Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    02/06/2024, 05:09

General

  • Target

    8cfb88e09e3b901f338fdcabc590412a_JaffaCakes118.html

  • Size

    47KB

  • MD5

    8cfb88e09e3b901f338fdcabc590412a

  • SHA1

    29a1c7d20d23a96ee1f918cc803e9061c00eb302

  • SHA256

    d902a02f85e8bc5b2bcb3fd1dc270eba8cc28ecf66c507546b42f8e4b37854da

  • SHA512

    81a40fb7b2453be066e40f45827659730a827ea387471fa1d54c0ac8fb5567a2d4e8a721d69aca9b73d8c0c04d3c56170908cb276447ff35d32f94e0e3c7cf5d

  • SSDEEP

    768:LlCeCeCeCeCeC7CgCgCgCgCgCgCbRg1OeSi2Lu+X:Z77777cVVVVVVCRg1dX+X

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8cfb88e09e3b901f338fdcabc590412a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1728
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1728 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2716

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b056df73c7559d94be4c1ddbdace7c9

    SHA1

    bcefc312e2632c70d17006f65c0a82814b74afd7

    SHA256

    135d74597c45c803fdcc3619248829186b95ade56326fd0fe530f7513d506a26

    SHA512

    8a82ec1640852963f228cf3cadbb8db28f0b14e4fb74a13657e79d77f36f4c417c24244bb1e5a0e7a112de18e9b64c240e33adf6dbd87a80948882f4e4b8ead4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e3af5c74de1f93de516a82bed818505

    SHA1

    807aa16ef20ff140e7bd237ecac374160d12bd61

    SHA256

    a885413c32c99dff43ac8568ce5ce27cc8f54f01b292f9bb2447641522a3c524

    SHA512

    75ab2df5e1631102ea05354bc7b139fcdf07be3c69999274b49a64a35b3e8db3ef4d3ebabc10d5c92f2b82ab2723531b512337c9f817cbb40433c01f58b1144f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8e1559833d35d8a96b5b45a1c2aaab7

    SHA1

    7b56d760ab67b936df02d8e7abc391b9eae31ee3

    SHA256

    fb149ef00ac06fdd8938386888c44efc3140a02d2ecca3afe89963688ab16754

    SHA512

    c2a321943d14d5a891b9016f2fb09e09d73eb7f46d6bc0f77a554778304557880e5227cad1e5a4030fcf31ce2a51e42c4a65c5bca6a6fa571263df95b36ebb79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f4b52f80959fbe3715ef7fc12ceca59d

    SHA1

    c3b7619cd12aaa6d72fd1b351907b42229452f15

    SHA256

    3281f732c383ddcd3a114cee79996779860ab21e95ffe05e10d57f497544a1f5

    SHA512

    4cd170a23eb4848d81803470f704f11397f564c7be147ced10f2db2958d11f6942c24b58ceeaf59279a9e25a2b829fff9bed843ff19d5054b8a1559b3ff089ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    01273d59445e22e6283f6b042eb37821

    SHA1

    9d7b4dc44aefed5c0f2db6a3156c58a161c6fb8e

    SHA256

    9b15b99e461d578e6938f873e74a6bb75d5841225d7f1ee5dbfc8d58b80b053b

    SHA512

    6551bf08335c5c128daf26543461d5020beca2f8862b533566eb53965c49175764d553502c7829f5aeaf245ef724266633e96d750c9de08cf6347ffd615970f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9914098ff5686edbee0bc41e8e9b3069

    SHA1

    8a380e1f964860f0379c9aa6fb751957b1b4169b

    SHA256

    fefc6bd0db07d2e0c942db9f89583ca338c71841bda50a32ef72dd3d5bed00bf

    SHA512

    f9391f00078d03da0ac7a98bf5164d045f18dd43893252bd8a026e70e498fb66795caa6a549bf6aeb1f6376b6a30e5ed21c03aac43f89c3330b2d5a5a5b41fd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e0b33102fbaf25f219ebd17386fdccd

    SHA1

    c3b88882346d6e9d1ba84eaecddd57dccf76b0a8

    SHA256

    83933f182d99b9e7ba3f86aca69a82c04a520ce0a26ea37363796824bd45c14f

    SHA512

    d5e53b6db84074b1da08000d72216f4ea6981f00d4def9dcc58cfce90783e7f408488eb21403f741938ea1a6d01bf591ce0074540296e7cf7291076fed583880

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f6e0f98e168b5ac4d58892fddb20628

    SHA1

    909932f306593e7ff71190f56ec8b4ef31e60c4f

    SHA256

    80aed3ed9faaca5033c52bd90cb5c5033f1fc6802ee9f6dbc5e1b01d8ed4ad71

    SHA512

    382470081453fb331d13f4dec4fb75e37cec84f881cc31df8030dd237ba195b074b1eda5e1f96b533eadb4afb0ded67952a1bff8269c3d20e04a30c1c5840544

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d74c12561e1c778b0b68432329ee11d3

    SHA1

    6d598b10f68e43deb95deef4ac1482b578598e0f

    SHA256

    979ca50cc491285d6b836b554346e9ccb1ae5350219369c198d0604af2ae423a

    SHA512

    4933b77a5730248a988135bf9ac394483a9f1c92f4f5295d340daf86e4646d498f9a5712cf2fe4a69b78869c073a4e1cf97c1222222535c844a2ecb5296d3d15

  • C:\Users\Admin\AppData\Local\Temp\Cab36CA.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar37FC.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b