Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    16/07/2024, 02:26

General

  • Target

    4c6d5b10d9b71814c2aba43f4c57773f_JaffaCakes118.html

  • Size

    30KB

  • MD5

    4c6d5b10d9b71814c2aba43f4c57773f

  • SHA1

    5d86952ffb9eecd2a3fb3b63a15c6d9c650445a8

  • SHA256

    09552957a8bf15be5f9a7e31bb880d21877624756949f684f97d62736049eaf5

  • SHA512

    8754a49f20335f4575c4dd4b465a1d62b617d5988a12e19b29c0d9c6185216dc0e8d28cf953f970f3acdd7263c528631720997188bab61e16be3377f2fcfc9f8

  • SSDEEP

    384:pyVwhzc9RDIeX5vnrhnbg2B1Vs1UVx5c4QwKWJ7xawx5cRBKi7W:ITfVI4QFWJIwIRcia

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4c6d5b10d9b71814c2aba43f4c57773f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3068
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3068 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2136

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd13b069e9da9db0eb2e13caf6d5c492

    SHA1

    9695c4d9840285b1282d7fcc2356c46370dbed71

    SHA256

    70a45291f62df665ed2c468b17e8909a8b57f1a1d06945714380adb8d7c6484b

    SHA512

    b60b6386d38885c44f7a04262373e694b20c980fb065a3ae5aa7a042960d5fdcc6ab0616419b6423622ec095c5f5b3d5d230fa5e74a020d4af89e522ef5ab853

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    30e3a0310fa34620579d837985b8ee09

    SHA1

    f00d8ee976b158ca6c1434dd394722403ed52bbc

    SHA256

    5c80a567e7afb0eaa4bcedebaf58f9fc2308f025653b885daaeb4cfe86f58fac

    SHA512

    260725dfb8b908ba3f44aab66bfdf6ee80bb5d041e184922a6b5eff79a01e0bd2cfc8127298b0c817193466dc37e86785b4820cf4d495270c2d718cabed47146

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5708193a87e727bb1ca7ee0571576f63

    SHA1

    a4724dd320d036c756bcf5890929061ce8f00ce8

    SHA256

    2c8a399de4376eacac3594243e8c7f73af957dc182763dc866371f3ce1e973d7

    SHA512

    ccf5344073768e4d0aa94a2d9e3af02755897284b92769358fbb2f75a7704c957ad03b58ddb9719ab82363308116e9bd401e848c3316cf520267dca00dbe49bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0f0d42002599994cee8e62cfb8bda7c

    SHA1

    0f9ed222a82f752bad8f58eeea0c34e4db49254c

    SHA256

    20cd030e3dc67d61814d8f5e5c3b8abb890a731c670aade755c3c72e95a94aaf

    SHA512

    fc81333cf0907913f0f2945e88262d4145912d357215777ee650b2d69e355214ea2fccb6e87f9234a042a7b30ceb43f67439991ba40419a63e55c877164e53aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0db8662e71dcdcfde3dbc40a2544f23

    SHA1

    bebb55eb67006730f798ed98f93f4fa198e6a06d

    SHA256

    ae3b59eaf9f47c17ee9d40823299f84f8f6d6e28248e2c7b15f818558fceca85

    SHA512

    383f8cf58a3cf6c3a083a04f5635d4dec69f729673dfe6949a7c32c0b29a80505e330bd0ecb8a64bd46c4e72c3e19d84a9dd77e04c65c46fde418121598a6785

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9751a18f2ed2996cbffc5821d0186ead

    SHA1

    bbc3e031225671f9481454c0548a5c9e142b2662

    SHA256

    30edc9c176ef69eb084752add9ea9653d49f7f0d14e946c7541a6b8489029fea

    SHA512

    ed63ba20e13563d9719aaaf9071718b3534ee328e40887c0bec5ccf4f335bd95c0dc792569e60431daa361ff542e5cd7ef92d1185affd4eb00f478920cf43d3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b8de7d1223e3250429bd62a1a40c0f9

    SHA1

    95f9b732659156429b2ab4c16c5e0673a83c1bd4

    SHA256

    5d69696dce016b554a62f2000aef33b7e1a862737d62286714a3377f122e6650

    SHA512

    4a909f5098860f4f89b70753fce43a63041fb5b1d536c9ea5431eba04f9fb94672dc9927ad7877b2a543e9b10278b0ec481a3f0facd65dfea6fa0cd23daea070

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a4df0f934be92f009c89cd686d3018c

    SHA1

    d64a31e808143d77bb14bc164b124a2f07a2735d

    SHA256

    aa852e4ffb2625f98070a344b4f870c9897667afc848b749c34b9d76d0a29dc9

    SHA512

    03a8ea3538ece77f980b87255308d7d4f690a62552433557dda55c34d0f7efe0895e47102aab322afb4c166ec3d6b9bd6af1e80f3bbd8e9a6e59941c9516569c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eaf4c0a51fbe97cb2fe52229b4c162c6

    SHA1

    61a1c1d9c4990751eefec54804488951d8e0758c

    SHA256

    6bcaa996592cf76fbad0d01f22de36ab0b4a7339c844b695e5e36d7e20318ba0

    SHA512

    ce4fd5b8c9134556bbc3a8bb31d98f81e4d7a0f0cabd18aecb7ded3a5e1dfdad2878a6c5aa1ab2715b3aa23181ccc17f7b8f0c7f222e579621fba9ca57a9ebc2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    245a9c0ef5d9a8c13e9695e96bb04604

    SHA1

    e853410e3622e4202191adbb3d966a9aeec77b63

    SHA256

    d98e2851b4a7b893374677f83b10074517a6f9bd712d701059d7855b34da0148

    SHA512

    11b2e20e10f49a0b603ba6ab4af22519172e29d3da8206fb5951225388a5ff96f342ce31517e195a0709643f6f1aad0860b0a7ce5b687ef086301b45fb950da1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0720f771f2c9b586c67e8f576de6321b

    SHA1

    923b9d51fc0ffb9be838f3eb042657f649507ed8

    SHA256

    ffccd88a62ee511ca42562890a184c92c46172f76f00841a09e45fc507373d19

    SHA512

    01966c7b75d102e33d5b1a82ff178285f3ea4a882d72328e513895bdce8338a4b9611ab08aa05fdab0147936c7ab79aa12098b155bd80e9bd9e6c33d3219dc04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00e2d87d24183f4902f5084ffe757923

    SHA1

    c234662edd7d96901878d6be8c227d39384494a0

    SHA256

    36fde10aafa62b5669600297ca4f096c6a15e4e4b6e42a7edc4c25d4c951cba8

    SHA512

    28fd769887fa1b23c7ed94090dbfef1681bcb5f4523d6bdd5d8f07b973ba4e236b1301ec36e5864ee2cd37bc69a232352351d285365b9533536e7370d4858dc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9bcf5bee4fbb05d471931c84f103d401

    SHA1

    65a30c1164ca868ecba7ff471a8581b1aedbb287

    SHA256

    2e2a9e345d1af8a53231c1d7b6f5ed3813e5c25a0aa797022d1d165f1c60d97a

    SHA512

    03305d9d13906d88174ad13f7c9197914d1ce9da12a102563d3e84d35da3a4e844ea1ddd2658d3f214db487cce6e3c1ea804f42f042d042f475c39f97e8251fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4f51fc504206764999823452d48badbf

    SHA1

    efa4346b22dc02e3c4e7dd50210cc7ff28310624

    SHA256

    cfb0eacf213a4aa84cac6f1b93d737dbb568a93cb6d008e8a5135c6b3f9af52e

    SHA512

    704d2bb9a259c9822fe1baac6c27c4b2c312a4d47abf724def3cea6f6f4491bf2e5de2970bafbb1049be2912cdf4c30ca2fe6ef4e1d3decdb10766e20b2f3fe2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80e6b0a874ac0554bacebf7503e657cf

    SHA1

    ae0770417e810dbd09f471d4dc37b76906822da5

    SHA256

    a1408dc88e7bc1030db815cebc134c957fcddb98f21de423419917adf36043cf

    SHA512

    db2bb00d5a4290bee88ea0ce45cba6c6cd099ed660815b81fba81e2a78392aa442f8ceceae24af8630b6c615828d30f76513436f3ca6fc40dbc79e0aaf054da1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    924c8b82086eb6452ff7deeadebadb02

    SHA1

    46800a573ee5c68e9e140192b254700c1addf214

    SHA256

    788dc4b7e8196904b7a9a87f5615b3f4c197005cc9b66d87f878bf68171acdf9

    SHA512

    613f7f793c5431b0ffea5cf27b259d0421b14610a541802c3bb5400271fb822062143a6531e8f9baf6d1aa8b6f3954a80edc2b3d1a87891523d927855a90980d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6bdfa8648b5914169928aac35b6a275e

    SHA1

    f7dbe507384e13e8b8514edd16b15078531074ea

    SHA256

    3225faf9a442a9a8b871241a384c69647490ab9c35e6cad6dad8c6faf0bcf87d

    SHA512

    e05cac97604febcd306f1b527a36c8a49ab91141882d37b926d2d200bfad5ee17d9fce87e10e0b0587bf61c9eec225085ec9fdc49049f7b181230fe0b61c26a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3d9943d5709ff866968cd8a0f7d5420

    SHA1

    d9c39da8adfbb566563aa58f1f8b98b9a7aa711d

    SHA256

    cc3309ef30a7f26c380090fc993acdda4e3904780308f3c5e925b850223abc65

    SHA512

    a62c0611bae417b25d63d1bb006da2434be6b4ab94eabe8cdb056e7838f64123eec60f29cf03ffb4d95b6b4fc69622d6576a1fba78ba6b130de308b500020025

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    745b8e1275ea9f47f4ad11315213607d

    SHA1

    26e2032c3e57ed7510299789ad0fb7a5ffe7fdd5

    SHA256

    c16c4c80575721bff894861c0a87fabc2c3758b59b6a65deda88df713ee9d52a

    SHA512

    0cf92914846567c50bf644413ec6f05a682dc3bfca8077249cd97b5a0d8a8710ccc29b88b0e356e9443594e24c0ef1d0761772a8dd55e66f94b64aadbce237dc

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JQ7VMQEC\dnserrordiagoff[1]

    Filesize

    1KB

    MD5

    47f581b112d58eda23ea8b2e08cf0ff0

    SHA1

    6ec1df5eaec1439573aef0fb96dabfc953305e5b

    SHA256

    b1c947d00db5fce43314c56c663dbeae0ffa13407c9c16225c17ccefc3afa928

    SHA512

    187383eef3d646091e9f68eff680a11c7947b3d9b54a78cc6de4a04629d7037e9c97673ac054a6f1cf591235c110ca181a6b69ecba0e5032168f56f4486fff92

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SPRIFH8L\httpErrorPagesScripts[1]

    Filesize

    8KB

    MD5

    3f57b781cb3ef114dd0b665151571b7b

    SHA1

    ce6a63f996df3a1cccb81720e21204b825e0238c

    SHA256

    46e019fa34465f4ed096a9665d1827b54553931ad82e98be01edb1ddbc94d3ad

    SHA512

    8cbf4ef582332ae7ea605f910ad6f8a4bc28513482409fa84f08943a72cac2cf0fa32b6af4c20c697e1fac2c5ba16b5a64a23af0c11eefbf69625b8f9f90c8fa

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WK27LCMU\errorPageStrings[1]

    Filesize

    2KB

    MD5

    e3e4a98353f119b80b323302f26b78fa

    SHA1

    20ee35a370cdd3a8a7d04b506410300fd0a6a864

    SHA256

    9466d620dc57835a2475f8f71e304f54aee7160e134ba160baae0f19e5e71e66

    SHA512

    d8e4d73c76804a5abebd5dbc3a86dcdb6e73107b873175a8de67332c113fb7c4899890bf7972e467866fa4cd100a7e2a10a770e5a9c41cbf23b54351b771dcee

  • C:\Users\Admin\AppData\Local\Temp\CabDF2A.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarDF8C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b