Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/05/2024, 17:21

General

  • Target

    64200e737e852c4fc68f97b86c4af809_JaffaCakes118.html

  • Size

    23KB

  • MD5

    64200e737e852c4fc68f97b86c4af809

  • SHA1

    acde1607c19ebd2cc4b0a2cc7462323423a6ed71

  • SHA256

    73f0af1463f2bb561b83813f1ac08b4cced43e09969de21481d38e79e1889b19

  • SHA512

    e393e28f93b28bb767d8bc194e525a33d0574dff0b7dd92ea50a686bb493826adf6b62fc32c5cccb702df8caa4424eba767e2bd8427e9329efedaabf6385b110

  • SSDEEP

    192:uWvwb5nqWnQjxn5Q/hnQiesNn2MtnQOkEntnPnQTbnxnQylCnQtOwMBMqnYnQ7th:vQ/MMyMeY

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\64200e737e852c4fc68f97b86c4af809_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2876
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2876 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2740

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10d3c032fd3d87973828d2e2d7e93cf5

    SHA1

    a4eb8bbbe04c1df1439815d895ed0ce087e93d72

    SHA256

    6c68f9adc96463e031dd93e4cc03f6ed725682a306189f71c0c0bd87ee2aae1e

    SHA512

    9453da2eefbaa90df0c0cfa1b1d1e8036593626d4aac31b90edb2156a77ed69ac929ee1c55d9b9c4e39157c599105a1e95b9004fbc9574139feaf25388c0a88b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b029ff7896168ef49995dcd6a8c3b952

    SHA1

    d2edf15c1b903285291db5011bf4b2dde417820d

    SHA256

    0962cc13cd173c8773f1f30fbcfbc842678adf22a3d2e890f86670dcf5596c57

    SHA512

    78b475d4f948871d341cbeaf399c9bcad9f21d67d2d1aa11f74ec83592588f2b113f825ff9228f6996843720dc2b90bcfb258c8ac1acc0591bb7c8477802f9a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd87c7a6010ee66ad9c1825d9b3aa8bb

    SHA1

    ac8015566ad5a615b1f32688e828397ca7334c34

    SHA256

    10594d0c0c4d879c466db80a641f018fee6b645fdb2a235b737fa805bfb1c0fe

    SHA512

    4d233430e166792c09925a72d1df826f5ee3b28c3cc1e5d15932dc370496f8606d355b6c511c595a3ba08463470c0f99bc77b91ba642ff39ab88b8b418aa02b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c47262ac8528ce468b7a1ec95df75fa

    SHA1

    272747c4a14f08c09bb1e81658e01aceae41a963

    SHA256

    bc75bc611a8ba09654b973cba9862aabf655e8d7d166266fc613921a118056d9

    SHA512

    86d4e43b7e8aeb01be7515427e0253bb3e55bc8b3e078853afa97206a08dbf84de1ae01fe52e5ffa8276e36f0c9cc620c50578f3432bb2048aced91fb685fc2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    74a3eb4fa39e75bf4e59e06d34feeb5c

    SHA1

    63197c9c7e9d5954097f0d2e04ad691ddc07e4ae

    SHA256

    3886a793ac435f7d47c0ee7cc30241f44f5b8ad6e566af0c9351cb8d076ad749

    SHA512

    45ebab5f53e975057f9184379e8730edb1d2fdab89b870a403397c43368bb5c6abd0a4a76caac9cfcb826b96548876123792aebc14b74034d8559128d297fe4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d16abbb653a94c46e8d42c3006a65af

    SHA1

    ea33f45dd78f0b15afd1f0947cee9728b94a4022

    SHA256

    de8a48b9b1f967af30ab77ff5a951deb74a8d4c3b86f1a7f1da13289ff367e85

    SHA512

    dd7b3d32eba4d0aa453cdad92989f9cc748c3db26ce60b006dc9b529ea91ca87173ea0bc8f130f641d7d3fad487e5bfda1c1a5a1b5b55deb3b93c0d9c7a40b4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c224b593e667f386d713ce93f6a6864d

    SHA1

    e3589aa87b6e93c261c4befe2e203cb5d2068739

    SHA256

    a4d6928658bac805a093af27dcc8d7afdb182496bb81b0f4d8b91157904c3f31

    SHA512

    ca867eb0e904b11244b456f9b278208b2effce66f0d8435dacc3cfc690ac4dbea269ee7cc217b9e5dd478229a5faad25fac0ce6b6c463d2903633ac7041a9b5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e42c58347c62fc1ef5afebd244a680ed

    SHA1

    ff1da36bebbb6cbf7982966a407b6831fd2680b3

    SHA256

    bb48710b32410f53e33e6d5fb9f2effe15a161d76d0e054852ab4790cfc6e531

    SHA512

    779d6a149f756423309c0f8221a88d63b1af209adb3419328023544516b9399a27b71d5c5dc32e96c6f6261cc55c79f67e4d728e02e92a71232cb2fd2cc1d0ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19a7b161af650ca92eedefaebc4981e5

    SHA1

    77096510b44375ce30eb4802300c1f3f9c4e787d

    SHA256

    e4b0a4b3934e49a837fbd5839ce8f6c060ad3322a81d24ee225f2ad80236ea24

    SHA512

    4ab1e9c57696bf97ba974f90bfae9850fe249e63c3326ee5ad888c4ff8760054dcdec9354956c0a348333db5b299d2a3d8ebc2af7e1f286d3e8be6138f52e222

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd7fdb65e832ceefeb0eb17f3420634e

    SHA1

    8edcebaae1e88bfef55e36659801e37f1a332b7b

    SHA256

    085dc8233804395b11a7f7baea7c2c71fb4149732cd61ff2a3bb0489be697d2f

    SHA512

    c8c2248899876591c3ef904f8de5179387d923e74222565acefbc35f405545a25d2bc17d9dbfe75c479597398704a5049122c30104d00b1c767c5817cc6c3810

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a903e335d43f5cd2f0f62af304d003ef

    SHA1

    56d3aebf8b784c0f8c7a5b26653a922d88b1c29a

    SHA256

    ca3880cd1d9b14a3b7b41422b783432c9eca933cfd9fee0728497e7808baae23

    SHA512

    78c10620823274baa237ba29552e83bedc51db639b3e91598dbd2aa96060624c9121cb298be020d5ca8565c59b0de8bf1b1c160197e70eaf9ad27a57295b7133

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35221088474250aa78b169fcb1fa5daf

    SHA1

    260a27e210ff9ebab53da5827f435dc93d663fb3

    SHA256

    4e8754868cbaea6e0d2081f7e64c8e77e2576dcdad898612455cdf0c4720f64d

    SHA512

    58a4e3e9bcbeae0368f251afbbb8c13ef6ef1f546b3f167a9384a84b78055fd36d8012f07f0ae618729a193949538d5130508e929455d83e492531b65434597b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8b9cdf71251c5d44873342c679bb61d

    SHA1

    699a6c80cb17415dc6a8f663ccfe7b194471da00

    SHA256

    5543bf4b48dcd29557664bbf1c61f505ab396587774e3f767403f60d2a2ed970

    SHA512

    3eed4ad2ce2bc94a1a01f689f5dcbffb4eef4177a69ae16b573f8c26c1a3b79210e3754967e1825ea84a8a580246403955e1da116edbae086f9a0e4d1eec6916

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af8902e377176a6dbca19be37597c249

    SHA1

    34ff6eea56a45b47e6eeb165f5624db1836f7daf

    SHA256

    4fe1eb5dc38b03d6ea96d3bcbc1da711583c3acf26670a325d633432cfcde92c

    SHA512

    de8e7e0fa583036ac6c67be73da36859d737b5bd1df4c1e58d9893969a8df56eb6d056a4bf4f3505fb4fc37bef95f5ddefec2928fd4c6af19d814f344d349546

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4e4326b2fc12dfb65adf1eea313a7b9

    SHA1

    2aa1b80bdd36bd3b8445bc54b35dc063b315d25e

    SHA256

    9941406b0dfc187220146aabcadb88eaae081a2c98778a1e089377de928a44fa

    SHA512

    5aeab938373f7ce242be5fbee84c97c75af9b27e2d10f77f14a70a03c8d31b45b945c6e1d33076649cc038fabba7d09d581e2a5e08e3d2fb0bc50de357e580bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9f50852507202229303102cc14014e6

    SHA1

    8e790a762bce5383335de8e5ffd5795159a2d39d

    SHA256

    30df8d7061a0a181725bd094e6a57014c8d5a8c255b482dcc1525e5ddc509b86

    SHA512

    2d74215e5def8b5e2f983ba33c33148232751031a2b0feef1b5b87cff8a9581d64a62808739e5df3410655b0cfa767f55c27cc7b5b875deb6dc294d9c1d6364e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f915105b68426d47d68d7b5365631b5

    SHA1

    29434bba04bc62e301829bcf2457aa5b3f377c37

    SHA256

    683b1982d9604758c3a736be2ae17f4ceb6d58a37a7e7f34427e5634947e8174

    SHA512

    ed70330a5887d558e210f2dd45b50e32ea7fca9e738b7bdd8cb01cc6fe330b99c84ddaf0d5ad5be15b7354d01b34cf4a0b6af50b20f7f6a3ba5a96bbc941084c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc4011ab25f7702ce50c4bc2d20100ef

    SHA1

    d94a96125f72981c964cd61e29d0f535de1afe13

    SHA256

    cfe13e55eb8fa5f89b69a76894a7d1bae610a46bac7e187f268fb5492dee8eb2

    SHA512

    263e7c4592f5a694b81314f3da5ee9472e5438e33628eb204e1dfba5b836f30d26ee48349b4f48f6930009b095c26df5d6aa401fae6ea2bef4291ad14537166b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    262b8fe621c11f388c95cddcd60a8f05

    SHA1

    04dac5f5207054ca9c5ef3a288bf9f295aad3a82

    SHA256

    b2556422b88fca90570fff78324830958cfc05d00e5bad94502b25a2bb01a7de

    SHA512

    131e9b2143758496e0526eddfba0c60d0c52730bdd478170ead42799d2e8a412dcf33794715553b98db988df3346a7b00b10f480b3086513a85f19f9d51b62f3

  • C:\Users\Admin\AppData\Local\Temp\Cab2A2D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2B4F.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a