Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/05/2024, 05:52

General

  • Target

    623efaedfaa94e1e30412e6a2a927bb2_JaffaCakes118.html

  • Size

    350KB

  • MD5

    623efaedfaa94e1e30412e6a2a927bb2

  • SHA1

    4aacbbbe93b3658a4284db9c221b3a2b034ee28a

  • SHA256

    5b40aee307d4e9be7a8ee9188e4cf1fd4d855232e90a818367c67ab5919323d4

  • SHA512

    0a66da44a1bc0d83782bd01be39fa5ff2845780d87fa90759f929bdab39f9d2f6d957f602cfd47eef283e5e94a2146ba64ea3efd16213750a98ea02da3dd690b

  • SSDEEP

    6144:SzsMYod+X3oI+YgLsMYod+X3oI+Y3sMYod+X3oI+YQ:85d+X3U5d+X3l5d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\623efaedfaa94e1e30412e6a2a927bb2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2340
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2340 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2324

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2219a5371a967fd60a76e80212995e93

    SHA1

    6003bf2407bf55338485a0a520695130fab47b74

    SHA256

    07fddcf6be893e84a38532fc77fff04fd1cf5d798a4e45fb09ec363034c30560

    SHA512

    e258a3a905db844d6ab030d6ad28987b18b2289b03406d9e2bb1588e92027093ab539bbf5648e66acd3cbdc765caf1a7d3b278a093d1108f91f62d6bb89b77b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1ab91ffbd92ecaef1a172b4ce76dbd6

    SHA1

    43e6f8032e3e04d1e0572e58a7a2fbcab5981d4d

    SHA256

    9ddc84bb953951da17d1812d5a5810201717ea6d47575826f9134b62c78b8ba7

    SHA512

    4b35078f6a9b8c0a28a5443e21e2feab210e4b9abf957897a95dd69b675693fc7f5577a332560cd0b316f4fed16a4bb4de43c9d6bf27f6f7ce484ec6416413e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6bfbac81ac18347263288b8b27590899

    SHA1

    ef4536f8ba6e78969156a784dd6561211f77ffb6

    SHA256

    39ce8ace69fea818e989669f7fbe6b4f0a12616a95ca61803fcc25f7146b603f

    SHA512

    e46977fa39d8c59675363ddc187fd02c2affc5d2fa943a1194cb5b4cb15386710c43b5613e78977a43da82018d0ededb649289c9bcd7b8b6fe68c4e0e21df81f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    287514256ed83b91edc45a821169447d

    SHA1

    45ee714b2a4e9006926c82d9fcc6d67cd5d02584

    SHA256

    332b4f9ab17928c9b7916baa2d3228f13d211cd6f10aafe03098eaa00fefc068

    SHA512

    bbdb3b773f0833b0f5ba9b35fc15a2699159267992f5e060806090c9d24984c86379dfcbf5649d7e7f65a978b7bdf166724a058eeae57fea8dda657be9a49f78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a6a165a5ba783697a9e0c56bb6788af

    SHA1

    712175fe69b38b7d8f54a4feb3fa461f064ba71d

    SHA256

    c93f421952754dc8b7538b74023f2ff7e01b28fc44ddb54e037c8e3cb83bb672

    SHA512

    836fa2a8bd498e0a9c268f8a89b0819ef2eb6c074fd7bd8753fe14affe865084adf9e168c3b28085f4f34e381fb1753b13ee69e0058d5f177cd2b4159ae55377

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5115307e77e34ad9ff63d6d94c5a1d65

    SHA1

    c16621b97264c11005f54057050bbec5ad65ef49

    SHA256

    5a72496e68af0624905268435f6d734cd9c270fa784c37a32656ccec7d5820ab

    SHA512

    6ec5ad688e71cb34db63d3176518e6c5bf63f6adc980f38c303ba8f2e1bc6e8a630df231ffda9fe937fdcf09ea9d6e8eb97084dd8846573bc1e76b4e1edbd34e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29d655911a7a90f6f8b1bd248fa01c88

    SHA1

    2e27156f0497920a01ae9dc6ffd16796479bb47b

    SHA256

    bafe69d0abe0b23e95862fd36f1d5a21fafee348a7369ba40d71a1a7222540da

    SHA512

    315455bd29201fb057c7b73a73c15b2cfcd88888ee9827040eab1adffccf49dfde96952689510bb723da8bb1230faa5c4cc5adc48106448dae9d08c857695fbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    732b44af6644cea83651d646c3b11e3b

    SHA1

    47dff67b2874754af4b2c23218bcc40a503de766

    SHA256

    a813ed2c9985d8c520c294aa386c2837a4d20d05791939de8ab5a9e195714de6

    SHA512

    48602618cb321fbd30b22eb07a54268b34dfba1bffdf5c70f4cb58042e41166686e5b5f7394f121d9e387f1f3005da9d22b06a4829891434d9bdee49e65ccc9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c5b5bc8b271151490fa73006899a302

    SHA1

    4fb762d54ecab190299b03db9ba69ecce62ce61a

    SHA256

    6aaf94e79baccaf6fa1f43528bd9e59322b35d981f4e46a0f6ad8ad8d7d2e389

    SHA512

    df7a199c78a07fb307e9cd9634646825ee71c9dff2b8d8d0a0d9ec6a003bde5baafbbe16b3d3b98f59219d4ca854d39391a187b8efbbb3b8be00b84d3b8bf003

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a8e033d80a8047ae0aa9eca7a82416b

    SHA1

    0912e3f3b2b623a2ce3610bd407e677070f82cd8

    SHA256

    fddc09004b5a4e82ec8e2170fbdaa49543f7b154868b14843f5518dd4edbbf88

    SHA512

    111a7214cb96bc1fb9eb3750fd4238624778de51667392bafce4b299fbfc548e4645ac4018e9dae80325d0a8c743e43e18f076e5fe9885d2133cda54d025151a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03ba1916a76916e19efa07a423196bdf

    SHA1

    5fadfec62346131f325fa9ee19b48fc742830cc5

    SHA256

    83060c645639cc97df72086b984c0b0310fac63e4e3f2c234a3485a53a18b693

    SHA512

    e70a49f6595fc884d098f83e87b9189736e0fe8c82d893620ff4a363a6e027e50a2aa04d0e4b8218f272d1420ad05c9caa518c09144f3f509562552e09718525

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6da1fe0bb1ad79fd012b746ad0b54d0

    SHA1

    802154c06bbe252c9d26c5257b19f9c210dad511

    SHA256

    5852d0b0aadf72f021bbb57a1654af392815f2bcd9d2512d3a6763068c6dba28

    SHA512

    1bac5786d7ab95d524696f3d39dc16b0a40941116c3d865842bae713d331348acd6200f1aa485693c5e64107a924e0985cfae7ea79e0dc229d17a35f83d4a21e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5cd149206f8220ec7ee4d07817a0ac06

    SHA1

    5928468b752618c51c242ea3ccf9e7a048ffbdd9

    SHA256

    22088be8427dc016292a4934f0e451405a4e9a1e6686c3537bc4e3b315204d2e

    SHA512

    ffc92fdfeabaebaa39132defd21ff4b31a3dffd6649ea9ae4de429758d69c8560cfdf6075babae96926dd78632b22035f733d4a7be81abc209cf8335762c2adf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a6b77bf4749a5c9a15ffecee7553f30

    SHA1

    581c2159fc5685243bf36250269b65556bcf554a

    SHA256

    ce0afb28868d3170b03a099675741755f5a2b39ee07a6073d4c556e63c1f2e70

    SHA512

    5664067dddaf19665e5d5280ff24344057b1f59fa96d45e5e9fe94d420b1b849895085c4bb6e829bcb2057679cea42b79f86ef2e10d75fec03c3d18f2c636ca9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b814222f9f23362403a5f7373b46450

    SHA1

    ef0d74ac8a09082ea538e2e751330d3462fef344

    SHA256

    d6b4db1703cc62980085ad70154b417f7160d64049f57b0792de28d23d18761d

    SHA512

    72a3a4480e6f36dee87c23de6e00f78b50475328f04d4f21e7679d5d20d4b3e237d2a1bbce8a2a677f33331c42385b78eb0d9a2e7faa7ef9e89c4c3b53c6746f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38d15d6fd1fd3acd82fe44b1988f0b41

    SHA1

    809bae061bd3485cebafc75f8fb1a8aa7dab4671

    SHA256

    21d684ff403e469629a1d3f72254b43b7c6acb678b4ea8ef4ccb1e8f754f255e

    SHA512

    3dabb1ad7c6195af0af0a8f328e27a3e97ab8cbad6ef88bc75699eda042ba22a03f70000a34915b3d4c1c19713cdd9554daa27452342b138d159b574b0918b77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c672eef7c68bd98a56f22819414bd8ff

    SHA1

    abae27ee857d803ee3b1f43c8ca7fef9a7dbb2d9

    SHA256

    65e908e2289d5d12217a76a429c9fb7f9093419f1e498349f3eb928fc75c71a5

    SHA512

    919b5416cd749e59408d17ee1178d26954e5ad66552640974fd8807b86abd23e1d7ad954e4cb4bfc382a74dff01ac54815f89ba96d4057eeceb3d4b53b052331

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e7714df4d5c750eef6214ddf2359fa6

    SHA1

    434aedf96764a87e23d6af838c1d09c6d0871613

    SHA256

    abe1f9da3c6ed501f5c7f53a7a5ba9efd701fba22f470c6b90747d663adb0d5f

    SHA512

    97cccfcdd32acf43e65ab078d9b9dda62936f13721dab988efe08ca91f94706522f0fa0863db54173dde079d7d6a8f3fe2569b1d4aaddd01ac6fee3a39363338

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b155dd6756a43f4eaabcb48c6108e6f7

    SHA1

    95c8e2a070459df0b414182ffdb6a7d842f15d8e

    SHA256

    e905b00a3d050c588e41244179f0c9e6bcca3258c5f358ad26c0352945fe8b6c

    SHA512

    1fb718ddd4fedff14bbba0ec65f1e5f732dd92d5d084549c063996a1012f15e29923083ac3cf3a70913c6da7bf02e369f140201abd6deb2cc2dbe23d926b3354

  • C:\Users\Admin\AppData\Local\Temp\Cab3527.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab35F4.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3608.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a