Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/05/2024, 21:59

General

  • Target

    36c19fa93c61eb78c8aa038e716a92f1_JaffaCakes118.html

  • Size

    41KB

  • MD5

    36c19fa93c61eb78c8aa038e716a92f1

  • SHA1

    9275bead988db8f04ac9e852caac5bb836cc7ec8

  • SHA256

    ee1120384a85bd4f8fef523cbd35550d799bb9da6c2eb67735dbe31d380c52b5

  • SHA512

    491f3a7000cd7c673d3c9ea63d5045b32ae3fcd938fff2dacf7a62e1b19ef88764082a0acd00db052019fca15fc875599bd50aa4f6432936dc548f7a9646b140

  • SSDEEP

    192:uWj/o4QgNztb5nWJ+nQjxn5Q/YnQiebNninQOkEntYqnQTbnVnQZXCkAWEoZQhNL:oQ/wHpQL4lg/m84qk60VpqYWv

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\36c19fa93c61eb78c8aa038e716a92f1_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2972
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2972 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2340

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5efe75d3fac17d67efe6ce91bbbe2005

    SHA1

    9b8c59adbd5b24b170a8c6e7f633707fcbf52e50

    SHA256

    65b86dcd9d382e0353df91ec2367101bfb055755931e94727b5f93619fe91a23

    SHA512

    eac6e6a79ef1a59187ffddce8d89c13e78744610215bede1780ec1c3f6cb7db94506f3ff33705bd73f9e3c62ce18b72a0410d8e1a18fb638545a8b2eb439a2f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b979a4feb6055f4ff86917432d9ec7e9

    SHA1

    17b8f855d1fea558fbfe67d6c92368ef5931c6f2

    SHA256

    eb223a52ca7bb54a90193e93ee6fa1240be6da058d59da09b4580c8050a24a71

    SHA512

    5d37f616e7715ae890d7062dbfc34ff3310584f60129845a0941c43a3727be3cff2ed83fdc986d7f3ef6870ffb0f782298abf35ec6f06ce3a8ebef6634b7b424

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e83cf4f96ec35fdd3f592758fa21d96b

    SHA1

    d9493b8c9567155a843709dd8f4da90bc625bfa7

    SHA256

    dd70e287ed3f5d686a625452fcdc32851d43485ce2750bf69e009f5af367901a

    SHA512

    dded30f2dc0a0fd17437f72fb911fb82e0daea0e0f5c53188582dab8231a7252112709c13dacae3e2e7649117eefd568ff8dd846e3d956c666b80085c2c70e56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5acb98a06e6a21d08de6de6e3f2a6393

    SHA1

    48be134049f92594cfb90adc64bdf629e01c2d33

    SHA256

    269a1de6261e01d0c0a70c6be2289700f31ad6151f0bb16ede329f7f22feeccd

    SHA512

    61686d22c9768f31d75291d5a8ff17e95b32035a3cd6dbe3a6f408c9a4f2e3a66d1c08f430416de1c4a2379aeccb566b0b94fa3578d8d94ff218a4f68211f7ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e5dc4109a9e77b00806dc6442f0c612

    SHA1

    92e0dddc38b967efe34de329624d1888bfac3edb

    SHA256

    4e1fef398ba6cb521feb4ed58b89a5ed7c671770263aef4901d8a1f1691797d3

    SHA512

    a529b6caa8aece32f11b419c69c9d7098083345f40fde5e59ee6351a376d42341ddeb10583e5706579d7bb5c8d97e1907d3c12c4e244fc9a95a9d1a35ffe48a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8ccaeea07f7dc74d683edfca3ae0958

    SHA1

    108bd39aadf03149d4d87405e53789395f0495a4

    SHA256

    1de8babcadb51c55d9479ec91b67e3a0776d7d70eb89afbad5ce8fd41d16c1d3

    SHA512

    9915d8b55fb0b7797be1e0b659728018da1b265463f35cc344c3b3bfe99864a2c13102c1747b6333ad47a0b2bc43fc791d3a468826bd34c5a7b5ef23ea57997b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    228785d005954d5334f646c24f1e6499

    SHA1

    bb0c93c6fb43d11c0f034c5a8e7aa851058d9465

    SHA256

    038b34d473d91afdc1d6db461abc926a69e141b044f7710df93bd46c42680ecb

    SHA512

    8fc72a61034e8cbf1d050dd1d7871e4ec377a2f6b8cb33d0e23056feacb8c0402d642a7a17c0f32206d4464e24792585be6ccdb33952965c3c1b37e63388f947

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f6872b2f3d972f40b1153e6b5fe90b2

    SHA1

    ee757f078e22168fdc9ef0d037a8f7ea632ea411

    SHA256

    464245075f0f8512b83fc01f3dc64edc953e8327ee238f320677d86f8b11c90a

    SHA512

    53e7b8d6a804f88f086a29f7bc8a3522df58fe2d54536bf67d26edbcecf21420a139f19a8f0d2dc33ef41d1c9988fcc3681a9b4f6e2d4498f2afad81fc419b47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff09612c275202d4e0fe534e8b958d85

    SHA1

    cbb047e4628aaaa5885b502754ca79849da1c955

    SHA256

    f5941367222663cb50c2fc189e621b6a14a2613b2192c405c05aa13a3fab1335

    SHA512

    d4d5443fe2908aed2ecfb3c3d261369d667eecd68eb73616169abf3e4d426ed0f096f098b0f241c86683de4db210cf5eb61ce9c0af7a9e316c5b9273a5968c06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ef25721195181452df9a501412e1810

    SHA1

    80d13808b5872cc50d0337641aff528a2021a199

    SHA256

    64d1d7652f464692ad2c95ccb1c9929730f5454b39ec1ef9462f6c6f11030ecb

    SHA512

    c257aec8b40808a181b85ea416b518eb2762fed16bf0c430c8620ebc66f09a57b2c9453ec19e81625dce2730b41f17c73b25ae2d6e8d5360064e72672059e812

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcb9e0c86bfc2a9bcbfefbb33e300005

    SHA1

    a0d0ffb9cae23ff7520686116764f203c2d752c1

    SHA256

    9de8ed60ed8b47a85fa58ef0cff560a766b3b990a96adeb6c7a07e8b26c611a0

    SHA512

    fb55aab3bba0915cc6c89c5576594ac54bde1a26fb53f78b53fb074f2f4b1645bab0d0263dc08f748cb0e680cd2a20b16353e3f9f2170345dd980b642f40d931

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c172860410443a502050dd66d61f2d18

    SHA1

    f3a378c8155afabae5c9afeec0bb17d57a854838

    SHA256

    20f57d16e99aea1a07126726b8d21a60dd8a5fc6526b8b0a1eb6275f168e5ed3

    SHA512

    a444de34482fe271881ca59b2e13974e4fded12bca1f3105f674afdd9488c438de1cd48c5c84b5fa16e977030f5085f54edc17b20cc0a862b1533e0bdbf5cca8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c449084f3ab3de76c67a4d941593d6a9

    SHA1

    f9f706769a861ec1347d37fe05a528bf4368d974

    SHA256

    eb8a2b202bdfcb0b43eb7885dab9c82abd43ebd0268766ac7edddbe2985099f4

    SHA512

    7fb286224eadb63e996428fb05068c7b19e9a0f9af584931a8032ba5809dcc28e69be57c75cb90f3f064e86ded97618f048aa2b513975ae0bb9dbaf053fc0503

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54cf7dfff59d4cc83bd5fee72e4cf7b2

    SHA1

    74a4d98527a102f4135c0009918f295d98c162c5

    SHA256

    44a90e1ba856f7aed9e7b4a7c6ee9ddbec9fa8684b69d30a28cce0759844ae2f

    SHA512

    c3c0c30e932c5b89e4eb75fbe7b7e934c17d3e514a49f4781b04d3482792d43e3e4578f48c0f44eb105d6939242b320db7f47a1bf4025b6765f4d0e6be1ce136

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07209e522f920892064c30578ad8bac7

    SHA1

    acc340ae84fdfdbe9248bc1d803d66c50fd44f20

    SHA256

    93ac325dded19393893d53cd9d865823cf33d4b676cfd68d12b326f36dafb7fb

    SHA512

    9b01631f7f681165b56c1491a4c1de95fce9410ee525a37f988c779042c52e16417d08f2c820c393a671001204c6d888ae8a8e79976f22e5943699e01f2b0597

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a268a87f7123ce7669eb986efb1ce5bf

    SHA1

    e6f0f18963e167c8965cec6dd911d8d4c5d01bf3

    SHA256

    e2551ff9d41d0530ca85774e6612db8d243a82026482d1c4d36ab08b87e5f03d

    SHA512

    e5f2dfdb6636bc5d75c618ddf838d3c146677bcbfd409e2b89b2a9e282bc69ef9a780b3c72980481e5181c6ea58be54a7fa7ef6959044a915cdfe92baf2448d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41534520c5fc2f93f76b697805f70f42

    SHA1

    ef4b573500efbc363895e97e74b955726443dad8

    SHA256

    60c00fae92a4ea204b337db0659d0ca917c0977854cabbc7820f1377b98d4dcd

    SHA512

    f64f9cee19827c341669afaa5f5af827e6bb40c641b62f7645c38af3811f0d17cc5484d63ad037fafb91e9be478586c4bbd0550b9fe2e12f038931c5a3c6449f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b79e71f67e3d4fd0dc8ea206147ca238

    SHA1

    481c706040054e987dcec3402de86f1ab523fbf9

    SHA256

    52d328e4a3483d4260f65d33d585623d5b49a638353ad35b551e01eca2dce38e

    SHA512

    8265414d4d413720f6b58f34900e760558e8cf4d91a4bbaf88c57380eece8fb7ef1241b4566cf0e5eccfac2670aec10b70a7bfc409c10f26428ca8c79bd3b118

  • C:\Users\Admin\AppData\Local\Temp\Cab365D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab372C.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3740.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a