Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 17:58

General

  • Target

    b472dfca84d6672572429dae21fabdf1_JaffaCakes118.html

  • Size

    350KB

  • MD5

    b472dfca84d6672572429dae21fabdf1

  • SHA1

    e6c39b82a11ead1ab05c217cec8a17ae57ade1bc

  • SHA256

    fb6b1140a78dd1d8dedff4e6648487ff544685b25890aae567c93e8861c8c14e

  • SHA512

    587a86183a6388c0cf193df97338b9f07bdcf6a39c9219a8c7d4c1920b0313de2cf74cad870fa70e04b49886089093b62b3e0c872dc9550e10581eefe0b7cd4d

  • SSDEEP

    6144:SAsMYod+X3oI+YPzsMYod+X3oI+YAsMYod+X3oI+YQ:R5d+X3x5d+X3Y5d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b472dfca84d6672572429dae21fabdf1_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1688
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1688 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2192

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    884e58790b9067688d72988936a39ea8

    SHA1

    31d9fc14f72f2aa02c19b3be8c7bad64bfa716e8

    SHA256

    3ad8cf59c06033d6ab5cd857f5ad9257485f59e928ee27c87708454222c7a210

    SHA512

    18712baaf528dadde5f4032fdb42691a46d8e231c15c8b053943790c00e44a6cc184a70f9233fb2ab348922bdd963c50dce99610db25cd69680344f5d791191e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ffd1c565364aac661d0e1da747b5a4e

    SHA1

    4b1d7fbf03b049ca4f91281c362cc1e936a37efd

    SHA256

    7f42a13cb669522609cfc662f62c6aa8642427b567f0453d4aee9936fc9eda40

    SHA512

    5ad10faee67e9ebaeb353ce7c4bef73cfda376254656a9dfb73b98d6a75d975901c668ae4c7238d8e70ffdf135e2571de22f67016ddf2e4cb6447d46b553628b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52c8bdaa6afeb91539b42d9f86f7a7fb

    SHA1

    581645d1ed64ba9b91a063068c5e0058b4ec1bc9

    SHA256

    ff0959511f36d2b716539f22f688cb667eeaf6aa599cac01db91e6efedfc43b1

    SHA512

    e4a1c6b9b4b71614fdf4194a79df1b65630dc2742c726e4b55711be5e2793edfb12dd1f47f32b7e4693ca3bca53dc04fd0dc0cbb2bfe91530010021d474bb561

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d6c5ecff65d1a013aa5e489376655fa6

    SHA1

    cd4f8408e8c2448ec210aaebe0309538654bb5f8

    SHA256

    51ad1fdbff10cc23d262426fb78b6f4f6c05112316bf4b3736d563fe7d4c9aaf

    SHA512

    5dd61b3496f05c62d0f3d010f593587f016255699b64dfb73ca6a6c1e55c07480eef8abd1fe7381901f395d9b3c23a6051d83090b4ae1d6225b228ef68cbaa09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    59995f989d5e4a004c97df3c9fae743d

    SHA1

    fdc18f3070802c586ce2930c3c76583997ca4647

    SHA256

    ca2a9cf8c18ad28233c8b398ffeade23ad97a7a13ff4fd874cc15f7fd09ebba7

    SHA512

    9c7b2333ba47e54f495ccb3a9a7a6fa37b082e4865be5f7200b415aa662aecbef0e61ec874be00469c15757541e1bf8c235b554efeeb73f81a749d2a7ae8bba5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b736cd926f2985b32faf742682f1611

    SHA1

    53444552409919d9ec9fa2138c7230b6944711f3

    SHA256

    87e0a68cff748ce5297b9f44719bf61bbeb410e2bdf5a6c265db63e8e776beac

    SHA512

    90d68605a592be4bab543c35f2bf4016d772fd899480c25448c10ad41f13c6bb7aae96d725141dcc25aca3841f49183a721d68a39c2fb8955bcb6a886e63e34d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d59f4466bd109d32c0424fb9a1e9730

    SHA1

    12f058728011679787b669a5041956ff072ac8bf

    SHA256

    0704699694a60bea7e3dac097c78f2ee70beab52b256fcb6213f749586520485

    SHA512

    a5dca19486d6452a7446b1ac5a292b311922101d1d26d81bd4ef3f861246eb1b63940b518ceaf928d8f2abdd5add447a5c9f083a113f2c3c9d24ac3f860a063c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f55ba7e4c2a256281cdcb65ae67212c

    SHA1

    8eb607ca82689dc0db12a576948391c57379b143

    SHA256

    84f1f4c22b5ce4c857b691c07169b151ebf493907827bce421954add0236e4f7

    SHA512

    9d5068c01c9da7ea15fca5aa0eb4d2b42720fead5bedd785ddc2c138cf011d124301496060d519728750b2a21b00ef6c3b2f18471185120a5b5b1393d056704e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3235356c23ab8131e89c01943132e4b5

    SHA1

    22379f7d7d13ff9f11c9ca2a5c16ae2a039049d0

    SHA256

    5f138ab714e1b5188afb68fc82e790a7ed12799548c5b10984958cf1fdc58aeb

    SHA512

    9788dbfdeb27cbc3bfebae6bbd12b07701aa6e5ae1b05de0cec7074e65adf7c861bf4566607d8ce13e42b09f04c60ab1db63b0e085a437d8a26c8d5c86469cbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    739f91f3079bc8d3abcc0a98d91cd78a

    SHA1

    eeeacebff3c2a6add195011b0c19abce2c36f185

    SHA256

    1594bd1f465b2e07e5185433502628e70ef89565aefb91c3ab07cb8966dec8c9

    SHA512

    9c1e22670816440e5fcd2b08f7c1a456c5ced4b8eb6046062a1457fa0053f7fa16e0d6c4263c13c4f2a615c0a2e3bc8ac661a0abdb893bf1ab72a20a7ce49f67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    08fcd2a407fd43e66f60e87519a80660

    SHA1

    6e977da3a6fc005483ebedcd0452bf29904b9385

    SHA256

    5cc506e27829d1935d2359d4122c93dde97e2f288682c7b52aa03719a0e1bc94

    SHA512

    14690d779901072dc2ab3597cea0c945eb479f3562c932da7f8967f182591163dd8d1164e2ca97bb06502656bcd49949d0f2da2708cbba74a129344b3e6878d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    82fd964fcf2a5a6c479f65be114a5792

    SHA1

    87bac87758f1a3b00cef1aab87bb327e2873c2fd

    SHA256

    b4115dc2c5c9d976ff710124b8a81dba3ca412895cb4f94c8eea07de2a94a521

    SHA512

    c6dbf1fcd737d133c2b0aa0b5047a7e3a63ff61bd9dcd50740bef650a909ca5f50acebf0593469788f40ea3e85de646f1298da3efbaea82b2d816e8731d4937e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    803057286a470f8a665b0834d00f67fa

    SHA1

    21935d8a59679322bc5318c3a552ce1f73cb65d9

    SHA256

    a9a55d79a9308c8deb32ace69c83ff62bff4e654eba935d2354e93267d1f018f

    SHA512

    5d5c232bae3ece4bfff84914318bb4e3c5bc54c5a06de5f1dfbaa0ccd59be63062df2fac065c9f66481039a4253aa6fe38575998ae27be8ba861e528ae735d7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc71a14aae93040aac71e4b4416ad14e

    SHA1

    a505f6d21138f9814e3c15a8598c73af1a109f39

    SHA256

    9b78329aee766ea7e672739d2eb329b68cf5a52817554f4c76e673539426ed9a

    SHA512

    593b86683be214ad3ee52903ee2495a3a4bf0610f4fe801a47f4a61ae0a4d3b55779bb6248d4ab731e2f306fd67fc1bc899eb48258fadf5c3c1cca69a66b2c85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b65ec3a62a69f8a5a2deae68422ce9a8

    SHA1

    129ec4284892b660532ba3372ad7ea166d8315cf

    SHA256

    c46a68a795d95067e1497f95284e4dd3faf9b91688399af95d9d2d450b4a9d3f

    SHA512

    4baa588230106fb94c37d750fc4ec1cf2621bc2b2c479a6207adaab696bb2cb3104dba32849e14250aca2e74dd74f03355b957257a574e44c26f067780a228d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e0937f5dd0a11c66a5b435afe71f7ec3

    SHA1

    b94ff23209e8fd600817537c01e2fce12b5f2b23

    SHA256

    c5ba94938e5c176da72d5ea629812273bbc7b9d0daa734a4c742c8bc8a275dd4

    SHA512

    7c669f395d27b0bd7bae307d8011a76d6681cc448a62464ba960d43feb648d947ddd8259351a8104fbd7a372521f586a01d76dc881a81640f8336b7d2d4fe1a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    caaa9bce291ea83817adf49d6f318889

    SHA1

    edf7ec5aeff897ec5e70386479a39b5422f0f753

    SHA256

    d562e76c826a29e1076e4f2beeaf941cb25dfc2758dfa3ea8c6953adc7c622d2

    SHA512

    9367c7a1662eb18d12fe19c700d6b9ef4dabcce66720566607afeebc4f0dee644342e3a1b62becde4639c534f3c9ab2deba34923c5dbf1b5eb91eb4db75d7e93

  • C:\Users\Admin\AppData\Local\Temp\CabC0E0.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarC1E3.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b