Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 11:36

General

  • Target

    45fed3548b6d721dc98614d02ea5d1a2_JaffaCakes118.html

  • Size

    28KB

  • MD5

    45fed3548b6d721dc98614d02ea5d1a2

  • SHA1

    ad5ecf47b8cd0e07a28fdcff9467951e4c423c4f

  • SHA256

    140cb566b8146651cf43b4172f07a1f3a9044b68e50cc4b576970cd0459c648f

  • SHA512

    b18174bf60a7824ee8a6cbfa027c02111440b311799745eff862c67a84ab71c229a285051dc73ace5bc16739f5d8ac1b7edefb51808ab3a1dbae0f03ab907890

  • SSDEEP

    192:uw/cb5naFUGnQjxn5Q/gnQieDNnHnQOkEnt0qnQTbn9nQ9efvm64PrOEFQl7MBj5:SQ/DqRmrOZSCOLSq

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\45fed3548b6d721dc98614d02ea5d1a2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2524
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2524 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2736

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d302c06bc7571e6ce3d3829969abf7d

    SHA1

    97ecd9020f10f93598518d56e8e9404d207fbce9

    SHA256

    27a1b082720589b0a6ae019c5bca95565b3eb18fa64c58cbe1f052f31d199a4d

    SHA512

    2869e2ad7b0da522b0cab71fa20ce2ccf8a09acc8ce2824098c78bea208728df511729aa6c107262dbe282c716a75d14b14501d015af0918f1a46aa5ee6a9f21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ad40ffeba443ff519a126baa8d10af5

    SHA1

    3f2ff51dac5a2ae334a11da174e786dcc81080a1

    SHA256

    136b00902c23fda37e6f612b9b81f99ea7c9510906b3e9f1ef9eddec6c3c1d86

    SHA512

    5d8f747895373e123b83d975a050d5555cb53409984025e244906dd618fdbe6e3562d797e66c25ad17addcfaa0be9067041e3404b539056b3d2aaa1d210b6e95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23e39fd6d38cf5d24030176389e498f4

    SHA1

    9b684d5546854f84dacc523a19cc6453de8bb87b

    SHA256

    0188e2c26e0e25c20364e91666e36d9416a94690dce003563c05b35a8f4ac6a4

    SHA512

    143ff3a7f0448fc2044564f7be77299c8d02cc56cb491986b48455d682cc73fc1f5882dee924ead0c34198568a794162509d1bf3cb458cff3ad5d7a76801221a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cfb25c3cb04d51b8c1ba369dbfb71175

    SHA1

    d56103218445af22dc4a8f10c7e3c65fd78a5187

    SHA256

    c9d93afa70b7f6401a173e9b71b2d8837f9e1ddc2d5976575cf5d30843fa6a4c

    SHA512

    c1d27e6b94859a93d949eec0a29cae079f1dfd883d938821289d4127eea2c06a0c6e06d771dc9393a4b584b44c7947ee6f51de2c7ce50a21e31d8028e38a3170

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    565e35361b3ceae2bf3d7c684120d98d

    SHA1

    19364ca73932d534635cfc7279a0e9adea322cfb

    SHA256

    f60e62609856c7d73d0c6d8cb58999bee2be8a4ac228e9fc49d234b67c8c4ec8

    SHA512

    4ef8174cf6d0b855fb4a1b6ac002be4d435234412827996dc50d78acfbfc6ca74182bbe1191f11a5b0ac6c48589957e6057d30e29912ac6da54bf2aa13390cd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4753fb737e1c9589e1be387b4f317df

    SHA1

    c316ebdeacb4f746afd10661f651d770cc422298

    SHA256

    cf6f692299a8b5d2631bc93f6ff890086c529ae0983b321efa8f6c03131cd05b

    SHA512

    de20208b95a9a5694d0438d8134d2db0048a9ec09af33a39142c0c203662a971aaf1045f95aceafc73454ad248a0754266c1d5208de7b5e05813aa1096dad6fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0e4eea5a832513e1e79b5544e8d3c9e

    SHA1

    2f2c72c0ddb2c20a14bc001ef60e2bbd4994c3e0

    SHA256

    80f06cc040daf5ee4b3f90ee536e0611bde0255432efcbcfd373b96b0765c5fe

    SHA512

    8be11105ad17e5f15dea826cb03d42ebf5d6a005ca1cd52411605e7c0842bdfe1d48b58b1b4f045c390eb788fcb0d74c7cdf7905875eff3b3ba3150512296ed4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    592f9b9d3085e5ff09fd4ad518c4e566

    SHA1

    787429c9c491377cdc1abda439de9e8fa7bac0fb

    SHA256

    14564659406dd5cd5465690a4fc24126bf17ed2068a1f8603a44d174d7207fb4

    SHA512

    d0cfbe6842fa2e6139031171d9a8ab9702ebe725926b6fde8abf2cb3f261a9fb7bc8decc33c18490b2a099cc244f246f813c0ef599508313cd78c3b624fb26c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56f542b644dce582ec1ad612eec5dea4

    SHA1

    475be41e13382bdb915e465ad13b858715afaa56

    SHA256

    83823b9c7c50ace69c101816b2137b1ce150a027b8f725d1ba68fc8e660f54c8

    SHA512

    b3dcdec90cd31d05ad1b06de6b964d47a7ab42c7bb2194a1c32fad6c052c633355d190f2167cec8378dad25cea6c26dde77cd8db50d11cbab8ffa63b17235f2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80d098534f0a1ee0a06ecaad644a56e2

    SHA1

    35c383ad614c821d11d507270ab4b503a3bdc746

    SHA256

    7c2561059d2a276651afa82b19e4598ce9ca709621b6c190c603490927808d87

    SHA512

    7ebd717a386f693efbeab6136a44274aa94508c02e939e6807accea457d6aad065fa546301ba88ba346a8d7ea78338c668312051e706e0666a5f361aa1341929

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38475cc394be7f5c53cf44ec035ce0bc

    SHA1

    a31fd31359f08a4f5e904b8c6c22c9258093fea5

    SHA256

    8711a0907b71c7a74f49615658400f03fd1b8ad77fc505f6785d7839706538e8

    SHA512

    4d8461f7bebc84081354a25e504a8a7cab274f882205b9e329532f7eca01c3f8bca020c64332997f705e4ca598baaa3260a44b863cfa5522fe024c57ac4d9b6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    74e8e8a283d4888f44c07bd7f2c02d9d

    SHA1

    dc81710981245c8aa80dfbde945bfe8281b46c79

    SHA256

    8fa3464dc9cc75eb3c972733f71e0a9f6189b55d061841e1eae5273a1f6b9ec7

    SHA512

    339785c13b1346620d8a6d22660b4c05ce20950e7c4716d8a7af039f4cb40a7f7519b1855357de9c2fea343a4e341713995df86961592286ccf8d62636e7f372

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d0ba603f288b67ab94f625c59086467

    SHA1

    ab1e96ae027b2893b793099f3cb04fed385207ef

    SHA256

    8d2ce800e41c5d8b4c79d02f295cd428ce9861e89a3daab69bbe455226ce54b3

    SHA512

    b25115b56dfb543a4a964d020ffa6369cd9da6d0b526e4cfc507f7a12de73a9508f1281157567612c9dde433bf84b31d20119e43c95b2a13f39cc0e0e672c383

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f38b2de8e927ff213efe144af08ce741

    SHA1

    352b8707d9df9447d2fa6af20830510b1828162d

    SHA256

    a5832258908c7feb053e19e3c91221d3bcac2d4ef0c0a45665bace88a0fc01a0

    SHA512

    6d464c1f2d714b1615d22a927967a6a937944032cd10989fdb97f462dccb1171505fa4c456d95144aaf719d40441b531d81470ed76df31a653703393447b776c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bdde8c1bda8c26324ebc30ba51ef687f

    SHA1

    db6485b6bd507ddf5060acf193c8151a489c6893

    SHA256

    ef5ac59771e9f12b43ccd5e4d68d5df1fe5db5527f6a6244315778ed444492f1

    SHA512

    a3dc5bbb128b226c9403c68ea46ad54c90830207e3c925ae48131625c5e3394b27722daf30e64ff6f863974a13bc68155cbca66ec5caa34191e97854402bb53f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03e5fe869f93f970fc935ca6a375babb

    SHA1

    1f6ca8de198c5a5b986e692e08c85cb7529d2c85

    SHA256

    b97e3f2f35dcdca9ccac10ad3c61b9f69319f51eab4e32703f2dde259faf8202

    SHA512

    430b6ad2b99cd98f8573fe6f2ac7c7cd920e6aebd11af4633f0e7cf68c7ef75873e4c59dfcd71750f74706827ab10a2715bee6cf0703766c7e9f33d70a854f5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7947c224885988ca7695e0dc5b1e7364

    SHA1

    8dc6044b726407beebe45d6b0839009d5f595b73

    SHA256

    3e6d0244716fc38b0cd7defa5f62936ec6949a790dbeffb9a99d29f8f1297332

    SHA512

    182b45c61913d8fa9057e3dc0dffeeac6c995d00ccbaf11a12852b6b392fde73022f4d45f5739e2759fd55ab94a558f279355594606462b98bb7abc863434128

  • C:\Users\Admin\AppData\Local\Temp\Cab3797.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3869.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a