Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13/05/2024, 08:06

General

  • Target

    3e816287a603d687071bcfd78879cff2_JaffaCakes118.html

  • Size

    30KB

  • MD5

    3e816287a603d687071bcfd78879cff2

  • SHA1

    f9dc8713dcc9b692705f8096a5be93672ec4eab0

  • SHA256

    c33de072d820c1cca0e6c1dc908c1e1484b21c1f99c29ec12e0e8e3c62b5e962

  • SHA512

    9c2cf6b6847af054f7ebf10ecef7119bf5eb4810b47a4cdb9025efcfed4e69b5937cfc5b6b9eee3b132a04a21b9ab1185f27dd8de24a5e095e80615a3e921fed

  • SSDEEP

    192:uWPZb5nojWZnQjxn5Q/WnQie9NntiInQOkEntmMnQTbn5nQLXCgA+9EUkcwqHAaj:IQ/rHR5NlnK0

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3e816287a603d687071bcfd78879cff2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2164
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2164 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2528

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2403f1ea2434135e031fe2835036272b

    SHA1

    63713b098c0d8f349e2bd93050ccc2303a966b79

    SHA256

    e2eccb21f0a95c3863a5d8aab41f7a1592b142e671bf3c526f350fa01afdd68f

    SHA512

    3c0027818ceaf72d73c37c3838f7440172b4ccf91d13a31ca90d9a17edc77fae6d6c270c4c30cfee3f66865a9b974580c1af1ced4531732498f83b445ad896a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bddb3b35daa368c6eefe00825e318974

    SHA1

    c581985dde3d7fef9e2adb6040b3bb1dcb1a74ac

    SHA256

    16d68b2e8a7495c15a6f22437ddb07ddc4863a093d791fa4139184d0741b9a78

    SHA512

    632cdc5b2ba85002a4b881b9212c6ac76ecc93602652d05c58b78d82c307adba0dca8c0ad93755c0e607c4a08c3940d7736a7de350b9fbcdc60149b1336beb35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c5972826f4dcc7c2d7802d0273fc5519

    SHA1

    582767205d203981701f1050eab01f963a14d72b

    SHA256

    7da48a1ed1fdea54099de172e61ce55cea3e7382a10d672fbffc72e0c3088f41

    SHA512

    7ca8892d9d82c7c2b5d5938fc0d6e47996f7f1d9ffa37cddb6a5dead8f86d601c33caae0adc027b80b860a8cb4d8c4ac002832d1f0ecf06ae93f956bc4a1d9ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    005f3e1a3d53b766150c508a8a8ac412

    SHA1

    82ba57241703ac30577ea4fc560f8df8f1bc846e

    SHA256

    04895ec48d50c46e3d4182cb454923d10cdcc20dbf0d5dbbb73924897c1aa074

    SHA512

    7f8f9079bf5b24f63b16b46f41e10d157dcb1bbd44395f2465e5b16bb79c408f0a445b7f6f60aeb3414062cc8ec53b919734bc3bf333918d3e5e22a7c12c6ee1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    285fc61c0a60ed5c7fe36a98f3cf47df

    SHA1

    4bdc2023bf1888208b252818e2adb588b7377856

    SHA256

    f466cbe756d50d972c105bfc4d46217ecbcf8a6b9e676d9a14374c0cf13592e7

    SHA512

    259d0dbb9938f5f43efed844426693f3975fae4a7d60b4456707977f1e0967b37857ebc27eb4696b831f24ebe1a1922dbf238d68ac12b5fc53dd1b9ca4c8fd85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    012b3b900378e4a444400ce0dd03b3d5

    SHA1

    63efc7c9191df86d39aae73b121913a5a69dbe95

    SHA256

    4aa171c2947bdfbcf524fd94201a59964d012cd9d33ce12af37e0939b2fe73fb

    SHA512

    30f6235c1924799e847b629378de9e1586b79a815ef75d6798d2221a68e2a89c2e8fcaa31349e4f3b6e906ab3b104e7a61af3a68cfa967d26c44d350115bcad4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc39bd3b57eb2741af3320281e2fd560

    SHA1

    97ba061df0a129d6b0766d8a3dac4b8e1f0d31fa

    SHA256

    f3c6ea73baf26061eccf626dcf6c85041909193f6155cd5beb5737fb6b1d46c3

    SHA512

    6cb77fe9c53010db1edc2da96209504b41a9959b4f61535ab74e2af4395c2bb57992089bdb2c997bfef8c9fb08124da9c6974f3690de57de8cfcce13aeb8ba31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39f028a11a1cc345c87fcc835e75e7da

    SHA1

    3c220f7656a0b2ed0f56a7bbd028bd78e8d12d80

    SHA256

    7d6954c2e96d4af4aa790b1224c47bc233cc8ea0dab60bd70970e1ec4b1d4a5a

    SHA512

    a68a0526934e8426ec32ccb631d7dd6fac13793d2e70185e5dd046e0e7deaf78db7525b395cec37dbc67ba4e685bc504c0425ee770d3906422773c1093fbf64b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00f3874c1031625463376e415b4d1254

    SHA1

    ecf426a451c9fc1a5ace456bbdbd68083ae3123e

    SHA256

    f79557b91e36cee7f439f3a3f7abd366d245dcbda79fd97e5143246d186dbfe2

    SHA512

    154181513d11f2a836e7fab5af9f1c154935876352f4ffe24b1b0da628106cc3c2b2a55b5a318fcbb956887911efa4fb1a346a22b188e1b12683368a25685c49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cabfe629cf944b51c19787e3c33a2373

    SHA1

    a72c1779db14d7f1ff9840aea68813b1c2682b2e

    SHA256

    00311d680c4c955e8484661e9f4867c14f3751512eeb780283d2bde7e5832c32

    SHA512

    16b6e7f71f88635ede85511067a8b849709dea5b236cb9e0e79efa4329277b6bbf8ff2e49f4b16dd8bb325474f937ce24a31bce2efb112cc9f478b7048684bc2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5881249f280d67c87f48b4b30b18988

    SHA1

    84b08ef04c05e5ae46c82aa0be6f75b3287dbb1c

    SHA256

    d3ce51b4cb8bfd650fe30880589abbb680434e39f52e137ca95196bf34842ea6

    SHA512

    3ac62bd9849d4625d4497192b7ddd20c478751235629579bca1ef26988b8616288fc1e619a2e1d2ac75bffa8fcf46c7a8f20d22efca854eef26bef37f59b090f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4bc96e238ee63162422c039ad4c14ad5

    SHA1

    aaff5a78d75d3c8f000adb41d078c946f8b4c173

    SHA256

    ad2bce55a82ad28a107408d6c10f4bb7317dcedc6d8acf89649a8de57fc90baa

    SHA512

    f9088f8db431991851c7af70bea48c00316a9f9173996d0c2c586afeaaa6aaed9e6157cb4099388b5c83a47eafef3c85df9f33f4f6b39aedff0de510d6b7deda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b22937b582c82fb35d055ff5ea74c1f

    SHA1

    0fdaef1d74a16b833f0056eb9f9f5dea8006aec3

    SHA256

    997aa47eab46834620307da7751d5aa97d077bc71d200cc7ad12fa90a912fdc5

    SHA512

    e884eca9ac3b90d226044d9631587c21c407b7646bc04b4d1adf7bc059ea6d70500dc562653a9d225102d4681bb9c3c45277712041cdeee78e4ef35109739305

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    47d2f32ced191dd77c0d29c2de1beecd

    SHA1

    56d349f9cb984f3f0d741730fbff20815d9e9495

    SHA256

    3c17ee02213bdad5957368cb70a11b467784ee32a3084d516d745da05dd5aeab

    SHA512

    bfb8658c9ac07d15be5dc71bcedf1bc99b6033618b232e6885a6b39e0606cee56463faf8f56349d1ed4a500f81496b486f895d643f221815cc1d46c051d9fa5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d39f69eed0b1a087d9c74138623cc0c9

    SHA1

    bdc8d03fe91ec65ed95a68a6a5232b544fac337f

    SHA256

    8505aff01cdf70832b60510296da636d6181cab6e094c480cbc80f6f4c6821ef

    SHA512

    687f80b2ed7f218b5674f7c20c392fe2dd6c016d5893eabd3b76d90d1e598eb07d394ac76b6560e8124e8ae25b9165271cb27f195ce371f025b2dd3dd2e7ae97

  • C:\Users\Admin\AppData\Local\Temp\Cab3F25.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4055.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a