Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 12:23

General

  • Target

    2f13f76a70c982177b7f0ebf3ce7b88a_JaffaCakes118.html

  • Size

    40KB

  • MD5

    2f13f76a70c982177b7f0ebf3ce7b88a

  • SHA1

    b47af21d92d32bac9bad88969252f93dfdc9d23b

  • SHA256

    a1db6f71a3c83c6c7052e45044beea5f33f3aee06ce83339b46a41e880894d6f

  • SHA512

    d377d035a69c100eb23e83034539c6ec6a2748e157abf8ed1edfba497bc685e19dd8f9dda9f759764f3bb1adea265f596db931008d5b65963a8e37b5a6e12842

  • SSDEEP

    384:/Lc4SXRbUJMHnZjsvoXtw+hShz/+4zKPXaUkdmrmxKVwC+0psQNFdHi:/Lc4SXR9swXnCpuPXa6T+03NFdHi

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2f13f76a70c982177b7f0ebf3ce7b88a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2328
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2328 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2692

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f92b83a3ed75cd3a658cdafb169b45f

    SHA1

    e56e2e6c33d57142dba260e223b3f3f0c8611e63

    SHA256

    c27fcdd70911faa9e71aa984d5bde5145001dd9c1f056631faba683c6e29018f

    SHA512

    bed22a62a83bc2cecef2aa4ec50428e2a39243cedb9862efa9e4871a289ddc56d86eea734809b99a1fd41cc8934ccdcbd15879a032c2f5e0c74f1e5840db8480

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fe1f06c2db342319e16ffb46adf00b9

    SHA1

    2af571cbae28e224ff300ef358f47c8bec4ed3e8

    SHA256

    d7ff1c82c2a44cf424eed2a46076a267a2cb51e6f4a95741827615159c3266f7

    SHA512

    0f0aedb69c88fec504ca546052df0678c01602e4cc54ba96de317aa1926dac75ba749e0781c241d6ab589a96a1bc54dcff4bc303a0a5caba440bdc0401d59e09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4aaff1646596d99212eefa2450d1a14a

    SHA1

    1fa1ff3a21351ceacfed507ae5a83bf1184ce4cc

    SHA256

    3226e54ac71809d54f7a1cf0405640480d3b5d102ad63bcf9d02a5ef0133fc85

    SHA512

    cb42f6bd4525e47db25cce822304a1653f612058c6920ad94ef2fd527d332929f21f16398ad5ca60abb117ccfed250acaada0ba51a0492924c2c7008340b7787

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9059532c3b5f6c42df20e261f7b4b5f7

    SHA1

    31693a53603d2e9278e5e5502e8c5dc7e5077260

    SHA256

    dff8ce509347c01d36059a1834986976b4197fb7c1f37b2ebfd78dd8e061c267

    SHA512

    59aa4416c497147e3c88a16f1119e9d6fd7b839fb55747f981410ebb41946194085f603c82c00121fcb811faffcf7b4e2a724dc91c15a9675f626885a902893e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08eb0e625adf88f826d6af5f44bd788f

    SHA1

    9be111737694356c46150d2e3e377374de2f91fe

    SHA256

    2533f4b75b81e5841d34cdd9778f2809a2af8d991c7cbcca00d4f3f315258eb0

    SHA512

    1279c94b5b57b04e67ae1c060fde441f5f7266948969f9c228c6b21e9c05e0472d171594ce2a9651e6e56570a86199eb76704c370e42a2016cbcfac8aa36ba38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d3be344152e00dfe00cab91a25a9db3

    SHA1

    f47a87006a0d70c2dab234379c687718b610333a

    SHA256

    64ae796d005b7cca9280fbd6d5adade831bdf92a81a8bd8e2a5c8f43ad6b3195

    SHA512

    3ee7bcdb3f2030eafa3702c2ac21d974753a82cae2baf519497cfc9c4403452a87056b08d2ce0087adc695d09cfbc7f83f93c9dbf2716a254fc788eba1762bba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b74a53f29ee2cdfa85b8770a973679f

    SHA1

    e96c2c8962027cc1ec58a89227fa64be1623eafc

    SHA256

    66fc9a49e85f68c14c2f2afec14d45c580b5063605a021f5a9f7c2f9d9ee71a3

    SHA512

    469c91b25c956fcae3a92050f9897af1e78d55cec0dfc6889ea6453b5790e48be045f69fb89c5848b315681285bb3ac3d914a263705bafceb0f9b39ab1a3f0d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3774d64fc0acbc05ed830242541c23e5

    SHA1

    a6cdc41f9baacacf611e503e50a9b11d9b542f51

    SHA256

    5e8cc0ef01471d1fb99a35fcbf97f045733eed6deb85df239fdd015bb0013a96

    SHA512

    5224e872ebbe3d176df8f825f7c49fba61dbb25e0c3f7f49e9736da8f51e6a2edf09a4d10f348ae9efadaddeb4ddffcff385681d3ab57db6f6c7369dc9fd5967

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb46d712763afd2d58e39e027b89ca74

    SHA1

    00487fc3ddbcfb2fc167683d52e4893375bade9b

    SHA256

    9dd94d2c5b657cbc4185085cb52a34ab1b1e9819f195d352e392e5900e27df3f

    SHA512

    ca5af38be59fdc02d25c64671097800d143c4b7e66dd15e2ff47ae86e735317a9844362228a416b15bc172f6deb008d8f54626281da4d0c7231d23b65c8adb08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1cff2000d537fb5abe696987c60ab400

    SHA1

    7689ae8eeafb2258a420676960144d3d978353f1

    SHA256

    1b5c1ffdb5c1cc12ce8f4fb5af2f1a3e1c6111bf1bb4384c7a8610db4b804230

    SHA512

    de4820f2e5d3b2643cbb8ec90b23017f0ed0c4115310c9391fb391d81cb321697ec7fc3e500a4adaa034fea8efa591a2b1af114b7ea05eb7d56bd348c4af2c85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83d95ad47fe7b8f2d3124ac7d9e7cf21

    SHA1

    d2f3a5287da4b54738fdc62cdd8cf7e7b71f9498

    SHA256

    793cab2863e902b8efb72c8f70e569257013676e51e2d3b9c619b3653611d7e4

    SHA512

    6e20581b3d14513a235cc5900264b92a5e81241356f59b372634f4eb8d5a3c483ec754965657f6b23b3d6cf7d4e4dc2d415644d51b7258f876d9c63475b16aa9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7919a03508477c2eede74bc9b33d8b9f

    SHA1

    8b504644966c173222f4ff0dfb8e004df8c04033

    SHA256

    7be5470e0d37852c8f1e317684e16ea6c7a0b22932c642fa28dcaf0112f2e04d

    SHA512

    bf01020a7a4c0466c8934b00a08fae7f31900d23de44f539bda865256fd8835a771394ba95b0a9a886c8704c1af8ccf5672f204fd27a32a439f9bb8f700fb2ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2fbf8db1f9ba00f6289fa284a7980a16

    SHA1

    d9cddf4aa5e2c6829f9f4d35f75064150f856fc9

    SHA256

    9e1df044d95edced0416f1696d3ba5d7ffae3928b9cf8848dc2f64a59bef88ac

    SHA512

    e57c702dd067905a71245fb6cbb94ff15241ee7b54647ed215fa5a792c39455ad88c7811fa051f09f4cb69ad60394cababe21dbf8c3aa0202e48d7ea2362d04a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b950e29d17367aac3c8d16423ddf9e0

    SHA1

    8067ace07bd86fb725648bece42c970f9c2339f2

    SHA256

    777776bbb148fe61b737dfd34822dbb70926020bc792e25dde51b8521eac2499

    SHA512

    d20de3d4d4b738a37476554d06c14d9712144bfc4a63c0fb238cb7eb047724d4af0ba4489897adc71c015a7e5b43fbfe3b67598324ea699716cf887dac9ed2e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48a2e7ad841affa3135793139919f5e8

    SHA1

    45a31609881b060dc1abdfacd088a70275a374c4

    SHA256

    ca22128ff2c36d0b8d96bc3dbef9973f3feddca91870fb77ca18ff8d5ceaf460

    SHA512

    4c3194d4052caec877379993dd708c73c6b363e9b303b9c278085202c5dbc474cc5007492221e7245ee8e9045becde77a5c6b83f55b69ec1083f16a53b0a5d4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e6a6d04cecec6f361461ee8bded92b5

    SHA1

    8a88929cbf51cd39df75181c298f4e510c18c85a

    SHA256

    a70fb5164f1d67a31a742b690c131a82e0d0bd2394441a10a9c4dd6d5aeda539

    SHA512

    c006db225c95e270a29e7d7f80545a19af4d08bc72fc8947aadd734d06ad4bb3c6b6b9e1d7bf165fb1799009488406b81def546bab3170a5b71a6e828ffb97d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    834fbd9fba45260bf5cca0261241801d

    SHA1

    9c301008166a98b1b90f943c9f6f109cb8354c89

    SHA256

    0d907d4d3860cd85d89de3518b91b3680f7290299a2b0a3877ffa1cfd4488bce

    SHA512

    66e40a37902005e010c2ee01a156214e2483cbdbdce5fd7d69bebde4100a44266bbdab7ffffd561ff27b5d2d5bdddcb6b97367fad77148b150f0a5a8803719d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c7bcc65fdc380ce87c59188a78aa8bb

    SHA1

    15829ff037a552bda420db0e1005f61327532b6c

    SHA256

    7ca577265023ce0eaf5103f2609ddd58fc711a827e5aec9b98469abbba7a6be7

    SHA512

    99f48c15ea25ea096e41356d2d0e315da86bd8534196ed3431560c2fa4682025791a4235b8006f6485a58f07c9a1d7184cf9f993703b025988ebf789d65d6d1f

  • C:\Users\Admin\AppData\Local\Temp\Cab9A8E.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9B6D.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a