Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    23/05/2024, 08:22

General

  • Target

    6a53d330540e6b8ba9dc8675f8b971e4_JaffaCakes118.html

  • Size

    23KB

  • MD5

    6a53d330540e6b8ba9dc8675f8b971e4

  • SHA1

    399cf4b88542ea908b37253e1be16fffd2f94a39

  • SHA256

    8f0366f15beb966135429a860c309c209c7cc9411e26a4b69de5b437f8a41158

  • SHA512

    da9216775b7471bbe70be00a9c0d0c4a17234ffdc182ae6cb1bd46b41ffbfa721df88b7499cd6b4020a41a7958c81c526fdf9709665deef561291e8b2c70e29e

  • SSDEEP

    192:uwzib5noWnQjxn5Q/rnQieyNnenQOkEntR1nQTbnhnQ9GLnLnQtkqMBSqnYnQ7tE:bQ/sGZM5

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6a53d330540e6b8ba9dc8675f8b971e4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1688
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1688 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2936

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a9c9d405b126ded44b5bece95da3c7f2

    SHA1

    ac38098d36193c79fa1bd2c9b8b8264015b041d2

    SHA256

    0891a1fc5fcb5a91b892b07209351537b9eee0b0503e338b7e54ae33fab49999

    SHA512

    affcfb2441608cb11761a595cbd972257763add7be8fe923a36ab587f300a29dc56ef4af96fc9937d76dd69e70b896ed09b3893925b9428aca229023b988ed84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5f7438c6b0f7d86e30d980d82ea6a1c7

    SHA1

    456677b622add63c95c97619a015c24a33550906

    SHA256

    8b4807951c66d184423ed892bc53eacd170c1db6f3ae609062ab6de8db973b1f

    SHA512

    9aae5911a2a0da1755ff25e7d4683cfb5f5dc39ed3a81ab000f34c702d3fe4cf921ad0e611bca348ab0942e245dc77b9e490f9599ee3a0601ce557f179d1869a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    1b34e82bb304fae3f593cfaa2e03e75b

    SHA1

    4518b7f292f2813b2871ad0907a18f3973511d4e

    SHA256

    33a7f4699f7145322831cc80c01c6acbf2689a4e34cac98d560d6fd447d98dd5

    SHA512

    12ec4c3266e9b9d1741d76497a0fa97c5b1a861c29cf10ec19d010372cbe5277393eb29f6ee4847234b717a5feb1f34a8b1af3ca3c98723eee61e637b83eee96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a3c3562ddc5a05174458b7dac73ad8e6

    SHA1

    fe5f5e277449cb3df0181f341194add466547715

    SHA256

    c91b59987764d31207f42b816539531a93d4e1fb1f811da2143dfcc0a32ef302

    SHA512

    8f83da90d27559b8b76b1d82ecd058b5e0147f2a9be7a99ab444674b72aee371316b0b2060624ea8a1d163838fa83b4250b32fe2268b5239e9dd5081d8ba4d0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    29ed732d134df42643c870a9a3e90379

    SHA1

    e11e49ae72351795a0c7881f9ac1b4022e1e4468

    SHA256

    18298f9a20f5faf2b04fb8e6dd3e98ac1ea2e1cab3f94bbcec3cad77fb8d0c30

    SHA512

    31ed1e608daef8511fe577ca0c2216c3f8cb0c9380a02be4e53ff712f47482eb6894dc1e90476be888ec597da4f74bddf4d5f1c5bf76e2937180f20a0235da34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    f95252e7aa57e25d813f71acfc8516ae

    SHA1

    a390c3aa2a26e65674fc6501b7cdaf50c778ab24

    SHA256

    ecd883b4476ba938560e22c416943c4ba55892fc1e95f5b33ac7423bed159fb8

    SHA512

    0c50753990056a8110f6d8ed23b01fc6021ad4832a00609db5b359399bc618230f3b9547b8e9db0cb46b5fed6cab1881772a840bc30009fbac99d99b18ae1c63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    d065be9eefc96d576f7fc948f0642fff

    SHA1

    bfee3ffce9c78295f1f6e81580e51c207cb92c00

    SHA256

    21046b421dde8b8f62fa57ce48a50af9945414a711254e1c2624f098f7a9e086

    SHA512

    393451a9a318475378c5a091b5a9f6fb8bbdf34b3daa1d9783be3514e060d4994a4a6cb17889fc1eb0bd96eb39229d541049f2955dda0a39e741a8f49b9df22d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    f68114bfe56f7be01a5640f312e5e258

    SHA1

    a9b97d38b297b849384160f30d16c39731c70eaa

    SHA256

    605dff6c9562e885c10ddb5a93f627c0d9e4e0785fc52db2133227f12002da4d

    SHA512

    4de7e336f712ef9ac3f08420f98a4c513d463c0791a0c92a2e448c1f4aad077bd160f2b662496e0075218dbb609cff5f0931133e96e50195010f54c7f09c665e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    66dd2a73a91079f20716d66b8d70b8ce

    SHA1

    07c7a27967df9f06af4adaf1e51003d21e8ae8fc

    SHA256

    297801407085c37d6eeb73a7d97bf1ce1a422029695bb54e21124e26b0f6b24f

    SHA512

    daa226e58f31a342f8d4a2d138e75f451b5a71ab7a9380846d6f4989c6ff9b6077a55d9f0a0e97abc1cdd02d33386f546d647a39037e4350ff15b56bbe2250ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    35a684fce79acca3aba4916ca05a69a9

    SHA1

    dccb8bfc45e1cbeda71ad0357f51496828ef8f95

    SHA256

    392a0188a3a35930998b4b3b0b81e753868480b5de311a2954408c6e33837e80

    SHA512

    8b7af7e2cabcd91d215ef2338c0a562b185438c7fcf15cfa6df17fd2198b13096577900ffee1872461b9aaa013f6d21aa0a3a39a02f121fe093077dcd5c1d939

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3c1e70a8445951cb5970ad64b6be49ed

    SHA1

    a8a46b247eeed562d01ba375139869e24fea3f5b

    SHA256

    2601b32f69bbf60eb4106e74f333487b769a54eac7d4c9eff42812068dfba10a

    SHA512

    1156b034c20c3e1b77a60b22591cece1b5384e2ceca865e8aaeba014902284b7ec3e1091516f743839630958cbf4aab554293fe02f0af3334e12e42a134ef06b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9c3ae389d19784561e6331e10ba1c905

    SHA1

    14aa9492700f5272bf5ebd03b070e5ad73cbec9e

    SHA256

    97c8f943bb56d7af0c8b8edaee3e409743fb3c0bc7e1aa5174bca60b29155005

    SHA512

    cd84db2a38aa5399a5176f2ce78afa171302a2e7adf63dc7bcb7e0b95d9f769dbef13869a5b5825111f8413906f05693cb2ea44daa1aad343c2d5bcf064030e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    254796911180e78c72609ece2f4f665c

    SHA1

    65828e4092c286af73662403a127b24cedd1c91d

    SHA256

    119b7fa5db4c85d43292a4a52b13f9e3bbabf316e5769fa4559bc2d898982960

    SHA512

    90ef12ad64874882d025bf10d3153072cca29ea3ddc3aa2dad38102b9194ba5d5358dcc2ff81008867a669dffb3e828007c2c224e66c96af6394f2f0bce9a436

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b3e40177f35d5bd93c0af336af66b617

    SHA1

    485befd7b0b731051c1c5d2585d6e8d75e062ee8

    SHA256

    f1d521dc2bdb48973410c1404e6023cbe40d9192af2e6e35ccda91ece04f2626

    SHA512

    34e04b262dd72251a1363bdbaa716235a1c6a008151f96513c1354705b59d4e59d45356098d6f2583aac48362bf0f92f8cc1ad67e7468795e7cb18c68ff84544

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7d2ad8fb008740cc7b456219b52d7c4b

    SHA1

    8e4cb2c17893d8d27e13ce50f57966ac5dc82ff0

    SHA256

    6a06039ac89ad5d758252898719e2a6cabbac796e788fb74359f0c6198ea3190

    SHA512

    6f033f8f9ae6f5f21febf6ff1d26646a4b986c775e08d6c9eee6d2c2005de9ab3f7219dfd1bd6bb79301bf62807c48b9864711d37b110e4394d9413f4ee360c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    aa82644599045d214d6a97bac40a121a

    SHA1

    369da9a0ad46362cecf7d7465405267ec234f09f

    SHA256

    88a9714331fdd5a07b743158c414329da0fedb4776a27390e66565703e82fce9

    SHA512

    ec8526977f00f29180a70d72e8f3dc379afd90ab36a729f754ee2133cf90090202ee12af7f1ab92d2eb9e130724048e5604351ffcf17cef86a3dc58002bc4c5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3e33888e83dee3f9e190a2bad23f9f79

    SHA1

    d4c9a1baf734a07bd8645c9a5bc238405e2eab86

    SHA256

    b17e28f946946840acc4f01506cd20f926e25b254e58fad8688d8036ca47af91

    SHA512

    8e42f4330954bc797a3b928b82e863c56b5a701b56f5ec3672f54f39487029acefb1cb01fb1535debf352cb1a4ae2220e1bf79e291c1d3df90432f7c0e03d342

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    f7e0093a89e34dd0470e224b678df6c3

    SHA1

    76d5102a73296cba6ae513e3f0f41fb97bc860e5

    SHA256

    e59015ec6805f0aff50296e6a7a642cde697d2ab56c325568def8c73896e1d91

    SHA512

    5fd1c744031df5e8bbf0ce239da6a7c9215fe612dd76828b1a6335197ab3c94a39028865b89dfcf06123c91f4e259c32ab441c08cca725374a3279353a46503c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    018c45f298acb6b57c0903150e488a8e

    SHA1

    ca3c11cf2749fe72c336c77627e2d1731a086f3b

    SHA256

    91ccef626e7b3625a8e06a1984b59c9ac0129d0ed2bb10e793c68bd3b51e1a61

    SHA512

    2867107ffc02ad0cdedfa4141b29a5f367df582516d27dd48392ab9cbaafd4a315087368ad4aeee851ae089351e6404a8bd5e94fdc7fc2a2250246f46b12d541

  • C:\Users\Admin\AppData\Local\Temp\Cab366F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab373B.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3750.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a