Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    22/07/2024, 12:04

General

  • Target

    63294992fb88c4a2ee41e815ca24421e_JaffaCakes118.html

  • Size

    133KB

  • MD5

    63294992fb88c4a2ee41e815ca24421e

  • SHA1

    909ea80e823c0ef081056c5c454717487e3550b1

  • SHA256

    4af97ce5e52bf74822d1e3f3724c38bc44b237cf6eb0dd4f4b469b1afd9d88d2

  • SHA512

    c50836500acf97fe40a772e00c08cee2425ed1491e21fb00900455659fa625a23b6fa7a90c8cc6ae6e3a387a298761ad3a8b53b763b20a55c309d4589daee5e3

  • SSDEEP

    1536:S2Mr1IfQZU8joAyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrk:SBr1uQZ1yfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\63294992fb88c4a2ee41e815ca24421e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2244
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2244 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2324

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dcba7e7fa57cc59e2feaa3da1fa27204

    SHA1

    bcc328bd684744e5aee992d30996b244ffae5deb

    SHA256

    6d52e290239244eda651759010b5d18f22917f36d1853cbb9e4edbf6c8841151

    SHA512

    ad19591e1eb9b9dffd23caf5e212864df57b589f26cd6210e71fdfcbd7556cb693485fb7036747c7d8f1f01f6ca5a297358e8c93ebf579b5a6bd6655cb701928

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d6b3720a4d1aad73e57c0ee6444658aa

    SHA1

    5d4784c678bda8093d4cf80e6bb5eafcc7024aa5

    SHA256

    7cbb5e2f8c997264354a4ccf0994b874b6e7adb3135ebd044205b3a32ebf16eb

    SHA512

    b3eaf442614a2b0313233f500e692a06ee068f23739e643e123a333b0de5dfbda523ac97907265c9d13808e00ec0ff8fe7eb79eba5f4a31754c8907ee54d5991

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba719a835455d563729bd891a4529f86

    SHA1

    265140cc266cb34cd2e6b862e3aebac405ba1e65

    SHA256

    d497f1eec7f6f80605b0e12fb9d26ff9a24dd47c923b02b2563383507a047d4d

    SHA512

    c0ea27291f47fbcf15b53d3526b510180112b91b7910283d8171075e1d3e55b3fafc662bc99b5ae8173fe472f4cb6277080836c3f70c0497d053ae21ea880331

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2b378ecec74853f02e32c2770349168

    SHA1

    31ccb17b1a06108f14e1673c7143a9149f4d7ec9

    SHA256

    813415fa3a5562df1a68820d66be02ec3dbd5f4edce56bc28fc1620bebf37512

    SHA512

    bb69d55c7285132257e11c44c25f3907f4049c6f074b80d65ea223760554b65330dc1bd951854b30c0d4fb6e422e89f48e3745f2bc39bba0d000955394bb87a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1943e279bedc6d9d8eee7374c455c96

    SHA1

    27acd6333d042e10e0a0ca948e2377c8903e684e

    SHA256

    0a7dfc00fae477448f3478e7e6eb6b4f94ef3970388ef3fb7cb21087fad6c4dd

    SHA512

    4be4d7373abc608380078ee44bbbadf1e560e4ae238fb9b54253428df09656e0bfabec882d024689baf68a7ec98498fd1b311818f0989a6b1c2bed9ecf057f43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    84f4dbb40c0ccf38fb592d92001cf774

    SHA1

    9a13d033d8acdf919c9849838f6e5f2865dfb0fc

    SHA256

    401cbe2d25919388ca22c6fa8501b843cd2eb4174d7be72a0d0f81c063b82852

    SHA512

    f48ec8f19c01fffd30257134730e99743f1428a4f27e883210d0a1ca9c4e2e0a1aca7cd626b761d8c4a332a891fa6515a3d7f6fd3fbbce28ca0078ece5a47558

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8e1ad9d1bd88aae5f8e3581e811d0f66

    SHA1

    891b9e5bbe61b0948fa2ba473f957f299ea564ed

    SHA256

    a8d1bb5475bfa39f23d93ec2a62077b8680da95ad4a7e94a20dea5a98cea05dc

    SHA512

    ab0527bec30b3546a19b5b22accebd07be2769f48aa5133afac3b57ab39ef6952f761b7404968d8f75965a3d32b8bda7e17d6967f81961b2579733102e548e77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    259de7e10ab4d415a831df727f1c9f3f

    SHA1

    ed138fc2e541536ed06bd599b37a77671d84117d

    SHA256

    51f07afc9a606fadb7290087785a9e7129487213950101464d3546185e5cb241

    SHA512

    be56f7ebec4894293030b9ab88f2a80d6bf675ce29c3351dd766cbb940b8f2ed6e3974390348593c4096f59a470c248cfe8d75ac99fa6759ae9c29ad1eba6078

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    249dcb6b6f551ce1dc2d7eaa3f8de0b4

    SHA1

    4c37aba6b048909774932c6f2832ef645eccdf94

    SHA256

    028726b28667cb34a8912f460f93c68bd3a6563a08a48026e3663d3984cbe7f7

    SHA512

    1e600e59cf01d269d8bc8174eb96079f17e851ebd221a0151d291e7508310d84ca437f4aa445f269d1e00fcd1058eb9646b3e2de9a48ff838369e671bc4185c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b84bb2627eb60e4433cd78760d3ca9db

    SHA1

    1590f48f67ad160308dd1deb9db233f8888c8b26

    SHA256

    57e259e317807c01c61e26388882f9ab06f4601cc16af1380cbc92173f6c5df0

    SHA512

    b4c49fc8d007fceab0dd615cd75e589a7d8ae673441b954d0626dd791bb8915451d4374e5383091c700a692f1444ccd2a5cb0dfbfd4fb0093d342ee49928e8f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    01a5e906e2b32805876473ec7e6674e6

    SHA1

    0aede834a85aa180fa5913b54b793ac267df0202

    SHA256

    b620747555e26998318cda169b9281651e9f5d1d9ac5e1fdce46d1911c426467

    SHA512

    a3e5a4063a045fc580d7a04e54629d812ad7c88ce8c7fc19aac385598180aa3fbd77393561b002d9dd97ccbfe6e389b39cb1b86786d0369294ad7f32aea4b222

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    415710cc2a42559cff76048577b030c4

    SHA1

    94cb3659be412aca82366af99795766a977232f3

    SHA256

    f109ac845d3a24e3a789233a1f44d8e26742624b8854f710fc76e96a54206232

    SHA512

    7f3a86323790d1cb059e720ca92317c6a752c80dc8cff8f5692be719358733b1731d3a267c385edf8fe2e6505454533ed3ebb867ce4b9b5fcf42a6259455564c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7760f4afc26e172ed22a1005ac960c45

    SHA1

    5a8944ed1147aae275fcfe93f126a78ddf35bb76

    SHA256

    275fbe93da36d0cd11161382b99fb02c4c0eccb21f3b968b167f489200b3e919

    SHA512

    d3d2cd9c9ec2862bce7db9356e37c533d29a087188779ac8ad0836c4364638cc3a79c4df3a21e919c0ba1e2683615c332c25db9597a7ece319cde46e299f83f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7eb94c326bda503ce9e25a6f77e505c9

    SHA1

    3fbac20646375deda175fde06122571fd3a2a57b

    SHA256

    e6183dbc78024db4b9babe1f6c63f8c708ed17a725f9b6c80b140675ff4215f7

    SHA512

    4541d9c1248d06501667b328e7d17867451fdbecb5f3684e2061acf8d73371ded269cd82feb458a4da226c3d4f226eda3398d2b8eb2aa518b5d1e4cf5458bde1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    65cf4b10314cde30ca957d217f89e23b

    SHA1

    c9ea16c5c0b7d95ff190a033bf11c619e7fa317d

    SHA256

    ba11dd17c09cb9ab8314f36f61836a6a0d7dc1ed5f6ac475a30a7938768b1952

    SHA512

    867982ad74b6c74e52afb283e2132539ea764b2b3e57548c54c0e5b1f2e08ee742c195ced21d13bcadf37e6b6bf59ffacb39a6fa10bc0162ae9c14a2a5616ccf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f2f8b7ef86af21bada8cb8d8d36f661

    SHA1

    ff4e43371c495efb7697ad1bd2ecb2d2da7902cb

    SHA256

    3c2f34ce8a3ac946c1dd0163bc7326703094987b6befdcf471eb62c78e35f145

    SHA512

    248fd840357dcc9c00ddd86e811aeeee61c1785e535bda7191b051512bd9a56c928c0621c3c9487e8ae1d4bb120ff4a19374c726e28bd46c000b285f2ba7ad01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c573a7318b1054ecdd9b9bcea865d2bb

    SHA1

    5e05ba823b40e0dacd9166b2e7de65a962e12f74

    SHA256

    27ab0bd13ea0b2c40099659c9940ed9ba04691eedf19769f78831e71d830ea7c

    SHA512

    7da068581924a0637971c4b67d2232b6962b9ac6ea8e47247641c27a66c6b6319d4e1d303bba76ca2d75c72fcf4bfcbb653c3d4b9b3afec5cbe93419ae5cc312

  • C:\Users\Admin\AppData\Local\Temp\CabD1D3.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD205.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b