Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 03:45

General

  • Target

    3dc3ebb6a45be0bf327c2ea6c77e321a_JaffaCakes118.html

  • Size

    27KB

  • MD5

    3dc3ebb6a45be0bf327c2ea6c77e321a

  • SHA1

    f9f3e09f7464c5e9a690b67547ca34a847f30b58

  • SHA256

    177f4d3a218f695db1d9812a68982409f361a60725a11fe3b1f5ea16fcbb1226

  • SHA512

    4fb718e09d6d57d83417e167b3749eef515f4b4ceb73df370a7093b39e9d7da89bf21d02e860fab8727aefa9608031e1d5e1ab66eb4563fb46ff8206acc90b40

  • SSDEEP

    192:uw3Ab5n1WnQjxn5Q/UnQiePNnAnQOkEntsinQTbn5nQ9eDHm6lv1PQl7MBvqnYn0:cQ/Ki5N1OShaoo

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3dc3ebb6a45be0bf327c2ea6c77e321a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2192
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2192 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2176

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7624718802efc427c0c0a5a9413edd4c

    SHA1

    9ea913ca6f261f936a96086d8773a40d5b62b72e

    SHA256

    29937ecd797575361a6626c906396b95f21873baf7abb4cb85eb7d9cb6dd1076

    SHA512

    475b4d000d4ed9aa85bf1c43d67808f3cdd4c3927cd0c8775bba5f0743c2c36a6ee84e2ba94b9f99b07bf4da89206941c4faefdbeee8ff2ff35cb961c57aeee8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4a1e706b9d0bbb89859433cb5f4e11f

    SHA1

    53a9427d85aaaf9576e572615803c7602dc77a59

    SHA256

    725e9b9ea603e14150808e7d6d4170834c2698a00ebf1438aae0a5d93bc3cc54

    SHA512

    3ea1dd089e4a970cb44f4cac48826acb607579ac5652c6141a00a513cef60f29222ddc89af34f5ec1fd5bfc349fde0971f4e6c90c621f129b449efea3cb3480a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96567c54db0332085b7a1b0638c30d49

    SHA1

    d3d73bc820cc3d70f04bb1bdf455992b6af2a428

    SHA256

    d6268ef716632ae8450bd2369afbbc0200d95fa1ab6a300ce066756ccc33c758

    SHA512

    1145e155090d0a37ba97083354a550044a67d06d8b74793b584d7126a24b94d5f1c23acdf0270b8607f0b801c796e463cc09e0c45feec7f202b930bfbf8ba571

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    871bd2a7d2ec005a2d7ad0089da2371a

    SHA1

    cc60c61ed873335ac8f9c4d3d1c58b3ec60a9e39

    SHA256

    253ea990f26318d0133940fed2d23cf066a346d85b4d28182c2409961a9ddc46

    SHA512

    50cbfc3c6d629a23665b6fec4b893b9280b3e903accd4b977f88d08981176dcc095ea16b5e6188f0babe00594f24671a37001e0edcbe4a734ce189ccc56ecfaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e42ea218bb8faac2a30cb9c74a6c8386

    SHA1

    c4907de371a6e7264899c49eac7599ddd9919f30

    SHA256

    b384799be35367f8627ef72e77da61cae907522562150576a3b3a4c9e96e837d

    SHA512

    7d39d0524ca259b4cd44244ffb870d917de7b6649997f0885d1b1f1221ec2aca63037a34362009a28021d1defb467269b94391f90d70a460dff1eb6a3085386f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58cbb7fae4b0d8978aacfc99053da637

    SHA1

    a3f1bf33a80bb0c99bc1910604ae31bcfdce8678

    SHA256

    5bc5947019497d8cff7248deaa03887a49cecb6b06f0613609de3e47c53298b6

    SHA512

    a13cf608fbd970a817c7513ac80e7d641a4d9d3d5e448a14e088c430355eef64da0e82a95f75c3697e8985eae50509ce0652b9b0a30dcd7fa15f2393564440e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2547d28e9ee9b3d1ab77e86e37f52b57

    SHA1

    831b06995017eb864b79631a796965c9ac538204

    SHA256

    cb65a9d6245dfc09900df5974de1d81273f7f4ab1f8f8c64a08008557751f440

    SHA512

    7a5c081fdb91e3be259f4ed8db74685c4602ed0a2fd7bf1b7fb59613164cda528a48daba6e9b6e582fd0c8c0b3a3c0e2ce7c75e1e82b272257b72fc347ac639b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d9c28b921861ed3a304fe2f0ff5827b

    SHA1

    437c0945eecb0c51e9d0b48fe5fb63f643732816

    SHA256

    fd9f12074b190971755d69be037b1bbc6e1fa97ffe73435ca32332897df78779

    SHA512

    5ac692e418f3611b0031f24ef2e96a92f60f6a27b9e97142329d62cdc9c4700a0ec8b932eda6de0da3e19cc36924bf6a81e150db38cbd6cd53f1a75e2d5a8005

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    652b861c6d42eb96779a788498afe92b

    SHA1

    50edb6ac3c0d422f78da270402198f52aa0f6346

    SHA256

    6191a472d28b7e4053ca23f98c98c25120a9d14e813ddb7d4eab13737c693f32

    SHA512

    9669c46e28d01d1b7d814f33f5fc6d113ff0296c7f7faffcb535bc5b584d9199606ab52b1f075ae05f08f9f5cd32307aaf68ac1f059cc770a7d6a6d997758924

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b125f5a0a1c35fdf46d0334ca08d7276

    SHA1

    b3417af05fdb554bc2a38d2b9a7aa96d06cad1e6

    SHA256

    96680e3f9ad6f2d3801ccb48a8c3ef14248411c7b24c49f12864a52df1418724

    SHA512

    2e79e81954fafdb256a57d3d67b34abaf5a7e4c6b9ee7670d3f3a7a529cefb62927a8802e3583f296de85e062aa9310881ebd124ab1ae65475cef7c196021b1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7523a9b2dbb526c5c8c06b2d9b53b5ee

    SHA1

    ef33902d0c2baa159400753973ad370c4f122d23

    SHA256

    0b9ffccda95b4224704e84da76548fc914da039383979c5582640f027035efa5

    SHA512

    9303c52d926448702064c50301c84449918ddcd9a273a6e3b28eaaeb52f42dc5f95ee46a5b31195089b5bcd58b90dff84e679cc26f1f7374e2ef49eab035b0de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2139b150c8532c7e78eb4f32c2b5ffa7

    SHA1

    2290846c7fb53009e13cd268581c99d4e7f21c3d

    SHA256

    e6a3e24df2a33ce645206f315f468c974eaf148a6eb44973742743ed35ffee36

    SHA512

    2fac37d650b09607fc60f5b056bef588dfe4e20b52ac0e1b9438e8354e932d6ea375f1f14f9341d8b04055e46e641c34cd3bdea2e0a35ead00950f1378ab65cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c2efcacaeafc4e37be8292d5eda7f67

    SHA1

    64eb2699a1fb1f96d6fd8f8dcd07b2e8df337058

    SHA256

    3aa055c311be9fe01be35354a4123959cb4f3b1f159b5ae33c6326af47258615

    SHA512

    ee59657c7e4dac2a8662e549cf2d901b59935a57c601581ddeeaa1df74aaba14fccfe1db6e5e977098cecd3fece06482f311f96465235da76424c183d82ede65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b74a340bc6b21a18b569ee9d965ab6aa

    SHA1

    76730a8c3a1fccaad1adc5b9eba7c4022c703c54

    SHA256

    0af5a94df789dba88c4bd1d5c4a3575f4187f62aa523976fc8b39b1f87ab523a

    SHA512

    29f72637c10cb96650532f0dc73dc63791fe2520f5f847688e00fdb70739528b3f8aa160da4cffbc49cf705aa734ac85e5e84817e5d23d0908d8628a08e0bfc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9075cc884e14c0456a774324db27449b

    SHA1

    678b343833c0c15d0c9dfd8d252d54a6b16fa25d

    SHA256

    9e900f04b1d161653b67da11b206cc4b0c262eca8ccb070339921ef88ef148ba

    SHA512

    29039ce2320fa0bfd51f2401baaa35f92da3d6cb7bf5698d154b10d69bb41723184e5b3d240e541655084e5f52ea887d2a24b31db5e5941115d1a34261067689

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec6fc58410b2908a7dee84fa8a5e8156

    SHA1

    78898af61c73f466481e460097178dff9f05f44d

    SHA256

    91ecc30313ecaf85143b8bd4164dc5ac9a12d5300a1f7ceb2bb306f985b9c4b4

    SHA512

    3e05990768651c27500c5bb067634165a1f272f39af6cdad96b7f7426c0cb1769f671a7aeea3a0bcc0a6f0500e88706f7d935244b6c96ef14b3d3949720552ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37bf387a80ab89a95e721fa9da408291

    SHA1

    747c9497babc066a3b955f28d8cf1d257644a7e2

    SHA256

    9d90db3203e0ad0a5d0b2535aef390c01c3b4c67adf209b778d7a8166048d62e

    SHA512

    fe4f270120c0de4fa097bd8b49b854070f7778de72a09d5abae4a96f3cc4d59c7048713de9b409f8aaa0fb72b70aecd312a3d2c62a5a12dec4852e044713e530

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fdb3a4c4eef2c3fb5035c05e3b6a897d

    SHA1

    a82f316fcb5f43829f1f5ee245f21557c6643f14

    SHA256

    a0bc061674029e0e1d302d68088c7f8514def012d21e27ed37b5aba242b261ea

    SHA512

    ef7dbb69100b9305fbf60f0dee89ae2e661f738f31d9bbc17621af0775f65d9235cb601fff9fdc2bd97cb8340d322c8c1ba5c9b2e8597e4cb2e89cca220a7c1f

  • C:\Users\Admin\AppData\Local\Temp\Cab2ACA.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2BBC.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a