Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 12:48

General

  • Target

    3a3220a8cf82d6f940ac54358903bf95_JaffaCakes118.html

  • Size

    28KB

  • MD5

    3a3220a8cf82d6f940ac54358903bf95

  • SHA1

    50bf3480727724afb1f9da6c2a9462489e7c4b52

  • SHA256

    2ed074913b3fd092e56b9d09c4ae9a6cbd628dc61bc26b4749d4b0fd8c6749af

  • SHA512

    b06b06cc54a138a7b036107f4f50bbccb80398599a69eb5e2675870816be0761ad91833bac3049902a72d9c75f0fcbbd4066c641a495c8a35b890243d027771a

  • SSDEEP

    192:uwzIb5nuhYqnQjxn5Q/MnQie/NnynQOkEntYanQTbnpnQ9eXHm6sf7KUNQl7MBfQ:uQ/gu567K5SI

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3a3220a8cf82d6f940ac54358903bf95_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2912
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2912 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2420

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc4b7d7a22ae6c589123de71346d09f3

    SHA1

    65791d4aafd9bf433e9ee55e7944093ef593f3fa

    SHA256

    310d5268765c2b25da70fbf91d0ff427f8c765836e9764cfc357a071afd0452d

    SHA512

    c770953322841d328ad2c6847f38c7882b59db29b5562e723475bd5309bc8e78f9b37463e79a774aab06658b0cb12fdff03c7cf28269ed8ba24e6d9b01125d4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a2b4355a6d1f1208406897a88ead1f0

    SHA1

    51c8ec22cb5fe09e72bd323934f4abefd325a22f

    SHA256

    2e73a03f01eeb9b45b3ce23c79dabac0b3e845a0239fc23d2e135b3be654f627

    SHA512

    65792468a77f0dfb18921e73a7d068b985bde73e22e25770613e1e3050c28acdb2b41f70b1bbd664f4f31ceb9ea97710c6eed6bc21864ca54ae76e805616ccb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41a96624b54597315a6c7d09c7f00cd6

    SHA1

    4a1b0cb3c4446b6cef0726b2509f597098b474c1

    SHA256

    90a23e4e002ff8a66afe0822299428198bcbb22b3af3cb305a9dca89378a00c4

    SHA512

    004b9e4d91b4afd009eec50cba8dd4429cea54f7c856176ac3d8b11a36742aa6c7811f066fa037b2bce1e13587d9458e2e1dc6df20b103092d2b4ff425a11f40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0291bea4536858a68d3f37fa7e82d423

    SHA1

    d77c50b053ac40112638a36d0ccfb5f10e90beda

    SHA256

    75ff4701d9fb0c6195fbd4671708b0ea423d2623a69e1e0c02574ba219a5fb1f

    SHA512

    203b8f6fbbad535f01f05de81ef4328227e06209cac3675e2999cf3bb843b52635a1f9abec8dc099b3f3390bcb804b233474cea52edc6aa2cff184ed14ed8099

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fbe9aa01f2cbd55a038062133802f553

    SHA1

    fb2281216918e240f5b36c762609eef48ad76d91

    SHA256

    d164e01e4bb207dcfaf8194f4827350e7f12a8ee2ebe2f6d6886d7079ac3f7b0

    SHA512

    9840f57b78e283e014bda1273415627a64f3a633a27ec3855a7f49a212ff5d6fbca47a7f24a8de7a7648189c2958f4cd9d20657c31dc1e9db78115c30eb98d42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c35d43a7103e6f2914dad6eb7affc9ab

    SHA1

    07bc838f321df9ecae0c2b28b36aaadab2122722

    SHA256

    c4ca4934d0c0da5607b8a40ccd8fd9ae577faaf3a4c1caf700dc36e47084826e

    SHA512

    b5c2cef6502a527e72dcd27f2e521e80cc44e3c8e4e9762611130e3a25be5d46b002a5db0057720d22faf4c42e56f719da87f28bc390670ca3344c465696aebb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eec88ae75b3b590a4bf6f211c4e0f60e

    SHA1

    01a18d94c7faabc338819392ebe3d6887b616512

    SHA256

    9ca06ced8c168a998ac252c74863c35f0d28de516ef9f8686ef925c6072b20bb

    SHA512

    75bc5988037309805cdc75f299c6e278f4e642a000376b74a6f284a946e82cc792a19ef4bf7230b66e32f9733f6f4fd7e16993c379c7185f3976751fb83d2e4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d01bd496ee2fb22aaa2f9a51ae8a751

    SHA1

    8991728de23f237f1c789f4be6c57c0f05c14a38

    SHA256

    49c3260e386b1f9182ff28605ddedc64fcd8fb1bb75f5bd7b331d25ce4bae915

    SHA512

    24fb0fe7457fd9ae2b607940151d4a94d9abe37d25cc70d7bb20eb050ccef3647f5dccd680418b42278398808e3699310598a80276c8f0748ab9e410728a43d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c17884b8c0a1f08767fe5de564f58e7

    SHA1

    922ea2b77807bbdb4e1af55c8086e7deae85b57e

    SHA256

    1c5c70140469679174d008745417869682517fd720f4620c9fe0a8230f0bb77c

    SHA512

    cb5d1002d01eb3b553e998524702f7781fcfa4cd65e4ba541f2cb79f12dee7c754fa7a1e4ac162e2cf60b8cf4a81f6bf2bb5d16ea8d3b83c1708141046c4b60e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5af600c8668a304730c4897d2bfb7fa4

    SHA1

    fef95652737c52c515c93aa47ebc6d6bc584e4dd

    SHA256

    c86c025d44802c424f2cbba457b40114f07431352c2bbb7546a6b02b7b73e9b4

    SHA512

    99c5d72d033e015c83811e7f6a622eded1ae90dfcf36d99894c5d6ce8174143adaea1d641c26b3a11cc3ad3d98e3b2ac7af975fb28e239a1dc01f1e1a0b42752

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b3a8ca72304121fb67c56b83cf0a056

    SHA1

    84954965728245c649155b85eebad9373407dbfd

    SHA256

    b9c53e2015533cf7500fcde6bf6da127cea71f330ad1bcfee659234b21d920c4

    SHA512

    1847e83922856ef235e0f529632b299667cd6aefcc40454dd977e0be1ec14078fc80931bdd367227ff4b7bd2507ed5098f22b9b4fc26dc26dd01cbe3397954cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd657e44a92f5dfec54fbc8f5e6eb542

    SHA1

    34cc51a24166d07319100b4e3cfbe14b5fec441e

    SHA256

    eed898ff77e3c752611bc10c4aad78f619b0f6dfda089e9a5eedf9fa96d5352f

    SHA512

    37a40d750e444f4e36c261f8ee733996f224ae6d60f3bce5d6948388d4b98e0460f1a5a7bb7b761be2b1b9c91d0658c916c9991163aa93b7318af0d5dda6afd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2f219e93e149be8d39df1f996c990a94

    SHA1

    5d83d1e8046452d9c87416a6186b08b5d72f4401

    SHA256

    24fc36b07c22ada1bc188a34b36577ce77e0f287f4964cd9d0df4ac5e1df2b37

    SHA512

    a12f578564ef88dd4585934c83f80b25ca7cfbef4363c1d7e29f5f5e91d2d38772fac9cfb5663271c680a81618bd1b27dc50fb9b41f300f738f516c35fe78a2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5255c7e152fbb53ad0fe2abcd8d5dcfa

    SHA1

    c51c996db52069d2145d21d424ca5dd290aaf1de

    SHA256

    0aa7e91bddf0ae5608bc41cab74095de38a96f90e719f205b0fb2b586d6d6308

    SHA512

    82c75d95871d82cb910c29d38aae5d748474ee08c564c38b780068f177c1eee27134cab89189ab25a642fe905f91e4bdfb733c659f0dfa91edbcd0d1041f7961

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16c8597e2cdaf178c8f397b2fd67164b

    SHA1

    c7893c34e9c9d6071e2c9ebed06bc607abf28b65

    SHA256

    3492cce31bf7516ea795856cee26787945d023f5ab292342248012b7022047db

    SHA512

    0496ddc3b732cb1d6df313c8a2706d23e7b37ffa80fb2dae1844286999078a0866a6947550190c2589713508e6303c32757ab39991c7c3f82f5b1a6cb5d454f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11e0b5b4f46891fbb9d2fe8d5c737dbf

    SHA1

    e51cad0d54b9cf06fa5101ca3515b5107c656988

    SHA256

    820356125d7f990a0ad4b117e1d764ff1af1d7ed9f16f6d4f8a18d5ee97eebb1

    SHA512

    93115e1375b91a08b80fb06d200d9389a20d99e2c5d132e0a2ebbaeabf92cb0f5dc9b8b06ee62c5b34b004a253bb77d305c44c006bcb08d04c5e7c84c1d0e320

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a686c19b3debc47692cf3c726646a48c

    SHA1

    5d77b6b4832540aa21ff1787b9d3d2183495cb32

    SHA256

    4123bbb107958f2bd8b7fb18b4002578696da213090f8e517873a4e7ba13969d

    SHA512

    e8f8756efb6ea1c220d753844f685a965ff1d4b3783cabf5765e155f2ecd32cc80b0da5f3fc41ad7dda41ef466a10dadb5eabc08241576bb21728d045a73a962

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b85d4f69f5bc198c4bb29eb529b84b8a

    SHA1

    240c016942fd97327d13f13546a07ff575ed47bc

    SHA256

    c951d882c273c6296344bb4f26b77d2e26379a9526366d58e6fd5eafbfd681f9

    SHA512

    131919ad0e4f99dfa61a0706f80fcd1ba6d08e680476d07ab1154da4342ecde48ac1b0d05f511a7aea6dc18ac5351b0101e705cbde558ea045365a3db94c38cd

  • C:\Users\Admin\AppData\Local\Temp\Cab3796.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3898.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a