Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    12/06/2024, 22:58

General

  • Target

    a2d12f699abd1b208932d6a7e79198bb_JaffaCakes118.html

  • Size

    31KB

  • MD5

    a2d12f699abd1b208932d6a7e79198bb

  • SHA1

    26f9889abee11e20a18b50c044e5a304298d414c

  • SHA256

    accf39715a152402ec633929b637acbad52dd928ea58b9d846bfa41d0f074469

  • SHA512

    07bfadcc06aebcb172a16fe3c1cce76a05c03756ed23d07826e05841c62a2b64a7b5df822fd44e3f3dc5704ef3fdb3d8583604ad18ea42d79cf0c355b955a8f4

  • SSDEEP

    384:ACk3GDG7GaGNG9qG8GtNQ/EWSxSQ/jOC8:ACk3GDG7GaGNGQG8GtE

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 31 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a2d12f699abd1b208932d6a7e79198bb_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2372
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2372 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2980

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    903e6ff370c2da3dec40b53f69cb7436

    SHA1

    54969ec3e986e7c4f0d5e4530be1fea6e15b7b3f

    SHA256

    3a13876f63e7cf17eec9f93ddc7df0355e326bfeab32f5bd1046f09d2e5b9321

    SHA512

    5d7124fb8e584fc94e7084d0f45fed2d5f8a1f10b60bf8af79b6a68eac33a91f374d67edb0c80152b733ac332f3e283068f3fee6a686df44247fbe46343acd2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd79103292bf4dfdad3fc65a12686a49

    SHA1

    f0c2d78ed0dbc10a726bc3454c46c13507f1708f

    SHA256

    b760feb5343ab8d6c2caeb01d90a537b72eb040f578daab756d8ef85d62711ce

    SHA512

    889bcec150c93ee638aaf2dd0be404699e787291013e859183a9c8289bf2c993df22253521acfebe8a6e1a9de92656bf65be45c9033c6110b2b68e55fc50f33e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68ea6e69617c519381bcc1ae4abfa236

    SHA1

    d72ee7539d76f08e8ecc76eb4bae2a2b9d4489b5

    SHA256

    aec410f372859d7daf50d9a5dfccf03897d5eb38fa86551a4405579773893fe6

    SHA512

    bb252d9120fac51cbdd6979dbb3547648cb0f09a7501fcc0ded6f01ddb5a97b1fbf734a0fb8eaba600ace406ae772504ec923dce21080478673334d3c271f656

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b118b09167dc5de2ec57118ecfc0bb7f

    SHA1

    51694cfd09686f2ea3e755dae61eb8172908edb2

    SHA256

    c60d51cb9ee91f7cfb9ee0cbb1d703caa19125fc6910202593f22295543a7b46

    SHA512

    f9e3cef55ae8244b5deb4504e1ee2a1ee350b454abd0774b1723d35f8bff9c0f4ce69f041c0f135c077b8a3c27218d1c51fd4eae4e41b618d793b7c741fe2316

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    585057bce5129484829314d54053d8a0

    SHA1

    a0b600a85c415905a7d73f5e4faa9a5dafb7db33

    SHA256

    22dec9c16a6e0837699dc7c6179f1f4c2ada40afc028b7611f75b33359d270a3

    SHA512

    54eeb2b43370ddc62d7c7288d339b11b879b4456e07fcf18ae00800fad0a41168aaef529f2211223cd64a7931acbf3b3316e01de9ed47bc7f511c439431c1e2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b5f839b189f0bc4379097cba1c4a69c

    SHA1

    2bc3d7046049d38d16964a92756304403d46ef5a

    SHA256

    f95fc10c5f192c75f96a62009b54e8ec7e53466b19d25ca856a7cf0efc7616a2

    SHA512

    8fdd955794ac1c3a1aace896771c04819824b3d0abcae7499e304dde7d4090492d434049f1276a9adbf10029a9e30ece75a20d5ec181999c08163b5762ffc5c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c58ed13d127938d81ee847f7ff033a64

    SHA1

    1d98f1b30e32b03b1242b85ca39682756e0f42e2

    SHA256

    89263a5a209d30963ac0159a17a543c26ead857ae7ed363e6caa9ff706874614

    SHA512

    ecbcec6045b3a2963c313bbaf759f79d69621d0aa173ef4fabdc9b755ba357866fc05e3277eaf0e0faedfebe51ef0cd27ab395cfa29e4024ed1d82af4dc93baa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    69fb67a74e620a62af5d46672f7e387a

    SHA1

    ca591cff86e1c57b27b04747ca715249245f2df9

    SHA256

    b9c22a5f15f839004e3ad966499a4dd21a71058e50582686da97ade95a1fb93f

    SHA512

    969cb27b0a08d4f45d4eaea684ee455b486c7994eb77ee141265bfb936e8fe9fe918fa78f7cbc7749abc66b4b95b07e1720a6a6bab57d8cb7e248f66afb54663

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f663ed174df98fe02db75fcebbcacc6

    SHA1

    83a6878ad620385806ebae188241f4b473a0ce6d

    SHA256

    e475bf37dfcc83b0d98b34d2c96b241a178682123d8aa8a488dcabf406584df0

    SHA512

    7254bdd7c93e99abf67551a2057d00d50ad9d97da3a749e11e816da36c333f356e85fd695fff548ec62f44d7de6d37e4838a4fb12773dd61c634b34266c3a06c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb6267e77e2eedd2e275c53adbf4cfb9

    SHA1

    c1a1e70e2a57695556c4ae543de0e695bc9435d6

    SHA256

    39b7b4b9d5fbf83907b3eeb941811b515b89298864de85c26d0c5c9b08ebc129

    SHA512

    ef98e72b64f70c709915601cf90d0eb1330e12f2be2497b78b83417c48fe50586232d9872b099b309976927b39f277d694513a2c6d79564cd1318f1bd53c4de8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    7c7ccf9f70aa5df84f8a7586caa3adc4

    SHA1

    4ff131ea650dfe45ff350707e61dc1e42bada315

    SHA256

    cc816240b176e411b91e9537c81e0c5a4bfac398ac38ad50a6cb667054967cb9

    SHA512

    5d8980aba7c393c258eac462f99b6067527d1c6cc875485e508e54a72043c1876f710710d6a0d8c143b2e7b753743594efb160f2cb44e670ffd73be523a94667

  • C:\Users\Admin\AppData\Local\Temp\Tar257.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b