Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    24/06/2024, 18:31

General

  • Target

    0a25ab71a69807a35d3d7cf289efdcce_JaffaCakes118.html

  • Size

    53KB

  • MD5

    0a25ab71a69807a35d3d7cf289efdcce

  • SHA1

    6aa7464f1c0ebf9d488ad1214a641f34b36fdd85

  • SHA256

    cd207e98d5e23ff464e8ba91d47dcafacfac049bda809320c7c1ab1a806a48d8

  • SHA512

    9adfdb41290f0d57a35ce87039d13933aee9e72aa02086f4347715fae8327ddd1deda563962a8cd356ace99f569e1f3ea72f688c2dd07ee87ff7ee38453fc3c0

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUIrunlYs63Nj+q5VyvR0w2AzTICbbYol/t9M/dNwIUTDmDO:CkgUiIakTqGivi+PyUIrunlYs63Nj+q2

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0a25ab71a69807a35d3d7cf289efdcce_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1152
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1152 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2680

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    032f701097e95f2fa6527599a9ffe72e

    SHA1

    367708fee66d642be4befd30650a069184f58cfd

    SHA256

    b1345e7f8c337a853f2f4f5884a39c81b0dcc7a4a079ed0eaf8032cf23e2636d

    SHA512

    ece1b1326f5d70d47a971d043c6340b672885f288c9a38091e67864eb02ce70903459aeaa2a28dec1a8b025a72bb4d9bbabf2e84470ef53de033640ada080c51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    033c39d5b393d40d939ae7f3a14c2d18

    SHA1

    c67479b52a836feee78270d0189c39892e89913d

    SHA256

    a3862a7065c707c0612c779bf870f3a9736956775cc6226c2e673f9e885e0b9c

    SHA512

    b88ddd2f9b4e6e2e5aee484277c85b02fc57dbb72d2b1ddc5d2f0bd46817b8fb8738b78c3f23d76608caab82dc2b53d3ea3a6488283a010d23b07fb53e2dbba2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a9eeeb93b66d72eda62df1bcc2a6dda

    SHA1

    21718bac916499195d20f2aadd514f61fd392b69

    SHA256

    fac3099fae9be67222185c15509ad16381abcaae3ff1a6eb5501e7533a124e59

    SHA512

    d243a741bdd2f3f350fa8d37d3916b9e2c1aa2dbaec3882e0c369f8be1168f82464820c239e8b1915938ab8ac92c2bf99291e6cfb633120f94273cbfbcab6fe0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fe2f9fabb774bcabe1374b7d520da30f

    SHA1

    02da8d9d37f95ccda2ac6d282d9c7c99519881b1

    SHA256

    4f07e7543244b10e84b287ddfcb3ae96534d487a9581fd28359b5bb1e751f13a

    SHA512

    bcc376e8adf44adf08910aaf591ed62195a03ee9abd63e54f5af35aef72463ae92f78b7d8660e024f1cc95119c6701e8dadddb9caa33855d134d1c9b83c30346

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    33fa4c9536927c23ca0e71fe3c2a1ba9

    SHA1

    5183222189491c092f45a69cdc78c07af013aef4

    SHA256

    e063f832dc730014e48998f33e8982326d15128e004e32ead24336ad798fd27d

    SHA512

    e6f18b54b3665b60bd2f5b0365013088e1e5db50ad32818584c8aacc2f9424046ba642bb34cb3a29a3ad8446c555443d2034e0e6e0a302882dce100e1fbc6d56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7bbc7f5fcd047a118b89d8d7ad71310

    SHA1

    d18c28879cbfb458d9b620c64ca6a56cfc7a0e52

    SHA256

    920d25ee08869057acd99c99091712e0d4667ac529139e9e46a6305d953b3cf0

    SHA512

    d262171affcc0141ac1bbd9c6dbdb1d15f52966f3214cdb2f84ede38de41cbfc2fa2227787bcb8d43d3df2c65770fde43da461d0af3e1eb2b44bd1e5db8bd7f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1bebe6c3fba0500a2606f786bfc28b07

    SHA1

    01de83425babb6d64f4739cfeeeb04d826a2324c

    SHA256

    634cfd8c00943cee6f1bea7a65632322b0ee48b39820898c719c584a574e5320

    SHA512

    ca1d3dab4aba38c19994bf7bb692da3817914295ae25cbbb562e8eaa5aaa4e451422113a3e702732c3eed5e01d44f4562f6250d9e8cb087d093d6f9f1a9ca069

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1bfde25481a1429575762346c3b6f50f

    SHA1

    3f87064f6798fd8416b47bd3a56fe367d745e23a

    SHA256

    e4f8ebd1cb5a328e63805aa0009590d4f74fb61d46f83ef53f8437d3ecf5c43f

    SHA512

    f79f356ab14cff908705c6866c9fc305f50e75c28bb4642fedd0c717044ded0525f787519838a504f4a9455d1553e922fa0afde67f69571769b9d686b2de2c56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f1fe0a1341e1ac7bc065f962d39844cc

    SHA1

    de263074adb1a2fea8c5a3b1eeaa0406f4e6e82a

    SHA256

    6e0fa908100e1bc88197428812e4eadf0d5b714acbc15ee941f11fbef336b5db

    SHA512

    5969e7b2cf38f7758ce5e0b1eb0bdd5fae376ef88a6e6dbf1ae043adc3f336c465d262a9791c4c016fbece2309364852df484a234d0213206ce634a23f5c7d95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    124bf19af219192b6cb3b855f2e97622

    SHA1

    a559f2d870346c5b925699f2187a6747782ce8f1

    SHA256

    d11fb93dd338169ff1b17adc3c73ad294c8d1ad0fa1453a8d56610c44aca1d51

    SHA512

    a0b425cb37b7170f7501c5f66189215d586d2a8ca4920a1ead3d6de5233f24f309c3eee022ac06460ce5164c9622460c716435db1147318e40e589da090addf1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b235db8d88020a6f68373726ffc2eaa3

    SHA1

    1dcb5afa2f2bdbb97019c1791877e68711b55d4c

    SHA256

    c52344448f0150e17df37d39024e08faa03c3e469a0957d628d16492318bbff8

    SHA512

    bc8c41cfc75f155c6e5abb069a81729ca3d47abf61b2013d6345f400f4d07faffa838e5a0650a0c61ce26e2bc1d581f886275a1e571ccb782053dffe5f9baa8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1bdfea981da7cd513ad38a001dc004fc

    SHA1

    7467230379b577da017e4fb3f3cda58abcda537c

    SHA256

    6082426cd255278140e1699e61b81b9cec95c9611d8b7b42068b7bf9f9527cc7

    SHA512

    f4d538329bfd1b828ea6b7db98673b38da9a3bec12e9b0dfe6449f17cc958b8ef6b46a3e723f691889a6287faf609bb68b01d6dabda0273132f55a33e4919335

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d7fdd5e1c3015c5e12553214fdde09ad

    SHA1

    dd0217904c29916cd8d18aa5b48312c0c15db7e1

    SHA256

    778afd5ad34d8574dd3594daba798ddcd648276d7f648aafeb999c15c41bb00d

    SHA512

    c12df0043e1ee3f7d5110c2488e33cc7fc5b3e4e0978d139375b0349031902efbb816858d9fc310e223ac8a8b955fe341eb3f70de3027b3a6cb76a7f8b75ab10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35dffa2bf013573655fe8c2dfc142cba

    SHA1

    1cfb97496b81ee837285ac178d42eddb50f5b1f4

    SHA256

    0ee7e49b852cb4c1c0b6fac49c088a1aaf48a029e4380d35bd358100746bcee5

    SHA512

    ee76367d122348aadd7411bc15af3e9e73fc793bf275916889a7ee23be124decafc7730ca0af849ef02c0c64da3e9984ed2b200d78ea23b3a877854827156a06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41b113e370fdefe49b10a9a00349a8fd

    SHA1

    d6b6e9a0a2b2231c706da82110185e2d54975bae

    SHA256

    4476b0d30e6df6612c2e1641405a3598fc10a07ee23c3f3fd7d8af35bd8d479e

    SHA512

    01102582a98d0606fdec6136931b85c57457c606677983d18c34b6fc20f5357aebbefb34dfca5ebe4843f74dd5d070b98f6514d80d952d34c103b629e4c663c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1604460fc5d9eae3ee9c2b67b900187a

    SHA1

    b8b2fac80476843571bb789821554fe4e2237d0b

    SHA256

    a3907efc3b0286b302835367eb4085d96be2345e5be770cdafb497ea6ab5c5fd

    SHA512

    aabb90bbbcd90e4db0ca5181118b42f269600b21855cd8178c6a0a40a1a1aa767e927040174809aa5c72f9476c2775d8a4301a0515f8f9981c34528f567b6b61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e1c270265ec688fd9eb797fb2d8ccfd

    SHA1

    cc0fcf067c1a9f9baea6257f36e10b0c68705542

    SHA256

    5cb060b0febfa4830e7c1a2d7d4ccff9319a19856c36fb3369a483cb2b8e09ac

    SHA512

    287bc6367fcbcf3e44d7814c0e2857ce720d522e412f88aa0587815b8cdceaf320fb2a1cd8ac6fc56e1ea02afcd4e6a5bfef3f330efb00a92f8bcf36147eb025

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c1bd8183126e662f047ff6e16c0133f4

    SHA1

    d7e0234ced7abb869d305764b10a046fe23c7c52

    SHA256

    9be60bb3637ed73c7524e1c0c8f23334495886bffa6f14fd1535a57e33687be4

    SHA512

    5baf80d62c57b320bb4260a0ee1ba3a1f8c57d7758ba13636e521372ab1d1c24e1656a9e5990b291bba1d1bdb3c6e80a6e27dfb74665663a469f683d6cc94846

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\A8DU897P\print[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\Cab9A01.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar9A91.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b