Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    03/07/2024, 12:22

General

  • Target

    2261afd0510313cc03ba4c6414694028_JaffaCakes118.html

  • Size

    53KB

  • MD5

    2261afd0510313cc03ba4c6414694028

  • SHA1

    b03ed879346785de23f820879bb61fcac7702a87

  • SHA256

    cffe994593c302d3d919c5305b750f3e61707ea2dd2d03749db96b92054d2efc

  • SHA512

    ffef0eb2cd7d449cbdfb309f7110f4442223c4e051bd69716e9386ff7ad37d9c50df7e3db9d3560153c7da0cd3823925ce65e838129decdc3c4b9912f1ce33b8

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUarunlYR63Nj+q5VyvR0w2AzTICbbLoK/t9M/dNwIUTDmDP:CkgUiIakTqGivi+PyUarunlYR63Nj+qv

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2261afd0510313cc03ba4c6414694028_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2188
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2188 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2184

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    20ca41dbb192aa12b15ed8e00acf353a

    SHA1

    6f8d635f5c817a604afcf41a07db0b350bbe4b0d

    SHA256

    72512f245f290d2944862758d3ce8862e0d2f242bd12d329f01059710b4c7df2

    SHA512

    482401a0b67bce0fc905ebc3be7059187eeabefe3ebf918c1103633c32bfb66ef27728b866d2bb6fa104042961e9af227c616a9ffa14b764306e8f69d9db279a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    02904dc28305e5b1a47eb5e97fa54d02

    SHA1

    6a5800d8b2a5c27718c5a632353604830221fbd5

    SHA256

    bda847fb62be975e9a50b3b16b5d18ae978da527504fb9137e4d16a2bd95afce

    SHA512

    cb86e12155c7bfefb28bc6defae7b2a0854a9823817479c7091d1f27d117bcdbbe0292c44eaf4b18ff6a91fd547550dbbd3c8d9c1edbb554ea527c4347804237

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7019f892937382268a25244e260b4779

    SHA1

    947f5a75f60291cc7c3190a7ecc39dd31b52d2aa

    SHA256

    942638be1628f09890a2846ee5a53f6f757568e1b9d6f9d049bba9e43763b303

    SHA512

    dbbcb79a5d8feeddb856fe2a8b1a68e795c7e31af56af46485e9eca9a4e8bf580443223e16380504bee33e4a2ce32f4dc086b11bbc4bb9211b74d8e3a7e1950d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cfe4b50a5e72a3d3ffbf4784d0bbc7f0

    SHA1

    f06f8d47dac069e8abf4eae6bd1811f36b5a6e55

    SHA256

    4916a9b5d2cb9efef59252e4897c12352714d15a918f0ebaeabe2ac724c42e8e

    SHA512

    2c6aa69a9d2b7dbcd79df7fa3eb3f0b43b9e52c931dc40b7917ab87176c4834521d13c670a4ea8d43c0d5cded500d77e49f88ac4861ab3c86cb1bd3a3533f34e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1249a0caae39334c2c67dec0640f2dee

    SHA1

    45439616599701b7275f4650d6bda513bd6ba245

    SHA256

    c9988706ec2f4085540861e69c029274cf91c6498a0ed3315c941017368b1af6

    SHA512

    0cd10a933d941b6ec7bc9894774d5aabae71503220181eeaf943612599b5380dd5f61e49387b07e7e90e59080b381ef0e36c0a58127ba71efe44ed4d41bd144a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00dab7b0ebffca3afb25c55b17b902d8

    SHA1

    c663a5a1bf1824c20eca6c095c07caf8c49c1441

    SHA256

    d493420a44844a1ee63ff2499bd7b1e22df2e181ec28e6c9aabf6a603188504b

    SHA512

    5fca75b03840b95265ac6c73f1afcc740f04d2c49463573a751689f59849b16fb9bf31f1eacb9de6c8a9cbfb5a2bbecfc888fda7d57d86b5d8a9f05c5bb7abcf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc0e95e11ac1501170e4d0be652f404c

    SHA1

    fb1716dbbd3cbd61648b99fab5a22a5e0327672a

    SHA256

    71d61e9fa131cfbadb75220bb1f41d8f205e4e2d96a5092cd237c30bab7f4192

    SHA512

    76a69810627ec92bd67fe92ee6517fd524fd92e54e9e6ae2ab0b72f1af5bfc4595f7a38876049e07b12f548c55a7ac91b85115fe25380c6725ce41dd86a23d9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7138d0be71515797a2fdbed8093690a

    SHA1

    a17a30d4111be97efbbba88d32f1843cd89298ac

    SHA256

    f3376725e8fe2567484412bd2dc7f679e9b8cb95e2ff0ec8333289811315c74f

    SHA512

    7c3eb41664ae889bcd521d27a36b13cb6f50d61263c793c4365fc38a165306505fd08c70cdb76c554682bb1946700c6cbc28c2745c3c00c55202c6039195c54a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11ecd556e42a457cf9955fb912868d67

    SHA1

    67fb0f6de143c339df07f9083ef0d3dc94893fb1

    SHA256

    c6e9700f915c3ad8379c1e21bc5d129002ca0cfd10cf6fdd42cc0ffb9ec394b2

    SHA512

    27690fbf682566b64b7153273e36b65d5bbdeda121bf6d03ab37d234e1be09c43adf833f43b79e2c66ef5d0ce4c72b9114923cbd20093edda1f11feeaeac9f2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    55ca430e0aa403ebc50b50d7657ee4d0

    SHA1

    21d9fc99a404caeae5ca79d33f5e93d7e759bbc3

    SHA256

    5837f9306c40102c1e56effd5541df64073a1b62ae49c03173a02b52a80dd5dc

    SHA512

    bd3f66d0cf2dab97db259fe4a4933de7bb1c395c6484096403fa41ce2a89bde75f10152b34b0df3c65c59b94193940707e2181f8264b07294b439daae7d974d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b810aeaaddb887877a14451f69076f6

    SHA1

    715cc98d3582df85891260ed43532a85ced97747

    SHA256

    910b85dbea6b09f6f38796ae830dfeb4c016e21c88ccbfa1e82fb5ff79a99644

    SHA512

    bba15dfced5fda6cc63683b337fe096cb1dad3c46351499000b5df715b4daf7f8e66e308dd6e30ca39c0478a55608747d29f3128a75baaed833898ae755e794b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a823a0dec2b5bc1ce7d48033e69cfd8

    SHA1

    3f182466afcc4c66875f61d6b829cab93b9f59ac

    SHA256

    25fde0ea3843a78228b49751b4daf3bc80622427f1b86de76e408725a625ae03

    SHA512

    9796e8603173f7a3a6746ab0ce2c2d4425b4fbe3a8b3c4da4c5fc12b51f05ba0962d0f2c39819fe22f7efc9eb8cc0f27f3de9644c86b26e6cd42067e4eea837f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d2117c8e9a9121f713cfdff77091d47

    SHA1

    213f9103e8a8f6ef83b722a514569c795720bebb

    SHA256

    e0897ee064001993c4a3ad0745346c761839f2179d677de4f98c249f37337703

    SHA512

    cc52e8a16643b9f3cb2564f98e490d06b7b54977f93391ce35e7b9276cb0c902bc196ead33b30c3295b2288f75b81fa1250da08dddac5407d5015d11d7a193dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    04da48314fe75a2423e9dcc9d981fc3e

    SHA1

    6b14891039a8a1e7a8ca74450cd6234a34478627

    SHA256

    3c14c1c7c158a256a6466fffc28b82c369cc27a1e1b74282a096bea147a4833e

    SHA512

    b4644da8b380e51e19c3956866dbbe52f48ae4dc131ad9c3f6f5b1c846a00978c9cdf89009f3aec9c3bb5047cfc163e82e5391199bc1e5e6b5c7caf93ea22daa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    afa93a68d3e3b0a29d21ba627a67fef7

    SHA1

    b8cc438b779e1be4fae0599315e679f5dbc885a6

    SHA256

    c11f3b26c77af5baae9bd6b103a69c8d69b551563f16994dbbd4191e4a951704

    SHA512

    a5e2329cf2fb10edad623e3341a677f53ad4b0e2342b9da005766324c105a0c69ef796209e93ef9c292dd6a37936f59cf9e7b832fb8b601a7df12bdfad6179fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b0170740a067b5b3b4319aecaa079534

    SHA1

    33f817447c6079d7c480e327a1808f12564b8a4a

    SHA256

    fdc1b70a9e7fc5834e69edbd2e2f739f0d0c7fcce6f735cf1f93f858359f5605

    SHA512

    db2daca9ff722802f76d19380aa67f1042e5eb91de02a8a1b0d0ff24a10e64a8de83021ba22ef64b8ed42746de6b1d1a18660a33997b9156c62c3d2a0b7e0b28

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2XHJXO3H\upshrink[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\Cab454D.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar45F0.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b