Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 23:16

General

  • Target

    8c1fb40edd30274e63b2748d8f84a7e4_JaffaCakes118.html

  • Size

    49KB

  • MD5

    8c1fb40edd30274e63b2748d8f84a7e4

  • SHA1

    3459eae295878c8408444b2e305c098c3bc85505

  • SHA256

    9378b8e7838e92cefb5437066b4b4247e687d08772dfc274915aeb4813fc479c

  • SHA512

    c871144a90a9acf28f561c8a64789e1c1400f62951e7f6298a1875cbf6d5ecbac7b49557fc3033a89188116156dca6d8ce0a1a282f8fa3a98bea2a8507028594

  • SSDEEP

    384:E+dQVXG1t+/YpY+YHY2YPYWUBOYi8kCZu+bTTguWJT/1TZ1i0vtDjC0lxSvXqeDD:EvBo8nZu3FxGsxIXFKxRxBDQIM

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 26 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8c1fb40edd30274e63b2748d8f84a7e4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1676
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1676 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1060

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    97c23af2569ef00b2b7fde6a20417d84

    SHA1

    f619150d831521d798dc05d5d8c55756d7b1dcac

    SHA256

    56651996f5c0d999514f70191e99807210cd46b7df72459627e4bbf7a4ecddb0

    SHA512

    3aa4a584b1d429425d3bff37089b5b0c7bd7f66f250701d3b5bbf8dd80b75d96e8702a004cdd00db329fd146cccc1b4c094b2103c8461af56e7443ef09dd8bb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    356a9ffe2893944e797db4b49046c205

    SHA1

    1306b2252e7048623c7f856a067f3b55892b6bdb

    SHA256

    0d0e82683ab1da337ddb49d0c075ae518a5ad4e4989555974ea37d8fdb1c5936

    SHA512

    2b85db3064a30df43203a3232fd82b7cacd0c8a5dbe8c17097fa5f224b1b6512ec5428487e01fe4bfe55a4b01ef97c4524b641f0dc42828266aac37e68e30d94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d28aedc609747a23ad97ad085dfdaee

    SHA1

    a78a02033c7d9f8695c8bd5790b3a94831d5ff75

    SHA256

    ab54d762995693a3d0c0dae5ac26c9374e196e205c15e0c0938ff4fa5a2e7bcf

    SHA512

    4bcc2d3a3866b96b0f06af6fa4558835ad96e89b0962e0617ff0e626b4bfdbe9e1ab41950f55d5b9d71d3d12c91a207388f0af12849968cd276a3cac6591bb9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    041bb63a3a3df4ede57f554afb65f9bc

    SHA1

    da48ebcaec6ab8002e2a5210dc4d14f444696d30

    SHA256

    d437a34632b522c1ca7bf666c2b5fe11e71545f0cb6b52bda45127d06ab4838b

    SHA512

    fd2730e44e4b08ff11431499573f2b12f7ce99da5987f291bd344a5d614b961ceea56d250f1dbe98119ecd5b26bd8d53003fe3947682f476f4a860fad706db7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b15eb47b4b49e2a261ea16398e06129a

    SHA1

    76e0990ec48d89aa12d047e7f3df8a259cd4328b

    SHA256

    80a7ac0710865a9fadc3ec432097572d66e6151f95acf19bfdf7611cd095f9a0

    SHA512

    66ef2fdf75e88d269c1e58f05eeb64284ed4edc1affabea35d027025e9d30e66ff61349d4e480fb365abe839f05eb6e95b65e7bb54d381b8c11260fe012dfe29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f4d28b62e3229c5b7cda9c7a8682da2

    SHA1

    abad95f17c69e128c1af7703c204a476dea882b2

    SHA256

    4c074ac7e57a10adaadb721165c3417bc9e10328aba03f6d7a0507f9f82910cd

    SHA512

    ea364124fded0d91ba86a7df43e88d5266dfc9df2207e72caceae8a7210ff0c11a921962a64121dfee379f54264517081c26bdb2b82d3925abb88ef8b9fd7f47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2de92bd46e7b7b2f37d711c170178340

    SHA1

    df9e38872a716fc7b74ab6703ba692c639b65d16

    SHA256

    8bffe237d5968956edcdbe9cff17c9aeeb9ca946429305482d2ca856d00c9b2f

    SHA512

    b5379513909c9318addee4e8cc50351485d6eef7e9685d5383cb1f60871b5215d0b1fd16bcf94fb3c3c98e797e64381b07a09a67a2dc7d9801cd4b0cb8dbf56c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45ff86b8c5c2f60b67078294411ceda8

    SHA1

    983f0880544973eca464ee9b42939788e7c31f9e

    SHA256

    cb62dd58fb563cd6d1d758d844f33e6c3b3049479b2ecf9168625a654b6ccbad

    SHA512

    15af941f688ce59f504939b749568308e1943b02b7d03215b01b0049177ab0a73330a26f389270c113700e9dfb4f8d6598d7c2b445e9cdc7655c795e38d57cee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06b832f2f69ab5475f2ee92ebffa9262

    SHA1

    a3151315f5a72fbbdc978bcead4e6ee21a11f098

    SHA256

    153f2afc0cc82e5c54891131f363a35d6f816f458198b5aa2e4c743391f3ab1e

    SHA512

    870f0f89a14b4f5f00d4a00353f5a88842cdb3ea5585e099b3e06488df0083844312337f0ec800d316877e487c43593b4da87c80396244a8664ab4e6781d6c78

  • C:\Users\Admin\AppData\Local\Temp\Cab1D62.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1E53.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b