Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/05/2024, 06:18

General

  • Target

    625073548f884f9bff4921e5e25d933e_JaffaCakes118.html

  • Size

    94KB

  • MD5

    625073548f884f9bff4921e5e25d933e

  • SHA1

    2c12b576e1627f9a1c2b75dd5763d187dd1a260d

  • SHA256

    8f55a4dcb1bb6795a2d099fbff729962b6f1297490691e72c57472eb95aaae04

  • SHA512

    25e2dee4c84023d4a0f0a96c3eaba64f4c16e372c0bfd1dabcd2c085790370ae947166e90d9fa5c265f58974cb9973ecbd4be210a5788d1d7977dbb89a347185

  • SSDEEP

    1536:WMLiNjI7Lul5O3E6dnfw3FLyExUFwR0LZH64y+nBdkrY8mgHC+qpEyW:WAiEMaBdkrY8mgHC+qpEyW

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\625073548f884f9bff4921e5e25d933e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1556
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1556 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2240

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e264f6416983012160cc668261d1f895

    SHA1

    acc50e076b6505b5fcdb498c72435a35fe7342f4

    SHA256

    697f61587ffc7c62ff930d93abafc65966bf3ecb934c8fb12999931bace3eb64

    SHA512

    ae2911baf013292186b4c7140aadd2242082ee2ba93690fac116693969a213d06921104de125c17167c7317277123f67b66ab3a1b6ca3662fd34e492c308ce11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0db9a377d98dd9b2ff1fd9ca7584cf1f

    SHA1

    0cef014584ec65db856414ba0bd76282667d336d

    SHA256

    cd3314d5f15b8c91105f0f5a394fd89029f3e5f48e8f0cd68706d0d387f76088

    SHA512

    3eee89259d5bb322b6cf86fca417f9aae021a8af4cb826b0560623ebd8f3665a028ea86c9e8cd9e6439d8a82a9b9037ff2b27d8374628a9e9588b4895c538f41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82951912f68faed8f6c3dc2ef9873179

    SHA1

    b23497b95c4deea5faed6e08d6acc6a00f9aca9b

    SHA256

    86be53ac3843057b7a5afec171c3c41ce3c4ac17df4a83d2963f22c116626065

    SHA512

    7d30c5234610db812b1fe34a33d63be656b7e2a9c46ec229f5cf6cc30331c29af3be3dab3bcb4f762e64e24aad4f6b5eebed52765e56c1766505f28b717320e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c76e3814f1b9f685f14896efef55e0d

    SHA1

    7b4f7f417fa1ab0556b2627f3001c2537050c8e9

    SHA256

    d4129f8107b61383c6ae2230c56387c91cbaa4c4431979cbd5ad829f4dfeb8b2

    SHA512

    67df4cc51671c41b090972780cf2433b30345fd48c0700096c0e80211118f1ec10843cf1e3af6b390fd76453a0150170d51380e53e57ae5b24c579efeb5c899e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    317165c9bbce4af8a439db7c9a15126f

    SHA1

    8138e9dd72af4d59fc199e54744db22e7aa50f5f

    SHA256

    5e36c62bb68ed1ab5a9bf9cc3b942905177fda6bed7c18741c6d16f783359df2

    SHA512

    741eaa3ad278fba19f018adf443a96e088973f12ab52146dbf455e21ecc278751304895aea0e59c324ad8e6d8b70b1b1043074bf0d58959033a540915c0c521c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    668174f634fc62f4dd8c4e491833413e

    SHA1

    b65b7bfe717c50c68ade8444b199c2821d31a478

    SHA256

    5686da0b8f230bf79aa5e4151c4e9402bee55e11f8d20ec36871ea42d888eabd

    SHA512

    50b59ff356562e19613ca810a9a9fdbe1cb1e35eebe3cd8787ecd48bc2e1732eda6a6f213ccec1470c04d6dab5f62983a35efcca21893473d44367c856c10d23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0564e3b63daeeab36bf7ab6873f4caa7

    SHA1

    407316b4a996ed479a89388ef8842cd0dc1b83b7

    SHA256

    6fde2e89796bc5d7d9d1aef155e75850ccb85b9a804e37ab4abc5c6b2942e4b4

    SHA512

    9d83afeded6a24c49e680e4fc7a020a3c5dab296b95fc6d8511f3883c02db8e8aae01fa839fa90e5534e80c78f5a0b56e17c4c63be89d1beea998f1a4f55696e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c747234433789538f95e1f7b0b0b01a

    SHA1

    e48533e359c901f5e54465817a683a4080b0eddb

    SHA256

    5f4648854f387849defba524ef75429ab21d415524266e0cd997e75a6eab9b02

    SHA512

    8bb8746951e822f9c88a3e3d1a09f077e41b555487a09cb017c3b7eb8eaf8e30fc327c9e5be39fd17a308498249a180f190bb5b8bedbb9de00a89ceebf446f54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    054c1ae4c76732f374fdcc2978a7c031

    SHA1

    17abeaf1c8f644d3cb2f6c1a00936ead0a9ae372

    SHA256

    573a11210932d6ba3fe4be9fec50a9aa4096222fd45439e882fc63bdeced4db5

    SHA512

    4866762ac051488941361422c00c12eb02ebcc03a0645e3b902baf816aee313f18c1c6df9c1eb9f545cceb0f52b24e4ca3f59256b01fdaa7d6ef7959da799705

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0fa5f854d1b1feb5bfafa9502e8b65b3

    SHA1

    9a9435dc4b4450a9926e33286142ebeffeb6bb11

    SHA256

    47116529c462d2702b7634dd0c59045d8c2e471d24cbb1d8710f27a80707f54f

    SHA512

    5bda2e58fee6315b3af01c138fed892696322dfa726a2e2a8bebc4a365d4c0ed1d4c2e8f1759098a24d5f710e004723155220f54c58408249dca3038dd8140e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aaa24d5a902a4df51cef016564181fe2

    SHA1

    ea6c6c22dd4cd8c0fe19699132e11d69bb4024c0

    SHA256

    524a5205e668bd83cadaca293e217a3cabfb8680ffe828e61a6613e166297b89

    SHA512

    5101df8e2f083b6ff7a4a79021f2ea66f6e0fc17710be8e7c8f33be78f4ee121c7812396fbbad7503e8a3d20aeb7e8f54e58aee647d3057ff6fd8c861cf72892

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3555b5071b142db1b822e167faa76d1

    SHA1

    91d7759f839b6f004de7871dbd29515c1e3c53af

    SHA256

    a8b05931d9ba2e578b85a4cb34345a42f378df9686ffed57c81218909b42e2ec

    SHA512

    bf335e5988f1613bdea3f9b1ef85c379b108a6def921c4120b9c928bc92078d13ba8fea40ee246b21bd405bd6db0c74417240d16ca798bfae2214a81e851ce5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3161e2603bf263f5af6a499e556d8d1b

    SHA1

    ac48466e4b52f9eaa20f2e1e7fe266d2fa18c3e4

    SHA256

    10c7ebe51f30422d9d4738aaa0adcae4dc68cdb3acfd4422a20d2c67a75b3c76

    SHA512

    12caaee94488bdf4cc8d7d4a379f4a8d0b93042d403df1dea9fdc4c1e78999a9ee0774a03b5e6405416ff1f9e9db91fb687bd8c13d7bfe802f984e58151897d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4e1a89091ba14abcd5226bbcaef72a6

    SHA1

    4f37827b99792465f979da85863a17eebee328c0

    SHA256

    a40c449d9ba0529c4f2f58844562a10601e26fd89171bf13ff4deb4791ffb162

    SHA512

    1069cdaa6c6d571040cf71857daf1a5ec1e99e0767b9abf12f67732e5fc88d4a279875cd679592bf5c5b784b25e31a23107723a0132b6c10d76fb1ca5887e9f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e71659548bfeae3fe878dfc8e3132eba

    SHA1

    2bb4855316eb31c8956e90c7496aaa468adfb023

    SHA256

    316f70520c5ac3487a52d63a78285217978ba23954b845dc967bd4b4794e47e9

    SHA512

    3e5365b212a9ca0b730cf011584a6aa0860b7c527dc5273cf88a92cb0c1d8e2d965c3778a271d33ef93a68a34adc35469c3b829163ab4a2ffb6e6f108bd13ed9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d824b9835af5d0f2b58775dc3c1a6d3

    SHA1

    3e2af3fe3dce1907921023f87a2a378c5eeb6b92

    SHA256

    e2849bdea091b719838c30722e072f58b1aaad14831ef3afe4eb6329f7d09881

    SHA512

    ee091bb7703ed3b53623dc84629f8827c460da67f5bf0fa0b3af884f6d62e8ecea1550cf3c11a6dcde4c31eec3219fc787a99229b58808dc58a0325d7aeea732

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8fe2646218094f0fb218e9d4711d78a6

    SHA1

    1e6bf81e3b6acd6ddcc804db21ce1517cdca0a16

    SHA256

    b0801b777d7da0e8ba65cfd43e6c1328aef7cdf5dfa27e98819d2fb8803e19ea

    SHA512

    b72fc9aab4881ed54dbd8f45cae00732e9b8138ab3dade700210ebdb5106cae5f4c72c8bf4e8a442b049a1504192f05b85b1bc5c193a059db7352aee483cae9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10c3ed85b21ebae6447e3b8a72b90c91

    SHA1

    876cfb779dc2d12bd1a5f2436591a4b092ef9b7e

    SHA256

    2e94e2068f9c65a9ce876fd438b90eb6aed0ad02dcca556da9f73611922f7220

    SHA512

    f2dc17dba9850eab498dd04d14e67c0f59efc3518788e7b8aaa19f12734058fda09fe308e24a6c83aaa6a64c3ec7d4efc8f7baae1b8ad55b8cdc415bc50e396b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DKX8QD5\fonts[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\CabEF60.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\CabF04D.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarF0DE.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a