Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    22/07/2024, 18:47

General

  • Target

    645c8fae6c7709108af3ad06763a3234_JaffaCakes118.html

  • Size

    12KB

  • MD5

    645c8fae6c7709108af3ad06763a3234

  • SHA1

    d6528f33128a550d9385c9d8bf356a9f96e54e12

  • SHA256

    d0a47a4686cb99fa767b6247638f4252172e2cc39096ea6e32cab4dfd67c86e3

  • SHA512

    eabe21e7c6802f1dcb007514fb3a0bf68c1e1347ca3789d5cb52a593d4104309ba6a73197b2ad675c5d6aec4c479be747b9497e4ba0e1e1b71a3030053f53b69

  • SSDEEP

    192:JYakWxg9H70vC4KCIdYAwAAP2iTIEDhzIYMo2pU5GVZOixZKxfrC/Dwav:JGXH7064YYRHNTIAEYMo2pJKY

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\645c8fae6c7709108af3ad06763a3234_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1696
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1696 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2236

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    caeb1e6ef6922c4ea5673ac5e3b78af4

    SHA1

    f00cfd52446cf188164cc2230785ae684d3027f5

    SHA256

    fcb904f31579a5d8156db6050c1228b47b25abf40f28a2f04b2c3233f6e5bed7

    SHA512

    be6f49e62bd478415ce264c9447c92f550e340dc4fdc09d14803bf9b5d6840a81c6df0c7c9f47f27cf3192cf095d9dd691149698a412b73934ba33f9f8779792

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2a170c42cba9fb8840793873de9c9716

    SHA1

    0d30b21d4844e0434ca31de83776ac3b02f1282c

    SHA256

    2e768238fd8fb5634041a152084072f0a96171865ac371ffbd8e63d1650657b2

    SHA512

    ca33d7500bd7f040c15182f970bbae76ee7e80e3baf314aeabea975975c0c72d833e5de9530ed2db51c3c1f6e064accde13e209348484c6f0b50428249d49114

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    f212e525de44500ac004203c193d89fa

    SHA1

    efb340e4b53381320d8808d5cf17cae4c2f0ae62

    SHA256

    e5c1684f93c446c5deaa853c2760cf2afe92a5292ad14b3acc945a0367af658c

    SHA512

    4197396773b65fe6074b6d0a76285c439471dafec4d868c682d06f346f165eb72f34a62ac4faa1e92ef4ff897dde67b4b322da6b8794f6d65af43125286a10b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7c634183d85cca3a0bb75b9852c6c600

    SHA1

    de3adaf53ed3cd933fea094e9564e810abd7c16e

    SHA256

    5164de28302b75dc40cc2ed78772054992de747d0d620d9e8762c6b2c60fe386

    SHA512

    f5f4f60e0a8e8da7e4c2fb8900e58609fe6fdb6436d118569b6c80ad4f3f4a3764fccb09d6c1d589a3dd191c194afbc14e99818554e2667b8ed7e82cc6b1589c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    d74b86d0e563073cff9e6bba500067a5

    SHA1

    7b284c0dc4911b5599e72ee0e656b8e7a2c5faab

    SHA256

    d2919bfe97b34ee88011c213c7526cbf5cfed2db1843106a7a2fe0535c58867d

    SHA512

    a11ec1f0677882002c000b688eb6b3e2832067c78a405547ffcd0fdc6cb46fee9e64129a80c8e6ad4045fc649b148b11cd01081024efb9df51a83c9c87f7c46f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    0618798c4c55703683f1a5a131f5003f

    SHA1

    f91724963f9d88be6b953150b8c0131c2a4b760d

    SHA256

    68441cedd13823ca71eab306d065941da946a42d3954e90d6a7e1d65c61fe0e3

    SHA512

    8c4143a3e767e714f058a23a85cf63472a1f431233eaea6b5e00db919c78de1f7beca12276ca8ea0bb996b41449bdbacd19da5cd3211c2030accd4bfc85cae58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    fec3505567e1867274697590753c79c6

    SHA1

    4a08bcf1c9468e9c64d7f7bc219a660f5700fd68

    SHA256

    8e93b338d99b6be70a8296b2e585b340e3ce7168595636c7d967776df8716161

    SHA512

    96cc67dbba40de6aa84362c767ab0ad9ec16f99d720e5c3d4d0bf5fbdfdb6b7d44ae766f0613a5c508cc10c026da5f3c1308f264a73a3c3d732686e0a9d43e61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b7a7e4c2ec21018c7ea621d8ac03db92

    SHA1

    0db80b79ec84db1e4e1befbca7f0e9daada9e8af

    SHA256

    5c1ed9a49e65caa2250c6b32db8c4a331dec1d93e22630d152cc5e423f6247d4

    SHA512

    c9c021fdbdcd5692a6ad4d4e2f2a27f54ba57af46c12041217d3e25fcc8bb674bc816c6cb2620c65b87d273beade53e9b45c33533f1409aa0bd5a0c45eef844a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    6ef028a69d640f342c5d5b0a243464ce

    SHA1

    7189e01c1b9615a7a69d04ff133f56239e6d48a0

    SHA256

    a7aaabba5c222f245d442588398a9f08a621f177b43d14490c1bf4a720fc926b

    SHA512

    ddcd895c1853780037e4439b523cfa4274259d7be775ca80b9568e96b9291d2eeeb312b18515274b442d5d148e0d0ba81deb59c1c989ac4ac7930614a9d0638c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    bf654f233104d5e7a01788333a2b6d0f

    SHA1

    fee5dd4d26dabb37eee3fa6e142d5e317ae72231

    SHA256

    8737e6efe306cd0549ee7b8feba3da5460dd2a6e0310c1f1f623720825b5383c

    SHA512

    c55b711532e44e32a3cec0344197411949e0eb625d552ddbe4d76c1820c50e1ed1fadb6164ab9a0ff688c14f8e8c38a620a7cee977574a56bd4a52e73aa24605

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a2c04e344f577f16ed08008b864dae64

    SHA1

    5b8a8237213b9c41902c1075f84abe83cab56682

    SHA256

    8b6424f31323c9435ce9194d491ae938f4da3902e7166614853b6e8459b37c9d

    SHA512

    16109dbe7956f3926e606cab3cf16f1af8030096431225552e102199250445016cfad88bc43ff81d3eb9d5627fe2524ba48448c60f726e2b8fc0550e58ffd115

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5bf19d47b16843f336911f553bca43f2

    SHA1

    06ce5dacc278bd6418a88815a2b7e937033372a2

    SHA256

    1f029cb7e535aafdb9923f9e8fad2d6e671ff7529bfe190c882594c5c9539496

    SHA512

    dc107d5f9e8679d3f84da04f6d99e1cf02dee96fde66abcb1c7b41b41cc1a86050fe356f95d11e852add1387acb9d12504a17322feb896dac1669b719a181cec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    96042f61bd166d5573dd9c30afa456eb

    SHA1

    40e11c2d9ca020494e6377d9ec2835430f7495c0

    SHA256

    7974ef72106afa311c3930e7670c285c7644bef4371295acd5bdfde1a9952606

    SHA512

    7e45b6c7f17a7faaea3e50c7b167bee0a3327c0e312ddbee09a161f19c385b63467da770217ba167f3307a65dc344edfd1bc96f1a3d2cddd54a8e0ab6fa1b07b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    d90e59fbe78562dfde68c048ebb7287c

    SHA1

    adbfd9f1604ac0510a2e03cd9a1433bf68da08f5

    SHA256

    5b5f647ba0fd8d271a4d405cea041c3ffd3647f689e000e0a9fe6aa6fa72ce11

    SHA512

    e2cf70ed72ee5f9cab7af87a7db67328e5dc31d6f54387ef0597d87fa57ea8e6715fabac8139f752098c2f78db04bb92a594a447a3fb1465cbd0a1fdbae0775c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2b047efadc6e6f7be169bde7a7c4a088

    SHA1

    d2c108418c1bc9764ae1d10491a1d19875614dac

    SHA256

    0319203caf73c75d622da8c6ef4a039765c47f1e953c2a12279d73761c854bd2

    SHA512

    3e127ed8845c6b921dbebfcb0f9b6be049f878fd5e2a3c40f533b1e3b283226ba958de2e653ba78f6c2b514b11301ec349ea40e07503b663a33e5a23e9b97498

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    146f6b022bae67c6752711a35be686a3

    SHA1

    ce7d96965911bbbb3afef1c409f2c73cd0c425bd

    SHA256

    b61b365e96e32c46e528e3e603bf4edc209e4bd6124a220f3038e664e58cb6f9

    SHA512

    2295c9c5d0ad04659ed6a2bc7cc542e4a96803a00f26728f1513b53ced0261cebc78cc9d413852f4997b0aff5d8b8566a2a427f0a6609a8ab54cb0f3b53421b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    53f54f567af04b9bbaf011742c81d286

    SHA1

    2c338e459f65a928aeb422c48dcc588d916f22ad

    SHA256

    20401dd14072d4599920b14bc697016f37a1cc9d66cb331e61d5fbc3c1d6a425

    SHA512

    f53dee6a06d7dc7997d0156b5dbc394f8be28d71205af48d39547a923727b6f9f7c75a5371fa52bf78724052ac31fc4d6db3152c257daa2d589cde79b5f1832b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a6fb25a67e9aa8d73f04e3c3677f3fa5

    SHA1

    a5ec8699acabad6931341e3d8ce8fca733909657

    SHA256

    072d9ed210efbd14cc083e4e9304dcf1b706706bf37565917e83dfc2b3c31f0e

    SHA512

    35a8fe497b33d52df0a86431dd5df4da4fcbf781319ca17ed39bf7140293c275bf7cf61ea6fbd954ac7d52f95f283d3569811deba6ded1e5e10d5e5d39c237d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    1712193f745d4c89bbadb4f18624d725

    SHA1

    f19cf05bad1d13feb52c77e8c6ecc7393536f045

    SHA256

    1d56234c3056e7b1370016e6a8307ee135ffe252b7e952908ee5441454fe4ed2

    SHA512

    2ee78eb30d01e9211cf274f5ee75a3cf73ed6536fe00d249e57fae7dc682085b52e42d3023f558d4339ac891b2a4fd1a1b9c7df812b1f7d38fa4f3d547ab73e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e7742734bd0c4c7c6092d3e0e649286d

    SHA1

    c94da8834816d5e617b9370f5a2f8be12f33db7b

    SHA256

    5ed88049d62676de0d2d2b5d90d20b71e1b1fc977c7bcd38999ffb04553a9564

    SHA512

    62413f2275b421785338b632826fa4419a0185fd8d5a023cfbf5fe5c908c05d1e73f89e8b506c2dbab1e4376befb18188cd08b9076efe372a26253f9dda6e783

  • C:\Users\Admin\AppData\Local\Temp\CabAAE1.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarAB04.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b