Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 23:20

General

  • Target

    4386be5dc6443a379c3f0c472c6852f6_JaffaCakes118.html

  • Size

    27KB

  • MD5

    4386be5dc6443a379c3f0c472c6852f6

  • SHA1

    a50962db82024997bb40752f81c926c51967f200

  • SHA256

    7b8b952b3e4eacbf043ee6f7114a03190da0a4e2933ee52c975aca5f90c0ad1c

  • SHA512

    fbb3ebe4f89b8a040ab61d3287dac3e712fc54402b3541b443aadab3d4dacd35293aed756aba84a2b6deda5d5bdce90e3c33ee5d9fa325a9412feabacb497b8c

  • SSDEEP

    384:lomZF8lTWFwGscrKP/Ih10Q/kr2lXlngt+VHxGsyl1ayFLFl8KctIZijhpSANydj:vYdG2

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4386be5dc6443a379c3f0c472c6852f6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2236
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2236 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2300

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80ddddca3796a2f927689092665d98b2

    SHA1

    bfb8bb322263bc180fa001abe92859782272467b

    SHA256

    4d27e2a8c621ea2f21c2fe18de66319e9e1b0dcfd2078a6948a45e3f4488749d

    SHA512

    65c784c409c41156e5f478c658631a19fe9b1211fdd70470381a66e41380a33304b6a482444417c956b6cd68d8a267cf08478409397ba7d68dee3efc4e70003b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50a53d6871d55e21f6e59f9c76569567

    SHA1

    62817c88877a28fc6e564564088282164a67d1a9

    SHA256

    0e40b056c60bb9e0f98609a5d4a6aa1b4a1e38cb9d7d599405eba3efd49979bf

    SHA512

    88ee129438d4e6724bc9a9e245702814165f877e07d716171ad62b4f735b0d53ce09c275c36ce50ee03672e6ebb52ce267f8bf118033712147e6f964139c40ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05ce5344de3f61a3b8961ad9e8ed2220

    SHA1

    da6f00ad62ebbfbc17793ba8303bb5ca3aaf77e9

    SHA256

    524141d8f18434c1f547f084145090a217710bad7bdccd146ddaba1732cf7481

    SHA512

    165691192229cb9f02c83f16238a95bf06e69c081fef057cdfd5e3eadfdb79c2caed833a3fd8cc826e7ef414a7cd9ecab73e158b03dfe42985c9c47be7b5292a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    647bc7066be85ecd7a8b766cae04b08e

    SHA1

    71392559b6c857193dff65323a83e1e97fba6ed8

    SHA256

    60bee6f933e3438c6d9e8843b878afcc9be64501e67db70a31cd0f2cd4ba632b

    SHA512

    2f1209f09dc0f2cfbb940b06332e82567dbf98f88a1642f4251d2a10da63f477e67da08e3cb842f2ec64877ff832705998a8d55338137afcec59bc7322ef9ae6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16dc00e29e1a612736a20f1f74f66415

    SHA1

    ecddd1921c92b87dfe9b741da902e7f3cd0e14b7

    SHA256

    f6f8ff409d0f18c0769e895bbbe99ec80190f832f0b6752c086b162e40cec4ea

    SHA512

    bd588db2d0a493ff4e05fd0592930d39e354fa225f6f1f34ceaa8f2c07a8385ce832fe01dace7989a8549a60bd870a18dafd654b633671fb4cfdfbc3c656f29d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c1c59643fe418f6858426ed358a49d0

    SHA1

    a1bc807b8c63db38c2d6d53078f9b6611b04aa0b

    SHA256

    ad3fe45676cb1383726761db4bf7941c41526db24dd12d5626f8619e240f4693

    SHA512

    5b1fe69449106ecf37d64c752750dec180d6d3b1616457633c00f1bd42cfbf7481840a6a11477b796c37fb56fa720432af98e5914947cbff03926a66e7344d69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    425d095f0162b8900017304727dc9248

    SHA1

    0cd0fb84cf7fc05c5b10d5fafeabcd038a97a052

    SHA256

    28ffb4d5a4bccb7e898267dbacf86c55277ad1bd64ac5d31b587c30205bf45cd

    SHA512

    276079662564fc066d88f6ba06b40b657c39156435ae302925a20151b1ca3c270110b11ad8d5c6ff326bca3ad23191e5babe87c11c045578a70254ed0e880571

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75e179f46a29fe3fd45679b2d924be37

    SHA1

    f50048feee11b6e8393508b909d70d74aaa653e9

    SHA256

    41008d51b23c6388c5e372d1982ac73323beca6f8a8b6044a891417e3433aa8d

    SHA512

    ea778b8bc96109b22c9e204c3d9a2ffe6f1696f3e05e8831001493962ea75fd92270e133e73b25498eac33a3b2cadfc0c2f37610f2cf824ebacfc807b4692dd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e07a343e9fbdee90e27a0a9d71747be8

    SHA1

    912812d02abc5e070fbc8417db3f31971f2fef48

    SHA256

    8ff90385826a808047855d44b5b54d9fceedeb3abc71b684310fd3f1d8c15956

    SHA512

    59e7121c4864a9a4ae507a5c4d9694e0af255ec107f399df5c005c51f81e9f59ce72eead3af4cd948d4bc27482040918eef6c47f58b284250b49105ba193c906

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24b42ab8bfd672b014bc058e884002f3

    SHA1

    0dd902b5ec2cc1afbaa181b108fe6e95869878ef

    SHA256

    6edbdf31f5f96ad503d38c9b3dfc7c3a1d99ad8a81947114639d3e34df9c18da

    SHA512

    b79b4d920cf437e16293552c73ff4b36e9a0b0a9172e9134113ea7b3d975f69b5d942c1c56b3ff95bf5c50e5729bc3abef19586dbbd1b39bfe55d8ec40178c90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a72d62d271dacb9540d6e2e7f704ba50

    SHA1

    fbed40414235f842fe19ce873fc212c79ff772d7

    SHA256

    23559b97a9e524bbb4809129ad0f633382304c9d62ae6bfe084ddf1dfb0a43df

    SHA512

    6654ab5a07a5f2afb8e4412936249856d985e8c1733ac0c053e69122173fb843337afbd6710eb72027413361b89b4b718895cb01998358bfb7909b368638c48a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    406ae7d1338279fecdb4f440fa5f76f7

    SHA1

    9afa8a6e241477a457e8560cacda32199a042629

    SHA256

    97c415c984a21cb47368023ec69f8c8ea54080caec55b17bb88424fda29e452c

    SHA512

    3c78aec8613e3ee7e901df18368b97aba0c765f8f2477789b07a5af7d435fbf3d55c367bad1b51aa9d7d2185bad3e7b83ae4b2835fefe6beb12bd8e627ed584e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3cf1117508f6f1fb0309fea5ddb2f66f

    SHA1

    d52fe5a333782a581ad3650c20d8fa896c86e618

    SHA256

    ba786909da59b6c34c76b85256ac8ef0217fcfd1a0af10c713048f488d0fd8b7

    SHA512

    dfac474c82073176ca42ca773139e3b04f57ec521b4361d8aa04b4ff30f739eea1295c166a7a05444991130b2d855eddb0cf5b53e521d4c8228bf3e4e4158734

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c85f7fa15a082bcf1b2f1d021fa644a8

    SHA1

    a064d9dd34fc3bfece3272ed6c949a70d11aa6a3

    SHA256

    8e4262815f54fdf38fe140409ecece2aac4d752937be419bd16d4f9f70cfda16

    SHA512

    ff021cd9568911a3e0bc5e1f2b5f66423008001a3d7997aa9f09a5792b0a441369a67df2b98f5a30d9e90c9054bfacbf2cc09ee990b25d0bd238532192e054f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    361c9804f83c528792effa88fb2a0ee8

    SHA1

    9cdf58bcacbb9adee4d67216329df40114da4f70

    SHA256

    2c71f3a404d1b2a3fccbdead74000a733486e0f4a91feeadc2cacebe3813a6e6

    SHA512

    572a461813de639670ee9f3a08aedfeb93aa27e34a2413daa96e69f4e0d0d18040780600da195c5905f51b6523bad9a2eba64209d53dbf55b776ef9bfc8304b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5605dea6833473e2a60a0303441aa387

    SHA1

    e413c2503d9c8cb12a79ef204ec65d89fb0a1331

    SHA256

    8ad784f0c819d6a93a799c23591a93ab5e8f2f7e2f183f778552c13107a7f96e

    SHA512

    597eb2be4e02a8bb79bda5aac6afb0f709784eb36581c728f30627c536b26246dbdf0809712f94dd0b0b549e89546e013f41bfd9e7bfd12b8cf0f50a7ee4011f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fae78661cee5527873d520dd58ad0c53

    SHA1

    6befefec9aac4a63b946f610ff0de3e5b66d8f76

    SHA256

    9b4318910d47c4f7b35358549716372ead17d189839352ec969210ba384741b6

    SHA512

    d8f456a31e49ed91aa8b9c7a1509a29abde160147c736c87500063b118c7329ae8ab1b51bacee0fe8b5ebdaa5a091359ff271be1c2bf61b9ed3fabb569cc1ff0

  • C:\Users\Admin\AppData\Local\Temp\CabCDBC.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarCECE.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a