Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 01:33

General

  • Target

    2cb1b659f0f39f02b8e4770c025bf763_JaffaCakes118.html

  • Size

    448KB

  • MD5

    2cb1b659f0f39f02b8e4770c025bf763

  • SHA1

    4869e20ce8f78b7aecc67838c14e187d72cddbb9

  • SHA256

    4ef552f49744bf41da316c19f7a055cff0726624f757b8e5224c94132ce5ac7f

  • SHA512

    88bc408e2c97fd28ede0e8924fe1add7548fddf3eb84fc360a404594fedb12d7e98d9716eba4c03109f6eb5444241299e7b003615a3ba0cb7457cfc71df41502

  • SSDEEP

    6144:SQhsMYod+X3oI+YSsMYod+X3oI+YmsMYod+X3oI+YLsMYod+X3oI+YQ:d5d+X3u5d+X3G5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2cb1b659f0f39f02b8e4770c025bf763_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2772
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2772 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:940

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    763d451b6ec316dc7792318e4ed92e9c

    SHA1

    bc514050a6c8b4b11623c1dc1c6336a6c9fd7834

    SHA256

    0454944a36ee3d3d5c604c7acbf7f3bf0e4353df9917069c2d56135dd428dce9

    SHA512

    5910084f1070f7d1ffd10a7f22445d27ca6961bb2fa538b7047c9b034002167b9a6ed4f5fdc79923aa287358f43dafa8dab3ce6d7c96cef729a69da3c9da501f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d674908d874ed141e46e2456d92d54bb

    SHA1

    97c00333d823307e3803704a42f249949cacc93c

    SHA256

    7e0f183c2e3f2e179532bf8ec5390a76d53f0affe1a498d272b1bfecb4169f32

    SHA512

    b2047151f05b28c80737bc02d35a3be7ec5c8654a52bd3de3655ce4eed6a9cbf3c1d1ce58ca8e471ea96afc8e32007c5cc75d1350d8cf056423825a241dcddaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07c8333bb7267e9da668b0f642c133ab

    SHA1

    dcb484f9f733e0d33f4679659d226d0702699c4f

    SHA256

    ef436eb66bc88d43be507b315c289b02be8086869565df89ee2995d5c1562d14

    SHA512

    e7c61a5ec78a3649844a7b145b7e8fd919fbf36f696117767530e8d5fffd472df50166a8d141bd997e047d821a5462b5f5282ac9aff15e10523a631edbe590e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0277950b144827b98d0b559150cda898

    SHA1

    2ffa9cb5f69be1ccf8ae1fdf6b61b5e8883f4236

    SHA256

    572f6e36bfb881afa7a750c9f012faaa972ee4f134d266ad680ecf1c96cc4208

    SHA512

    b721dac37815ac414b51e398ec122cda1902f74fa500d360b345f531b2670a1dedcbabd5429f41775c4964029ab5f10710ec3c6cd39221f3c81b70be65f8e9cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30c236b61f5010007b0587f79d6b579a

    SHA1

    9bea636aaeb6a10e672101de27601f81dee6e5fc

    SHA256

    3a4fa86836133b8640be400c030c4d8d3cf1fbd3201802fb9ba4b887bf4b05c4

    SHA512

    849f35353b789d4510380f4751c25aa383660096241113607624de2c95beebe9b74e8df176b3a07592e4dd4612a6648fdd8080104e41cf3017e085cbd77cc4ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a63228667fe4bd8310866067047eb7c

    SHA1

    832bce4f48ec5f1bc475d12a079ce6b21bdc0796

    SHA256

    7639cf88f125eddecf95880103f2bf6256b67d5689d1d189f42be6f915d39808

    SHA512

    67776629cf3af522ebcfca914b5280b8f97b4befcf8461e6c44030eae08c69cabc663de43011909ea3ce06f80b812c608cc67e304292e8ae9dbafaf12638f0d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    388941d8d4b3af0b99078ee2dcd69c15

    SHA1

    31c70973d4560e14fa81b5934973b94f58404a94

    SHA256

    cc19bd3c1fb4b8567c0caf96a1956e0b5cfbe25b439151b9d26284217b42609f

    SHA512

    5ff83c95689d1a1990701ba2ea7dec5249f2ee46030586f65c1675b62d0395349e76e7b58737650d3a86b98bf9431939717686f2e8d9aa3739e01a6aa35225ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e840f14c929edeb9af00f7d9749510c1

    SHA1

    a258f702cd11786712b4c6b40f69494b81028378

    SHA256

    f8ef25ec750386a3b670ab225e557e98660a2f166978aae592e064e599aa7b59

    SHA512

    17d93f132f57e619b02a27d3374bd4da55ac71907d2c1a6fb3e78040763c8ef8d0d581c03a64d3d6e1a9ab278a35fd9097a2c60930111f9a6b792e6db56fa229

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    693512b966fc22766a73a4f1b5449056

    SHA1

    7dc550ef2efec9ea2e2b10988bd2d369d7c40f96

    SHA256

    9cb123fb4d104d9d3545f52895ef978a967105057131de909e826b36dcd2189f

    SHA512

    bbbf17bf5263dccf3b9d0c88d20fff92a07c2b9e9758772dc8f50738dcb76e5e254b425b3503576382b6d670fc090c723e031b7d5e8955cfeca857434c03cb40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9554b9cdbbabff221bdc1a0673b34160

    SHA1

    2d65992de61e908b37fa205624f06196e8cdd8c2

    SHA256

    bcc496432659c03a0326babf8cf516dc31d7caffb4d2acb4d0d5b929acdbd378

    SHA512

    a6b0495de9d62784a0cbe5d27c52109d3ac492b62f55eb0cc39395d9e3b88a055bcda17c502bded4d9ed5eb6c04538cd593dbb0291968c00bbb43a9d3b0d7a27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    47ff962190aa49bcab11e2d97203edf5

    SHA1

    15f5aa9b05a59bd7c8950b7aaff20aa6013481d2

    SHA256

    9ce3ae09a3776298384053ff735a7493f7a1c7b2021942e41731b97cce24fe01

    SHA512

    92b21a0cf91f48197478060d7ed4f324409dffd23664b6595e2cb09fe03865a38709f025c9ad01216ccbcf02a1f0db60a8e21f571d6358fea37a63c9d1e3d895

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c84d705266f8f3d4beddbbc3d90584e4

    SHA1

    27019e0038c70b57784d08a1a4fc4d049b1c4115

    SHA256

    2c2f8f23e6563e98c6bb41e8aef0005f0cfe8becd6d5abadc2474e70539e9029

    SHA512

    e5003e08a4dbbf0a4ff31c099745bc39fd0f2954ba227c073cccb53e33e7115317344d0f315155cac6f6b53b91da36ee087443e044b7ad8c7649ebe7477dcf60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d111b920a98c9c70031babec666a441

    SHA1

    0179c5c55b467133b605c7db7816a09656481751

    SHA256

    819221254d930db316df61a5fbfeb7dc3427bb2a609ed3d1d9ee5e571e5c556c

    SHA512

    dee6dccaee1cc275eebe0f9a95bdd90a91fb3f7d263e18ba867604d10f767873a37ce766173b73fb65185038aa3ad945b778c9d635df3afaf9535b955d379eed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5a0fd5a12f932ecbdb6324d676a3a01

    SHA1

    85e4b3221bfcd8d39d7b7fb5542159748bf7305d

    SHA256

    675de5467a021228373856f8373fdff100b7b4d21b316e488c3c855944362807

    SHA512

    373025a5c1457aa575c8f84f83bd22dd62b6d8155339d1d7b50452e78ee3f3b0372be6acdaa7d9e8c79f6433b509e87935ad0a9d77f63a7325cff169a86ae9f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2114900b149dae07a9ad46f22dbb53a

    SHA1

    bb99d18f56292babbb79278ce653b9e25a4c1e65

    SHA256

    e2cfdb231dfb8b59168a6b82759f0cb752660a5f5b5bb16b4e473a35f5a7a2d1

    SHA512

    03ed6e03258d698b3a839ca6b033ae7541ca86cef3627bad68e357a5d6f0e50acab813c2cc201c0651e5c840ad49662ebc8bd0fca342d15d16b1a2b6cff72f76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3da449d10972cdcd6c2d31f55b1cf5ad

    SHA1

    a60465ed370c4660f18671b5e26f682cc5b8da49

    SHA256

    ff1f409ca742f8f287e42d2a01b485e79dce3df1ea27e8801f286354eb8d0a6e

    SHA512

    63e754425049dd95a20084eecdb7935bfaa869bc6220f3402e94d46fe24c1d31121f3449e47cc2423849c5d090bb564e49e9a23504eaf975c780ed14004dca34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    141a1da0120412c5ec3c7300cdcbefdf

    SHA1

    70d9d2e890220e54878c29d827499f0125a26928

    SHA256

    7738f2b012e3a311b615fbc7a71a91f0f5a49abbb084229863999d143045da3a

    SHA512

    1edb00d00fa19fb4a9293277d1c5a3c8e6ef3c2874d4656e03630d9b367b7235472923ac5b993128c121b9dd372cd32224eb90d475c3da0b612a0eada67979cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7b383cf99061ee2f15a4079e788720b

    SHA1

    dde11b245bb4f87aed78c25a9109f445593962da

    SHA256

    bc029077c0017c25b846f75cfa1823daf38393fdbeb2aabb5950435b253969e1

    SHA512

    027191d69bf376db7424399a87609be5fbfaceb9d359ec3fd3d90f43c2ed23fbbc7d5369cd9011983b19e45b091559b500732820746af71effab1d0b4c5642fd

  • C:\Users\Admin\AppData\Local\Temp\CabB8B7.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarB9C8.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a