Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    27/04/2024, 01:03

General

  • Target

    020f4892d32ccbbcb968b89f26e77ede_JaffaCakes118.html

  • Size

    139KB

  • MD5

    020f4892d32ccbbcb968b89f26e77ede

  • SHA1

    8b10b848f5d3cf1adc0ca0a2f35eb70c501b3709

  • SHA256

    cfffc0aae35b5151d89f5ecf5588ddcbfc3eb019a03a99619773dc252941ad14

  • SHA512

    8eb08bfe2562e25bd1713a7fba3e5510c6131ce3f84b8a46c491988788930979085ef7ba62715f407fea583e11dd203bd76ba4288581e5632728cf44cf16c647

  • SSDEEP

    1536:SjXHAU/KvEvlH9yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrk:SjXgOkE7yfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\020f4892d32ccbbcb968b89f26e77ede_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3012
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3012 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2940

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    607a4c2de2593c05bd09a792a93828db

    SHA1

    76840dd3d59451f197d703dc79a8f3e05682d7b6

    SHA256

    e99d796b46c27ff8b2f3f1e3cc5ef0d69297f61799549ffe1b886fba598c84a8

    SHA512

    c0b602e219885e53aa9dfbba13b017a883a99811af1cedb48aa8dc6270a31853ab91a9f5c87ad95ab917f30595d2575f5f7ef3cdbd2ce0dfa2069e3686f3944c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71f9062df3932e6b920f6175f458e379

    SHA1

    4762297b5313ae1e45fe0a83200671bf4ecef220

    SHA256

    0f7db2603499b25b7b097e0f7355dfbb9fbb6dc1bc7db50c43398fcb5a062195

    SHA512

    d709c729033e6c8289949557d0dcdf3e6eeb8549e2018d176f7bde51c8a26788712c1ad6614287817051838fe20655f0ec65176ec446ccb190efbcbae3327651

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a1c6b7444cc7814428804305e6e0aaf

    SHA1

    35d69bae0890e82c5cb6ff0198939df7db72dbba

    SHA256

    8a3440107cb1c51a2993a39213b68d6379ff8e2632fb2b3824998e0904edb8b2

    SHA512

    b6cc6925df3b06fcad87e89b7e1564220ce6fa2725b6812ff70fb607fea4d7f18643f30adf5f05827950b2e8c5b3f146b5895a2bc7e3c09cdef5ac55fc83bf65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a4c84e80db1f7a16f29f6cd6f1ff3783

    SHA1

    c9fdd893ee1a0c5b0b2c4d157885e2adc3ce9886

    SHA256

    b23ab5c66e2b0a9cc0f73a4a4b1b2e259c29478cde66b11e22838e8f21db4f6c

    SHA512

    26aaf26e308f1b773e96b32be43151e0cd97192a15ada959662af3c1ee459e1a9879031f414e26fc1e45be36cbb30b18a66d47432d1620f8771ed0b311792b4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03faae3e051f03950e925a77003d9bf1

    SHA1

    f4585308e6b4d773d5f35c19845717fa2cb8aec3

    SHA256

    7dc7fc8e30bc9e014cfe940f2248d138fbd51113998f1e144c22acab1f946ba0

    SHA512

    2191477f0c87363b8ed9d5622e0839da681b8efcac44481866ed69e566b95dddad1c1aad69ad161992190618e21b43bfa51469fd48d3f2c0d79e9b2f910c983f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    170f8aa4b5b74a726b01559014953ef7

    SHA1

    bd7d374aceda0b55f85ed6026d25d668f0fbf265

    SHA256

    8e595b1aaf06e73e24644326b1be779d03cd43053ade50e5e00e1d8c93070385

    SHA512

    f6b4b9c9070783cef0b44498e9aea20f3cea36337a5d0882902ea1018c7168adcca318827ca58d274f2c3f3537ffe416c3ae1c30e604c11ef85a493488a72778

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    691debf2026bcb7866b6dee190300d79

    SHA1

    76047b2df10de640daa02d12787a46965161cdfa

    SHA256

    6d4183b58be658a31bc37b9af5484eae97aba6d8dd378137d7a827826eb2c44c

    SHA512

    ceca0a90de2109e61dada46c2595d6804fa72dd60a06617b2d43d11d7ffe6ae04aeef21c641bc077fb6a566cc77a5176c37cf8dc299523cbaabfb4295a35572e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c7b730a875983c2e621c98a82dd9bd50

    SHA1

    8490420926d58527145ce656446bce2c82b8d176

    SHA256

    7aa989eff797f7e8d4d9a5871c003eb7afb01ba118b4e37040acc64694fa7404

    SHA512

    a17b99bac570d04256ac27239af38a7e08f472501a89fbd0afcf692a4749689be9b9fbd3dea9cf2ba464921c228bef59cb64a9d512124077f1deba21ad3ecccd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d12f04d8a2bc8b7a32646e328d95ac91

    SHA1

    564db58264ffaad2b5661df14767d117affffe8d

    SHA256

    7f31c84ff3e3c94859b51c651beb559b118e08d5279d341b5a9c9ff951e8bf49

    SHA512

    a5c712ca9a8fc90ec03ab4e8c0f7106cd5ca3168247f60c22718e3173c7fe01ecfb44e509426bc0be490564c7e8a3cb46ae4d35f9cc4fa88bb7bbfb82f9fbdcb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    06126dee95cdac483d957ba79952c414

    SHA1

    47c4859b1287c7ba96750f800b84681f055da185

    SHA256

    b312ed4436744947ffb9ab95c0901833ea8740221d448bc1b1f70e6e856deee5

    SHA512

    787255bec80ddbf0d81d0ed0e9e3abc8aec0603ee4ab2c021f6d1b4e459ca0603e62efb4e84aa4967e2be39a17bcec7f00a04868e72e87ed4b366a2cb030ff46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66dd09f63cc2e5facf84b5ea0eb6e25f

    SHA1

    541542407e76c5be4dc78b036b208d37abeaf44b

    SHA256

    9a5d42409c05cd7ad407fa99102e3a8017e03c4322d028cb298a585134cf629e

    SHA512

    9ae475c7f26368776a9d6a1e7b99c55a3f6a88943601d1be20b7a5db77a166bbb5b44918c243f70b83a5c4793a16049f70024f710ace7b5ce45cce7d40a001ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c59f0db07cb093d5a523588ee291b32

    SHA1

    615a0e7b21881ae657093991de859e575552270b

    SHA256

    85530f77a762bc8ece01c42f67aa8319a1d8f20f1aff308126373c3f2bd280a3

    SHA512

    7e117ed4dde7ff68255b2026a2d4a394d25d8157793b1ff80f9beadacaa03686c13ce2cee72b2e6664cce531236b437265bb3d556143860fe8b597248553cd8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b7ff826461750c173e791fd0fa54f725

    SHA1

    f04887f5e81d2f289c39156d617e974a20a690b5

    SHA256

    5483f42e19e187afc80f57feabe881b98d62981dd70e72653c4f184f47f8f5c9

    SHA512

    b6bccf6514d2fc159e5e312a9601e648005601d1699ad1d677f635ba4ee94b74c1b4b015c7834559866a18d4f673e8411a9b8077732b4c307a5bb71efa927c74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d5b5eb7b64430d9adece52e22cd983a

    SHA1

    64e1cc70127c1a1e8f6a3890c3037a861aaa6d6f

    SHA256

    64c7c71e26726edacc8b4e9808e41d96b9d9db1d83ba38f22e5df0ae88dda7c6

    SHA512

    7c122163c6192ef7deb411880962ec12e1307bf968490ffcbbaf9efc8f5455830e5f830133d1ce156d5e84965e3cc88b975dac48b26fe97bd2c2bd75a653b6c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01b17b6bdc2575b2f9efe97eda81b925

    SHA1

    3c7095d740684de960c9cc58470db2edf9f4403f

    SHA256

    30ad1ad671ab939a120e645d17732d096bfa7db99c7284907e929b19d603e84c

    SHA512

    7aaf79d2d03ee4c20e1a13c5e41343488ce6a8e235f6cdfd2dc82c30f6cf344162d1c79e79449c31862119987cb0ddb8b88bc3dc56e08bc2dbb75eb406e0be95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93fec938b5ebbc68db10e7d82fb7e500

    SHA1

    c9f99edab12a034bf5ac0bd506fa36cefa409cd1

    SHA256

    448909a0e4f525967987f223473f8e2f9abbf8ad5ba0673efd10c8a91e077bfd

    SHA512

    914fb25fc0b00fa2ebba88fc72b5c5eddf475a89f9b6133d3ef5fd0249a615ec48109d6b1c89a25bec8c79d669448bd1af1f383bb8ead8f6f4be58bf7b6f82d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    501bbc8c159d37870ac88992928ab3c6

    SHA1

    eb7c22a8a796b2bc68770526a275143fcb6889d0

    SHA256

    66536f43e1e1112980492d6581e31cb961c1f3f7abfa8efdeec10f0c467d6697

    SHA512

    873699b55a1c3712bb61e000ced8e37ee524c8e6ebdb4c7382c0bc6e298d0886f0a55a45b991cde297574b427f9564f9f59e87556bc69554e591e1b76d184ff7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ae26d428649ba4213cea8049ac32918c

    SHA1

    c75a36b3b71a9a70135aca321ad2e8686b0929a3

    SHA256

    5c582fcd68b35d80b55301974842b01ccb3ff569f52975f213032d29c81451a9

    SHA512

    b9584ef9b52f86b719bf8a7f1808562046aeb2b7cefdb52fbeeff535ce19b739b174b08265799e5cfadd95fd930efeea443502e11d6aa5710cd6f9f5d5ba4ac3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    81896edc420aace43c856fae317a85c9

    SHA1

    177e5685e1a7a8a3f79c5f301a5cff1846752566

    SHA256

    a9e53f9eb794ce93580e7f30b196d0fa5bf24597a4e07cd8d64bf0a42999790e

    SHA512

    6bb6a5e21a29be8cb180c5813a6bf55e61d4e02c066b4e5f159927ca76bb6e843465a02f3532fb57648e05dea1df890750c6215b68ddec684b7ce2fee50f1730

  • C:\Users\Admin\AppData\Local\Temp\CabDF7.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarED9.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a