Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 21:08

General

  • Target

    147cde38c59f60fdf6e9c081739c039c_JaffaCakes118.html

  • Size

    28KB

  • MD5

    147cde38c59f60fdf6e9c081739c039c

  • SHA1

    6795739cc864301c4bd6d627d7d0e52af95d162c

  • SHA256

    a87f85d674eae87d52ab0b695ab7d888590d4c2706d5b5a8fb48addd12225f0c

  • SHA512

    61452362c18f1afadd425d95b38842c3f52693bb5087305da548717477fe1809a9b29a296710e3e4656d335d7c59cf088353c6b16dbea156780b09af7a061201

  • SSDEEP

    192:uwnIb5nPUVUnQjxn5Q/7nQieyNn2EHnQOkEntp5nQTbnpnQ9eUzam66lEGZfQl7P:fQ/ME3Jm2EGMSM6K

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\147cde38c59f60fdf6e9c081739c039c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2924
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2924 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2112

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16ce7a3284bc324b95d0f53a36b88236

    SHA1

    dd5275dab04e4a8bf5f9e530ab64ff235b5554c0

    SHA256

    201e5bbe61eb2907dfa369eefe27d10bfb080839ba250c8c81837ab937418c41

    SHA512

    9281b0b8c0021b95533fd35e926918cf598ca908c276dcfe1959ae7afd939deaab06d0b34779056dabe5406d53932ee5914366c07340cc9d4f16c42189d3581c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3298635131beb8ca38a5f91cb5723e3b

    SHA1

    1b9e181050e11555d921e598f1baefa5d0abee4a

    SHA256

    393290b83744c23866a5ea11dbb75556e4da9acd37d0847f0c9c3b7d09ba0e5e

    SHA512

    d7ac557ab80bf5f852eb556c2bf1b03dc6081b42a7975aa4b1bd1760925241bc327d8f06de3877577e9f89c8d98301f4512124b9c56892ff83239e499e5a9bce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d291d2eb5b228342189931bb08f4ef55

    SHA1

    1aafbcac889ec83fa817ed68574e004277c552ff

    SHA256

    8e1bbc3f9a7fe64636f7c8e0453339b87ebbd1d0f13e7a3f9270cba3676a4948

    SHA512

    dfea65f132ceec91143b57d4da22690c4786eca7f3383fa3d631f26263576293f88c367476487ef42df9a9218798dcbddce0357d62d8f9a2d9ca7846cd26d850

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34928e086c570dc9ac9660e13d8e95f3

    SHA1

    d24ef8220c1943d8973053286cfcfb8866442a4e

    SHA256

    30361e85d94683ad06eb8616c5609ca6c8bfeb2b0976f8716e138c8185d70b21

    SHA512

    acf829fb9b123b6c16c0b3110fc1c9eb2d9b942b5f77c7b70c189a7120232d1df8abfea60060f4c7a41b199b2e6a9351b52e4b585f3c38cb51dc8c43c11db61e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ecdf49fbaf692bcfc6429d110ed6b581

    SHA1

    92b13a5dd9486cf7fbe798815f434a3e4cc02316

    SHA256

    d5ab8566331cf8029734ac21fcab7f0929a20ce2fbbe32c03e88a6079eadb78f

    SHA512

    9991a434d7db721aab0431c2cd65546926e1d4954d3265a64e620d6fcd0da47eadc0ed23e1b729c4e8e500d812ac33322506a9f10af591fe934e2472b3e2bd06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91a056415933b5d4fc4ca9a0044cf205

    SHA1

    d65efab0c7ea1d45c8fc35ac16c4bc43a73d012b

    SHA256

    9d5849e42b5e1362e8dc9bdcc9f17297d0e86fbef90b2c35a30fad8690378284

    SHA512

    0118f1c93bc0762fe5d076d6ed0b9f9d08c259be90239347091675676503a6f8fdc733ecbec37952fdc9a672ab68e9df8e41afff9129379c8bf771043d2fddbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12ab65802ff468cebb867c02891690b7

    SHA1

    b6460921ad50082c0755109a37967ecc24be12ef

    SHA256

    c36db02acf34bf9db24eb51725b79a9f17e7cff1b3233b14f109582cfd9bf0d2

    SHA512

    f2190de9313f4dedc5e8374415ccb1b5373d96577fc09ea9509a03bb7ec3eba31c2a0bca94dd96f89fc739ed3709a1a811106452cc096c7ee4e5226c90eadbb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2b92d869c189de0cae8d6c0517187e3

    SHA1

    7f1030320bceea0fafc047618e8807d3399d5785

    SHA256

    0c960a4001cff365a8a86da44fdaba8a7e33d3afb5c8c551423a3e7711017007

    SHA512

    34162b43290689267ed3ca8ed79d06e82d9d085872d90e7d15bc66f7c25d59936dacc17d82d10634cbc91f768718ca8b61408f98527f28e83d9ef282ef6e9438

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d0c1c86ece4d3456ffc84e31a73949c

    SHA1

    b5f8749f958901033082958c7cdb3439bae0d835

    SHA256

    14a763463b10022372a046eb038e9dea77a100a9fade0a8da68d2cdb3942c8ee

    SHA512

    94b26cb6a45208b8c73853e2bd98192b477922ff72499cd13fafa53496863cb102cab7096bd2ff8326d7d6974d8228b533b76011afc3de595011d7093f5976af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e70716d72fac3c35b4f848c4dc0aea4

    SHA1

    0f48dd3439ad83bb7c85496a288c27b7398ceb7c

    SHA256

    5f991ef48af0a09329fc344be8ab83170988712f91bbaf43a22539f36ec11272

    SHA512

    0ae150541744734407643aa16544e59237b848b3d4a18acbf787c763a22865e0f750b9c379322ef1d9ce22fba7b83f301a163267cb17a6dbea8df21c4e24a61a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3af330af51fafff9a1186fe07d27415b

    SHA1

    7ecc17c889a1f337d2acd966e19001047f28729e

    SHA256

    288ff8ad9a4da2b32b81d14550d2a28f7978a246455ab07c90d49db18bcaa0af

    SHA512

    695a307b6e440d01bf1657c9cfaf9b546a94b33dc79b062857e8a6e0b10cebfb13c4336cb75a083d5c6285ab3c5710ac56c64517108ab6648d590053fdf5f4a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    645c8d905b53a181e370ec094bec043d

    SHA1

    0d69953cb664a65b4f7f9df2668bfbe815d454c3

    SHA256

    19dead2166e9045c7645aeb193eae86980978c7daa227c594e9298e1f5acf484

    SHA512

    05bbbd9afbfb88bc0fd7e0218453fdf66f1cfb5f550ea887a4f3c498a4e89f7fb9772ae4d15e9a9986756b11d10ec0ea48ed2822770e27542caf0da6e276387b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e422b6ddd3f2eb65e3aa14475f48c8e7

    SHA1

    5b6fd936b6a7374f9269b8b26d4bb19d45178a7d

    SHA256

    70d6a7eb01bb94366fe992e61c24773c51c5e9a1e7aef1a826c640ce89ee9035

    SHA512

    ec1dbfd368f8274d2ceb5e689dbee94e7739fa18ef175f11d15a22c87a5aba54ed1f9894509aa1ee717cfa932e787015dfb14aaef14fea26a33f6e161f973229

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63941a5cd7ef5139146ab1829f072d8f

    SHA1

    074a64c23b363aa8d0713b7218dcfa88799c4aa3

    SHA256

    b644dbe50bb1a96572af6253e4827462fe4d3edcade577e9ace807805c6ccddb

    SHA512

    6457ed71d27b3fad2ab60306eab288fa7dc67d418fdbdb034b8e61aa9333028b001326d18e8dadfab03f739b30835ee26ff6806745cb3b71d5f115cafed84447

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5fa01482440c6bcf72bbe584dc45b5e

    SHA1

    9319946c82425e992e8a4070cffd688e38bb1593

    SHA256

    318fb0bcd7d08ed8b2d27fcb7e7a053ca8d455141c461688e62ab2a0e01d23b8

    SHA512

    914dfc9ab9dd7286cad44b94e80f16a7ec351cf3d77844cde0818f17dae4068f2978e7237655b3f6c64861b6ec59fe16ebb302146e5cd4946469c33b2b063ba0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2eae230096f6a939d8db207c7e8674ad

    SHA1

    ab16bf6f4fa4506291c21a5619ef70c4d9030b67

    SHA256

    2a6bcfd58971568372af02719fc6b0f92aa4f250fa2035de2a2345810ab63226

    SHA512

    a8e0453fd6121c1027a03784a534995b1e897134ae03968b9c8c366913b8a637d08525cf6f78ab2735bba4113afdddb81c78d2351440a67a65f0b01a8ef1afd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    486eafa200408c4f0c214d087d94862f

    SHA1

    a6abbd84f553fe5fba0ef6b9f3a56b41b5aa38d6

    SHA256

    560f872491105c014cd34e39d169caa02d4c0151a229c053a718d2947ab73612

    SHA512

    ad905fa49ef5f8279c600511487fd1059a57a4b65e80d333762d62f0bccfda6bf6f55fc747b7fb0377956076ce5f4cbb157bbc5a7632a37170e592aaa90564ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e7e8664ad9cecf2d75f4b3547c0d0416

    SHA1

    794394a6c3dd8b007c2b3620173ea24cc0584e40

    SHA256

    25f22777a22ce74a1eca6a80788cbdec43d32913a670d5447cbd585f11226775

    SHA512

    0c845d7636749db88ffc300dd90ae3803931bcacb31afa868461adbb62aa2dde40c76db0bf9768e398b2b17faac52158385b55f715fd4291dcb49077f80704c9

  • C:\Users\Admin\AppData\Local\Temp\Cab2EDE.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2FB2.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a