Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 10:45

General

  • Target

    7539854bc04040fc9a91fa9682c606b9_JaffaCakes118.html

  • Size

    171KB

  • MD5

    7539854bc04040fc9a91fa9682c606b9

  • SHA1

    40a21c5a4c45a2248535d9c582b325f442892fc5

  • SHA256

    4a8abb02244f72ae5d33c3d07b4c984935218fc62ac49b391824495c128a11be

  • SHA512

    409e933996a21aa2fb2d0fce938642b7af79b86b42e8b7d5a98aba524e1887beb280bc4922e487eea18adffb2da48ab1100c80227bbb0e9dc51f223100fe43a5

  • SSDEEP

    3072:QUACzc4ZIeuyHAkqA0PmY7igG73cf2pasigG73cfMyfkMY+BES09JXAnyrZalI+v:v4KsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7539854bc04040fc9a91fa9682c606b9_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2320
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2320 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3036

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b136e750f3bc281fa0f62eb921ee1d2c

    SHA1

    f5f20e51a0b0e30d5f6cf9d44ad6a9aed7a0cb97

    SHA256

    25221be23b4d1ab13fbaf2c86773edea1fb29bfa2382b0fb19068855e4e9bf9c

    SHA512

    74d70cac5b8c70eb793d6d204e7ecf4035f4030b4b743ea4daf470f5c35a9ed1a6f3fa31f2bb9615bfc41c05df97e722647708e2e6864a5045d5d1afd4de313e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9006de34c5920ee1349d533188695c02

    SHA1

    53d146e06330c1f38791e4c6a64f09eccb8d42e4

    SHA256

    299345b4f876b795b37e0758caba95b3f4f0340a4dd58d957261bdbede3a8e4a

    SHA512

    991320066ada8d3d5abb034d81fbde92a80d4f87a5929268e0db9df7263a830c98c69a79a147adaf955d6a51d49b66e924925bf6206fefa9ef11ee3045f5ea6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e60ce08dfe44c013d7582f1d345142a0

    SHA1

    110639d9b22669319d49ddb0a6c80ec8785af2e1

    SHA256

    d953db9f2ab87b5fad6d7cc228a8fb8289a4bc1816c323d783f63751601e7420

    SHA512

    f1485711a66eafc9ec5dcbef46d7cfdeccd528cdef84f426ff07911b3ed0155d4e56a8522953e392a1dcbf7dbe23011f7f2c98e3759cb22853b725a4055325eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e51d9beb5061ffa4affbb9839baa4c1a

    SHA1

    0ea477f312617a326cbb43081a8fdc0e1af30bac

    SHA256

    86dcd2e016ca9cd529861ffb5eafef47c5fd16813563be34ec7635697510cbd2

    SHA512

    32dc3c1638dd1bcb59a03182c50b36a30f319995822fa45e6090fe158b2217dcb29d6425f8cf9880b21fcd83a1fa694e8984db47c656e9d201d184ee62f5a371

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64ef7c0593a25aecd5386927abdfad68

    SHA1

    ab995001cfce5d663fdb7b00ae7b3e6577c128bd

    SHA256

    626451f8e984ab2ee5a0ee1501291115941a0e00d13d903a3eabac96119e50f9

    SHA512

    4c13244ca10896135e1a2eab72326d21b89eb852c5d2687c6895dc19329e5f7c56499416f467968445eca4941517ca74b768a8b4701a2229c1c5cea09b9e802c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc6be68e1bac51f1fba309ae42a12e94

    SHA1

    209f0ca2f7fa79f076431072e6bc16d07f80899c

    SHA256

    51d318800f93bda03474df8ebe85ad494e785cc9d072834f6ebe3e08a7b6ce96

    SHA512

    c27e3ab47f7a956c44d24e9c6ebff2e1046ed1d708e0b221f3ae629e7a9e6916b0beba4abd3fbbbe226ca38007ba45116a7b1b8f3f61f69fe878958ce5b22938

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cef877f3983261917579f8ca0f8e8625

    SHA1

    2e99320cff07c8f58762a869eca9460c4dbc11cf

    SHA256

    e1b2f8e120a6c8260266652d38b93317763acd5b7704c70c5b5707f008a4f626

    SHA512

    d4e28a98cde8bc1104e17511a62f74c3513e84bfc92d0ffd5a0d8694162b9d0f3aafa82cd7eb3ee6a3250713bf37118d98670bab2e0e6b76f007c3df6ae693de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4167f6915a15e9d18c8cbc7f5c817280

    SHA1

    8b6d62e68a40ad8881557de6b57cc10014f8b171

    SHA256

    de89c72ed2fa79e04045d251deba298f6d4b367a152615b372ea96b822d2fecf

    SHA512

    815cbf006e49b4abe5e75ecadcad1e3d9ce1edfae8b89cf5d622d50984fdf5f2a55cce5a996d898b7b2cdd7d612d64f45508a46e5cb6a496e77cf71856640d6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e968f0a18356409b33a42021cbadeace

    SHA1

    eb07039e86bbc791e44bc0497e7a4da9f52f006f

    SHA256

    268d332ff20195b8b210260003547368fa69e87de4783e25ad1f16968f116638

    SHA512

    65123b34f0d8c230aca2e928d08b1a47e0cf26bcefa1bcd5eca95647497972053b72ef14fedfe2855f803e5db6bf2c3b434cd31bea861e4560e13aa8ad3e7190

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb659573bcf550dba8ae92010f3267f6

    SHA1

    588fb0d69c207b7a3832bf069743130a0cd8e725

    SHA256

    46cadf39adbafb9afc9352135fea433327776f914b0d7e036ba6e0a54975aa72

    SHA512

    513276f0df071688b15f4cc576e0615f7087734244b02bff374834c4563285a4bfc50b4902cbb21979d10bc95ed98efd92e568871ffd2b85d7791b2e102d9c13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    46a62fca0aad044ec572ef3b153d15c7

    SHA1

    9e210364ccbdc6188f7a2f814f7d7afb4c6ae7d6

    SHA256

    e35e8d8f521f9a2d18ebaf75da92f6dc7d526a0562b9b9541fdd4de49b077b8f

    SHA512

    4c4902778ed13c56e3643df49e3715cd249cd87f911c5bc9b917d90aa24f4134294458e985364880bebb9b684cfea875fe0bb67987f489559e3faeff9b1147ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    579178c72db8bb2d2f90460651800144

    SHA1

    b1c19a4c68b4bc7529469dde550dabea98419682

    SHA256

    3cffa08bdb852e63459d59fbf9de113b396e650bb5f12e9c1c50bbd88de8f9d3

    SHA512

    7aa110b4b74fb8b289728af2d2143bf34d03ebc523f28fad1598e64c4caad17d011e2a49a1ad702c6582b71b52f3a8459c2b5d407f38bd1e3bb689a68f4dbb20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19a069fa88a504f9ad992e2281ade7ae

    SHA1

    04f8775432dfdd55154f131cd662cad9028b5e98

    SHA256

    f76127747db23da4f50619fda50eff77d9385d294cec8474f8c0589c466adfc1

    SHA512

    493a237b68bdb4e4ee0e3ddfdb76e14da90aa9d92460e99dfecd7a4c120b9c58a9d541125d56a74705952dfee0461305b2cec6b9641ba48aab198d9b3673ab00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5fcfdfc72930377898cc6b0b1d007de7

    SHA1

    d1bf8a90483a5e468151f70a22841fe9a05fae2c

    SHA256

    62da1191a13b51d20761b8b3eab73235df23c1f1ca84f29922cbf7d30dcccf5d

    SHA512

    7263f1f5f7a5adbac519f074dab2fe78313904a53ae9868d008247cb9f4aa8b0d0bd723aca37fc8ca7f855ba9582e7ae1aa782149a426839649be94b9ee1eb55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    328163e53b558fdf3daf595ad400af2e

    SHA1

    18680450780a40c32aa8809abdcc65a42722a478

    SHA256

    680bc64fd638bc342c68039f4ab589ce071513f6507ecf05f915204e1431b8e5

    SHA512

    5ecb26383ee0c60d2f2359f2ce8dfda150e55187d4b94eada29a14c005e8ec28e28c553d1e76ac293f27df872c7f60729a1975f7a6f2d9abb1d4ca077879a35f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fae70b0c130ffbef45c1bc34a3626dc

    SHA1

    ea026568b2dc87697bffc3c697a886eae11261cc

    SHA256

    bd14fa6c28a22a5e2c7a436416c7ec3ac83a54efc05585a266532bdac34fda99

    SHA512

    12f042bfd9ed91c14255317720e3f0509e791ad30d13c066f0fe23d00b241f89a2fa896fff9d8f96c25b16de64e2cfb6f324e35a96e16b7b6f12409a67ce9b47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b4c5ade5f76de7a2867118a690b5ba3

    SHA1

    44fc26bf1e0bbbdbd8edd30888d21f17c7faf168

    SHA256

    34d6fed791789b9c7f937ccabba7e561934a06651f42f5c0ad72158672e40baa

    SHA512

    e1717d3baeea76127aaec3c788a8ff1e819d4f214aa2096647d7464dfef882c087bf553fef9b873eefeb73b680582ff4524b480c318264f693525af0904828b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e587527f4033f0485e0a50834540bff3

    SHA1

    ad87e32e67f7374f501f356cc48edc075744deea

    SHA256

    9404b7ece7edbf64930031d8e0989483595c7f6f77ba00263e6899f25f0c68cd

    SHA512

    9f97feac0ed5e975a8f2791234e01f3c1215b4a7574a7f54cde2b8f782e1441d5ace7e69725b127526c3620ab8dd2d5969e91d0854198c30df75ee0768f5b498

  • C:\Users\Admin\AppData\Local\Temp\CabAFD0.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\CabB13D.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarB15F.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a