Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 22:43

General

  • Target

    2c136517ddc92f4b2e66203f3ff582ef_JaffaCakes118.html

  • Size

    37KB

  • MD5

    2c136517ddc92f4b2e66203f3ff582ef

  • SHA1

    2840d8e180b0a2ff96e7865e0a983491d0d31b95

  • SHA256

    aa8f077df19a0304a588d294947739bef9588c223984019fc51b5af173ebde1f

  • SHA512

    ae31bde2f9ac59497b87046b7e468678516280e7b1d05a3f7a2a13e332c39820b430fb4a3809617e18d883ad2198c40addf48a95424459612e7aaa86bb27056f

  • SSDEEP

    192:uwTOb5nWF4nQjxn5Q/RnQiekNn9nQOkEntjXnQTbnJnQOgy9cwqYrEcwqYAz2cwb:jFQ/o2uH248dcgcQ+6kwdnhKFoc5usG1

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2c136517ddc92f4b2e66203f3ff582ef_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1308
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1308 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2032

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    07ab0c63ab32dc8a8f8b27b4ffafe7e1

    SHA1

    3f5e01308d99aa896d508da6800d29b2ab484921

    SHA256

    c4f832645ce53fb376806a1c7469e01ca9b43796ab651e4d8c378e73e09d8126

    SHA512

    ff54134662e90db1ecc234d577114236d4cba344864d9402f6121b3a070bce37e574c00daad8eedbb3a4676b1748fb61c8b51d2682be77eb880506d323e9557e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    66eef2873fe44b47e358948c8827f284

    SHA1

    06fb03b2ba49c91207ab73043b3cee99de8607a6

    SHA256

    467a1f43a5940dac7cbcdd8d8e0023e45c3642312609349274bf7e56c08e71db

    SHA512

    75eebcf71150fc95e9117f1e3cd27bdebcd835c5ce8fa16afa0e080f341dd928d33656fe82bb640dd1078d126048ca991432f3f3b75822ca1730c71d2b54a98b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    8a621a3f7b2790b4edd01c8b5f2e704b

    SHA1

    18867cd04f218a7121a4537b05805917533b00ae

    SHA256

    4bf5eb8e7a2b377e366770d3e3ad267a3b96e3ae2875f9f7363d9e527c428ae3

    SHA512

    f39a97b2941ea3068f1a4c665bf3540e8a71b6cde195e585a5cd2b86a5531ad4ac1c57e39dd7ddd2a6b701110402dfbebcf3c0293b115fb6f565bad5e09438c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3df9bed6f199d036ecc96c405e93bbfe

    SHA1

    e33a6e0029893403808e581a1b583075ee9c5dd4

    SHA256

    4a996ae50d87d92e585f16fe4428d1edbad542499c6ffcd9a3529cd4f9e3ff29

    SHA512

    4e74f502f8d21310aa184ed77814a24e38e768958f4bedab7e2424d2d9c1f36a618dffb3e2b52ca1d011289bc15167cabb2656f655b3fe2b38195aa3f9b97b17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    77b20c2b2cde95aa49726688dd22aa88

    SHA1

    91786930924aa9c1036657b525246e6ccb462a6c

    SHA256

    8d9f86d9933e901ab079bb635e423aa6f4069920fd7e4aa33a27dfae183dbdf7

    SHA512

    baf3fe7ae7138c962d8bb8c517fb629a6008fe58c2875c8b5eb4eab92e9c5909f2f79c16e57fb650733c16187d4b4d2eea7673eacc39cc126b72907b948258ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a6fbfc7a7aaaf7b94ae61ddc0a177dbf

    SHA1

    cb1216ab9009b047f6306f2db2508b93e6c9cb77

    SHA256

    66e0d59671876c1ae3c2cd37f62e164cf200d217c2b8638d400d9536c364abae

    SHA512

    3668871030ce55aa7bbdb2f32260c6dd02a43eef0bf3113caf9ac3f6ea366f12582a1f9b7f97cc1c01a3710e67036be045dcbb2017682636418cc50a2f6c8225

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a6df4c7ada45cc7d88126bfeda43d46e

    SHA1

    bbcd168cbc2ad66badc7f3ece9fd8716d0253327

    SHA256

    633c2aa841598260cbed66c4c1ab73d8428ca0eda2702de6bbfce357e5c8231d

    SHA512

    dab4d2869b9ba0d751328230ee52e17145739fda116ccf0dde7ffc3b3ea08048b87b544bd1775e48c8277bf8095c5876619b45550da917fec7c836f9b3c66a84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e51765aa67b4cbb10603edd335e32ba7

    SHA1

    87ab9354390886668832e240ac893e7033b28b94

    SHA256

    bef26d6f84d1261ff90d27c2babd1980c2eb5f1d0f5ea9d9021ca486f54a02bd

    SHA512

    a8de0e095e9599549763362bdbc2e7f31ab326d97b4975e54875dddf1b8dbc4973eae634818a20cc4e3bca69bbc32a62442ae44934046e5a3e4cac867515c24f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    db382613f973430b9d396caeaaa4421b

    SHA1

    a019a9cc7b7ed9bf111f9ee3c4766f05cc3dd64a

    SHA256

    af135dd3273e6deb55f4f66dc19a3aaab5e2b5cfd56e3ccb8e99bcebb61b7a99

    SHA512

    20e491beda8525a10042d159ce686681e874512eadd5a6bb12f81c60a1d9bfc4e094a17588eec46f4e2460d4297cb98fc4e92b8d9baef96c17b33da908989c6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2e28cbc362e196759244276d8045e6e3

    SHA1

    30dd1b9d6172494b8ffcfcda7abd3231e4bbbf2d

    SHA256

    403575f89cad120effc2462b8b8014866d1277dd6df785c9d8a537019d70e1f8

    SHA512

    ca15064d176e483160071f6c0aa9ebdbff740852e900466966b7c06f5a64c3bb13a705cf5d0e628d4a6d9bae431a781487d4f2804db3fe5432cded8a58918114

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    46c9151d29c3a1e889343c2fc7714234

    SHA1

    876482162a8131de2f94c54221bf4f6e5e4c3249

    SHA256

    61b971f4d3bb702765182a4c8f7a3c409dd2f5f13d156771aa62c84e1cc9cbfb

    SHA512

    bcae3917f1c407b95a5a18d063dbde8662bc39d64a43689eb6ce6c30f4dd1e9b103b4e50b0a505abad8325db54a7ee6b3bd3d455722ee8e31031bd5a37e631df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2802206fbb3266099ef651a4e6e500db

    SHA1

    316398ece8ccf7a7df445ca813bff98f0dd71935

    SHA256

    031b65ca0304c73742984f100aa1fc64c2f8bc77eb15a82feb61edcee6ec7203

    SHA512

    bd7c0c7b0689fbd28752853f7ab1122b2a2dcebcb9fa2372621516fc07a19b65b577e224cd0ee608c7007bfc66fd5d6b53cd9a7e9041f061c857212319d4ab90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    88685f51f30bf7721dd014439ab6352c

    SHA1

    c7ea99bccdd625d7a14d81de3085b8457d6e7695

    SHA256

    39d72b672064ec25f4dc18012c273f9cdd3c21b368f1e63605a1303abbd00825

    SHA512

    12fe1d1a27d8840a019091aaed18fd3388cd63f4da51044ec0fe61fa49a5f4dd189a7b2b0cdf65bd2f26f824a0205db553bd466902a751c50a5ad65af7b258a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a32581f81e817fd07ffb2371563cc1af

    SHA1

    f9101ebe41d523b695755fe5e29f726a96d934b3

    SHA256

    fb2094b985f68716aeeb522cff0d60667780ddcb09857fee5c7f77c43352a1d0

    SHA512

    12594a02256133ad06e15b655c3610e65d59ed8e023b0f3d3f3ca34053f1fb51de86b7efb0c0677ef89cc44dab1350012dc00f5eae9394a3fb3339c29ac5b677

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    0381dd9f65c2a450c0f6b3613c3f481f

    SHA1

    6b281e62e3ac939bb3084122918a518832317a76

    SHA256

    271cc1d531ebb051dd802a10fda45993d3c7e872d21b86c070d7cbc2818b956e

    SHA512

    879b89d7320e56a86fb69ddedfa4c39705528f127bc3c3a655a6af7a9ffc77182a19b928735066901af29774f46198627bf95c57b911ebf038ebdf738c3db219

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    cf36b6fc3d20cfab6b67eb707a878ddd

    SHA1

    694c074d8dd2d9ea1c040c8169e6c802cb9d33d0

    SHA256

    b6673a574f33349701b46ea60fff1e8acadfdb2e94fcc61997d1d30abbc64d1d

    SHA512

    e90aa8c3b71e9625c0b7575d25698742a59f73b5d7d1d3166d7636e5798749ca7be214c0cb38070a013651594aa0ba24a39349e41746f283189f7e1f84be2200

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    49b9c51abc84ee371c6fcfbf4427283b

    SHA1

    e889027439292ed88f3e2f6941face4c911050e6

    SHA256

    26b0509e9ba8e56435ac3af24f55d5e746ea88ef6e5cfe9f491e1ac3d25c1a01

    SHA512

    d303f6f7b7911ab4e714476989f0b7180183f13f70d8f7926dda9cdf44745927220f8cd18fd199766cccaf3f631199bdba1a08a140d976f31c1cbef915aa6004

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    14f43185ec0bb80cf7d134eef195755a

    SHA1

    d95cfe5517ed544fd52e9c88d4bb3f5c2937872a

    SHA256

    5678c734d859a9385f15a5538a52720377da085e5ef36b4d27fd4239e08c4627

    SHA512

    7623f1f36d901870326f43448153fe84c95eb86076e7ee8bc179224dd788939a209723c55dd1dbdfd335eda9c07a242ab4467166f1b3e6a31f53df96ec76e276

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3eaab46dcdbab995cc73eb12fb8b2c2e

    SHA1

    42ed29795dd6692b81df6e002fd9759a411710ee

    SHA256

    eaad89d1a747f319b3eafd835ac73efb368d36ef76c645f5c30968faea39591a

    SHA512

    001927dd29bd1f0fbae04afde2f877974c6703a27ad8bc401ab73cd5ba35b30ff13f06f224aea520b471f35bdd2bc944f8bac214f5ecdeeba13b3f2eb6353a55

  • C:\Users\Admin\AppData\Local\Temp\CabA8EE.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarA9E0.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a