Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/05/2024, 13:15

General

  • Target

    17d8791740f4ce5708bc93c0c64533a1_JaffaCakes118.html

  • Size

    34KB

  • MD5

    17d8791740f4ce5708bc93c0c64533a1

  • SHA1

    a4539c8f9662b2e19927699cb81484da72fe117d

  • SHA256

    7cd797b2ccacfb7624b602251e35519cce7e5d967f63f9146bbc1e6b2d7631e2

  • SHA512

    08107a2730d0d4b546793c015aba4f21767d9344a7b77b69f6007229d3896c2c5214343c77b89ea361bbe4076f54bcca5459290cfb4b1789a0f4ddf7a9c9ab2d

  • SSDEEP

    192:uwHGb5ne+nQjxn5Q/VnQieANnDnQOkEnt7bnQTbnxnQOgRcwqYgcwqYIcwqYQqsk:1Q/qJgq5qso30iLFpP6k

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\17d8791740f4ce5708bc93c0c64533a1_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2168
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2168 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3036

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ee0476fefb8990cc7396605c4dfcbcc

    SHA1

    ecc6e175de038834ebe7fa65d2628b2e5cd2d5e2

    SHA256

    996564069ac000a459ab5cfa69f9c577c0834e2662ad878128fe4ca0b46a005a

    SHA512

    b83815dc1cd3ff7aab625beeeca403fa7a835b29caca122a8250524c6ae01fadd1b894c57de99d555510bfdd8a32375668dfe169fac58bfe4037b989683bf488

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6fd1a14063405b04d53511b7fa6676d2

    SHA1

    15e441b0941c73046fb8aba21fa87069359e4f14

    SHA256

    282d02097ae9c9693dbbeb4326d3b9bf732afcbf3d3322d7dabe06d5902f803e

    SHA512

    ff7919713420b136dc9b9d5064fc73a68d3714f87cc7c8753b3696b1dbea4a0374f072dde2db6ddf676ac4084cd9c4423f4c5334e9c642364eb2dbc785b35d32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53b382bcc7ae3762aca810029086db7f

    SHA1

    7c61d4deb7e3ba7604a1ea891aca13c5c43cf3fe

    SHA256

    4238576ac2790dd27695830ed90ce746c1d9846945c245e30ad6de00a5b4e06f

    SHA512

    9356f4789d04f2995ffca88fe6b8894019b45dad4972d2894b58670dc0097d2b47a6e1209db3ad9144fe0d331bab6372fff1e46bdd1647522ada67b34a966d4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5728cc3ed793f219d29254195376d55b

    SHA1

    146992576bc49b2e6d030b4291d4cacc66dcdace

    SHA256

    62f004261b981803763c4d731a9ac79530ab829cf792dc56613c16f64d2abb5b

    SHA512

    8929105814089eb6cbe1ff65afc2cf4c1522c40a59c03b323427426c3e1914baae2097779024fb62ff8d1f6f1d3b3025ee7ff489bc9f4d5c0a7a640c2c6510dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c7d2066a8d7bc48057ba2acea8a29b17

    SHA1

    54df692c68350bb84b117e3e8fd1cff8941ad240

    SHA256

    7bbb670ccdef6d08b900cdd33f305358d2fcca36f548270153842f554196eb9b

    SHA512

    17681a8bec59d23b9c032a0c72b1b711f0a9d95e0ca0e94977e2ac63a9b5300153c37801b1711a130d5870e34df99b8863e1b49b5f342e5d9e986ae3984ac989

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    007dba4782ace65b1f36498c3d079d70

    SHA1

    9821788c179fdeb8c72fe2e00d7a38af9cc9a99e

    SHA256

    6b497b7301ce92428c1eadc4785aaf111b5c3deff73fb2600b76cee8313a6ae9

    SHA512

    56ffb52ab393ea8e17675881a4d197bb641cbe44939c45a80e2d6a1c0b52c00447129c70397597bbffb91c62b5c9783b8f0f3f55b6216cbdbe5cadc681c56f86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4114020415e285aeefdc23e6503b077c

    SHA1

    3219ec4347b5be18d37c7fd94beac951e96d799c

    SHA256

    f2fa09d8a2b149d1b970e64e194f65d28dc15ada63592b1dc2da117d9a6eb886

    SHA512

    5b22c76b39d8476b2097b577b5474faac08ecc4ba342fb43b881dcdda54de0d70558de31fa6d81862faeab191148a8e6ef30c80e7f79f5cd6f1dd1ce7b35a8ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a6d983d69fff4a96e767852f18b0b1d

    SHA1

    8b3cdb404634355578826a74f9f0b2b396b4bebc

    SHA256

    2c994e67ecfe11ebe771e8f314e83ed9178e74330f2f6adf001d7414d9cb5b7d

    SHA512

    d0e3bbcb9ccb18a0df7597a5f1d82a4e8ca98041498356f4806b016eef0611199ecfcaf33d36efb4aa946e1ecf1167facfb615d918a819f79d54dacbc5292451

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55b86be89c4eb1e9d5972e7b5930372e

    SHA1

    ee750a4c0d023307c56593d6b51748485fce9222

    SHA256

    b6920362b12b9383df8e0b95bc11feb41b2427948003ec9c79ceadddf695933f

    SHA512

    f924bda8217522dc6860b101631a5e76460ffbe42bec818522a9dfd16f134c4544e0a53c08cdbcbdae2eabfcd29ff4cd2a6870ae9735f3a3bca735e92c5fb963

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    554ae679631eacef47a61765dc57591b

    SHA1

    5e0872af0094ebb2fcc75c3e66b1fef301ceb3d4

    SHA256

    d64d09608864323ecc34cad380ae6cf203dee67e117cd94c71a83f799cbe6707

    SHA512

    f2120489fccea9210f889ba1b489dc9b67e2b8998665873e21ef431311e174191101556ca5e8da6c4def4c22f48588bce06324a794de72d14367c92b7d46d788

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd794280e8bee03836688b7fc082b770

    SHA1

    45048e9b5bb552b33e7866b83ee2c8fa9ca9ce51

    SHA256

    be7d5cf230da0cd4f302cde206ed86096d9962b8e6cb117fc35154c2cf0d8cf9

    SHA512

    13b32e31f4219d5013d5a359d23c815aa9baa3d8876f4328b83773c726c5afc2efa8a4ec81847f5cd4bb7b92a1ce177a4f59a8157ed039842e37b2fb6e1da362

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52de956b13ffbc38b06ecd9bf280e3f5

    SHA1

    da4f6f4faf079b7d1043e0ca3605d2ae8bde0cbe

    SHA256

    5561f30dc48581b2babfbc8d399af5dea51780a268b38e75c01fee4496ba5817

    SHA512

    c78c5420685f531f0c06b36104b426e7282abdaf62fb02d12ee94bec7dba73afc783a7ff4f27a58a672420a774f3498765fc326188262f2626e4ff7e53f919ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9dc230bc85235cd4141c20ff7ce20076

    SHA1

    7a20130367ce5e543e3fd9c044bc3203a8191a7c

    SHA256

    3e0aa0f7967c1c85fef2b073f043a96ef6e18f53d2e8d36ebd6ef1cae9f7d475

    SHA512

    d2f8573912e275b2daa1cac23659cace0c2fd0652129a8425f8032c05f1c8ee9d4d42876ce6e93e909cdc9e307c88cb1feecb1950fc9dac8f59fe156709e1960

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    481b5dfbe9c342b2cc8d0c60db0e6a4a

    SHA1

    713b0976e905cc47c79c6b63ba0a560e347f2f32

    SHA256

    49ee6080832c89ac04bf0304d897759c9ce995b5b1df5376d2eb547d584c69f6

    SHA512

    d5c466aa3e09ca8c38d94227963776c64dafb5ba2d8e0d282aa78eb0065d203488b609ebc5158949f3b3d2b671249036cc973d4f60057cb9f7dcda4cfa35d898

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86c85617925e8970ec80fa40ed1d6ddb

    SHA1

    f8bd8660c3587526929c720bd3385c5b58dea802

    SHA256

    4c570438a613e156265c9093b7bbfd7d37e9ff2ea1cf504f2508419130c35370

    SHA512

    5abf315c660e96a01b75c7b16b991adaf68d9300acaf4723fe8e6819349af320700438cea95dcbdc5669a5c449ce60ed20aad2473f9bc42e9c20dd01c94b1c50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6e96ea176dc344de8b246a38f7cb6d7

    SHA1

    2ec21a000c9c5319fde6d12a5a9e36f6075bf125

    SHA256

    dcc7b7e8ec7ca405204456f8b87810f9e6e84fd649406daa127359fee51127c0

    SHA512

    d42aa9040d5b6655340e4d2c6c18df1452efbfa602eab19e5c3c0af3806bb399157701f0e7be4181981972ae1b442d0a3212e031f5cf217fdef34b71dfda1847

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b7922bdf7ba9d6780936bb690d54f75f

    SHA1

    b31eafbfe31e4ac0f916b9e457ab52e2574c3a0c

    SHA256

    ba3a3ecfc81bd452f43d918e8bb516d706f8979e6225ef2af435155c8b173617

    SHA512

    4e15ae403e170cec79630fe9c7f388c806a8f82850f11172e62d7d764860906775bfeb90304063d6b26d46acb96f51a1bccf5b97e332bc852dfaeb051af9b6d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9a7f29ca101a6e52f5de588878715db

    SHA1

    984578f7a55155877814ccd6634a60cf571ba846

    SHA256

    4a9f47f3326183dfed7ac57e3c141b0e14c9ac15c5be66e315112a2511c138e5

    SHA512

    b46a8941cc4bfd0bed8f120bf707c4ef86a5b9c7fb1a5befe89fae7606d54579dc5899d1bc3019c41180f797db8a385443084d65f66d65c3c1a3a9fc12430c9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6af5b788ea7dcd0c8a61a47cdfa0158

    SHA1

    c72245bf06a9f1c42e251f05cf58e8c6b0cf21bc

    SHA256

    4998e2808abfa18ee095e9e447c79222e530e749d71969b92b277b8462408849

    SHA512

    a3ad078d051371d63ee28e275675c859d3e9f7a6484c09f09b1a34acccbae7a838bb16daea194ee9252254003e083a6ff22fd3835faecf22319810ea6ac41a04

  • C:\Users\Admin\AppData\Local\Temp\Cab42BC.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar439F.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a