Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 23:35

General

  • Target

    772ee9d1b56ea2687f27d4a10db2ae60_JaffaCakes118.html

  • Size

    460KB

  • MD5

    772ee9d1b56ea2687f27d4a10db2ae60

  • SHA1

    854dbefc91bf716286d9c74fc2303199be8c7ef7

  • SHA256

    ea271663e0e0bada847081675832d0066d0410cdb67c435cc68d8636277d21dc

  • SHA512

    5a01df250152f3b41f4a727316571c430b229d9805ee6e243fa16d8c430d7cc76586606af3f8bf4a7c7c58692cfd860d23ff147c1c74cc7a3439fd51f619a264

  • SSDEEP

    6144:S2sMYod+X3oI+Y7osMYod+X3oI+YTsMYod+X3oI+YLsMYod+X3oI+YQ:55d+X3d25d+X3x5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\772ee9d1b56ea2687f27d4a10db2ae60_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2612
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2612 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2344

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5b66fc3c5410f4bdfa4cd854f5cf21a

    SHA1

    cd96999d5d29ff90b2645156131fb01720fc1720

    SHA256

    5f40e7699fb7e14826eb96e4549d4a4d1fe8dd2214e87e8fc2d37ea858db0e3b

    SHA512

    cf56b200104b40fe377eba9df6884d67ed09bdd3c79e3304a43b0bb6eb3fba8d60813e595f0617e1e79abff6750fa9cb1602cd28c207d778ae48997ddf35c974

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9b436f79fd35eb1782191a3252fee1d

    SHA1

    7b27348d0e5f279433acbc9bf86529155c577302

    SHA256

    592c0ac19c4acb84d6f4ace28f42b8136692459c8c812898d6228674e0709eaf

    SHA512

    a59416747bc50f10299609131dea54f524462fce1c35ade22393c5774829f3f5bbce2a450889b403a466dfbf3b9201424e4ac1844b17b5e86d1930f8554fb58b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77d2fece3b331c736eba6b8af5b02c1c

    SHA1

    7b4744365d3bab4fc892fe2c797e69ffe6a25185

    SHA256

    6b3c45957a1bc5e6c41ff898b2f4d53a185af6b4389426056ccc33d64372f7d6

    SHA512

    a613b04bc36fb8827771ac7244a7310f30d258a6363011676537cdb9ea8dafc000fbf6b151e3dd439b6f7b7e0bfb548e365ad383c2d753b47f9fb82b22873213

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2601984224d1358b38495bc60ac7e1d6

    SHA1

    fc7578d269bc61a936225b60254ebba908907c2b

    SHA256

    f3d5f6df20044b0dabba8044fad4db171a730905ae8a49492398b0e1303f44d2

    SHA512

    528b2a96b8b3c5feefc22a5bcc78e313456fb5be9ede86c7d5188a1dc73a0804878f50a9586333e9e759d0f163ef00821f0b24f9064f2661c80fa428319e0590

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    058d5098534ebdd9216d32492fe6c61e

    SHA1

    54f46d291267de3a678280943f71f737576bbbd3

    SHA256

    8e7e91cb612c4f40ae9fd7fdf7d81fa990484294ef705749ba6c12ce4e02fb8a

    SHA512

    c075fb71a615321ccc334bb2605e6abcdf24d987f6e5a0645c89e18353438ae305a2b24473cf7253dd8370a1768b83678f9c936421a86ac8a9856bff4d686717

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1151d3110d645f64c36e43f6379f6654

    SHA1

    094d4a291c79b9565aae5a0e79947cd26a0446be

    SHA256

    916b56a149edd2000f36ac49c767dd4e7da7b58a58435a0b46f0b6a34053935c

    SHA512

    6a739586ba966256fed9887e41fa824ba5f7c3d71cf59e05e27cb5868e2381725fc22ca620d8ccdf9040a34c3a30719f37a4c94e2237132fd7ea20a7060ad551

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e24031b9657b1084414765242f3c750d

    SHA1

    c16a9f75709187148017717796f00c7b9e7d3668

    SHA256

    a64afb47ff704675110da22b4dd71b8368982c3c263965dd5d76e4872ca8ba11

    SHA512

    3393b90d289d21a215abf42edfbf1667ef881495958a03213316c7901a002c0c933fda2b3b2de769dd3db6679a18171ef845dcd51d21ddec42845b6c9c2e644b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec0d23a13ffc553d40798b03c8b7fda3

    SHA1

    397523d9282d80e93f9689a5f36584e313bd737c

    SHA256

    0a9545c3d14fc6f428ab8fcd4a095c89779c0c55cd95834b1fb60b0dd6378f26

    SHA512

    9372dfccdcbac6eaec8b8ed581fd24994880a62aced0a5af5416e7ee9ce34feaca270a42b8413af9e451a446b9aeaab1d02f8b3d44ee581a6d3555d0d3d800f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    87ba8fe01552b8e33d01bff54e718404

    SHA1

    5bda5231ac62ffeaeb4876359271f268e767cf1e

    SHA256

    32898bcb21f3621379e08965c863bd5ac0dbd339aae2f347edf282ccad465fd7

    SHA512

    af0adb2c42382099cb2ba753371bdb26da7a0ba801e5a4bd02a0ea1e1374bf7fe00d8a777405f04c3076643763d0e1b33722f9cf64661ffa2d14d449b172c5ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    586f8b814f30e161051c9df96c834eb5

    SHA1

    bd531545aeac468963dda466d6ca96c001e0aba8

    SHA256

    bcf276e9b291ce27e6404a9ab55f1bc67a3db552b0388906d4bfcb64115caba2

    SHA512

    638b21263ce1c1720be2425586cd87372bad8f6d3b0450c0de88ac4f252a791e8f173f208ddaa13e06ec2c1ddda3efff03bf15fde185a711df30c5fe902a3189

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    882453570a548190efda2bc234e76c68

    SHA1

    b9d59f45369babc6c97e9f8eb391e06e824b8fca

    SHA256

    07511d27e067f8a398404e2a05faea238d03c0293bbce3555f5a14d25d813d9e

    SHA512

    568b8a372d5d8c681b5d57e003c97bf7b09b6b8a83861075339a74506eae87df8f55383875ca6eba92d751bae8d1a34a1070d9eb64458e56b09bdf48367ce191

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8808a447c3c634bc8e6cd2866a2d3d27

    SHA1

    e8a7cc6bc55c4b83389698df348a3819c772c3ab

    SHA256

    377bdad8a41a0148f1331f027a55efecf9de6f7fd5a867e2fd17f718e2b4683f

    SHA512

    8dde282bab37a4a4715ee5a7b13a6ae3a9a1028b938b0f0b1e78e6cf2e1aff1a51de9b496a3d04bbfc51973cf1739ab8f1cbb053137d4de46d672edf120ab206

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    84b4dbdf8c887ebdfe55faa124c82f43

    SHA1

    c9f957e5a55380d30046c18460f27aeb796bffb9

    SHA256

    c148587da21f9bd01ff5bbbfa6a402803069f5288536c15c9081d780e71e5e4d

    SHA512

    796015f06593c0734bfdc57d3bdb9269eb43364a4e709bac3932268516c1326d7b80a6b3b0e529262978ae5a76a5a6fc3c8b3ee9a441424d660d11aaaf17becf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77a8569ce4de548bb5db1d211ab448df

    SHA1

    607b6bf66742d5200a74ec2b97b2fb14721bb522

    SHA256

    9fe3ea64efbde11ee986baacf9403283a5cd3453e7d04b678a050655795476c3

    SHA512

    d9ec8037dd7eca64c17eb82345d7032ea8d4be5b8ab450ee2cf1f958f28aab2e3e5d2412c35058e4204f0d2f05cf7d0b85a2aafc9d7bc78d0fd47163a9a94393

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd27f633ef9c41164cda5a8727fdaf2a

    SHA1

    39dce80d5cf578787e4e436adc4306bdc6c9973f

    SHA256

    d223f3e3dc7fd2b8bb61493aeaf98baf62d971bf7d292dcc8607921c2ea27033

    SHA512

    e3079b13dfc9945cf06741d34d06694eef669b747948d66f2bf0da38bf36ad739c761034b5635ba2a357ff12ee1736e0ce4f66d7e23181db357db12f54bbe1f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2bea38856fc7fc618593de1ee536c5ea

    SHA1

    a26ed10d1e7014af5d68c2ad7cc389e833fc177e

    SHA256

    803a5919aacf9bcf7d71ad0ab867aa96a2b9afdd0b074e0bbd31ec68451542cc

    SHA512

    e44d1bbec202d23d4296de21f42682974f59851383f1cc1686acc18a4d6c758340ce41b2d10d4567ee2d9f8085ce9babbb6935346e8d509aca7415874636dcf7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e1441f2f6fba92bc6c33215c2762724

    SHA1

    63c13b664b7a77acb6dd6b9da6d5af2e08cb8ebb

    SHA256

    ad14a894f8d6d8351629dd541058adcbe71af334b75263717247bdbef80c575a

    SHA512

    00e8f2f2a07f72895bb67798cd627fd747297a66abbb95c9f31684d4a40696b98dedc5a5dfbdb27c81338b68a82573dea8d21e0a4e8222c72b2d74bb65dfab04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8521eb704d32bf1a5d71c441dc28f54

    SHA1

    7d843abf6149b8ad436380ea67ec5345765e16c8

    SHA256

    f2affe3ce72a11dc82fae610ef9a473980155787407a22428ec55ff07f39c8f3

    SHA512

    7b31fb822c4157a2da4062c2da6da313385b87a53b8f8251e8594698b7d215b769405a47ff2c012d3f4fe948d838219c87a73600f2c7226ba6eb860eea5c0468

  • C:\Users\Admin\AppData\Local\Temp\Cab4413.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4516.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a