Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 09:38

General

  • Target

    397217d18e84f5ff73d95a799d60ca31_JaffaCakes118.html

  • Size

    460KB

  • MD5

    397217d18e84f5ff73d95a799d60ca31

  • SHA1

    fe4900f2d170688deb470d5910f04b7a24067215

  • SHA256

    efd6ee4ccc5b37de457df849344e6f9571cdc30e2b503ccdcd702c2e04253eac

  • SHA512

    bb96be489f7f29c6956731a20b7ee412aeee1b4b3bff74963bb83a93126f580c64516dee6e952df726b5633114cafacb3d88df92e0abaaa5243e8e67f5f8d6b3

  • SSDEEP

    6144:SesMYod+X3oI+YtsMYod+X3oI+Yv6sMYod+X3oI+YLsMYod+X3oI+YQ:/5d+X3/5d+X3C5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\397217d18e84f5ff73d95a799d60ca31_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2248
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2248 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2916

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c8f365347462535c369a148036cdf66

    SHA1

    d85ac5db61a32081a4df22cbe22780269947fee9

    SHA256

    fb85bdf6d6a947701fc43d7671e290576a3509e75850f08431f80f5447c33282

    SHA512

    196dc999be35a8d93565c347396f2e5ad6a9c90530ae7a9f351390ae4ad2ba9b7db5115907b095c2d9d2ce2a988f26c73e14286e2370766120bcec7dd5eb6e2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3bd4c251d08d881c8c9166641371b7bd

    SHA1

    431028b326703faa7538fa58f7afc6b2f4750cd7

    SHA256

    eb63e17a4ef1f718500e804ae2f03613a8beda830bc9052e93c9894cb427431e

    SHA512

    b7d69aa9e83dcce2422ef9637b8d081b114884409bd508eac2fe7cf0f56d6b598bdad7369e3287cae4de20b169a1fb93bfd16e4a947c75366bebe1bfb67e5ef5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1534ff7b8b05e995f07f59401ccbb3c7

    SHA1

    3ba802e0283350a1a685331d8b7521f158af2014

    SHA256

    10eca3575563bb302aacffd3ab421151b535ee4d6c7f01a0db0f31ecb3c7420b

    SHA512

    d80e9d337fc39d509a1458409e3e056264fec7b8a28c5714453481da570d59b565f8edd935a998fd407179d12e0ae6d75e75b08efb6be69696c1a1719cb1f21c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54eeda2d05ca61aea208dba88d66d9ca

    SHA1

    7ec8d602e8dad62f7cad3be757b9aa940b4c046b

    SHA256

    0a8077411f28b065370253079edb619a1684aff6b13bb3a328cb16a5ff6d9edd

    SHA512

    92fea2c2b45bc498ec80f946910f39f07b8472e3f515aef6f9709c79aba2b016b1dd76b7f4261edc1c3be64176edce69938b2293993ebb35a6c5e40c7b24892c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c7cb5d7f5775cc7975e3cf46fc5ca26c

    SHA1

    7f9bc6d9ef436bb5df599d1c8e92f3074c21d16e

    SHA256

    4eb1f30a09ebed13b31e5e96fbbc4ee2a46fb8622a1358f02df5180e90582dc4

    SHA512

    6260cea245bb996ee5779b5ac80ab80a1df764e4a04b34778152a323442e35ba05885a500362ac9b63aaa35cefd6c3341891b912c32c6d8c0bb77fc2923b24da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8823b55d5ea5b14b2a04cd1a47718645

    SHA1

    a763cd05dd6405c6758a617ca0c473b2dd22ec1e

    SHA256

    9d1578c1e97803af1542243a64d6cbfaaa3a43e4be7897452b94affc1ca02f81

    SHA512

    f7f9f075d287a7fdeafd445a856baf9bdefda1f32d25de52828b8d5170cdbf0822e84ecda537091fe9e3bbddb01e6e62eb952b829265d98ba8c7477dba5fa2fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    090476255300c0700a2146efb8414efd

    SHA1

    f5704b99cbbf2e27429d20e17aae191c979a5567

    SHA256

    3ddf7a7746920aa4dcbcecb941e513f95d1479b3c519690bcf278ef658d10800

    SHA512

    c08248c6464c7adaca3977b0496b7a3d6a43e7cf978f8155063d0f811f6f045be8b02ec2b931e5a7095e806081569033b8975fe5f941de7cecc4a38b1fcbc8f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    769db37094fe396d0af116af1f0e52cd

    SHA1

    0c990d8acff916adf98695e43e34010d02ffb3ff

    SHA256

    c13ebd400be8e5aa38c05843c0bd47c2965d288c50dc06321060349673aad44f

    SHA512

    7633af5006db503eca73ecf5e3b02b7544566ad894ceef847dcbe89d155b87454f342f34895a687f6f851b253ea25ecbcd305aa54e4b0c4750f0965f167f8786

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3efc7afe8b9e61ec3d11b23cff20e3dc

    SHA1

    43d3fe1f1c0363c27612636844e265e53978d38f

    SHA256

    593ac25ee5d507679a0b8839b8126ffe8a168ef37683a6aab7f4be8a479c3e87

    SHA512

    072ccb1281285b9946fa60b77440a097c441b1041cda0caa186fdfa79ba7f00cd3148407806f97ad5d03157aaf3664ab03b60b347b03751ed4e14bc54bdb948e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d7eb76db9c4b57ee41ccfd7f41a1fb2

    SHA1

    b1138220409a513c123ea20f6063c917329957c8

    SHA256

    f4344e85a1f72fcb97677e5f880c3673019e3e396ebf683dc5b1895ddf7a04f3

    SHA512

    d2afc70c01522290cc4a6633ddccfd04f5e27b27dcb7a70a90e7f66eb10e810b160b118db964f3f055d38e82f99119d26581bf68125b8f4353f91aef8714011f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6635c1d03f3cff283cfe3122ca20c955

    SHA1

    fe5da598faa3606abc343f9559359c43edffa4bd

    SHA256

    6dc4902af649b5bf2bb2708d6e8c6c66c45dc6690ab8e76865d50d845a9fc0b3

    SHA512

    e8820d625a105ab0b54125eb9d12109b8a8c56fcfeeddde6fb27adeac64ddd1cb57cf19846ede7b390fa818b5efbf491c6549ad890d361fb127ce7ba3b06e0ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    099cbdb4311c3cf9098a1594a38c0094

    SHA1

    4a28f51212bedffda37b059fef9698c6602cf749

    SHA256

    52b0168808577b00cd1ab2b8cb672313570716821ffcab120762cee6e5d9880e

    SHA512

    04e3f94f28a15a8ac6f9cafe5ffdcbfa6f0285b7eee0f75b59f3bccf564f14b4b25cdab567265defe49dba4f3ebf4acfead4da3a4660738167599db356b5bfa6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    40da2eb04272ab8a9861d5e2af097819

    SHA1

    8e66d3485e5011e92119bef8c04e33c74a34f3a3

    SHA256

    02c38bdf6b5dc97389c049cb8c8b6f8a8cb5b65198c937fa95d0aea6921a2478

    SHA512

    ffee67ba9985f52cdb735179e25fc47c71a8dd83d8ea24d9d01ce6fbd567598f2aef545cd6d7e7b283c28fc820abbd52fbc0c4869e67ab616b09b7b9ad57d6d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5c09006ffda148ebc378059ff3b16a9

    SHA1

    8953d7105b86eb1cc2d04819746a32248c855365

    SHA256

    af072e89ba949e5bd6c85d97e1caa86794f3aa5a82bb3f3d0b4e851027bb0336

    SHA512

    5eab39e2e6ce2d71796767474283bd32f5fff194d64985805442dc846564209e43930be27c65c6bc491b9decabb3b2e929f3d47aac955f09a69a2636cf25affa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    799d021e5043c7ff39e301c4738ecaff

    SHA1

    5a261dd7a4f84e95c0f9c14b169023120cca8888

    SHA256

    3aaf814ba2bd1c206d0bd6b599ba8a98f49362dece5fa5281a8c763e9ebba075

    SHA512

    a7fa9bd93f09c1ddd8421062204619f1b2dc8806ea8a777ba4e4103b5bf9f2564aceaf63352a1aaa3c26052cff5420e50c94937a5822943f35da219941033cb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56d69de25e482e63b1ca88bdb76f1b29

    SHA1

    6519cbed73fd0701b460bbff2b75e6c9f805127e

    SHA256

    f8a784437361eeafbfd29d2e093c2f5dc787c56b3dc6b5a1386b89577188ec81

    SHA512

    31c7d45eb2ce8ef5624bbb1867dad6a469393bb2d41c89722dbbdfd88f7feb05cdacea772636f569e7b94baf1caef3b7ef559e3525872cffb8f0bf0652aa6e3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d8b1759a14432d927d3c1e041e532a1

    SHA1

    9b906822771aeaa593bbe7e122646ee6388f19df

    SHA256

    1b84a36f63cef57dbd009e48cb0f29fb7a238839e4cd2c77115913ee15f0646d

    SHA512

    db20d66f1d170689abc1364748269f2e6268de310e01b249ea275867fbc274b496d483cdf8ece2f8692ff050580d1dccb9a29419a58bd86810a3360aa942ded3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    46393dce587beb598ed13835122ac247

    SHA1

    eb1d043175a7cd7c7be6e8683cdc36aaab80f2d3

    SHA256

    07afc72d65e37d0b58f401140a92acf139f4ac8e565d1eae86f5ef9d63347247

    SHA512

    faa4e1251ce5b475c3ae7e0a23aeb792e93d6609b36b8f28dac7a97177636a71adf039bca960fc272e412e4fdd6a8e123c1d37d33ae0770ea7b87a41aeb52664

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fecd8de666f425a6c43ff38247c95483

    SHA1

    0ed99fc104035f463574c89b99da2deb2a0f87a7

    SHA256

    92969d474e4ada27108b0addf0bcfc9a5ba6a947efb1b1e5994c451702c6ac51

    SHA512

    e2fcd6d272f68ff5e339551e7110c977eaf5014c8e8dc287194ffa2a9d7b1bbc687a078f126a14436a1f9a56d34d2a9e2bae7bb45f0b33d28ac6fb27d40e3198

  • C:\Users\Admin\AppData\Local\Temp\Cab4339.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar441C.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a