Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 00:09

General

  • Target

    43b478838c0cbcd8fb4f4668e63f184c_JaffaCakes118.html

  • Size

    139KB

  • MD5

    43b478838c0cbcd8fb4f4668e63f184c

  • SHA1

    24f7e6cdaac22dc3b98ca8d8f6a7849405ef4258

  • SHA256

    a0f98507719e5709f57a89853c3582d2bd7e9d36eef1d103155abd5917a8788d

  • SHA512

    525b088bd36f011aea316dc8ea63130a4e572ae072e72895b90e739bffe360bde9479b2a6dd8728a10dfb6084a16eefebf9e1bf13f171d17d1e4d02a7c625a26

  • SSDEEP

    1536:SKR4lSUlN2yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTs:SKmSZyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\43b478838c0cbcd8fb4f4668e63f184c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2888
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2888 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2860

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7bc53f1888b37329508bd9daa53a94b3

    SHA1

    be2e2529bf47f0843fc063cc94f15afc4a7091cd

    SHA256

    0e0146b901cd66e9aeecd5a1f4121823ca58bae3fa4ac5faaa8f003aea53c59c

    SHA512

    acb7c48e3d60c1e1e6548a87c14755047f51afdc3fba582cbcabe94172751973c98d347f87ed315c1bd9e29aea835579826d210edbfe085a89edeb133acfdf07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e1c58eab6621fe8f4df3a3ed26c7648

    SHA1

    9da60c2e9bfe1edd54816f406c33cce11dfaf1d0

    SHA256

    2638d89f6651d96f69dab3522b30af26dd2d2b20c4c3fb5f323493e92651e52d

    SHA512

    30cd014beb02c97311cfeedf4941168b5e75aae6a1151d53a1f0158e60abf430284603ba9fda54f890c718316cd0374cea22fd6faeeae86a1d9831554e6f9516

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    795ad99c25549193a53eb1f7b1022d01

    SHA1

    7d1197e7620d99cb6d9f0f024e095c1cdfde647a

    SHA256

    322cbb529a527a0cf20abec0919be3bb4d1a9b5be4cf469560a9e9223e799569

    SHA512

    01e40e806dba861ba251f74e88699dbba2187f7b99faa4b88aca7f174d655181fefdef6096019ee0ee61651638b32321adcda79c0ba38ce6f96dfc855a17ddbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2140f1b217db3a8211a89d9d284fa079

    SHA1

    c37f1a7dd8fe4cebaad9c31f7f07f80e111954e3

    SHA256

    4aad2b8b6f813fbafcd32d04969a5a11a153ae8db637b9ea9c1d58831b0a9910

    SHA512

    931c189d8c84110ee608a7bd26c5bf26c2b7ac62131440983148d4043b112d52c3f4c90209f39b32156fa94d3fce158fade9e3745556228980d6101a5bdf7671

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5bbc9ff8b48cd505c21cc9104dd3724b

    SHA1

    8b6e2e14cf38bdb213cfdfe026801e0575d0d567

    SHA256

    b9390c0e48521af113e39ad76c03a4cd5ca3498239caa012b698f2d90534b6a9

    SHA512

    e0479ec2c85e663624e2700b3ae89c40733921a2fb1451f4490df96e5ee5625dbc16c912788a364570894fec3fc31d330b26f0624a35c8579fba1bb0d3bd7c05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa833d34b68ab2a2f53112604cc0ed1b

    SHA1

    1bcde9f163285604b0af456c8e6d8304f3373cda

    SHA256

    b6f8129b4bacf568bf0c8745d7db14924f580f5486affefcd5a7de6f1a141285

    SHA512

    10755a3c55e957cd2e84e8b11fbd0af13819ccf8b038784af75e959de3502597ceeca8e07199ec059cd988622f82c0d81865c8326fa2ed0adeafb56f593ff67f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb26217343a430858fadf08791ca2234

    SHA1

    3970b2d06e3b5d10ced0946b9fdc4df852258a53

    SHA256

    29ee9d852f2fb2425c0445bbaf1d05866e333c9c069864da1bb4f392e7eb58cb

    SHA512

    f0585d48b211f731321d654dfc49bef68ccb2eee4f0dd1d85155a5dc101332431e017ba54f255ac53c7bd9559be687621590ed934f6715132a1722f7091422f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a61ffce9402a2d84b943a7a4bbaacbe2

    SHA1

    f776f6a228356bfdc7baa80f3b633e3361941543

    SHA256

    f7e9a90b9bbb396d12091595ab665a3ed9b6f403b18ffd03df2c3bc57b1a24bf

    SHA512

    417f81e03e03656277a4544830885e1a77978ed1043fead82aa34693ad3db685b6b258ef9d2b7230f58c90b4df9d3ec86deda95cf53eaa52a027287fea8f2852

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82e44dac8a9b5ad7217ded4322aa8555

    SHA1

    6540b3a1483f9f7a8c5eaa1a05c2492e6af6fac1

    SHA256

    156402a534c1dd7b7ac768759a7e190b80e208197543d3563e199749e3bd1546

    SHA512

    1fb264874119914ac69320357959280d33c4bae2e596612e75f52e5ea9a283fff945fa2064399e40096a58f3e1b0bf6b68ed0b29233d5bee559a8b67fef268df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d7401ef12de811067670325e4c7df5ee

    SHA1

    10abbe3faf703a6ed2f6611f3ae5a762751886a2

    SHA256

    c4fa82b60589bfdd0afe62f3118c3ca040465828c4ede1a8524764482567bd03

    SHA512

    918eb64cdbe2d1a972289dead1f06d5c066fd8cf79470e7b216de0cc1e0e9f5f906ddceda917a027e912111f7155a914fff4e53486f617c7e98daec65a98860d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4aa82a39d3bf7ab6641a3df481fb4b28

    SHA1

    8eb2b2bb8091c7943b7e2d6376caf1dc4e6751f6

    SHA256

    fc1f78edf21f67fe55c87a9836a9fd123550fc47be70d4e45c6b92f978e6d227

    SHA512

    161e92c9a1add71afc6d863b9c3703c20b6a5e089c1defde4e43ec02a6590f2d9b0b4348374a6739160de5b452cccf8ae60c04adfede2936e6b3388f94135d38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1713d52d01d69bfd3ce7e727903eb957

    SHA1

    95721adda136a821881825355a85c2ce0da640a5

    SHA256

    6cefcad1267239c0788d081a3bafa09d88055431bfd6db59f2d1c8960f137fc3

    SHA512

    4b75162899b767b6d5b02b6a8a92e4731ec7f6d5be9a4b6b3bbabb8c1008c47e79e9d88f8ec711b845c740a03158bf9eb3da6e36d88642004fd939dddbddbef3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    76f27aab86534f66bef194f3aa112593

    SHA1

    ec4844d58c6c1bc7b8c2767ccb672171e09b972e

    SHA256

    0ea90d4216f006668ca815e3959f4e7e311a4244e9f3abe404402a203a5507f9

    SHA512

    7b9dec9cac7f490c91f214cdc0e21554ae2cd658701b89cc1905348f91e0501ac9e2ff959830d3a83b954cd7c0ac0c2a6353c6796f8e31e12c2560ce2fcbbf1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de0b6dcf21e64840956d3eee2ddecbb7

    SHA1

    aaaf7339163c98afd9298de274f4d481e0434ff4

    SHA256

    a270df3fbf75b1d4b3cb97fb52265d292df28acc04e8c413046e7fd3183dcff9

    SHA512

    90f5d41447c8d516c2aece9df42ce8e7e9b4339bb97f819c5be6bf541cbf4ce53849669fb18d84f9535979ce0034f63c85f73efaf61bcbc81f0dbdf701fd3cc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e718a94d0e0a47d98c3f7d9cc528641

    SHA1

    7941e63feefb38ad63e49f940ae76445b5d63e63

    SHA256

    609a96d343f67240286ef1b8abe65d160d8a6fbcf822e46620ae31f3c15c4814

    SHA512

    7477dfd17edcf4d4cbea59e5c34f7078333a164a8e07aa2848e7d0286cfe30d0e704821b3ac8c0428f225f4426dde94bab17b8ce889baee4bf6f022f39b277f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c7c6369cbf6226322ae1d756fd283e9

    SHA1

    d46c8a047578827404d2ed553f7f212b1a8f110e

    SHA256

    a5209f563486dc0820141d70155459d78b68e059b145b4b4cf7976bf96e6dbf2

    SHA512

    dc1f4ffe8bb3b0fd39f49bfc5fc6b732a8829ff2382e52e6c3ba9ceadd0c3bade215cc8d9b65e31cff2c884b3e3b374b67263dd3cfb562c57ed14b7d345b2b08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d546b5027979e8d30a814711004d3e04

    SHA1

    817367339364ab266744fb3b7d0f48e6543ab75a

    SHA256

    aa4c080a52b6e1240ef360f0115db823ce66a80397f33a10ff9ba65c131bc1ad

    SHA512

    9e28044478ba9654e6959b377abb295b9b302fd260a383cda3489abc863f6f4b175fdc6e16b7e5821ec85f11857d00dd4349a8769a49ef2feb7f202b9ea5bc6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce0571669b2b7c18b1a229d858930168

    SHA1

    ec07e769a60318effe6b828c4a70d157250274d5

    SHA256

    d6500100de809a60a4833ceae587bfb776e5c51e4e5597833738f4aac4373110

    SHA512

    94430f595e8ea7690620525e6f78b38b801c6df04af4d06460ec26c148917d6ed803320bd4dce4ebd99c18ad65344f836bec4e5e72b39008462b0b54ba350822

  • C:\Users\Admin\AppData\Local\Temp\Cab8FB4.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab9090.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar90C4.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a