Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    23/05/2024, 15:04

General

  • Target

    6b54ccf05da55687fd142efbb67ce2e1_JaffaCakes118.html

  • Size

    26KB

  • MD5

    6b54ccf05da55687fd142efbb67ce2e1

  • SHA1

    451a2bf26088d6720f24f41bc7f57a17f8da93c7

  • SHA256

    ae0f931355444917d7edf1b08e495826d93402f9343dfb1ec36eecf49a48f2a2

  • SHA512

    68f851b9aa25bb2952702750649b90ad9bcf8e948e1bcff117beabe71dd66ce71f0b75d5c7791202ddc9e4fae8aff9d68d3586a8ce01b773f84635ca6c75644c

  • SSDEEP

    192:uqVfLhb5nv2nQjxn5Q/OnQie9NnPnQOkEnt6wnQTbnRnQtCJVevo7Nt4Fo+NzQ4S:nhQ/TygcXnvv

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 31 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6b54ccf05da55687fd142efbb67ce2e1_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1700
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1700 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2832

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a88cd740c3936021c1bf2dd6a39c2c88

    SHA1

    a9eabb52d1165414be177e571de80910c56812bd

    SHA256

    89e3d8b7572d17351dd5e17f32be1347868ba9d78c11da85798265fcf3c7f1f4

    SHA512

    075941b912808b12f53b6f0b4d38c2d2aad87b9fbc8a8bf64c6b006a93ba225a9995ba8e38af27f2d068bcea43775f90e51b7676e90a79cc1731ed88654f98ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62ef4b98354e17b778d509b587ec9745

    SHA1

    5358650ac70e2ca7d0a515d5e90abb308aff3420

    SHA256

    d102bf2728757649e7bd6f9c206d3dea76a8eea9392b2c38b7f72533cf59ed9e

    SHA512

    de35f69e5e08ed528b263271c944e7d500e6c962ffcc110524b31c0642b1b9677eb2b33cfe5e0ccc868e208cd5e3a7ee947103eeb5ac1617055663c7ccc01c62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61517e2bc9c544792d0ab02144f2db0e

    SHA1

    e43f7b6dd01ac8afb0e8aa15417ee862b6582c44

    SHA256

    69fd12d90532ff8ccd133ec41ce772801cc09462c68402b3c29226c60f6b723a

    SHA512

    f3155cf505075ad56d34975379db8493f817ee3792b512bea8b419fb33094f99cedce7b250d586621434e52404c7c538b1fcf2a472f91428fc2da6bf0cca90ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    161bec33a6a528ed71390209365b0035

    SHA1

    57ef97cfbe6fca5be30b80c8da16e63053ddc6af

    SHA256

    b506a3d1e4806a2910993844157f2b50c9f9af253914e0da5ec90ce74f5174ed

    SHA512

    d9b50659e2587b9f870f01344e365587b572c4898c78719a833a0d88a25f23dee862c40916fb89e0f1b1d515d92306742809cc6a64e875814a6389a401c98153

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2df2a5f4835e93ffde75179f2e2646f1

    SHA1

    761936e774439a94cead0fd6d6dfaf4a0999ce61

    SHA256

    149b09f8e6a43bd3461c897f55ce374abd44fb497655f12c0cabfcc5c4b28d4a

    SHA512

    056736ccdc34a1b97e9b642ecebc40f4ff0eb21b45fae862ba884902af3df724765f9d253116339cfe28fc2ed645f2cd8814ecf5cb6c83dff4e8100ca48dcb40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8ea1c2405236189d37d738a81a13323

    SHA1

    c0745826558994688b128a4600203a140c987096

    SHA256

    f3ff633c03f3fd9288d89c5a57e00f6adb1592173c7c52ad8b05f6bca9df7e7c

    SHA512

    0b269465f4e4d2db0d78d3cc60c77222e26f07dc6b994fb86995f0aceebcdd2ffceadfc38886e17a34a2d03619329abc320b4e7cc53b70794198ab3b0819870b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3ced6a503ba4059a42bcabf535f30d3

    SHA1

    e632bbe69660cfff11f1a9798374166101f6e1d6

    SHA256

    8a1fa12f5e9d2b7d1b2585859be56dcd14203b2b1fd799cee8c11a904c2248bd

    SHA512

    95e842a7560b3edb4ecf7b198971f2143be7f4f118f421065e3384d8c6fec9784f74410e275e56aa39f69dfe3dab927127af1825ba9fbcdace035e0140698162

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8154e01cbfcd7834901cbd4c6df48950

    SHA1

    cc96c7f6e7454ce5d52267faf4fef1af1d293e07

    SHA256

    edd52bd63d12c3327b26603c9bb10c88793e49dcea0a4f8fdecb3c862ded8b2a

    SHA512

    cbf59054d2719c8634ef469d8f7fbbfa8ebcffca26083387b91bd10d657a9a11229fee7b8d09b6345c47ac269bc01fdcd999375222468147a664a7011076b587

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e33b31ce6fc2b747504c2f79c5f9341a

    SHA1

    bee6e7006f12edc573e8144251774ef5ec2a7a31

    SHA256

    e4fb06809e5455693fc14e5c9b143f23593a967a1e87845345e164a23fbdc102

    SHA512

    234e9ec100f541acaed4d303497e489af0b0db4d94c9097dccbd0205b76d9476787ce0754023691f94055239f5dc1b9071f7f7e0cf5ff7dd3c626f769f907b5d

  • C:\Users\Admin\AppData\Local\Temp\Cab4B4.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar515.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a