Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    14/07/2024, 00:28

General

  • Target

    43cf09938713926bc8b68c7c550fb062_JaffaCakes118.html

  • Size

    6KB

  • MD5

    43cf09938713926bc8b68c7c550fb062

  • SHA1

    969295d8278bb768291aa44ddd14b6f633486f37

  • SHA256

    2234b791fb7419050b1eaaf13a718bc29651a903ed94e772bd520a6b363b6a09

  • SHA512

    40f4cd404765aff276aa46128e0443dfb67be8c6412ddd60666b83cbd94c1ad532c8410791bba0439939397a35cf841f1c5cbb8e18dd12cbc50bfc75cc566526

  • SSDEEP

    192:5W4lIoaNNHofhmDJm0mmm7mmm6mbiJ7+mmmP:s4lI5NHScmmm7mmm67h+mmmP

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\43cf09938713926bc8b68c7c550fb062_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2756
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2756 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2684

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d690c9bc83257c86dbb429389a3601bd

    SHA1

    8dffa6f37cc7e0800e1b47d6bbbea672b6a1c47f

    SHA256

    d4b48bb8b22f3542f73c1a9625583b2167d610219b15cc7a700e274d7d0cc694

    SHA512

    c876583bff188680d59ff3c4a84182acede0053ad6edc5e8053ac0591602d5c29085c05f4ee58ac27ba89524288be5cb9d6bd491c3b79fad209c7c54d9aa8680

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd88bb43e6fd1fae1f34bebba4745fcd

    SHA1

    51a83119bc0972d3c0f4b9524481083c75874e47

    SHA256

    b4cacdcaecabd75c94bb3df1410b7f7333ad2da451a7234250aa146723d43f41

    SHA512

    4f435875e0d1ec944eff05fe9d38c31325da4fdbf80d6bd5a3581b751d6f8544bfe7346f6ff3ce18f3fa318a8e513dfd1ba1c98ca21113ac86986ebec6edd5e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6fb1cdff425da9cdf02cc59d043b1b18

    SHA1

    7ef986827b38a56962e1878d8d29b1cc2566ae76

    SHA256

    62f7eebe6952417a3175bdacae6b59bb89f45c864afd9f7d0f9f3f1d99102825

    SHA512

    c19757e2604825fa86b3172e6de94b9ad250a4cbb7b43828da2321f10e5204b16b2d3112dbb19ede290cd4e848d63701651a2e342c2d79ac6578b9413843832a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2c49b563b7773a047e7990fd0b046d5

    SHA1

    9566979f96f894382164d5780e123740e0d1ebc4

    SHA256

    1ad8284d5b12105abe8d369ce7586238793d0f3c4bc390eebe0fa9739e98a1c7

    SHA512

    08c10baec0645f8206ca04c8ca5e32f0d7f9aa106758547eb6ced29de73d8b349ca7af17f4e1a211739a07648bac5355c3fb2ac07692720c5e5245caa28cfa28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b61678420814fb245d1c78ef21777a2f

    SHA1

    d6fa348be3f2993d5b5173d182b1758286ebb52a

    SHA256

    c4c8ec9983b49ce0ecb791c0f92aa204ce219ffcab01b9577dac52d30e9457f7

    SHA512

    be1f1c89dc1d34e637309e930fcd6134fb0f510c3d7054b447fbcd79d0d1f726d7adb7015ea5ba1fa4f964f5e3671b25b1dfec5db73a691721e3892de4259ba3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05ac13e99fb13cdea369e0e5912b2694

    SHA1

    a5223b7334276d4bd7ed9bd4723d13dba6f6686b

    SHA256

    c3cb91ccf8757479ced6ca60e3353c8940c9851eca9f86751b2852bbb3febd10

    SHA512

    9c87fe5378796f3d9a685344a75d0467e61921c34704387bc39be4d1412dcd03caaae124d9da3e55dfa2666b9e76eff211e0daf57ab8cda12dab14a1192756e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    15c518f5d437369121e2a2105dda8a5f

    SHA1

    005cc3cab82f37502cf5c51eee97c17d7cc742bc

    SHA256

    83a84086d18bea2988972f6698eb207a1fbebd2a72b7a031e16d5416d15255c9

    SHA512

    1e52cc03747167b0436f7e1c569c883e88f69ce0c62020e853a1e0b8c1e521a74ea6094b2b31716418ab43d1a4bc2c3a85c05af4a0e46d1ad8e8c5d91f5680de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78d5ce820852d0a45cc101117cd9bc61

    SHA1

    9a4e7869354347d3e7b1def451e7d6de4da4df94

    SHA256

    0c645d15fc476cbf787cfcd10c263d4b879f4318efa4ae7515e5736417c630a2

    SHA512

    c20aadc5aa0c3af89b6668616da94a7b28c46effe6b4c8a76098733be82185a9a31cfe57225914ba4ebe0e9199f0e8572fa5b3415df9b3784bc7339bbee26245

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    91bb5307eb3e328dc17f7c6431ce53e0

    SHA1

    469269bf52fefb8a6d0af1fb99f5cf2252175aff

    SHA256

    41215da918fcd45a4220eac421a2fc9db91c6dd93229706a23f851b6b40bedcd

    SHA512

    22147190f1ab30ec72a2bc2681755e9ec5577b2eaa07d4e0310526f7b9db8386fcacff1525bb3acbcb53132525138892f943647beb84d5ab2af1635d2db7dfc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f0a4ce9345035ffcc7d9228b286a46a5

    SHA1

    e2861cfe132b8a40cbd5e858778140d3f07dd7e2

    SHA256

    71156fcb68d82237b059a7f0d34918668d79d9893b94ca339cb3dd70e55146de

    SHA512

    f84c53dcd5d5843b4429752e195e44b28a1c62eeba311f370f72686142d5f3fbbd35c5ecc456cb53a3b816429f16cf016a091008a6f71b1ac4ed4e5faf75d847

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6bb7f013915699d49c2bc9343d1c6aa

    SHA1

    3fc570b4ed3aa69b583153f9090960e5e5f3e061

    SHA256

    1a69ab29956c4acc25dde9e0cfb4e2cdf03253ddd86d77b77c518b07668a3816

    SHA512

    4f8b8e3df711ad483bf01379dee65880977dd49e732f9d1664b3d0d607f63ad74dfe60ef17f9ff29317027d1a16ed433d1ffeee62ba499e6f090bebb83030836

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    061574dfb09d4e479dd0f26e6907aab0

    SHA1

    002145b545b1830353e2fd201998aa74e33cf709

    SHA256

    38244f713c32a4a7c4ad586777a091eb927311087cbba43a1b19686a69453904

    SHA512

    ca8df8b9d192c070abe5d71fa652392f39ae03e4b45b47e5d13f3fb5f241d5b174cc6aceaeda71197da54e6eb60fc9ec1c6e967a3b264363eab02843c6073e1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ca3f06991dfd3f612776b9e2d836fdf

    SHA1

    1923ae1e547e4ee2f9a0d91de3b3ba6541f14ef3

    SHA256

    353654201ffc4e1ae6d8f4f856693cb8dc0c6910033383dfad82b6291f12e4ef

    SHA512

    46ebfc01a572d6a30d7f04dbb019fdd4be71756be3bfa324aedc7cfab45c80b3ff063d2eaf606c4abd4821c8aa3485a661ad60ed144846650fb437dcdb24d637

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f807f4ad9bd00905693412d52251913a

    SHA1

    31fb36c3c90284faaf039f336cb68bececa5320e

    SHA256

    370774702da7f17511cc70b502b75f985cad7910b41cc49270aaa849ef9b7792

    SHA512

    eabceeef92ccf1687623f2845119f3b3ab47f4d05124ae55b6b79c6ec69d4c7d30eeecd7a34d2e2c7bd426ba6982df2e649113148695626ec26c73d7d181df46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c22e628e75a9463fa5bc58f284c9e165

    SHA1

    bc98506ca65ad990bd685937ee7dd67f337da77b

    SHA256

    4aff4a3f5f07825939ea4aa0562ac506854197b360cde0417ec682bc63e1459c

    SHA512

    568e56d4ed8027b38946f3a818a885cfa487c5ac9ea1a15cf910089f560da879ec6e4ab3cd75895539efae9e994529e3e857a35790b847f8efdfb468f7b328ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f8022af22aca8d1baaa55d9db1087f92

    SHA1

    5fb3df7d190fa32bc2381a9484fd00b14a754888

    SHA256

    ecf6598fc1e166faa5f0b6e0ecde7b7aa0ba7103f9dedc86a80860750abb4cc3

    SHA512

    734233ed3c4b5871d459c258b43a2eb9c9aeee42218a5724b734564bc977d52a564592e92bdf9828ca0f6b0191c7e4eec8b298b268e5eb54edd7bdc643ae131b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d23f65428f370b4c395ab8830d2a3c73

    SHA1

    11d92f00d0de3b3d2055ab471823629ec62736f9

    SHA256

    f91201fbb37f8104083854168892de851507516508e323f592f274b750c4f3be

    SHA512

    4b0c34316bade269b3c406083b887dc8fe18e42d6ef83506ce6d63e580102299c03ba02792a7a3cde67342cc93bc139036f24b0936256b82ed5305ca51bb30c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c8776c72e21a5aa511ec32f4b000400e

    SHA1

    db7d472ad198118ba787edda33e0aebd9c30f747

    SHA256

    5791268227f2dcecfebffad4e772e5a4850179d5dc662282afbfbe11629d8605

    SHA512

    56da14e55a5bafd1967300f3c9f206ad29721bdbeccd8ef9f749b8c4bd6cd2ef3cc1b095e5555aa56d1c3cfb8c4545b2683c805c19b43a1724034c2db30ce5c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e0abc1227a7f8d16a45b9d31c90038ed

    SHA1

    c23866015bfcc2e3ceed1d25e756935445b4bd85

    SHA256

    b588852a889d6903f8a33ee1a9cb3774c0592e746530a33e1639ef4da7032353

    SHA512

    a5a97fdee32d3777869ff818a2b614cc6d00809a1d86200a249983de3f62d824805b9306f641da039c9d27774389905879599e4cfad020711bad1bf04786a5e0

  • C:\Users\Admin\AppData\Local\Temp\CabFF77.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarFFE8.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b