Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 09:50

General

  • Target

    397d46cb0a662dbc8a259db51adbbd23_JaffaCakes118.html

  • Size

    131KB

  • MD5

    397d46cb0a662dbc8a259db51adbbd23

  • SHA1

    47f5f69319511d441687e69e85da4ab0e01419b1

  • SHA256

    b4091a6e4fa777113a04abce4545a28861f93005009297d6e407462e462a4145

  • SHA512

    e27304447e31ea1763a1643dc0c5b1e3872a88fa8e87891cff2b8f9073bc658f6a9d3a8626d6350d9f439c861e8ade305c9014bb452ab7e4f77f8f69c03106da

  • SSDEEP

    1536:vs+oV8kOyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy+:A8ryfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\397d46cb0a662dbc8a259db51adbbd23_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1644
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1644 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2676

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc8de903e26957ff8c3054e0e9713dc9

    SHA1

    8f226b77f5e440461a9afb990d46c982d9bb95d7

    SHA256

    995fe7903a1884786f9455852337dd135a564fbc41e3e933b2ef76dfdc653c0a

    SHA512

    daae05e452084431ef8d3ba24a7542e18d7c66bf4bae0ea67cece9c2e20cd003626aebebf674edcc57761178e9629bbeab2ad780bbe76eacbcb139c9e4452a18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9e748054924903ea4e0e8ec571e65d4

    SHA1

    c59b8a0b0307b27c1f50580707446fce946f5e46

    SHA256

    cee0057b62300cc4c203c52b3a6e3ad492f90d3a57fc4f13f0e174d608561b66

    SHA512

    5673e929bb7638111516996aece02226d88f77d4004fae4d53ac87eb6851347ac6fd7ef2619d94e9f3bfd7351073fb7b2de8e886e9234da50a61c8a9d4cc7539

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aed34b3f950009dc267b77613d0f2df7

    SHA1

    93b7c81a2ea7d638a89ff764c8b8c80793630bb3

    SHA256

    4013e1caa01a5bd564cd18809a2d4289d49b7642a1134f3526e128d8091cdd18

    SHA512

    1705934a0155a79e0d5e84223449c20199213c2b451c37a2467e9b127818eeb6f62f1ae1d262ac97ed42bf7721b51a3493ad300b8ad337b01ed3d205255927ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    649ac8ec3cfcdfe7e6c381c8f2ad8b73

    SHA1

    f61842d6c8119600c4a830b3c31f61f61f6b0909

    SHA256

    f406cebf13b2088ccd98015f12e0ef9d33162ed8d2cf999cc5c4dab998a8d2b2

    SHA512

    b919a20326a1b46e7903a8f69bd1e2f3c5be42724c2004dbf492c0fb429973148367484bd2bafe0df03aed0b543883955e495e90e9d3753f61daf7ad9734c6da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e46ef1e2decb3428ecec7d78584fbcf

    SHA1

    74b57d0bd593c9b3975adc8c8de5dd134fa86677

    SHA256

    bf4e58feaf51e43839b40341db1126293cbfbf7ce58f83264a33fa28dbae8e5f

    SHA512

    a1f8ff18e37594d619e6beacc68dff521e76853c8878a5d6f75b0d9f160f3366e8bccbdc35410863992580ec1d76ddb101f7ae85dc8cc1a1a4a59badf3df3414

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e77dea51a226d0e4b1cbaf9762d907b

    SHA1

    704511322879e4300221bf75fe5c532f6ad9a522

    SHA256

    eeb09936ae24ffbba54074e5d4d27994b93cd94b18aa417e00a0441e8f409ee1

    SHA512

    7ca86a9a460374225b49f14f6bdf3a43b763bb4acd5ed8f5643172060f8c4ca1897145f40ab222d09cf0b9e07863fc2f8333e9d256a2b2a961110a40fa1e6aab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ade52bb13e496971a3ed33909d06f03a

    SHA1

    46432bcee4fa4a9deda472a57b4987cec13b0908

    SHA256

    73492dce6af2ebcc71f262700b3561145eec08178a2609e527779cb72e5a0176

    SHA512

    d2f03d7121841913286e3ded644812f6ec1b2622d74f4eadf7a36e49d7f08610c2333fd533d2d8b834895d78138144a6e047210fad5a5b8f8ace855f4bd8fec6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5465283d78f3306ab63a3a5cc6961942

    SHA1

    ad87063fe5b9f09e858c9103c2e338d9bf4df8c5

    SHA256

    ba06d401c3524da36dbefb2e51e6a0cc3f78cb7b739d6e4424faa093e3a88bab

    SHA512

    b00941ecf09a568233acdba451b3611fdb6431b2cf047d4117f099cb6e5df96f6053e384dc4e2b488cc4fb9b2201985d4bd21d1372260c72f38ce8b8053bbbf2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a0febf7e4eae4b11127dd93ef814e71c

    SHA1

    8486a5a18fcb80a1fe087254eb558da98c3bcd40

    SHA256

    1e69def480d74be9960586c46eb07b830914c163ea90a3dcbd07b1739877cf87

    SHA512

    822656047ebf4f079691dc3d5106de16bbc0aeb3f4c07cacebbfdf3f8fde61e6f3975fe161750822377200ed36612b754155d4f557ef1527ec04c6ca90ffa8d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    40cdec7a11a80cdb0a30e1a332aa808b

    SHA1

    973ce95cb15d654434c73baf2432a7ae7940d60a

    SHA256

    a4d8813f44535b05ed2ce1b71210a6c98859dfe401761371049d2d37e196b33d

    SHA512

    ec5c311943a0c2435036ffcb70b71da7af3c6a7b047ca330f1b1a8b380add46120de275a8a684c5eec793365d62c32c21861cd434dd95f94affabd141aabe680

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f26974426fe49f27c5075662bc017e88

    SHA1

    4c8b468bab55dd9d703c0c8f14daf5ac0047b6d4

    SHA256

    17ad8838dcbfda81a0e8037cae3b5af4fa2454b5580c785faf3ed2e879ff8b59

    SHA512

    fae94bbe32a7fe47d48c8982bb19ea57f0d6ec1b7e4673624ac2e8aec89c846235bbd5292ae3d7f1467a4d1642cba5f23c9f7a454f8f7eb5bd1864f3fb35fcbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d15edd2658f2045e1b903a41d7f2ad4

    SHA1

    971520093365401c59942833d93ab6c29887b266

    SHA256

    5a54eadee4aa4336aa558058397ac71ca7962c058658917e3c525e82e4f63876

    SHA512

    d92eea83316a8f203d2665311722ffc4d624acb5eb1c652359e03a2d18831a39418467d76b68b46e30728531b5a3441d8199f445a00b65637ddcdb6695d3bb98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00e313cae52f5130e6cca83ae30af2c8

    SHA1

    f2d3676da9ab650914c59a906e3eb4f7486454d0

    SHA256

    889becce2454b5f76095cbf43474e6b68dda9a7af7a321e94469519366a3eb45

    SHA512

    ae135832ecb4ffc784d6f1a83b3dbe7106110e9e64e7cd48c2cd7416c04b5c50f0df97c910e747986eca4a054363a22fa677a39a0dbc8ef2aa1d7cf175b6fade

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6c813cb12c08e7fb9d5b19e4923c288

    SHA1

    a29f341fc8b5fc49c2f4108909dcfd6bb844cd23

    SHA256

    159e0fba59ba2f74271f56740ec4de230fa2d1a11819b654395fa2c51df7b1f3

    SHA512

    29e6817d85359f118105fd25bb0cfb11d4e12890c72cf20c8d9f7561139a50a02ed563627f3134b76b3352a962a6e9cd1abea41e1bad4cb2cea4a7cf8b0b53ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac9ab60d9d9cbedd6669e731f1d92ba4

    SHA1

    77ad8b86d9d78e467f3dedcb723bf31cb7f64473

    SHA256

    52e8ec32dd2f4a74cb08f92a2c94d44523d32c618a26d04d0a3a9353ddd1b43a

    SHA512

    7751dd53e604901f9494ab4f0bbb349fd1315f73eea085590126d6026a3999a956b8978cf3d6d6af046c9e534f4772f58b38c3ec7e4e3062170eca3fa1fcabe2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc981522efa75759fdb500a31834df19

    SHA1

    203d339e663f8f93a0b95180b29be5da0c03d17c

    SHA256

    ccbdcf966fe7d9aa92b7b3bb79255274f17ed2b1c7e30e178f105b519ea73a6b

    SHA512

    d8c9f80b7766f05196d243d0182f1f514790d7df3f9183cf005d47e3b76323bb2a058419ab128dd74185cf515b68360b40d3d3522798fc284de36f6b1b5cd84c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e7c0b71b451a5dfe3c6809d10f792aa

    SHA1

    538993d1e868ea8dbd23a29b1b88e8184fbfa412

    SHA256

    dba239f19d71ea415d182de42d18235f37a2f2f1ca607078316f66fb9d658c6e

    SHA512

    f526454bb13bfbfc2d9a1c6caee30024d02a04f6bdf8e9cc93ea98039a2002d4ee92a9a6e5791a6df1ccc3f165baecc9285a7ff1c1fed2d188107111beb7dd49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1998f9d1afbdf360c12c22a8844538af

    SHA1

    a3fb14f062ae4e36ada2e9e183249ca0b5c66231

    SHA256

    d5c570d0be01725f5a44e4a2acf02e6b765eeb6d10b4d466b08c423a66676631

    SHA512

    84f1f7c0b561e66b2814915efd0a9a1cf532e26ae6580b7557dcdd37f00f0765018ee7df5f21e62b0488c771ba114d06ee2a584baa2c75ccab85b699adb75b1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be573ad68b0b775bcb036d3b58697d7c

    SHA1

    e0c952749874d26756e2673ee82332cab7d20e6c

    SHA256

    d552cd7d6d42aa5cbd31095e692652874b03f11363bdead0b94225aacb1b764f

    SHA512

    cc2bcede28ed1a1068669d0f7865a7c40a0d0febb07876f56ad3adb3d57cf7dbd4427f96e462b3a97a4d87cb4b10fa04f0452842e17ecb2127bab55100bfd530

  • C:\Users\Admin\AppData\Local\Temp\Cab4A6B.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar4ABC.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a