Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 16:38

General

  • Target

    79c567330d26b8084def3c92753347d5_JaffaCakes118.html

  • Size

    4KB

  • MD5

    79c567330d26b8084def3c92753347d5

  • SHA1

    644e38e92e93934db0feef5cfc2a40581ddfe45a

  • SHA256

    4d758380be6b6a2171a45dbe5e312c9d4aa96c4e729a38a6600cffcf9092f34d

  • SHA512

    f185b40a83e3667b21b86c242380a83a997e6ba7a51493a9eeca9f9283e6f0e83b712d1cef4971ba869a94c21dbcd38cdcc51db98d1133a6b30e3e33302e7dc9

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8oWbd:Pk7yY1aEFHVKtF37sNjtXATIQFM93pDb

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\79c567330d26b8084def3c92753347d5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1640
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1640 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2304

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a1f4be87a6de3d1a8c59cc1a955504e

    SHA1

    de032915d7e98aa86b99e400f1965c7898618981

    SHA256

    590d805bb59d248098d8e16a22300cb843ac74ac760abd77f787984e7b84dc06

    SHA512

    151f391566e3e07f0d1409a17d4c68e1a6399595e6d2e735670e1c5ac3d14f5e57d37de75920325da32cd321c1f594e241825fafeed4a745141666ab70c515e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8c0bae265e9a7a5abdf995f0598ab4a

    SHA1

    f22f1de4ea6f03c755108d587c7afc62a1ed6478

    SHA256

    9af9b72ddbdafc33f82701629edc92b0ea99f0864fec20879ec96cd1a99ac1be

    SHA512

    12aa50da2a0d944bc3d0780d15b50dfbb90e8332b15a5f70efa5834848cb9888726cfe822c67f16c09efdad7ae443631a7439e210696c6beb3cc46887954836f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57e8592110544277d2fb928e43a77c6d

    SHA1

    b105a9335839cd6fed20606b1f5b777116524fa6

    SHA256

    e95b03b993d971177a861eb14da216ed762b25d075b24b8cecb6c4396adb7d07

    SHA512

    7c092fadd6f42816c822ed026c251f32862186880a77856bdde8f687b7e5dfd88dceb2a1afea8088503e5777b970cf65a7d16b3f9d1edef559176afd6f6d4f67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a46a6ce3c8b1a9eea86aa7d8d42d906c

    SHA1

    5f4c1c8f74962b173eebdcb42d58054791850c10

    SHA256

    0fc8528a4a6527f88e47daea0f16b5bd5273a8c2402cc03d42725e4ce2f64b47

    SHA512

    a9c96e2a280c84ced2421f82b0807ba659d68f7c5563ffdb352ece7edbeff77e1f005d5b648adf03817de6051eac3aff60815b78dcf1153eeaa8acd010f7650a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b7d6f63b07248fa31b056a6cf4cdb2bd

    SHA1

    af04ec1f8577384d4d41733e09007374e899c02b

    SHA256

    8389a14b676f49e693adc0683c0863cc0cd60370eb26e16e969208ccf734ab35

    SHA512

    7412f4d79a5d37dec2c0050900e51b43c616d6ca479d2226fd26a99fa69c0365059d36cfd15092e88406d2a52dc4c946bba2949d4b568112078965e49be735a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e15136ea4fd268b04f5c9a48c52ab7ba

    SHA1

    f08f72072774c5b7e7c7c666ad82195b79549231

    SHA256

    b0b438122cb0997babd086254ee4a9b7541bb298e89e9af3b498dd6ea5291c5e

    SHA512

    c4a1c7cda8d14b8a121d36cea4bf7fbee53d481850199cfbbef263cf0421264789f174479393ddf3b9007382634159f3c9a0bd53beb73725f045cf99d3599d64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bbc6a259289c7a2e33234191df511a4f

    SHA1

    9a9cd771921a57b9cb0404c22d144954521cf50b

    SHA256

    373ccf1394178581e149c820f5487f274ffa726179b150cc63b43f08e39b8ad3

    SHA512

    eff9c26fd90bfc23d25b1d400612980175d6f992238a71990b9863998eb953ea8a0a19e54e9cf49cc4cc8708e9a1883d0bdfc074a9bd401df0f57afdf6674b7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1c24935c6cb225d1144464f7ee4e332

    SHA1

    4a39b09217920b36e03b80737397f16ffa3e1229

    SHA256

    63da57ec7222de962b9f7cf2e2a7c7180b2a1a18fc758ec54098584a6f2aad58

    SHA512

    746b16189ad7c3a3c85c5c08bfe45409fc5709072251a16459e419578c2252307ee7c88d2c3804a1974f823e52c53ccefe84633db19752804aa2473a645511c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f2e98d975d9107a1ef4cca9cb3fada7

    SHA1

    f9517a263b7ed960df02e78522a2124e769d75da

    SHA256

    072367e6398ce982d16650b93888d0d1a38d80881b48faf2799b0813a77fe46e

    SHA512

    262275dbae31b0c5248a1034ff6c554bcba509edaf1ba67682e4beeca2513e60c9ff2c3e9e7ab34b9063bd4662cf663cb814060b2be53ef4afc6d7187476e71d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3a49d7f15b007202fad108bdb868592

    SHA1

    96d3bda222ab3b1d39b664828f4e714e0cecd447

    SHA256

    3f36d2d599ff532f3a95da4019d81810291c00cd732c912001ae5fc9542d2312

    SHA512

    f99c00c81f4bab1373f0b536f6c2f0ca79b0c375d976a47890dce2a0f3f1adc6000430901e0f0c85f5e72e8dba4c959ec9673f188cfac180ee58b4ba4a1a7882

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c59fe43a16fa936ab084008bd3c9780

    SHA1

    f933fd0bccdac9022fa58099b00dfa89c3325497

    SHA256

    367c84ec4a023d7fb61d0197a2aa5f4d80ebc12e9864401a71c58a1f1de312c6

    SHA512

    9bc1054a35e0ccf4a570ea7bf70a5da84cd8d36d5c98e9750ba083c0dae4d977021756258653d0f1df0ff1c7046493e6ddbb3243901a2f7ed2a185fcda0e83be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c32ef3b88d0c56055f5109a145bb945

    SHA1

    29e5f89c20306e617d29551f370f750497685390

    SHA256

    b19f5c6885b49082234e435c66016442e1eebd04e6be98f904a4ae048a3cd7b7

    SHA512

    89a5bdcc72248767239441ce815f841b1a930ff828ac660495d82c9c5a7f6be291c03963f4dd0f74a89697cdb5cfd8d03442ef261d1ed1f70a83ef34e182d4a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d87d9c1c333b82af6fd88bbadd0648f

    SHA1

    cacfda486ef3a0edb8feb52d96e33c02ef85b649

    SHA256

    a0b50f2b198a54dda4989a3d2969829c19db117fbc28b23fa46c389061b87582

    SHA512

    5ee4412ad409cc25ae11b7dfb2cdba9493ec5202055c17afbc05f45afab4536599416bec01ca4c7b311c9157383f44b6ff1fe8ab635da121127bb2c22471f463

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a645a181481ba83c4271e9745135ebd

    SHA1

    f57b98a4cb7a9d79492cca5a8f6daac43f4c5c09

    SHA256

    0918f4aa0dee3f54a20afa96af77febfe5f790c222cfb8f9be2545df055fbf48

    SHA512

    7fd6e9ab5681eca12c5db1789442e9ab8edf06107398465aeff7232cde88307c1bf678481ff1b1a0fbbc1237f6c9ce8752907f10bf1632a1dad20bd5fc32202c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d25d269ebfb0ab0ac5a104f5a217f393

    SHA1

    a016162bf3a81aad09581049ad9a660586819d6b

    SHA256

    d2bd972c2196dd1a304963373bc1bf3217141d6eaf3f7f2a21d90f62c2f2448a

    SHA512

    ff280683ebd531a1f0015478248703cadb1793f4f4d441d5b8a0587eb0b2f799693edec3a72e5dacab482c4b03d429198910b1981a065a435c949c2d1aeb2074

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1027a301b9fba5907231b8a00c8a2b9

    SHA1

    ecc9672cd88d00059d081fe7c7354fcce5c3443c

    SHA256

    e6daf0a7e04f2f5e54d0c24cdf055c842ed01b4bcda23bf3009e70ae95739a41

    SHA512

    e149643f1ff9633a0ea0cb2aaa467ab61556816452d2faf68866f0ed6e1a6a5f87e083a8ed4de9e9820964de973700490dbe4e3f6cfe2570eacb7f43affa3262

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    296677633371514fae891917fa311e7b

    SHA1

    ffd6ae5add3cb781f3e16e37bcd9a5ab1186840a

    SHA256

    e41e606193f200108bb3bb0d0457b11ab1e61e4ff252041518dd62e4abbf746f

    SHA512

    bd8baa058057ba7cbb5c029ee1f90abf441f0958ff0ac9c8dc0da8771ea3d68ec88701ebd57893f836a60e76cee395f8f2d9e819d65d128d0a8d69c3a2e3b18c

  • C:\Users\Admin\AppData\Local\Temp\CabCE78.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\CabCF74.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarD044.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a