Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 16:23

General

  • Target

    2fff8fb39bd728368e4408ecdd6d214b_JaffaCakes118.html

  • Size

    15KB

  • MD5

    2fff8fb39bd728368e4408ecdd6d214b

  • SHA1

    d22b6733e2d3958be2fa58209cbd052535f440ea

  • SHA256

    7bdc96679648ebc2ef125d1e75a604a468cc141f6642adaed456362ab2ec84c6

  • SHA512

    50a5e3491e717971c943d2287f9fda8596caba8e51ba6336dddbdcbc7fc3b42cc6d1080d4796688e765885f878bbb1fae36c0151742b4ebacae410fc34a82e6d

  • SSDEEP

    192:K8IVbJEJiWnRyzb6b0XUOU6QKUZWa/mIvyxP8rEtrzY1wDl3AHvlQLz+O8Y:9SJ0yX6b0XUSQpJmJzvDGPliZ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2fff8fb39bd728368e4408ecdd6d214b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3028
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3028 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2556

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    313b5e6d020c4b22199fe1ef52be2e13

    SHA1

    1a4fed8e1ae38d096c7f7e2d61e195fb0d0c1500

    SHA256

    bf8a7c91117940e3312f7ff14fcd2a6e309ee802c2765f15b84a89995108d014

    SHA512

    f75cfefca1faed625a99bf63d1e5762ff8e8deec2c44fb12dfcec06ff1df7eac8fc8e7acf95a1331fa2eaf2a4f4b4d9fb0f3c6a29d8109181d342c723b195497

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1c004335f227ceeeee3145e0a3e2b71

    SHA1

    ea603e5c99b47fd381914cc4888f15326bcca862

    SHA256

    f76b5c79ae58ee138d2a880b6723504b5f3d68c5a209d757fd18ce881745051c

    SHA512

    97f31c369ede6e78ea9256eb4c3d7ca20bed2bf1c5c7ab799e3317832ad7da0cde30d60c0e6a1bdd5d7e500efe507e9651700c0984f8210cae73bcfe9d9e634d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49ab46bea4b9051a06c22249be4999a2

    SHA1

    968a913335d847e14edebd28ef063a3be2ca48a6

    SHA256

    f73d57e875cbb9cf8c9927a323c5edf0e017fdf00c9ddfcd3fb87828473de0ce

    SHA512

    1babd648e03340b9e35a1d112c960c758fa236868a437f99d56a4c85ed71d198daf9c1f6666ae7359cfe34323ab1ffe5385015424a1a05d48462fd25f32591c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c52668218e94aa8f657ba316fa5ed0cf

    SHA1

    58f343e2478becf55cd95ed503394d5e172e9433

    SHA256

    2cefd7903e1d3e8824864c5538b3571dca69a4ac4be784f56b6bb37738633e90

    SHA512

    85625ed285ced8cda950cda1b7d10116e6150baa6b614f237cf1623d88ff0de09a497b3804c1e391a64743533f5d9fdc76c4b399a5ab111af2b16b190a147f4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a0b4e4f4eb4ebcf1cb395e1d09ee9532

    SHA1

    c91bd8809d9ae361b1fae43a48c0ec44ad5a49bd

    SHA256

    1ed6e1d2c855d757a197abec581577278d2588d437b5dfd3783566f717ff5827

    SHA512

    9c0d5e24f29ccfb1f8f15f998422279115bdb14655420189d46f189702aaf232d48df9b46347d32716cef83105716e9326eac7fa7492fd947c800eb8270ee6af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c182889ad388848c02ac921264556cc

    SHA1

    fb50d4b57e6aaa851a00295510f4a9c002d0ebba

    SHA256

    082fccc71c7a240b4625a389534704c0ee359d2c354f874b82612f39a2023661

    SHA512

    677d30991279fc936371dd8abf24f2053352a5818dd7661037b1b58d770294e5cca434c8ce67d73fe853bcf97cff52a8ddf987a7fd0423fb041c2efb1b666e67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b1a6f2e428acaad16f2df83e7ed6facc

    SHA1

    08f135eabf6cec502c2c05ad30db80814b9f57b3

    SHA256

    607e62e637d33d6e426d8fa3d942ad343c7668769057f605cd386e735b7b2db3

    SHA512

    4b7e67d0030efb3af727f948a6113f1bfcbaceb7744549ec7502e201902cfa42cdea9b5cf02340c476cf9a882505bc0b9a57f524d052566d63d38d2f7e129b59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91b88087fb10b307438cc5e80259f641

    SHA1

    05918fb3116f9a7e5a5bec0980ca1b791b81237f

    SHA256

    45f2ee4a7d612477b7f812a2dd00a737361ef3177b1a25a589d8e3d01ff73335

    SHA512

    a4d7e68d2dea557c72c0c7e84c96966639912fca14704b2f23390a203af7f10febc44b5ded620d6651b962580e1803b4354c518963e7d127b60d99accc6b6b4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88d2b7a1a83663072498d1c0268c55cb

    SHA1

    fca07138fac425ae4bdbcce817ca08ce0072c7d9

    SHA256

    02ba9a5a538357f8ebcb405362990575fc62ca463df00cbad3de83530e6caef6

    SHA512

    fa89da827e7b7b137fc84be1d130b2e8002c58bc770eb687b078e89cd13083c1b19638a81204edefbcccdd5502dd7d4918b3282588e1a22f7fa4539ff37f589f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9cc908b4bc3d60462c1499fc03f2d97a

    SHA1

    78de5da0db71d9dbac9787db217bf6bcfcb5d8d9

    SHA256

    950a433087165137b28e762c6cec3bc46aaf965609c6958daf3e8b4d1849d572

    SHA512

    5e84d879482ecd364ab1490ac0b2163e574453b7ad7b98424f140cb900b8ec2458a4d8dc8dc81bad5b17832f7af1e80a6313454ede06e865d1670961fa8832ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9dce8ad95e75f1d267b5b8c65d3c7003

    SHA1

    f265c44aa6e0e7b53bee7bf92ec6ed3e4be14844

    SHA256

    8aee4069941e5127bfa4f23a3c6055dc023a506144cdd33fe8c5f42fef1e708b

    SHA512

    f237668f664f54b88cc618bab88a339b7ae75a2cf513d55aac57476b857f7b57e3501ccaaf47040693e675e1729575207e193be736879ea08c14a0c6991aa4cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    702324e69cee3a28e63e9b2432f98b52

    SHA1

    9b4a1954c49154ae4bce5da70a398f0fdb7092ec

    SHA256

    3728a46d4b342f6154625bf6da7bb307ae193dbdbaa43e845eb29a8b5e839914

    SHA512

    66ad28a8ece9a06aa54fe8510b2b0bee50756e59850ca893a9791421886a72533fac432f0be7277cd5840b1dd3c1b5c4479f6feec59f5ff25c73e306ff2c1587

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ca91e72d6a1f046f7244d9c43fdab0f

    SHA1

    c2f36eb0e1cc95a780f1c224f827ec1e4f8688bd

    SHA256

    11177f7788363f9d4bbe92507a26c8e7503360055a596240bc60df17e639f264

    SHA512

    e2e734272018019b66a1f22c82e400c01b4bd9e4eb602ee05638823b7da37b15c79513da2b5248e0ccda409582324ac2b47752488288d1e70e6872f16cd80ff8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd25a93b903ac551a1b60ab7f6d5da14

    SHA1

    79e7e0bff8d114dd1177440043a84aec5654396a

    SHA256

    bea186406d313705b90d4470bb892280da001d6f68bf0b685d025f8c44e59d92

    SHA512

    e4305d541a7c82f31faee1fa541bf909e5abeef11ea9de7210d2db188a476192d8e41b977edd81e91f245b25866c2614a0e3d3191ecdaba97c15e61f382774bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cecea6c51352f06e17a56e2e200b56b8

    SHA1

    7c85365c36cfcec2890606d1adce8313acafacec

    SHA256

    336e21e487b47eb2bc7d97af568ba6141a54275f343771756a0e449f3c77a4f7

    SHA512

    680e8f26a718364789465a11d282ac648c4f8e2c4df557a43e0021d063cb50f00262aceee5ba508fbdac7148d6fac19e146a5f688a785a730555e577a8ffe4be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    374b4cc372743741aecc7a9b9fb6cde5

    SHA1

    285fb9dbf785ec0c8b8baa490190c1494c1d0086

    SHA256

    00c7ce1f04c13e95d4fd3cf75824dc5ddd5fc106cccfcc147ced1bcdce7e4e7a

    SHA512

    d80ccd63d81d5dc8177bbcdc1cfb424949acb13c485735295315cd0077cd158993068bd4e373dae6f3a050dfa64d758c5ac28af70125faae607b6b13ef42dcd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34fb383cce393c5ab8813b585ca874cf

    SHA1

    44bbfac372a25c56975999edeffda97bd09ee6b4

    SHA256

    a1787d21a8c5852f9b7125b038d3b0a14d87c8fd088dcef641d73920d2945ed5

    SHA512

    d8031717b9624a381c9cdeea2db32c6201acaef4a9b70e5756abf50fa123dc3b2865f21d8655a9430e38a8d17dcd5b3a725d853e521917e02e96953cf64d6074

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12eee670181f438c047432e603b46ae6

    SHA1

    b4cd9b57fa4b3a53b36611de2f9658b600665413

    SHA256

    d4f7d5f05e4da12aa9f74bec0652a57a58497f09e49cd47c455cf27c627efe17

    SHA512

    4fdfce4086cfcba7300cd2156135d886a44df21995c4048907c916ad3df4438005561cdab989fe5ed438c1ec93a7f93b8c8436656d78ce963a201c34cc68637c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9de5575bb10b0e051b664c5822b21653

    SHA1

    2656e41b05c7be3241fee1bc2bfd0833a224429f

    SHA256

    1cfd47082557cfe55aa7be8b915e9c82e704f55bc8eb1e49eaa58e037a444856

    SHA512

    aeda88b50a628440618bf3836e3dbc67d1ea5c1f4dd3b348431188b7fa92bdbf60fdb42f8e3fd511e77fa6089f53b95eb4485bdbea9043ed1ce695d39099acb9

  • C:\Users\Admin\AppData\Local\Temp\Cab3C47.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3C99.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a