Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 04:38

General

  • Target

    384c39c4df6aa61a1244eeec54178c45_JaffaCakes118.html

  • Size

    12KB

  • MD5

    384c39c4df6aa61a1244eeec54178c45

  • SHA1

    04207757060a291e169663894ae64d33c663a11b

  • SHA256

    a6e5b02149556853cc2498a64b182d30c5f4492c3f8c20a1e4f2985d8b6ba544

  • SHA512

    5f418212eb50c13097886ca1ad4376363998ba10762f08ce860a3204bcb2015e3774f87a6d7cc18885d3b006a8857d70f67a04dcb191ad6e7bbea3d4128bcf44

  • SSDEEP

    192:CyiQTNFkEw6zFdjbXjJggevmJggvwQFCVCf73xy1wbRML2ODn6JggukLmtQidk:CyimEO/alLZQFAi7hy1wbRML2UnftQi2

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\384c39c4df6aa61a1244eeec54178c45_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1704
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1704 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3064

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed5c58771531bb2d154b224f0402bf51

    SHA1

    04cb558277c6f2bfead269166ccf197406b02453

    SHA256

    2b6d53b861683e336e396b48f8dcbc7edc1375d585c00e0e507c2dac94473b9e

    SHA512

    7e800e1b9f80cb9b9c26570a31dc76f3868cd148a2b3b699052264b5a5434f9f007e95f9d94c7bf36158f71eda7a6d4d98011a3be4fb20cf889221ec5a387c50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1d1aa04e191977f789a95cddd4d2479

    SHA1

    bf53cee56ca5996bcf9ebe23bb83f6642d3f1afd

    SHA256

    b7e4374cbf506b1510825ce73bcb97e8c899d86a21a2b7f6872bac8e671acbe8

    SHA512

    08b0f43f9796e4028f14cecc686bda2025d03cb25b2ab5e07ffaa0c1cb7bcf367ff19303f8d9b2fd00a866e7be092325c9b656f6b440e2a0122a6fa0547e52fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad263b7d4a0d4cc318825c89f1e4d8fd

    SHA1

    0d5bf5821ed613c193b3c19c9b913991519fb58c

    SHA256

    646e89c2507cca1665c3a37d6c5eb00b36c0a8247dbcf50fa9821c7748f2b870

    SHA512

    869b3cba3e4c10a536be957aa5073be10641fe38b4be384fba334d6cfcf8bd1ffeca6eced55e3029a5a11e5387296f035fb79485c85701e54734e7c02b4c6145

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ff82e7bde52694174c634609dd9cdb0

    SHA1

    8260462c57a70cfe81585cabe0d50ddd4a7240ab

    SHA256

    d0ae23d243949cffde9995899bd56d62a3fe246a9aacfba060ec2f36b1918c5f

    SHA512

    917edc2ded91733b203632146943c6d162e7e8534cb0522c4f3db3e3642059f0365eb5a8a0b362920db2e8b578551f94961eb797d181d658140d3e30684cbe42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29b60bb7e48681289087ee7f585115cd

    SHA1

    20a0926ee4066fe879facee746f060174745386b

    SHA256

    46dae329efdd90fe1eb9de47345f96563bcf50038abf01063a8899f796aeac34

    SHA512

    dd9016f5c0fb66010fb03a66e78033d26a1d64e011f466693af086f6a79b0927e30f6d54e4da8e5f7878caec1c5f089e25a4633a94673cb843bfc3cfa2f291a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f7f67eb7e3344a3219b57d70a0fbbbc

    SHA1

    045a989c82a27359b39d585d72fc16a9d529ed09

    SHA256

    5be1768e2c4c09c563c679a3650c52c78de123088872ee708da68b8b412352fd

    SHA512

    3e2f6e2ccdbb2709887786cfafa02bf94f13b49acc409bc395bd5c5a14b593689a01e03098bdee067427f5a61c32bc227d10f3df69902b91f5c4d5375a18943f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d6ef8f5a81f39d6479722500738367b

    SHA1

    91356b3ec3ed82d8036b4a9da97cad667ba8be32

    SHA256

    3adc034eef84b8ec342430d0871bcb64098e4dcfe592cb674c900a0aa1a43c04

    SHA512

    42f41e02d16871a4f59a98669901a2b07c45238b6f0eecb706b0f2a74167ac0c2e6df9e348bdf3a6c072b12642773dfe379582214c63f9a21666df3e672302aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd9be91d35b75c668105f7c70cccb480

    SHA1

    1d5047a4ff4061aa10d1cba498d2a9c0d7940b0f

    SHA256

    3e7bd69ff07bafb21d7f18be6e84c2e2a927104444c8b6254d22ad0c3f64a376

    SHA512

    0be7d139bbeb9d7641b1d42811e32686b723a7e03df1dd8a93f217dbc76b167bf34192296c6ada816f118dbfebe64bbf754a4140711f7b40f2512fc12d153094

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35a93f67830ad6d48cad4a40a8bd3399

    SHA1

    51b7bff0c1e9b1eb8f0cba89c47810e8d273ce31

    SHA256

    961c07c64f7d3124dd256f49fe5876c5a5caa69f046be9908361e35cb18350dc

    SHA512

    8e08ea79d6d56bd2417d685357c400d7fad88fa2c17e66fa863b80ef80081c2a4db36f4bee0dfdd13e2a5d8c4ac7a4612d275ecc989ac8899d9b71fd313b579d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30b828a22de210cbead5e448f27597c8

    SHA1

    2ad344d23ec8153db718efb1aa46d51f651d628d

    SHA256

    e4edaff80fef7840d63255ee1079329eea458ee6631eff5f2f8966ac7fe9fc26

    SHA512

    b7616ecccd2b1d0507ec5dccb3994159ab30e55b048f4502503a89a0a23c6c89ccc0ee7567884af6623c29f06bb0a9f9835248e3f804e3ff6a4ad5e93aeb9cbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94708b73d362aa35c859c62eb3ae3d47

    SHA1

    723ddc6418d4afc7f18d78669ff818dc53e71dd1

    SHA256

    0a6a267eb9b88c8c61fbcd8964146ba4c32e71d4c3c3617e0eab8f9a7c2367c9

    SHA512

    acf5dd088595bace055334723b7836d2ff5d6710635c9f1c05a08da1614446fa739a20ab4597662f4354876f5975a21fb8c303243f937f93744562c69f9ef205

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b32cab71fa897378d21596325cac03ca

    SHA1

    6578c44d0ca015f91a189a8615cc704021462894

    SHA256

    a705f8f30e3484a82d30b5b719f0b75e036d112322688c4e45231fed872fcda1

    SHA512

    5106eb995e3201070518e12dca61af05b5f50f53d2a1f7c3bad302f0dc58929b2d3a3a5d16d6c788be6b73a31be1febb0b8c7b013f465faf985fcdd9c0141225

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13be7a474904ce0ab884add28d21fe52

    SHA1

    c3ba4c69df1c721664925964c9eddd5f9f254dbb

    SHA256

    8b9231a8386659db95729a33e0a2642cd48a774cd652e3a88d2ec5438bc0c94b

    SHA512

    e5d8e888c3c207f6230da944830cf358ce79119f466489e31b392c324565dbd464bf86e1daf4ad1b88a57a311e56b2c3dfd6eeed9990838d7b73d99954fa0250

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf8d63f6a0cfb7e90fddc5e3941c885b

    SHA1

    e8611cec9774b6ad28757c3082afdbbfed1f3bdf

    SHA256

    2590172003391af9a6038b934a611580cfce76eb230ebdc44951d1d2b1ae38ee

    SHA512

    a808b048b092a28f7f8c8bdca1fbb7253c8c14895ade72c17a6469f35a398d8045974a28b89d1a79f6b5dd0a86c97cf865c355caeea769e91c39f02501af55d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4dcc3f39934868d31e1a07064569c556

    SHA1

    a5627dcf670cc8b1ac33f3417c5f14c43416f7a0

    SHA256

    e49dca091a587e7c15ce35ce3dfcc988180ad7f3445244152608366a51dd6cec

    SHA512

    e09e65bdf957fbb6420cd3c7e041824b8f93ebde15c4b3a5658a38ac70f1009dad47f1f30c60ecad296f1a909c0e49f5dcb8765e4b1a5c4a34e4cc06c7fa6dd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    048b08cbcdb8c0a1ae5f3b28d3e5b5f6

    SHA1

    a9d24f39afdf16842bfa3a4859f68b7fae505c6d

    SHA256

    5e423ec8b80f6d93d28e90a9ddeca64f09a5ec6e9704c4aad9e2edc77498a7d0

    SHA512

    af3921ea4027ae9c84b6746fb88db7f79c16394a24182f0edabee700dea35fd6b7f3aa9ddd9f24323b462bf20913502235d21c21d12fc78982b8f23ea6178df8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1abc988b75c71e5ea2527ae4f22a9a74

    SHA1

    96e4886debe2c57a6ce4eef9b348736224ff3b88

    SHA256

    c835fc48c0189f64da1e6338e616cac1a15d8a8b7b7e447aeec04f271c4def29

    SHA512

    22169e5520c6ff9cae10352c7a9394f1327dcbdf9bd7b08cd24d3490b418a2d739f16aaf511ac800874b8b2c225d878fdf9c12b756786c27833dcfefcff20ff7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df05e39f20725386f37d32789eef4828

    SHA1

    b2fbcc519be7f7c3f27415ed2e7b4c521af64318

    SHA256

    a71c483cad36458bc873c4f6f0837106e9b2388e5b061c32f904795eb50c9590

    SHA512

    f871d752dfe69a7a40aa94f640eb79b8d62578d80a332bddd1c443fc35204f1288f6c2cd1e942ed0a8d2b5eab2b60e38f9b1ed993cd979391ba0c9dd8dbafc4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c087710e28936d72d0cb917fa3cd16db

    SHA1

    9ef3404c87c4ed89610900e47ec53a4c39aa478c

    SHA256

    8744df29550e5a8a3b77524e4a8d66beb6b252d7de4b4502eea64b1ddc22977d

    SHA512

    a75b0cff0b5a0d669a9a53c93edc0959ee6168d505dd76f22ecaf87766605ece98938b77a0314cebece74ff3c72dcc7a91f7174f10b4f0032f5c3f13dff423af

  • C:\Users\Admin\AppData\Local\Temp\CabA9B9.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarAADA.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a