Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    11/07/2024, 07:59

General

  • Target

    384d9b4db64120866f06b7b3e6cd6b48_JaffaCakes118.html

  • Size

    58KB

  • MD5

    384d9b4db64120866f06b7b3e6cd6b48

  • SHA1

    00c600ef0e96a2d17f8518292b704445c051a8cc

  • SHA256

    d532d323f1e03eba7cc1bbe00f69d5f2a1cb7bf4226002b28554ab309adb195c

  • SHA512

    2a0115c4eb8405ee3b3d03a7ee4703dc50aa8b26be36714b4ecd2f2dad26c9d33fbdd402e161c041a46b401ab62cf058ec2fb2f5690ab85b1ef9d12ae9ac7f57

  • SSDEEP

    1536:flB4UskpIedOQ/6apxcz6n5kZZUsiKDqiHcPXO40oGI9a+o+bqRTpzNN/Qqu5/l5:z4GXjF0lhXoIkgcoo

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\384d9b4db64120866f06b7b3e6cd6b48_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3016
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3016 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2400

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1117f2987da1e10694989854a932025

    SHA1

    c0f537f4382f51904595e2c49f56243fd776bfc6

    SHA256

    578de1e554e75002522cef611a6ce5eef36764992527dac1f5fc8ee90c2ff200

    SHA512

    b07a373696fb1e77d3332ee0f2278d78479e45561b74a94cf1a609749fdc3345334d82c357d4f5df4fc02ef8fb010ed277355147d5f73a9e4d64b51b162c1b9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce258bf37620507d2cb6824359aeb560

    SHA1

    8b32829b086e2332affee1855e0449578f52cff9

    SHA256

    37bfbf4f10a1e2334876f7da8fa220488012c48865d72143af7e5f3e8fb0ec64

    SHA512

    d4097f15b8652ddd820e71f0a8ea6589fddca311b19d77a06db8ce515031e46eb5934f0909dc2dde5f3094758e52aa0cc11b82cc475b09359e9ef602ece0134f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e823873776ca43e7e3a81656292f6b49

    SHA1

    e1e5f34692f405764ff95df8513cf8d7bd91e4ec

    SHA256

    7b4074d860fa4c6c8710860d92bf7e5d72c2e5c11c17e846337117e75fe0e440

    SHA512

    cf5f7a11d26528c59c12d2df756e456b83965195bdcae7b9f2d0c95ec9d96ee78ee6e412822cc820fd834b2719b4792af2d032144f58898952a72cc490e79319

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f75966253f758746ba2970f540c1757e

    SHA1

    71518787a378982af5326d05f3a71c511c93243e

    SHA256

    47aabdcc50cf62a99797681ca1dacc91a7f30582179f482919cce3890520abfb

    SHA512

    222a095a3c4771d426a5ab850ce8e28b29bab10fea3d0270c9cbe587d93e14ae5fa8fab8738e9cdd1aa135d8334a05ae58533f36fc214e3d5f4d4f192b7369aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b8ce3a269e2c716c8add71b1076d70c

    SHA1

    1ff2b771259069a00195c78a5ea17751e2d8535f

    SHA256

    b6105c91065a4d2eb8050c29b1248a1e7bc903ba3c71c97c640b6aae902368cd

    SHA512

    987cc2a8c6a7b657d02b4411f3f45eee6b970e21b6cefd9a77a4b6303606e1836e8c5e66689792962619ca429fcaebdb8c78c39d81c985934a8cd079459772ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2be67a9de8b64738fa8bb828aa01adcc

    SHA1

    613918ff66cb306863bcb9ea85da3687f672a80d

    SHA256

    831f982419169b6818c80dd56b6b5921aa6ea86ab85b70c6d02237948b9d5dca

    SHA512

    df2007ff7b2e2b25324a844a1165aa072ba9ca71a42078a538f98b514e4177f38fe9c8b546eb704bfddc0b8397d960ee9392df9dbb163ebf734a407e7d6ca0f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e6c50e6d060753283eba75fe6fca6a2

    SHA1

    8fe968caaf834672e7ae3ad4ed4e6c28321fbcb7

    SHA256

    036f09f645c4ab525e6432e760037509047aec66acb56988ecbfd97052599e5d

    SHA512

    e010cc18f5f6230f9e0b24b66594345ee5d6b6e70a11af4a6ff478d12325c36e6a127b44039fc43777f7e0a50ee872fe6238f3579d75197a8055999e285efe87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ef868a697180185264f76cd3223b6dca

    SHA1

    fa776143ed49674f6ee50e56c942d4d06d2853b8

    SHA256

    dc67177169fd73cc9c13a5c6be509d5afaa9b4c5fcd6eb9b6ec192697c6776c0

    SHA512

    aa9ae2a3d0d22a474b43ec8b9d4822f20008fa95fe4943f5a37aac3170330590143a1c380331d0cb1a4000f9153e4a7cc87e1622808b0848caa9c78643997078

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c066093c07d42688a2ebc85e7f8bc830

    SHA1

    c1cb7ef609206372789c3dd0b13ae215fdd74307

    SHA256

    4ec4d6ca0eca6002f454f85a6c1fba6aed7388467bd16dfbfd9bded7d2080715

    SHA512

    92fe98101bf606849cbc1a104cf0da45fd8b9f70143709073ebdcfad07103dedd7e6c844e478a2fcecace2244d93fb5bcae77544a175c041a72e8bb36cb636c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    218541a79311a952182851320c958c58

    SHA1

    65a5e2960b08f84e97c93c7bef43dc03e80a7a64

    SHA256

    8fc560fc38170676d5268a0e2ac62405b3f8c35438a5794e0d52adb545fae4c3

    SHA512

    e75cc70121b88a0d91f8e85cdf10f2b055e76c9fb74497b2d100fd31fb2923d443a7592664e2abf0e97ad3a794d9a754047c4f85eace62c7ade9292834644659

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    efe9d086d4846176481dfd2af1553b7c

    SHA1

    f0bfd43c48fd15718c6fe706c3de77ea8a11d45d

    SHA256

    8086142f8b38ebb61f921c0cf88523d296ad9f843ca35feb219335189be997b7

    SHA512

    f335e26272e421e5437b58b9fd9e91b14770d9e9b5b7f9cbe92a1b968971dbb07a6f1ebfd1d67e168f449224d7cc4dc248b25ac9f5cbb442a8ee35b2f7ce99d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    15aa8314e05ca605f3e41fc4464d3f69

    SHA1

    a31db27485e8cf40b25c5708e40ffccc471579b5

    SHA256

    cd4b2e21fa5153e4c46ae9f31445ea075f95b43f94f02ddbaf5638e58a0afa77

    SHA512

    ca69beec34330008ad477f7e81861f011d52b02eaa40104584056551fc26e922176d56d52a892f50ce3274b6c5317e0c15eb64d0daa73d822440de9c46ee6555

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41695f50a1b135278c93586c6abcc43d

    SHA1

    683dc463756732c75f7e90b11cc021b0eb195a09

    SHA256

    8268031d194312f75b9dc3581dbfb58b8b988473ea10bbc51c6687101156cecc

    SHA512

    3469d5721bd6f9b9b07fd3ac92eea5953077d73eb4136ebf78f651a181e87b465f6f2bbc8e76b1e72163d1807a29cbd601d9e999104499112b05be23210d889d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0dbce519156ef82703e65d657ea7971f

    SHA1

    fab38513606d4592a8ba125574aa71a0ed2c43e0

    SHA256

    a2e7ab33cbe85c252afe8771927869533a3dff30827ccff110059753c1429c2b

    SHA512

    cf377a546a694a04a5662cb0a28172be0b4e068d82f93fbdb8537400176d406a5af381bf38357c5ecefec8f70505aa193ec416c78dbd89267fafb4fc75529e0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    504d403d1bfd3207dd28bfb0ce18b9d2

    SHA1

    da1fd5093d0db8b4b28bb0270bc3e181e0d0ac64

    SHA256

    2b697e1d17100dd2281ae7b0ef31498d1a905269a216e00b968f0f599f8cd264

    SHA512

    765a313619e0ae5886bfb4591511594eab795832f954457c08326ffe0811374b9684347724165aa640afbe304f6b0211bcac2e8623afe4847d86d469567f793b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    562238eb8c956bd94587284d6f0ffef3

    SHA1

    76426bd2685d248031a5b0c30d3d3ffa56d8ef9b

    SHA256

    2e1bd231525f55cb69ac70b4e4ff0db135e5043430dd987f6e27b56a4bf4cc42

    SHA512

    5d7b4df4fcb3cb0707d42e7e633d88da5d49df0e55d5e4ac68cd21978498c5aaf038a272a6d23317c90a8a48e2a9cda18fdde2bc28d84cc287ca66e35a6cd975

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba8b6109216d88d83c5a7fb967b92631

    SHA1

    024569f5a1f7222fbe74605309a3eb01983cdc96

    SHA256

    0f54c2574cedcd60eab28628bb09bc7049be48f3a2f0609ea43d09599b86bb43

    SHA512

    28b69036a3769f78459d3ee5ab74d2276cf43dfb2408921bd3e359106b358702f26079e6523870ef69cae0fb2b039996c586ed1da3a401260de0afbf7b999f80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3451c92e812ba873fbb70c6fe2a7642

    SHA1

    f2e81be14650a6b3cdd418cb5a6be2609273391f

    SHA256

    b5954947b7018f5cc3cc20fd6388b1b969124d7eb583bb169b25cdb206aa03f7

    SHA512

    a5f3c97ac53ff7af00e16973e4ceecafa9cc494a1f85d46206843493801b6863f8f2c0de166d97a206a7b7ea5dbe7ce60a3852a5638f58d73190cc219b4ef77a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    64687b6f734a50574312475dff4cd1c4

    SHA1

    ecf177266ab94dee430882e174163dc963bca83e

    SHA256

    69f64f2afc258428c7b8a13de9caf68c803f66087d43c3fc527dbd4c77ba2e50

    SHA512

    6300ec33e2ca5f5a4b33d9d6d114883a2bcd0647fa8061a7198fb4f8f23988f80a06178603af1baaedceacf3eb809b5f1e8e007b098e978afed115b17a82e399

  • C:\Users\Admin\AppData\Local\Temp\Cab4A2B.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar4ACC.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b