Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/05/2024, 21:54

General

  • Target

    36bc322df833d6274cd65ae62a190b8c_JaffaCakes118.html

  • Size

    69KB

  • MD5

    36bc322df833d6274cd65ae62a190b8c

  • SHA1

    6120724387ed33d5e0a28e88639179fc2d78ab3a

  • SHA256

    70e2c0414bffd2e7103c63eb50a797e61d27e90ef3bbf37dbe52f3a49eb4c510

  • SHA512

    9b058bf8d5172cc23a90818d7a8af5f52e3e21e0106cb9716a6f5fb30df3a9c237fed20b9081d4786240ab9ce196b6eb32ee5b0c1348747ed433b81031e242fc

  • SSDEEP

    768:JiNgcMWR3sI2PDDnd0g6s+/VoTyZ1wCZkoTyMdtbBnfBgN8/lboiGhcRoQFVG8sB:JTFTSNen0tbrga90hcJNnspv

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\36bc322df833d6274cd65ae62a190b8c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2896
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2896 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3032

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28b7ab1c7bfc6252e42f77407104f2d7

    SHA1

    2cad487e8efa67ab6bcc0149b4dfbee85dac9196

    SHA256

    b6360a2fb504aeaba0f8f49ff0d976c5dcb6cdae320c979973306c21809b62fb

    SHA512

    04feab3a443a91e7ac8774adc1ffc2d095510b0c89158098033634d82fa46d962a01f9922c417697c4c6572ee10fff572462f2716861f877f3c248798c8add04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff8df4b8d5395a80023eb1426cbe48fa

    SHA1

    295cdb9a7940705cb9aaaa59b6c82ed06f5722f0

    SHA256

    2cee34514f8d43e1335a8aa7b09a42963eabed25bdfc69203aede9b8aa1dcf5e

    SHA512

    d2d9b855c2a1b81e3fa7b9219f0da162208fd9b364da65009cc8e35c237a8dcbc0bf933af4c919516c32e1681d46bba8482c06674be61c2f2cfa96051d5cb584

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5bfbd7087521ff93c1acb0ef9bdf5c72

    SHA1

    fd8ea5ef374e802376ef1a6a204334e09cb7e63e

    SHA256

    29ad0524074f18b8bf44ddba9cbda90549101765728c8408a0e319508968cb5a

    SHA512

    7f40a286ef5c1648b4086cf82588b3f66aae515719ae2c0ad69d4d89df633cb519bd97eb3b4b45289da5be56cdb88266df0191364cfeae855a66016b64ec52ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2da582f98c7785947bed6268c515cecd

    SHA1

    04f98c9bfecf09abeee32832a8a3d1fcefb68c70

    SHA256

    e10a05f475ca40e893a1724adccc0e34dca97ace58bcfde8b5a939f79faed583

    SHA512

    b1246d6d61fd6a80215813fbca644fd191f48362f43c4524c2e7119e879b8d5b81dcaee51c333761f4e3751f6176d4717d316d30bb12cdb51577368f80822502

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    438a3a2b013de5a2470580fc3f0e46fa

    SHA1

    716b0f2cac7075de078ef7926b7887bf3300caff

    SHA256

    89e21f740206860023fbb520369dcc25bd985f3fab8445c3747e20eb3abead0f

    SHA512

    83b4bc0137bf0dde050aa47aaa5e8f8e83c244152a7d1f711935177d5190198a18c4c730597d79eb64a4c3c0cea22f5028b456bc2dc4fbe6932d0a1d71df9573

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3859234822fb1b4ff14e17fffa5b2a7a

    SHA1

    4b790de0cc62c312fb1c283d84b307043a25919c

    SHA256

    36c4c40cfbddbd8d538de14f2cd1ac0c06e1fccef4bc16471784d06b536176a6

    SHA512

    8a25e47f532396f89c7e55c452c46155c7f441bf6fce1a70e9d212af4d1fda571167f56aac05f8a64c9afe40461d87c566c0d0a47c1bb19e8c5ae733296a367c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b17c81bfed6ab6f2954e1e3eb7797a85

    SHA1

    b29bc1d004c92a9f15418054e35895957a3d8b3d

    SHA256

    ea21a632d8aed3ebf93f08a3d47807e79889d5a7b0599dcc24f8db78df7c3c47

    SHA512

    6a60407d427f59f3cef6400dd1df89c9114fa6fa54a7c3564bfeb59a295107351d2834650cfd1d8a169dc876d4b5f74f9785dbd4f1bc6e061e3dcee62f88f525

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    873b1e2c4b1475906115cc5a9a552e70

    SHA1

    2234608ca43b3b0529ab1d8fa5886c98385d1809

    SHA256

    8b800a907eac5b64f9c073067f8ca6d73fb5e23e25bc51b150084bdd28d21023

    SHA512

    c6920adffc99c3e46db3f32efe5eb659c51d5ac6b3eab0384d8d2aa467895533ce629fcf1eada16b1522caba64557f262730b1d7757f87e8aacfd0371ba61806

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    918f8e7331b87db7f4813c4b6f80b6ed

    SHA1

    0bb8976c6fcd3938f49a93abf4f711eda9b60cf7

    SHA256

    a9cf7aebb21544e1fef7e128bbf7ae8b2bb4c807a23a32511918dc4a120ab5bc

    SHA512

    6e939fdd927e3eef5175ea18e08f98cbb67423d21a53f6289e5c8434f6e8cf43eb6c303daca467c7bdc69cb6821506b69469f7d096f1b3bb9ab2147e38704c61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d2ca063890906f4683e5e895fd1291a

    SHA1

    0406e09ea65936a490670493691a02a86e623a87

    SHA256

    f479c94b234f631f094dd33e08417d532daf10c4a3542e90873e10157c43a66a

    SHA512

    82652156f2c88c5a679b4e7d14055057d277508258136a37e1893e879c1f87a9a62e7b7c193667f6a04ebb6b7ef1817da04bbd934e2500a94684945a6ea01a7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75a1abababcc92db82132ffd92106c66

    SHA1

    d24f8e8654218b219fa6e043076bf306571c2c50

    SHA256

    ffa792a67d0d02bbcf0199fab73479b32e0cafb8d5a742a28a46f7f414d05bd5

    SHA512

    99db044ebb0e1c35698db66e47f8b0622ca62c94ab2e56f8b4fabb2e601f96633f749a9f687e2f48d0a5cd850fb2b566110e6541e396f481260fd0695e813620

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    317822a3d7187491c79643683d5c0696

    SHA1

    87170ad34a62ad3a120cd1d1f4751724ca98671a

    SHA256

    187665b430549013709b2ef1624d5ffbad0041cfc582a4a3376e57a6cb3613fa

    SHA512

    fdf54dadf32dabe0a663b848dd1a87388169ab08d82320df5d0f5f1e16c45e188ef91ea0e93ae2506267a90f2b977d657ef8771d53e847d9876bab0eb21fb2ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56a9fa2843c3dd1c1983bf793a388e2c

    SHA1

    3cc50b82d9a6804ee1b2088916b09b2e36da1d2a

    SHA256

    5c67015a908a19e5a1df298864265dd3cef7c7abc65fa72b4e87a9c09d9c1ed5

    SHA512

    432efe7484b56fe140295bd01ee24ca016ab5a3cbc55a0428fe37ccb42b5efd1ca90760f0d1c5a4948d1857e29ae215f9d1b4dd26f7f8166868cc644cacc5de3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e73e229503d66722c845c93efd92336

    SHA1

    1ef3140564bc2db71c9186b8ae7b5a1ec22a5b7b

    SHA256

    a73f80e1bf3569109a90ca02341e8dbb5a16cfd084336a604b4ff6cc58553fb8

    SHA512

    2a6b5623b3cea0ae4231d18cba07a0fd61a1bd8541b94f8bff0030fd393c84677a119510e28c76960aff9fc7ffd625c2a7f2d10d4c3e40a0be83964872f56bc9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a12518dac309e1e7ff150103c8490e4b

    SHA1

    419f1cad44b3c47b7ca887a80035fea6314e4fa0

    SHA256

    67766ad42126a177866e8ebd5597f8b29c38f4dc89bc1c967bc74f0cb98c68e9

    SHA512

    5bc4c5d554be2bb908b53de30d18ae73adf5a623ccc54c5213b310d9427d24b201e29da2264a54aa6f8bb0b501c63bc177ed3c05332bd2e2bd899b555b52f40e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6462e155217e992f61460d9b5f768304

    SHA1

    2c19fb207bb01452203ec295065cac3c94870779

    SHA256

    34d97ee604672e446dc499961223db7249d86fc4d8cf3144e805158d48a7bb58

    SHA512

    7432b55d21ff02ed77cbeb31cf7732d4e78ff4e87b7261c46cb45c126886e9ff467a221b72c19bad9d52c246a0ff65ab302e79212ba8475945636168883c49cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd8359fbcfdbeef239cff7345819e98c

    SHA1

    874c9ed20b21ae0c466e9f35ffed400dad4ea9a3

    SHA256

    71ea5d5fe00512ea93a3c49976e1994bca765a17910efadfd0c3030afd3fd600

    SHA512

    b87e12015ec827518162b25c865c464e4597606b1ce2765bb28984e1f295fee01ea5ddc8fd910061ac6e2751f58019bfbb715d7f93d8c5b79c106b66141827ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9c65da5865e05e85a8318adce94c58d

    SHA1

    3a7b844cab03ae0d3a1da2f167d7b44c437e2975

    SHA256

    52eecd5e04cc05dad03594c98b4ec4c7bbacb28c230b4960b554f8b1c954c755

    SHA512

    5ddc9059caf6dcf5fa2920cb649b7918e1c1934aecd8f1d83a8e86b5d167a41864f3c5ee2b8fa03c9db66e40fdc532013bd5672450df59b10c98faf52e255b27

  • C:\Users\Admin\AppData\Local\Temp\CabAEC9.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarAFCA.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a