Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 19:31

General

  • Target

    4cb6dd2c4b4323229ab9696d96055057_JaffaCakes118.html

  • Size

    26KB

  • MD5

    4cb6dd2c4b4323229ab9696d96055057

  • SHA1

    6bbdac01e5918523adef611c1b2dda4f0fd1d3d5

  • SHA256

    a9cae756d453dc09550c2efa7bb384072e68e2d66030cb3759d57ccf330ae03d

  • SHA512

    95a4ad5939db147e25af4f6c2ebab4ce5453da2aec62ada576cdb6222ea0f02ee707aa888962699a14c185fe9656b00339d5390e3bd36a34b9d57f81a2787cad

  • SSDEEP

    192:uqQHLub5nM6nQjxn5Q/HnQie2NnKnQOkEnthRnQTbnlnQcCJVevo7NtNFo+NzQ4e:nqQ/zygc+gkX

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4cb6dd2c4b4323229ab9696d96055057_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1556
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1556 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2300

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe5d4f744cf02728b093b0da60518223

    SHA1

    07933d070a21c439b663b5a209a34bde5316d8bd

    SHA256

    127676830f2950c0acc425b369ef2b02db7bc4325fd2e8dab790bd83babead0f

    SHA512

    e88e663700d2ce759d005f9094294cf6459e4a97d60c0844a68532a9ac450441fa4fa98ef11ed1f499415d7a61291f0d96e501b429c9d56709ad02531111a2b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2dd915be28f940a8e17ba00bd8c126c9

    SHA1

    bd13a2d6488198d1fc676b8eaa9ae7ff2e475848

    SHA256

    3b0feed57c26a8db4312cc8de5700468769e1624acd640e84c591dac7e8cfbdc

    SHA512

    ce2ed729f729a1ebc64cd96128b111e6530f51b0d686110e8e62fe80db44fcd53b175866086bb01e6fbb2ac500a49046befb654b974197e348fc128ffc23cc47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a6c823140b7ec0cd673d1b03b8c8cc5

    SHA1

    c918cf7113cc300b45ad1c23c34ff982c8350c0c

    SHA256

    ee636446bccf4d4fc7d11310de43e925d5ef691633e3f7eff8707ad53e83d48b

    SHA512

    08ee0d06005b803d6117c858c446e4a6366b558f3baada70a159afeff065d131c0867abf396718da5bcce3c486771b2121999e56023ac3b7245a0dd7df001b59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2abc82be027c76286f5142d37b6bed9c

    SHA1

    09ee3bdb76061be3c78778b102b3bbd6489f2dd4

    SHA256

    b5646d9d9385e266adffc2509f0bb6084031321efed65950f99b769d2d1c6bbb

    SHA512

    2516bc71d1a35de7bc7d34ca28e1e0f2035b5199f372554704bf01a9cb94f1ad48f44ad2457dac545eec5683b60f634d9134bf49591f996af5ea5a3c0b7bc821

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7bbe887c37a87fa3b0e6e3ef075327f8

    SHA1

    5ebf884866726d57ab452216f634131291ccf579

    SHA256

    efda2e61bcd80faf71d930e7ee257993d9b6f1c630e0130168b1a19a7554af5c

    SHA512

    4bc6a606dd61c3a0b237cbdd126746d40ad1c4059da7696dcb22cfd1382c600f2b9bfa725b18f2db62515cf82322fb3c4a6fd63183de8bc1e6d78177079165cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55f37d159480f8d4d15a51bff919811a

    SHA1

    2811391790b3d2c6a47e7be6b209bfcd561580e0

    SHA256

    8ffc478c669104328491158b2622abfd216a59e9bf1b4be856b1f3316664655d

    SHA512

    2068bfbcef772750af528c6ff39310d4cdaf51e31b3a7f3ae7a9a003480731125f57b271d61b0906b0fd3b204a8f77a52388311dd94b2710ebcecf2864d712e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f0634c863138ff6c8aecf59ca68a9d3

    SHA1

    a63dd392417dd297f2b0e742c1051647554441b6

    SHA256

    f926e561f150161e8785dc302f8d9a5c9495f49d937b954d1ad65dd5b7c9074f

    SHA512

    7745d009fce6317fa66727d280fff531336526645127f7e21fb8a0f2e73031a94880aace666deb67957ae3094204e67eab71d2f14954cc1badac6fed5f4dfa9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7afa791a16dd717773ad6b8562ce8171

    SHA1

    5b77b2512a077d9e093d5567652617edcad95cdb

    SHA256

    767e5c2c0b549f06b9d962b218f56eeab2e797da6c4268fc591250e4c06ce4a4

    SHA512

    57ca6b6cd41d6116ce9fb0b2f8a2f3615a2b4b6b9459054189a0ead809627293312866c8dfe60fc004278f399b7c83039c4cdd5c7bfe459980ea02b9afc270cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad5d01a3fde7d74efa189830eee726dd

    SHA1

    eb0d8e26906737adcd6cb2539cec371d9c45eb4d

    SHA256

    43110f1f07b005f1ccd8ca4b11a2df524647e4a6d6863ac09d3b8e23dbba3080

    SHA512

    d3dd7062a8be4d0a95a08f2c6477e195ca6c0211ed114fdb370ff99af63c13886b4138fef1ec4867735a9bafdd0d1dd67f9b2bb08d6da3ec9b2304ab1bc6ca97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3bda46b90ee6ec6b5330410961d02bce

    SHA1

    6ba1f9303fc6fd0c882c8fdddd4cb6cda3324f69

    SHA256

    4024299dbce042972a2e3916027e41189bc7c764a517cf277c9f738a6f58b368

    SHA512

    49a189f6f25e132a9cffbc8922227a2af00eb0fb8a8d1c25a24f6c52f39fce08b19f03d62b4881b874388582388de283e51ec1124545270226698c2c965adf6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b58474c7e6cc29fe02450b00de25b8e

    SHA1

    3cd097e58badaed2eabee258f66db28bf4283b5a

    SHA256

    4a7288e74921b007d5d25ceb78a26bc3e6704701c7387dfba429fb210ec39fe8

    SHA512

    7365b91db33799bae684601a5432f8c4098947e7b740fba3c9d1614f552cc9e60b55b7d95b50bcecc7bac12eec5c5765b1be2ba6453261b55bc2cb07b959d0f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be0f0a6b6b6f90717cd0b42a2e1668e5

    SHA1

    41ca4c37f784e55810f13b52f3ec6bd7f23dbc2e

    SHA256

    c3a86a877e1feec7de48a041564fe1e1c5053fd5befc0350d6c6d9103b96762b

    SHA512

    665f5d8ec99afb20a21210ae5a21ade495e9a44ff0f86e681d53d7dd10a096c239ce799069ea5d9e1486d5e37f189724463320bc7c46556384bc545f1fa84a7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17d6e518f3889f39e528f7077974febd

    SHA1

    dd7b30927ca227a96fa475e61988fd40dc1fd9dd

    SHA256

    57b488acf01187a6730f93b57243bd07b960d66ce7158185e8f2e2b7340db77e

    SHA512

    1720828886dca39efc18a033b87fcfdd0349b037acbd168f1dd795ea44b1f13b73826edefb6b122914e8b50c980bdc4cdddd69aa345e7171b63b61151e22fc49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15f40158923c7bf5e4ad1dd8aff36b1b

    SHA1

    b616b9f7f0d22767f30c73023138af8574189090

    SHA256

    a463690e523154f7d6a15d858a104554a8cbd0511a373c324de85f3811d7f32b

    SHA512

    336d99aa522b753bf4bd51e6d70d2ae8180dc8949f6639394f275c99afbec174320257eb5600af6751638e5dda69220e9553133d2bc698ef11396f12efcc6d2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fe3b26fde491390b9bce952aa97dfdd

    SHA1

    39685a350dda0237b2fab219dc05f6a82dfd339b

    SHA256

    d80a00b1a05cc9c3ef5532b75c00236e3f85e2480e6a92bd82bd6f9b2d1fbd1a

    SHA512

    632fed48ff6de529bf01087e0a15fb95321e69031ed2781b0fad9a4ab7ff811b23055530172a579ebb662d9762011506a936814fd4bf46f3d087e34b3d0e7bdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6dc9e5f4d67d80834b9504127a87d196

    SHA1

    9e64399047d62f10ee6b513636c749c8e090fbd0

    SHA256

    3b94515696312c5dd110f5a072b954f2f9edbae6ce61c1511068801dfcf15131

    SHA512

    1010301c1f1d90caa90eb08a1730130316be0e6d6a80698263b99ff8c8b802491ab2623927aad8735871be4baea7c608e6f0def7a18047ab875f3bc8ec2ca9ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d22bb3b6ecf8b2ef6bf15b4cc87061eb

    SHA1

    e4b59357c8af005c4658f09c284e30a205fb0456

    SHA256

    dc7510ad0a4dd2184d6c58751b822ce2ee360821b7fae0356ddc56267b6506a1

    SHA512

    87bc6c89164878c59364519444d8699f77cf0fe1bc002a0cdc937be7958f9c0e4a35c44c228651f374eaf7abc99b8ec59f416267d9bea9bace89b68a85d44f99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f4fb0e1711b138c0e17db619decd357

    SHA1

    6b0ae5485e9e2b5c5606e0f95c5ecc64b3fbe2bd

    SHA256

    a34e138938f6b1fc7132a591ee0c627ef0912649b6b53d3d548fafb13d06cae7

    SHA512

    95899fa6a4c6d31d2a4e140d67e26668cc8d639ea04462204a850288ab9a1b8d0cb5579c464664f8df873ccd9f6b781dd24e54fcccbd8542dbd158ba5fba35dd

  • C:\Users\Admin\AppData\Local\Temp\CabDD84.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarDEB7.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a