Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 02:58

General

  • Target

    5cd6bd7af33e5eeded45c7df08046052_JaffaCakes118.html

  • Size

    28KB

  • MD5

    5cd6bd7af33e5eeded45c7df08046052

  • SHA1

    dacf0c2944d088f71b0cd290dc01aa9f4d164367

  • SHA256

    a3829c8fd1a1da64079e32a5a0976063ccfe02a4c922510973540256cee96341

  • SHA512

    da24ac9918cfb056269cff9e4430694f5339e5e7355109bfa055e2438105721b8db6dfdaed8e141c2d8bc35e2219b7137fbd31d4b6aeca85ee1a4f126b92ef25

  • SSDEEP

    192:uwHcb5np+HYnQjxn5Q/dnQieANnwnQOkEntP/nQTbnRnQ9eqMm6N5aGjLQl7MBgq:VQ/sP0DaG+Sj

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5cd6bd7af33e5eeded45c7df08046052_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2740
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2740 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:1540

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48127e46d44bb63bbaee7d3d4718d668

    SHA1

    47384e9780182d1b69ae89d06b7c976aa0158141

    SHA256

    3a8e846841c71ee1bb38c6f186189c28b9b750231d25d4f352282817fa2577c6

    SHA512

    021d797ca33a4fff88a6c10ddb97f9013b3ceec16fbecd4cb1885308a244f64444d08a917b06dbbffde744432146211748b5356fb55f3ae3e69fd5f94bfbc48f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d60be54e70a10a21a17cc646d3797635

    SHA1

    254a8c7530896a3e5f8078e183aac6abdb5868f9

    SHA256

    885b01dca8a0b1d17a68b0b6f3dd8a67d6f79e88e9fd36b54a90e559f9e28a65

    SHA512

    a58d36a4e091aa0e11fd6c6cd077dbcc441aecca12330a3e1382436afff98955072bab27b617bcf298cf286884be352a7e45b796e1e51a9131a66e44e04e9690

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    032980c4351da523891c1395ca95b7c5

    SHA1

    aee5545a91dd00c9f151e6fec95295fe9f0e9ce4

    SHA256

    61a8b54b88da2995e12114c7d32861436144cb66f1e013d9f95c698fd04f4664

    SHA512

    3f13138d3865389051343c73a3dde79016efaf7fc3dc32a482a4b250ed89445a0e11a3374480e9ae37a9c02a3bdac91312a852c94903bb622d74ed6a34f6807a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66faef44bd560017c41ca651cca82dbc

    SHA1

    e032d070819e8024616ae907da56a0d9fd4d853e

    SHA256

    bed60cace733030323856c1b7ecde580b99af96ce80d531c65464b221ba649b5

    SHA512

    e66d0708284960c21e0c06f3f6adc42a44d46e97ea757d3f8295afa0c14fa1b2980fd9c689d73af5c0e7aa75151d1e0fcab37aaa10de1c2fdddd9fa598559c6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    809d4538d201f093e8502e697d9d1c78

    SHA1

    92327861867d1ec7fa6988319777605d2a806345

    SHA256

    2fe7946c67263fb4c2086ea936a93472315a128ce161b545ccda8c3eeb596f64

    SHA512

    2f888174d72173166f009d03cba17e3e5c67f298c6693c75b3fe98b4ac979f9dca7940bb07e9689506d8031287c75b71edf8dfcab5569bd6b35939628de56958

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5cfc4b3e417b3a15b07607404ff2eeee

    SHA1

    365ca72da6855dcba954301777bd21ce7c601d89

    SHA256

    d122e21699022b2e9ce195a0e158d79787e7bb5a37bbc3bba6ebab60ed3cd36d

    SHA512

    0c3bbff5166891beb7fd8d5415701dcd1086727d24e1cde65273f3af66e21f0ca818bb6e9372a4695516ba7b743a2057a784e838da0c95383a57b31a822564ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a4ed48d5b4394f0e2102e5918a03d4f

    SHA1

    766d9b3cc16cf36512c2b91b250086c0d140d500

    SHA256

    362ea2428f64872f2bc0823238cf36264fd916d247fb8a6333874665f39f4f5b

    SHA512

    02740194bd4ed41a0e88eaeece7fa3e1e2d603c38c0d398df7b889dedb9ce690b981d7be0e64deed2da7435938232e4468a6eb6a5e789d075b742bf15e4221dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b966c26b4db82aae8ae895e92cb6ccc

    SHA1

    446c5e16e2c4c9920b41caf34aaf6a0c9bc9bfdf

    SHA256

    08cf77fb7732db994bcecb9a1e1c6552b4528f71de3a93c1a93b7293026942f3

    SHA512

    44c3f3ca52672a5f72fa6ded1b033d04d487b677a19b5e668967da535173e24d17a18e3d833802fa9a752261b6d5446f0cc0cdd0176ee0d5470316975d36657d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b261410eddd8def44d2917b4e101b219

    SHA1

    63fd0a9a13dd984e16e458a83f605ae72f3454b5

    SHA256

    96bb8061c585b7d06c155bd047c794f15dedc53c16d000750e0826f2d85d4e5a

    SHA512

    e680fdef35a0ff8fb589e79263942c1dd2b2156beaf8b80434939049004c1db6aba56e55a539c0df3112511c3d5121bb67ac077245e6216386666f64d5e9e6a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    808e4198f47e8abebd4533f546840860

    SHA1

    893816d773fc733ffd96ea9c41222d5e41addce4

    SHA256

    f8aa88cc2571fe69ff8bddbc260bf76239ac60fcb2f383c1eae0ecbbda82bdf2

    SHA512

    fd3b4cf55020c8d52fca8a753718b9335408d0bfecd541aaf4b315215cff2ea9264918631c66022bdb6e8314802a96b916f0264e0d8ff4f18639664ada4aebd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a22aaeb807601c49e4fe7a5c06d0bc6

    SHA1

    4465dee461a3e96ca258f212312aa8ce3cedc527

    SHA256

    cd02814cbb42dbcea9d5baa867e899cb93d36493d459288fe49f9696ac04a39e

    SHA512

    6fb8e9d9c96d9b2edd1fcf136540892b8e093937e43c9f5e26300bbfad8814bfe42446ec082f483f0d51e26597e97c428f3ea1256dba478a195de0f9c6181560

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b3255ce2c6f770058b976589645be22

    SHA1

    f7ceb7541ef827623a76f825be851495dd1a1e4e

    SHA256

    83a9b530cba3edeeffbb83829328790655f6d16e483926fc734ca2f0796d7af0

    SHA512

    512570f56de8e7b81f78b9df83076318d917547eab5d782677b1d8d278217520433a2d6ceca0314d3825efd3e92d349627d856424c7006e746fc8c74dde1a9b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d399b3df8d0ea908c61ab5e33a797308

    SHA1

    b0d881e47feaadfd30435e15a7fd7e310e581043

    SHA256

    5ed7d7eaa1e0c8a9c4dfb53ec6981f0d41bf9fb089f463d90bee6b45e302044e

    SHA512

    6e6e85326d4283663ee3e43a012adc32df0bd4e6762ea2034b61d5768260831dd8e3bc21c0b5dc3131205d4d62e7de61e9783e24b2c42512e98c2560fe82252a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    413822a5fc979b57313c1e10d018af34

    SHA1

    2bb631bc62f53d4b6b7d255eaf0f1219d6129e2d

    SHA256

    4620fbab6914970cfd1bbda70ed0e3a0230b2e416103f7f0f75f95837c674a7f

    SHA512

    22cd7905423845073d96db95b8d271cd8b8ab7ce99e9b235a964f735cc13d08c038f39773568e008119d9c55c17b9eab7e40774ca88772a94b5d7cb4d7b75831

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73004d98f01916f48c7dbcc10f784c70

    SHA1

    406d1039b23f59cebe9ab9e71269fdde8b504f52

    SHA256

    4949168822d3457422dffc4915f434587b4cbe63f70673263348dcff633109b9

    SHA512

    9122a0c5fdd2e0b7ebbf5e1b81cc8b03b9e251f4b0334c373c56a00ad326752f203e11d027ce580eb7a3260e2dbac1f0908993cc6ee9c28e52554752a6e9c10b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d255ac6487f8ef2401b4339a8e33a777

    SHA1

    df8ae137bd002a599e7a50ca0cd489e0e126a22a

    SHA256

    a57ab29a50a095a4a55a9921c290825a5f26d33da1afc85935f14e9f64eccf6a

    SHA512

    528467e3852a9ee54fee6a235bb779cd43ce132f27a2282729e926ae7e789ebb4d1c1b53e7235dd95121df502071cdd2d66920492121469462ed0c60eefcc134

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2bac198e255efef6431531d18d42ab61

    SHA1

    750c4a14bfa2952f3d82c64824b7f06b793e8fe2

    SHA256

    de6d54e223ec0cfbf056f756d96cf8936d603f357b19dc4f6fc9f62eba3a4435

    SHA512

    1761017abf2e7f07baaf979c47968eeae582874b4b1bd543b2e989c28873c50c7e90ad5e95f43171e73b064aed1a81f69f2fd18b4fa61de139dd62acc66587fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1d1b92e966e1c8b3f8c1d675280f368

    SHA1

    b7ff007057e588896e6923f2a08f929d80c20ca3

    SHA256

    4f5057964a1aad40e299313d076d71b94fad02cc5b66a0f8633278316bf6749e

    SHA512

    0b993146b44d41d68c78c045d438d5d56bf8717fccb9c4421ea39b952f5fd03385b01da154aa8e9cd545af4da144d4c881305ccc721257fd287461c9e92bbc6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4eec0bd278ed32f9f4300187527eb2f

    SHA1

    646dbd6808a57841c3476fccb1f84b1e8347221a

    SHA256

    8c96cc948208f141f71744d726ae06b06f9ed7a6cc88772df74bbaad8f614b5b

    SHA512

    8069ef890e77e15fef448067916e802b80507a135965dabeedd78fc7e171d24ba21a6f4f3165c3ba8239753aac27a2c22a85264fdd82ab59a1109c29a255e8ed

  • C:\Users\Admin\AppData\Local\Temp\Cab2B95.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2C68.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a