Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    19/05/2024, 21:02

General

  • Target

    5b743459517533da9964060a766adc9e_JaffaCakes118.html

  • Size

    139KB

  • MD5

    5b743459517533da9964060a766adc9e

  • SHA1

    11d65b146362d25e4f795c232d5bc77fd562363a

  • SHA256

    4181f95638765ddf856110eed8514faba7e8fa81172526bd20a2f14ef0d7d3c3

  • SHA512

    d6f5f2bbb219816d429302aec21e05a5ea5daf9c20e8298dbea8646e724ec603ff8cc26b69738deae27be1886ab2f4af32ff5981f8786c904165d105ff00ac4f

  • SSDEEP

    1536:SOvh9xglfyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOZ:SO3uyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5b743459517533da9964060a766adc9e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3036
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3036 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2988

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49816ff6967321f0a141f7e3c7568897

    SHA1

    645e42e4188ce4ebcc8a87912f994f7e6a31a72c

    SHA256

    e30c04de0c86b510b44e21ba063ca7b9bcfe6912c9e436abda5799f5fc20babb

    SHA512

    7dd0c84bd164f3abd028751ae38b85c2811807b5cdf9a65fc48e5ca90c25c5d02950a78970f8b69d65edb8168c8d741cf7ec7d030b686d3325114848979f0efb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4dc60b468aaa54d558f374485f2530ee

    SHA1

    4d016e90f0d93269c1b641ddcd796cf066547340

    SHA256

    537b68ab4a0c82b83d93b4aaaef62bf8cae8d474aadd3e5e0bcaea0c4f680d31

    SHA512

    feb57ae24fd0d07c5b3cc7d3a6e301047ea48141c73516f3a1f7d0ddec25b22a76a236f5c97dd9d52677791a4f8715de9e608b3b358c54610630581bb7cf26e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d56fe3d453f04762354a610fb0c262c1

    SHA1

    26daaa8e0ed9331f68adc8a96f7b81ecb70aef2c

    SHA256

    11704559236bb22b56f47af5826e9d3053603f36519a690cc4f2b56ac0e48409

    SHA512

    e1adbb8037c9b67cb2642afecdb2c609e346dc5410a8c3ad37eacc8983545b08ab36734443e65a4d318de1dc5e930a5ca40186a9d2eaea7d8929a52653608c2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a42b2db34b1240c42e5a8e8aab30bb67

    SHA1

    a1283b16d9d7d2197de8369a81f0f8edcba87975

    SHA256

    2f0560a2877f9f99b550cfa6919432e588581acc67d691903d956ce8f32ddff3

    SHA512

    dd8bcf0a062b3ea7a680df214b8d747e0aef9a1f5d82cfb54a57ef54170b5ecff9d75b36b3f9c077a0849bea0ecf1141036f33c1f67b743703ee828d091af2e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    037e0d13c40c92b9519d916682a82632

    SHA1

    c9c48680f94d1314960495cb334e2b5d0dac7a3a

    SHA256

    572f91f10f6bae6af972f7f99815c530ccd7418023f091fff655d91aec0ee3d7

    SHA512

    a3db3e9652b392c0ea006143855196a71538cce4ee746f339e2f12f7a31f9e4350184dd80d19185a47c054d88f4e99ccdbea154b1d5e6ac3ffd807846c86d916

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69e60f8aed133374e6bc85dcbb6e0b7f

    SHA1

    f375ada45494c6103e2cbff91ee40a1fbb00f27d

    SHA256

    e73ea4409aadb6e96e7071f4fe4d0f3da479b1074cc447202d63c6ccd8d142d0

    SHA512

    966d5f5c97037085802bd4f989e6266d7a8b86cce49ca1b42f9d6fb91ee732a12dbef434c443744c99702029c23c83548563b35f9784fa9cf99cf2ea28dd36f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82b237753fedc3cb95786f44d6a58307

    SHA1

    33d9717535eb775c00dfca3c4613aa922bf63ec2

    SHA256

    7f5b741f3e891729783ceaf90a521f7129acf78d98d1e0bf187ba2f4905d90d8

    SHA512

    efbf9d61474a1596af457f5ef589e07341943fda3c8eb31a67e14a525a61f3472050bf7d13e51d5c34ae79663b8e2071420e6aa6de1b5e9af740b46b04b9fd37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce2eb276d0c5845a856140a0583488a2

    SHA1

    18f6a5f987ccee14b1cedbed6b3e71968967e2e4

    SHA256

    4bf612b09efdcd2c187fa48a958bc514c53d41a0e863319214196fd9cd47cae2

    SHA512

    7d01f8f8e6ed290ae81d032d3312b991afc9369c1522e3c3334b84f0d7d1d491e0718f316e39240ccd02763a3e818f5486119bfef21bc5ee0e5d5a9aa7118fcd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    621c3dd4212071d665c73e297c4b412d

    SHA1

    678cda97a2cd48fa71da6613bc809a7d393e54c3

    SHA256

    96bdf7e66cc43adfc52a5a678ae9f8b53772e5798ce9fc03b8571bf7ddc7f2a3

    SHA512

    65e6c17b1476a47f6412a39e83fd9c53339ba66b92a9b15ec2882be6b60cb6a5df77eb716eeb6b9b29b7aa9c150850630122998e0dc4c6529e69522b441243cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ea59242877248f61664f8edc1adce7d

    SHA1

    3e3466b0ba298e3803b1f5aa9645ea7958670b3f

    SHA256

    08d3802ea7f07ea8d1d4dc2f93ae6d46aead9f39827a75c0d4dcb010e0c98803

    SHA512

    98339abd0b26ca85523e89e24bcfaed267c843fa588c1cb8e25ccafd8d97dab4ae52377eabed9a589ac4fbd7e64115024df991dd6a3f2e4d46322dd958cf2803

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    611931ed5341054588e15ed8139580d4

    SHA1

    83f708d0468080f81012a5131f934c4ffc0e38c5

    SHA256

    45df41f9fd27d0f0f9397add8f5cb91ceafcd2317d2e3cd56053ceb676e57502

    SHA512

    60691c0be59bbb9733fd20b9ed15130ff9fe6dc45d5ce879b8bf5ef2ab67d25b16864b9ea800b01e94436e4cc62539f29204cb8b347a1ea46099b7c354d24e31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3142fa17121b93297ce2c52a3260f44

    SHA1

    b4ba8bce5986a87e25ed82e666a43fdb592bd1ee

    SHA256

    6c7e5e68cba612cb74b1cfefbfe596334d5b1b94178cb738e487763923431576

    SHA512

    dc6dc2ed7a69c0e2609e3027bd8e7eb6e0b8ed96e1bb096feed2ca51c63ce21f8f5d27eea591650c301f3aca57374bc86fd9227b6531728bbe66321c1bc58d94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    829c8889c8be08cfcbca9b7526274c2d

    SHA1

    dc269703acdfcbd62422a3d17694e6a796023ac7

    SHA256

    f2a4856da59a2b3bfe6224f868f9a3e5f02915215577af0f42410540f89f57de

    SHA512

    9b216570ce3639494dd23df80100fa1fd6ffbd2b3990e22fae8284e14a64039b1117fecf5d60ac65f00e848163ce76b9c36c077aa9629d13978ec4c3e6e593df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    231d59c1bcc3d2bbfd4ba69f3f5e8a40

    SHA1

    0d5236c5fa4b456eb962fda76968edd4505168f7

    SHA256

    951e1eb555d697bb7242ee588ad64da3612cf5dc674e3e4a5fab237df5a9e691

    SHA512

    a67a51201cc0390011cb4bb2da007154ae16184f21703541f28ef76d3d9595327de7a7022973e76d1b95cd6c696c0587089ddcae39af8bf433ef5d47ac53e916

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37090d797efaa5d3b6f908aba141f11b

    SHA1

    86a5cde0cddbbc28da209c093b170ac729cb561c

    SHA256

    c438c249c343f9ff6a8b7b6b47362c3e8eb0e21675415c7c82c5d7f8ef943ce0

    SHA512

    598672ef5a3aab159be7ac473140f13988283cd339cd3dfa020be905c6556bb72f6850389a4526c0c90e996a232e4e2f5909e979018bf832fb705f0f590a1e7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    669954e2b3ded5b438ae981d3b8108dd

    SHA1

    8e9bf194eed2ab1a2bcc3ff6272b1ea81ff057da

    SHA256

    a297a76f459e0564f8fa5da489f8d756656ef6ea6490018dce072daadfccf560

    SHA512

    82670b2b30fc4479a01ba404d231aa389a58b1801a6a5ef90f4d6630a98e2b6de3cb6ac41ea4afa4c0ed16eae8c0df9b507b5ab5fb391814b8549db7eb3f0fba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eec15a1c74ddb82601e3fa56a652c653

    SHA1

    0babd8f82d7fd988f3c8468e0b6e321e0e71f538

    SHA256

    c965b184e4b2f9d85847b7822961a024f6a5d66ae0dff94529f79675408ad236

    SHA512

    7ea87632f61bc245018dc1aedb9673b01f19ca5ec2454c635a06aa4cbf2527606b19efd1ed1e39fdf7600da19d1bafd4c257331d7301b2d0877b64d65e44d244

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52441be52f67dbc3ece8b078617015e7

    SHA1

    df3f63d675428796cfe97944b23e190b720bdac4

    SHA256

    fd510524227858d776296f1459e1b63b4861e7693b2dfa9471cdd17e2f8aed11

    SHA512

    bc1cd2cb115a15e93616e4ffa3816ae17ad38cb99b46c50462633084ac18a4ad7e724348c89dc97ac72bb8b84df66a1170b22d40a8bf8f34cb29db12c90fb771

  • C:\Users\Admin\AppData\Local\Temp\Cab1F63.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2046.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a