Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01/05/2024, 03:34

General

  • Target

    0b038fd7255d0a4258857e9f549167b3_JaffaCakes118.html

  • Size

    27KB

  • MD5

    0b038fd7255d0a4258857e9f549167b3

  • SHA1

    442a9be5dae01299dfb408e03329c7f336f6e964

  • SHA256

    3546e58db468728c0815ec8b3f81dec9b970db9718be42e6ace15e3c2330b8da

  • SHA512

    d63351e7e0d9d3807a855f0e6d6eca6d5157277e0e97b73fcbfb1f72044fee7ecf16bd05f33c716d38aa55b2a8bfad437b2319d361f7227bf463827f4810f8fb

  • SSDEEP

    192:uwfAb5nLGnQjxn5Q/CnQieZNnXnQOkEntKonQTbnZnQ9eltm66zHxQl7MB5qnYnL:qQ/7AX2HYSz/

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0b038fd7255d0a4258857e9f549167b3_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2240
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2240 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:1404

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    87570ff746e9be6f330ed40941146c16

    SHA1

    4aeb2e94a2dd985fd080558a02fa71f74de0ac8d

    SHA256

    f889ded54a0f1dfae4042c6a438fb29f8a1410901bcf7a48a23e13fece9f78af

    SHA512

    dbe62ddf12e1ea4d75db12ab31c41357813903d037c4ed3fe8dcdf441f8fa471e51bd18ec07aa76fc7d350c698bcf3d25731f3298e545d29cf78aa24c2bf8fe8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f3522baf7a560913ac16ed79774f670

    SHA1

    94c90c440c6d333b9534450fe4367163a796472b

    SHA256

    271c4bde07e9a54ab4d86764cb374b743e4852bc198f9b8b862d68208ddc240d

    SHA512

    bbab6be859097e6ef2f22df78742ec8bd9b541d4eba4d1db5ae319d3e45e4ab6e394aa34e8081ad9f6ed3ff4c461cc1a0aee0b5d64a6f79c36d70b479b330153

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d0cb401586ca446832174a5f68f3183

    SHA1

    26a106ca70a902f697f9ef7cdb8f850c03f4e2eb

    SHA256

    ac0c92d0d76d141621ede048dfe33563d44473b44b24226dfe141ba3718614a3

    SHA512

    3e6071c2ff487ad56b4f29ffa4e59fb638ccd92bfe79465407c440323e6fae149f9938516f81f1dacad0c00cc1655df6bae13f6aafa42375ea5f7ba5a895b3e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6c7b89a5c49ab57175d0578b68b4593

    SHA1

    fc0df89ad8fca88f39de3e2f05ced4767323deb3

    SHA256

    6bf59d8b3042fd828a992a1327f10ec2ed93bf1b2f7f364e3454a6401f81b63f

    SHA512

    8bdfaf5f5785c58eddcf36ab7781d10f386e4a4097511b21e823badfa82075b6d0adc9bb954e4176c471b3b73f0489ebc0f68518fca18ea7314b60165596ea83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c390783b36a6444f584f05095f0f6ca

    SHA1

    ba9476d0b090162964be2831aea19cba01aebac0

    SHA256

    563bc2d52a5b18adb76a45276b72b8e10f7c447c96b5a5faafc05c7310079521

    SHA512

    08810fc2c13a30e8e19606c58b0653bc74a9bc0fb9eb7adfb3a51b5bf898dcfa6c6db1d8672185b7f1ef8efa429200eca6af3099c230e9e577a854f807182270

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6fb1ec79e6321e2e12cf05fe66cf4cd9

    SHA1

    d94d4a09f780ca462fa741a9a26289d2069c9667

    SHA256

    44a0f8b828fd713cc68d98af1db97352c486dcf58f19cfc09b2d0f436b0192dc

    SHA512

    d3d7faf379f67bdf12cf51aa6932a8d2efed08366ba13f3a83d9097d76879b97a3bb56341cf870dc3180586cbd441388a29197f54c0cf31df6d351edd1e1efeb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d148a629a8fb002b0102da614f632423

    SHA1

    cb89bc987e433c376094544fdfe44c150fa3a71c

    SHA256

    253b3dfeeeff58dfe3545cf0f15f055d4b1eed3688a8f2e7a0dfcec90db64abd

    SHA512

    afc34de50ac8ff8a6c4c3ada596e56f6735b86edc9bf126804f695befe00916ea2eec897a30767e3adc75bc4cb255bae565fe345da289a47162198a384057800

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ffafdca1c64db49a5a2b073eb6542c48

    SHA1

    ce83f76bf964622b1ab7e6d241e13e3d6910d694

    SHA256

    5e3ef9bf11d9dae0da22f0967ae8e41d4ecde78fb181252a2239b2ab516c789b

    SHA512

    8cd82823611c5e312d1f5120f9169e837070fff0fb92e88d38061e61e543f506d50c187d441b1b6dac48e2e80590781fab2b3e8f12dd142aacc5065f2892b7b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94ac763c95f201a2db9c364c6c863092

    SHA1

    c847a045072cab570fcafdbf2b53466e44c37872

    SHA256

    37c0cfceb7158c89d4f5e12c93bd05f4bd7f3a2e4db6a8a304c68ad8fa64626c

    SHA512

    0af70bfe547ff4e7e21961bcfcffbf26d63b3179479c23aa6e51898e7741a950784cafae642ac70c1922edbd5dfdf16adf813dcc1fb15219244825324423b06f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d6fe5ec271cda58224929b760baae01

    SHA1

    04ded32992131c08fa944f1df893f9b0ce502733

    SHA256

    588c8808f063a0e3cba733a848bbb0b4a552b5df5be91a3d659975b99e35c329

    SHA512

    7ad7f38aed8ac2a730a91f33b4e98bdf7e6ce78602f60901e842830c3098ecb9d60d682e850198fc9504d50887107d99e5da5d9bdace9134680090b50580db40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b6232dc30e30e0bd47732d4fc7517367

    SHA1

    eaea9ac4207612f1cd6f7f60d62ff0c5737e43ff

    SHA256

    7fe7b43534ff41c988794d500cc54e8c608bf18eec4bbb4fcc428b61c983a244

    SHA512

    9abdc6dcf3eae17c977a6d76fd319b4c26bac337abcca2e7aff2f33295cd056b71c1fdcaf5c0f0a77c1ed8260779cb26f5e3f34a7670083ceaebb11d99a097dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    465c1ddcb195ab73864795f15962cd2a

    SHA1

    56670823fc3c63a15345d9dfbf020725a06ee3e3

    SHA256

    15e018b7da142dd6c71e9fd0b7b479de27612dd02aef262e417ce1177e17eaff

    SHA512

    3929ce98d45bc254d762278d20930026de3204ef75695fa07f7dbebb1ad7fd9f35ed6a8ba74e33d35f0f6c1e87cf8b55093574c4f5dc1be301bfc1123d4815b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7eb43085d29c30997b4223a888fc4e57

    SHA1

    dcdf1bd811ad0e777412ab683cc1d683d2548c1a

    SHA256

    89e73cb8560ba1dce07f4c717692df2c488f345c418cc5b6c4c5cc46ef19fa7d

    SHA512

    e1891a4932aa212b7bf16fd5069cadcb475d3d524d27c9a833e0be5dcbc21ffb3a347a6458c05e02ba8658ab36920f0e4acdf1ea9be2310279eaf193afaf58f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac5105e64491390e2ecf50e2b6de081b

    SHA1

    256c7fbf62a46192febbc276baadc4518d8db18c

    SHA256

    aff80a85de3d7a96e24d7a37d1f7bfbc0b1340b06103c15c5ccd27e4ef08dd34

    SHA512

    d65e9c4cc68627f016b9eae28d3912e608c4c04a74625810f4dc8d83265594b021a1332bc2ded3d45289cd90b9f6dd16c77c79d01edd1a51618c5dc611bb9275

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8b531af2b782ce47bb1fe911515537f

    SHA1

    d4d8581e7a4858e3c710a82ad3a5bca2450ec276

    SHA256

    507bebc454b95b8ad930608cd6b59fc210fa6ead8b37d212b1e78a64eabae1a3

    SHA512

    d46d755bcc10481ee518cb3bc3b0be3ca0a9234d5bfd792dc62cb8bb580f09c14b5822620562b54632e2b51f4a65fe2ce65ae9d00b5d419cb8ca04a12576d9d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1bece84a7b525c260b2309e516138ea2

    SHA1

    8c49bb95d7c4076345c10220f53730338d4d2b31

    SHA256

    d8a93d207160158f00ce6b774cc38247b452024e756dffa038bf24eaabd5a653

    SHA512

    d3333b45eb40cdcae7e4758fad75ef778d50dc408dcd747cc10e033c30534565abd1f11e2655eb155dc73684bb37448b0bbd2c09145e0aefd235fa6dcd296cd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9fd6024b45be9bb0dbb6e4df0b05c8f0

    SHA1

    49a528375c9fa21c3920105e0de1365b7321cddd

    SHA256

    32137c4ea50a31e9825620f443f29b195ccbdac70cd2849f4d4c90b76de24b3e

    SHA512

    e057a0cf810235fb4a381a0d6b3a6c466e3f9c48b18e3ae96df789d7d4a9a98014bad36044072d4a3cc64fe6d8287dfb99d15a23b049032c61ab2dfdf7a1b174

  • C:\Users\Admin\AppData\Local\Temp\Cab99FF.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9AF2.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a