Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/05/2024, 02:19

General

  • Target

    708ea9acde90357349a9b5bb2f28f9b8_JaffaCakes118.html

  • Size

    139KB

  • MD5

    708ea9acde90357349a9b5bb2f28f9b8

  • SHA1

    337d6f02f23116d6fe53cff5518e004bb6eb1853

  • SHA256

    ca73fbdf13052f770d522f224d2ac5ec99039590a13164dd1bc21630f5f69381

  • SHA512

    2d3ebc7b57b5f4afef05512b50f55a37a0603087bb745db7658c8879862ca3204648802bbb4bc1eeea4211813d5f0904284d539162da4bc798d6556476f83e0e

  • SSDEEP

    3072:Sdg0IKgvsR3G+ayfkMY+BES09JXAnyrZalI+YQ:SuGsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\708ea9acde90357349a9b5bb2f28f9b8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1908
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1908 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2588

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9951474f272b3f2d9d9c7b475b99ba20

    SHA1

    c44aadd411bfec23566b1ca839e5855e79735037

    SHA256

    e64dc3dfd01cd244115bedd03d5ca9bfcd64ec2e2ff62d3dd6e6c6947b3dad80

    SHA512

    2f57ca0862347a2216cc460cbb670d4f439fec32bd8f4697ade965cc80550e2d4671db509eed31ba4bf05b157f9aad76d938627ee8b467cf520a141b921c5225

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c3246a6e97e4b7830fdb41cd8de22bc

    SHA1

    604257341ab6e3691e0ed5be99f1e2d21ac76a36

    SHA256

    aeddebc1ab29e7f5beb395edcfeb266bb6606a257f3738b630b068367a192c6d

    SHA512

    5a6172572ad118678aab62d8644ea6477dde2501a11289b9ef0407d239fbeca176ff71472c5560fb4920c2eac6fc075974fa9711a2810bc8ed46338eb2669795

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    123b9b1557a6f2ab8eb4055450f64666

    SHA1

    5fcf65b99affbb6fba9382198a43bc674b4488b3

    SHA256

    369ed413a929e6bf512bd8543af90056e340198c2b5c4de226790333ed569a39

    SHA512

    727c71aec6ae3f23a5598f11e0f617dbe48f02bafb83d222f45f021920eac8281f4123a36bb0c0233f05734a7d6c05292ee50f4d3219589f5ab67ccd96fe9e9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aeb1da143f98956b7369804dc4dd88f2

    SHA1

    9173c95e4079a022aa82893b1e53a4d1b07310b8

    SHA256

    31499aa51622ff4d26e336311966080e09e862ea21db37a020c0ec0920f1a606

    SHA512

    f6355fe727661574de2ac5859b3a43820358f4e4b0ed4ad296edd5fa09cd8d65a4bcb3dd58d95911377f37db7e375fc488cd53a5765662b2a2023ca4f2e99fb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e691df143838d077872a66d221ab22a9

    SHA1

    629f6b53b952f4030d7edb89be18b60852bccb00

    SHA256

    aeb53bed7ad54b3a1b3f6d333812af7a6f24ee9aa638a710d6dc6c757eac0e45

    SHA512

    2596f5a08d0da6215270b45e8849301da1988528f4ac7ed4b57f2ad74c42b84d61770592f3a0550ee36d43de3a9abf3e908af16ed93d717825b501ce02f53d54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3334bfa7642ef4312d55f5f4ce3fceff

    SHA1

    ffe4e9e6792cc713e70937d9b8f94c75d49ca8bc

    SHA256

    4007768886341e1330fa280e649ea9702a519102e09b51602191a0e9a2fa5097

    SHA512

    6b3e951485011f810325f07ca209968c60287e523a90d2ef3181b146653cd7f19c1f7ec2ff00502355511670347df2a2e778188a27d4d32e545cdcdcfb69b92f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9e736a83cde478616f7c80355df040b

    SHA1

    a1b107f72d87463eb34fd96799a8cb61c58a7556

    SHA256

    1eeae43f200dc4b8545a315032bc7629cb7e0803f14e9011a72366de9eee8d17

    SHA512

    0cd2d3457f42ff48a23ec68aa35ca621aa4a6ec275f57637eae7dc571a409bbf1a91c17dda77429497c8a80aeb55d8f1ee105016cd67a1b4ccb8035287327f67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd37bcdcdbd3778ab1c16df5f76fc66f

    SHA1

    c557373493e9e2ebcd6b24a11034621687114ecd

    SHA256

    2cc8a8c0e1b24c3295152b27eb267020fbbd6cc63d965589104524527555348e

    SHA512

    797ae688fd1f40451d4387eb970b84ffac1d9796a09f546383235b7b1de8d4f53bb4ca3db76583e28dbc95ad69df21002f3ae00b3a1bddc1381f787388fcfc33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bdb57a9781fb982c0d98b194d3a724cf

    SHA1

    47e8a81cd99019a9ab5159efbd674c7d51f5d710

    SHA256

    365398ddad7c9498a3e1e6947986935d2b7bba95dc71e69ab0223030746d3cc0

    SHA512

    c9ad5cbfd97a7a64fd90bd7d94922df9b4d77ba92ceecedf21e9c7ddd4b081e02487a71dfb6eee96f2a3615ec0b5c55bee8556402eca4373b9b1082bcb9e817a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    762d1e9a47df0cf35b24307072f75071

    SHA1

    160684c8b9d64967dd5e25e36511f412da8de463

    SHA256

    0f550b0fd54ba4c7e281344f8770470f2c47f8d172e06c30dbc963ce630a2b6b

    SHA512

    f2d5e8144207fa4d2feb28cb1ed5d53d75e9f3272e699e3a1b310b14e4ba208d6afe02612d9f0ccbf37c13a425656410f1aee580f3c2dc58ab5013911bf6c887

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ff6d73b928aa75efd415aea9b855fcf

    SHA1

    b9cf21a31aa1d079ce47aab546bf358b58f24473

    SHA256

    d74a2a67a083b42fdc8f1f7164eb4a5bca355c23ab6641400423ce4e68f4711c

    SHA512

    64fb33a51e0a037aaa88b15ca4f211577d17d0cfa50178dcbf47bf52d20ebe444a8911af0d361ab7f5b77c0e6de5ac279ba9fdaef4d2b1d9e38a9a9bc67fe399

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    351cc9c317c7366fe604d7fcaa25de0b

    SHA1

    204f23156bccc35ac3d132c7ff1b89e97c186524

    SHA256

    5b4760cf05b16046ea2633eb838798d02af4e39774232a45ff5d5f9b1e74cb57

    SHA512

    949fca5a1676aef38f7ae4accd466626f03fe77327d30054436119113ed3426532674511d6ef27b73b2b6fbdbb7648f7a88ec81916791f22a19f4f6560ca5e3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    32da484054ac051d927d5885c7a9cc2f

    SHA1

    3e459bae825d15fe2b4886703e6dde85ff93c864

    SHA256

    7d43563a3ab11e05c50eb60cc176f5a518983276b099df755de2a62ee325b61a

    SHA512

    94bd9264327c2425db546ee798f3d10900f58fb930b4796e2955eff6c702b4a08316849070354fb7a3c7f3355bdec216adb448e421e2bddd0f00917834133ac7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fbd1925126756e9ce161328cd0f60b7

    SHA1

    414ed402a8ced26f499ba7076e2b6792e9e06243

    SHA256

    1251655f856c76271d1a9a9d4a1ded561f5548d090902f2d126c3b758cbac614

    SHA512

    6aaacc3c9bfc381dd592ec879fdede5aac7144480804faa0951e8525880ec97c202dddef83a15f5e2d6d84ab61aa40638c78732f5c9f9eed94230f203cf50727

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73f1127f67c3821038828f06a9a8890c

    SHA1

    0df136a77ecc49914fc4a9b4d165dc89b83e1367

    SHA256

    ae788de90870203c25272921af638631406f695528449e13fdd1f99e51d216e4

    SHA512

    4c29bda40c6a9d880bc79e5154a4e205b1b3c3182b2aa3ae14af23cb29d9bfb3c4124680ffb0a9268533432d307c901ccef1dbf1850650faddded3b93746f4e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e21bf95fef7a4f192e76f4a8af9bc59c

    SHA1

    0846c457589b1b6c813acad7d66ffa9f5852881f

    SHA256

    1398bd44ec47717231b7edefd7dafa400afd6fbace88c5594cc711ae5ca90a14

    SHA512

    9e1e07d28bce0b81e6fed6696a3001788474a46bd239c712db718e624c98427d2ef4be55a6d47a04e872f4d8bc7b9edaef1f44b5ce0e006c840f9a0d1c0b09af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    785b32d9ceb81b7f8aa48c1a5c2c6ad9

    SHA1

    5350c19f01f7c3bd0e21e2ecc6adeb8d42c6bfce

    SHA256

    02fa002770138361e32be0ddd598a1b62dd4b7f80518ce07866484d32e8016a3

    SHA512

    96de83f194a8a9eff424d4d37c5ae58c3b6941ef93146928df1d85d104a61ef82971914b0f946df0ef544b12497c754729dbfbbd25f1a3eaffc941b9718f9ba2

  • C:\Users\Admin\AppData\Local\Temp\Cab9B37.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9C39.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a