Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13/05/2024, 10:04

General

  • Target

    3ef26677726a4298e7816b9dfd7ea2c1_JaffaCakes118.html

  • Size

    178KB

  • MD5

    3ef26677726a4298e7816b9dfd7ea2c1

  • SHA1

    3421fa37dcc31c5e6630e26973cd9ef359f7b70d

  • SHA256

    ba97aa5ceb816cf1ab289c757065bede9c3b4a81f4980421aad323addf077ffe

  • SHA512

    45ce68cabf9f8a6bb249d53f55872a3ed89026a549fb312c1f8e5e9492a0de501e9bce11d018da2a86196df884f5cbcac717e88032a98f5aba6b4b8bd028b5c7

  • SSDEEP

    1536:EbA6Besou5Lu0sN+NOKAZEB+AJa00U0lGqpD+3OdrGNEMhj8ZxbijpjU9hezrve7:MA6Beso8LdsaAoB3Odr82ezrveS+2h2t

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3ef26677726a4298e7816b9dfd7ea2c1_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2992
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2992 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:3040

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac145d17b645745c82b8a1509da639b3

    SHA1

    35a6abd180b430c41bdc025490c8167fa552faf9

    SHA256

    27a6221fdd7f5d0fd4bdf0c95c2a5caf4e72380f0fc340339e60a9190b9338aa

    SHA512

    4e78d7ed2c54ea4e55e42249783963559fa8b4851227465acc1522db87db6a0903e530ab94402fa81313f10563bd2cc92798b3c16e18dbb662a6350f4045fbca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4bb96dd4f7e1418471907c2d54f57dee

    SHA1

    c33075567de0c1e81ed79672b2f9b6130f160b7f

    SHA256

    e79444795752e9d38d9b54d53e54ad6b45730dbc705908e4120ed04871a251a3

    SHA512

    a9c35e84f37640975b82c91ae4d1e25593ba40eaa8580d463fa63641084cb4fb7633224c67441c0f5a04447889c951c64a078f5798c2d777ae4b2c495dfca9d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3abda21f50b2060578d6c8a0a4f98f21

    SHA1

    329b9aa88f503f7377ae60639c0b85002e31e8d8

    SHA256

    39d79337838f6c962e9190614e1fff9fbfb28a96ff72f0157f8583e32d023139

    SHA512

    8b3fb9b61f779e9ed508787619a06ca1031773d3418225938b11344f65e4ac91f25413d95aed3873b9dc486a20ff51772b3f9cab4450cab9f3adf69ac84e1b71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f456f2d3dde218aa9e1ec7485034171c

    SHA1

    39af0e1d3699dcc1e224843a226cc9ecc4f4c5d7

    SHA256

    b3c25224ac038d65ed64c46532111bf63510cb4032ca7481e1d5e3c8742ca51e

    SHA512

    4fd0c24ea8b2d78eb5f2dd67c1d5fd232a06a60aea53bd9780aef6bbe3ed9041f1803ef7941eb6017ead18e4e529a5af38b66446c8bf2c7ae2360bd229eef21f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a7fef8a4cea1b269200157a85554722

    SHA1

    347d538a395bb9a7c15d38f4c182f47ce941df46

    SHA256

    2d55f0214535211d6c8edc40019d3905950d90f8eb28b01d01f47ab28a75492f

    SHA512

    16b899f3759b1f57ef92b22f8a16c072471c5a1f3c961cee6c1a287d213ad6899571c6d776087ff9ecb4dd71b69fe01546746ab174e3969806fff5b7a711358d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f206d36351827c192baaf22c65d6193a

    SHA1

    184e1bd1a07c25c557c651a937128740a59355ba

    SHA256

    7514e4a94d7d079bbbf2aac9ee51331c4ab33e1174bc68b592384901180015c2

    SHA512

    910aed6f5f31622e80f2ebfca55290e01cabfbfea241bc933e889ce22caf861650b3b6c784e7816f6d548f487a55b383168e2ad56678c59807819aa729fdcb38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a72abae3f614cd113160e33253c06405

    SHA1

    f36c566dc5e7f6d45827347ad6baf632880bf0c3

    SHA256

    94dbd857be2e622697911a12dcc06e9e79b39fc8e99e093c783e4f20948579ce

    SHA512

    975e54aad2f9a194c98af205f98500d33e8de3ba23111676e2d25c6578eb11bf615fdb417b99c2ca5567264922447062586a6513bc6f2c6ebe9de684eb36020a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c609bc2a923446985f016c996bae0207

    SHA1

    8680e627da7681ad29acca1368d625c488194e99

    SHA256

    b2028558e07abfcf48aa550b50e04059e1b1e96d4de1c8e4a871b83d678e1e37

    SHA512

    2231683262a978c64ee1c25ab283affb8865f2552eb67ef93dc6519d9ac64a70f4e21eaede4386fa13dfaeeef6f0aef88dbd519ddb74e86a025e50d50fff75c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3db1ec1232ca04a71e828d52a9571c0

    SHA1

    72e38b1dc4eb2fb6a203e2221118649d89be1822

    SHA256

    ef416d488a2b3134b649ed3391702b3c1d936296f27dde51a02ebfde9d296293

    SHA512

    da2bbec088ae71fb1e1af03e9b53526bda7e775ec5eda649b1212fbfe3eab17246c26354815e70cf2a893b5460c318032ef080e611aa1a6429ab7cca18e1b171

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ff03864f17117757f2b54fd269a7225

    SHA1

    cea82f6e4578a1d0e18e8bdfc8e4af94680ed1d6

    SHA256

    aebfb6a994046a5d8603a85c91637bf8ae2728d9ee9daba59a59696bc60c4e82

    SHA512

    8df42209c8caeb9ce4ec3fff2b2046cc810dc268bcfe90d04a285ea13f3cc5080dd1da772a22367fa2e48bd77d81a6d5c532dc370df1c599b68e3e28daa898be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6bc7605dfe2500b82e64790a2c6eed15

    SHA1

    592691d1e138de8a5fef8d524a1b8ba44f772e1b

    SHA256

    a3d82183639d772058a64ac5e4c0201d208ff2acaece8461d1e739f8866cc53e

    SHA512

    4ddfff8a88fb9290ae8c97ab225c6a39804cc10c4338621352d7cd8ce63f2c40a3c07cf35f26b356331b5ec925b582a5b57b1fac44edaeb64c2b1326b951dcf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4159c1af33838531eb7813b9cc5fba38

    SHA1

    c1721ba625ded69618aeb52285dc3a52d43c5eb7

    SHA256

    bc2d121813356e047b1e471c755f2e804a8d623506099a0bf16f88f16556e961

    SHA512

    c595834eb78636590ea10ce8d4f2e761b2ad2b7e9f49176abd0866d862f1e4abadfd74ec4c2e4814b778c5a358217c97d39b26c284420a344bbf538242b7ca9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e59a1c7656d6d93c9a2333e1c205cfe

    SHA1

    038a7aaeb6208fdb3d3c2aaecf936d97da7f2a83

    SHA256

    49f90c68dcfffc77c497ec9d2b73c7f86e6e61e4c95cc8b731f7bcf8d3c8fa56

    SHA512

    0a54ddd04942cbd3a92a071c93b33416d9766b9b32275bcdd6e3267700b754af3d8643cca95155802d840ee131eabc46fcf40af97418703ea41389216be417db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2473a71f5e3af8fb5e3eeb1aca81a3d3

    SHA1

    d5f3b372281b4a1248c91492727d5fb777a2d451

    SHA256

    9d84187ed9409f0945ce805e71bc957b6828d3145929dad0e0f2111485276301

    SHA512

    bcfb1874122024617b8b49ae406f564829d260ca0ca20cc9e32b7710c95085f077e3ebdae4a06f653ca8f11ced30aa42e259afef73c12e32fb2ac5b6486e600b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c27680ebb26ded358e53c184ce487492

    SHA1

    792ddb45f30772213fc4c6e59644da4080b7f47e

    SHA256

    87f96eab6bf3714b0afc2d6ee0c861ed95a54d3722de81fcce9c922a0e34f700

    SHA512

    04bb55a896627a083f4d92b0ab7f1c7ec376ee0666c84d459495711c5d557d480efe9444cd6321c9a17620d4f05288169ca1a3580e63ee3bbd912b94d65cc100

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    81800837649e6e672ae8ddb2aae68dcc

    SHA1

    b2a02e92b81028c8db41096777249d1f0e758b38

    SHA256

    5158e4d12508adbcc21424fefccb8875cbe25328d83be3162f2e3a8ad4830327

    SHA512

    86801dbbc870c92facb98f1874447deaf9a38c97ce63fb731d7c582ac5a48d0a79a42de382c55d9202c89d06a18c910691907bc93d8c8f68cac51de2ba73cff5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    917d43c112eb3ae8bba21843fd6de1d1

    SHA1

    e690fcb2ad3caad67cdf7b801c7f623efd67517a

    SHA256

    f0a2569da889508a336f6bddf040d268969ed8471d7efaf6b950b9a1170d9919

    SHA512

    5847f0d4fba4e5a070e38ac1642268fe9e8827db0d8aa350939fb3aaba32111af7e94fab7399e6c9c73b3f61421cd47394475eae224664db1a3331b01b2a829f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    027618a69d95783c0e8529c7c9082829

    SHA1

    6bacf99d0ca0c4607953d0caa4c6bb7d721f6b04

    SHA256

    8b81deb936dd4b8007ba318ac2683cefab8fafd383e3f125d8070fa7afd84ebc

    SHA512

    394494e39eeb768522c1ef869b81577312a5b95af44cb7306fe67b70c55c392c7a1962f1712e5ff161e7f8927a607371bc75d7a0388945ebc867af2ecc37079b

  • C:\Users\Admin\AppData\Local\Temp\Cab1660.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1751.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a