Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 00:56

General

  • Target

    227e2ef2fe11a2d97ec5198dfba55d46_JaffaCakes118.html

  • Size

    27KB

  • MD5

    227e2ef2fe11a2d97ec5198dfba55d46

  • SHA1

    afa325b505ffba0fe9ee43643035a3c7bde96845

  • SHA256

    a295517eecfce3d63b2dc3a6e6506c51db0f7c44f740fb92ef8f21dafd1a38a6

  • SHA512

    1e3d2a1378201dedba9a30f8f469b784272591c31c9ebbffa2482f03137daa009d96a437a07a1be59f7bd50923674b8f1c33cf3c6ba5ab8f52e11ccff8b1fa89

  • SSDEEP

    192:uwfcb5nwvKnQjxn5Q/znQieqNn8nQOkEntdNnQTbntnQ9e0im605KsQl7MBKqnY6:ZjQ/INKiKnSIDk

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\227e2ef2fe11a2d97ec5198dfba55d46_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1984
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1984 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2476

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ddaf48c7e0e405a3806b77436a33dc1

    SHA1

    e561f4308a144b9324fee824fddb6db6d5448108

    SHA256

    bc917a0f693435512998bc2f1ccdbbcab865a3bc5bd64c410dbbd63b051a2fa4

    SHA512

    05b47eead10136d9477fbc491037385d2d73087a2d1de5a410dce469c29651be89c3e1421fd6666e8557a857fd296409039179cedeffc973a19e8c54619f6960

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b2183491366a221aea359101579dfef

    SHA1

    98becd3fb39d84ccc9e23bc027867da0cb98f7df

    SHA256

    915fd21eed3a95d632690bec9dc557916f5147853a726192a4175941fe273eb4

    SHA512

    745f4a69e909fa133ef722bf682038cbb75d014e420a087bc0e1b144006aedca789b3c745ed6b2647b47eb7e08315b940da974f681f1f62cf415ad66b8e1d3b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f2583898355a5d8e25c42b51fc7cfa2

    SHA1

    8e2649930f147823c4a95a2b00c60b2b59b37b2d

    SHA256

    37d8ac21ce79e6589f1c02bcc8e35fcb4a1f46b42f87dacf576b98a81a83adfd

    SHA512

    cde39693fb8f7f22214b8cf750c15c8912fc9ddf6362d44fbe37b1450c72c525f1a57c6caf1953e5ba49c171455da201fc0f077a10d4a5edd206cbb7d23228bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f00fe160e5deb638f52d0bfc36b8c8e

    SHA1

    969a13db3f391c46fb3f73e93eb1dedf9be03c49

    SHA256

    a9c5b37f62144dd7c24fd9c99a761705518e8f252e324b3d638184b11e37b164

    SHA512

    3df48e00b1b7608d1fd46859517b0e82170c9a52a5e453422c53d47367366fec2ae20be159c22b9a03336ea5d8c8601307b96f3c9aa0fcb16df54be2cacc8447

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    76ff68c3465d802e12167e112ae4ebe5

    SHA1

    bccca44f517ab9d7c5f5a08313251576acf542cc

    SHA256

    0b4a6ec31366c01b4616c598849207a768909aa8f804c104ccf4ef89294df364

    SHA512

    afedd0b522191b8d2c0391ac4a7404295c11127f149cfc99af6ecbb71bee2fd83f77c9563f9ab47649670bb0503b4eb25757aaa7ca9e8e96478fa92ba1923b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    465c4aad38339cf9523f7c0f7b6b395b

    SHA1

    577a136f1b824f748202939f46248ed359d05cd8

    SHA256

    afabc60726d258ec21795f3510c49babc21adbcaa106ed512f63507e15f2ef24

    SHA512

    8992c242397643ec7e2bc2c8eee5db7b03b0a1fb908963f05a776375d866a135548e237f5d00ecf4eb87120bb169312e931f44db7c5a5ecc2e78f637f92f0e17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7de1bfd0cbd3aa437cbef601e8b54cdd

    SHA1

    29e4b9c887bc45239f629019ff3d08ea1b2f1108

    SHA256

    83cc1000b673d29fa87c4a99f6a001d4f861dc938e98a8da64570ca17c445e16

    SHA512

    17afd4c8ac77525cb385cce256ef75a6a2bcdb59c6c77562a8e65fb810535035cb2fff0d0aed0931ac4c92af212bf3a71181804ac41e1d70b360c4729df5c5a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97d00233eff6864944bb3934cbbfb270

    SHA1

    da8f6f3f0faa41a9ee5b0d0b5ca62c5e7a18910f

    SHA256

    0e7b2a3cea005eda0e6cd969cf7ca46fc2259b3a926fcf06b9fec1f62858ccc0

    SHA512

    d256d56660142cfa52abbe7454417db7c56e12b4ef4c33b0ebb638a4758f535cb0e856773d60acbbac79f126c551ee7b220acdaa853973627dbceb267eb2692d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb4cf8a65475c4954565bdf84bd25c4d

    SHA1

    125266da536518b6d5af46c1f66f1730d4361158

    SHA256

    5162f830daa270ba1b1444edbd22037d3a44340f11a8a107490d74b6a7f2288a

    SHA512

    0ca42b044785819b8f71481b193862283d95f30612a3d4d6f07d2a033a76954c2d86a0428a9870b758618983955e88d5c04bba86256659c6f7a5fc5c6bc3f557

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92fb7299b16e7ce279cf40cf23d332e9

    SHA1

    281af30ad633ec31a06d15d345ab05eb7a567a07

    SHA256

    963e44c60accffc46aebb990bc484a4b97ab46ad563cbf9f6f69be359c0420df

    SHA512

    976c2a046a75b4cd7454e96e1c8578462072977182f37a7fbd9189d60d9b7dbfb511471777d55ee124b0b63802704272bef2bfa3fbdcd3c9876d5f2f06022324

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44b94933cf87b6bf34ed9ec027a6a039

    SHA1

    553517ba14eb1237d05336d3aad9f027f6b11305

    SHA256

    c4de9f85001eba2b587c75bfeb0e359d20a6c107dd0e049a10b9098c30f4d691

    SHA512

    5e3dfc7da4522a16cfbcf9e29d1d7e130f30d08616f0f63c6ea416f4f141bc10287b3eb91a8310b37f3e2b8c3ae22b97ceea0c927aea57341e038c53269c23d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38da1427a2916be2819bf23dde32a4d0

    SHA1

    10b77681a6942ec4d15bbdda5cde3b1819952967

    SHA256

    3fa48a86dba425d53fab66ee25e0a362e2ee3d5ab30f853481dcc64f6b8fe8a4

    SHA512

    acf699cde3b239e4b591fc9c7895822b6d8b3b836f195b4325f3b0a59cf56af80492c0eb026a7498ad2d8d590c517629db21be6fb01bcd5eafe084931691f656

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    710ee7437a6be62be8807021852fe01b

    SHA1

    3051c9a44e1e75b4d5c3b3b3e380dd8012c4293a

    SHA256

    412f1c9170bf3e876d48df73429444900369e12d5d69ce4c0eb8ea2c69174859

    SHA512

    e4142f394529ae9a752da1cae4db40cd45becd6666be7280baf616dabcf93fbd5615a2030b790cb639d0fa437dcc75d48d71d6118624dcda33e405b898c9d1d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58e62a45d994e2cef8114b43f8f29ca3

    SHA1

    351822b76c8531c1e957b1eaa4ff01b2ce290e41

    SHA256

    49dd9ef697b900b8a3fc4439d96097d7ddef217dfac8006e55b13c3dd53155c4

    SHA512

    1afeb62c6fd309a97d1073196332f51852d1797483e471e9323b63f0bb6d4f1542846612c5467f1d90b02c0340f60bf6307f90e724423390f08c5e28ebfac6da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f8eeed825cd87085eb21aa9c82972ce

    SHA1

    3b7a66afb496744ecccb592e5153a5c0c4c92724

    SHA256

    0f3263711c426d2348273bbe4655a3285ed2d0dd798219c836412f0ae0e81c71

    SHA512

    71d778ee1a547610cdb2143c3d87bb41d0ed9f821a5c65e003da503ba816a04f46110231fd2c4eed26b90b6452d7863f88fa06cd81ac18bef994aceb88188158

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ddf3d3e0ddd8e01021c84129788623f3

    SHA1

    81e76ddd3e9188de5f1359d4dc657f77e8c76794

    SHA256

    3af81801b1bf8ff61de047c488709f4fe9197de9933e54ffa39057a4be1922c6

    SHA512

    fbc183392170ea32780c72268db65a8b4dce671c980ba36475b9e7cc84b66574fb9fafa767549c8f7e1d1353a51e56f8bed91a4622fcdd5acd0fe7227d97996b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3cb5726c0a1decc6cf8dc32d5dd62af

    SHA1

    da83e3a577c5528602a91f8c9798bd94ff3dd09e

    SHA256

    949a7c9e451babb04079c6271a34f949f5f9d8e8a308eaec6aee4d9dc95d628b

    SHA512

    271b81e34ef168a687d8072434f616f76562caee421cefab31d7a1a93fc7802b0d830cabc0025dae6dbf90ce32d40b7933392dd4bf315708a01bb3a88b58ace5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f9c84c6e502bc3e11a7d105161664d3

    SHA1

    86d8d69f82ea96685b3b4b40defb964b3ae32a5d

    SHA256

    33ed55d22b84d4ebce4fb76a560b09b48a291b19a5b5a793cc43e0d25ab63dd9

    SHA512

    8d08b1499a9d7951928c0d68b0266b8b79dc4847dd01782b994ddebeedeffd5e058a94d145960a20d50efe93d3b07469b90dc17bb2be05ab8e8b9f90996c7623

  • C:\Users\Admin\AppData\Local\Temp\Cab2D39.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2E1C.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a