Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    25/05/2024, 23:18

General

  • Target

    73948c7ec5959c368f2a37a68e9a1f00_JaffaCakes118.html

  • Size

    28KB

  • MD5

    73948c7ec5959c368f2a37a68e9a1f00

  • SHA1

    aff8c8b5b858a53350b41d080951d4845833c793

  • SHA256

    9f9ed0e3b1a51346684bf149d2d37631defdae242ae396cff4a9931bc21bc9d0

  • SHA512

    08c5468f71e997b6e935e24da5fa9da28bc1dd5e07cc1fafbaabd4e3ea2f28e96d099edfcfe3ef033b0bd01111a066c78eec93580efdf44a448fcba712565d34

  • SSDEEP

    192:wl7vFZ7vb9TsVi7NaNerVfJLsas67WfpeSYmISTqWfPsS16WfOh3GSWf4VFGRWfR:+fT9lf7/gVNB1305ezaYPdj+2K7kFM

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\73948c7ec5959c368f2a37a68e9a1f00_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2408
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2408 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2596

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    feb8c01731a5e2a5270ffa93b76c6792

    SHA1

    472710fa2d3910fcd4fbc225d4f121ee33c5d8cb

    SHA256

    aa61dfe33062a79cab33a174afdf2bdbb4af08ba96e96c30ab4cf66dbe1214a7

    SHA512

    0342835780b629e6f5cec5885788ed5161a61393e44804caa20200af8302b0b3372551d93aac935c9e98895e70ed3ec757a4055fcbadde9902c91ee06ae3cc1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94b502e1f07bbbe202027825eb8d88a0

    SHA1

    dc41a63f60b39738d44e3891e28135288023ba21

    SHA256

    ae80b86d3371a634406e26113e75610ff04001994a1158e2df7fb7339feda155

    SHA512

    f2a56f493d0fd399c88ef5c253ddb0be038da11ee589bf440f1691c4abcef5bc962dff9b16792737306285809edd6508b807017216f4625ae20cfc3a465b6859

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d7696601f89b8f74e39cc925601c1c96

    SHA1

    29266122dffc0a508a738ec5e5e2f9b243ba1e1f

    SHA256

    6a6c3adbaf50c87ff1ee44792420774c58e6d982e903820fcdf9f621a52f1689

    SHA512

    b7e64e935e6f972c7a4b4ed925d643b852b8a27142f57cb18731eae86ae9917fbba5671d9531e65dbe574e7927d13ca3bd1bb430a69dc8380af2f5b16f823ce8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f600c2f8254dcd7024c22982359379e

    SHA1

    b56bf5a3518ac7b44ac884ab9fa47f8fcd299759

    SHA256

    90750a8f301ac18c393d156d9bb47d686979965f9f42e2aa0f559b725d8b2122

    SHA512

    f36fa6e17cb4bbb94b89810213d660d48a6cd89b5ae5f3a4bbd0785030843e4e51ecd99858012034cc3769711d0d0efdbfff2233b513a031a9e2eb89a7ef7213

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c134c9841decceda73bbef160aa437f

    SHA1

    f30682de4df68dd7bcaeadcc6ac02c89cf8c1c6a

    SHA256

    b6430ac615d85d0ab31bf01b76787aacdca33e588b44b9019a00743964634ac9

    SHA512

    94f6f3e99261a169825131f0b983d171f4f1eeced7330eb794c058ff8c08bba128921b3ce725657582fcaed9c27a57a3debfc9d471cffd8d6641bdfc1904d72f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08efb84108e56f4d1e620d976db08b9d

    SHA1

    7072670c9ca01d9c59284936fcc9bf717e405973

    SHA256

    78e29104ed088ea7de8dcafe5dba2142ff4beae406006cda983ea638bab7a152

    SHA512

    3b447e1770b125d5befc8e7a6d8fab7ca3d9aaa20232c1c451eb2d8f4b32933e3bbfe2c28426a01847b2d7951466621dd3c77db5754de5d28abe97e423ac013b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ca2fcf2de3e4f0897cec79d4959bcae

    SHA1

    5eef658b3f9bf5723ad17f5c494cf0aba28379a8

    SHA256

    5e4d4037c0029b16f0f01a283f22385d9a52a15d7e369543f963657a714d8728

    SHA512

    06da619fec2a8fafcdeb4420953f94e250d4d0a9cab448197dc4bb98057f3576bc3b2b8b4709b49099e4615767306fa89ef3394e43234c8070a2aa4027399dbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8d5a0e2496ecba82aefe9f13c83e350

    SHA1

    1b9fb3f1a446ad45e0a229554dac7d055a9d08ce

    SHA256

    ef7bf09a818565e1c43bcf1da17568eb085a9f7e1fe5eefd93f25fc756e306f0

    SHA512

    80aa63606b94eddfd1a0e7a9268fc43cec1e868234a7f0b992cd97617e190d9be4ac14ba4a1183e23baeeacf577f3133d6a0357baa1ba3db863d63ae76dd5cfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8669a922774def68e264e5e7535609ef

    SHA1

    8a3a60f7b46ab801e679510af7be827576d1ba4f

    SHA256

    a81ff7128c8650c442078cc25d80bebadf384510f66171ea060536bbcd2021df

    SHA512

    9db56f7f0df4d1e2b8f6d73bb8058e8f499c886434644f31dfb3725d015e7d9c8c8ea85a10e78169e8f4ea4d1c90285d17f72835c89a0d97446913318322a551

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93c8eb5d8450efdf004c409563ec9753

    SHA1

    27c70b621490c78e7a56d79c697709fa173c48ac

    SHA256

    ccb0faa15b2098ad7599645dfb22a6d650469b502d0b6e7126f1887814ff6b5c

    SHA512

    ad53d69aae3d9e63764aa06a378f32f587bccf73e26bfb8e63d60daabe683168677a27efc61a789062b48d202f0460732c3934710907244d1d16fb8ab17bceea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5acf352bbba5d805c7d9f8f4719e75c

    SHA1

    4cc840310b11efe572ccbee5d6f0113e00f954c5

    SHA256

    a381be69a4d53263a1764ad22dc5a8f543308a0b34693648f570e16f29f49502

    SHA512

    ec80ade24dc41403385ad90e7ec52f199a241c4261646a37408e135952e171f3af2eacecb1890c7e15fcc66e50f95156720bf9ef9c591b5ed71d89f5fe1312ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e3f85e440e3d61787a658ac39d569e6

    SHA1

    7f6023e5c62d7d65f02f3648db0c018a4ba9a16e

    SHA256

    991ea2ecb6051028efae15d8973ebe61be131ada3b5d491b613d840b37317d70

    SHA512

    3c2b54d4ec605ae2821334b3c297ae1df78758c4db503434c81a9e6abea6b99db7bf6614d3c9e3193ca8f2cd0544afb404a74c2b8c0c31e18d0ac8fd2b11ff48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c58bf0957136857fed5b4898f987ea9c

    SHA1

    7a412f08671f0c9b041bc53b0f78ba20b3163348

    SHA256

    e3d789854746b1f6f04f551763eefb44e0d350c4fe6620d42bc6fdb11199a87b

    SHA512

    a86c5efdc9a5b7020ec161bb44b74aa25d0b75362576f00d8733bb68f652d955da51fe3cc559e9a4e74d2faba1e3cb98f5093b98ccd327c03a19743ae2a047a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6397c925f1de9f03a329ffeb47bf6bac

    SHA1

    53194fc1a86656d8e08600e00ec2b198761a7ca3

    SHA256

    49f7530bf030b7fe20223658c32aec9fa28c93d0ae19817455b793e4d360c317

    SHA512

    fda766744491a6f283e046ffafd9abf9e18ca2a05438a6e3e275172590e9a78cd00f49f1bdda6003ee074b095ff37cbf60dde6ae8a8cb44f6159dcb6503168e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    939d708a216d4a81a28cd51eef51c0e5

    SHA1

    4ec3c5a478a9b7cc3207552faf6fb8dbb7d4bf10

    SHA256

    bf79f39b0a32d30b8224473ca0f15bf18ba76909be421639ba51bf87182dfbc8

    SHA512

    84da7039177f45f2c4436ca3c408078db7ff105acfaccc99c6e1e89593c2de32d995c5561d636d3edbef67910f4e2d06f38107c55438798a13305d88ef65fe05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    40d5e383e0ae32b71375fbf8a39e5d26

    SHA1

    7d6b85cc034c333b0549f6cc296b42608398755d

    SHA256

    060a2e68a09e91b38ad01b96219d7d7c211688284b481445048311eaeb1d0d9b

    SHA512

    6251b3e8eaa671a6ed84eb968407b9f99e322c4f45e01a39aef21c339e041a70d83efac525d1fae4481b7a95bf6d2c20bcc81492ba05cc2b0f76ca889043139f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f3a1c228494546c86220862dead0641

    SHA1

    66379f13c6a242868f33ac138857935f95f70888

    SHA256

    8a16a59c723b207e9e38f502e6b807317faa155659d5b32f67d17d5c4326a3d5

    SHA512

    23774890efb6eb35b32a5693fde1b3f062ca8651525b7ceb64456a9b086f7c4241226af027fa25ba235bcfd967696585dacc25a0d306a631494cb7da299eef65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8459a7c299b3705d1b4fcb659ef4622e

    SHA1

    02c11cc73621e8a2c0f328d84d3373ded7664ec4

    SHA256

    19a01ed20abae741e8832b901642c66ab4dcf8bf23e142e0223e88f7849322b7

    SHA512

    5f60caa2e6acd2c2191227298d9a7d8135637ea90823b1e0aecf245f482b5ff0cdfae1fcbda7a0a6fa1f516314998defd7473ce3f77a8b49fd78785407cd99f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca5b368a1d6aa681a93127685d2b60b5

    SHA1

    76b7feb6419dd8edd19e78ee7a5c346c7936877d

    SHA256

    fcd8ee663937fd881c41e5479a36b0943bc003bf13f89a73f9f4805b064d2a27

    SHA512

    5c9c79d060feea97be9c2e39d8204c698132084499beaac48754ec32bce3b52324cd9e4280c09647dabbc748ca11680112474f18ba9bdb38c359e9242afbe152

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f17dac89b45ffd86e0b003ed3fe0a74

    SHA1

    1cbba64f9cd8e4f204f6326312ae301911376127

    SHA256

    0b1575f1f7914def09d37a18dc114d6059185f2f1069b4920bcf6fb4adf6b1f1

    SHA512

    2daa7e4ebc47da18a66a898a7aab3a6fd35b2ebd8e6e2a3aea3eda9155b823cf051d62b4d77fbd2d420b48ee8102e8193c0a7fddcb39f637961d03b1cd9ba855

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50d836b74b19f67e032bb49095edf8bd

    SHA1

    31eeeaddf0c0aadebbdf9ed7d211c75400adec15

    SHA256

    db06bbf84141335506bd0720dfc509af899c59266bf9738da0d3325d9c72fec3

    SHA512

    ac0790b7f601db5861d5da3508dd6b29323dee3bd82a897c405c630795fe553b92697943faac8a47fe5b25d55ce000df21631f27dac9bcfe4548d6b9d46134b9

  • C:\Users\Admin\AppData\Local\Temp\Cab37D3.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3836.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a