Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    02/05/2024, 05:58

General

  • Target

    0db0c8744d32fdcbe5d561644853a5f6_JaffaCakes118.html

  • Size

    461KB

  • MD5

    0db0c8744d32fdcbe5d561644853a5f6

  • SHA1

    cb26861409c1c8d168837ff261409339431289ea

  • SHA256

    fde6bedb1cb53137531bc9baf623b0acec277a31a78317baa9cf0b7954503e77

  • SHA512

    34a10789df87ce347ef44013e1ba0d8a00fc1c763bae3221d3290ae98598ccf819306cbda89d51bf15e175b0199bc01ddcaaff1c6c596ff0b958a69472412654

  • SSDEEP

    6144:SxsMYod+X3oI+YUsMYod+X3oI+YfsMYod+X3oI+YLsMYod+X3oI+YQ:U5d+X3I5d+X3p5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0db0c8744d32fdcbe5d561644853a5f6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2004
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2004 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2968

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d39cadf09f1a5b5fe65f1fbc5250952

    SHA1

    c5125d4d8664020dace033f036701566dea98bd1

    SHA256

    926af27fa0b175af07d5acb63471f2322f14e513cf14423ab8ba12179b71b51c

    SHA512

    db58882474acfec010e8d611ce3cd43c4b2ef0ddc1514ee6f230db9ae828051ec4c9f7d93908bc42185c20a2edcc6425ae512c5679880ee87c47725a985200ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1c1e3da63d18ed99336e1ebe468bd27

    SHA1

    436063cc2e8674a05e9a14339a47d65c68e60a4a

    SHA256

    5e2651f40a23e071c9f56231055ff690985867d0064a2c1bf34bbd84601eb028

    SHA512

    a5fa6b6b304b8225adbd6d4d999404962540739ea33c13fcdc43bb8bc7c57c6b947ee9963f986f64f2cee833f35b5c22fe6c6b2aa4bdbde6650db3d753432d80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09de379ebefcf0000a7d8051b66bf62e

    SHA1

    37e349e108b6d5f28d0e2ca0e96b22872201db01

    SHA256

    ea733cf8bc40e54ef08df77ddf9ddb433740f8acecbe5f02854891454ea3cc5c

    SHA512

    8f48c2a4936087e8d9f85eafc017341f6f55b91cc31ebd227b851875e2aa88c9de64b6a5bedf7dbf64d53c1ef4f5e9ab053333a015ba7a51825038b2d4c99b5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc80bfc288b76c85aaca4dd6052a852d

    SHA1

    9a4e933c62baa308bba44aedebfb9534e2ee287f

    SHA256

    cec1f9afb9237e4550d685a0b7a88ae58f0fa698152fe1ceeab2801ccd5f2b27

    SHA512

    596fe667b38d8383682f70e355c5cae12efd4533170ef2a70f49207b352c5087a1adf36a1daef420778492e4dc4061f60d0c7634ab56a2eae3b975691ff24b2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b403e8ed02e426eca0682e5fc4bbd9e9

    SHA1

    71f7ee3ba060930a20767009361dd52460c23e0a

    SHA256

    4d373a29ade3c9e48d224a2fa8c1eab752143a3df8bab55bb6fce7d8ebdfb48a

    SHA512

    f9411ab933ed05c897add2d77e8ebf7c19041915b17f7713ab4faaff6f2776dbc9c79070025a4ab7f77fce1ea145857745fc9e63ea77c886095fd7b87b89ae7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9206425096ab3eb931d54091fdc1abae

    SHA1

    fbb990fefe303640cd0ab1e180dcbb7584bf0986

    SHA256

    9b61e43c4beb96cd0e857d142d5873c71d29a18e5e4ec806523b2d8838f18a9c

    SHA512

    9072ae12c709a71beacd6a4ec934d39b08524f946bea72024700c00c1f13da1db3ed4cc8cc4107d7cd23c03450c9a5745903c7d5e0619ad1d0ae3600c76c9ac8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eed961ed64065cf12a86e4d8dc9ab2f7

    SHA1

    a3c6d8f7cab0a8d317647c2501eb87fc5a9806f7

    SHA256

    a54487c231d4e3d7ef4ea6aaf4163279a51f34bd267da1a85d45b186d778ba49

    SHA512

    258cdbf644f02325f92df48cd4e5ac5c125f6db4aa38d3b6738ab605c46277cd4f4e54761d6e92841db813385ae261668edbcec2ab6b96282353886c8cdf278c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19843b1dee80a703937e829923860463

    SHA1

    f035cbe0b3bc8fc29db30ddba5ca5319be3a396b

    SHA256

    b4798dadb6333bce30b19ef49d3814e0f5bc00152b908cef125ddf8ed3dab849

    SHA512

    4fbeb60f83b5098ad9e6a405da06744e149f6c9ac05a15d359ef3a1173242575e6774306c06773d1de41918bf65e626932b7c9093704417b10f9e4c6dff79a45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    073c23f487a5cb1b8416184f3e7ff0fe

    SHA1

    279b8cc9b36498dfb3d3b1221466d80da7273601

    SHA256

    ec7190530e4fdbbb5032a0cacd61723dafa76c7e270138a829b0de78e5a50903

    SHA512

    48cfc5049650759cffb5bc5a411e38c61febc76a9c6ab8265d0d5d38b366db622a7e6dad05fd29863b5b0d107b05665dd3989430a9190f0af06bc201005a4c78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dff5771d74f398f4c7d6872d678c8334

    SHA1

    57e255849c6d945766c502f843767b32f3279190

    SHA256

    ef4b6109dd72f3106c76520f1f9c0c28a5395533c7117884ecd628d86b65cbca

    SHA512

    744e06e1dac810d606a927193df95554560c133b36a83c88bc97c4b476740bc2c7ae17442cd43865b9cb7399cd6b32f8d4687848a750710c258143e81bded9a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20d574bb53997027c7231d73232cecd0

    SHA1

    b4f9d6a32e78e4b56d6fd9415d832fb6f8f89b00

    SHA256

    46bea7e9d90ccf6bbab83338851af4e80a860a1e05ade55471d01d6c2529a04c

    SHA512

    6735c9ef8cd48712ae8a04faac32188efde5c572128215fab00ad3e23c949ab4e5dc16625f22aea2fc92fcd71c0d31149e859c9698963f7467e7f24aa7932888

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    70cbe4d2095f38ccf9d793cf3ab4e03e

    SHA1

    47bb3162d10169fe43960fef5855f2432df1fc6c

    SHA256

    90e85bb06b559c5e25d062d0a30e6c631dd49729897f1149fe0ad6b5b64fd040

    SHA512

    9cbe50fdc753b77f12c9a8ec3f7bf90771b544b96b2d525c23b0946452e9d30a6334ba434beda74fad9829022213676478e0f03657a6359c62c291939f5e82d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    74f5ddfc0f72887ac05ee8151c8c833d

    SHA1

    89990b8224f530936dc7b3a034a050b40ed17e46

    SHA256

    5b4ece10e590864c7b4a14ac7fa698e2fee056a56afc7775f8973aa600b50ecc

    SHA512

    fce919c51b1eb4f9a411085d308d1649414a9ef97c8745cc434de9a113be544aaf6a9f48053ece5087284ce4e3f78159c6de63ccbafb9064c6b3c04b0075c217

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c90c53fece69ac2a97a8f4a61709d12c

    SHA1

    35e94f4e3fd6fade7b10a00e91048d6bf096c66c

    SHA256

    2918b74b385e2e893f9395aba6d5c28dfb64692c19e106043273541401d74962

    SHA512

    b348bfee38846835fc2d0e435ffe92e5904560ed36f6f617d0079592a095234acc6d78d97e1edf8b02ffac11dda2673c4dec4a88851f25d3375e2b140674e536

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33766a0a7c531c3f248b76473ae68c0e

    SHA1

    072670cef119895b2b539373ace09ae6084041ba

    SHA256

    679816b9eb0175bf61fb4062e63d48e19b9a5c942eccdf4c7c18d6b670c01af7

    SHA512

    b64232676e36b43e977ef16dcb906299d0414c772e180c528ac74be5bd17651835599ab0474f6bfc33b48850ec54076ddbc8e0ec636eec37714ab5d762005610

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5f03838ea52b1714c196a5f61db266c

    SHA1

    3e1fdf7c1a0afe66597bb14aef5d4b52ffbef6e7

    SHA256

    f5294c186b2cf1e5895eabf15346aeb356c701f8991ae7f8c1126db2cef687dd

    SHA512

    afcdaa21a4c031b3a8973c6c8e6cb0134217e64819d497bd92cedd69f3255ae3c296f67c091d095a5f1aa415ce70fa48228b746729fdef8b5abca9e504d76353

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35d59c461f5542c5abff015a91217948

    SHA1

    d03b1ae7f50f1d421870528b42fd537be96ab56e

    SHA256

    8fe5e48e549d09dff7888c89ae2c69cd3305e0e78052a58df2bb32b1d16a2ddb

    SHA512

    4001aaa31d01bf63b01e432873838b333a15498612be5bcaba9e3e13c388dda0070ac587ca78f26d4bf243a727cc1b4979ac22853d8cd1ae964c90f5529f4fd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79d093d230cf63ec5c8422eb220aa0d0

    SHA1

    5e9bd4c65be5c73ea44a8b8e9a695e41bd8dadd6

    SHA256

    898d86ed0b5a0b9771dd1a393305de1e39185e08c2b9f7cddca87f8b3ba0dadd

    SHA512

    ba8589fe692596d3bf5d14a617cda0f1e8a73f17a3c10499fe62dc559e36c47b6dbc1e3bc169295379d03eb3a68314944e9474f97854ac03bf22ffdd4c9b902e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4652c2730ab59dd3db48585f766a2fdb

    SHA1

    bada8e1cadbf9f955ba2024a644889106241dd2a

    SHA256

    364c19206cc5f4fc00d84e1a891d8543c747ab4769cdb37e9598be1571ec9aed

    SHA512

    3e8251a7faa8d5057cd93ed90c8ba33325005b305d2f00dd66f7e805523a439af1ecec07bd9c04cd0db1f8fa985ba9b34acb7fe4d0564ff4981749b35e8b66c4

  • C:\Users\Admin\AppData\Local\Temp\Cab4165.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4258.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a