Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    13/05/2024, 06:27

General

  • Target

    3e2351206d74efd85b62004c8832ee50_JaffaCakes118.html

  • Size

    29KB

  • MD5

    3e2351206d74efd85b62004c8832ee50

  • SHA1

    8ebe807fa7ddf721fe6218315ecfa1214a83deed

  • SHA256

    4f336f28bf9141d8dd01c106fb8efa7dd9446ff2621b5d25ecde7ff148c3854e

  • SHA512

    6d39374acb41b9a1f68ca0584bb4338c4823663f7f6ed9cc1245279cd3db4ba77df7b08876fca35f835cfdd6425a0a21ec30b11be2d68e19b63c93982e159624

  • SSDEEP

    768:yi7PwvwBeFit9E/fEb+HXR4HPOwiQHtQz/cLe:yi7PpB3t9E/sb+HXR4vBiQHtQz/

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3e2351206d74efd85b62004c8832ee50_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1688
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1688 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2468

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45d47379f0343dea3796e47fed840082

    SHA1

    d2cddccc520f44e7c69c20934c7d11031a302e41

    SHA256

    30f8cac1284047107bc32ff3b3dd29186d263ae82e5978920bea63712fd0d086

    SHA512

    6e8d6559b8be389d2843324844c22bfd0be0254394b4c3a4f3c5cddea7203018ea7c493411f739d00e03cf19cba477b7666ccc042ec842cc14cf3d8422bdfb79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c646935172f1df81356d5925eec16d65

    SHA1

    b28a3d23a6f39b0ed97d387ca2f73852c06a9299

    SHA256

    ab46232d8739092290b6439fab4defbd57bb23d3e74ad4a8b4d90600acd5a3e8

    SHA512

    aacd9c90be01563b6b4170b25484b14266619430a828fd1a07a111dcc426ac65ca52ee67146e940570360eac8ab5fb4104c1ba5b3b6349952a6fd7169170f521

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c02f44b24169618ac39acf00069e329

    SHA1

    b980e6d7324c467327c3b654ab1c2da0e2c09091

    SHA256

    74a8d5b95362131cd0d33925cdd044eca159797ae8101377e1443df8abe392b9

    SHA512

    cd8f4080266f93bb0bc852d469be790bcb1d4e7185c98a0ddb991a6e9cfe0dfe198ab80f1d08bec130d5bdaa84c209ee34e8fea3c2f5af5c06f8fc176d504979

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9d9c8665a593b8cac267ef21bcf0a58

    SHA1

    59590229e7d361b3cfadcf31f160c70722b5ccdd

    SHA256

    c20ce95390fc27da2ac71a51f2f5ac4a2f723ebd5745355c9999bdb5bf963608

    SHA512

    a990f8110e3d8bb23d4c8ddd91d245be2b22bb663df3bf4ed3a8d2646fe88ee9414bf7d0081f3784c6d9fc6be6b7573c5330798d63f44d67c517da9867cfc7ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4314a606b260043de00fabaa4a564457

    SHA1

    b54f4fc78dd1f6fb243907becf231d932004cc3f

    SHA256

    ac2ee8682a60b1623a9f64bea1d2e684981036c9439fac72b771d48cff00545e

    SHA512

    6a5dcf5776cbaeac11b45a4cb5cfdf8654cda3af3e1443f0bef38d9617215dc9443a1be7a6ff6eb14bc04f2a63dad18feb53aa8829f65901daef6236c9008d9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d23cedb254f3d008f87b65da0ae85e02

    SHA1

    ae344626a709f9388a96e6bd96ecc7d39ac8713c

    SHA256

    95915a8e82cb83116aa755a1a842b4082c5f5bb98001999c431ceabb3b273ea4

    SHA512

    f9dd3d3dcb88d3fa69504b9e93f573284179973efacc6c6f148d44cc097d72481223d813054b7684223fc71bedd4f328bc3679d74c4d1c8b6d647da60df0c3c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34d0323a8cf1f592c93067806fe47a59

    SHA1

    418cf4dabd7e714af19a113fd461e975359a3c09

    SHA256

    5db1c93aba77ede5b2b7afb194180a802da89869cb396571279aae77a72321d3

    SHA512

    6c6265b3766a2641d5f83d31a122bc4e5bc9a71bb1ad8bc8f1e1434e000f6439cb89b2c3b9e97ac8819796ee9c3897ce7c07116a9537f2b8550c3ebbfb17a924

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5285bdf8055f82549f31ff55afb6e0ad

    SHA1

    984437d63551d04f3fe6d4f3b36e4d3973623a61

    SHA256

    239f5018331948d4c45093ae313cde28ad5f43dc1d06af1c8896117fbdbcd067

    SHA512

    9304c53bc47a96cc22ac1afdbf70874e2a9d051fed9f3c4ae33ceaaf3b6b95d85b4c09a72fe664dfe7ae6e9bd88b0fbeffd8f35ebaa60a58dc75f13988c9f58c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e58744adf932486d8fc7f580d8d6602

    SHA1

    99fec9f3d2ec15ad350c8abed720d40c8abd87f4

    SHA256

    d3d47f21d69410d2dcace6ae4c2b257ff2d702e47d7e99225febdc78657d4060

    SHA512

    169c0eb012f8f47a5bbee561540732fbb78cb2200775619d22348aa6140db123abce8e1ea37b4801b3f38ef9f70e31355ee137ac0199ec4b8e18df3f68287cbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71a838728eae9fd5a1b576f412aae6b9

    SHA1

    4eab6ad3de540fd6e3f0551f09dd4cb986a9f0e9

    SHA256

    95e1d8836bbf6a2966f71a307e40b04614cd0f2dd6dcacd6edd5fc2ba1d93c54

    SHA512

    92747d29d9e1afe9d591417432a2c696b1af9146cd5f3db5b0d348ed738b2459bab69ec65c943d28b8dee94866a1c04f2f3f8f9486d31e7f3ce91405f532486a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c14d949e4fabe0e8f1d9676af3a96419

    SHA1

    caa423ddd67d1f368481d460e0db026b9d692e01

    SHA256

    7d81b7a3ac5b11890c6e038b2086782f622988157d362250c6b15e54f7c49dfd

    SHA512

    42ebc942a4ba3131c7ef5a68f1b55ac7dc855bb1fcabf3875e28fd8eb6c0c7cb1b8074f7fd697a3e96d0f6879b2de6857c4642b2062f7a327e2ef7ec46da4552

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e49a309c7df3970a28025cadb5a490df

    SHA1

    e8478a8f1969c50fe29b9c0cdd64afcfa515d278

    SHA256

    862b226365cbad42cbd0a2245168d09ee82602fce4de4040f6bbff7a42b400bd

    SHA512

    fb9f2e88e449517c9f7a7cbfb6fee65a6d9010e421f4da6f10de98678c27e6841857f29e21f666c4068b34f7829a455ba9c9f861f703f975f96173ebb8340201

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99f00c34cbd74644ef9a0536a001d114

    SHA1

    61b7fa3bdf7e3a619db6e6523b8bbb8b421ba535

    SHA256

    6c55e17a53566db495cc1653162a344915e1d21e1c5137b8971b015c7642f5dd

    SHA512

    fd717558c61a9a75e8203032ba2edfd2aedbef3db1e5f7908efd4d9bb36996abbe71165df04d6fd70f5a6020366e86b724ba1851e4796a557be7c3825d1f136a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3851db4a9820d6c917454931ef7c83ef

    SHA1

    b633d2b121672b65ebd8ccda9e9f6ebc1cb58d22

    SHA256

    53100d923b953250b62e6075f0198210470930a23f3abe52c95c713618dbefee

    SHA512

    1c61a6a0b94aedc0e58a58a81928c93d8fb9dd958b3729b2cc15ebc8ff9eb16cf321184842c75d730b9b20bb338974e6671f6e90ce8b20bf16a3c7c90f78d38d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a0b13dfa3eb2836a4537658560e69f1

    SHA1

    cc22ccbf1838648bfd27689f92eaa0a962e61cc2

    SHA256

    6077c4bb8149ebec88465d1042be1b9e50e82562d972e767dc3e18893aa39ef7

    SHA512

    3009c0226cb6647677c848d86a53382c31f282784391b0637c46ff8869c6445002a157d10a9942e3a43437ce3b76c4932ff3010dfd7f82a14bc0d1bce125e7f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69cdc82fe07ba89b088ad1576dd50f92

    SHA1

    326f7a296b362c4ed9565034c741ace73fb2c07a

    SHA256

    73983f7f6ac4a7eadecafae73cd00ae3b86e6f300a5accd14f04d982924b9331

    SHA512

    ed9ba13e37b924354fa5ee1652e87f26d84fff14424061767a222490fdc1a323b4269f9eb1e34e5ccfda8ff2e438a2b644c82f91d63ef53324cdf5e2d6fe19bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0948c0d71ba4f1c1fd6a870f4084649a

    SHA1

    9f78553532f03ba152b1bd0409fe7a55eedf761f

    SHA256

    ecd404427365051448e1e653b11c0ab1d8361afd13875b363cf6fe8cfc0128ce

    SHA512

    606c94f03ac5114015b7d33a636415cfb97cd4eac33e8cefc2fc2320bedbd0f203e73f98cd40f739f2ba9aabe31bc8443414741623ed4050bbe20cc112083f79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38c36f0f6e897fe4b23f018f49685286

    SHA1

    f20e5639819afdb598fc630f9452d3ec9c4efcdf

    SHA256

    0e0578d3cb38da2c31c88fd0f24187dbeae5d9b291ab3603674d9ab34a90c24f

    SHA512

    6ebb8f6fc88e9d685b04f0d28d6c9156ade938ff9b56d7c49914f6b8a3fd165d5a3816b0606ef2d3639407df3c72a77d478f9119d08143b6b35ee09f1dc7b66c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c97058f1b5abcda64a2188f725a6a9c1

    SHA1

    f4156493d39e338654684ad27496aac539d13a88

    SHA256

    f49678df9dca5ebbc114bbb55e1807b1ca59f2774b2225d37847a2d0aabc8cb8

    SHA512

    51bd3ebbcebb472080921d9e4cdb2a15cfb4552e0dff6a8c7d5da4133107e19c1db67b996fc99384b30259d42ffd6ca81462047b28cf8c1e83053b297c4be0b3

  • C:\Users\Admin\AppData\Local\Temp\Cab4A5C.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar4ABC.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a