Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    27/06/2024, 13:04

General

  • Target

    161afb3d89316db017598eb570ad440d_JaffaCakes118.html

  • Size

    10KB

  • MD5

    161afb3d89316db017598eb570ad440d

  • SHA1

    6ff61488bb107345c4f69b6f508b4e32403739ae

  • SHA256

    d99ffacf170157aaf2757e5c249159853b33d9ed104c83d5c0b4ada8df34b853

  • SHA512

    0e8bf0694e16897ded8f13576e5984703b3f4f61e282e2fd9917fce064e25f49a38910af7f7af1bafcc2f66c7e357ea9700e406121ad3fc09bfdc3844421df11

  • SSDEEP

    192:2VolIsr031G8k/w1wvqLkZSBahngvSor001e6uBuLbdU8d:solIcu12/guSBahngvSor00e6guLZ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\161afb3d89316db017598eb570ad440d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1992
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1992 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2160

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e0980436c95d6c72996a940cdaae49a

    SHA1

    98c3ac659196085885fb59ecdb230863b2050592

    SHA256

    1da284bc29202b4b2d02df0b1457a3663ecc18b34af88830fd2625e2daab36eb

    SHA512

    e5db0a4aebd7b29a897eb8c67e7d5727d8794056c358f12519b984d9b78b6cd1bf96218ef1116fd5c160c5147de78bfc111e04d3f9c175bf03e11aaae1903c00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b5f2cb3619d0a9a0e47973c19b98bd1

    SHA1

    80184b9f52467bf238ef8d750f605fd5d2e8b487

    SHA256

    652a2622be12153df6d91e2212e090d28c843d9da48662340a4558cce433fc43

    SHA512

    a5534749bb74a4f508a04ecc5b7922899d0ece21fcfe50db8cc850cb4a602493283a8f164a7c7a68ec0eaade26afee7fbac865999803df5913eec1e9355c3873

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8d429e391e4139c6b22c77ba81ce70b

    SHA1

    489f68fa4a188184adcc3a11ee36c632995a24cc

    SHA256

    495c1a5a62742eaa48f53f1b1643dfd5bac05bc50bb59262eb44b84b701005d4

    SHA512

    598648ab411d036807a446fe100ce109df363272f52b58b2f3683b8689e7ccd9b2bb97b6f375b89f5b97cc1ef632d2b4c3b520851bef8d57565932e3ef56af82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c3342e0feba74a0ff4f770918d1d4fb

    SHA1

    ae47b31e88d663f2d4a64b7d1d12ae1f1ee2fbfc

    SHA256

    4c0386b3abb77a580eb1b45b54fb1ded8fbf3332030f80db6aecc6c163be6b76

    SHA512

    c01c466d10a40d29fcaeb67fd5f12c3f0ffff3c23a0739e558cd3e843369f30142234452b8830650393488943a709d9ce538895f9e5e5c60a3e5905dd25fa2a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3278e9c5fd8cb82fb5cc0dfa5362682e

    SHA1

    43a49ca2c57f4e365fb7f01b3b416170cd1bef88

    SHA256

    27b8004e6d9e0c747ae7ccf22f80fccc0b9f92d7646b5e6e90500cf4218ce690

    SHA512

    4886730ba7682fa3cc56499ccc4b5f856e17fe3672905110824fdd14ed96ea1fe0449519d61851c726ae70121b1b4dc0ece82752a17209f894cc61b32971007a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    828d2292aaf142afabb7cde2529a538d

    SHA1

    5aae56e729c81e02b1510c5c0c1e7a60b2062a54

    SHA256

    e8e38deaa76b4b6d8bc0382a0ed55576fc605013f35fe0c4cdd2ee9cab684036

    SHA512

    a7901ed5412332a94790f6dd0284e57297bdbbe71ebcc5cb9a91c5ce207221395d7dc6dd73449b860b573d967746827bcd7afd854662587773e6e4bf2eccf45f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d4a0e27ded5974cca5a1edab6656a87

    SHA1

    f7b6fe0c403cd31813fd56aa335b935bfa3529b6

    SHA256

    8254e908c7b399c3f524ca26ec04b41cc33d425fd10945b6943eebddf841c95f

    SHA512

    e2bbd3babf4f2b23790ce95af728c9a28bcb9da93f26b22e1ed60ac99598706b53527e7f6f8d878e96aff6b47f12fd6e1be58f71829d4c1df67db9dc40d6a2c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80b20cf587fe854e7046fa97bbf3dd6a

    SHA1

    bcd970ba15f178cb201e284500ed1bdef37878fa

    SHA256

    d64d0a6898fd66cf2d1a6bd248ee061aeb663700606a1384aea193feef0090f2

    SHA512

    05cbcaadf32378160faa914a1c21f6d0574fb2eb209fa6ebbdab335104ff0733b5debb3b3194b8ea5380c11a68bc0930e5c82403bfb10b8f70893dbabbfb7b40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a782fb9be34b3b2f57deb41b6682dc46

    SHA1

    286a2495eb3f51b51afdf03d2e9be916f1e0f3b4

    SHA256

    cee31b5be79a5091fedcc0c3d98996a7d63d1931de3db91dd91d0ffb08daf335

    SHA512

    27d38c5b95b0acf3b5224c0537ab96a2d7f4b54973774314f74b222a45358b9884f972de4783a3da1e5bb29990f98f3c8423e55cde63087dd0b277054bb1f199

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a058357e33facab5aac19b5780067721

    SHA1

    b464d9b7e9a8100c3bd06758ddbfae9f4965b820

    SHA256

    2f382e5d09193077267e25d82c795ea47808d675aea8104e34db9d6e24198aba

    SHA512

    5bf54d39f215707ffef96a18ed3d9cb5c0b98343f17397b693ace41ac6746faf0b65de07acff35b9679659006cabd2c6730b102aac49b93a63f05b01bce2b88c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac2c3489277f74fd4ef4f5d847a7f1d3

    SHA1

    b680c67f65212d1da4e8948176ac4ea5b0814293

    SHA256

    bf1ebf56cf2b6ab9bbd86f0fd07eeec0ad7cc1dee758b274860596512c149d67

    SHA512

    d1ee0296f1a4ae77a913739e040834e2216a4d9e05fd534c3ac706279f32fb11c27b3548740e225334033f38e665f0aa918ed44232ed653d737b4795cf447070

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c1706a469c67e74b030065928acadfed

    SHA1

    1c4197affbe05a8478d700fc7893b258abb18ca8

    SHA256

    ef0b529d756d7ad124ad75c3562788c9827bd30d583fb675b8c372cc7821f5a4

    SHA512

    2aaccf888f8ddc760b2ba400c00d253a8ca4076cf2a13d4563ebbe3543244f760d152d25914fdea831df4e1ae5f42a6b1052971653acdc058fc87f9b50ecd6ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b1df2c2385114105e4f9b83cb043bee

    SHA1

    b0f65c7da98324d4f7813224edd91a1f562279fe

    SHA256

    620ada512b06a2165dce168cb9cf354c55f01ce82909af402ebd5346af983fe0

    SHA512

    49c9493c523bba19699fe0a45907bb523e51648b06fc7ad590d2217c2215106fc65321b9373f9c2c3859f7b79cddcfdcba1e79187ef9a83db68e5ad4101df80f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e76f68a030a20d0bd52d0968c8932d5

    SHA1

    0bf2da43df4f203ffe5ada84f981678f159194dc

    SHA256

    84c1cd1a6b49525904b702a355c31cb6e3d5465605779e5529a608f27f4e3c75

    SHA512

    dc7c92b192026e7e016a38d63c56f831a67f363a324209827538bfb0701276d984eb89c3054bfe2d85312feb9b5090a65a67ac097f841efe57fc76f6b62f2aed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b6168a5cccbb0112a9d203614a04f1b

    SHA1

    2e0658cbdd972a159a21da1c84ecdd8ca709449a

    SHA256

    dc926985a4192c131de83a66ebee40f30fc200f8ec04909f39af1a2f46f8dcde

    SHA512

    fa2798453218f4f2a9b31d66c32d94d6d2f3e21b1528c6abba4fed2d7aba29071e59adbf912c770d06b23525a9176def70a1082172b55caf435f666244248291

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    20945a0e78a9c74c54ef73f4a496a1ed

    SHA1

    30441d7f05502b09049557469c5857eba6f83b74

    SHA256

    0e26c6bf58518ebf79adc0bd21fb19c5e17ad80cbfbf39bb1f99e55ae36f70ac

    SHA512

    d5d8bc6bf0036faeaab26465fc71e4b09565a7d60299620109ef796433a709eeb06cdda86de52e63bc65185b9e9e4fa22f373ed7c525587315ef32e1fdf9a8d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba402f02fe619d3427ed1149a5981934

    SHA1

    efaf9eaeba235af8499a9add0b09938839bca662

    SHA256

    b3b9ed608a5d10fdbbb0b590ee60c8b5dcfff224b05044ccba96559e18e6f28d

    SHA512

    cc769fbf3349d36f6ea84d9e4063e2016a033e288982b3276744f84690fee4872d9a7fb8503683fe31ce3434bfa680ff5511414e75e95b56231c58afd735bcc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a764c598b542c3b223d40457b5d46023

    SHA1

    78dd7ad3f20f808b500c42ef94e6097e47fef9c7

    SHA256

    973f7d19e53d79332ef7e412489876351296aace01563310e07f3fac0b19db21

    SHA512

    d1fe8fb2a3f977daa7b7d7c96a9075b376bb78e7c01fe553619b99ecde82e42de54331298a48422f0852e44b5a9de6831923729761f83b23abb9ed7b05133a5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8fe901d6a23303f74f17778f19a3fa07

    SHA1

    7b45b5b8194d8f814dcbb7cdf9778fe02e5940d2

    SHA256

    f95182c93428fd3846b77db62dfb18af86dc5bdf0d1165f7d5e334689f3655be

    SHA512

    c1f65de1609115d2cb4a9d85b47e222e5d1ef666e7148421042009a2a582271986c17d74c90a632374a6f87ff07fe80a313142ea7a4c654b34db47ccca946710

  • C:\Users\Admin\AppData\Local\Temp\CabF8C3.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\CabF961.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF976.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b