Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/05/2024, 04:42

General

  • Target

    32c6d9d980c85271bf9435111028540e_JaffaCakes118.html

  • Size

    27KB

  • MD5

    32c6d9d980c85271bf9435111028540e

  • SHA1

    aa106e553975cb3727f78f4665587951897b56c1

  • SHA256

    3529c0ad6902122d65eeedd8baa29318b42c29a4553d2e3b68d69eaaac5adedc

  • SHA512

    97ff1f71cb30ae88ee5a1c25847d74f04a76271265cf08a696140cf6faab032eaf820de2ae1b304fd40d8c808c1527d23e8f8c75246483d2e6a021c9e395094b

  • SSDEEP

    192:uwf0b5nGmnQjxn5Q/NnQieYNn5nQOkEnt3HnQTbn5nQ9ei8m6e5QmqEQl7MB4qnq:TQ/LXksQJSC19

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\32c6d9d980c85271bf9435111028540e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2724
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2724 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2532

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eeb4c036187ade2716812829fc1d3c6c

    SHA1

    bb59a684abf5c4ac507fb4a49c349c73afed3235

    SHA256

    fc7a5eac74a7024278c7fc45b614aecce934a10a1bea24a984231aceafa23507

    SHA512

    970cfa15e8e2fbaf880c3526ac11aa4e126995b26b73389eafeda667f95dcd81e921d3b96cab26c9199db1f61af172352a6edece1086fa95cdc5ad7200515b11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aee885516ef527e0f0b9a3229aba302a

    SHA1

    b55507bd9811c8306dbbdbda0bde8bd816eedd36

    SHA256

    c8b7261b51c520922d2924418c31e7f411c4f71366f172f14f0028e59f3c8b12

    SHA512

    052f4a27d868003fae105e9b007d7a5c973dcd8d8587d4d92e23a3cfe20873e9d4efa6ee7e81b808f8c491ab137c8af9e17b613c9216b704242251474459f735

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b0ecdcf509409911b848c0ad4f03cfc

    SHA1

    1a09802707feb771759954e5c8f82c6849d5aaa2

    SHA256

    f20ed4010adfeb4fc6ca768f316b4bb1b93ba0ec9436abcb1ebd842270a967da

    SHA512

    765232cfdb189a6b8b86ba238acdfdbb03ede1421a31aef21ca920afe237b75ed8ed300c412a2fbcf1703275b8126c569b231d6bd0437211d239db1ee432e3fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9866672ead1867cfe9f4f8a40aeeb3be

    SHA1

    dbd41bc20a98d436116ceadf493db3313e4767ac

    SHA256

    314c72543e14590e21d000965cde85e36603c1934d0c6c260d4f4e142052dfc1

    SHA512

    edf34bee2766f89bf7cccd7a003ea55848fa7b25a1f7748ef1e8fa5f92452b794a24a524071b3c4577f899ac4a2b7a2b1928e6585a9102190449811a5d8e476d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    466072d245846d69a620b3077cddd64d

    SHA1

    5e6194bd0c2c9dfe6d171d00a892c4ca68682452

    SHA256

    018db9c1c648acc83b4be7cb6d593ba92c26c071a9b0e14d48e736a2cee484d9

    SHA512

    eabc29d72f1fb2820729aa7ed7994d012bbdcacc4cf8a6c5ff761f501610c09881b6a66cbf4af8bfebbe744c9a4685ed522861dd53216dce7d22a1cc04ca2662

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f48a02d499e278d261032f7ebce016c

    SHA1

    5119a664f5b69e5ef155ec6377520ae124fe0310

    SHA256

    2994b17f7c18b4a8b27423034d43da161e049aaacb2dba8cbf451329eeb388cb

    SHA512

    eef73c389630ccb1f992d7a3d9108d04961bac8f8cae87ac78cd23ee25973924f20d2cac662baa058478881f507ff9fa55656d19b26333924446952b7c13d0f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6040df4cc6bc50479f93e986faeb69c

    SHA1

    aa38ce5cc740ebfb192b3dab272bf9bf395a0b93

    SHA256

    1467b972a3beca4f56ca36210c38e33abed19511c0e4ac54272a6f6badf22dbb

    SHA512

    f192cb3d5d57a39de3485a825d6f25e280c1e46f9be792a07f0dd94792d2cd92774df6e116820914164b5777727a210314f99ee50a34f8933128adcaad9bd5f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b72356cb55be4c9912ff76618d309ac

    SHA1

    20beb09bbb882923751bf8e18fab8a46f8f2914c

    SHA256

    26bbb5cd39463d06789021f41cdca06e9cd59dc516e97c7812f7f2e3ba1a417a

    SHA512

    79fa1898e41db7d5550b665e1addf51198ca711d3fe6f4d8bd12830e04c2c9932a10068d49004d68f69f9aa2d2ec055915ef386ab3f833d5c25bd7b1bd53b4ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    117b0f0aa06fa1979054591d92f2aa12

    SHA1

    5a209358401f5358a4d7a61ba570d44adab9a2a0

    SHA256

    cc040a10f695630b655547462f5e3f032dbb4d556f2ced0c3771626b76e99b6d

    SHA512

    2dc620f22c4e6fd94cb11dcbdc2373af5e318dfd3f03dd5f8cefb95516747a6086bc1bdafa90734bb6e18fe1b52bd279bc827a2722fe6463eb62ce8d304c3115

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3341eed8d9c3a2b62dbb5e669ed512d

    SHA1

    a47702285c7600e95389e4e9a3d8f64573f8b164

    SHA256

    4e5a70b240c7d484bf040d1b286f9b2eb42180519b1373c9feaa0a70e34a5869

    SHA512

    dabe45f4988524a878d378f7e7f2b941301e9c3129ccda989d4ae817a574981384050eefb8bb89337a5100ac394d5568979a75c95a1dcd348b486d5230202e25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    afdea4d5637a4cbcbb5a31e3607b940c

    SHA1

    e02642f62381034d8aeb5389f76abef5ee9110fc

    SHA256

    fba674c6108452dc1d959256e33f3fdb66867051a7d15acd0bdb151be54b5d66

    SHA512

    8577c66d25bbf8bfca29b4e3bc556dfa3e1e4fad83f7e09f055eb11cf23342410861a0f6ef57b422f26f62b9530bf0286085906809db2f75b37d2fa4c702f69a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef71bbd366afb13bcfa4ee796240e54e

    SHA1

    f25d9e0b8579c6999c5228f1db653a90b58497ab

    SHA256

    74e69f49d3b21823eef71035fcfce34226531f25ae1217d7713d75e9792a4ef0

    SHA512

    af2b26f8db4c6947d783f5cd44d36ecc327260898666f409e1feefb6f7c9029bd65159a7e12f94c797419b5d304034bd7a207e752efa6bbe3aa718c9b8e504ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63822b185dcba8f99775d6ae3a61f077

    SHA1

    0c6778cb86b3b94ba307f11ea2731a2fd327c0ee

    SHA256

    1f58a6a4f3e07ea3229508628ef0341ecddf15ec61de8a553afc542aada66c94

    SHA512

    63d34371eadb756524a853ada6aa3978118a36a0ae33660ab42dff8bcc6b273b3b2af756cbf034add2ed8e419a1d8b14b59701630e5f09251b36f226acf08d74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    985e91a44f0b4e43df1414f8cfa91c1f

    SHA1

    bd88083f5a22a39dd4228f2351336bdfe11dd6a3

    SHA256

    af38771226aabf37c5efc30716c333937920f8ed2d245cde09cb9287daed1285

    SHA512

    b2967ed476e348fe9ef0bc3859db25d0dcf4938a0f643748c0a9572ee787eeae987a2ed826a81c5cc59f2dcf9bfadea405b8b7bedd8313d2b24488649a13e944

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54d0907f61e0f3b1ea3eaae9963f29f3

    SHA1

    067faab403b95ea6fef4ee7eb23b91e7cbf86a90

    SHA256

    27c5d2e072b960aaa9770c06b9310a8c15abeb1519b2fdd41af169820b68ca99

    SHA512

    97e7a71027a06f239d88fbe5930f07ffa0fe79804ff8c74c7f88ece9a294db53fc5ca0ef3454394952a08fdbb06a7530eaeaa25f7ea71bcdcf504cc48e6d93a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2be3c824a07bd7db3ec7a93343d46a41

    SHA1

    325b0afbebe0051b3064b9bab22f13d50fb3a38a

    SHA256

    cd605a2b0ee172903a09daf7ed0296c15b1f9fd3287c6748de568d67c6edf2c4

    SHA512

    62cd3d6dc0e131159a2e9e00f5c9b9da0c8aff6578535c862857237e4d0a177c878a294c4e256f80652f6c55c1a46a11b7fb7b1360c30aee2d5c13a43c689b48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a837f1796a2fd8089d0ecf4b0ac0104

    SHA1

    561ad47426934e06c23c6249224dd0cdfe985907

    SHA256

    ae7c84b8217a9c99d010ff4899052f8bfc73e4d8d5f6693645e8b302c6ce3fef

    SHA512

    fac30bbdaaf5ecf446e761e97ac8262d8c1302cd6b46658b8bf94ec0ac9381148f18f00378803a388817accb0fdc673d56f034b7425627215f32e1a772784165

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eaa2cb72971569278fda3c605ca11b20

    SHA1

    2b22f8f0d5277c4b4a5363c3ba55c228ce037483

    SHA256

    19f25161bff438d13b90e4c55525072bb94a5b9ca831df02b70844f395d74ad6

    SHA512

    1d2cc1a52def628b565f234a461b75d61e90695e21da0bea516aed2dd6506de4f827839480ae7998467f3ec5f5a9b90cf7ed69e7dbe7a477f52d4faccaec62e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce8e5fb5b810143ccb58e57e5f675156

    SHA1

    8c79ee8bbcdb7ad810dcda5cc65b922cdf75c87c

    SHA256

    91621efad84fe9bc8d08b50814d9304d6db6c6b940e6ef268f4f6b9b80dfb666

    SHA512

    0d063be81c4ecc93531d27029aa04082b72a55bf42b991fe7ec0850f0dc79d2da2f12e438c618f481c9aa7f5a990f189c8d690ad0b28466d276a9a7f1b88a3bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7777f9acd6abdd419293c51d247ba85f

    SHA1

    03680b283806afdf01af1fe93c52365da08e962b

    SHA256

    8354cf8867e43a93e8a81631a94ee7ffddb1590d9e7e9493cf7fb184566111dd

    SHA512

    a7386bfa309ed92e2b3dc0d0066b2b405a23889057ba17d003f45840aa9870d2c41359e977faf47ac38010ab0d95709f259556802f07fede381505be25031842

  • C:\Users\Admin\AppData\Local\Temp\Cab316F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3251.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a