Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 14:38

General

  • Target

    b405b7e9e0444505c6a342f8940238a1_JaffaCakes118.html

  • Size

    37KB

  • MD5

    b405b7e9e0444505c6a342f8940238a1

  • SHA1

    0f0185244dcf815dd34329cdeb71a41984795878

  • SHA256

    aeaaad363bb5bd151edecbf0ddb4b7d286c7c3c4d2c1c96f45dbbc203461be99

  • SHA512

    725d3afd86d07e60c7194b66fe3dbaaedd7460a5b02fae3d98668ca43fff636ea0fcceecb75c0f0ac422dde4af02b323e441ea8e777a3f090e54f14a3a5e46ea

  • SSDEEP

    768:+/qmAs6LiypowQBa9cPSBeyM1ru1rf1MG1rpqO1rq1x:+/qmAnityQr6r9MirtrGx

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b405b7e9e0444505c6a342f8940238a1_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1688
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1688 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2632

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2d361bf7a371759a7daa3b55bdb2f650

    SHA1

    8bfdfb0697041eb7921a9bff2075cdddf0bb03de

    SHA256

    c3263d4db028a4d2168723a2e65862242adc3a98139c9d9427266857051ef335

    SHA512

    2af3cf25bb1200724f9659a2a1fa2c64cc0f07d00c50ffc69b34398ed6c4df04105d20472f73074b545cc2363a7db3e75b5c61e77267900eafb6a789f1c3a15d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ee0307cae8d5c00ea8949724cf4ee8c

    SHA1

    d956230095c409049dbba2bd28a9a273b50c791d

    SHA256

    9c76e010b0bcab1144db3317493aa2b563e1f9401d9e1d88bd526fbdfc3c520f

    SHA512

    4379b399bfa01ff62882b8249973116b796cd7ea1605a7132bdfdc6b9ffc7ca3cf2bf6d66bc41ebb8282ef9c2e879f023b643b500fb6c6c4fa70eec392024097

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ad46a973f2f9024c79d6777ba0d71a2

    SHA1

    7cd977e0aba37143da6c48614cc92f783a20cf50

    SHA256

    f1f7f7e8834fa1fc11ba1def4f8b3fe5cab07c4a5414eab07fd321c69d53845d

    SHA512

    ea9e554ec8a833cb4f986c764b49903ece08d309a8fae64f608350af41428ce574ebd3349d76e63301c719c1c088d4f460a8cfd771255f240cf5b5dfb6cec07d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    09bbeefdf78125a6cff07176cd19da8e

    SHA1

    5646a06f135b649228e416a9819433be240f781a

    SHA256

    64157140704717c26ebc31b36614dfeaf7b16facbf10da8e27ef6549c907ce31

    SHA512

    99836786a1a79e85bd7d354edda1ef0e31ee16e3b2de8020ebe038c3cc54cb7341cd9b6ac8bd37d4ff34788c3c27ae59075b4bed50996b865946c86ad1067957

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a4fb81c40095aca4a283255cefa10f74

    SHA1

    8598f47a76b851069dbdd100861ec1f3178fc7d0

    SHA256

    7f99659823997a0102c65fb757b67ce5c40a67d320b91dd262da9a6b86f4c428

    SHA512

    cd865223b2ac05b91a2cff26dfd5799f289215e3c6ae7a6828eff32081e4377e21ae0adec2faa17dd410ac7ca6fdd3fa90b17ff79d0a18ca6411f5067152469d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    884c5d26996159224cdf334d8a0025fa

    SHA1

    3aebed3b360760f19a365712af27336f0c6a8a28

    SHA256

    1e59e2f55f646fb500f02d049c5723eba715807816e1a836d66d4370c7591876

    SHA512

    0d5b6154d72c7b21c94f7fc02e9ae86f6c479c53e61f17e69627842675e4115af7052da44cbd9ed3349082f2fb11139779c5c7f711c8e69a2672c2d1208528a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    286ae1846f84ef24733732ee94593852

    SHA1

    1d67ec35c0da6b0f7acb7a9711c9c12961ad4afa

    SHA256

    a7f583403d4af0473c42b98f6061685a5e617083b8e14f6f8ff573a66047c951

    SHA512

    c6cef605ef7a3bdc32c796c0057870bf5eed45b19d5143479ce028c7f3bf0c230f1c4dda417e696c3d79339a51a55e5110991b889a3713aee7c50e214a4e1b11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e48a97c3bdc981c2960082a74520d69

    SHA1

    0baa42f747767484e1dbf9bfc30b7b96de1c6279

    SHA256

    85a147f0f166f4c00aab6663a7e6ae33785059da390ff0a448f72678556f059e

    SHA512

    328789d94f4952e35aba2662a74cfa0a2fbbcc0e032fb01d58869dc1b4d6375915e7dd14a9ae966021f1ca655e82c64f0435de5c488964255767b37907869101

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ef592c4d9792d401c5b47ff64f19624

    SHA1

    fa33e32c07ab517e67a5ad040e7bfc7cb48e508d

    SHA256

    bee31f7d6d60d5fe0a18b21e53b531835a111a81c9f367a6a11a04f21ee181fa

    SHA512

    8fd35c8c0885677276f8ca7de5f43f4384d3d71ab6f73a98caf6cb44d7efb5797f06dc710ea12f188cb61517ec3bc388d280c18f98d1dace4c91edd365c4ad04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d45e772c354ac36383803bcd4cf5ae2

    SHA1

    64eeb31673f2bbf5797c6ea660535aa74311c1b0

    SHA256

    02787fd264b006470876a69e269103bbde5462dde3b415d09ee17281d8fa4d0f

    SHA512

    754c09acc4aa663b5d9d1961548243530eff5f2710639ce7009c88372abf4f096f489e669036839b1bff54fde359f70f089d617fb026b4f07183c6b9e2549a86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6c60b1fd326a292301ea96ebe4b2235

    SHA1

    0422a9e78d3566ea1f96a2eda05e4b5b0d49a6ce

    SHA256

    db3ff6b2d187a1d4f7c30c7ff057f2afe29f9718e91357f420e7198a606a6494

    SHA512

    af6b39b1396a418c058320e9ea730e754d5ad81b49394d2e08bb9ab2b3feeb8ecd34c3835557271f4f28a1a7557065b7c5211b6846293bc44b20736a12a8f9e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b88b0cdf790393d7ed3b411a7a62a2e0

    SHA1

    90fa74227dc68448ca911b06ff0879765833d1a2

    SHA256

    5d1b4878336654c54337660fd5ca5abb42c3f64df74e31281d534cb071296f4d

    SHA512

    1f79acc8931651aa345a9ca396fc78a8a0fcd23d28f6296fcef0455d8091c98e92986e775c4fc7798c5ea8157b8855d1c73fcecf8d15deb42c7b95b1418a96c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    435ffe18374915582f493812f2c00a8f

    SHA1

    c6412055762ba66d078768631ae369eaeb46b3df

    SHA256

    f54ab93b314cd9b97ff19d8f32f397c63cdd73b7b1f420e0d4aef818317cf60d

    SHA512

    bf295d8d2acf427928932760f8c56d7a1b3fd02e12b3c833ba032233fcdc129bc603773d01e88c3c0225074b1d728d7987afcfb31f8f05c96d676d060c7a6f80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a76c684b23ef045e30ec7a67fa5e852

    SHA1

    0955c7b45167bc8d8d0046a9fdc813ddc5be3d22

    SHA256

    9ce9c699ef6a5c8090f2b040e8442ee2c736ded25ba999494c7cb62787dbb798

    SHA512

    4e473a01321906106ffc200a93b479ac61d8f31fa19b671fd9381726c5ee0113a5f119ca996463a4a60cb6bf02dc97ac358c1410bde11071d4a948bd88c7ac03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8e0bce539dca1136f04eb646f85615b3

    SHA1

    7796551f581d9aa9bd30208c3b161296e33d1a0d

    SHA256

    c4cd4ddb739dc073a0111ec9ba5284c388e7136deb5b54c91c53c3f10a04ff97

    SHA512

    ac91d662f716deddaa173ff78496d7caaac881558f0f0912582b931df42413f8b8f0e9461dce606b388191a4839a9e2840f581838dd9b4a3f32db427aeb8edab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5296b09955bdfec1fcabca9c0c3bcbf

    SHA1

    6eb560f89120a39d8c7d167532d9c2724fb394ba

    SHA256

    428e2102ce904ce7d9a6741882732b169146ff592cfbe0bc8f9096dec38f4dfd

    SHA512

    a5ee326e26d0edc534a7a422ba652cfffaaf4d725b9c6ee7f29449ed55b725c78abd7f9cd5a5f5f3b69a5850304775e29f0b9c75ae1c06a8b8ef287c4755de2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9143642fb262df5e80bdad53e7509fe2

    SHA1

    ae770b8191ca3b6396504111b46dfb54bb2b1831

    SHA256

    52204152b45bb10bba5f5bd24df1b436eb0c79a4fbc9dc20dd4d382d1a37cd7b

    SHA512

    4f1b883586711ef89ca22035a60c5ed1d13b5f65f2e4a494f944b6a989658ba7c41eee7901b2c6c92206b680051fc14d7577c54f87971af379f996ac054f63d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae621e5cafa25c399ede23ea08f637c1

    SHA1

    f395bf1bd0f0baae007d63ad707f5a6c6a06fbdd

    SHA256

    66f44dc35e374b8e0ffc0e02a706066ad9b9676562dfd9d31bddb5729f8558e1

    SHA512

    627bb0da2883eb5ecafa2d1e73e2a102254265649de40f28f6fa71b35d30456258dbb21636906a3d5d0bd98a8957e1b84b423678efc9399c17a890e5e819a327

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd9a21b6f518ad70fa7e36d84cd7de17

    SHA1

    3b9a938916fb35f72d0b167705576eeaf5d22b79

    SHA256

    9cb69b08cd025b85dc6bcd3ab3b19ec1156ce93e953974f6da545541408bedf5

    SHA512

    6c5fe9af0b10b15af5037f935f34a8b35f4c54202bedc94c2b52acaefda31258952a3aa496221aad1520cf382250bfdcb94ed11c8fcd0aa361779660a259c1cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    755c6d535ad400a2a6ca137f05439a1f

    SHA1

    f32f21a90ba15467818ad2d77ea3df524e6bf368

    SHA256

    805f9b0a6824bc7711b261408399e31b4f7edeb101dca55aa3c7d03e686701a7

    SHA512

    e6754b45614f9818b5defbfbc03cd914944fa334baafa6e37a6ef620b8f73a9a549293efceffab4599e6ce11d2b280328c77f14d3ba82969b1dc8bede80b4861

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d818d79029aa4f43f6e4e157e9100f1

    SHA1

    9b54b624a20ca8a34073baf853038fdf575a42b4

    SHA256

    a0a360e7fc1f7fdbf0fe87c91e4984aaa4efb302750f4efd33513290111f7de7

    SHA512

    f46ba0a931a4f1f42e6bea049476fe1ecb39101afa6f676771f1ee9f777f66988ae5dcaaa10604c0bc9634accf597dd8199f524ef6bdef6338146684a4f8869c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f3eace72f4883173ebed2fb4163e050a

    SHA1

    286651aa7fc4a7d591d436e0a6f5889669b734da

    SHA256

    d02fbebf9a993d525358c5573a7521f2f3f8672ea1a3ae945849d1ee9007e3ef

    SHA512

    e4aa7a24af138311736db991a511c3f493bddc1ffd71fcd47e8d57a0438a5cb4d772acdd0ee97523cbd227ef2760c59860178127e59c574d8d877845e018c6fe

  • C:\Users\Admin\AppData\Local\Temp\Cab73FA.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar74B9.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b