Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/05/2024, 21:18

General

  • Target

    5b861219eb649915662a878e3607da6c_JaffaCakes118.html

  • Size

    23KB

  • MD5

    5b861219eb649915662a878e3607da6c

  • SHA1

    377c2cd17f6ccb1b1d908e47e8ec4c8006ff4e74

  • SHA256

    22b4d5775641c71bc5aa7d92c7b4003664269001809202277af044d8d9ad0628

  • SHA512

    264f8d48e064836f79a850ffc49bffd79a70c4eb7d06976f1cc209cbb5a580aa757844203d4d4f9d3686b1dd949938431fc6d188aa44781c22b5d032a1d76cb8

  • SSDEEP

    192:uWYaaJKWMNpOb5npFy2uiZDotbK1hinQjxn5Q/rynQievdNnUtknQOkEntVUSVnL:iQ/N/1

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5b861219eb649915662a878e3607da6c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2140
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2140 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2084

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e49f76f58f2431c11afe111e0850157e

    SHA1

    d68b377c80515168ed395ae859bea335a8544cf5

    SHA256

    301db0b4f06a78bd6da2b3d312bed123717035ee1423926ad0057fd9687c726e

    SHA512

    94fd325aac75720474bb9bf18fe56bf9bfa8e339beb002e52a3b6e80f3ac01e61899c90b7a8f91249b7ac7eadea4ef27132f956f8ff07eb122307ea2bffb4171

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eef0869b944ba78ced379b8ec4b7a61b

    SHA1

    03d48f74aa1cad4ced719ee024867284235e86cb

    SHA256

    4f79d416d4b9dea242a104c049a9a8dbf7dc23ba683c8b7cbf64662612081a3e

    SHA512

    5ee21216ff17d22e18be94041c08708f907c4bfa9ddde576d32515ff2f00cefb5eec4dddca02f8abc1335ac5b6be6cb8bece27d389b90e87973e423a183224fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f10b7130fcd440883ce3231641cc825a

    SHA1

    9856393fb734426f35d2b7b1fb0e13b60c81deea

    SHA256

    2832115d4cf0da5bbe1bd8d6838c0c7b3b49ef36f04f149ef8b3f00f505a5ecc

    SHA512

    3dccd1ffa275f929e544cca8999d9bc49c0c261714970f71dd6e82692aa51b58e934ed41d10ab55c3115d8bb1e1d132260341a6a9eef801fdc4898f81af3f5a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d53afead5aef45406b3be8d9fce549f1

    SHA1

    193077200b94826a5834752dec8efaf365a01dc5

    SHA256

    4e6c6803794dc53b32531eed4f041b8e0b57328e968eeb3f68323e1730529cd6

    SHA512

    d065974a521c896b6ca3edbda812a1b5ae913fe036e046240bcba91716873f1cc2de31dc6ae1c51158f8e849e325a6931eadc58d09a00bf13ea03ccdff08eece

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e83193b1167d2990371fbbf3432c43d9

    SHA1

    636c103de48898cf5518e722b96a0921b58d4761

    SHA256

    d62b63d960676a2c3945ec70f042a03aa7bdb6ce8b3650f3582539d174f745f2

    SHA512

    d36e5fa0e1ac0e4a122eddd9181c5bb640bd22f43f377d98e1fa32e7821df7d98ef33d6cea6fb788889ee3d60fd0785c105229e6c8e2c5d97d7cee9b573c03e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d198772c97d2897cf34df0c648db6c1

    SHA1

    78d25bf84dddb83f7b28ba94daff4b8952d92d22

    SHA256

    e87ca1b3d9f21d4b8a6db6e6f29f2e70ac76ed400eb9f6af6439427abbe62609

    SHA512

    5c670867f09ef95eb12311ca266020ef6f2931728dc77c5f11c8e91b66915ac04a71594bd8a93e534fb8902d5d328e7c8cc14e0ca674ccdafac6c6af5cc601c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41862457743c4233e3a3ec0683a0dea6

    SHA1

    b63413b67d06263fef190fba56d8d47efaac77f8

    SHA256

    eae08d6cc70cc419c730ac41116d79d8977c58dc4a56635ef121a7d520264cb8

    SHA512

    29f10705055cf23ca197c85a7032d0edd37afd4dc5352b3ee18a0ea77d486930de4589f9c86753fab6e6f58ef25efdb87ec199f846d81d95ad19b9be3b466b12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    719e8e6443ddfd3d12f3ebf509293c7b

    SHA1

    c6f216a9ef730d05f6c8e77b1e7d3db6506723f6

    SHA256

    c4ad729da4cf7eb0b4f42288665f7057695b0732e0bbd7244073bc781f9b8da0

    SHA512

    18d1a9ff4220f8d0aee44377b88d5dd2beff49e0059cc4cd3f64a3342a48a98ca6606a49c82f58abe5839a4f10a788856905738b2cfe7a4632d50fe9cc299630

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8a6e24e8ecb9276686661f6e0e1489f

    SHA1

    968f2e36a8cd85447c3960caf6ed0355bd7cd272

    SHA256

    9e6a56e8c4fd6ef0dfd2fcda6ecacc53c22569a2c0af2f568596c04c92938e30

    SHA512

    f0e4ab17b89d621f0bcda57c66e318efb682c4b909bc452bdfdf224955eb8188bf996bdb29976ad219c6e470b433864d30ac434d6154116a1661f4d7e505373f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    791b9619ccdc6759084a9b2b56cb9ad5

    SHA1

    c9da601e2c605aa2c0ca56ff6c2c7283fd7c487d

    SHA256

    9122671c6bcfd84d638b8c728f138017472fd53bc923a8aecfc3f8bd79bda7b1

    SHA512

    f231e3a8a9483469b8c7fe06fc906dd7557e77e7eaaf6ab678d3c6e613f698d82caab90d0e44551801cd7c75d0e71c5b3eed173cf284d09b747dec54eb0fc245

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d7be637cbf7619500220a42bf2cab415

    SHA1

    ab4719b579f369f8432a0a57022de57d6367976c

    SHA256

    5049e721f36f04ed40a1db5a8a725fdf34fbafe30d3353b4e6019dac5ee377c5

    SHA512

    7c172c59965d231f28341abc2221f94b4569a0c93b7b860cbd93a9eb46330ec9ffdcab6356327dfc8dfc867427d5d34fce5661b35498eb46a1fb3dee57a8f398

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3e8d12c20d8cd7d29e9df7cc3aab1ef

    SHA1

    331cda1591e18efa53a0698fd520c1a32523098f

    SHA256

    073f91d05ea6403bd76444116f75bbe9543d51d7f6958e91910ccb47cd37c21b

    SHA512

    27c2d82d00c04ac20014cf75b421f93f33bd9b5ec6c74c6de40ecbf88ba70a691dddb16a7dc6486703b6787438576ac054c44e2e3368221300120be96a90d0b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5659e9516985351f3f65a280312d1038

    SHA1

    297fddcbecd2ba78a932fc2518f1a2f1bc5f3163

    SHA256

    003837dff04c56e3abab654b8ef1c5091b923ab68af14a322f1f99524245bebb

    SHA512

    09a355238218e97e2dbba1677fec6b22f1bfa907418431527fa25a2c08b1abc20f21d3e1e416a1aeeeca570ac2c2f3900cfa57f2b36bce1a1838ee274dea02dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c79aa92b53d079b81daeb14863c514a3

    SHA1

    402d3ffa6c3a1fee53fdafa970c0bba776b3408e

    SHA256

    50d4c8c09ce0f1709c4c86f4ec8c0b09b849c473f3d369e950bdc8d21e2f9b83

    SHA512

    189521b1e1423fc6f5f5adad2b1dec121dd4eb0f23b7100cc495e70f033a8cd651a399c098abf05cc85a8963017394498cfc919e22405e56f745eaeebfdaa0f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c00e2b97a8de2d1cd1e571a299dbc3a4

    SHA1

    d77eeef1fbf5a223885514f2e9a1410b36cbd8af

    SHA256

    e73f4fc473bc7803644e5cbcd73e5f9ed90a67589036b3226a0c380495d3a2c8

    SHA512

    2fdca70f9411d840d918a79f70f3d03f42b287b4384192cae74903c74ee6dcb93c69639432330a87e246d2483ecd1939f17982a420d970da54dfe858b5d40aef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e155bdcf69da9c8c190d55d88713c1a9

    SHA1

    22b8b2b852eb620612139b0b73ce726bad895e2d

    SHA256

    047788b51a87e1633c2f16387a78df734d859d973928f0f6fa36345fd14cc4fb

    SHA512

    18c7ed23c501e92167bda2e94345870ce8051e67611039208efcb205fd683a0c466782edf3432614e2cc40c4c188aec7354f37952c4078ed463193d5dfb36d0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71a2fa25a0baca451c0f2cae3048a7a3

    SHA1

    e2714e37aefeba71cd98ae2e199d852932a04c5c

    SHA256

    487b2009fd7b4508303ce1b32b50154775a40cc01f42f0881a229ea6f1ff1753

    SHA512

    25e9007453d0859d2a5f415da5d43d1c67391730c4e13a17c185d01e870822b69d93617491a09cebb69e77a603d2ef9091fa457bba78006b02b5b89a2980fc48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    842d19b3120738813ce494a86dd6b129

    SHA1

    4a0ceeb3eb6e552d9603f28992db791975988d08

    SHA256

    0b1752617a136d8dd74fbbbf41483dcfe313b4a89bb63e22780b5ba62199b917

    SHA512

    2380de47c23009bdbffb5a196e2b6bf7c91bf48972725ab91013886066d449f1d41a3b1fbcadcc374e20c3cf160af9350a34e73e9af883b5087422bcba761bd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    477d6126b5b890a5e5182fcb7ee6d21b

    SHA1

    96ccdd187594357afb1544e7f7a9c058a6acf0ff

    SHA256

    27584f3c31228e4832f9cf782297acc7e0b43f0b236a3fd7226a39f418e56607

    SHA512

    850d3d1abbc847fc1c5922baa652654c448edc72b58e37423c982f9359cff0c47d3a72bb000b67ef8b63f675e56037687dc9c75089c843d4b7b1408e6bef6b5b

  • C:\Users\Admin\AppData\Local\Temp\CabF866.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarFA22.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a