Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 05:33

General

  • Target

    662b4279686a1c51a4ebeef24610b959_JaffaCakes118.html

  • Size

    264KB

  • MD5

    662b4279686a1c51a4ebeef24610b959

  • SHA1

    3557a475bfd5d1cf007442a032eff7b31f100549

  • SHA256

    9a86af650835394d16f8917b8c4bd34206b1b5cbd430ea2ed94b4d09967166f2

  • SHA512

    1e1da671bbf10f7125ab881f98b68c48dd5adfe01117289fac214ca65ed8fe914c7fb4cf694f97ff6ba41a225bb45d71a8532ddc992fc69d4a0bc54351b3b00a

  • SSDEEP

    3072:StuqiyfkMY+BES09JXAnyrZalI+YGyfkMY+BES09JXAnyrZalI+YQ:SEqnsMYod+X3oI+YDsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\662b4279686a1c51a4ebeef24610b959_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2220
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2220 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2824

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d87c2f88969e53aaa04d1b2ec2a000b

    SHA1

    01e992b86f248c3a017bf5f9a5e5500e182bd331

    SHA256

    c710d4e885075bebfec4a35da5c0f7c238505c8af83ab83e6285765ea7909f79

    SHA512

    fa0b517f3829431fb86a0a300730b2ea3c806839297292c86d357c5bf55b878a178995f4705b6d762fba5220968936c3bc6be543a0b8e8ffe2e3d92885f5441d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    978c595cf833840842887af88b29aea9

    SHA1

    e45c5c343ae40bf793b6fe8534bc5870bc03f018

    SHA256

    9e83b75dee6df766f7ce7d58064b8d381a1076385acd92ec8489ca5fc1175303

    SHA512

    91145a9d99250dfcb5d9ceab1100d57ebf8aac69dfa8c26f33472aa5e201a0a7e29e5caa86ef60856a1bfce738057c97cf47873d91233ae364999ec52feef4bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6fc14c87170a2e3d486c60f01c4db881

    SHA1

    bf4cfb61cabfee192763f85ed578dbae010cf57f

    SHA256

    b43bf49b6150ea63d4830c27cf7a0caea9d8c19117263be9ef86282e50e3240c

    SHA512

    1673c3d951a44ac44073503bc41eabd02f217f4afb119719c85bd4d83d13780d6ede1eb984fccfce513bdf1129fc80a2d83262020c984d644400aa21cbbc3ff6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0aba0c275085d255c90fe4aa155ac40b

    SHA1

    6a7a5a8feee0a26f212a887142a2894a5aa3ecf7

    SHA256

    032e39d9c8e0472382ee3262cef37afbea0cc99bc0dd4c791019f7178ab06e25

    SHA512

    11a3babf1594d393104d012afa826831ee6ab094f883ab9f4db70a18449239af80de7728ce2fd40d04d69305d05ff94435576b4fbf8c3f525bae6eddc62b13cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    593884b2e1d5fcf037582e8822d67aa3

    SHA1

    65a2425a7cbf83ff8686b54a6a66a175659b96e2

    SHA256

    4126e495ca41fd2cc40320795af38b45b0469a121161f72410f53daa9dad4d49

    SHA512

    0d9d37cfcd3fbec3990e83956bce10defd3d4a7051b18c42bf4b842fb8aafa36d6c94e4da8c94411cdaecee26c59a2b0054f78bf2b067f5e474f055631da9427

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d30bc67ccceb7aa0ff8f51940b4a6e3c

    SHA1

    7238f9012b7a92df7ecf13bbd44f315efd7027bf

    SHA256

    9f8c66675589c29e5db1bdb2499c891604fb20fea83bfdf2fe52f52dbd111f8b

    SHA512

    a21a6ec0ed0e81f225dba8bbbfce812863f3c79d2aa97e61da1b09e29d2f11a1457b8a83d93996e5695f7ac410794774ba2127c4773d86e641488eb6c44a7437

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cdd7d298d5259da802af3978756c46f1

    SHA1

    c630ba232b2fd91de9421cb1a5b4803336bc5b5d

    SHA256

    5e8aa7ac9f7d2f72040d29f416faa5c3d79b6bffcc80adeb8206386f51312cef

    SHA512

    8db2114ba6011e50d0cc4fbbb9ff5223f4b229c02e5dba71d034c8ad949792f5e8c2dd70d48f3d88e68d8b22bfc84faf62a22acbaeccabe20e8889af267a58fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d13ef631404602a65e32bb02aa1f1a1e

    SHA1

    16d93e555da1e92d8f9b90321ea706affc2c9a99

    SHA256

    a7d709472998daa39f240b9b1ab4b227a3992dad44f37390b39f1fd9a8fe09a4

    SHA512

    6e36ee8d2f9ff5452923a22abd7ecf7c4df499c60bb90bbd514f04c95ce66aee0ea6a2de8abb6a18a9e12c79070a01f61c28e186a70c7176a9106f7c18393087

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    460a39d4b59f923f5c4ba20aad6c1a85

    SHA1

    c89055b1ea41bdfc5ed36b9dfe306e9a479680be

    SHA256

    7ceabe7df1cb69246bec63a4b83d1fc6ea76ffa48b10b344d29dc5f7e69b6835

    SHA512

    924239cf8d92d6ffd8d7de314d62b95f754db2d012243607ce9939646b501e61958a06a8fd4e97188ba5429b7466ae7263c76e3d9a9b42963e5a96345723a381

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa3a395fb561b940304d2bbfce2a5378

    SHA1

    eb7d65c59d2fab0ca9a658b2e017b2b7143263f1

    SHA256

    f46fd33e277ebc75c3ea7efc169dfa7dbbe3ea5547dcb8f31118c538597cbeec

    SHA512

    af5dc2c800db685d10a9248cb5d5c63f52477711cf86be0a8b34f8c6fb63ab5d2fd702996c377bcd77b61fb415316f538e88083cb687115f3221557cf50914f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5305c3d449e8aba6bab32083780fee79

    SHA1

    3435c2ab54a9eb148635cc80fbd8e9c2a5ec7496

    SHA256

    5d39ebd4a1a5893fba6ce0508ef91546e5fc75e0331aa70e51f6dde29843ce02

    SHA512

    521ae7b76593ba92510e9bb78f78794a6444a821481bc130e663741450fc6d36673b8ffa4fcc2dd452558aec755b0f0beeda9809b681d41bcacff560a37ef6ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7dca4536af5c32492085b40f6a1a58b4

    SHA1

    91a4b779b107be817c4764ef61e5c1d92d724445

    SHA256

    7316477f04a16757fdcf3b85f59f98e8314da0d59c06ea0e895ea6e4287a9238

    SHA512

    8f14b5ad2361794329a401154fa0367a140f8b1ed232f27bf41a7259733cef8a16d39aca23a0a0a1d1d6eb8c39268a1e3df720fe4ab9a8cd3597078f80fc3a27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aeafdab8cde3fa2826fa53b7c294dcaa

    SHA1

    95ab990d8fe5ca0f5a39b4ed453bfbee81281149

    SHA256

    6b7f62c5b054b1ca88c6e2beebe6e609a8d76febfa1ab4aee04c121248ffd63e

    SHA512

    eddcf4ab7d8ec4f030df161017e316a6f34e4efc4532981a1bf1915d382f03b7b5a8d7464ac7c455d6d5768410b3b8c9982ee9e4cfb417029c389dd218c954cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71f0a4d631cf56ced7721aba5c7dd780

    SHA1

    1da7ef99b1c56d57d1141e743e4ee2cfd595155e

    SHA256

    b0f1928ff117d2c32f926145988796fc1208c4ffd6de5944ea42c8265fe1dadf

    SHA512

    a0d2efa583f65f531440fab9a5f5f6e14ba511be195e049b4ec431a21dfa4c4bed9a6b45d6b4132062fdc6045e93fae781ed1954c773cc6deb95c6aa1deec4f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e71ed6a4242522a2243de8aeca3eafc3

    SHA1

    5865e00bdf475145e166b4f14d255bf1ef53a4c4

    SHA256

    46ddce0169184990d15f29ca47a06f818e5b916356f47ab5a656825a58da611c

    SHA512

    331d43791c896606cfcca527f087110f205e963642ee5b75b54f1ae0f944c8a9564d767db8fbed62d89fa29e87d6162a8f2dcecfb94c70792c3307e591e65ca9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f54881504922bc19c20e42d647284e05

    SHA1

    b4a3b52ab9892add72d8c716e792414f4d25b57e

    SHA256

    83c2c25bad21aa0473e15a65dd01b64f3f99271b0528d41c6ade6b7f7cc65243

    SHA512

    1b32fdd9c1e0b26c484a168d1f3134b425c947004fb935ef877d2edf81c384696272e7b4380ea856fb374d3c80934d4723c9fbaed64d39786eb5b0a56779f6f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dfd7fd24db633194487a66abf4a3d437

    SHA1

    00e85af6984f4db14a075e1ac9e6bdb5715897c4

    SHA256

    d2329d5561d32ef2d2b2e810aa6737cf178738335125feded9bb4606f9a827e4

    SHA512

    9d38afeb744298852c7ad155e548180945ee981b33506c7165a5e946db3b84d15276515fa448be6f8e0c413181a4d8e77533e00740539d2d74abf0dc9347f1bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f875a9c5e293825b9c7ec5c49798d5a

    SHA1

    d3d57f9aca133ff6f2ca249e55cd2f782644e7cb

    SHA256

    07d659417183e18bdb72c9a0bc3f73e96b96d46d240a557021715b387863070d

    SHA512

    9b948a7b34d4b883325b8b706ec4a785a253976b247a209b932cede0c07d32365531adaf3e12798dc156b1799616dabc617cedcdbe82de5b05cca022b6d631e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    787fbddd668f5498f70e9fb1011eb5e3

    SHA1

    4be172cf7f21d32f0442ce4f05bfc6c3ed0b938e

    SHA256

    f9304ac1023970905678c7d020af5c2d402678441a1b49b4be181adef8a8cac8

    SHA512

    06c47a6a6c5a4a8680b242ca048c308033641683a14c49fa2c1bfe8f5b08d0477d176e5441b6abbe0ad70e446c7b323edf23bd1c689b920deff8105709d1abf9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2XHJXO3H\zuo[1].js

    Filesize

    3B

    MD5

    ecaa88f7fa0bf610a5a26cf545dcd3aa

    SHA1

    57218c316b6921e2cd61027a2387edc31a2d9471

    SHA256

    f1945cd6c19e56b3c1c78943ef5ec18116907a4ca1efc40a57d48ab1db7adfc5

    SHA512

    37c783b80b1d458b89e712c2dfe2777050eff0aefc9f6d8beedee77807d9aeb2e27d14815cf4f0229b1d36c186bb5f2b5ef55e632b108cc41e9fb964c39b42a5

  • C:\Users\Admin\AppData\Local\Temp\CabDB26.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarDB67.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a