Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    14/07/2024, 04:34

General

  • Target

    445385f0c244f2e0857e7573525e9b76_JaffaCakes118.html

  • Size

    13KB

  • MD5

    445385f0c244f2e0857e7573525e9b76

  • SHA1

    49e91be7b288d2794dc94f1d8c5d3e87a90ff03a

  • SHA256

    f83ac2364eac880dbdf7c5ee4f132cd275d4039070b864ee91f18f03f5e1cf83

  • SHA512

    6eaac151a4cce3c9e8d4a938b3390b48d58839b7ddd6d76b49ba222c192691b4b526f319f1c81bf146b4ac0b0ccc0c8035d6083897633a146545531caa6a9f6b

  • SSDEEP

    192:csz74VAYS/Iy+AI53mMayHRPqhCjg7VLdjHRPgI2ShVoW+HRPPPHb76f:c7VAY8IyO521yYhJ9dj28hVoJJHS

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\445385f0c244f2e0857e7573525e9b76_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2212
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2212 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2852

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    464312aa1c157f9d2d4b2698e7c637f8

    SHA1

    b0261985248076269737e552756566144108e721

    SHA256

    4e7b9129644695a6978a9360249f16fb4e383816aa61310fa594448695a783d1

    SHA512

    0bcb871ad3c9b984fb9e9590a8023000c7f7367218f8fb254fceb8782d682390425046eeabb50f4de38c305f70023b8692531ebd747b47169641ad6e09704af4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5941028f51fbe52f37b5cc095cdbf82a

    SHA1

    8675723c0aca7d74cda5080a91c43becf07509f8

    SHA256

    b2670df748193f0feca62291faf0b8639aa2626509fc3f80544f78f778ab3c61

    SHA512

    c17c8227f089d84da1c287eedeb9845bf41b534ef695d64c5d8097cdeb442737db9677275986bfe8f88a7039834c4e9950e504d31b89d579995c3d68bffa6572

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    291bf03fabd256d9e02f0f2d5ffea6da

    SHA1

    c3f8a6f4753b3c56caefb2fd86436a1cce674dfe

    SHA256

    bbeeee8d436ac9e075287390f8228b802292718f2b196b572a8876102cf3943b

    SHA512

    897cd2ba5b8fc2892183def6431524fd9fb7e1bcf3c1285965dcb552c8ddbcf98509bb5c4c4f94b47a53964a870485dce6b7ebbf4f94e1d23a81e1c153d665f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    398e499e788fc258dc335c2ada885cb6

    SHA1

    2cabe77c536a7129247c4bbaf3694ad49ce9e59c

    SHA256

    79bd476ce3cf2cbacb0f273039a88bc688d6749e65ae972edfb9098649538833

    SHA512

    bd0f9f92824f6bcf69e1a1167af3582eacdac87d1c57513c3d7bb1cced82d010d18d995316dde583e6545017cee23376c508591a15d21060b0281f93f50d1c9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    876834296baeea425910706a4927b5e4

    SHA1

    797915df23ce0ad1b10c0a6c724f207c8b1993c3

    SHA256

    0ca945ab93e09f65eaec688c22fc84ae6d1d691016aeeb29245a1aa3c8ed0174

    SHA512

    60ea8bf2091a0e4bf202706860ece8f7669af86f0b3a94a216a9bb51f9f02ca888c814072a69cc4d12308eb286c11fa4f179a74920252dabd6bfbfe1c39e943d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5dbf82c65f45706e0e4a7e36901fe9c

    SHA1

    c85b08225ed03f867104cd98639f959c347bfc14

    SHA256

    32c7bcdf445fd1b9dec1b7f4eadee0a2015617078c53749518a116953a56c1ee

    SHA512

    766b81b011fa1b4d13182ae9391c3e4d899f07ed1e9bfe1a1862d12457c86790ace941a1f77385507cefef8c805c72aa9299d85261efa5af024bde46980382e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3302730a1e0a64be32a6c02dfffaa2f

    SHA1

    1eaabf334fba1ffef19086c9ae3ac0a0c5070150

    SHA256

    fd59f0b2d0485f4894f963c2e0f0e71a7f27113126ff7a652139c118b43467f3

    SHA512

    d146c39aa43c63e2f19959fc1e9e8f7c4e99228244a24f2281b5418334fa94cdf1923ef40078e36a62335eed8dbdc9dc593008ebf9ce0fe6289df29383a8cfc4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3215de58c0eaf99a24c22a3399841ce9

    SHA1

    153eb97f04645a0dc9c20053a4478907c2e8c6ad

    SHA256

    798207c6a314c8bedd4a76ccc76854c82857cab3dea7783bccecafb9cd5a2c74

    SHA512

    967fa006723fbf4bce25759ac4d5e50cc021e2f066aaa65bb90e30e84d189dd7e5189511c086126d86ce10bfc74c08cbf58f7d810695ad2b8099586ef40febdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    872e24f159f7bacb6b36db76cbacccea

    SHA1

    5437dcf6d2762abcb5d4615aaa4aaf0c816c8b3a

    SHA256

    79f5392860ee3350155bc9495ddd90ed726cd8891c9252c39de1f9d91ebb8e64

    SHA512

    66700e35a2d79f6748a116a44f5f846aad08c7da7b6a84e17b3921cda9e6b4f0966276fe0ed8bc7bd4c0ea6edcb9634a125fb3c2cf55431663e61f51dd4e9a6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b48a66a4d37618988000ba4a685befea

    SHA1

    406da84a23aa51110e5930e915dd0da7f430b99e

    SHA256

    78a945505ba10e40ff76b313ee471147df8d5963a16f1c8e3baa0b5c638237f7

    SHA512

    23437525036cae52dabadd92dae1a70a1106f3944ce7f2f65e42009bb707edb246e719adc0d936f8bee37f1071c7eed7dc028594f32cb43642b9e1e9686c4a72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    25a5255092b5f0ad462148c8e499fb67

    SHA1

    155d4f5da826f96457b8b138e609ee1d7b7e1320

    SHA256

    1005fdb7bfcd0f39d21f1ffa99a62e89bdd0af969402b11262c63bc3c8fe7a09

    SHA512

    3401db2522a216f5c15cc2edf4cbbc27a5b6ac2c9c3a69b9d29474b736efdd8e4cbe313b98c1ec54e4eac3e93ddd67908b8b0fa684ff78e25f121e1d5e2eae5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad1a7bcb3aed7cc554462caf10e800cf

    SHA1

    d194cf0fce3814bc6e06475b8639c19df1374e60

    SHA256

    132b77e29bf47192592d4668be52341bb7566e5bde710a1bd2b4682333447fab

    SHA512

    36d7943a505dc8f28bd3ed5967e42684726c2ad9eff2dacfdef6d31950dc038cdf55a1b40141efa3cf7471f9ccf90a13c8c5b3d7a95e3bdd6a74c78532a59bf4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a4c96ab002abd6c8c0904419c8ef8bce

    SHA1

    c1ac86bd526a05bda3f8cb4a2cb1e61cce07102a

    SHA256

    8e96a34dbb567fffaeee7a5616c48dcf6d3d2ba5d54b2ccb37db70d1aa74b959

    SHA512

    b4a32914eba541bf9231fa7b77f602d6ae4222c424d850348b4fcc8f943fc688443299c71da6d716563830b04940fcbe54113a82ee3c83193a41075f8d3cda22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e625e9ec8349a01ca5fc987d64a5f67

    SHA1

    5340b3345db93a7ac568143e5e8c3612a516c6ec

    SHA256

    4899fe93d1dce2da66cc478959c1cfd9006069ee586d5ea1f537786135957230

    SHA512

    88fa32cd90e5e80f4ee63a30c130973f695179013aad43fedaee06ba874e5f9e03496f8dff2809c4a7865f3036b89911d7162f94d5c1006cf7131bb050b197be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7cd20d7ef9a53296fb6f0b946f1b7eb8

    SHA1

    957e7d2be099df5e130b4b5b6a649a8b59385eda

    SHA256

    2a5c85100c912b7f7333ed768df3b4ed6d06ef617a22790fb9a726a289209985

    SHA512

    3d3b2f5f11491ac8c2d5a013c2b83695b9bc82ff09f91be955bb7008714a18566ff067a8c464af6f88676528234d65dd930583d9738eeaa29fbfdd3a18b77dd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    83c7e7802efbfc3e137244f03daeb74f

    SHA1

    1162915ecbe974d0efa0161cc030bd26689de158

    SHA256

    44cd11f1e4d71e220a9fa5d222300145c5bcda3f1fc1d26c108e6028ddbe1963

    SHA512

    eed61cdaf72d60e91e631c4e465b9b178c4f303f1d8264b867749441644fdd492de7db327ff946746a6ff7290e01a9923c83eb7ceaaa0ac972813052bc0902ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    60956b014e7bfd7ec73790b4968e855b

    SHA1

    fb0046486bf6dfad2bda7c719741f39962575b44

    SHA256

    9e02b6ba6f86e3a780fafdecc799aa01cc231694cd9b95801f6dc05e75ce122e

    SHA512

    6ae47530b25f3e9bac91c8f427132dfb460c3452f1d24a6109b4548280491715a94da0efa140f7782ab7728554ead643bdaf527b25c45d8046898488a56695fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    72e2cb03b2f3f736e53519455b2e86ba

    SHA1

    382131a3f251ded9aebe20987f36e91af6879ca5

    SHA256

    a3141962fd7b394fa642075b10522a1013ec468b7360a8aa07322cfaa5d2345e

    SHA512

    52fd93ebadf10db9eda29727407d2d2e069029e00a555daf70f72f919f3644f59a87046cc3cbd15282e9823491eb39dd29c73b9ee4207e4e89a47ebcf310fff8

  • C:\Users\Admin\AppData\Local\Temp\Cab3881.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar3920.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b