Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 16:07

General

  • Target

    67d6b19d1ae9a5fd8e8e1d97cba471cd_JaffaCakes118.html

  • Size

    23KB

  • MD5

    67d6b19d1ae9a5fd8e8e1d97cba471cd

  • SHA1

    3579ed8d01f8e2d509463cf8d56c221cfa257959

  • SHA256

    fffd7dd53544fd0afd9d5cc5743b4cd355e8fa633a7da966dfca00bac7fc5e43

  • SHA512

    953a4d07c901534414f859af06640355a92eccc66705f6f32ce5b8a83ff528f3b8eb064de8963811243639ea8bd448a383cac262121042a51872a00d9e85d642

  • SSDEEP

    192:uwHPb5nVSnQjxn5Q/onQieLNnenQOkEntESnQTbnNnQtBXzvMBrqnYnQ7tncYang:XQ/igp+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\67d6b19d1ae9a5fd8e8e1d97cba471cd_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2872
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2872 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2964

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43c64f23235335ee03ef50942d63bfb7

    SHA1

    8aa1c2784b0d0ea76f4ea37b320026d1d2219ca6

    SHA256

    fc660d6171a6b8358b8bf41675789c4df3539a613d710da8babe136821de34c9

    SHA512

    d9b159f690e4a5660a0db723834c811d935f91abe39dd74f957713572d7fa7e6ad380d92342b3051a09317d85fee0da67d13011b37b6af642417d0a3ea3ae375

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97bf980de3e1462608f76468c0bc667d

    SHA1

    d08de13bec3470d4b0c0f15d614dc0c1c7791332

    SHA256

    dc4380a19d7c8186d7553f5fdb1a9f7b0a01ad4d57a2c9b2b0a44b3f8ad10c61

    SHA512

    02aeb5451a57036517672869a6f3149b235fd2180dcb00f95fd7a12c486b22ac7150461f19c5622a156310d2501c29e4d738f7d657ed612ec85a76c4f118a018

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa3e650825373db1b84b16283d711f99

    SHA1

    6cd80cc425ddde8a12db2c45f6ad62cb3095d131

    SHA256

    e7ddecc5c93d43c720984e52b44d96e74894d70e778352efbb9a067ca0c61fb5

    SHA512

    c12a56fe4bd87f3aafd5fe4039bbdc3cf8668c627d559fce925139c74599084ac4daf9ab5737363957170e5af8e9e298fd9c61eace566c0d76cec53483b96b0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99b07bafdcccaf532876d9c1276ec6b7

    SHA1

    576146c818c8aa2bf1306768992c3bd3d169893b

    SHA256

    2c704acd00ab4cc5f32fcb5bf99206e22f5ea18fc0adc47b340b97d813877bf6

    SHA512

    13d6ec3da2efd111e1c48a56a28846e26d6436ca6ac7c8387de09bfbf8f07913a56b38583674f08b18ed279963fff4896a3a39520003e321a5af136f8146981e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25c9856640b0fc46b7beedf22a7f1a97

    SHA1

    486a76a6369f3a77dda96852943a5b5256194749

    SHA256

    f60d29881f66aba3e9b944a2cd9b7eee5e1761af512433ac9bc3b208cceb2232

    SHA512

    93229d66eb44f34bcd2f153437573a99fcd91dd6b9283b32f6b99f18d00dceaac3090b8aee8e681dcece53b413201ad81b3a492dd8c835ee0575ab074058b995

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80dee6867ceba91f69e74507def41b59

    SHA1

    2310af9ab98c84a65769b5c1ab5c34bc26aa6ffd

    SHA256

    a27798b8600808f0d30338f2ae1ca2aae1806a6390c637339c5c6ac33c38557d

    SHA512

    abd430e83c35acdf0b2c33ceb0b4030c42be89da8dd6b92959489a981a2b01dfb93c65623d37392992608994dda171ae28eef325c376ce5e844ea66c14cbb6fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bca6c5119157a55684e547c12e224f6a

    SHA1

    edae4ff65b2575a3106d03557ee38f0f24350c4e

    SHA256

    3ee45cb4e98c13d14fe85648ca860283c594465dd478a32a78197f65d9613180

    SHA512

    625eca148e7c7773b35f94094844a4c61e05b15e2695ace9911e7c91b4f1d51cf801760068d9c85cb8f488d0531a5f5823365ac45d5ad67a0dcdff748158a8f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4318938688c61432985927d8d5f9f47

    SHA1

    149655629cfe5b3c6580739c2c436e1f9d4dbba3

    SHA256

    688292686ea60983aa85d9857a6d41f70e2b66cf7a5a9383ecedba6b8f56da7e

    SHA512

    7a9a65e9e4193abdb51a6f0548cd5d8183dc7d31e71be6f27254e71989b6b032bd2c732fafdfa50a6445eb1e0621fbfc8eb5036375b45e85401ef99c68cab208

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d868bc956b938372e7ee62f31965e90

    SHA1

    393ce77cace6ab0ad0700925f32440fd3bce2fb3

    SHA256

    02f392b712cb64a06b528063c830c63334c2eb2f646f7adbf8aff70913d2fb0f

    SHA512

    d734f589f374ea0f12e9e6e6edcbc065609cc938bb83b3796cc25830cf5348d566e914c2891103826ef4f1c9bc73bb7d10ae342bf6184e16d7e70748f3239ea6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3c7db40670390b161fdffa89de00ea5

    SHA1

    c383d04f22a10c14827eb4b3653f76161c1fdbec

    SHA256

    0289d7c2a4b2533e0f574cf0c22337e9c0e03409f51b576bbd78ca98d711c6e9

    SHA512

    741a7a46996951603c264f421a577bd83013425dc703a28c23a3b675eb0d5d75eb0089cf14026acc18c6a3860d6189cb2a03a9e9721630e7fdc9cc83c0c26bf5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    47ddec929f1e6a457ac45ce8686829a4

    SHA1

    18d7224b19ca09317194866c1f5854d1e46e2496

    SHA256

    7d5334349c7862ec8592561533312e966086191d8bd5384cbc6b516d4109a48e

    SHA512

    48409306ccbaf7f461d8d18a79398e927a320d5bb9941fc0a58949f478c35b1cd26f5cdd66b6e8f45487927d198f7bea386b564385209060b1ef71f580544a53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b5a5b3ab91b5f56149c9e6fa3432cd7

    SHA1

    5ea391aef5d5e6f072eb183278f8d0027f582e42

    SHA256

    afb7e2c160cb70b62e807dc691fa2e51a1ad594837acdd2ad3d25cd5424efed4

    SHA512

    7844f169828b36ca1c60ab41bf592dcc015b5a8ad0d6e706082eb03242ebc2a83d00fefbc749258f1ecd3966c5664176d60e52b3fb270c2acb5b2a56b622a380

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93a0c6c4493e75332d94497e3eca0094

    SHA1

    03be8230bea1951d88483b941756e77339c581e0

    SHA256

    746f7c45cd09d51a24e77b477418c83ed5e50fff0c4e1ad0cc5a71b001aa9cdf

    SHA512

    ab688965b80fdbfaa7754a30d9262e3bbd7dc7924e7882b634700b0a50aa3543219971ad432874187315692753825af938c4aaded9d14bca0477d9b2e746bc04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1dc4a3ed5fcbc23bdfc7e2cbbcb60871

    SHA1

    9fb659c7fafeafe837a25bd11cf778383e122a41

    SHA256

    5815b8df07197bb00920720cb178bfbc5643502ab44b23524761282522b55d51

    SHA512

    2e93842b9594f333ef0c74ffa7c59396c111e0b8806d8df03991d0e59c5714f3a56eaadc1c6200119782f1a3e79d100e7643dcfd8a05c673733288dcf6795fe5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c871ef1ea60844e38169f254ad2f730

    SHA1

    9d112e5fffda71c00d70d9b57c3599b2f2fc2cdc

    SHA256

    9cb75d79f2658996f70956e4277d38b5d176d9c732ecfbbe8a5b8932c7c04762

    SHA512

    59d37f488d6123580097814fc429b542b9316a091e15521ce1f53f1d8b1545f86a48ccd0f72295f7f43b0ecb43d60ba334fc152dc2734dfe747f6475a2d8f77a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af4d690e5f8a7ae4b05e41a6adaff30f

    SHA1

    721a74f3662c87e0aaa775d4c3d1dfff3a540190

    SHA256

    3aa4ef09a972b0b06a750b87d6836e424bc85e198c148db011b3eedd2a30851b

    SHA512

    1a64a79ade7c03d85835f82050099ddd567c275221be94e6af62854c67cc808ead38c2da0f26aea071107ffdd99f59718c027ec22f6cc982a148742148bd8848

  • C:\Users\Admin\AppData\Local\Temp\Cab3749.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar383A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a