Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 13:27

General

  • Target

    6769c6e0efb3342e83dc4180c6680cce_JaffaCakes118.html

  • Size

    34KB

  • MD5

    6769c6e0efb3342e83dc4180c6680cce

  • SHA1

    f791e1b8d77488e19c21c8a9eea0c5ce847ffc29

  • SHA256

    5b958815a71155bed3a7f3055beda11170d8ab39a2f99baef37b7c3d036a9995

  • SHA512

    16bb591278abf93d996600dbd89b34163e04a789ca150c75046e29d5e7ab9a22cb60dffeeeb1c566fa2503431bde1af0346e738a3215f21e41f67a5da02dd946

  • SSDEEP

    192:uwP6b5nO+nQjxn5Q/9nQiegNn8nQOkEntnPnQTbnBnQOgdcwqYscwqY4cwqYQqs9:lQ/HFE25qsoT46fVxTasoO6

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6769c6e0efb3342e83dc4180c6680cce_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:836
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:836 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2112

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fdfbe9ad6c21171eec69742e581539a1

    SHA1

    891382a78bb710575430bd9f382548175410f308

    SHA256

    210a4ce954e1684c3e8b49b9d6c673e41b15ffe788a1205a1677c5eda1a42673

    SHA512

    1a7a228b7b7bbc0b0d77e7026c8c2de33c7f717a40bd80c2d297dd090a9460999329b2ce270e2b4fc059765204aa1df9fd2486d2d352e197fb3e39e14c00c52a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c182154362d9fb9835108e465b03f1f7

    SHA1

    413afa9e87617c443d49ae34100cba2b088fd29d

    SHA256

    9756599fdcf1941cef89bbb8268f4c3e46c0b1673110bb73d67e10624f6ae42e

    SHA512

    2a3516f91eef57e8d46220b97e2ec9cb8dc76e351aa50beb1c4843c276342baf632edbdb39d4b721002178ce08204bb9039b21043dea15368d7738c983f02fe3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1229d59ae2caa013c45c511bc073cbbb

    SHA1

    9d2c583de54d7c22b8278267c7e795f4bd5d2980

    SHA256

    73d0dfcceaa6e8665e130794baa57319739ebd89b75767de01f60c36b1bfdae9

    SHA512

    bec0bec969e29df201f888b78e43daad4af435f7afdbe1a2b9527b84b9148c0433941e54d1e47c1d9203df52e92c693622ae1685bb393cc447e11e837789c095

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fee20f30250668d86a5eeb35d4bb03d1

    SHA1

    6156886ebffca64cfe0af12b06db92d0eaea0521

    SHA256

    3470dd4d900c5eea603ff8afdb18d5940436bc7c1639805f51843702ed89bef3

    SHA512

    00a28dd3dab2cba2385a701cfd23a0ea9031cf6b47c681039e6a553f8a1a0f57c48dfb7608c27b342f5f73782d05c9ece2c7973d95d7059cef9486e81fe42f5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ebacd6f7958487d743394018bda780a

    SHA1

    42e66fb21bd9d2bbe9c82d9c38a9a1e89e406c07

    SHA256

    cde28f449edc7ea6be876fb9d6ba58cc514f5e1cfe56da276a8be800206d9a1f

    SHA512

    d34651807235a26cf3699ecf5906cd7097afbcf337b97ef75edf40637667fff34ca58eeed785b5e04570ca9885fb29eccb2fd304f57b0ec091d65cef14f6c37a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49c4d4a653f20df1d8dd3701ccf0db15

    SHA1

    c90e97dfcb9b9637d3e8fd1e0c2924168cdb4b34

    SHA256

    d0e234b1a93f1dbefbca87d81eab738606b67d7a1c3950b3992b612cda5d9590

    SHA512

    6e09fd0a0efb88567440942d3f5a148ef911a84efee3a3b844e29932f7e01c0725c2c9aee41ead46c55c60bf4c53abbeeda10e73a27e6bc62aa4f74a84d4a37b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad773a3452eaf37729f6d802743f8ddf

    SHA1

    fb9066710b16c7d0c1fbb1dc04afb4fc8f1f0c70

    SHA256

    b0e57bdd18944fab530696fbc5cefbbcc5566d128c3aba6b1aff923c40cd915a

    SHA512

    57487213b0f45cf2466f03304df5c3f46cc151b6115e41c97eee6596c554d2a6fbf4f770763cd683915ac41510806cdb191cd6179939192b490be3d2bcdca7aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    046a7123c02ee3cdf88cb63efff212e0

    SHA1

    67f4b72fb3a84ad050bc9b1cdf450da9dc35ad7f

    SHA256

    1006fb8b22f55ee3fd45b09c6cafdeadf87546e8938a3d3808c60cea0eda47fe

    SHA512

    c855d9e30daf671df614f58e0e44d369d70f59f0d16702b769c8901237b4d79c95da7407bc821b4f3e28dc0790e03c4dc2b48701aef2f719387010375d238e6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    901bdf3cef3121d777ff63999a844a1b

    SHA1

    8f2002424a37eff054aee79b18dc7e3bd6cc29d4

    SHA256

    74c24262a16ff5581f40170e622d89c2f353b211b1e87c80fcf21e4f1d201093

    SHA512

    7d6183ebc9bdb2a3bf2f51d4c2b99e1fd0b47353070f9adbe53556756d060ca5fc3eb779996e7c55cb21526104baffbe7aab5f0ae90bea927938521ba6f24ded

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df58feca25f4bf5ffa61c2fd20e88fcf

    SHA1

    176efbd8aa5aab92398402acfcdca209a3db012c

    SHA256

    b530370f44940393520c12a06e7709bb3a500053d70ff24984e237fb0f63bf1a

    SHA512

    fc5059a92b13c666c7dca7a7cbb0fb0450a53408c25bf643329286afcb23ff26c7ed4b71d289abf4f091d1a0fde33cb9814b7ef3f2f28d21c99bc03fc689eff1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    642edf44bd61087e252c1595f6cd648c

    SHA1

    a90efc49070cbcf7ca1ac9af920241f0e958d20d

    SHA256

    8f74817d7ac9297cc2c231fe4390e44759522c89f57900a1f0b270465d83f990

    SHA512

    7d00b3e6dbaee2d88a590a5e4f4b75a0d44c2b1d1c7d596515d66d10c601a95b5ce8e62ac272ec51927c145949b235bd6b23283eda5f47c5a226edc0cfbae68c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24ff507e8523d7b944d6157ffeb92539

    SHA1

    9527a99f4021adeecc65bf7ef99dd7b06c2dd2af

    SHA256

    f2f714f0571feb35c370ed9a7b32ee607b944895ef10888583a65e43c09b282e

    SHA512

    51e74e9ecdbd6c2e1a3ebca066b13a8492a164934978f6fdd1f0ce7c49661f0dbf2c3ddac78a06af828324bf507b8745ddce573eb236c3638f6dd90c87e5ebdc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    073d719d51c9d1d795e5a2ded7f746f6

    SHA1

    b9061456433a2bf773e8a40459e33c21c6287bdc

    SHA256

    1f617aa5e215fcaa29933f2382994d5251bf7047543fc2c3c5737756813391f0

    SHA512

    c50bb9a12d65387cf78f6ecb9bdc6bf6b366c64290b244ec44dbc3d6a9ce8836d0b5e063bbc948b787509ebd082a90bc179ae21c40102fd231a1222851d5d24a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96302643f0cc9efb821f81969f04b305

    SHA1

    0b4b50819e63e5d07d9ac5b463d543c66cab5d99

    SHA256

    5b609c6c5436a2fb2cd16c4cb868db7ccc73faa318fe286cf38911fb07838a7d

    SHA512

    07f09f171492a5222925e0fd811708c6a4b65d592c5c6bdf49788404053fde719219b8cc3f26a8d991e07f16562e8b02d33874d123d41c919e2c133c3add1913

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b80eebf940b721c527e81daf32efab6

    SHA1

    254e31b5720591da511ec07210a4024621d6f41d

    SHA256

    41e32aeac8d0aa197538d307a970b0edbe4fd0eead0547ef936a5e28903c6078

    SHA512

    a7be5c8021dd490f2bbc2d386e023a43d2b226f0c24ff61ce13629d29185c2e8e80efe01ef7a2dc2f66b6dccb4e8705adb0ba6509f685eb3b448548d2b80e35d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a54521335d9e97262c826f2a680a8196

    SHA1

    ebbce51e88b7ab81e0a1233c7899b6df50015e21

    SHA256

    8faeb71a0be7b86294d98a137f738db08da1605351cc7e9cedef6e2ee9b74b68

    SHA512

    4e33b23c265cf2262b7f538236ceb1e5b874f9752d0e1564eead8428f09d801e326803491770d235617a485bc8d693b98e2efa24750c510edf99b946be5df889

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c4f866460ffa9b55ae1434df4b10830

    SHA1

    619e730836b0ca5021f9cfdac52862c7f900d9d7

    SHA256

    0a522d8ae301cd72f3832aabc0cc6aa29b485e8c9f288c1f44cdb003caef9177

    SHA512

    9c8df281c46e1093573208d651a5bd6bedb65980b2800aef0b9baae9f4ce33582662c546b40370c90a5af3a56a269c99ec4101e543ea257aebbc1e43ea6a2ca2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f8e26ced019b54e8cfa3966e6494471

    SHA1

    a76a0c6775d0c716ae212fb18e81792c53d1e20b

    SHA256

    0cbd359939f7dfa7e682c9478b69bb9453ff2e28f8b9cdb5e58b454e79ffc06f

    SHA512

    6006c579b9107109018f4e635ffbbefe84c1334eaaa6027e23cf6340e7c8823caa085f939903397340ca1d045cf7f5bdbb4ac36b70ab19ca783f5d3091c0c1c7

  • C:\Users\Admin\AppData\Local\Temp\Cab372A.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar378A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a