Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    14/07/2024, 13:56

General

  • Target

    461c8a2402818bd13405e78fba5700a9_JaffaCakes118.html

  • Size

    26KB

  • MD5

    461c8a2402818bd13405e78fba5700a9

  • SHA1

    c56ca53c59525869123d50e2e6d0addf1215439d

  • SHA256

    8a31c915223b7f972e81e49fcc1c0092dae0fcc43eef17ba99cd811866c48cbe

  • SHA512

    39fc9acd6086ccf83394b9a45bc1de84b25c8800c83f218ca3645871557fb0ec2cec7fde4b04799f301cea50d0fd6ade5e91acf0b9d8f6a442d8bf8b0bd67a61

  • SSDEEP

    384:X2fvAXvevTv+gv7N+lal54WnfIKZsPpejN+c1TY7MV1aVjJb:X2foXvevTv+gvk4FvmPqcVx

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\461c8a2402818bd13405e78fba5700a9_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2988
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2988 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2100

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5224ca6fe2e7c9fa14ccf85bd69d5766

    SHA1

    5155b7917243616e1f3972ac91ece24ef9b8a28b

    SHA256

    8b0ec01af433cba7a54d9be6d568fcbf454d25325b30c4bb77188898d574a258

    SHA512

    946a2548345a6304a3780da45e62cc2131156b1240eed583faadd8eff378c81c5867a039c0a07f87cea9c8e061f88075c8d4bd95100604395895dbf7af600492

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1bbd4d838ae33cf815238f0591560946

    SHA1

    49427a5ac6d7aaf80e7197c6a3594b0ad1154464

    SHA256

    2c94652fee13a0461c66e98d17dc38b4efa23cf0459adf6568b9713aedd8cf02

    SHA512

    23e695245f52e9df0b5b639523dc339a9c13fa9a2eec12825980b5e4cd47db0b1997c6310dea917b41e769b1235f784fb1c2d972d0790c6f0bd590ef7f8a301d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1fc9aea6fd948b3f2abb577ffcd62c8e

    SHA1

    239babd3ee31c0dc0ae96c05d25f47de9d2d1917

    SHA256

    856ffeb876bc084565a6ed91c58caeebd9bb3d35d5489ffbc83be6b766680b15

    SHA512

    6aa97caf1bd601027b18a575d0d90e6d1ebb4ab581c5f770b85bb418a83ce95996e16f61af567b65459ba8eba7e61c2db9dbec922ef8ddc870667376f5613f55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dfb218edf518edca798e9c6023336176

    SHA1

    37d0a6bd40cf7c32964728ae3b42f1f98f859513

    SHA256

    4087385ec09e14ce53cd48e93410e21d7f68de3141560c2c4fc18c7725316c36

    SHA512

    e9251d7f747c8b8f619b1e993f6e62fc8e8934f44b776a6086e084d35279613b3357d9ea5937d9e6e7967fadfe94877079ed751df4880486e3e6586f51179e90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7bc4148ff0130fb97ede9a6d8a66c6e4

    SHA1

    9baf8ae232c459d92c38ae0d2e51a0e212164c83

    SHA256

    53dda0fd48980c3ed3b15badc114cb51a4b2bfc3f6ec890950fc4dd707b7969c

    SHA512

    52d58a90f37bc746b3bdb3fd45b53d9baa688c34844c59d365b6610a82df897ff39096863ee44a671a30ccc4c8df941ef63677aead70c6225ca704e6885795ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4200811f981019c5b82c664d71e8c6b3

    SHA1

    c7e76d8c51a095f19678e01b287b161f31ebb3e3

    SHA256

    36a83c44ca9bffe0a715dae0912b29937d96c35d840f2fb1cdc967dd8a9d753f

    SHA512

    c1f05a17e6c833e3c85bd7f72790b9fda203003741ba2184396a12c94a91d70636c86731b191e540516bef9847047f9b4c65982da3fab1d2045f009b0b643190

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d1d40bbcb10023ca39c0fda2ed35d38b

    SHA1

    ff427dcea05a37431df14dcf19fa03361c8547b2

    SHA256

    6ae0e204f9ac2dd4a367ca9a762a41fb1363290ee9e49a2dca9548a7bc408933

    SHA512

    b1f35e3126a54288f08ce304656376969814c18dbf55303cb996a09263d1eaa214206e420ea45046dbe287b47ede9df03a73ffe4bd9eeb6b5c49692ad3403c24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e0ff15f1030e5da712d61aa145af0c2a

    SHA1

    8cbc779460b90812b93354f6762241ca52acb912

    SHA256

    8cef217d5bb66acf2df142aa1624629e2cd6af8951ec51980075814f1c62effe

    SHA512

    b8d5e4d702b95322d74c34e4bbbaf7349eafc4fcfd8b245463b2b69c6dfc7eeaef948249d060946818b9644c41bff5b6fe65c85dda45a220ba6220fa0ee8de45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e6f9b1260580c939a79ee0b2b7b8878

    SHA1

    3355a558e9fe3e32769c121ac16797406c4369eb

    SHA256

    03dc054c5e74478319ed40249987be42e678da4d58d907dc14954087148ba976

    SHA512

    428c3c4059a4eb15e56b081a1d57856919a7d723f72cdca61aae80d0af490ffbec298050bce8f71afc3a2d735036e0c66cb67ec3f6d55635410dd34f047ae2ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e689f59b11835b90ad876fa9a587a14

    SHA1

    c01444634caea272a97f44aca2446e9a3be72416

    SHA256

    1e4b88131cadbb94e31a7f9772d76d07a05197e696432083e88432857d0545d7

    SHA512

    585bb733e1af6605dc8489473a8269392e4fb791392c33d36956e1962b2376da3e07d072e056be674e53efd68cfdfd31262144a2dbe32be21a64bf17c3ff8de9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    854250451aa1a4a397216de077882ad5

    SHA1

    f28a184a491bb222f49a52b59398dabe80cde533

    SHA256

    bb5ed25e46bb8c8fa46fffbaaaa9106ca48687f562330440b9b08a28d2e186d5

    SHA512

    0b3efcea3ee6b64673fc5e56367bdc8fb3ab24c954b7d6018e274d751465d2fbeedecebc640f80dc8ad5d651a76a0dbadcd52c10557e01d1f415a5760287b11a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7eb401a6857e610d79b0203d77357fc2

    SHA1

    2f7b0b3538a2c31a5815ebaf4ea0ee7bc2211d1a

    SHA256

    db9ec4cd24e60d1f6be940ded2ed950611aa5bcb8621eaee440ed918fb0cd610

    SHA512

    47ded758d6f4877bcfff5ae886d2e6db5be284feb1cf7e33ca63d9bae06a7fcb0ec67fc0efb32d5da5e72333f852505523f9e7259e72fffb3d3cd3c6c4e0fe11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f958579558df6967aa138184bba69fd

    SHA1

    b713d729ecf85d38155b40f990889f9074f9d5a7

    SHA256

    30b1d4d6ae0d78ca7754c195d8b26d5c53048b8b875db99dc555dcbc47fabb07

    SHA512

    b7881a0e58b2bf4db758e247d0de518797a7b5243eab6950943e5231e3a2ab7938a5b91ac07b30eb66abb78c24e81c54f2861c90e51ce621a824f3bdce5df1cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3372d8d64ce6205fe8c1294707fc5b43

    SHA1

    09aa898d3daa173d9ebd13d1e330fea856d2d59e

    SHA256

    9f9f5de35b8d5dbd1e42c17dcdb1b6277a3090127a96e3c7ed1ad840de80e60f

    SHA512

    ee1ff5fe783447cb72dc5b6b37cbefcc67c4d8a4a4244dd169f73f511071f791910c3f6e81173fca98fecf5a2435bd06bde06cd4424a206876b796305a27c043

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4f2758ba15623ad58421b69ddca3c08

    SHA1

    f7f76f4f14746f320f9f641ecf6559573b5d42a1

    SHA256

    e18c46db8962ae67896d4cabf2eafbc2b8b077bfde87d7cd4f20eb725a769748

    SHA512

    ad6eb0144af9a209ccf9c0ba9eb2c068da16bd1fd84af791f8be6cccaac7f607e5bb69928366c22b2229f260e845af52120e4ccffb23748ff384fd505dc88e8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b9c8e40127b5ad235632b27ef7bc9d69

    SHA1

    baa7e2049727e29d3de01ea89710559941d4ac49

    SHA256

    bcbc55b182191f2423ef7aa89aeaea2cf66f5504d4f590a6d54be72e99c6724c

    SHA512

    87cb49b6e11205a255e9ddba0d2c47f2d37b3678e979ea345d9ce94382504103b76235d2bb17dd6f560c943a5464914490d45e078a54cd93ad7bc27d36ae7c49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2b4485d1176dd46b561e2c78f2549c0

    SHA1

    0b0155c1eba87391e7c34805af9918f812c8dc16

    SHA256

    065430530cf406197565d1f4174398f3bff54893311e93851d2e3246a99632d0

    SHA512

    a27d66f26c7ff8e31429aad4cc1c8dbb50b917e5f345a584f04b2adc385462ff59ffda0898cdf5be08805f3252d99fa20c57e16e44b5be91f1d48b9ece2c4977

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8b415220cc244341279e22b5902df60

    SHA1

    4f58ce771ae4d19ae69ebc9a78a100f15f0e4b10

    SHA256

    b043b3d260908d1302f65c58a2cd9d77268c531ef4f9c6bbe5c35865551c0340

    SHA512

    aee174e228150f5e6e42f0cd54c867dfe788da6a2ff3df3f5b591cf7bc1e75693c0903be97d5b082f5259c5386ec3aa059fc432a5ad16115f08dfbeaaefdb1c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3cc11f773e6ad21bf2e53c4906061ee

    SHA1

    bae222b30bfccc5d18196973a73b339b2e75f3d1

    SHA256

    7f2e95fb5e20afc374ffe41cec9388b190d78c859b52cbec23e3bb17ce5bb104

    SHA512

    c1b9114b68585c1c898685b525dbfe27da9256f71af17f78b7febdd62eeb3285caec38d41f402c5dd4f71aa5994f70680adb494206d116f88a210af048ab6f76

  • C:\Users\Admin\AppData\Local\Temp\CabCD00.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarCDA1.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b