Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 01:40

General

  • Target

    48fb4d7493c8d78d2b040d4a8e24399c_JaffaCakes118.html

  • Size

    23KB

  • MD5

    48fb4d7493c8d78d2b040d4a8e24399c

  • SHA1

    828cf3f2fe7ddb483a043656221d2c4723875461

  • SHA256

    c7a5d2975402805dd924e1f4d14b788bc649b29a58e90c288ec2aa10e9d49180

  • SHA512

    34221b7bce6835c7dd42301077a996435d8bd4f97c89fbd7baf1dc6471d2fc813c0de8bbdad44ada0970aa315a0e1fddadcfa1d937edc48dd097651024cc7481

  • SSDEEP

    192:uwDvb5nRmnQjxn5Q/knQieXNnenQOkEntwSnQTbnZnQtBXnvMB3qnYnQ7tnQYyvh:jQ/C0p5x

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\48fb4d7493c8d78d2b040d4a8e24399c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1584
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1584 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2544

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6da80842d445d40d045f39e1d1d026a8

    SHA1

    16e7b7132062c3a81ba11bbe851fa014c1b9d028

    SHA256

    54944c5ee3f6e1fc4a45bf68c14bd219730714b236282560c5fda367ca58e5c0

    SHA512

    3590505b5fdec195d379793f8de1188c7cd07dd3d6eaf64ba3f5f5d1f6cac269c6d1d186c2e6e41111321655fd8157156d67e174ce98ed0ebff4a49b3965a630

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7cdedff92df68383163d50c23210ea85

    SHA1

    12a381a40a9d850b4244ba9caa8a4a7c167b70d2

    SHA256

    4fbc0f778e32d34466ebb2a6e0ebafba37d093e47a21f2aa7b500aad876c2e59

    SHA512

    ee18fb60ef3d229420d9e9d65337bfbd13c984d14fbd643b95ce18eae74cb24c0cedc39cec648e10320f809ba7da66f6899d416bc6947ffa5128d64d92468f5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    47f1a4b7a87d28460c71c1751326bfa0

    SHA1

    934bef8179556e4dbccfb722363c87aca8c51a82

    SHA256

    8e25bd9ce4f09d5fee1b21ad3b0efaa248fdf6e6a453022a692e78343769f23d

    SHA512

    c06dbfab0def0f3daaa7c832a0976eebc5671c21a3caf439da5e8bda390accc30efe68e8993229e0a5180d90e690e496d0727851d8ff248e24ba7d3c7c1949f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2fbd9378b366e2b8b5003ca3bd571bb0

    SHA1

    285942b6d2a2cd6ff261f5c64814c6b189f67526

    SHA256

    16cdc97f97a5c18e8defcd1ec6278c380ecbee546fcf0b70758bd97a2b06222c

    SHA512

    21f34612022c3ea2e5d89c86ea99b70f0c365e4b636552879d338fd3409d720c5c4237d506f13283fce83784ed50c88a3e00dd3341dfef297601895cfcd57f81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab8bf9bb9f52a88c18566f60c7b2659c

    SHA1

    4e6db02381f13b6ac3860d617043136e22f0bd16

    SHA256

    4480fd19059e4d2a977d9145866103722244807a0d60e5fc63dfc9d23ad81f88

    SHA512

    bc2f5b45a3dc83e4821cef1e5f7bb5dffaee7df8254048c989a19e8f03751f59aaf41d5bf7e9ead01a11c96527cd7781efdbf9aebb6de31de180875e373d2750

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a21d7fa2f4d46bdcb57ed3a0ef94ded6

    SHA1

    86a8d6bbc0fa2748c06042cb41f989d0fecb7366

    SHA256

    7dc3b788d327f844c6e6aa28d8163c0ac88a37c1a1390c2e6abdfa1e399a445a

    SHA512

    c9884a42651fcfd4a6ef41efb864a9744516a09702dab2159a8f89c801ebb83dcef37a4f153b61bd2cd26e84851d727c83809aace684442ef84688b3b02d3523

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc7082c90b42cb2e90c70e75b1805a15

    SHA1

    e04b851d8a71713cea50b54c1ff5ee7cd33a0f7f

    SHA256

    5817b07f908985741855be76c5a39bf5543a0bd28139c3936c13e5f79f27ce30

    SHA512

    89ff598c06c3618241974555ab03e57e930e5e5b1eaa2f922bcf00bec8d72a6a2b2980cec22fb29297c1758a49ce1f00bff4a742305a2f3d63c1bdb7f475701a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e73cd8e2adcfca777fb51e100e9ce31

    SHA1

    cdc0ad8ead2e3fd394c98e86b224c205f4dfbbf7

    SHA256

    786e4c079f04cd1d08bcb6737d3eb3026c5c11bb3346973b8b97ebefd32c23bb

    SHA512

    61430bb7c3dd04a33455f1277c1acd6d6d8b3d77d02e4cc270618b1ebcd8924feec9b4986146b5da777f56f82d22708d8506e96dc85a558377b265053821f39b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0df04b6ae88646a113772898e69dac00

    SHA1

    b07705dbd5b2b99de6442dc5cf1a2967ef7eacb7

    SHA256

    01e8bb7467aed7ae6157e67b981d76a7eb2f6f69a2233f97b6126dcbf15ac163

    SHA512

    a51bc41fbbb806c824ac384908b7b144e0d2f6e5bae5a523108e295067d82fb8eb368ddd449bdf6cb072cc371a1ea098d4dffced9f7375d935732e216855c454

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    979e20f3b00861aeeca2bb9edd5c1c0d

    SHA1

    6c5de247009ce986b48761af0bcbffe4dabd9958

    SHA256

    3c9a686f66a0edee2adb3e8acb5d77febb410b2c2408558c0d2e09054e2e9f73

    SHA512

    0113c6b7ad535effb39d6daf2151d28e8f2abeb3bef741d3bea8edb116174801528c878abf0d0fb2dc2af56ac29aa9773254b55a1e5fa985d8fc75df6d8a3e25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6bc4fae7a9dbccd147a7021017581f48

    SHA1

    12a8674baee4b63dff9903b9d8a4073c500ce3bc

    SHA256

    93db1b938c73e40fc4ceb283ae862fb12e6f1d6cd3ba8fe0e7c6337b456be675

    SHA512

    154c6bf08dc0a9cef8e3bae2e0840fedf856d11792dfcf43d9c79cb3e179a809f323d881a94ae76ae0d18bf514b45791cedc1b11fc95c6b3f434cc832ac46aa6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e94040b5b09849d0184c8dbae25d4fa

    SHA1

    3b19ed8577fb6bd70fbd232281f68e0d9d8a8fa2

    SHA256

    be2095ef07b6429056fbea32cdde75f6b0eb30ac0b17ae34ac43d424c3f8031c

    SHA512

    b8462231473d47a8750ef476cde7de0410b613e4d3da44112f30ab576e7748ad60b18a26cfd2d6bd3e8898b381211494acb82c95cca2af223ba0cb3b80a89ef6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c59676527e8fff78b4660337ae3119e5

    SHA1

    67a826685e273f672a9dfcaa0420d4e9d9cb546f

    SHA256

    b047d90f5f78cec3ead132de515e7a1a14ba9a77961f604ed7214906b5155006

    SHA512

    e8a36242ff11ad382f4ca9ae2fef66cec264bd96bc1d01d77755472b356ddf8e29a8b66720c7ba274a7b6556758e867884291f3b54ce6cdcf793d9bfde9def0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f09724df7dc6e12faebfc59565a9d8d

    SHA1

    7e0f98516e0b81cfe0bc3cfc9890442d8101470d

    SHA256

    2a82adb0090b77a0b840cab5cba479eb6ab39c37396c9ba9dfc0545c86f429b8

    SHA512

    9ddf40a8c03c2ff1978081a0a8181e5d273ad20527f6fade4db4c7cc671ffd89734c6facd61014621d13bb19cb3d35b8d7a8f1c31dfeefd63f3426f43ffb4665

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b83e433a6db1e3d99cee2c5ed69920b

    SHA1

    ff118acf05f5f0451d65500d8c98d1e023fd83fe

    SHA256

    2fd54e7d23da22a5a0981078ef61aef0630760680f25c6f7f979e7ed7bcdb9d2

    SHA512

    7e81a84960f73862a8658b0f26d0f8696c64b68475900ed111707cac52ea1628369d84b9d646305eacb897cc1c8d3c442468498184232ca4dd592f7bdc9a5cc1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d473dfe0f364c4778aa9f50bf48c2e2a

    SHA1

    5650771ac9eac3de37b1661196d77849084d0e8c

    SHA256

    b56d641b64ce09db76fda1c9f3ac7ba128f3b316cfc94867ba78631f9814450f

    SHA512

    26584e95ac94461e7039e334af61e31f04f2c35a9757a993fdd9867227c547da3915e8a5399ea9a924cd7fe47c6f6f634b9cb1071496ad41b516350e51419c44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5951b936bbe7b6a3e1230f96a0163159

    SHA1

    a98b2a43d8f8e7218f6764e094248c14a8e61b48

    SHA256

    35d236d71d49839ba5c6d899c02cdbd69315c7e37e256c4de7f6e57f05ded0cd

    SHA512

    3227315e8bde4fb7e91c1d889d385d4645816cd84040e8cbaf9ece4aaae9b2e83fabfa6825d907efd342fc2d71240aeba8c953ae9aa52f3b3d7366b65c67f1aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb86ed1d80d5c48ccb41942f8e930a27

    SHA1

    22aad49336a671858349421325012274484c11cc

    SHA256

    89d40b7a731efe27b5f2b8ec138f363e785178538a3315b040d1d3752748770a

    SHA512

    3ee60e1a91e5166d4627711af99037348c560e86e57803fa6f21a4b561f1617bddd2cbde8b1cf724e0bc4cd1ab91170c8d75b468d8160e6ac6236c92861e499a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e57091123fe14ce95f9e5e31d26e1735

    SHA1

    0c6e8a4ce56ff66f2f8f1bd5ed83e05503f27cc3

    SHA256

    34ac59d5e771f2b929d169d0528124faa9786ffb2a9259a69fa861d24c1ee654

    SHA512

    cd0455e5ecf145525fba0d5af5ad99ba67e7a89c2a61a152f1aff6c7c774ed6c8098217d2bc0511ee09164f4ea027bf1982b4e489ba353b4a4ccd52e3aeac390

  • C:\Users\Admin\AppData\Local\Temp\Cab2E42.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2F26.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a