Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/05/2024, 02:11

General

  • Target

    1583545f341711213a1a282fe79e9543_JaffaCakes118.html

  • Size

    27KB

  • MD5

    1583545f341711213a1a282fe79e9543

  • SHA1

    d677fb3d01bda692689c0363c246983bb73b24d0

  • SHA256

    857875cbb394e06f14caa3cbf313bb7c179ff3a644bcf92349595db842ffcc1b

  • SHA512

    6eb4460d856fd9c9cdd46d3a0750c5a0ac53a25db71d7f7e739b37eb1ee5c656ed2e74354b0ab57c511d0b9f4cb3725f9638acb58b663b71efe3267644a7f203

  • SSDEEP

    192:uwDUb5n6OnQjxn5Q/9nQieINn5nQOkEntTHnQTbnJnQ9e+Mm6l1E2Ql7MBoqnYnZ:3Q/Hj07EBSyNl

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1583545f341711213a1a282fe79e9543_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2880
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2880 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2552

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df756b58f7c7b23715401994f567b0ee

    SHA1

    b1f04b425cc9d9ba84da5fe65cf7df817df695c2

    SHA256

    72d5ae9c6db809afce190921ca2856c3fb35d511278c6f2205d00db1a90084fc

    SHA512

    403181c3034c13ab7ca98f90f544d610f2f203e852ed9bd2bddb48d0c85f75bf603c3c1f9e2807452582ad2dc1e1f7ce79060c3def8fe4ae8d00ac8794a38466

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc0285182df6b98361f9e91165669528

    SHA1

    6f0792def624d398e8eae0d28aa5119abc2bb370

    SHA256

    9e5907118da29ebf4310308657902c54c696b1525fe123ee4c86580a8826849d

    SHA512

    2484fbb0a9e200787e3474afd0cc7e214c5d83633cd5a99de0c244cf73997e1364432316c60ac9c38e3ad6193e3fa27ae47b06bdbe834c0d5321c00277116726

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14d85315e683b7a1d76162d6994a909d

    SHA1

    79d5089deb5841835d73dc241abaaa3ce9bfee2f

    SHA256

    a02f04261b7b28071f7822bd376158d88d0033f89fc3f1e7d7073a0ea8da28bf

    SHA512

    8d7101c392b747cbece58dc6444d251ba0f45dbeaa8df2f76fdd73bc93b901573d6fd93494b536c0a8e830fe17541cc5ed156a65436eacb317ffbe37917faabb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d579d06b7c762026cd139e102fdd7c14

    SHA1

    ee27f45e5f6706c4b6eba103ad5cdd743d0632df

    SHA256

    866fc856263a46e0c18b1e6ea1863fd6748327d66858817d24f9e3f55787ee0b

    SHA512

    971b66acf4173f9173e37fa5693032039b3010e702f2186170d8426c616f4c98585c9c42a37bf5b2f409875b984c3bc2157295cda834cc43511c3216e4fa9587

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96dcb4e5ac2ce9986da9d0ecce575490

    SHA1

    1039f3728a2caec4c77ab4294ec650833858f3e7

    SHA256

    fe515d00f046ab9642b7277ba841b987648191e311d5f9e50dfaaf4da561f436

    SHA512

    431225166ec371a90353179415193abf9fb5aa6680ad9f8724abb020a16c6df9e2979be9c27c1732e979d7465fc7a4a69fabf7a1a267e9157606271000644ae7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    608f5a2c9ce2bdc6baa4362e7efe3fc0

    SHA1

    0acc3bd2154a7b4a8af700c9ccfe65efe589666e

    SHA256

    88edaa172d4fb414c680f58d42bcbe4ea3fd1c2a4f32ec0a94ac5e3c80f1f2ba

    SHA512

    721f482d015612ebcb3aae24e46ad6e2f7eeda95f969e631abf00b6f3b6eeedd53db55de6e071101aba638201e410dd254da53fba37eb9950c65259808553bcd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    715bd9ed18eb1e176f08c71d70816af3

    SHA1

    1938da5eeb0cfccab66e9b0f0dd0645b1af35b36

    SHA256

    808013fabe7dd249e4ec0dc22803661a3802146bf9e9473bc1f5efb23640979b

    SHA512

    ba22156542afeb82074e6b5d8899bb2268db083b687dc04f0a9e7afb54963bc9ceb03bd2503fb2f9ceb8fd3e5ce17149cb15815621da2423a5089d7b45d995fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7374c17b688b1f8db8456a5c91f66a1

    SHA1

    9634f19f6d170ccc9b9cad5dda5abb1353e20d38

    SHA256

    51b5e3798b6d266b8bcab42ad99455c99c6767b7f3b96c337c4ec9f5249bec21

    SHA512

    58d66a0cb85932f5bb85f4ac9c76a7d9d04c2faf922a3d21d517629ea250e4479636f4aabe50db3ec5dda049999e0ebd4110b05d05b7a241746ff9a7fd7219fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be15257746b9bfe42ea16d71ef59eb64

    SHA1

    acafefbcc4add4d4634b55e6c57fe90725083dd6

    SHA256

    074e766233b3bfed3607543b18d03cbd7bd7a4bb9b668a7acb4df20f6e3bf840

    SHA512

    780dfd402c21bf5ed551ecb52a28dfdbeec06cfa030b5c72c284c2cbae50c4231c62327fe2f6e0f1aa423d313066424245134070be9c1a9691d25630d2a54d81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e7a6879fcaa905daa7d2cb0051c973be

    SHA1

    22f9e09d0b56d20b5d4554f581b8cb76fba69430

    SHA256

    4837589d01e96a5f6fdeb4bced9fe5586db8542b381897ab53bb1b91e1374ce3

    SHA512

    38b94f0b75baa2da9465c90ed634931de3eeeff886efeb6b4fef396b33404578751d75b59186a5147141775d57d8bef3936830a7afefc279d918b09a4bc08856

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a77508f88c61b0c49c16bb8709436f15

    SHA1

    75183ecade7e7966751b389f9ee9f763ee6ea804

    SHA256

    7437cb499ac64f1c01d493dd03a127415f6f29a3269528162e40065535718aae

    SHA512

    6deda8554a8afb7252dfb65491defa8e2eef5b4b9635d9f7f882c0f32bda8b201bca63cae11738338247bcdd599d8029f3836d5f9e658e698b53064947a97b40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8affb99b113db9f789fa8a3325f2014b

    SHA1

    69b791cf1e84bb3c3fc0c5c25861bdef5aadfe74

    SHA256

    13f9becb2a0a6b7feb221381ad435e942e3dfc82b08e61523adb2878dda8cd42

    SHA512

    a3830c686584a25b1ca9f13a83ec890c6bf8ada50212238d6eaa91ab24655cabef52bfa81a7910cc6ab4ca8ed4e30d0761222a8ae1be7563ed78173040245f23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b1039d2a5928539a0000dcb9740dac6

    SHA1

    9a04e7eb32a625690cf398719973572610c6199a

    SHA256

    48ae76b381b28e4e926d550813d11a93dea7551aaec9a1a1c1cfdf03e5e5cd41

    SHA512

    c8a24e016d9e5f0208fbfb42cfa212264c0ce66fba3f69823abf366b660396a0671140f0c223542599502783d3fc75baf0f4929901a7a198991ec5c96cb66506

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    882218d18a06ca58de93e5385e04fb30

    SHA1

    98ef95826ee31d5e3f64e670a8000aef3007b7e1

    SHA256

    d13ffeb19dd5ed6e7039184fa6d0c15cb87be23aa1e44ea3022ec8a858090ecc

    SHA512

    1fcaf969917d8e15ede8b0b223fa858db5cd89a7b7b60c159b43480402524a76313d5cf0a99686fbdc3ea201854e210ad92b9ac352f6fe18d7bb2659244af123

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ea107d1fa66cb638aa6daaf9cd3fa9d

    SHA1

    24e559bcf762d6a5a12949e7fd09875ccb94047f

    SHA256

    cca35ba50fd73a43830504bdc867fb8b44cf85d0432640be3cba6e93d9519e1f

    SHA512

    ad33e9100565781d837ca6f80e9890f2cce7cee3eb969c863177e06ab8e98a9cdc2826a6c470a64bfb4fcf1dbfc7ddf3a075618873fd77254c85f0f9c3e0dfb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c025d47d69f7f2ca148992984e168715

    SHA1

    dc0b0e930f4f24116fa981915a5b74593e8e65e0

    SHA256

    9b5572dded6f79280b3636cdf4075bc903b5f1a55cb86d3b1b5d400eca266cd8

    SHA512

    155bede8b4e11bf93341a9658ce7b5c99ecf4fec5d0b1abe8b56f0cf75bd94eee694f7f61d3901794a90907e2bf2b92a53c1aa69f0a8b4cee9e1ca483c93cf7e

  • C:\Users\Admin\AppData\Local\Temp\Cab29CF.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2B01.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a