ed7c448dd44302083cb27c6

    SHA1

    56498b399f71a8aac57fdb9372775e4efd808693

    SHA256

    74e4b7a64f10434a5c3f500b2d65855de05e48f0e1dd5fb2b8061753096dabf4

    SHA512

    7949e4d069d9cfdcc9194c258e611cb3191a7313db10d614c7cf9b94d649e97c983c4221e7df7693c11945448cdba2bcd4b74ca51e80d1231adce0f880ede74d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94538ea58e32b47a3abe3248d0faa40c

    SHA1

    a5e9f1b0afee4efbfa8de49d1583d80ad6b9e447

    SHA256

    62439e306b3ab3c4416fcd245e46e569494a649e5c50e442ef703e5e1ee0e600

    SHA512

    943a10216a6a32ac911e32991835587adf334d5ee00016bf4d41a870f938171f6c18527df1075cdd9a65a10e4869b9ad0dd3656a4f97a624fb68f14ba00a85bc

  • C:\Users\Admin\AppData\Local\Temp\Cab35F2.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3643.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a