Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    13/05/2024, 12:52

General

  • Target

    3f9233811fcd0d97f98b9f806f9cd1b8_JaffaCakes118.html

  • Size

    19KB

  • MD5

    3f9233811fcd0d97f98b9f806f9cd1b8

  • SHA1

    32ac941eb9f4a4c85edab9fd92f960e4af8362f7

  • SHA256

    28cc4177e6a118952de557bdf0ac571b011826039db4751b9ccf3f5522c1a8d1

  • SHA512

    c293a949ceb726e3890acb07e60e1433b57bf28960b193babdc0ebb5ee2db509aaaa80340432c67066cefc45306100f192e0f9b719e0b1d01137d631c20f29b8

  • SSDEEP

    384:ziNK8vLWmBVBD8caQ3RO65WcmWsXucfIk99heN2zVc9B0o:zidLWugct3o6/mAOIk9SNIqB0o

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3f9233811fcd0d97f98b9f806f9cd1b8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2388
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2388 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2756

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a3ec614336a41603125177f1e98d739

    SHA1

    78c459267e58b05d23cbceabceda20db1d33995a

    SHA256

    42dcb72b01483ff665235a5169b011287f70523e02e0662153614c4c2170f829

    SHA512

    c16fd388658be66da8a6471ce28040a36796f0d3e7bd924af257fe57bb29f670c28de53c9890a05712b19d77f90f1435e6ad5d6933b7d8db18d8c94e23a10fdc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a0590b4db95d8711f0c3cf6669949c9e

    SHA1

    8d36cb79caf202a41fb966618ba4ce229086abfd

    SHA256

    822ba163e0618574337dc8a81b7dc4ae2dcbbd127e521bf1a2953f6741371120

    SHA512

    6605390e4d8a59d20d766f28dbfb950a1518b790eea8ced9f1648fe28bd37c79242b5d11d8a26145c1f8216d0b3057204229d995bf79dc98504b8718610b1b33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    feb3e2bfe324d977e05cebfef1f4eac3

    SHA1

    b8edf511efdab4f769d8454b4944e3a059ec1745

    SHA256

    b0318b6a1c0ba328a3fcb2fcc9bcc6cfd00689c03e74d0a33a5f7412cbda18bd

    SHA512

    476e9cdee69f0626792d8894dd58d9012987cb0260b6a82641888113199cf2554faf3130f884af3bdde5be5ec0619d66d0f70ab2ecf710cb212f5be6c038bb8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c8b311e08ed34cd010cab69395f34ae

    SHA1

    1910a497e65c48e73483fb20769a6d52e1811909

    SHA256

    2f6973f80880d9e040e8f6c523e1bbd4d0bd79647e13dc48b559bccacc96d112

    SHA512

    9bf81a57f6181a8ed3a39610b833415ac77392a9775b2db4e65c0d5093b3b9c87031b95d58f5e9881bef1ef88906f8ec4885cdb7d68d2f5d366b70560f60d703

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc283e5fd0ac252bb029eaf5e85231fe

    SHA1

    9f018e0c2335952134e08a01edd30e87e95abfe6

    SHA256

    6063c317b28fd6c21434db1e540fa9e833b385b126512611409f7f000b79f03c

    SHA512

    9421e217c520bbe69a1dfffc71a8a1ac8044691480eee413e12019869a00d385d72dcfd1f8cd635f6c4e72d4d85ac61393d56f43938e80de10de1e8491a6cb77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c9e86414165decef75831fa985465e1

    SHA1

    5f8d609926de867a56ab3e73e1d6c1a366811a71

    SHA256

    41a706419a35ff5c5318eaafbd3a745a7be60c021febea989daa10627cc92a5f

    SHA512

    556421ac4007952344947117b3dabf8df3570c541be942ef1b0db755a56c2c57cb25fde2b1c1fda4de8bf30ec753f73ff05351c635325718eb68ec936c143bf4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f8d3cdea49b2fb891fc3430a0f66ce9

    SHA1

    9a23be1a8b52741fdb94b9eac15cd14e957024f2

    SHA256

    9568b2d49cd453dcc3eb101556cd8809a281a4c9f0998cdb5ab2e88833b457ec

    SHA512

    0e4848cc6d216c8acc0ff2b907760880e22b238ffb979d531c22b4734bf6ca17543cfe7f84ee74a407376915c931ed3651750923f247382e06eea031ba47429e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fee5001e53a1070b13ff29bf81983d00

    SHA1

    863daf016adcd728540adef9be5205c30100ba0c

    SHA256

    af69123e05527dc80ea693394387b442bcd551f75db74627dc07accb925694cd

    SHA512

    85e0334b6f43f9dececec701605838633da002bae266af3d0a031bb48c713db66491db31e655f11d5759bf7568da87b0d3875b0708d95d85c541ee22b7ab26ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd931a48173b9ff1f30615ed18862425

    SHA1

    5048d50d1d16518355f780a03e468240613662c4

    SHA256

    3b4ae65ae46017ad90e6432a461e6f729b3119dc73840b95cfa3436d2236bcd2

    SHA512

    605aeadfe74c5af22849c90425bd1eba4e910ea5c6ded8121fc339aadae61a2fdd3713242f67738e062d5812256f86a5ed620c8984ed89466466c87eb74f2dca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2111b2646e4b8a97c4fd56bcae4856e6

    SHA1

    d677602c47aa116e31c2214e444d7251a4eed404

    SHA256

    f7973e6471b91dd505bd767f5ee3ab3fc828142a8b722b7e635ce4476749df63

    SHA512

    61b609376bcfd4956a27b7fb6bdfdcac63e3a364ce00ddc7d6abd0992da7de03b119eb621ac0ad2bb91278012f28ccd0b44c28bd592172356fdc58d37acea4c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43e58a828c24aa7d3db610d2f8dd6c53

    SHA1

    d886f62ac71bfec1d0f55227b3e1520e1a091cfe

    SHA256

    155bfa480142003dedeeb5b0e5be8e00970fcbd66d3b7c72b036a7b0b0f89620

    SHA512

    a18ecf96bc754dd3093c9604c71a4cd9d5b0607ad8b2cc94e5e1aaa4a06ecd6fe8588720fddc28e3c5acd61aec86c2f0a422c38b73cf0e7c25883f8f8d91c23b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11303cfe7ed6caa0ba7564135bb0b33b

    SHA1

    f5b22cc5e167d6d23fac432b695f9a82985a48e8

    SHA256

    0fd072d7356fb260ec51ba9e532e7f4472a3890a177da0e75b188be4788c8bb1

    SHA512

    dd429ef7ff68628a1b35fea913582099024c20ff6afd46325fbf8fd9e99ff2bbd9023d67bf6ccc97f44da4ce7cecbc445ada55a99aa4c589354f40e7bfbd5ab3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fc6506b8949a574e9960384654fc055

    SHA1

    c903ded7ec0f2d774ad3256e7acf8295d115e685

    SHA256

    754319956afc8e4748955874787a78b4a2d548720439284f9d3fd96451b225a5

    SHA512

    7b65949e5e0b3b108d8f7333a4372357ed207dc3869b565fcb8e92e5171d146ed219b6ee996641f612002839e3384ae27b5ff159af2bfcbcf4d6c5c16bfb9346

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2d1ebca1e41028c598f9b2d16b53197

    SHA1

    5edd1e08a0b90e3c355893e25e30d5bb9c897806

    SHA256

    17391f7fe61295007bff59f9776cb54a3025fc34ff03d64197dbb879a5ced75c

    SHA512

    7cd4924e366d571554b58af8999a6f327f9e95e25663be79adebb0ccda39dba9341b948c3c5426d8bc187ac88f497120199981a223f5494733b3b1e05e1568e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5cd6739337a895594369a6d28e059c2f

    SHA1

    98b2d6949c5c8225685156de97a2b9d29902e218

    SHA256

    703b1cec68aa1125786e8fc497f509ae616a7a70d78572dad0c4e258c5d4e3e3

    SHA512

    ca12932c6bb7a0959c531dc4f9c2325c07561a30090f387fedfcea3a2c806f9d8ffab3cf6335b112c1713576894940afd2cb4aaee838c4ab71afd8c731c5dbd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    973984a024ba46bbcbd5722c9ee387bf

    SHA1

    ad296c07377f9ecefe6edd2f8315b9eae2b64350

    SHA256

    aeddb35cff674de15a5d07a61bad5bd3bab8d72111f747e5bad4a6eafd89420b

    SHA512

    2f8576a3c846930bfe0d41ce91c56febb4a4e26ad2db72a6e78e402237936021e7a424576cbaf75bbd81e0b776f9fcef1101fe257b888e971ed79b7b0ad20ff7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73483ba2b0ccbd5dc5d5534f7dd2176e

    SHA1

    7cc55864a4ee36d87d1812a1488d712765cc0224

    SHA256

    3afea4c9b7e84ec50d3ef4c603cc179c956b725410abd44c5328daa82c901917

    SHA512

    67d55da5cf4e4352eeb1d8b2cbf237da965a0cb9d4753a871bf3c332af1727a7e451d92e868f819ac1a32a9214dfb8f3ed6808a7b293622d1ea0679da01f2795

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5d28fd25d1a36d7cc63aac6f3ac5578

    SHA1

    ec58369be1906bea71492df0eb8aae1c76b866c5

    SHA256

    52aeda7c468d39b7ddcddf77501f851cb2879857ee0d59db467f65d924acc504

    SHA512

    8bd0f749d71eecf3d1aad33c84f8c573ca7784b16f33faca9f51118cc47db3583d3987e2d2362f5802daba44bb7b9119eff9ef13cb347244feb5930c1a3057ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a0dea246dd76f724a02db46f852ff982

    SHA1

    4973c1f417f5febeeb6f1e0f76c0274fcf085bb5

    SHA256

    03e63ce06bd975ac1705f627d8c41deee50de1f151a6c3bc22194864e2f8481b

    SHA512

    883fdc6231a35f5011744125f46f09df26e3063591fb22f2918489a6ade02cc26aa5f35c77b4fba39f06b6006d13bb11120a5b08966f55475d018647eb09b4dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    216fce33c24f13d87effd826c04ab6d3

    SHA1

    716611389dd74c078492d6276fcd9e549be0339e

    SHA256

    c3ceaf0aa654d3a0f878f55549980759a62d072b7104268fd754d03592664317

    SHA512

    6dca66bb4e55a1f50a1e91acff927ef92c9cf48b84db0176885d2674e7b3f08f34bdb7575821a0320b245622a4545db816855950d86575ac504a0bfe5cc1202a

  • C:\Users\Admin\AppData\Local\Temp\Cab234B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab2419.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar242E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a