Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 03:21

General

  • Target

    280fa9600e33a7d4f26e5cd697494780_JaffaCakes118.html

  • Size

    27KB

  • MD5

    280fa9600e33a7d4f26e5cd697494780

  • SHA1

    d8c6ac9bc0393f7b49ee8be2a69dc286dba9151a

  • SHA256

    483197add944b25cd61a8c44b9a127e0523d9e3333032b5853acc98072bd829b

  • SHA512

    126838d2cc5d2781eef55480532d1fe1e66a1e9287bc114af3684c5597dcbea3f94ec70d9aee42290d6815fd4df381420818f8bd058f8ab7f6f2fd9a01922ce2

  • SSDEEP

    192:uwn0b5nbCrnQjxn5Q/inQieRNnLnQOkEntOUnQTbnZnQ9edhm6uf3pm4Ql7MBxqR:JgQ/TELq3YSzkJr

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\280fa9600e33a7d4f26e5cd697494780_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3056
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3056 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2460

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ddc0ddb3214e92a1e76008b9e4297d5

    SHA1

    0a49674583b95bab19ad0f9ab4ff87f89351fcae

    SHA256

    d84b73102c9c385e6f2895c574e1b62b2255cd720a6f3c03194466571b3c8685

    SHA512

    d01859459e9ca196c3ffe3fb478449b08e41b479f22ef665abcdf4b4a61f761b3c4ceca988dd0c04b31661ecb35f7f08c97427569956c88885dfffa89bbb1458

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2f3710e180235c7f391bfd22e82d00a0

    SHA1

    ee875cbbbf130afc4b29dd999fd26ebf19648c9d

    SHA256

    9a295892d3c2dc9e9ff36435731afae3760849d41bebf8304b4ddfd06c54c70d

    SHA512

    03b32009cd1fccc2f4be6995d49a0aaed482eb41e00676bd79aec6f4d4ced27b323e07facbbac15fc64e09f16ad276281f9736b105f719b3ee4f34934134ef2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fce3fa3a1be2a788ecc921b0ad376b6

    SHA1

    0e6403dce6013482a08a3ad3950e32be152cd511

    SHA256

    f461ad0d8745b6129f13245bee2d94414c8726ec1545f033f630e39dc847977a

    SHA512

    62df1de1cba61b10dc593c3d52990631b9665313e1e4079cc189ab6b9e73336005518b479a67d1f3938483f6b384dc673a08e4c2363db8c026494030d651cc16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3bd43264f56666228dc15b5bb8bed333

    SHA1

    583a231f8c3d75c509784e6e7ee738b0d7775d1e

    SHA256

    b66a065a342a935e9be2e23dab5f9ac172f9ef22bcd045bc32a52881213b375f

    SHA512

    9af02df582bcf81ff1565966a41c2811f3ebd15aa22c40dd8438c8498c0c777eeab04d13a5f5578e49db8ac6b87b7aa941547b96d5765685184cbfda4227d30e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c2372a7a76fb461945b2b941e693cad5

    SHA1

    6e66078c501a218eaec1e3cafb4089d867257082

    SHA256

    a6b73f8f7cad11fb2882a73bf86fd5024441d56317b2de9e47ebed7d8016d415

    SHA512

    9a085fcbce442ba4b770a162a5da9d12b7a1ee4423724e11395f7c528c9dfd3070087f98526cc33a22a007f0b6cf7cc3e3fcad80bd5bf766fe09bf0c9cb147cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3973a341290a2cf184bfb7789e5a1de2

    SHA1

    b34c4f18c913fd4a98e58d1a08da93f48481bc5e

    SHA256

    45d84416f547b94092f6beb98c6b065874c8f9f01d409ef8623c33709ae21d93

    SHA512

    a81fbe29467386ac6480c61e3f071309456c5e3a3d675a153b8942d3c90b2cdaf7376f53910c2541ddf51eb84443840b3cbbefd49432dbaf6bc6abdd0b7e1ecd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8dcbeeafe1d05894111a91ea601201c2

    SHA1

    e80c34dbc59f0ebb7635870ed8b60e091036846e

    SHA256

    ec00d4893c5c98bde15cc97bf49411b9474ed0e46399384eea11b2f2c001c349

    SHA512

    0d30fb45ca939f07dfa329b1b5d50aef6c7a6e2e999a32f4c7ba91922828f2e461caa3952d2d08c0d84ab865bb5051e891572c69d93b62f01b47ee040bdb4254

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a619cfe802c7d0c50a10ac607317ed8

    SHA1

    1c329c099c7a6cf91ae2d7b52d3627e94dfab468

    SHA256

    d6bdb6d57b54449315ab8c701ea8659be403271632a7ce7c03ca590e3fc1ed9c

    SHA512

    eb98e78897c243fb83b14f3e889452fb95858d2eb1ab8bde16b69886dc536ce80532ddd9974052e9969069cdc2bd40971c1863403328dd89db6d05afa10679e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c5f5d0ab8489011f2e7bdf56a409278

    SHA1

    2ff19664908d92b582553ca49b672a29ebc0cfbb

    SHA256

    c4a5c8af8d11a032b017b234e077d34e882f0d22f32f6157db95d0f4821823c4

    SHA512

    af4c495f958b83c222e1829e655163d5a2da1f05fb10b4ba70ead5e9f7ec1592101e339c972ee14dc27024beb2747a27fcb3c6818b02d1657dcb9a0a754a0061

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    85881aa11b747e4e263d6aae75db331e

    SHA1

    caadd6954e98b770f6c283f6c8964000b1e2cbd9

    SHA256

    4acc458dbf108f61d7347f6098c67fd66184f25e7e7a55652f4c0212aa4b84be

    SHA512

    3728c6acb09ccf57cbbb07c80200e9fb1041d5a89734417898b247029ee6722739713684a674877738900e8e9b917a981264a2fd385718f5f077ccab9d0858c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cbb9e528394629aab2c01c6fa9c2ff12

    SHA1

    569b8078cbdcfa2297bad9979b6146bf68bae5b8

    SHA256

    2930f97c492b94dabf05d010705649574a04965534a0f830df8950fb6450198a

    SHA512

    0eeae8418def3b304d13f7c49a4e4db49a21eb8ff607ae3f72028dc54d4391ddece88da7b71e5d9e7d63927ee7a98e586d4213f094b6ebd2dc9a1fe65a42b6b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1237b9bbf288046aea5a41b137933a3

    SHA1

    2c4a6f47f40f08035c3ad85229d46669620fb373

    SHA256

    ac435bc0509dddfcf4a356998c39253b8e296be2ac5d1e1480218a9fc3053636

    SHA512

    b0e3d4f9486047e81fbdd7259973996ddaf864736d16b2e8e3e3f69789e7cf1068fade1c3107eb4c743094e76b7915a5a1757c03a3a47be342d2cd0376137706

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45c1f0d13961c2ab5f877d63fca385bd

    SHA1

    a29be070383907d27fa5a4ae3c14503a4e01bea2

    SHA256

    b11b8c5f6d6e64df78e0ba1da7ad36651083f753fb246bebe7c186ebe7d70756

    SHA512

    2f66b49b3d935c0f94aa7378590e91664f0a385872c6a1fbdb1bbca245e845c7bb9f748a60f1e839f8ebc756916066ffb270cb5178fee6fd4ac9b44fd3ceba2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9f8ccb7481e638b4d58da922898c7c6

    SHA1

    f46bca47190883858ecc446df7fbdcefaadb1000

    SHA256

    7298a1db29a906f5f373ed5a8b1bb09e6be7be8535651eee3d117a5838401933

    SHA512

    5bdcf7433d4ca6dc60273cda5cfeb1da9e8bbc75f4e1554c42dd0710e4637d61119618298d9a9c4aabf31eba7cf744ca64e8a60629a07cdded9a01e190726143

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb8e64e3d06ab29feab28a6260069ad9

    SHA1

    47305bc3b0452088faf6e729460233dd36f3563d

    SHA256

    bf3fbbbf90ca7ba9ce68cbcb27113f8aca717f3b047e674a6c46b0b51a7d708a

    SHA512

    c374e1cf9506d4e652f3dffd5d6bc016852c3ef359b2a1592d260f453792cc1ea0b6bea1c821d084d7e7b851eaad7b5f80e84288e117213a37aae71a63b0308c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd85ed89d87739f9b740f1f673e0f43f

    SHA1

    6adc5ea0ff01e2ceefb820b8af8b5365508387e5

    SHA256

    1ca2f4de9a8012e178b419045504f4e1bee61902ed09e574c58e3169905f0879

    SHA512

    0cefc86ad14b1f7df7100007ddae12cd45035f8c042a929f3e554733f627175121633e66512cdb4d9b1cc092c697a4430b070bec7b48ae912564bf2e5479d631

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    194621965e631a44e392754aa242f780

    SHA1

    22e5fd8188004e12295a45603d2f786fe8d5bfb1

    SHA256

    aabc582f609b74132bca18760e0d51790f387074d26f3504d920bf8a850589bd

    SHA512

    c098e39aff64b5cbc09dad7a192d6638be98ac6debd32bca3b120285be8837dca6df0b1ba33831807551296031bc883a7d03af27fa5e39ab8f8bb955412df0b7

  • C:\Users\Admin\AppData\Local\Temp\Cab3C39.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3C8A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a