Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 06:58

General

  • Target

    66647ae04cdcb1f483fa468c0a1ed662_JaffaCakes118.html

  • Size

    460KB

  • MD5

    66647ae04cdcb1f483fa468c0a1ed662

  • SHA1

    cc67e6e73acabcb793fdcf140b9540eb6f8c9d0c

  • SHA256

    9a84b6272124934f85bda3899910792079da3e061c4d206fbeb8ecbfd09daa0d

  • SHA512

    8f2f23db5daf1f6ee2be20328cf5470b906c3b110b7c334cc3942f3cebc3f60c24cface5f5cf680cc1a062b66b11d8c49a3d327e37b532bc4caa29712c65bcac

  • SSDEEP

    6144:SdsMYod+X3oI+YPHsMYod+X3oI+YJsMYod+X3oI+YLsMYod+X3oI+YQ:S5d+X3dr5d+X3P5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\66647ae04cdcb1f483fa468c0a1ed662_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:332
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:332 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2912

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0f98fff3208af061fd0f5766ab5b599

    SHA1

    08db8967637b3f7f42f36ac0d072723ffea285b5

    SHA256

    9209f3b41b0b601ce84cd3830f1a7d97a526c94949509c2e7d33fcd23fae7a46

    SHA512

    e20461045e90d47cc3f60e64f6560818731457a992df4b8bc8849771233c6450d0f252fe755c7fb93161c5949bb30e8faae12baa20f0e03ff3eada0277a0312a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    771f01f5f4588df74ee42ff9a677281a

    SHA1

    2f4f3663417a08fdf6e52528a880b66968b9d89e

    SHA256

    12e696423554278455eacc5e64fe4e0e5100318538ff04dcf231e40ecd83e886

    SHA512

    8a666a09e67f7895609ddc889039b54a2f09488a3ea83753599b93d3859218a2fa5ca34d22a50cc5b4ec867313f5b9928e4236a53048c8c830d83f9404c3e317

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c16d3351e38b1bd1ed1cb94d4fc0601

    SHA1

    b6eab9273e19f6da7612eb6a2f56330e500a1587

    SHA256

    e2303d8f2c572edd4161fb63032fcf943e0534fcc6cf509807d5821d65017af0

    SHA512

    b529167fa236094b472d3faf7a1dee6516dfacd4286166b0b1d01e6a5981a5cce8cdc74b06cb838bce3e809723294f5d359241649fd70e27f53faea9ed66e8c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f4dd12411c1b24c36f7ef52f435b325

    SHA1

    3dbda071d0452a4f2c538f05aa2eb9737843a7da

    SHA256

    66039bedbcf24fda97a4b3d9665208e9c14f052caae429a6b5895d6b36ed738a

    SHA512

    91ba0c1edb38b0279dbb6087242d5808470d5895fbeab4f9baafcbeb00acf41c5b64010d9325e3be82d03c565748fe6577b5355e12c0ef741055109b765eaa97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a8ffa4eff069a7ab87d072e5471d74e

    SHA1

    ea485be2c644bd74b9dabe58de31ecb4cabb4526

    SHA256

    5e6d44af3314a5716b508e24c1373808695ccfceb69d5d679437cff8bc6379c6

    SHA512

    47cc7df2adc3500b6d2330556d2f3359a3e8991a8c61bc64f3a880d3319fbc4523563f12c2896bd665b4581059180776a7c54adfd2facddc92c0cb8268c9374b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e79b1c4f0a4efde963954c0ca0c3530

    SHA1

    b2cde601594d916ba628ecd763c14257e27b0c73

    SHA256

    c9790237e47bc3fc9034184e9fb10302b267466e49d47379c8bbee4ada2324b1

    SHA512

    cb35b19db6cf496a782baf3a116676b69fdb7d453874290457d904a03ba4281f3a0c4991d042971896b74d0041bd5b99efe15940e5eb16f7b44e0c7171ee94e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c071f81696614a1469a42b17c46da7a

    SHA1

    4446d60fdfa8203fd3dababeca661e8b91535f3c

    SHA256

    92c5922ccc2eab35502bfb44b7198d2c974a9603a172a953977fcc0ee4edc247

    SHA512

    bd301a34cdb8a6d0a869a4d60d0002b8120a72d7697688eb2d1212382ba64fed741d60155ff7728390a834a31f13fd94fee5233c59fc1d8ed44e97277647ea97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e771f27c666b16b96f1b5478ef4d1b24

    SHA1

    670f8c490234e67ee4e2ba0acca3fc21cc105ebb

    SHA256

    68cdc37ea5bb867f890b9f6b68cadd2003d148835150201ecf401ef620578218

    SHA512

    f673366673f864109571cb4c35d859a85c61ae6d9798f033c47e3d48a9d274710bb574ad71da05907b122ef3c93d116e47a179d906e93440e4af588b2756c80e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c80e5bc191dc6bd9dc0a499059c8ecb

    SHA1

    54255ce8b145883f26446cdd955fcbd5891745ad

    SHA256

    037ffa3e253a1e377f528c55a279f5750abf4951f6fa1cc81a4e9ef7613f5a4d

    SHA512

    0c1f151389f0f77ccbeee98d5477c281586c50073b7b1a5d154833eab51eb3670593fca3676fc131a6509bf5ddd2448d94a3738df8e4a5ea4b05f78a3b6f748d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    070431d143d758afb7aba2ef68861e4a

    SHA1

    350f411d8ef3b55377cd07b9bd7f4aff9f966743

    SHA256

    c25ed4fc8f8d241f7a6a1b9e379758ba23c9fd92e57c0039addd6aefb000f3b4

    SHA512

    bc18a7bb41bf61553fc1ebae7850a244e22ec95dd616fb2e48ac46e022466c2c07cc29988213c53ad753f69a85f5dbd4d0a4e8f3add84392974aac7f1bbeb7dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2c49fd00ae6f17b6a37711e21adab63

    SHA1

    56ac7df58285059a562a46c4ec063da4436b8fea

    SHA256

    47017e7485e72a50eaf505cc94c326028f889e669df53c98e861bc551617e0ad

    SHA512

    ea3219d80148c01a570d955993cfb95ff7a7613d3eddc3a10fadaa424ebab60f0a6b04ef6ebfb18f83b2ee9cb207a4fdeaa5823ba34b6a413577b5165da7be3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c11bf0c13529e84013fcf1a81f9aaa7

    SHA1

    2640012ded85666b7892ba3f57a6c685b5d378b5

    SHA256

    eaa03c59b464c5504db98fa533dbaae6e9fe19f40ac17b5aa152e3ead7e25c48

    SHA512

    ba1dafb085ff97a89fd534b1a3773ff6354d45da2ad875cf7776df1fcacbd3dd8289be4eb9b8dad85f5e2c5bb0bef166ab86303686e94cc1baabc3dfa7a7e32d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63868873a2a765d4cce8b4bb905b092f

    SHA1

    9171e72c407ae6ef0521133ccabf50dd1f9d3e64

    SHA256

    9f2b51aaeab84881ab7fcfdb2a27c6f9f3044970ff7501ccb5b77b67bf9f4313

    SHA512

    a48d5e187822acfe2e883ed4348097149be7fa90f4aa213c3a749dba6724271346fb79e8b091ac63fe20b3d621109eebf4ffe6d74644f98689423e4cf85fa964

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f652410d50cb713c968b610c8db838fc

    SHA1

    aca3d6b043c7ee289a9997dadd50be5bc36e4b03

    SHA256

    87e08d6d1a06abbef55aabaebb616d2772bc4539e151c9edd6312bf79ef9dfbb

    SHA512

    55ab50a3a923e862840d842dd59ba83e940d20c050477bb280062520afca43301cbcdfd626298f88bfbb339231521b297b01a10185a848d0d9391151f9c55f14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed3d94fedc0971073167cc80903ea518

    SHA1

    4f90f0bcd4185faf9c3a94ebb4b2c5f2b1438d5a

    SHA256

    6e2714aeebd8b51fde7cabe6532cda917d0f782ae4b80605c78fea4fee849f7c

    SHA512

    5f5769428e09d6d1cb618ae450c3744d659f1116b07f2bd2957190306704bce640f7732f987e0dab4fdb84ac77717efbb3cf49403bcdfd125e75153cb5449cda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d0ca0f90a70e96c1f570dae6435d3a9

    SHA1

    d2d2c34bcf6423bd9f5d54e9b1a533a0a821159b

    SHA256

    54e4f08688e279f1ae02de00c6247ffaaec12134ba966189288e1ee501aaabc6

    SHA512

    408a2199465c6b1b71442a6ef7f91158a8da077a6e9e946bc2bbb8f0cbb052f4c5d7ce9c0900db9d46d74c73f7c6182e954834580f4cc501c8a25fab1417afa0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71fe9341de8a01e143baecee566c18c0

    SHA1

    0869706778c970225c51a5e19a6bedb666678a4b

    SHA256

    d1a24a626aafa73e2ddcb4d164e98331c56100b0d584350b9ecd19695aa140a3

    SHA512

    29928215ad436e9690e450da99e9633eabc092d740f3f8b25e7eb26855af93c4b4d431bd905b8f3dd03b65c14196d546826f33ad1dbab9ae2a03886404760040

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b4ff7d4f895938beb873610d64068bb

    SHA1

    9ec3ec82365963e72f24817126006671b6868a7a

    SHA256

    9235abb39622569e2270f835cb163f24596a0d39cfe04d6841f115ac4e07aa00

    SHA512

    abefe2e68ce2821d86774187d788284e8db877cd2f20b6f22b3fdfec0922b7bfbe9971a06a5540aa6a31cd7251fbbf9fe2f54f84ccd65a52fb98eb8cd21431de

  • C:\Users\Admin\AppData\Local\Temp\Cab482A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar491B.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a