Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/04/2024, 09:14

General

  • Target

    fef2a67924220c08e82646e04cc6b89a_JaffaCakes118.html

  • Size

    134KB

  • MD5

    fef2a67924220c08e82646e04cc6b89a

  • SHA1

    988b5aa8555a6e762f5a8edbf5c40bc14692382d

  • SHA256

    d3fb6ab0cfacb20e9a9406edc0ee80c8e94b0ff9082d50f10a4ebde64679eb35

  • SHA512

    e60fa340fde997f6dac91b914e0e941a060f8a2e37138d925418c0c2cd2e25175bdab720209c1fb2b2182949002ea618c40d5d9ff055079075d7ad2b4d7e3fb1

  • SSDEEP

    1536:STd5f5UzQQZNrZQZN3ZzZZPZiZNoZdZZwZ8ZprZPZZIZeZN5ZJZZbZYZZmZMWH6/:JEyfkMY+BES09JXAnyrZalI+YW

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fef2a67924220c08e82646e04cc6b89a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1288
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1288 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2856

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dacd9eb0f1567aced3aec6eb679f1e12

    SHA1

    ed3061128f9d969920944def8982ce7b901f9d00

    SHA256

    fb19a714a450dc9b99c619472319c01b3429510e838031c91a7a2125f126ad33

    SHA512

    a17bce2d9eeb53224baec3c61a269987a50c096ea5c353d83732a9d908742a24e590badef6249f8828555ad420358474e268e7bcba16551cad21a8866f958d0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c42e13a62c9500093d6595741039c255

    SHA1

    a9ccd43bbb6a818abcebacac24824ef1caf5d1ca

    SHA256

    1d319cc945ec2d8c454900bb17a927e0a8676d3be1205c99953d889f59d72231

    SHA512

    068303548a9dcd6c6ce72ee51058e3e23ebd6c81611cfc53606924937a5a192fce05f2af412e8973ef2db95497180820ba0cd28adda72a30db2d2105e9cf203d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bdf1e426cdb6261f2c93c459b851e6d4

    SHA1

    34449c51dcf9717ade4774050ce0d7b991c20e37

    SHA256

    d6822f038238c32d1b90cbc6c7d3b9400e31d914405b1a9d5b1ba53c6df8cf9e

    SHA512

    42c5dd44f183687ed98bf1e22cb9debc4fbff6dad275bd5cbf8646cb7620d61a7c564798f9e7c4871f25cc0ecfbe9ee094a0a72ba56dcffcd7eb039c1c8c4591

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    962de0d583164d9175fb9f8d6213b91d

    SHA1

    7a3050b14ccfc23b319b694e12dced35606f9ef9

    SHA256

    667ab6719d69adac70ffefa5c913f2e0ee1a080a9e008acbe7dda943ab023d44

    SHA512

    42f7059efbaa21b743c27ea4ddc10ad40466dbdcf8cbf18e846faaef1e09abf6febe21b2e71c8ccecf82171cb55f2fe47a9eba7ac038bf25743d37e8db1de2da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd731c3530dc0eed1a8dfd9ba98de8e6

    SHA1

    273bc98bba81c669f3c3189a0ce29b97db8ee8d3

    SHA256

    ca51d7f1505ffa004e7b8626ef35014b806508ec5c39b6249117364de30005e6

    SHA512

    62eca24d41e438670cba35ee3e42fe96382dc61afbb661d4a48649ddee9eee95f58e30ca0164e55d763ee56d20faa354a900e3c7ac89b5ab62446f06670bba16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ce089430314ab10d039a738032f744e

    SHA1

    68a33261612b40604cd03a83e62dd12f115024de

    SHA256

    4df42c19c0b1c7222750db2f049a9fc71165692cf13e3aa8b80ed80f6170520c

    SHA512

    440186ef511a1440a5a09b2a139049ece9113f773f3040b0a30b56e3229c68639a8c9a7a7375896121527dac4591c695a21d530d235a4e3666900bcebf53d919

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b38ea4ece838eedb322bf583fa4a263

    SHA1

    ce606ef52bb1c211d17edee1d8700cb6a6496d9c

    SHA256

    27d6defdc7f03debd2d0fca48706e944003d0c14b921581786c49fc6cbd88b73

    SHA512

    900a6056a03ca3f4f0a4f01f87d7253dcf17b4d77c4815a62b0d404fddc60edbb9468d2902c237234d125bec6bdd582537641734ab7c0ad11777bbdeaaa887c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1837c11637193ac2bbd14083e0cc6da4

    SHA1

    d1d8be6a02c445523a11dc8a6d9f4e008b9a6d78

    SHA256

    9d40a7d8e936b4da5fee056ce56321a869cc5150ec9f205bd694399e9bf45561

    SHA512

    7d8b6ac95f5cb2bc9cd213374bb1d6a0b90f1574eaa42cfaf53b06b96f5942e876d78a78a2f3feb4ec0dd8197c3c8ed348131c63073daf9ca72fc1cb3fe13ff3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    371ee0123a924b57e035fc38249b1eb7

    SHA1

    4fb9d4c169755dc589c8ddc48e38bc64f4b7dfd4

    SHA256

    ddaf9d6b19d1ce4d50f91f242fd4c490d5d8afeddab96bf6816cf0d4058be17c

    SHA512

    b8c2874bee874fb153c9bcef6124fe84193960a93e6b0043fb6a33f775441c24827f7fcfc4c720033d4a78de736e12c8b098ee779d72dd2df611a9bb9f618203

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f1d4c49e8f718fef7b6bf61a2953ded

    SHA1

    c4a8c6e6667d1ec70f5577331da0503b52a6c927

    SHA256

    60c8cf36cc618b4c7f4ca9fc6123ce486cdc68dfff736f46226636dca36bff13

    SHA512

    b96f1865696ea43a5baf8cb538a9068e2ba4769d0c026e05f703348de40a095379d404c849acf72475946ea4ab190c855020f75f65d387325a7ca58ef9e269c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63c9cacec4518d0fe9c0c38e1ac9a1d7

    SHA1

    348cb07054971b9ffc1bab6e002ee68b9fe8d03c

    SHA256

    b3ec09a3c5ade48dd2ab783722fd502fbd8084a7470990f1ebcf90e40da3ae51

    SHA512

    c30a39790b6785127052cd1e0afe21dec30f1292f061351545bf01b93ca6260650749a9667db85481bed233d30760c2a81f5996dd9fcfceba77b802a50eceeef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08aecba357a8a4c7e52cfeeb69887552

    SHA1

    bbdb917e49315b970f4f8bd39e5b424b2da8920a

    SHA256

    71c9e07e9488c4de2ca8a282aa7283c24d5680253cb375f980a9e7adab9f82be

    SHA512

    9280bc40061618704cd6bc10672fbd4de2216c16d7245b2fe0a79a7ff62bc4375722160769d9a0b480eb5cf630aae0e3bec3c238c23530dfe5f8e50dc0b21d0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c9e6d634c04ab093df3c44e59cadab5

    SHA1

    a8e3a8c0a825ed953abc5cf632d2b38ff071c3df

    SHA256

    8388bcf55cab0efd3f15a7b8291bb1762a27e631af57a80557a089ac61242a18

    SHA512

    06ba9aa817e509aea7c746901d632f47b5ac0b8dc55b50df8cdeda06f68f2eb9c56ac767fee5c9316f54d4023c922fb6a8ab0d505de53872cdf20553e0081915

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4474fdef947059e425afae2a9e8e8861

    SHA1

    f0bdd713f59d8ddcfff9fb0e28e812ae072b3fbc

    SHA256

    5cd3e417f456faa5175d73bed77e99662c0080945766e1744c2652f2f6418084

    SHA512

    20114b1460f2ca6ea6eede3dd7d74d73339a9c0f4d63490cd4dc37bdc0dae64418575df60b63f01c364394080ae1b395e4cfb3b20e931c36cea0ddd6e5db20f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ce8b02e6f24eea6cadf85f80d0f3052

    SHA1

    2b19ccebe7528c52f07c402532ea23fef41f4d74

    SHA256

    d5e7ff6015b45e6237c1cd0aa0051b35395fe251530052c843ff2f6003df3b1a

    SHA512

    1de17dc050b4dd3a726fffa83406a89f1c50c000be28fb6c435148879ef7696a17221034f881d1ed10d306975d2be1617f09e7103c6188281f69087a6d24eb79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39f5daf7061e0e48ec956774debb3c34

    SHA1

    3e8556fa19809f01f100ec8c00714a90deec0b1a

    SHA256

    4c4234db2b6787a8edceb9293814c70af91b63712a96c6e9a413d474b1af84cb

    SHA512

    de136179aa539bcb8e976146ff85e73739c84c8ade29ec89a1c79a2f40c08a04e726aa64d6389adcf29263e9120dd4e75bd88a55672745927c7182eee14b6fe7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18b8e2f745f428b0f8fb7b01d6d94b4b

    SHA1

    6c27b6885747caba16c22da9b534a20e52d11245

    SHA256

    2af8bcd74013bd810362042283df20e91c72a7a904c55934d0151994db683a21

    SHA512

    74d50e6b216f3fd1cdfd56a6c7b33262349974c1dffc33dfd3d85a960f56429c02d40281709ca89d435c37dcbc706683f4eec51e6c35dc5f482680013afe8b1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    95d2c406d42942038309662b78681d70

    SHA1

    3ae8096804c8eeae23d609e8dfe1bbfa9e657a6d

    SHA256

    46f58e5649ccc574afa55e8dabfd1e5d1b51da9a4cd9e6bec144b589f8efe2d3

    SHA512

    f4f2ed99d0947a89a3444233e787148d82512618c7ff75786908198414d98807baa65ca455d97f08a89577cfb43f44714e15da634f73211ee176e79b9d66f502

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c4b7ad176c18be814b7bec13c031cdc

    SHA1

    b6baf9618b05d479969241be6c8437f64e324a06

    SHA256

    67b6eedd63edfecd5834c4c86b0a0e483e92802e6e410e9d69f054738eacd9f1

    SHA512

    7ff9c9f8da32b0bbfc7850cc70e323edeecd4c5fb8afb9a7c584028f3f92ffb35e873cf1cf11dea493141d6362367c5ffd23787b711639bc7e2ac76585c03ca3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37c198e604f84e593afa526c85b80a02

    SHA1

    9e70db5de29f78b34f692f399a3d8230b3c45cb8

    SHA256

    1dfb04e97f76c0c47100fdb87c4bddefad76f7d1debad237bf15447a0235fd4c

    SHA512

    d351b266a76c2b442ae6c65e063e595e9f8e6716e2cefe0614c081a3cc6080d7c4be08ed7f23798cffc17414f24007099635576f90abe00425133dc15876d333

  • C:\Users\Admin\AppData\Local\Temp\CabC832.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\CabCD06.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarCD38.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a