Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/06/2024, 19:53

General

  • Target

    9611426a1873f1a0f415f174f803ed69_JaffaCakes118.html

  • Size

    36KB

  • MD5

    9611426a1873f1a0f415f174f803ed69

  • SHA1

    e3cdf2254fba685fb5430d6eee852cca65036236

  • SHA256

    0238d41648a3ef8eb942b85744fb5f7ac922429955be8faba45c5d091fb0f534

  • SHA512

    78afada435f1c5bfb0bf7dae0217ef1867ad7c332547bb8bf7e85160dbc7b8b6baf36db11d33bbc2781868d761653d676cac0759a665fccc64a75047c4cbeb12

  • SSDEEP

    768:zwx/MDTHXv88hAR3ZPXKE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6ThZOg6f9U56lLRy:Q/PbJxNVNufSM/P8rK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9611426a1873f1a0f415f174f803ed69_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3036
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3036 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2516

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    493936daab236ff01eddcad61725cd7b

    SHA1

    77b9225f2e92feae8ab10eff979d7f2986a107a8

    SHA256

    2a626183018a8d4b572c01fe5eb0bcb82d8b36b74694c7cb9ae47735b19ff92b

    SHA512

    d73f9f2f7b223a1a368771c45ed6eb7c02fd5386f6c2594edc94f646094f8aca758c81b1656bf7a1ff72f8e171b8b50bb5a2183d08113705c6fa7a2ae710960f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    f4688631fb794f87770d0e70c7a2928b

    SHA1

    a00aac70f1c7ced1ebcfbd0a873387e33e5ae66f

    SHA256

    758eacfea2f4f1525c3e174a5b6772d0676cdd35f95e9d820b7166c855ff636a

    SHA512

    72418a94c72ed0811bc8d4c1a98da0f9e2f0c78b34d1663333d6b3c23e5d49079611206b624e0d1bee85811de1440d6a32703bd38407f5f4e4d3861309a10b16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f42c0da2a21ecdea35bb03c3d92e38cf

    SHA1

    74c246ba3a75ad470c5c5b535d4dd3428b3c6f81

    SHA256

    155bb970f838496c319e38bad57a367f1d863667426d0cc1a8d179629d1881ae

    SHA512

    2f364d039805e55fdf94992edad2f85209305931d5342d2450314970efea7bd1d2e59009dca886f66a7c1b668b6197ffcccea8a7a97adc2804df32407e6c1aa8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b17063cedd67e383f143ea0b9da800a

    SHA1

    97aaa27551d3319c60cd6a08f1897fbc60b90158

    SHA256

    c04c8331d1aeae140cf4ef40012f140753387bbe0bf7b03aee4c4239b6b156ff

    SHA512

    fe2bc91742899493ac330e598326cab9555173d9d74d788f6c88c03ff3630feec6872b7e8334487d98f629bea698e6f3a54f5ea7402efd1289dfaa5b5ce722a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8933e24ed452068ac7ea93132761bcd2

    SHA1

    92c9a3ebd9fca1b20fb123c521615337f7cafb17

    SHA256

    f223e679282d4b765a53d5b434c7a8833a453b5705468049cbb30d200c29556c

    SHA512

    a814c2f5092b4902b5df16dfa3a86a31dca451ba386929c08431f1f83c64f7b4dfd296fd011d9f5e07a43a5bb30d7e08bc4a60ca335410fca01a0bd87e6b5dd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    90dde5f2a24203fc85cf07ce857f812a

    SHA1

    d458458fdd39ca3d7d5801c4a68216000243ff5b

    SHA256

    e77849f70ef3ea472412ff8474ffcffabef98a230a47be24450c80950f730f39

    SHA512

    c6846c8ae4333d369a88d8015f1925324bfb4d9dda2983d5e6f6764fd5d1a25ec5682fbb6092a8a44011ae9e1f8c0969a1d1a29a81fc26e1d1ddad93c1e3a0c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80ea36afa5d7a803210519c9f82005dc

    SHA1

    19d8b2927f2fbea22dd82c786a83c213e9c5461b

    SHA256

    0a161e55ecc6aa22fea5d47d873d2e6af75a02d7361886b572a4d037a25668e8

    SHA512

    8c5471c0799e1a9d23e9394f0bbcc12cb36930efffb47c62736a308278adc7fb284c227ca52d54be44d8b74965ac546dd7a6efc4ed32ac50d6c9bf583f433248

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7716254913e47e590f8240036f0f4b63

    SHA1

    7c382917cc21f883278cd153a90d21faf187cd7e

    SHA256

    577725e4da9adcc32c7499cceeccdadbed44e630cb2b6f182a3ce3340d20b73d

    SHA512

    613705d647a7514e7d7641c0ff318f1c16098d11a50d4c8caa8a2e9be915aa5e3090375b48eb64b1bc6b6cd454521a7c899ad94e22b98f4918a12e744ca28532

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bb57a5f3c79c13d1007ad5dd37c36635

    SHA1

    c53e99ae5d024882550cb93fb5b0814a60f75707

    SHA256

    76bb82af7c296cf3c18157da0757b4d70ec14f59419c54fe2e744f057c2bdcf7

    SHA512

    a61212897cd39d4db3d26819c36bd69f6a722cbc5df2d48fba97675b2818c2e18288621197d48efcfa612e7a0c76b291a71285a6f828ff9cf43be44f75d727b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cfbd4e45fc0e958eae0b5c9f7509d2cc

    SHA1

    8620a57d2e740ddd3240fefab84aa17755a41592

    SHA256

    83c86ee138f58b380e932c064a941a41555b3aa64ac8f49449a2fb707f4a9da4

    SHA512

    272354961f38959232235542ad0e2ea4df8e22074b8bf5458be5fee1b0be5a23d643344e2a8bff05d24ccd090024f62253f613abd824ffb0d14c0d8196905062

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37d9fd3c2e5712c91273f66e9e29d1ff

    SHA1

    59c5d2416785ca9c7307eed099e978b553bf9a29

    SHA256

    dd01b858aee774b8b0a98bd9181924cd8ed2c8442f8d0af5f63e70559c487042

    SHA512

    710e974afa84a8cc7c6e78b8eb2119e37c5e5a928faf020e275e3d2e7b8717ac3c36bf3b352c35cc3e3185284af3ab5616c4b669b7ae66afeaeb3fc3ea437aea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b8549eb43e32ce2c3d789c5044b7f9d0

    SHA1

    7c11c463837bb708d3418c6550e234f717baa8a8

    SHA256

    df9e11757f8737c941126486af1d5a941d4e284979d3b0cd732c2871d98c7480

    SHA512

    60128d6ed9a0bee7f29ec7ac3afeabf4b2abf4e87063d56146ca00194b3cefcc8cd44ca2445b51b7c5084d3d238281a78fa6bf4ee8baeee0df0c988227a624a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    38a390de8487c1e8e9ad0db2e22e3d5b

    SHA1

    da9f737bd5ceb5d2d3a993819675dce7ef20053f

    SHA256

    a50e6d22bc122784a2974be6811f49033c54e70554142cba83e5e8bcabda9e87

    SHA512

    441bdb117bbfbd3a75939e7a0ef379c9420615d079f8f900f5a6f894c4ab48ed0060b6bdf48bf8e2db3411018eb6aef8669238eed9ef442fefa1df577906b9a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0d8b483d4e24f2fd9cfcea2de8f6517

    SHA1

    e0c9042f5639e29e82b7f7b8337dff791cf4f004

    SHA256

    2153ed43839df8a1d112dc85088b388331a7bbf6208a379b5c65f1e9d5be1447

    SHA512

    91fd55ea8fad575e34f7c1db8db601feccdcec7daf61c4c73d47c4ada30586f11c3f96127e759508aaa1964acf675aff3d61b7f12dd9cedf209eba879e68526a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    a5a24323de1b7d87782426fff729c4a4

    SHA1

    aa9c89a8d7fa379f83110fa73e6c7105868a2d85

    SHA256

    447b574da18d44ba3d55a1f06e399afe5d9d29c20adade47f875ac226ada15d8

    SHA512

    8b571b41c96fd0adf422970165c2096cb4d08f6041f25929b4cde854f9ebf76c1f407d88fab3379f6b4898be65f4d2b590a31d0cb38b4bf4d32f72007389aada

  • C:\Users\Admin\AppData\Local\Temp\Cab6E9D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab7140.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar6E9E.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar7200.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b