Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 10:33

General

  • Target

    66f59ead74d7400a5d09e718f12e5fc8_JaffaCakes118.html

  • Size

    30KB

  • MD5

    66f59ead74d7400a5d09e718f12e5fc8

  • SHA1

    ff6d79903e944f4b6d4fc5d17eff99688c21d993

  • SHA256

    9a0ae96ba55878523c7551cf6175f9d53aebb4c04d4e71be7ffae45f5c5102d6

  • SHA512

    825a37f6587edcb563c5c6c0635c237d0147a0ac4b13429b5711abdf177c12353910310546c9f29eb8265ab7d737ce1970203dae1597d7321463bd5cd13bead3

  • SSDEEP

    768:1RtSQkfTSC3WlBVlizzMZiePaKIrSIzs4EJXeclAOra7vBivdu4CJ5M:GOey

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\66f59ead74d7400a5d09e718f12e5fc8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1896
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1896 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:624

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab127ce07ae6f26f14f02adf3b6964e1

    SHA1

    72832f9b94f773af42795bcd31843b838668dec3

    SHA256

    9a35c3125cd2e336e68626f506501237ed9899c1ad1bcc1e7d793c1facde4fd0

    SHA512

    55fddf87c3c68280b46f22618c7aeaec404621f4a1cff38db1a9aca566dd243908850cd76c9edb794e2dc704760cea36e3957a7c31894adb510f4b0d880d2778

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    676cb3bd5e91f1bc0dab81b6ab4e7b6d

    SHA1

    6362607f724aa902eefd9e679d460894ebaa315c

    SHA256

    4795779dae35b0b1f0fa6c689b3610ef71721e2ed6ff3e38bfa28954ce7828ad

    SHA512

    8d0f99db3a713a226ad409d33a57ce165b673689f205fcbb254e195ed1fba7b507edfd553f4c291221f47c068df4f665e48386407663bda0da23345008ec6f35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7a7016584ec6a02084cf96c4eb0360b

    SHA1

    42f16d8b5f1ba9f2694968148447a23c83afc475

    SHA256

    45a6ceabc5a0f64130aa97d79e6e6be5d65526b79b0c2da2667a9dd7e13a8dd4

    SHA512

    b246b19896191f0571af854f773fd55a86283188b900f84ec26241c82f31ff16ee39c58146f5a2a393fb1f17431713a93d1a48d8d106101d755dd7858f4167a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43c844c0636e787444bc0c7f984c7ac7

    SHA1

    38ccd3678e35ede6127167ee203af5469037d2f5

    SHA256

    10a5482be428c4cf6476c62ab9ead23058d51a3661689d4e25fee5d5a755c3a5

    SHA512

    368710e5ecf99802608c8c70f9ac208daa1cdbeb63f3fe221c53a1c860ae816b3a40dd1afdfa35aa01d436bd4ffa88420bf869c03e9ac9ee338071c9ffc77a87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    70707ab85f558ac44191e6fc8828fac0

    SHA1

    7466651cda5cd6c26c36762a0de1c2358c5adb54

    SHA256

    16e3a9cf8fa82e758ffd8ed09ed3012fd7c8792b33f1d5ce4a0f9f7e970ccc13

    SHA512

    e54ed5693dcc2545bf9e8cf828a2760fff3e2decc2b984e70d2946d22cf8e29d55b4f84f418200e6128807f216fda6d5d849f6197efe5add138740d564bee906

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27cf12d96b477b58a7508d4c6cebc2e2

    SHA1

    0d2b4c7e54ed90fce728ee63cb723360b4392ddd

    SHA256

    742a856692bc4b590bb94fd1f6e029eebbfe00bdafbc7ef3472b55a57045f0a7

    SHA512

    0b108a65f17873450315e302d239b5f2820fc1df0c04cddeb7302ee1fa5761cc9b0a12d216da3c1cf4b370a671838e0d8d24b06a0527231a0267e31842c4c6d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be972ba280e8d2baa4f947920bfeb63d

    SHA1

    31a43715feaaa02e9fc6a67cc0da5c7276c76f58

    SHA256

    46a09c423cdbb5dcb3b146a2782f5df862579ed8f3a2c62c3dc05095d4cacff4

    SHA512

    bf7047c8d8c4cc67f7277c074f4907f90b613870a0d27937421b0c256022f19cb8699b608ca3bd882fd8032088b4528ebbcf59b7e27497d0994e8d04ee74b27a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de852786bbcc2508f1c2e0764f339464

    SHA1

    290ae557168f0b1ca1113c6a70a7070c3d403200

    SHA256

    f00f7c448dc48f6008a7dcee3bb4c9d1ada44764ef46b9bd54284110f2c687e1

    SHA512

    ec056d7548ea393ff80fc6d11579067da347832502f729395f04c7063404a8672fd8f1afd2fafac502db0c90f26bd6b900a8822ad97044c327038c3f9e5ad2ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03a46ab347663984dc2fbe4a0f55d520

    SHA1

    f1f3d622d3cb6884d4019cd58f616ccb1ee709d1

    SHA256

    a6735a5a58ff6d58ce0e7b9adcd75a0c5ac3f77733b3fb58e0e5109d5450b713

    SHA512

    29edc14c47245ad899d92a4c74d8ef1e93250404b873e099b1b72549b2b1f658a5203c714c5840c9d8cc3ed91c49ecb3af6b43697646dbd39a84e012f910cb76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ced00549cceee983e24ab42e41b936d

    SHA1

    ccfc40f22027562e3e1c64cc79501436ccebb042

    SHA256

    61e229dab69f5ddfb18e973f9580777d4b8f64ef1d87ccc606a721b1d76b942b

    SHA512

    fbfa854d8f7ba91f766b76b70a1a58a22ecce456aff7e8ee0cd0e184af578b095e903bc452ac0872ec2c0457a66cb5e5e431411ce19093cf3736c3d40c10cc73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f87dc579c1a2a03bfdebce18326f805

    SHA1

    496510d18253edd09ff988e9b68936be25c93eab

    SHA256

    f58a01fceb58551091f963031385e1b45a52e4d673e40b9a4c5565d13b41b2d9

    SHA512

    0fe791c3efad857126e825afcf8d628deb4dbe20147dccddc97675346e9c70f212f4986ed17fb9d8b403c57c185d3a4b4ccb20a9ebd3cb23bf4ac75076da1e9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8c6e5aef930bf0c790c887a891e4af8

    SHA1

    7da0ad0b7a6779a7ef7614b2a2ef3a18091e112a

    SHA256

    8be0b51efa5be8a1dc15bd8d81fd585bd707b22af7d533746bcf58c2c6a10e45

    SHA512

    989d153c47df5c2ee0f9b8e4088f801e8c6aa9957816024c89e928663ea8ab546096af9e56037e5337ca01fdc86be0652aeb0431f815ab5108a479c276b90fd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    863f8f6429b674ab87b4c8d280e97669

    SHA1

    106523adafbeef5e5b3ff7540fb5c42a44f8cd66

    SHA256

    cfccfe18f7181d1210437273df9697a3b80323ce0ad52608d8d70805d29a7116

    SHA512

    6f097b7868377a531d6a263e095a6570bea1405e2cc4327404b821eca6f371ba9ce6ba659fd1d58e927c4c0e175c4c59a72efcdcfa34292c238e5a02948482be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eca1763c955c0d17aa526849457d80b8

    SHA1

    a5d4f47753fc3c782274192c36a5b8cdeb7a6eb1

    SHA256

    368cb7a06b98abe8d0c887bb5d487cbcf6444179cbf0ab2793b4dde0e271eeba

    SHA512

    2e591f071824cc8c7754ef27b469cee1aa1bc0d7ed5bff1e0eca0ea30511852a86a576484b1e62696c7633ff258d9a5a8f37614e0f089107783787b059b12342

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed09ea2eed1d88f572385b4d37d4b0cf

    SHA1

    71baef45d090a2a9f26e574df5c3d165503f398f

    SHA256

    a88932d6ee402e65e2131d0500305a0bd6785f7ee15118ffea36a82c9400250d

    SHA512

    47aa057b76b2bcf93293785ea62bb003390dc8a8f5b7823bfc5ec8551f0294e400ff24bc88772621feb9fbf3a86505f0b5780c6af3df256357c6dbff526ac58e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b421a64a3f4189cafbf242f2d8a0624b

    SHA1

    6e0a5c0ed80b555364f1fa8af72db9a0587b3beb

    SHA256

    639470731550d727e5c8a8a199bf1b61c555ba0457ddfae5f7b869695583e3ec

    SHA512

    3cb0761a525f34608088f52f393cca20900adb245a42bff11a36221dd98121ed1d8c9caa2e106bab7a97ad8a021ab5e946d2cb2b46357f47f59120b434202881

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e115d8cfd0adbad5fd233970150dc4c7

    SHA1

    a608dcd3427f9cf3832b2917fc488f8a448128f9

    SHA256

    2859cdaf384e971913059032e7da7c271c03542b07ebc6e1ed36573fceb36305

    SHA512

    5f6d5b3e1432e20297dd8a84ef6fe90e6b97d3ab6a86fa3096e6f517984cae5f2d4cdbd6bd69e957bcbd1ca52b407e8a9655d7350ea839da4be0bf78db4df3ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d47775a81b8528950593018923887037

    SHA1

    1c5a0801b2a04eeae643e23ba08875c369d9aa68

    SHA256

    7cfcbcd2d0f66f319b5288f9ed9ca30e9a46050fdd5b8ba3bad2c02841ce7ad5

    SHA512

    736cda4c11e0fdbdd12a147a111ddbe0d932c675f01fc380f4126632ce84455456903daf70435258943ec1b790348f4e986c94a8963d69abbab338f3094aebf5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1fb20f3e24f72fb1e2a951964a0a13c0

    SHA1

    24b517c4fdaeb441647ce5c741a1ba05154bf3df

    SHA256

    755e7ba60f710e412cb871d2f8128e565994e83fe587379de64e5354868b9513

    SHA512

    d1d176b535512f09979418293875d28120e82df332577ab6add9b8e6ddb1afb106d4d0f9a3d34a1cbf986ece7cbc11221c353932a4d64a3e9c5c0e09c5c3bb4b

  • C:\Users\Admin\AppData\Local\Temp\Cab48E4.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar4936.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a