Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    29/04/2024, 18:28

General

  • Target

    08546247ed0a0c8df72a66cb45c36788_JaffaCakes118.html

  • Size

    137KB

  • MD5

    08546247ed0a0c8df72a66cb45c36788

  • SHA1

    cd7afeac1638808eeacd9ebb27eb256186a718eb

  • SHA256

    486806c2461d2b68bdefd372014705dd3173978c2b5f4c151fb926477737629a

  • SHA512

    0fd274a8dd67ad3f0e14cd3847076b64d13f57d0ef3460530540f0d233bdf33c29189739e5a0309e89a916f5737941355618337f43e52299770cc72cad8cd621

  • SSDEEP

    3072:SGb4B1x7OyfkMY+BES09JXAnyrZalI+YQ:SGb4B1x7rsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\08546247ed0a0c8df72a66cb45c36788_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1284
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1284 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2148

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3713758ad78f03f4b77c75d644a2c990

    SHA1

    de7bde1b6fff5b875aba22c6285238feb7742f05

    SHA256

    4ccd4a6527928bf89e2f2f31288a45f49c13b1524b7f4be3f826fb7482e1e752

    SHA512

    49222597d41b948a23b6f8759dbcfc087cde39e1bc78ad46cd5578c9c1fab0e442fba8810a6f1251b1ff6e19261fa385232c1f8dcb759ee3bb5c80c1f26d93e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d12c04a08700dbf7b208b88265b724d

    SHA1

    b46410b56ad9dbe728d0e267b3ce3c88dd9cbde1

    SHA256

    05ee2478a7c914314e8a3933357bfdc8ba0a15735e59f6b253cb7d11542b5576

    SHA512

    9d4402802dde754aa3f983c1770d04271c280488a3a0c5ef52d23d61c826684d8e798169d9b4ba7707882cfff19d9be0317c14ad3a6b5c404e38ecca796ee28a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37e23b100bd86b9fc61a6b811f767963

    SHA1

    1a79a3864d60406b821ba81e0aed16711c60a596

    SHA256

    600e5e48058263f5466457e0494023bc9a4dff2105fabcc267d8d7ee74f330a5

    SHA512

    37c36bf4b1ff6b09d925d7b7a2412a4c83c92d32f466c59bf3fe357c4a9a68251475c5edefb036f141715a5f6662faadc1202e11e8e462b6591ea1f37837ea1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44fb758b237c9aefb275e6a2a55c55d9

    SHA1

    423e964bb045c17dfe23dac95dcf629df2dc827f

    SHA256

    dcbf95fb0516b8c3807cd7a6f0703e3a75fb41d9aa66feadef285e70e297f5b5

    SHA512

    4496fc3109801dfb38cd041aaddac270cef99711dce76b1d377f10f62392fd625bdfe15525d09223c736e4e076e9dba9d9b76ac1499a3a05fae7f4712cffda41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f57a5fcb1d5fd0f6b3c86c23d8145a80

    SHA1

    d0aa59f9055adbdc806e3d7e95b3f66312e17588

    SHA256

    d16006b8a3cf01445fc4f7ed8ed3bf89c313f387644a2bb013585032e799e15e

    SHA512

    97b482dc1186aa2df4fa22fc29b0ac4fe91aa10e397fe101ebec15804730e1fa96f9eebef88fa6fd0e76f70508fb8b6bb2f08b6277960d8ebcd3a3d885bc3160

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2f78b07b8990e0aaf9b8d135abc5be73

    SHA1

    3686b2118dcedeb39e905f582cb74837a1f32a9a

    SHA256

    e01911839b41962ea0ad268b8d1e9ed4c7b9adc7104acb679a94ce373623dc04

    SHA512

    ff7e970f1b98b38f0b9adb810042b80d6d3fb6cf6518975745b442f9948654a555e88e3c90354a0f1ed12af5d2c57d83fa627f6f82c1d4b583ed03f92bcefdcf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ffe6dd1bcda1e78ce8950a6bdb323b1c

    SHA1

    3283f2d8ba1a848b158e8ff00da464e0ad35d220

    SHA256

    61a2c4b8faa9d9be3e7b655220be24fa6dbad3349bcc325ca25d689c72f8f7c2

    SHA512

    ea3d2cb323418d88de8cd399e769c470501cfb8f2cc0e0ccc0a51f50376576dfd5bb32c8ebb30c0e0f8cafa638363853bb80ae073c9272116faae532c1ac743a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d361fed6db37e12ed53bdc137f57a6fc

    SHA1

    d112a89f09b298e8e366da9b4fbc1ae116a3d7d2

    SHA256

    405a473f28d25c2a934d2c444c59a1275d51a388d041f43605cc1c436db3ca77

    SHA512

    f0cd6e09ee6d3f3b9c809fa24031fa0d26abd39cb75d80d8ce5969ecf5b3a9d635f529258e96383201b2d27434207e6596df8869f24c694ec75ac9d9d9a847b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24387e796dffaaf0e8075c4c33f779d1

    SHA1

    9665481d8aff06555bed56cd38dbce8468fa11df

    SHA256

    f1bd82353b502c776874781501c732e11a650c6cf76fa727c9ea596e28488851

    SHA512

    e91fd94e771b6832a8a6398ee79e97a0fab6a51dc8792225ad3f5c20ebf18f0a68c9864d8e22a3580247c712ebe5115a8fa15a2f546a8be7a94f5a6941019cc2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b3ca080cc913189fbac9e03442b2413

    SHA1

    51b1dd664baaaa0769785459b84ccd394b5ab2b7

    SHA256

    2c99115c18df58426999553a0201c1faadc7bb9742edb5d4569aab16c2d41616

    SHA512

    18a05940558f475145607b956500983c13f8f252843ab7f073d939bd0b5ee7dd3807c9eb5d438692b6dde6b141ecdc8fb017d8b163a5376183569f759ab0d978

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eac8d4e6e1f63d1577fb5a7896338cf0

    SHA1

    17675e6c47406806f6e6872ab4d24bfe6f041c85

    SHA256

    29ee24d41657ff34a21d62c736e5fc53e5a3ed04206cc18b7124f8defd01e921

    SHA512

    b936f764e885ca0096a4731696dd7b743b3b1e2f67d331dba997ddedb3d463e26b7ee8d341c57f200efd7ef2655454df78010e1b01e7ee916407c14bbc87bf17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    037f4bddf0f6bbd88e356d5102af7602

    SHA1

    c69da58577c532a062d97130223f941b3c45682e

    SHA256

    5aeefe87ab33c98e5db4306efd7a31952cebd3968367d8b64894e3e2dae9caf2

    SHA512

    699f920e1efd03dc46afd35d12b11e15761aabb3e1b96b37191a64c91791408cbd2d2dd9cde8c4e4a476a3947f6034f96796f5265d59ee14d8fbdd12579655f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2dd8a4823c57f419e886654399b25f73

    SHA1

    1c976f80b59899f802ed077d20a3e959a8ac2a81

    SHA256

    b3fe9265ea4ad29e86c435ee7ff66a8a97681e04a3f64251d2200a8171b65d89

    SHA512

    ceb982c1d39ab2f6636b58666757d64109e79976ce80b1fffe4cea0b00c94d85a6a2f99c54427f3cb84a2d9b4ea8e9a9e0a41a708f0e72d4303d626a80528275

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92373fce514fbd42ecd52aa8d8c56af6

    SHA1

    cc3e68f850256e16c61516df39a1d3cdfa9d3f77

    SHA256

    d8df272bec0cfa2784f8bafc8407b6f192fd01b2e256c384eea28cbffa89aba5

    SHA512

    c5b4c33a002b322829f9fe8a82d667f98a8fe15b4fc8e27ddd85c97923e047d9384e440587a56ef160cf46f8eb72ac5f33cc09859aaec5903b99a55dbaaf3893

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13e52ec212b40031c30d19808b340d5d

    SHA1

    eeba7f53dc0af638c63e507d08b4d5db11a9307a

    SHA256

    7438b1559dc7822e74942603fc9fabc287c20d15348d5d7fe6c35f83c9efb133

    SHA512

    40b784c90f2d851f2bdbc23de593ff7715ce7fee3656b8c2916f2e71062f35259b6ab654c92318b971a93f1a00e57a911e60e08165e247fd33d7a8fd9fdf9e21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54790c84869dd5ee953d1b970487113e

    SHA1

    e321ec07afd637e686af719f65dae7830e768083

    SHA256

    d0f2ee7317776cc8654dd14cb4ed24e4473fa7cd49975718f50724a5a46a59a1

    SHA512

    ad3c4bb713c3be5301d5ea3aa94dad7f0c94a03045364ef99f1fc09d137dab722e8c15ee85965dbc91400267a8c7b71d54c59df93a9fd786a7b80b1c6cd63f10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19abecf8e03854e6ed5bb90d38b3f419

    SHA1

    72d7e1ec4bb5003da9955dc4d6fb362ac0e4c5eb

    SHA256

    fcbb07d0068f77ef4cff6b08f01016a2fd4c9996ed03302b3bde3e48d3c36541

    SHA512

    33aa43b5564292ae984016e948ee4a175de8663cd7931e8569bb22c3bded94d1265aee1fefb03ec12119bed51e31fd4984fa0cc78003fe9b2d7bb48935d75e18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5504d860374eca03f3b168cb5bfb196b

    SHA1

    3adf88388b3b6750818871683fe4bc9560320125

    SHA256

    49509a2d10b7fb3d799664ed712da06b99e021606824d5e9388a62000d6197be

    SHA512

    e936d73cc96eabcf2fb4fb4415bb90b2ea7324fd3e189edebe3eba4da0c04141b9608dbdc575d198d3952dc2ad5b13f9b72795561c311119981e7556600d7825

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10ec2a3ff4b3e9665e06ace58b165dee

    SHA1

    c28cdc75b449c81d2232e13c7a08a4c5c581fb24

    SHA256

    4ae3f1542d56b49118a6a49e7f91c7fcaff1f6f893879260a0b258a10a1a38ff

    SHA512

    f198d1cfcced5fc35b04dda9cc7053d8ece63757d36b9df87cecf5ca611f7118945cb1274f79c4ca3b8a7a3e7c0cf8446de15ed66ab16705088869596270b4af

  • C:\Users\Admin\AppData\Local\Temp\Cab1882.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar18E3.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a