Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 10:54

General

  • Target

    78e974475c692c41a643593dac7404e9_JaffaCakes118.html

  • Size

    213KB

  • MD5

    78e974475c692c41a643593dac7404e9

  • SHA1

    700facd154c7a3a1f35baa64197e3e6c417a9fee

  • SHA256

    301af8c5adea477e11398990f9df883cc907e6660251539bd5b15a9ede41f326

  • SHA512

    53ee6efdc17f4522ee334641dcd024e82bd3c4e598f9668635fa53f0fa54b4ff00b31844b7ec84ae5f8fb06f2586c8b7b3791aef7a7649e9ce34537c8d8b793d

  • SSDEEP

    3072:ZrhB9CyHxX7Be7iAvtLPbAwuBNKifXTJ3:dz9VxLY7iAVLTBQJl3

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\78e974475c692c41a643593dac7404e9_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2192
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2192 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2504

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a53f122c07ccdeb26d4fb3751bb8c460

    SHA1

    03df2b99b98430d4bfda7b82fb7ce69680186e47

    SHA256

    1bc7867bf95179c83331d3ce22a527477608fccf4a0f26713848943738d02e4a

    SHA512

    0e64f35e8ab9bb8e1740ca49d81547033a02f48934170d9997434ec6b3bcbae76f17662a8d9bf3dafeea50c5d3496482f9d773a7c1d9d2194623b47ad83d4103

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6fb3e25d4ac6cba0c72f55f7d1cf7180

    SHA1

    82e59eeefe6616e35d6cc9e772c5ea9d2ab01239

    SHA256

    d3e750f318a09bd02a253f145393e57b22dd81ffa5964e2b08fe39f84865df4f

    SHA512

    65ed28e96a86228d2ced34cd4a4fd88ef0fc85002874ed06b4f0808f1659cdd7414f91bb5f86073904bb8e0eb1363bf3de8eaad1aa68c8e1420ac15d8e52d9d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    328f5d6b5bf0051955e984354f054e46

    SHA1

    f2cac055759fc9ed6501b8902d02af0acd4bf77d

    SHA256

    23d206cade706e7f5044570f2c6a090c5fc3a9680e7052969fa4af1407c38caf

    SHA512

    546593b7b490ccec1fcee77fb2bcebdc5d21fe46206c8df5378e40c0a6a79cb7b3c6c41d4ad36fd9f68c9933ee5d6f045f4162a1f907486234e80fadd33dc63a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d70aad78a2f302a44be879bdabe959b

    SHA1

    ef4f5cd0829ba4b25c2eb594d4b18731a070ffb9

    SHA256

    2e4326e6d7dc032ff1dcec77b1606b68979b2c37c6e6232c6f9c72308e4ca1f9

    SHA512

    50ee9cb2441ee98e9c0caa635a8cb6e12fca7d7f45738dd9f131fba3bbe69029757d3bab5105f3eb17254dcc3c2ee677f8ea3568299a49dae1f17d298c2dcd44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0dafc0ef81bd947a2aacf327d22b2961

    SHA1

    f6d7662e67a0b7a7a97096245c33431ff27d18cc

    SHA256

    a509c0623126d58e34e18298c9d14ce6ea1c04efc3779e6919137f20db35fbd7

    SHA512

    55fe5681874dfdbf4aaa71ca15a996a8ee42fdf4567df5548c7bb0a31e1b1ebfae1318a696be9feadbbf87704e87f510a12d710ccc2d0bc368d0ce7d929e4879

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c309daf5e169ef74445fa327e2a0c88

    SHA1

    6208379fd52b880b5a00cf75a8185400f4ef4143

    SHA256

    6ca93c0cd096b13a5931f67a0957bb34704672dd46922e3fdd75f89075e97200

    SHA512

    4a62783aa7f5a50653431b4df25e3fd56c03f899bd9d80256b664439037df52cd8025c09618801a83ede8c23e5ca7522d5fe3c56a581dac85de9cc8ecd424dca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9187a33f74aac77ca86bb2a66a44783f

    SHA1

    14e6bbd91c413d47a0d4f80c0721db7fbe462e5e

    SHA256

    47fb1ad12a0ccac6b124c8efa6ec1c4213ef2b259319b8f3eae0ab37fa3fd2bb

    SHA512

    93a8e010f868a5b280419b38b236a0680ea640e06d3f37c15ca2d29e1bba63b0ca9664d1879cef62149076fe83d0d2eab4455258d04e3e18f6d417e73abd5487

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce22eb0979c38db0f5725cb8fb214852

    SHA1

    822260ccf196a5172e61782a3ade14f57362c8fa

    SHA256

    9e1c86b7c1d879532d6bc9f16de980cbaa6f07fba573612529bc83bc3142bc04

    SHA512

    b6bdca829408fd28082d7d5c674fd5624220f06ef0f581345c65aba77d621af15e5edfbf1612a00134a2877ce893747c0a63981539a8b585515a50a90a50e908

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c33b0ef47525b8b13b4d7a8c6e8b946d

    SHA1

    fa404e4d30c53334c0a46576340e04a7faac43fb

    SHA256

    f390fd8d9f0c0066eccf8a89397e322bc18375e16d503a51f16a072a0da3c0e4

    SHA512

    95d534c6b7a4728453ef33af26fc1f03d67019a6b51bcf2252769d8fbc44b493cd3cc69416ee16547c668e9d9152436f18efa4c15280cf14969c36e052278afe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62606641a19ed05fc068d253026cccb1

    SHA1

    b01038e52dbbc896dfdd8f2be5cc784eb7d778fc

    SHA256

    29adac4924520e182d595c0adfb168d1efd8f04a3135a59d6fbc36564c208927

    SHA512

    656507cd5dc4845e4e83e2d93d9f757e7760a2e504deb7a1ada97bc862fbbe18f6e59c008c365ebac6c9ec78d7ee579a8aac690a25e124c25b5b9f5a95810af5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1cb996c6c56c1e1eec2847f6f50800cf

    SHA1

    a9de2c47137ecccfb1aa1d114eb7dd757113d536

    SHA256

    77eacb943d87db80af2c92fdbe0a778822caba82eb56397b0662eacb82becf4c

    SHA512

    ceb8e9d7220e81e660983c9be78133a0531bb74fdd0d0451bdc519247829168b22b4e169312cbc3876dbc0de80d25eb04821e39e86096db5725b930c3835ef2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52350a5e995dbac2f1f6a016ed8e5586

    SHA1

    c77b75a6493dac46a4b3fb78ebddc0d9086eb237

    SHA256

    b1398efdf22ca8a95418b4d7ba6bd311d15d909060eb87590f787694411342e9

    SHA512

    3b9fadd7553df0c5b2c68a8cf45a58c671a9d6a24b4616eee657a79d14e30574110f8e2e8493ba6284833437a81305741fd9318260d00c0b08d59fa8355926d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66551518267a3aab85b011d2fdeece91

    SHA1

    5cf2bc0ee2564c89edf57e0bbc69729c611e5131

    SHA256

    267d07c49db2315b5db09b099ef8f1111d0c603f045ce915475b38f6ff17eff3

    SHA512

    99d281b7b1ada3e963b5ef75160e2b3ae2f54110474a43ba62391c7d2456f9852793980db56f2cbd7c4bbc64d661b35e7278fe5f0dd2c2f5465cf4a404259ac3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28cdd51fa021faaf065c4ba0b617ce20

    SHA1

    d14832bb01f0eef288e289d73e3165466346c850

    SHA256

    91ef634269aa971a56d5af45c452b9f8a920385a03760d122e163ff777eeab33

    SHA512

    3742dc14a97765e407722f239c911822f4704a60cb65f41843d5db6bec359e98daaeae24ea4e177a5dcf4464a9e4dd5d40ccb4c6aed076233e60a23f85100ca6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4fb79c87d31b65af7862319fe017070

    SHA1

    18da532081086addfca23d784a9de7aae8401b25

    SHA256

    197b12f500ddd409b3c2a9936232ab2d7e35f5c5f7e35d5d3d699ad612115bd3

    SHA512

    d8dfdb958debcbf29489d01194c975ef7dbc9e45366515636691fcab6a95d3871b5f2a206f5df4c65d21d6ab72a3bad63f1ffe05cbb88fbe1b5eeafb079a09f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42ea80c348b8abedc777ae7f293a052e

    SHA1

    541b0fbe6e1bcedd4ad41bfb2491e7525f76e54e

    SHA256

    03664d7cab70058a46302b852fba4743815bc255eaaa7ed848a068ebb5eb8f91

    SHA512

    9f028be1fb03fcbb6328a807485c54361aff7b4a16aa5998fd66280259da41b722650fabcc2707589db5add98c15ec0d2d08fa8d6d5fc1c08f513a07e37e6110

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f2e7a216eb855ec0dca2d718e280d54

    SHA1

    e8f43349b421df0816556346ac2eb63d2dd46881

    SHA256

    f5149f73ac8f2f4ef185c9b5dc258f7d9b52b723449cf2f809d99df404101bba

    SHA512

    b099e2d3947db8a16490572442b85cfdbb508f9c5d48b60d86aebe7112ed3d71371f79b617ad2ae400accc7c9990e8be1684478af0ad296f0b7fc18259501d30

  • C:\Users\Admin\AppData\Local\Temp\CabB75F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarB880.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a