Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    22/07/2024, 10:54

General

  • Target

    62f431993f051f28ce416fa0a6da1116_JaffaCakes118.html

  • Size

    41KB

  • MD5

    62f431993f051f28ce416fa0a6da1116

  • SHA1

    eaff0e8ea0e01b825dc20d4b66605858a4866fb0

  • SHA256

    978e8e5aba0e31195ce8d4ff34d44793e01f24456fc999e3ef789e328f6b5d69

  • SHA512

    b996d1bd371fd289e4bfaba932504f0813825de90f77c98ced19ff460f07cd91ae8beb180ce67790b735c86477e76dcfa6edd7ae2858cf3616cc22e06dce93fe

  • SSDEEP

    768:MpTQWVloMMWsH9P03GvwI1zn1uoZQZRG2SgWr:3WVlxMWsW3Gx1TZQZRSr

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\62f431993f051f28ce416fa0a6da1116_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2444
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2444 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2868

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc40e5835b966c9570f1197ad05c9f98

    SHA1

    6c957466637621e238f8c817984ee708536d21cb

    SHA256

    105e21d0ecbe7c881b6a2265bd6b2921979171c9eca14bd3868ae355e3a9c224

    SHA512

    6022d284400fae9655b813cdb5619b1fd62829e367c796aac9ba6c4264a74879773d404025787cd43987644868a458721db516ce973a0662580cf03cd4795eea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e955132b8976013a3573965286aa61c2

    SHA1

    0f602e754d1eef717fc3efb3f049240800513a35

    SHA256

    b704e881e649c458acd343bc0f35482e54f38c5e03cef5a6f195d70b3e1a7ae4

    SHA512

    5562abc89d1a1ab36ca0cd6091382f3a5277222dab5aaedb5758c8b7abf7f8ddfd82c0636634f04e46f597a659240a86a1c9aa8fd985c9af9d61ade2c0c9c6f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f186a5f55c33c8bf44eca77cab5ee96

    SHA1

    2a3657f477b0a9371d41860bf0bc7437da9e29db

    SHA256

    8521a92cbcaf3e6d6f0d082c49d03dfdfeb7482678b6092cefb1726ad64f8991

    SHA512

    2d1c52ab5d2f445570511aadacc87243204fb1c63ec49d1adeba0352e9ca496d030b11af7a4a95d45cbda66d64d89133e273623b69167e8a0f2e8f3aaefad776

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c43f76f127390c9678910e89eaf4a807

    SHA1

    143165fe3553bcc5e13932b495304dd458b677f5

    SHA256

    d67732a67e71031f99558ed099005d7f40327b8dc756fad782c68c908d10408f

    SHA512

    ce6e356995e615b403761c10688787ab4e2fe2d7f5fda511927f67df3778dace2397609003a63733d9ef5e28cac9c7829953897b5d221ac962ca336ebeaa8e8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db8f031aab1d74935a5a00800daf7724

    SHA1

    0ad62552091668b9be8707423083ec56ae35bcbb

    SHA256

    7f4e6d46a85116bbf5f970e0ad3d16e51f8e0e42a0c9a4db82607f69ff837765

    SHA512

    1ff18275306461b5a3ab1205d45588842cf2e9dbdd0e6fcba51d6b05727bbd73163e17bd5c25195d191655cec3aa54aaa670aaaae8974255d95edb731fb463f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    341d2d41f31380fc3ec182cf899d646c

    SHA1

    a6d88b8b0197e81abeeedb614852adf0f80bd501

    SHA256

    6e4452d8bdd536034706d05bfd6a66fd8c31085dbae08a1d45fefefe5f15c7f9

    SHA512

    7302e09693df59dacc8d8a2f517e9858adcad9ba37f15f9e8b9bf76818c61d69d942169edd6fc65db9291721b699b5f9fb1d300b3693366bf9f9b0a0ccc96076

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ecb264c56122ba51958cfbe9957f59b1

    SHA1

    beb5e3de8e3e9f0c86d44cc45309d09845e32f6e

    SHA256

    5ae5d36e2c8d9bc4f3a4f25331771ef4e5320ec6f156e509d51ae6afb52303e5

    SHA512

    f2668d34c76335b7da30ff24c48fb0c73a3ae496bd1a053436b518440a1a2599c183818da9a37ee5af1b7e9532e0cc0e41e6e48073d00567c01df64f7a44f427

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41bcdc8e1f694e1a60e418d6dee6bb61

    SHA1

    fc4d2814607230c26511ede7080dc46438d854c4

    SHA256

    e4fc8cf541ad79e9ad98e941e2aa6ba85bbb21e017abb33f7571e8c11ac3dfb5

    SHA512

    c3ec36b3e560070dd3a34a012b4cf5c504303e8f9550b64fb294ed027c3a1e88b6552a86099ee9b97077fe9f565d1e9db820515df0adf213f7d9e8a096f91da8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e01addb2765b0845e00d211f0d6c4dc

    SHA1

    fe4b33f101c85fd62ad7aa203e73ad43f0ecb936

    SHA256

    4edfe34531c1fa1078ee4d57f101b07af58da89d211fc13c205f7d73b4d82768

    SHA512

    0cb7a68cac8ec055b3bcef964162af042b9d7504397f7dad51dc93b4aa6d83c70257fcd5c561f6907ae952b2a90770bd0b45185d1767420c90d59a69ed0a227b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87ba088048b753ddd09116cb4ae8b82a

    SHA1

    ae286d6d0fed6d949f4eae8a115142e6ec39357d

    SHA256

    50d1a5035fcb3f0ed95d326b7fe35b08bbe33e0b7a22d65f14739d7c042a0ea1

    SHA512

    0c20b812aa246d9e17d08a51c4c5f9d5f059e89788696223330e9506ca5217e71d7566e4b31f9edf85eca5719f9117f73540070a63d17c8e7f5dc5ce514a7371

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b86458f0d1565da815c4ac17ad4cedde

    SHA1

    6a8167002198af3f720286ebabc106ae056241e8

    SHA256

    0ae175da973d08f7e1b593fd6be673766e9eed750e39fcf2b7d47a5362ca2999

    SHA512

    23fab68a41a3108b05c4df726adf110df67d64fa95ed01ad2a15bc77cb9c43be94aafc34c35b68b6c0ffc57492b2151166a08afb80259d6f6dbd777bf08818b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68133deede65018c9687081b6a74a35e

    SHA1

    b173595cda5994f9e6b021d7eddfcc24046de033

    SHA256

    874c8430499db0c44bd5af3c4f90ac8b238e0cfedac9c33f81f35545a25796ee

    SHA512

    c9d90ad6e04bc32bc613bc5e36378562fc510e1351d37f01036acd6e4bf077af37ed0b5e3b9fca6f52bc8757ba40c55a240bda461f3b7a3783fb291f8f69d327

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e83671e7e9e9b5b3cf255c7adf2dcfe

    SHA1

    cb27edbc9c9e787256faf5adac59a91a90a839b7

    SHA256

    92880400f390fad172ba9e5801cb126e96444ab3374953045e273199803648c8

    SHA512

    e152384271544279d36c2159c2fe0e4a4ed383cfa8561a698cfb8410c9db97d21c19aab047790ae5e6b52372d5ec32d38288448f732a71ba25f4b2d50d29787f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2d90e868d867627c16edb5fa4a89255e

    SHA1

    abb24ae2ceb233815457735be250f120e7ac097d

    SHA256

    046724e5afd65b7ea40daa0f64c7cf8dc2314fd0cf8239670b62166d1960cc97

    SHA512

    ee39751e8096ec55647c52e6f093552c49d21fef46206d341445ce0f5b3bcb2e9156ff6f1a2759f301263afa2a5a8116c883e2070f10fc53c9042b360c1de6f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    82a3cfa0bee062aca1a637205cacbe32

    SHA1

    f97a0b96a932a67c58c95a4765c1e7bf1c2f4967

    SHA256

    b363b185355a10c3844a99ab48d116bc65521b7ba9084ca1f494ee1dfbac526c

    SHA512

    70e15fa561d0e7cedabf63f73bcdcf5faffa5948ef59c7ee3d3f340d5bc654a75bea6bb9503d3339f02f482aa7ccc0ab2d51b404544137b450cde968caec0ca4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    23b2915105e8845246ffd5873ee74e62

    SHA1

    e585d2e09d075490945075fc323989374dd8aa0d

    SHA256

    dfb0d1e51b97da7603f8be719c48d61eaa80bd2da4e0fd3cbbc074a7d490e972

    SHA512

    921fb9dff7f0ff6987dfc4200ed30be1066a9dfdfce04ce89745557eb6ee63a1844d12d0a664fac609f69d4d15e8329f957ec61e2012500910b0138e3ea4076d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    30ea96ea7907904170a304ffd193ab4f

    SHA1

    163aa557eef390c65ca57c214373a70d4cace4fd

    SHA256

    8aa6bc143d98ecd31e5871b655751b86d3d19067860d131a4c5e7fc758ce8eb7

    SHA512

    940e88ce61d62db4f29f861d259799a3a485dfe4d3ff550baf5f214b1bff4bd2e38a529a0efeca18fb1e961b988ca8e3097c03f23af57415c389ad29be646f88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a4ed3dcce5e0cd1417e7b1fcb453a64

    SHA1

    83b206a627dfb07d1ab30c3410b241cbd3752c79

    SHA256

    cf078864f5d8df46b129de085639c9e969a767def91edfe2e39078dbaf3f5fa4

    SHA512

    95bf7ac24f8e3f0d305863cc914b26fd19ebd779f093c9c3668651be75b99700b5f920d76c92dbef9397e6449ff4bae7d0083620e7f20a04c1dea4abdfcb35d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b130593e6b5f1b7a64e660838f992ed8

    SHA1

    8ce4e3ad0b3df7994c491956773e797cf429b5cc

    SHA256

    4cb84d70e95b566c196782ee10296d424690b5770f9fb70bb55f8097d6b72e20

    SHA512

    afe2399a003c0b4631f2cb19bf378beb2455e8d640fe0ff25fa59ed5d0516ebf0c98fcccce6ec9b20b9d60695b8ff29ac6053bbf6e0cd12278c74860d15b093f

  • C:\Users\Admin\AppData\Local\Temp\CabAD80.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarAF48.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b