Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    24/05/2024, 06:19

General

  • Target

    6d9301ec5fd3986c00fd327d9ae8b438_JaffaCakes118.html

  • Size

    3KB

  • MD5

    6d9301ec5fd3986c00fd327d9ae8b438

  • SHA1

    e2f350d3d1d18ac046e58cae81a21c023e7cda8b

  • SHA256

    47956f4092b47ad88d358f1bfd22a3140f9a7a8dbb1d09d6607ec849f0e2cd18

  • SHA512

    aca5e7f9a57fb20bd7db901f5d3ed8d21612b794796adcd7d54d6b3aeb719e167dc487d6596992591c5c25d30172b18aa83dc3476cf3a5a77eeb2e9387eced23

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6d9301ec5fd3986c00fd327d9ae8b438_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1248
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1248 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2628

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c7d89c817eae53fc032b029e6fffa24d

    SHA1

    f085e5133411a8d326fc0b1f7f4666d40a67fcfb

    SHA256

    e863c2ed16e9847b76328ad4d66afecf3f3ed3986add41e38ec3ebb2b64f590d

    SHA512

    85af9d62be300b96974c8ae8c75279350636b31ae3c01b97c117e3af865728cc461e385858e9b5dde8d8438d7e6bebfc39ec3f20e492d955e34d666ac1b7df8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df56f45cd03c893f09df8f2eeda7a761

    SHA1

    1d6dec4c2852d1fc282b9c0cbb9f11ee5964301c

    SHA256

    47a1d2e8e021af9c6cf16cce115f067fcf5bcd2a42b1f92b02dbdaef843a68a1

    SHA512

    bd8ecd4ef034209e9657010085acca1d55af8eaf089607ba46a03dbce189ceea7ebf94e5d95fb1ada7e5f1a6b4983939c9563532c40c524a3657035f40ba1fe2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad4e381f82a00c49a891ed090a89b30e

    SHA1

    ed941c6e03edf0e45b781efe3b8018b7829210b7

    SHA256

    b53dfa38cb2ec273bf1fa9dea91031d1041b6dc9e08b1fe69bed687f5d25b250

    SHA512

    3ea7709859a23e8f4584b60349caa142818c0bf60d25f00006355343ebef3cec23f749fc508e77faf895f2e8557efe185a030d38346bbbe56876d6581a305578

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72a71744011d7475eb018dacdf619321

    SHA1

    02ab3aa8990836c62d786505e0952bdec2712e79

    SHA256

    c09570f6fe1c98399cf973f48a7d81a2b246be84449e6dd869f246278b576acf

    SHA512

    ab6f8cfdbf502584bae125e6fd185bcb465512ff1d578d94d9ab9884bd70499c6080cb4cc0f05f7aa936e310fedd6183ae85dc82c12def63239b96dfd0d3f10e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48bfc20cb112d57ea468bf2f65ab15c9

    SHA1

    e18e76317c0346b2bd09b1b8eded99051c48aca0

    SHA256

    9b41e18531d5b54dd4d413d3739a74f7d834e31ec38a9690d0d66ceb2d3a4fba

    SHA512

    48f26261bbb8eea2325939448984839edfb2d6070001fbaadeb3a162d1f655f9e90755169ac8747122dd50084c9d4d2aa545f21e825deeae607fd9e01da8e66c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    255df63f4c74cddf9ed47317a1f6623a

    SHA1

    9e560b69905c4623498a5362f82cdcb8baec8cad

    SHA256

    43d009a6d055554557e7a3da7bf019f8fbbc3e5ab94890e20050d8fb53851a4b

    SHA512

    133e7944515a4c08e878fed4d5bd67fc09337cc68692ea08162269de91bc9110423d996962158fe329e9d73ebbbad9397d4a2dcb064e3d27041997ffbcfb2b66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2cc21f2ec7c3ca57897ead8f5fd7168c

    SHA1

    852ec9449005aa8d439372c5711ece88aa505b37

    SHA256

    2c831d0f5ee42801ee59f2bb2e218ec884f9a6ef79eea7ce062de41991f1fb4e

    SHA512

    0af90b717942c580a3fb862aee74815e6e2f217899efb41f3e462c810c9597b1dae492564cdef65cc5604db0297a1479f7edb84c00ff5a7749e528fc43cd9f2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f09aca2f120e1388b66a131d8cbd256b

    SHA1

    e5855aee78f372bc1b3bbcd8b152c3e18e93a562

    SHA256

    38d9d0c45506812cd7ea6f85e987aa25f21ae849e5eb68074c2c91d7adf5d979

    SHA512

    f1775c98c86d235d5b85134c8ec7af3f4872d62316f9b094cd8686674e3614521aef9e45bc21166e6ea4a931df463dd4a895148f15197610c43f2044e8ef82a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a9ecc16703bce75f5ca12a90804f8f3

    SHA1

    36cdc7e7bda9885ba3353268f0e84f9b41d36007

    SHA256

    9e5c9e3b1eda499814190a2badb79e062b0b4268d3af0be6bacda155cb71db27

    SHA512

    fc25eb2c45ad99cbc900a56cdd412c80dc920e24092f797e4b15f84f1db48442d773df485395fc363b1ef0b8b4cab71b7261d0760d5abb52165b862cc5e28ffc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0364741c3793f562f87dc88a72f121f9

    SHA1

    9c2599de12c12ad7a2b65fd59f33f109a1226637

    SHA256

    aaca3eb22674d3e92de21dd125d3c5be18a45c0375fe53b22a53a07f341eabd7

    SHA512

    a67f5f6ec6b0fdd29fd475d8d5eebb86482dfd8530357f519c6402d5d52f13dbb1ca6fcd14eec543434d4799e57671d5ce388f757cb04b23c871354c6fa892f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ed3c8b273735530860d104842719ce8

    SHA1

    a9a7b6802088a80855c9787b44362c2c177f4f0d

    SHA256

    13fad8dfe9af00577adc6c7a2030705a9f428bb718578956951937d64a9cf8d1

    SHA512

    2c5b649b5e281f3a4b4fa00d24254669deba6cedb175535600b78cdd42ba5562beb29cc1aa7504c60f07863e5a494a38a87a9d9ddf35e93bf3c020bf12497e8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef0e5c4502f0efc6d851d2a7d8540d1e

    SHA1

    3e60953644098aef2016280131f1e32fd5ee2b38

    SHA256

    82db3951c5bec0474e360133f9693f8323575bacbdfb7abfa64b5f02d52e3115

    SHA512

    b4ad70189f1521b8f9814709e76b2ab62c1289f913bf88780a196310c2cded0f22a4e89f01f119cc25f100c8d3bb74764ed8c637a4fdf64f908cbde2c98e53c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ebd6a671ed651073a5dd7efd82d58c3

    SHA1

    cc865d0fad66c3eea2fd2459f9ecfbf7eb630b2a

    SHA256

    00da3609ecbcb17e19bded91d50a156be8f8832ba824f98ed1f5460ece940753

    SHA512

    e450212c8293ef585c5066b785ebce6d7836f288aa6fdb11a865813b5840bce53a0f17defa08baf6d707bd74ae55627d84da96fbd44f463f8df4b383b1635558

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    038f32f0cb160e056fc65a010f6fac26

    SHA1

    f8c5c313f179e4944b98bc73a3d0616dd72f197d

    SHA256

    5afffaa77c7d6622f541a43af4a068e8208e39ef2228b10d2d40d0b164121804

    SHA512

    4b082c4c160eb0ba1af98cbf90f464b432261eeebb3682d61362f46a534d460725ec7e9c321eb07bdea0370a87f36ebe469e018dd1004d4d16df484c31b329ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf96a77fe119744900b501108484ef8b

    SHA1

    2b56d952f3cd14ecac8b1319c02d6f1d2715aebb

    SHA256

    6bc24ce54457b20183f8055bb6d05f05dc56e97afec13d0fedd68c16967d7c70

    SHA512

    183979efcd6e1a61ae8fbab9122fc820a827bbe6a5eac388e9a0b7e366551832cda9ff4c184bbe9188a7ce03444a3aca7285cf2ddd12a588e158150677030921

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8238fd8545c4299136ba3ad65aac5634

    SHA1

    ae0be40abf94fd60de49fbd9b8ce14525b160b56

    SHA256

    d89ee4276cb3bc7183d986849f80fe440b14dba6c42fc3c9a95a636950edf86a

    SHA512

    5e7c9fb8c6cf2d3548cc54c0a89aedacf425e5a72ec3b74dde884b33e25fef773f03d635dd5dc5caac7ed053b93e2c4d9a6ab2af8f767763ee386ed395764f41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90c734e4a9b877c473a6a7ec251876f3

    SHA1

    a0c8fef73cae7697f1df64163c017dc88b353ac2

    SHA256

    74f4864c83163dbd93ab03cadfdc11dd1413ab760686b57631cc869a34d84a13

    SHA512

    4d844c4389683b77c7afc91378add971cb8e4c59e86c3a04683a0ca1887ab9f87459e76a0e63c9f00da5c54988a7b117df42e2d949d2f839486f4fcfa6bd8c8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6018981f0bd9eece4c68c3c5ac75a217

    SHA1

    4266c462b2418fa752b57f11be12840e52a7dcd1

    SHA256

    4745e693e3f30eafab1045d628e36d685d01f5741db0d878eaaf9a0d47bc4e5d

    SHA512

    b725a96e236afd5154bf7676665387ff14eea5e14f3e3c150013e73d593e6f2b6822d09284ca0ae9ac8f852d514ff725da903cecd55e7186988eb98a5b32f380

  • C:\Users\Admin\AppData\Local\Temp\Cab2618.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab26F6.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar270B.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a