Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 03:51

General

  • Target

    447000b3a82da96f8a66f02a4ec1ca2d_JaffaCakes118.html

  • Size

    28KB

  • MD5

    447000b3a82da96f8a66f02a4ec1ca2d

  • SHA1

    5be5638b4ae049a8e34694c28bf56d4ff2fd691a

  • SHA256

    693802cb708e3c3fed45600142b83d0cf6d637244ceedb247c1ca3ae28f944fb

  • SHA512

    1207744d455fc2895acba296dbc0cc90fff911b63d63ae48a609ab56f2a5305dd290cb881ce4ecd34d4c1ecaa4f69956bd63dfd0f8a311383b836e8790fcdf46

  • SSDEEP

    384:CiywhJhvuIxTNzP8obxF8sHvHEHvHG0HnHQH5HvHEHsq1o:CiywhnuIxTNzP8otFo1o

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\447000b3a82da96f8a66f02a4ec1ca2d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2552
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2552 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2224

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2815d0eac39db54b26d354d603e232b7

    SHA1

    9cf3577ef1f2d6f37b8e0a33e454dc1eb1aead83

    SHA256

    8b5ae42822c695fb395c6eca37c6a8411d0585b7296f0d06cb7436586582dc8d

    SHA512

    103cb24a86eea44343d907f9baac3e1c2907b4e6b0421c520bed3adbfac144cc60a64fbf257943c0e279472fc08384d71543b941e13fc4d1d3eee72261b9b0e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    557363a49a44d4a82c5a94b348e6e809

    SHA1

    61c096d319bc26fd542a66c21f8a4c5c25e4e4f0

    SHA256

    496b0c8890d47e8d0d0577e61dc15159ca035fcfdb70d500daa123fc4a702eb0

    SHA512

    98c1140c7fecb9aae91404cbfdb39d0b996e1d63e3d228ccad1c786b5f539ab16041c916af3dd1be42c5dd96d376f9e14624a1185aa766e7b8ee7804e666b8eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52f2f13688d27f993b2380bb6ca2b441

    SHA1

    3258921e9fd10c1c81cc7c3d1b5fb8eb4c011c7e

    SHA256

    993dbe90fa1acf944f9e3bcb6759ddacd62e1bd3b9ed0b7ac771ee10d38e1577

    SHA512

    02fca0fa77f32793e3692ccc4afb18316500cde68a4f8ebab84f4b87dba57800f3db77865e47de781d5143a53dac8e8c416685970127c3e8f06a9077b9b1caf2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa4eda657e791a642736ae4dd04fde5a

    SHA1

    2db20cc838ba721b8bb37681dccab7323bde2b29

    SHA256

    1b3c9e07ecd0dfd2eba7eb0bdce153b6519d7bab767eaaf401260906bf7b0301

    SHA512

    879a2cfbe0a5aec75f89a589e73105b0c76b4ab6229f493e58eac38292acf0fec6eafdd53b32c661df360783e4013c7b6e60454f0aa896f8b82bce4e3b4f16a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de1242ae811bd7675ecabc8953238748

    SHA1

    04e28c2f569634b6d9647fa354b6b5bc5123869f

    SHA256

    e3fc3088b4fe7133217d8aff0def3947a4701ee3d589ed013effce5a0bd7cf27

    SHA512

    f5b32e5c3c02b9d31549208c3cf48756a0896dbbed38e362c4ecb105b5e4734b8c291f0469e053801a79875315cd954124616374c7a7639ae0a66939465b6323

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f54ecdb8b0e0fc5f7fae8f2685daa42

    SHA1

    c37eef40d1157c30269d123c5dfee71198e78717

    SHA256

    e849d20e9d8387fb3f2b327c24efd4059dfd35262eb921f3fe017d654ede5043

    SHA512

    297994aa88538af4af42726d84616496299b6391bb880c333b8fdf110456478e35d8cad27929fb467f57f559e955c00fe3f464626bee206f98e7c2a3d9ce91d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6263b1518d61532330e7f3e0469f5574

    SHA1

    0d5e59e448b0b535f96551f140e3b5b7a7893ba7

    SHA256

    85e8adae855d9fceaf14f9d2e6a5a9b0af4e97ff1dee6af289a83bc2ccc58bb4

    SHA512

    15663d76e74f16a8897ec7035e82290cd1fbd834c51ec8d6663a5623748da62e1f4d8affe34407da49a62bb9a4d35a860d7718cb784032d75854d20c4ae63848

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69a8359436240b15365c92ab9720cbc5

    SHA1

    d909cd9fc3d7d5e0692e826ad71e08771ce6442c

    SHA256

    6fd4d6baaf7a9cd1e12878f6d91975175708f9ab9e6f26bf5c19d19a17023b45

    SHA512

    e6ae3e1fdcc1a8cd077c3d7ac88a06d74844bdbc0e20e33ffce288be4c92083633a5060b69ccdd041437c798512b2ecc02d2a37afafbae18fba4d67ed13b7559

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c142a4ebb9e48684dd193d14f0ca0bc

    SHA1

    fa763caa47977f8035b764ac5cdfbf19c9f8451a

    SHA256

    b6e67437d50299462ea0768ea499a9644a86185f47118e89daae8aa6be8534da

    SHA512

    d64983a409d758f249bcb8b752b7f9e8a690f9085fda0e5d98200292000a6629568f9bce37a1f6658b6b50cb830a21abbef881aa3d5a4f035bc7d26692728e3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b750a4ab5dc314568e7ad373184ea1b

    SHA1

    f7ea18a7ba6063f0190c2348f4bdf71a90db364a

    SHA256

    77e76b295fba534cf5205acf88f5a7219333284801ffd636eea51e8c6a266628

    SHA512

    952c5803c3e68ed1b4755002bf98c05c0f42a128df95f447a89ff84e91545742a21444596a0c532952088d5eec1466870e450c9dd182820f81abc2b7c23cd1c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b2f37de5a0d832eefcae3ba23f4525c

    SHA1

    3f98314ef9086d8ca471b7cfe897ea3a2e74a62d

    SHA256

    bc2adc62fe2fde91da0443b4d1d7756ed1d5098e11301ad75466a4b0255c6739

    SHA512

    ee624b4552c716a2f985d3751f6395ef8930214663ff521bc8c831f9c3167e7f92b3cd781c95ad122c285e1b183a2fbe4e2b3e0ef190d59a8f7a59540a45862d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    222fad39d9fb79d633fcea6e9cac7ca4

    SHA1

    db8541f64cb79555343ed62ebe0afb04096fb6a1

    SHA256

    7fc6432e45ec1a8e074331890db735339b68d2c8657020990ad63b07de8dd7f3

    SHA512

    5e3faf5dc5f2aa7a97f75203a0f1a7f720550827af6da8c1b1b155c9a4b9cc4a13ecf214198cbada4c47d6e515cce32bbd9774e5132e80cfad824433af469b45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d98e0d38680de5ad85f9d0a0439a9ee

    SHA1

    e7414afb61783a35f4a4383d9943f1e592ecc891

    SHA256

    63ceb47808656ebdfdafb8264470b51a82804e3120f9e2fc3ee1da371ba6cea4

    SHA512

    b519cb14e40ba13f943e5e399f0d802cd0b6acf779f6cd72402577b2b40983bb081e5da9b8013e9770ffef88209b34dd2fdb9508a7250e38ca0bc25d7beeae5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    defa9e587a7cb81c123b03c82d4cc406

    SHA1

    310aa85febb7c5066ebe007920faf3762a85f3df

    SHA256

    85ae908cbcda7ef4df398eb7e95035ba36a18bb3105e99f7047cbd0a93a47362

    SHA512

    52bffdf5cad4d4a70adb98542526debab6305f5eee7859f2c4b8d03b09825f024b38458888939147b25478f629e8aca315e8478a9a76686d3b86e6e5e68b0584

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8fda17e820f826a221dc56161f989b75

    SHA1

    ec6c65ca28baa49f330cb386f00051a616b9209a

    SHA256

    fb331677ca78272ba0b2f8dbfee5e063ea9fd5b1f542f0aa148b566934aec654

    SHA512

    d1f25c7ad99c23eb6620474225041aa78be0830ccd96b25647c410cee856001bc57dc5223aa9ffa6a1b58cccae945f6c3e897a6e40cc9170ac1a701bc378f6c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7c43a0203cd34c8b034196e100504cb

    SHA1

    1c4db9f201cdd67e9488d4fad032647ebeca797d

    SHA256

    738a97edf23d57482d667e116ad722e6e439b463d922fbb303580ce569d1b14d

    SHA512

    68926f7f3a24b5b09219e2a9a28219df036b85b1958efefe9706f915b78e3e01f29aa3a43477369679ebd6e1be6c0bda0ed9f3f9ba98b31112883f9fe83dbd7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe4d2c081065c4edbda20c0f2c9b8264

    SHA1

    892987cabe661ffdbe11cbef9ab4a278ae34069b

    SHA256

    9be2ec0fac1437d31d7478c8e7b2ee9e51f022d034b98bbfb7be705e38d69174

    SHA512

    7a59b6e4b57eecc12df5031d51e1f19a448d7223b45261c2f344954f908e2a986d265dc5ba50119bd66c7d5d3385a2a4ece6a95cc96e23a59ebd82bb8bcaed33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53e3e131b869eda01d24c77d16aaf623

    SHA1

    c14cb79841dc163a65795c43ebf61102bf5a817d

    SHA256

    16446e95038284d5c1a172b50048026e70040e8f55cf28d4f8e6529d7b0d659b

    SHA512

    e4adf50481f692c73deeb1f149ab35213b9a52ace632352c72e293b9a8dfeae89d12b35eee8ded28c1d3fb74de5262558ebe627abca02fb968619820cd7e21ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e22d0ae8171773c9b761d4116c2b9afb

    SHA1

    0df44b278ce4f9d65032e84fea0b6f634db8f622

    SHA256

    43bf89f72780cfbd84136454aafea11bfb5e7ff7f57618c925526e9d1366bda7

    SHA512

    076599397aef88ec873bec14b50f15eabb188e4ba5c9788a34e50cef9e9928c3ffa01c2381707e17aa55a1390539acea0248340cd57791f6e3ca56f049ce3d34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c03653fc5adc6dddf70a8825a0a3c8a

    SHA1

    64636d5089ccedbd659e5064e074dd3691f0a472

    SHA256

    22f18ef8843d4bdfa099358507d81dfe1e668b4d39c3fc6df5aca65140ca4f3f

    SHA512

    b7502ee001387a57fa2c7169a82512e60f55c63f674fac71484ab0424d5117a469d17fbb41cb00b035bbe6ceb0ecdd753443598a76a9366bdea524afb8cbc939

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H09CVCL3\px[2].js

    Filesize

    346B

    MD5

    f84f931c0dd37448e03f0dabf4e4ca9f

    SHA1

    9c2c50edcf576453ccc07bf65668bd23c76e8663

    SHA256

    5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584

    SHA512

    afc3089d932fb030e932bf6414ac05681771051dd51d164f09635ca09cbd8525a52879524b6aa24e972e7766ddf529484cc1ec416de8b61255435a89ba781f8c

  • C:\Users\Admin\AppData\Local\Temp\Cab4A7B.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar4ACC.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a