Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/04/2024, 21:46

General

  • Target

    e87d6952be91f7c8b7bd0e0a346edef8_JaffaCakes118.exe

  • Size

    57KB

  • MD5

    e87d6952be91f7c8b7bd0e0a346edef8

  • SHA1

    db34b23ff447240f15f0d91ab039d1bd83e7f85f

  • SHA256

    a9f13a7b1ed7d3dd54713244e364542967c762d7c26253997c1ba23490e10c9a

  • SHA512

    873a648e9afb28ac77d051e785bba0d3cd17cb6c40c889148b93ce2beb874a147387cf6b3cfcfafba6ffde8820030f4424472d2e65f0a0b2b367ceca01f920da

  • SSDEEP

    768:x4ktlIF3BF3INUF3G6noj3r/eK4YtQhbgp5231mmZ3AtWCGN9KbhUyD6m0OQW:f4RBRI+RG6or/eKEhbx8mZ3AYQKyD6

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 12 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e87d6952be91f7c8b7bd0e0a346edef8_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\e87d6952be91f7c8b7bd0e0a346edef8_JaffaCakes118.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2808
    • C:\Program Files (x86)\Internet Explorer\iexplore.exe
      "C:\Program Files (x86)\Internet Explorer\iexplore.exe" www.msn.com.br
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:2940
      • C:\Program Files\Internet Explorer\IEXPLORE.EXE
        "C:\Program Files\Internet Explorer\IEXPLORE.EXE" www.msn.com.br
        3⤵
        • Modifies Internet Explorer settings
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:2248
        • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
          "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2248 CREDAT:275457 /prefetch:2
          4⤵
          • Modifies Internet Explorer settings
          • Suspicious use of SetWindowsHookEx
          PID:3056

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d57088174ccedb918e31d7594ca342b

    SHA1

    2911acc0c804f79a227b2d02cfbb83712d7c132f

    SHA256

    70d7489f7ebe527f9aa3df7f488347a0473948fcec28e3f7ba405194c87c10c8

    SHA512

    8fc735a2870a97392b073f5ef369cad4c5237d58c5777aee458a1c6da54d1dc907c4afb956d894b5daab3d3452b0e229f5c91bee82f02682917c91b8171e2a10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f57fde57fc08cd74bd056c865fcdd6e

    SHA1

    73d01b45143ef8d4c25880cfcdc50db1ef1afe57

    SHA256

    3bd53f3b9c4e28e6746dc10eaa79005aee19f6d30f080af80836dc2e446b97ef

    SHA512

    407cde1a972471bee42698838c17f2ba94155d98715334a3f1934abd32df89639bb2f1963d3fdf327312b59d4e8975f9baca51df6bfb74b6070e60c1c9ed90d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    885e89ea1b2fad276d0988322bee80d3

    SHA1

    77f6c71e4d6ee92c95cca92a5b9822e17acf4fcd

    SHA256

    1ec5269bd562d3f43683b57e4a1421537608cd3655bd84400f47b0943e06b12d

    SHA512

    ea45f042b7c0deacf683eeea96b42e83909b5a7164df0808190f501d2e9ec863cd3d6c277a92b2e5f5d72d55b940a3826b5bfc7a91205568e514f777624e5c7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ee4b8b6f268ae521f4c41905ad27c9e

    SHA1

    21ba644d8df97d025f88745e95a5aa3ea1df360d

    SHA256

    20dd2e7eec7a0cb609ff6f6d353134901f2367340bcb4cc340f0b9e4b72ec90d

    SHA512

    672afc54070f765834800f655ec1e476301866b67c3b207fd205386448391408475245295a7dffd6208878fadf9841e19481a57f2b31add7650157c485b9c433

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fce9637e2554b2283b94bdf4e672819

    SHA1

    ee99c564b58d00af33f8b79b80c7a98070e9aced

    SHA256

    9e3b39070dcc503bfd7d4193840e1fcf236424c2966f6806decf416b179706ed

    SHA512

    69652e35601687547393622f966141d3bd809d205af85aabb815575b4a4e34f95fb17b73c93a960d97b51444e144892dee48073470eba6a29ffa616af7239d2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c93213b9180a69f542e6b97c8da8b0c

    SHA1

    480c000850bc9af226cb5db618ac7109c9d071f4

    SHA256

    4d03daa5ce946ba5f4047d948dc530d6d5d61c5f1e6164cf1a0a5e80bd004be0

    SHA512

    6df8d37d6a9f344737537323b01119de61b2a986790442ad4a3d8613b1e3fe2149b1a0b1296ce16462cde2fc4cd018176b9c80851a87da34b0b6f2f73774d787

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9dcc480938cd07695019e709e5174b6f

    SHA1

    478710150859d1c804a278ad6932a1855d421c42

    SHA256

    92fd1013e27475b798c787ce6d96945c8aae0ebca8d91385ebd810da98d16bd1

    SHA512

    e661ce534cfa51e386d675b55cf69dd5d8486b8b8f94a4048e48e8b4eafecff9d7b2733ae947f419f118dbaf37ca6aacaa5b62390d8af85ef6592bd99670ac6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c822661f23233ee8affdb4f18f44c36

    SHA1

    188a79dcc6c39581d305af1f93467f35c1a24f2f

    SHA256

    32cb0aa7ee949a0a2b1e9b585b9f1aa64145e65bc0879a07e8f3e6b271b920e2

    SHA512

    0541e35b06a5649a5c358997c85edfd39587d7e87fcf78895780242991caef85bde2d18d34c5bdb9f7bf1bdc1b2da9c834b7e5344dd67c60e04e46d4026a820c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1212fc358ad4adb4f8f76a3dd8a4f047

    SHA1

    758ba9ada83c19bcd17baca872661af44c2de77e

    SHA256

    6f04737376ca25a7cdef4556343cb4ac00f43606f6618dc42f828af4dd287247

    SHA512

    ef2c6fd29afbbb611fe57e61245960d2e45c6d589d486a0db0711b9cb060fdb77970369911e6ce17993c8fabcb2e1f85b2722e2d7d6214ab1307d944edaac2b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42fdb6ee0ae330a12a1410c3b125930f

    SHA1

    cff742aaf5bea2f563abb320b64a26331cd42046

    SHA256

    49c5354acdbd858e6006acac15d2f897788f4415f9c3f6336673d248d836db72

    SHA512

    7d1bd256c7660c8c2e82602d40fbe819e5bf1a558059c0ce03a1192d6877149f116f71b346c5fb7772b56e2571e61af4da40bd41c6134735127a0b73f49fa808

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fbc1aa578e76006deb8d2bbd0b2ea0c7

    SHA1

    067f5a0b1c3ceaca9887ab1e3398e15a50e6efc8

    SHA256

    4a0a23d0cdd838259c72a95d42e47518017a187fe5dc2675c9d8a00fd9a95bbf

    SHA512

    a6e05399a8dca6538ef657e37f7f5054d33a81888eb2e0ff46b177684cf3d94cc5b5b337a1d6ddaa898ce942c07bfe72f2714eb01712768b2c71b5c653160811

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b7d32e5f6741eb22a0833a72f21a92f

    SHA1

    39ecd38e9f6421cfe47c760f3f38fc512ee9451d

    SHA256

    3af7e7fac4d554af4286d20b1d08646dec0900ece007410316c9aab2ab7109a6

    SHA512

    9cb420f3f8a77255549efbbdc5d15e5b8eb68ebd6364b8ed163441764c17547ccc96d942758c88549ae74fd1d4733a8c99e4f16edf8356cfd08d7e7a2b67246b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    773809f5f52ae6c7c5100e446dd7d614

    SHA1

    69366efcb288e27a5ae0f26492fbd65a2dcb48a6

    SHA256

    3c3c198806c9e9cfe37a8fa6ed241189ec62f56f4a4599a2d25d85cbefbf985d

    SHA512

    6047b78a7c428871086fac32a0ab84889ff947f6d1231a962445b50ff3113219da60bceb082ee4bf3cf326b91a4359f8dc15586f762bb7e5c2a02dacd8f21d08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99aa23e6eae1a1db66af7e2d00e38e5c

    SHA1

    e7a9908d552bc2d9059bc9b063c29decb3bc55d1

    SHA256

    7d44d41af66d3e3fe7acb63b9e1328ca7d6874c6e3818f8dab3a2179a62d510a

    SHA512

    c4e8b5ccf098219c8e48f458b381937b6ab7f2f40c92ab068de5dede5c1c6af177e1c5690a2b1f2cf28681601f525ab4c875bfd6e11445d70087b6c53795991e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    32245f73d8dc154f6df7f7f5ef45125b

    SHA1

    b1eee6ed44b98c2148ff54f624b66ba1b2019959

    SHA256

    4cb83fce7bd54f0a0f4028f3ee5d9ebf311978b01d3712e5926d628d0555fdce

    SHA512

    f301d81d8fd3b9e98db65b20613a457269bd5b840dacedbecd3e48fc6afa2e2abfc7854f2a031be1066ea9090a0892d4c9720a0058ae722cac8bcebd1f98021e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09ce54d00dd3059a6eb1591dd2b29abf

    SHA1

    31a500c7453b3bbc195c85a43b7af04de488cfbc

    SHA256

    d0de8268837c74669bc0f20006f3f9ff305a61663f1c2207fc41e81ba342a3fb

    SHA512

    696b243c45f32b47f2ba4aac23607bf9c5a6fcff274a5ef1ab891f3608a221af886d2ff3753cf2eebf76d464c7e92cce9c63827aafb1b9f1abfb2877d8cbd15f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    782942391e2b285de3dfa27ab4dedb15

    SHA1

    9581c2af347e61261e02dbe53e26dea746e7330a

    SHA256

    d4f1e40baf1dcca39679e99efc3087b9055c0920b3ceabc3956a8d1855e34244

    SHA512

    4e3512a082d896818b16e62cc297506e314772259d0421c39e73affe3c5f2e3697f1577bc166a5bea9b7e6040dfd372041faf7762fc526d90d82a3f6e20b3a86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75794caee47e5fba1333a6a6bb96740d

    SHA1

    8e6ba5c83b87e726d1cf1a0ef214413fd3ee9b90

    SHA256

    baab68e901ca8b86afec014dc6444afc236c85d0f35686fe3abd282f486a2448

    SHA512

    884242e9ab65ef5de48e8e9322a93197dc1091098ee4a83a3dd1903d41446042a9694cadc5f174ebe14da83dee891adca62c11fcff604dc46398994cf41d1ee4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc6934227e69340ea7f5fcde259fb8da

    SHA1

    ab561f1b796d519288d65616dda07d4bbc5f2174

    SHA256

    4f1256988862349e4e06c82edaf3d0646b88f3d842e223d185f13bdbc800cf0d

    SHA512

    9dcd977f9c66a70d9167aae419d69f39bf540efd9201e247aafef5464b2af2667f320cdaca42a9483fe11a527e16477433c7990b11550651d361f9cf3f07c2d7

  • C:\Users\Admin\AppData\Local\Temp\Tar803E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

  • memory/2808-0-0x0000000000400000-0x0000000000423000-memory.dmp

    Filesize

    140KB

  • memory/2808-28-0x0000000000400000-0x0000000000423000-memory.dmp

    Filesize

    140KB