Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    09/07/2024, 21:05

General

  • Target

    31f8d63a82b2ef22adc65a71e2c622c2_JaffaCakes118.html

  • Size

    77KB

  • MD5

    31f8d63a82b2ef22adc65a71e2c622c2

  • SHA1

    7a550ccaf8398b13eb069785b4fd6ddef68b6976

  • SHA256

    45471a852a583fc571d8fe1c67ccbc724316e0e0678bd61c71b0962b0eef7a8c

  • SHA512

    ec0d8285a4c33fb865fa80914ebbabb58cafa4cbb8847436a3a5ad0703dd8182529a3a281c2258b720d92d2f199b508b21fd8706786901f9b49e70eb1cebd474

  • SSDEEP

    768:Zcd9QZBC7mOdMA5pC5I9nC40S/JiceR6Pd:gQZBCCOd50IxCkqR6Pd

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\31f8d63a82b2ef22adc65a71e2c622c2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1196
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1196 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1928

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f389cdcc9634cc681a20dea4c370ecd8

    SHA1

    fc35ac7fe177f497cf4a5f691644e5e7ff3879a2

    SHA256

    399203c0db0f82cc6bb77c1d1ad4e3ab8e96be206cd860119f1f463169fe9972

    SHA512

    b0b5a58c7eca155bcd6ef14dea06bf0c6e5a01e3e307aab794b9cd81260547fec597e78e373585fa4de601957ca51d7542c3955ce14a31f471932e963960a298

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4f7eafe7bd1518b2ef344a2d729f2c94

    SHA1

    0d220ef70d7585b45dbb96d18c51866cb15e99e0

    SHA256

    3ab21e4b0fba8eaee19b5011de92d32bbb42f33e1e2637640f4dea17c79ce589

    SHA512

    0516653de54997095232df304cea943bbe39636cb0beeeb5e74cb59962dee68f2613b3299fb35a984419201963b4a30d95714c90d5ad7392d71a00b0a8e3347e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cca31536d14cea5d67583b6cff815a3c

    SHA1

    fdd1837b5a416fd0235309c5db8c11a10fcff77b

    SHA256

    3ab6f68f9705bcb1a5cb49bff1b6b0b6ee3647bc1b8dbf0223d280c1c0244ae9

    SHA512

    71fa20140c361e859d86603b412ff29f692307293acf665d397b54d7444a6f62a31e77281bc54f40d0863954989d1db72c4899d07e55ceff660560e6bc906e30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    513ea47fce2d25addd62a2ac81a70258

    SHA1

    45b1d9da0ab6e22854dbc86bb072c66a26062cb6

    SHA256

    391e8d93a191cdca1b2df9b8eabf6ce3fb7699c2ec467780fd87666bb7bd8a95

    SHA512

    eecc85c0266349d0cc871fadf6988bab6ca0b8a50dba0ad05f05cb60c0862feabf28ec99e0712414c101069508315200e0c7b956e77baaf55825810882fb5c30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    860e9631e89e1976b0576e37c4120996

    SHA1

    fdec0d85812387577a3a999bfb4cb2fab51742fa

    SHA256

    cb1c4cb6f453d01a8899b06c8e7b9b5350047c464fa2c302aa02abf685137a55

    SHA512

    454ae30fc4fbe3ac8e30a16b15a0b7b7b9f9f9c4a173e01843b3674ee74fa6bbd3886a86932099bc16092f15d46b472cb849abfe2d97cc6033eb23526ab9c27c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c1c610663e2076611ff59734c8e67f20

    SHA1

    d8cef6eb10df3b544d796cc8d4714a055d94f7d3

    SHA256

    4782d66b404728889295e33cbb636ef80fdf861fe2bff8cad6af69513e007a7c

    SHA512

    9efa97f61d51310ddbd72a7b812ab86384652e004d398fbf40308b8bf81f0f10dc2fb7920edd57f8c791bbb37d31463c612d5a6d7b14def3b14364ff75c5a83d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c035e27e677d6c919893221cbe5404ae

    SHA1

    911e3dd6b945189af13b25c20f88c152ec3d59d5

    SHA256

    653da4d68f816eb615baf27f234e845f0cce5830a2db8dba130f653a25e512f4

    SHA512

    38d9830f46dc197e5207a25d59360fadaeb034ce2a843299426352e5025185c8eafb70df787638319b3540f04a4d5528e5addf9e3f37e32da8eb09327071abbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ebe68b54ac67dad9f5bf88821eb7fea6

    SHA1

    90e834928b16141ac2bfc4015c980abab1035fbc

    SHA256

    f55f7d0782be9b455fc0443c58f34ae1dcbfb8286313fe3b0f4a485971e3b0c5

    SHA512

    cb5279cc70825515fc9f4d29f48330641598e4b0e8536539ba6ca30b806d1038b0a294a75b367bc0408828cb3b4d9fa6bffb5b50b19b9057dc5e55bdc5d4d4e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cb737b97ea1882953eb48499728963fb

    SHA1

    adc1866cde69d22ea880035cacc810ac81576c64

    SHA256

    eea93f9bb9c3464b5c2d7071aefde80e019cfa8c02497eccd79e360dc630b2ca

    SHA512

    0afc6d3e4cd7fe787e1a0c9bce6001c8a241841da87b2132b7c14703d8491996fa2938bdc5c35f5f06872866602075794695b25113a506a62601d63d0d7346d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c73e9c985c114afdf6618cea95fb44a

    SHA1

    56d56ffbe16cbe4a23ee135608a8e5beb27bc336

    SHA256

    3fca42f9152b2c88926b9157d491ffa97d6c4e1ba111d609e748d8e3ea2124b7

    SHA512

    79deff6611d0860478c29975a20b2e73fb4903542cc4ae07c253786c9b2d78849bd2bb559fd05866af77ca3102e22de51f0e12d2d53cc7ccd38d277765a56f1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a072d5e8ef55572ddbeaedab88cbc725

    SHA1

    e3b40f8a83f56ec1ebb70ec12d5ea5ecf7f2fd1e

    SHA256

    5e2f4feef3f7af8436ca73c5da1ee05a78da968080f3c13fdac24fcc760cd1f7

    SHA512

    f78d5cc2c3ec7b1691a7e05c476ea908f2e13ce7985245555d00fb719e10c8bf600cb93947d4b86dfcdee8bd9b5f742c7206a40fd9995c58f85de1adc394f751

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2efea1fb6f7e443238b8d3d348f384d4

    SHA1

    d8330cb89029a2878aebbfff9f2393080473f996

    SHA256

    0d7fb6cc8f4dd0bec4b451c76cc1b13c2bd61c83ca1508dd69c6aee3016541f2

    SHA512

    412a3bf7ac5e6bfdea698d687bb4d5adfd4f74e2fab1bde85ea71723c3bdda6659abe495bb4df93b5db3b64b21a2d4698902f5b40b33f8c93d11a2abd826d889

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    615a8dad4e08444c0cafc6ae5037d9b1

    SHA1

    650f8520e59dfb9109f3e36c04116e54c13476c4

    SHA256

    687b1239578fcadee9c3b97044de4c39192607478616729fdcc224295bb500bf

    SHA512

    9e466b7d3dbb3838a14290e304af7a85452efe9d7b8d96a0be1459326f88fe533f0831a434e2e78f6f50a43a1d0af769496c694275a8af3ca5cd58029ff17951

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a641360d853332b4a13e9c615b3c0a9

    SHA1

    459b043e7adfeaa8ea0b1e7cff5369a01f37d2fe

    SHA256

    02db673f0c1a149e23d18f429ccc0c71bc9909606a273e81d320b0046ffa78bf

    SHA512

    92335034596f909a4d9396f71d70220b6ce94ccb46754e7e8a3da7a644415cc7e272bfc28d3f0770fe77e998b9affd621a2bd35c2f7f45af0892120587aa5f4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3184d484157a27096b5c64e861d6190a

    SHA1

    a2bb0cc69a07e1ce7aeee3b66c3c0866e145d4c1

    SHA256

    ae85d3439b0271e299e99b4628bc7a0b293fea99073b5e8a716ee87d6a944b3a

    SHA512

    63fa9a67048b046de7d028802c53e0a067f7c2fec9947daa6627a0f8e996a487fc7074cd57ae78b2d440c8d4c2ca9bab7489998e67009d07433db989f7053330

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    caf3aaeca19ebe2ca6375abe78194fd3

    SHA1

    baeb0e917d47b544672a72e54ca16c393aeebfce

    SHA256

    6ff4cae66796667e104a403b99d200ce82556fb7cfe3a2944bc847b03ed23262

    SHA512

    ecdcc72bf7d1fafae5713d69f87de7a94579da735d519a38b1c4a86fa9d27a3376fa6fe000abaf76eff9da34775abe39dfdc66ab67a27184ca648e8cd74ef34b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ed6eed502e443b881f8e3ff600ca571

    SHA1

    51c6eac51e4dfe74e5d14f472924952b4255292e

    SHA256

    eaf65045186499f2e30d855a0a6660f533839a824097a695ce295e361226be1f

    SHA512

    c18ee843b102a03c74a2692e654fe35376289cf2b96c0b9b8bf21268c9d49d31810334e098efdf8517590bf650ba8909aecf234a1ad9a9244aab417db9c6df81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a16bc58a968baf52667fddeaf80051f4

    SHA1

    4ea3c6c1f0853520a5da5de6678d029d6b6f2f45

    SHA256

    4201f8219f4b332b47c637c97517e44af031ba4d22c402e7ca7eef5fe1b15df2

    SHA512

    a44e68f9bd7cf6b67bd118619a40b0ef2126468a74d3ace2696a4259eaa0d58d92b3b6ae684230c946814e2f318e79b47e4c834a538f2839a6727c5792526033

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    163b2cd39b22deaa96c4877b4f59222d

    SHA1

    f51f06221b41f317d693c0fc3b8fdc11348a2938

    SHA256

    6bc9df29edb31f50a1ab885c0e7bfe390aa156395e6a1fdf522e778010fc2c1b

    SHA512

    0a5e3e1bb3902137f3d9082a0565cff673be426bd70509a76d2bd871160a2b607e4176e46a74d3993a8e42a896b6b387fe6677bc426ac882f2b50c6346740ea2

  • C:\Users\Admin\AppData\Local\Temp\CabC989.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarCA38.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b