Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 14:11

General

  • Target

    5f7f08d6943d0b827e6e72a7358abfc1_JaffaCakes118.html

  • Size

    461KB

  • MD5

    5f7f08d6943d0b827e6e72a7358abfc1

  • SHA1

    2d914a0d30ecbaeac14c6f520f2ecf5def4210e5

  • SHA256

    3e5baef6f28401a69298a881a18183a8b2548cfd63160bd4ef959725afc2a59a

  • SHA512

    b36cd10262a5d88b5dcaa72f7ff02b5dfca0a946ffa3d0fc3c38fc25036d924b970bcb71a57b27fd11b1615e77bdb09fb57241bcfaa4f82a7bb6746398ace4e1

  • SSDEEP

    6144:SWsMYod+X3oI+YasMYod+X3oI+YUsMYod+X3oI+YLsMYod+X3oI+YQ:v5d+X3+5d+X3U5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5f7f08d6943d0b827e6e72a7358abfc1_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2020
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2020 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2600

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9231fb75799e0c9016cdb712a409724

    SHA1

    23cb9e6d0c4aeeaaea1c7a78f5f775e56f7298b4

    SHA256

    93ba5eec4f96847ce37048176afec0fed2364cf44d193797af4b086592696490

    SHA512

    29b3ac6daea82dde0c6c21db2995bd2c9841cbd1c345d81e2c7eacd4298cf05458018f5142a1e71d108eb972007856a0a1c38dbf608cbdcdc0bb8ef2fab39e33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bbe3f6250f6fbe6ad64882373de34b2a

    SHA1

    97be675237a9971bf359a1ae80f4b59b1ac02c5b

    SHA256

    1aef639c241feea7e233644572bdae0c0cc6a0dc8832edae607b94446fd09c77

    SHA512

    f239f012d3ff9cf3cd315d73e78a58b462609a75743e3bf56e9b2c25e49cae77220ab8d00e35503cff28a1680c0e13c8660b0dee78b639f32e20160e90c0c8ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b1b0b2254a505d87b1133c841f1d3e00

    SHA1

    04f31e66858d9687a427d2ff92d5444a5e106712

    SHA256

    804b3ecf880c2068512aea44398d153e90d3ca51c4a5ccbc0945db5866f3c059

    SHA512

    27714393954d0a842b950d21fce00dc4b5ae0776d2c7f74c1c4546acfe2c601fb356efc9cee6dc291a4a2d7fec41472c9a4b22885c4f836f10fa0c0c4dd47f38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9f1a000304d77796d7d286eca872ef4

    SHA1

    2f93f6f8a84cdef465ec029191bbae83c04226f5

    SHA256

    ae49c8c7e651f535a7ff83a6d78fee31c4c253f83111578dc44b4adde1cdf702

    SHA512

    e79551eb74f597ae9fde453025b698d5305ced0728135774be154c83498fc0a4ad4af71eae572f3b1999fe56d6add9711142e2d5ba2b800a95c446630aaa8477

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2f090d7073e7da63472d8e61192f6e66

    SHA1

    ef480fee790da5d3156cd891974eb7060d9a0d46

    SHA256

    d5942db79edff84a73742aeaff0045b5ffe76df6867f83826569b4d9f7ca1d1b

    SHA512

    69189b241256c50345c2cf3ed7771e6cb24314edb9e08997f2dff26dd4a6e364cb0bc70de4d686902446965f77575b74689e546006c4759c7056c1def4092b52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d66812167e52f8b2c9b834a4637c9a8

    SHA1

    49ea3b1d109290f67e12b43be8381adaed575f8b

    SHA256

    e9193b4b38926ce6d97de331620767f946bd3186dc50e3fa4d23fd1df773eac7

    SHA512

    36a5254387f68ab1ac38dc742161ea050628d43be54ff1000e205ed7c3f3966a6766f43904b93b37b713eda994a5e85bf1a252e48d65c28b3e2bddb3ad94af18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cea6cab2dbae42a1acf1416e39df6992

    SHA1

    07b96b04d5706c7e584377ca8e367023686d45b8

    SHA256

    33f0abd67ad908225bd137f1806f5f65b79b2b472a5bd7e8ffbe3ea1a0d276eb

    SHA512

    6a676a3919dd41cf71d76fb9d26a0488d538a88e563141ccb81edf677654ba9cfc47aba8fe0f875d9ccae012e7f057e997192dff63ceb750c89cc42937e5d22a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56c7c4cd31c66193b2743451bc2d6ab0

    SHA1

    b11b354c6de0cb23184849ac42f37a8a192ef7a0

    SHA256

    583ae641c598df0ad70b923d6bdc22535583ce0b11df5c5c07127a3fa6704adb

    SHA512

    8dc133e26f1d1c26d57c70573f70dc694c88fb185b472c63f87ad7237685ee9cc8f67f5e3dd5aa991535167438f090d346e1cf2678fae252a9cf6b095ae4339d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02e538821ab19aef8d5948070a8d6fac

    SHA1

    f5484a6a306b8435fab3f07cb4ff76747fdd97ac

    SHA256

    608b10b2b264de1946f55610af50fff035f5a123c9dc981c5aec70ad1d6a3fca

    SHA512

    0b013dcaf76e14315dea02bf6918557d4b5549efe49c374afec663585f24cd384c71f1f1e1cb52c3ba5d840b0b26fc92e3252e93b15ef921df834fb4439f8350

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97d160add3d2db8c3c0e65dc0e607005

    SHA1

    19fa1660999a0fc2c974c02fad31288ecdba15de

    SHA256

    68af88310db2682b6a9b1899c25f0a0fb59e304ff3437565601fa712c74105b2

    SHA512

    eb8c4ea56ef63b35f0561a23065d3194aa529ca5d2eada50625b7fb96bc006a4c72743285e2c16e6be3a91ccf70e2308938867fc769b58fcd487a553e6102a49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5435c2835e997e4615df55ae1cb22756

    SHA1

    fd6b86e45353b68e0e0d9eddfa2980869dd2aaf0

    SHA256

    0a6893d17ac04bfecdb22f4e273a5d3e8c515751a097fa30867266f3038abb4b

    SHA512

    5745bc3d8db598b25e58942595b2cd7d4acde6bc9ab6d78d529d0947fa277ad99198ce7163671be1861771b4dfa316a1fdc6a39b71ebf8f67e37560fd278c623

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3fb825369a8f6e487de428a5608be5c

    SHA1

    3f598d791e6d3c46bde69c3ad0e95e941cfd1361

    SHA256

    00b754bab28e0549ed6e1dc968cd35b49296e182577d5c0199e7d45b32243600

    SHA512

    944e7a3c7523383ee055b460f3f5f3495d2babd7c4a3ffc60ee99ee8c443794f73dc8f9e7bb86e5fab64fc23f0c3d24fd2a786ba1bff724c70a1460136460392

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ecc2e4bc303ef4987d811821c8a85a82

    SHA1

    0c55f623070c867861ef839248ebe9e2aacc449f

    SHA256

    a14fa263c6671cd6c6930ec2ea1174b44b6ca43e8fe4ed9060303da37fe12333

    SHA512

    8fb377731f1aa8dd96a4f8da82149bf2931a65135d17c7d5fc590393a770bd5a22afe61d4bdda43fb35aae21919e5bdc601c143e5fac9cbf83de1bd3b3c389b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1efd39927592b1d4243470116a736301

    SHA1

    e3736278b837d304165f098b35b1cdb04600520e

    SHA256

    3945622b93ac8b3b9793cc680aaafba3fe2c9a8043b81dae9c1d2b253b2d5bef

    SHA512

    021ba437be7e93f532ad320e0778519d1ca25f52440fee0a35c5b42172b8d2e28a116cf3894b15d41f4b52277c732fa2f845a3fdb4d23b7b8248a4566a7506b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c7b7674b15b3c4c8a210221eac279eec

    SHA1

    2c5efe3cc57c096816c5467cca9d91bb433d0e28

    SHA256

    e5e565ecf2d5c17890e4f5eba6f000f49993cfe69ac221e78d8e9609a51e4b4e

    SHA512

    d0c7a81c1f7129c7a251237305ad56a20060f5daaea16b03bf8b5cb649b84de460062b581d241c9aa914355fccec7b692cce471d5e95547452e88058bf33330b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    508e8ed377c11bc05186e627f81fa6e9

    SHA1

    5dc03db7665d5b8ad962414226f605f80127bbe4

    SHA256

    2959bbfa042cbcfe9865b71c7a59e3e11b6e476dfc18586af9f1a729a459710f

    SHA512

    ffade2bdffbb8800bbc7664065d72b5ce72822eac7d5d0279e40e2244aa360fb2539413549236c4339a1a350e7c34c9fd0a62c9828f7cb978737ab7d93d0692f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    310f76b224ff031162934c529a27ea2b

    SHA1

    28cac372f73fb1112e64b0153398d32721f4567b

    SHA256

    31a96793459c9e2ac9f4e501387659b25d3d116180bc75c956467b0d161fc7bd

    SHA512

    84284ab822d7fe78e3fd329ac58fd3f6e5e224ca14e12fae869d48b01a80ddfa1e160f77bbd65341a0c62fa556ad31ccd758e6e687e1e102424997c4a0a032e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6aa9ee0475eeb6db55d7d92a9d4e2618

    SHA1

    13874b10a799ca3e36c64648aa3c784d36b67fe5

    SHA256

    f3624dd8635ffbdd2d2185ccec1957efd94738cb66053ec94738c3693548d1d4

    SHA512

    ef8f091075dc31a764a4701c2b9128471e6d91180d038beb2c832b09d7c8101c8b96389610a46e2e7c16c196816d4281a042e53c843f00ffa29f17e907387eb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a4a15e062baa943615ac81b2b740c41b

    SHA1

    b26293673792d7ef08656428cf6e4c789218b38b

    SHA256

    ecafbc0e30b834fc8f328b4385e3c80274a7d13cd1e64d3f0c53fbd2d1d2dc3e

    SHA512

    1c7a9321ba6520a6115702c12f5296c55599f5ddbbd61ead77b1d9bd756b01f43c1f9835743eea66112aa17b0b6bcb81a25f5437f600d4d441fcfc37fafe4e5c

  • C:\Users\Admin\AppData\Local\Temp\Cab5811.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar5882.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a