Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 09:31

General

  • Target

    458a2dca5969b4a7095d18653f6f8f31_JaffaCakes118.html

  • Size

    28KB

  • MD5

    458a2dca5969b4a7095d18653f6f8f31

  • SHA1

    3acb3f9d31e4e98aa8c37142609b181259d5f86f

  • SHA256

    c9734c0880bfae5b4aa11510f5e6b2c543372d81a7aab019544fc77cf20dfcea

  • SHA512

    83eeda6d5eff942f5d9bb1b4bb70dcbe410b0ee9eb64b11ec0dddcb5a6895260aadf8442cb3de08c9b9033699a844e2b265f4f4aec958298656ec0da28e2ed67

  • SSDEEP

    192:uwr8b5nMPSqnQjxn5Q/inQieZNnBKInQOkEntKEnQTbnNnQ9e5Cam647NiKJQl7X:wQ/H9gzmNiTSOtp

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\458a2dca5969b4a7095d18653f6f8f31_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2004
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2004 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2368

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc4e86ff65beb1b381621845a85c27f6

    SHA1

    b7ce8dbce4dceb626a285ad4e8307ef49412e3a7

    SHA256

    0ff9d5d42ba815ac325d0e2be553cd48957f37d4d7edfc708aefd344e819e4ba

    SHA512

    2a3727e497484f8721cf8433fe100124a96ae1615b1d0b6d08b5ad50f5092973ef275c2e5cf295e10e84f8a4162064f4ff34deb3ebaeeb4a21bc7bfad86481e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13a85e361f0472bb646d9ae2ec97315b

    SHA1

    849ff0f72842939bd2a6ff44d511fb1f5cd91bf0

    SHA256

    697f63dac8d8ca82197817056af7934d842cc9144e6afc89e3229d127665b489

    SHA512

    66244d6044fe40c4e2aad30ee15eeeb390af920acd0167011aa93fda29f94555090b7bb7fbaa8373d259dd341674cbc0b29cdd908884a4c3d1f50cce142412eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9daa65665bc9d74eeee5de3004af8ec

    SHA1

    156aa677bf8f4e177f37784b21df8933d4028d46

    SHA256

    16f0cb0c625403d87c4e0db49a160fdcd99581a45844d9400398a8a6d2c13d9a

    SHA512

    83966f56dbe91dd4219929b8b189ac7c5c5813de9de91211bcce355ef0a2e5c96570ba54a187128d8db73d665ec7a8f774b4571b30c80e6ce2ce3e944ce0a320

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a89137b6148d458828799536a891987d

    SHA1

    d7a0c16b865c79f0377873c617d1c98f577b38f5

    SHA256

    b02462c27588dcf88f8205c71b3f552a6f5bdbb4f5c06559901be45c82f4b4a8

    SHA512

    99a3f6b4d9891f51c25be20025fb7070e8e426982d8f186605fc9f3dbccf13c8ad95fbf862c3febb63641add68cd37b0a94dbd06476538361ed71c87e1436a91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c24460572ffdca9680ad066aaa54d723

    SHA1

    7f47935394ba125780c4ea085c6015b775f1cf1d

    SHA256

    c97780ff1705cd663b75f03dad87b8ab7471af9bc6dff0964981b08807603d44

    SHA512

    96e4c3f2d81dbdae838b799930d7f575f58957f1dfec2c5f3e0b7f73b7b0a93ec8bfb454a5475ebc1d4cbea623a10c772139059db248b5bfc7df4b43ab163a55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9cde5f4e5e5ae3d093ac366a695fa91c

    SHA1

    4faf4db0ea1c08bea733981317aad72bfa1626dc

    SHA256

    7769691767f76cee391f92813b67ec375b9dfb72a74b612415fffea9ec7b4f4e

    SHA512

    147aced97a54cf36ce0f3fa8bbaeecdc45ec1c0b7825ec3d73671e694193ed4bc519cf544d73948bdfad3cce15cb28455c12a13d8da6e5ec390935e5f7712b49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c516feab6e5fc76352108f48e08d506

    SHA1

    90e12f84f453f64792d82019d6cf219c62d345f9

    SHA256

    fd49a137fc73dbf0a8e8e4283c6c2d4bf825b67ca9cef648867fbaaee04b6f43

    SHA512

    0555989d1f059c6d15e60ff573deaf8dabb66b1425fd5130b07b45c8fa783fb7b240500a5e142bb2af1a4b76ab320f454a1b1e39e1a9b656af55b6de474dc5b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4834946efc83d0938ded001094a70cfc

    SHA1

    dfb97862a94b1fb8d96b4ccecf6174beb2200742

    SHA256

    35829348334a3ccf0676f7edfa007212683c8cfcbffb47947cba159fc515ef7e

    SHA512

    6c7b3923e965f8971508608667d1a3f1034099eeeda483d218236ea7436f3981307072dd131aa381e48783c1d2dbffef61c568d7a8e7e2c811ccdfc32ce3f017

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9df23e0699ea681ce2e9747214fb6ec7

    SHA1

    9458d1aea9cc0248f1ff1e2e749817c10fd805b6

    SHA256

    2b804feb6ee541c713537d32ad0c3281d5b103f393a4b4d32cdd26643d46b67a

    SHA512

    e29e07214accc56a7d51f5dad295e9843bffe76af73d915fe0c9db65f5398593d3a55d40c98de1c3939f5d6bae7e28cf0dc7f063dc5fa240789e4f73f67bbeb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    584eca62fe5cd19d60935e3f36756572

    SHA1

    2561bca7f4adca3396fc5bbec27e15ba690512f7

    SHA256

    6fc863f91879ae4f4139fcdd4a0cf166a1cea0e3a5ef58b6ca0fe1f11667c843

    SHA512

    d56fbc90e16e7e04991c4bf80505aa4424ac697d2dc08b50ac91caa55e5771552d6efbb2a762f8585f4f90c8abd2f831cfed924d2c601bb7a57127388e2225cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    70ac6e900886c3413ba7f25f80a638ce

    SHA1

    5344ee2a08d80773fe7793f926dd7adcb9ebc599

    SHA256

    9c62992f088d82366abae98822a9cf0735db76022cf50e7e0e97b43d3d04c7d9

    SHA512

    2802574e4274cc919759b2da7eaaba4ea5949074bdd03995c40e489613c9f90eaa4e7eb01fd6dead16483e81f560998efb90db0e20e7582903cebd9cd32fac07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec08b9c53407e15b1ad31b4452cb9926

    SHA1

    67094a809bf728782b7865f6a0ad08dbfc46dfaa

    SHA256

    efae89156de4ab479bf30ca2ffaeb053373dbc614e7e23b8f95ee7f9c828b312

    SHA512

    ddc62bad9594c6ff18d4cbc78b7580e369dff3c82b5c946ed0d795816e83c6ebd20d8dd6e5b01a61597b0db2f19e867059d745fd2f2a9dea2f8c31bd34cfb6c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c898553d44ef102a91ccb639e551f99

    SHA1

    179f4dfa0965eabf7e5a9dd904fecad6059b7ae1

    SHA256

    0bb37fc7fdeb9f75426071612d653f71b461e2619139c4d8c261dbbb08d20e28

    SHA512

    ca57a757db8aa7ae81b64d2a0fb22a9dcab5fdc95b11c3783c3158bd3b8fc074791951308f2e0a25efb366b18630248738ea2f9e2c284dd6902f94045cef4824

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c819117bf50bcaa00f15f1a35a61197

    SHA1

    c01fd7024debe65e071344bf6187e649c9cbc7b5

    SHA256

    f8a65bc9287849a6f935b4fd1edb7d6c095467e5ca1be88ea6e8467a6768d5f0

    SHA512

    d89abfc73335e53e117f6857774c030b0780358d0cd7dfb1ef0f06e673dad5adf8cc500fce36596da82a56a3adc2673d97b14b7028ae36948e0150004ae404f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5453cb4779b3b4d320b8a6048a642a18

    SHA1

    39cb053d76a453769927a3a60bee3e2a6445f1e0

    SHA256

    d5f01f86a97fd5591a8207b64174abf4ba6e7938a3f69003b908f0afb0fcfab2

    SHA512

    1a512153683170886eb23174e584dcd98d571c5b3e80ee22924fd18e82324659558de8b10df46260d5b043d30837a073d82ceeb6b1b09b4d30cbf577670f5dc4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e0e5d674ffef8eae0b68bb6537655ba

    SHA1

    6f8e0077dc24f5245e388d7f14dbb3b88f280b63

    SHA256

    bc3aa815733ad299f9fb0bfc1b40e599e89d9adc7f0ffa9ae269aeed6787973f

    SHA512

    215a7a95711850c86d71de2d18c462636638276df32f86ba356d4a597c173db2ba77651eb846c35cd8e0710c033b3c609e25f07b68f62771f9a602cc275b0866

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0872580eeea38fd651bcd1b0bb8a3f2e

    SHA1

    ea1eb0ae76e4170e39bc27adc25e228f26c0be03

    SHA256

    ec715c789870ad86c509ed81afd0843b891a037921b81c7e81869d489e0710a2

    SHA512

    3ded9c1ecf37c167cb385bcab779ada57cea29da02fe0f91210513fa3d8bd0462cd87b3a2021f708a18f2937f0582f99efda15efe3b45e7d9daaaeea61f9f728

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e0f8b61318ef65b015e17215b69c3cb3

    SHA1

    646b09b1610a6dd900a5c4157fcd747d212df54c

    SHA256

    00236bf1a92f3d85a5abb710de3d701df5fcec757149203cae4f25a8efd68378

    SHA512

    0deb9af4284730c4aeb002898519def71ac674bad953f4807a2d714f12fd4516131b831f1c9cf0c300051f90fc31f65f1941819178da6c9a380bc556393a1113

  • C:\Users\Admin\AppData\Local\Temp\Cab1F08.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1FEA.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a