Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 01:12

General

  • Target

    6579d170c83563d47c9f47ac372a8814_JaffaCakes118.html

  • Size

    218KB

  • MD5

    6579d170c83563d47c9f47ac372a8814

  • SHA1

    2b56d6f06b588a0995f69a69d6dbc5171a84cf59

  • SHA256

    0c7b8a80b0bd157b744cba7a7eb7c40679366099b27f599e9d9d6e274eb04aa7

  • SHA512

    d4caaa905bd91fc12a8cc41eb550bb10a78c0d192fe4a2d29381f5793c8bad36c744fbffdfa24b2e6387e6499c0e606cb8ebac9d33e939220abfd92dac3775e7

  • SSDEEP

    3072:Sd1+3kPKhrYyfkMY+BES09JXAnyrZalI+YQ:Sd1FPKdVsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6579d170c83563d47c9f47ac372a8814_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2028
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2028 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2760

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    874ac94eb59177319b3aff319b555343

    SHA1

    dd8836f7b6ccbf19dd3e05367ebb3240deadf700

    SHA256

    29d1d5d4b8e8573e28a662870a7b7440cf49f40fe995e1121a1cd0619cf6d79a

    SHA512

    9bf6551ae3b9b825ad55ce2af80209a7079eb2468376e9874d4cd21605a2408bae50ee5bec675cd4b68e9f5023b0757ba1c06b5851a7befa2d49767bf7a4dd34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5d2c5fb9931dab2b53fd8dddae7c01c

    SHA1

    b4fbab77df8d4db7302a75f8ec9391e0d2c75e70

    SHA256

    1b7612f8f910a4addeb5acd5860ea222c6872ef575fad646953f651ad5df4a13

    SHA512

    d7a560bf4f970f30ff47b0464cea2b4c8c51d768c9ad3a8d272b2e2cb2add5c6bef186366b1334b72ef09ac3971f4ffbadb080c8aee4deedbabd183ce66caef8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fabe7dd09368ac5e7a87a18cde865f1e

    SHA1

    f6b01bc1cfd43ac94bb1dfc87c5939efcc70a0ae

    SHA256

    c60360d63d673ed7be94ce6aa88006a1f7ef3e41be6c91992c4592e82e3ab513

    SHA512

    438a38c72963733069b74d23602a472b7a635018f3ac3b99e94b9b661550fd31aafbaee01d8d6c7152a299d5982c6b0e349dcd811e3169994b4970b57379dab1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b0d8639c0e40340d3cddd7d3dcae388

    SHA1

    4aebb0b564db314fd51c4a5d186f2c3f0b87cd46

    SHA256

    eb6019f8a8bb394b9237d3a088abc7c7e9e6c0ff18dc5bc7d8854130c60f502f

    SHA512

    491a3abd0bdf38007e0f287a4f5b3537f7f91757d9db0c34a71e2ac67d4733132ec84a59ad493eeac07119bb1751e01c12a143b0619c3a1ceaae8930d6abebf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01df2163246a18ee0df3ce0a921f64a7

    SHA1

    9b8c2839df4d9ae4e701edac41500b195f0b0523

    SHA256

    26b893ee43c252d744fdfe229dbcbf6b92e0d4867523c09fd16fa1b7e3c1f288

    SHA512

    eec40ca5c23de18d3da151f681be376a72d562debad26086395bb8ae1f686df19ca105eaffc60fa54d2cd4bda59129d9f1ac7deda51ced1ad82482c5f17112c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d358a59678e222bd4951f95ef8d2d5c7

    SHA1

    d60d23e1fce4c86e2d011549f4d56e602c986ae7

    SHA256

    d067408028faaa05cbdf860469e129050be548e4c6f6e1652db4a3e518589a4c

    SHA512

    e8444350148da48e32320cbe3257125578749775e2f5a9f928072b1c02caf8ae9955f74b85e1ff7b272cd966cafc87c6ab52fd675d1360ac3c04c2efe272b6fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82dc134d5445e36979b889976fc47bac

    SHA1

    c9a87c372de9d943aa81550549dda3c30ca54279

    SHA256

    4bec04e688278942135e76b0a12545c2811a800cd4de03234f976ec1d325df81

    SHA512

    05b1ed45766f71be3242f229c5afafacb177932909f2608e19b6b7be53b5e67266a2c1406cd0e303ba9d749f57d6247061e9c7375396426dab198a74c63960c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3de38ec3356b6f29e173ff41b35b0c0f

    SHA1

    67436c3f44141f11f118a619be17296d0157ac79

    SHA256

    9a6b947b402a8d5863f03b8abaa2c949e8207938dab8d2ccde1c56797ab83d63

    SHA512

    9017e584c90f3a2a883627d5ed4afe5f6a4e88889e06c954348f565a828e49a1b19514e1e9f5f2a6af5391b3e7d8c2a1309915da738997484b156ffae1e001b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4717a758cdff857632f3eb47995506b3

    SHA1

    7d5b39a868069fe25cf6cf04ed6e869a7ec5d7fc

    SHA256

    e3687beee769f8d33261e73b7186e06acc7b26552dca40afe0edd9c53908e40c

    SHA512

    ec94c1d24bfc528e344359378178b9a456672987f622cacfb1129b7ad12c7acbbb97a8ad4c18c5d3f967ce4d5ade515b57659b34c88f6279d3e3a79f6ddd4eed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20cf6ec2f6c1063e2a575f4fe513c6db

    SHA1

    35a5ea878b2c60eb927a097fb2ea7c267750598d

    SHA256

    50378511470fd39ec90b796ebb0c9defc72cb20930927dd465f5ef041613db73

    SHA512

    5ce4419a3ff7a6aa0d993b530dd0d3e7a13eb06b9781f2c3cd0135f35b19b22e04694ff2903b28dead804efb0dfaf9a0a7be8c151d94b01dc858c36153f6f32c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61b57fbecfaa5532c95314cb494cc3c0

    SHA1

    f8f5187a683ce12b22274c725d0532320e80b618

    SHA256

    e4f934cda8f00801dd436bde7368d8861a4db9bc40e4c77d680c54f18855d9c3

    SHA512

    f4aa2cfee116f50c577efb776b81d27c7878b7c3bcb15a09309c332477ee289b06704efba8e444521e8131bec8ca08ac32d83163326572d81bbcab00553af734

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ebb7057fed8aaa3a32e540d71d10d281

    SHA1

    8a5a24cb39bf2ddcae5819277eb98febc9eff305

    SHA256

    f845fcda7f350297819f027196f267d37b971f3167001dfdf9eb73aecaf5f1be

    SHA512

    a388b975a626de005fe6f10b513b0068f7facd3015d3c952c8c36dbca638a2c7ba3d1ef4251295e31e1c111c02dda1264b6b293251ef267be3cfb3c3be6aea52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4ed6d57fe4c466f48cb230e8d178d99

    SHA1

    a28c8d42fc86b0856a96be936de50f984c29255f

    SHA256

    906575e164e31d4882c400906a9ccee30c28638eeaa5e9c103c79611dc300418

    SHA512

    bf809cbf54a6b54a445a61a0349a2e32cbbb427fa9b7c9550b11ae824a840fa0da8802d378d3e98104c0ecea6bb9ab0933269e2cb21bbd359525ac439ddcd44e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d3c0a956fafb0ccb61d519feac40263

    SHA1

    6ed2dd4864bfc79a5f70c006a879e15900d549aa

    SHA256

    3482d82542e10111169b0cd66ad4ecffcbaede99d8b26cbf13d34b056c385006

    SHA512

    00cdab0f7f481800dca6fd2782dabbb4543902bc086a0569706501d62fc3da7a1fa7e7cfdf801de99c437816a6608501ad187886c75f9d347de5cca7d8675d18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7cbd71f8c08b65fbac3347a4806a42c

    SHA1

    164599e5ffa40ff0adba7e28e1ed6184de3d5445

    SHA256

    e80b0d3d2bc021710b1fdd622c0ab0c221420774825ece6c489c6ab8baf665b3

    SHA512

    4c056d257226318ffe0315db4ac722e8df7c0cb8303d961c5adb578c2c0f4ac77d70d674e36b94e966682904ab7d52734123da7e99dff197c5c61067e220f9c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a5436d88805909d7cbbcf97da85f4d2

    SHA1

    753da6ef775639a4cc445f52a30599aa4020c112

    SHA256

    7e016f537d1dbf7df16389e11f36a1f5e78eb850bf08587649f442b88ad9e67d

    SHA512

    6e31ac11984afaa608f5c5d7b71eced487da96d69d6403901efcbcea42e94d8304a93382b04eacb4684fe616b3e17e1bdcae2d5f5fe095ea012d91aee9f5ddea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43cfd44c0398c7bcdbe51dd4392241fb

    SHA1

    c883611208f3083db8566279fac9d18361343f39

    SHA256

    ef5c6ccb68783c0e8f7ce19cb6abe615a56974c8ac92a7d962d3e233638d7fc5

    SHA512

    8e2e292bc79013ffb250bede86c9798a83561b27d21577aa8da061e52b62b81d1a907a9ba1d28d0585669b06abbb6047dc2dddc5fd52db0f04d90f0d4ce4e7a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5707c286cd29332cd42afaac875b82ea

    SHA1

    04a7c35dcacc53eaaaa2956fc6e694dba568fe07

    SHA256

    d723d4af3a8215265bdf2ab6b36098639594d0fb56f365f9c6a96cb8a4c456da

    SHA512

    e84eec10bb9f873f727d361e27784909e3e8b41a78d650ebb3fbb842c21e7f9e83de722bbd2d380b961a56030f94962288f41a5bf39e01667b9ecaf2ef8fa6e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9c0049f39bca7cbae5fff6d6e4f7717

    SHA1

    3e0da74f0b67073db01d68ac4615628871bb68e9

    SHA256

    c63de234fd351c2125e7a1bb5ba2d5ec3803e2299b0537d938e11c010b225417

    SHA512

    51db81218eda08e9d5d00f46b5b36752a2485e6bddd8d32f1a44ba0b9144f6872ce2336ceaaee88e71df47bddc38a6618ab171568b1f819efbddf08372c76735

  • C:\Users\Admin\AppData\Local\Temp\Cab19CA.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1A2A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a