Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/05/2024, 20:15

General

  • Target

    5b43331439d2a59d80b5c0677721a3f0_JaffaCakes118.html

  • Size

    139KB

  • MD5

    5b43331439d2a59d80b5c0677721a3f0

  • SHA1

    5f9b06d90cbb6afeb77481e51e72006bb93e175d

  • SHA256

    74c0a564361a44248386c227af6ee098ee69db5398b3de5691e26b7c636b5ffc

  • SHA512

    22b6144102ad15f4468eed0bca3ac7dce1a063d6287ff2a94436500db4f53bd5ea1e3051db6bf04f64fc0831c3b9cd8eddf4f1bac3192d94f8ea0c66654e6922

  • SSDEEP

    1536:SWLS+0sE4uU7lGHlyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3om:SWO4uHlyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5b43331439d2a59d80b5c0677721a3f0_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2300
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2300 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2620

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b734be7c885c0518b94382c24497ab4

    SHA1

    e02e238ef464360ad95d3f95f4cde489424ea9c5

    SHA256

    e485b58b90b35960b17625ae72281ac62cc8108066eef95d3ed0eadfe6f666c0

    SHA512

    a308eb7f2a5e84db21a472b8026f16a12252ff573d2379bd3847c3b42e6b846f8ca04d8d0d30e42b42abb12df1d4126d25599ffc50eb164f7724f6dbc15b2a3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f416cd3333ea72c26847f43d57e128da

    SHA1

    4e880f502d46aeabeb5aae0bc7a86a4185f2c4bc

    SHA256

    09615e7905674cb07e9c3c8d9002683f0494d071fe78785cb2c6b683eed81480

    SHA512

    b53813fef356d5d6233481bf0c7fbec4f9c4fdb7c325d98c1a588cee8afe9e45ce2d96e5d39578dab2be4b322ca8ec6fd4dd73d5cebab724233f31b31ea2911a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    baf34ff71309e39d60cee938c3913708

    SHA1

    2ac05ae2a07290ee9c587ccd37a04c52a923536f

    SHA256

    c7c7ee0e25bb03077e472a3ec8487d7ec940669ac45a274d5cbacc0e370760f9

    SHA512

    95c632531000d5ae07640d0247de0913f1c8a0c72cededebefd0e86e0721770c47ac5ed821743e092241fcfcf66853ed1d1fe68168d81918523f8d8f2c7dc50c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08a1e9bbf50b88c3165024b47364c474

    SHA1

    c203917f6dae960e7ef730cbcb71ebf5ec463130

    SHA256

    72d7c05e9fdad78f677b7e1e50b40e57dc38b217cd778869f026149e9ca466b0

    SHA512

    b60fadf8d86c3e77dd8e07565f216a86880bb3c16641706793a329a34464de6d8674f9ddbd18f11d5cd9feb8bd862d772937d72b93dd6b3f3d2affef998b5dd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dee77c32b2a7f9cac1bfdb8b688b513f

    SHA1

    67c34a81d6657b629b207f3f1e2d8b3244676476

    SHA256

    a0e0170c68f9bc74db0e6ebe55bae55d455adef61b044ea51c9a76c1c9495b6e

    SHA512

    35f4ec70cfa9d0eb4ffe8f0bb1283caf3543ceb5b3bf5cb2663dad845823afe764805020ae279ae7e68b53dbc5e362f1e1ce6c30e402dd95eff4d97131c3ceff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f88163aef5809e2074589729469a90b8

    SHA1

    8bdf2faacb98784d2d31f4b9222a61ae8fc5f6ea

    SHA256

    3a0ad6f0f0807f0d0153ef91ab65ef24464a22903df54c4791b39d9e22cc50bb

    SHA512

    8bee8929f84dcc2c8822d14aebdd830d28611f6f5f9eb40c4456df4486711173570e45b301556cd2947e30f292a4a00eab52c7a1077ee7b6a36cab456ac9c5ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3f3a1d38bfd1b6d838c8b13adb700be

    SHA1

    d369f21d83d4c847882f6e9d114db2b484d0d9ce

    SHA256

    c1895b3bd838f50da62d64acd7dba1a0e686457db690499cd1a501c8daf0d1d0

    SHA512

    ed53b55180c27dc1ce64c9932dd7eff6024e3f821ef6707fe7bc4693c1da139caca685a422250bbf7b5fe1d67d73331a374a1fd07fd1c534e4cee0a667a863a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f8a039a93130e6a9ec9366ea528d568

    SHA1

    25b62de7688b6ecedae1c1f628a4ae289e412d51

    SHA256

    8e1a936d7779313d75abb29a86f0802ae43fa4308aa07ab489b5a5527a0e2b12

    SHA512

    a211fc49cb4d80bd0675a6e4f7576adf5eeb91cf7c9a7636a840ff8ddfd03a1606fdebedd46de8ba1fe10e2a3b39f77f6a872b8899a21149e8a20115e50d4443

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b6f9a1e95c5dd93e07f529eb2edba9e

    SHA1

    58ff585f716762d0e39c559c8601c15402c7f0e9

    SHA256

    cfaa5949d45ebac04facf6fc317b4e126c622181b7ec28aebf2343526c46779e

    SHA512

    0cd5f39a07d1e10767824c12df9456c5cf8790e81d369c399cc89728a69785855d3767ce43c868a95acc4e8fbff1ad361d543006425b2b3825bbed6b63162a23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3afd26caf6ada8024028bab1b6550d9

    SHA1

    9243f2c13e739221aa4481b52e3590c1d1ba917c

    SHA256

    e2e599f39e8bee64f7fbc9acb2d046d0a12caa92e43a2f6e94533e2d1f669f29

    SHA512

    675fa1e8ebc506f32cfaf7187d5da8de52cc6f485f26014f403e347832b257399c654ca08dee97c1e0a0be5e8b0fd8b5082012575a6f42805ac33dd88ef84c0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00f833ae7c4eb12bc7267c8a7f3a6a61

    SHA1

    8960dbc1ac42d5afda45f66164505cfb535c030f

    SHA256

    7f488b8858ed0b8a28f2cbbd71885c90e6e4412326b6e1c3f673cdb7587c776d

    SHA512

    dbfc85d38af44affb55ca4d044f5a1c70f9cc8a101e118e87d51562b8f1661fa0e4f75b2efe732e96d7c72f4719a967fd79059b5c46c4058c714ed1d257de4f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9bdf1b83fdd87955479ad905f46e163e

    SHA1

    3c40bb815b4fe1d2cd03daf8b071e3f158524040

    SHA256

    c6f0904389cf7c1b3cfe8cc3b7d32f4bcd53eb7b9c036c3253a020f8037a12d4

    SHA512

    6dd9fd3fbf621138611b9d54e39231d43de40fed780bfac29e43fccc9cbe03a058e9424a2ead932103d3d4a78a56c4d07a5bdee81fb0f6f4e0b24eb0f4d9104e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    559d5b8facb342f29e37f1fa48f99c93

    SHA1

    bbfb4bde97c032340f07f60eb7e7877f2dec8d20

    SHA256

    22ebe3f36af158080d92e1dd987841a6feafe85a0ab33ee573dee03d76649268

    SHA512

    e0c97235c15a3d5fbd1092837620a04df3f110c116e8db3e77c989a936c90a2a7da24f9b0badebac32b919d2b595a815bff6669dbee4c0ab6ce08457e97a628f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17ec135ce55e1f79e06337eb6e97c74c

    SHA1

    f17643c434738f305f9a49e0438245f44b7c7570

    SHA256

    a0e3dab76dec55c0007b4774ac570f5af26e828a61231bc7852f203ae13cb5d3

    SHA512

    7ea1ab129679494c77637c661ab92ca77a475b69fdf1fb81c7347f645e66457b0c2216c5c8d77b9df74d7ae66ebe385f0b07ef73c6021f2c4c1c39d4911c5b05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e251bb6fed1de6ab474d760f1ce71f5

    SHA1

    8bbc6c40bc224e2e8b8a3c2e27a7199accf679b7

    SHA256

    3d383682eb6cdf2537fc2793a3eb995497049cedbddbb1ed2db321a89b2f143f

    SHA512

    1c80a4037144eba19f9522bfee8853eef6377ac287fbf543c728efbcf141076ce8d356add2cf3e3043a838c140ea6889170c9b2a07bb09a4544d145573ad6a46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    844fbaec9dcb81d3371af6c59fb698fd

    SHA1

    b1c8eb3b025a80f1de68daae56b9defbf88df6c6

    SHA256

    3266c49be4fe671dc20ae2a0a06584e43aec7bb6fa2848f880e32de4d1420bd5

    SHA512

    d59fc6983ebd37b898c440abdc51cd9c291bad06416c118021c0f02d94655912f133e47798224cc9bce5644a220cd0fb05d00c1377fb54b81109164aea7f191a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d3d8d6bd6e89cf06b52e8e332bdb016

    SHA1

    13979d0d96633f6dd72b0936c89fef811787df40

    SHA256

    e7f7a000bcdc91611c561bffb0cfeb63f355daea04ffec5fd80632eb891ccf42

    SHA512

    72eda3a7042977b00c3c052dc189d49491680b0e156e397dabeebf6783e771c69e2d9a7f5c2dce7233f69d045ad269cc3a9a14f751f1aa012aac779a59ec90a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09a201a6facc786178662301e84f3a5e

    SHA1

    c26ffb676fe7b8782a435c0b35e6f6c4af6a28c1

    SHA256

    86890459e03b54a916d7bd93e8ebffb985c35badc46521e310938769e16f6628

    SHA512

    22fb3c279b20376c2152a56b1c094c12a7375c49786e658edba6c1ff822615110ce80c8c8b436bdace6d16eebffe7574f87224553030d1853b757fe590ab3dd3

  • C:\Users\Admin\AppData\Local\Temp\Cab94A1.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab9591.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar95C3.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a