Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 18:46

General

  • Target

    684035c6a5e30558faa89953eee82f8f_JaffaCakes118.html

  • Size

    13KB

  • MD5

    684035c6a5e30558faa89953eee82f8f

  • SHA1

    c56f16d7de66e2f58d88bca0a137e42d76036238

  • SHA256

    b2a11b02a946eeac2239d07305919099a0351935456ffb356e0acc0dda1ed84a

  • SHA512

    03e7e37f67a0584b5930f665fe881a49d9f9765444dee3c50874a51df1df2f15f0df0dded1121b44a631a59cb0b5e5dbcdaeeb2c34b62a322d9fd25bb3400c36

  • SSDEEP

    384:KnT6xLK+Yrrcy9H6YGFKX+i0xw5Zb3Dq3j5e5T5k51565H5a:jd0wxwzygp6nw9w

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\684035c6a5e30558faa89953eee82f8f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3032
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3032 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3064

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b547fc6d1770b14f9b5696a90b4c8912

    SHA1

    af3fe4cb28341033d4711825c14729b2aab4b031

    SHA256

    c6e633eddd10bb105cad7fc3a7de172053b4245b14354c802c7456e54c2f49e3

    SHA512

    3ca91cbc4b63be58aa83499fb17e2d84356c0c84f4b5fea8e7e3b9366de804282863955871e61aedeebf4eea1d8da50434ee463cd6d359b71fd2e66464c3c99b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d253f7c029d0f8bbe735324093fc3e50

    SHA1

    22cb1bec8a61dc1bb19f4f3b5510e8beb0991b35

    SHA256

    cdc9a7950459a4cbc9171e40c74208925f8fb16689fcf659e9d83f9555a2a51e

    SHA512

    aaf1e373fa43cac6e69d46c874c4d6839c849dfeb0d2564150035f6ce680af6f9219233b2d953df25456b81dc2792e1c60e46d0e8ad3a80ae8afd483d68ee7c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2aa5f895f1f2edd7c7829a94fc675237

    SHA1

    18d4bc673de73e61902978e492348d033bcac895

    SHA256

    10fb16ed19bde2c040c089533eaa8d3c7cc74fe40a91f2ba3c3b5da651b4fd00

    SHA512

    95093c796d44baba6cc8cfc870a78567d318530ca77e4be00e1565c79dc58e2b405b2f58a4c8f8648ae0e6d762763abd4317b05e60930f6031ad38cac0e8b808

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33699ce980a808c13520ee800e21d9fb

    SHA1

    6b1a93a9142d915066e917d72c50108f7aa21711

    SHA256

    8ddeb6bf2f4dc0effcbf91a7a502e80e4bfdd910b69667e2c5aa0c08f349b3db

    SHA512

    abccf55a11ae3448ea48a6f7cebcf5485ac39c1909bc7c6de2a67325d0fd599b409a98e607cfcfec1f6baae3bb285f2e0c59793bf85dd3ad2f6bb617851013ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ed522f9d309fd49bd0e9bb64e3790ec

    SHA1

    4fb6b38db04ac4aceb5742a61369ba37be010db9

    SHA256

    7f71eb513fd8059dcec8743f288c1ccf840ddce1fd48d91264d058dca322227f

    SHA512

    30af2e50e38c15a457859ebd9a147ee93386544369997a143b1d127cecf8a6c2596dd45254fff64fd7e897c856941beb8986d3f15239c47b85141d9883f808b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64ec7140c8eebb83cc37f63f1fd99e26

    SHA1

    4762943d7b662d402dfd08ea930b2e40c7ab97ba

    SHA256

    f49d5860b97a5f3eecfa27953cdbe5c26866265a7cd4a04fee74a309e82d01d1

    SHA512

    f3966d31a0a6f5fa83fce56a74acfd4df97b3a68d70c7737b3b2c92ca839aa3a3f3fca4113ac74ad16b02f2fdd292c39d640110350b47d78e0bbb413c0923327

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37fb48149a36e3a4091f06c17e4364ee

    SHA1

    3d37a92bff8344b845f46569b3497371aa80fd25

    SHA256

    340c7c7352ab8d3e9ae7f373a7c30af8e75786c3741c080055de6d5dead75dbf

    SHA512

    1be4bd59bdf29787419d2605697ef8a4996a14a1affa73073755160fbec347e3225a64945ef152852b1e4d484ba79d81a749c882f185eb5e5d7ecc1f03043ca9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e49e0c700e82d04895bb2d4719f4077d

    SHA1

    8fb504230e7b465feca085e5705fa712f9c44a69

    SHA256

    52c76f6ea436dce5fe48291d75b554b6e09663fc0ca363a7048fab0a862bc53f

    SHA512

    4951fe4e43863158afe5b0a93784d6e96de4502de6b5c41c362eba641c29d616752212551b2efdd8b7b383b82d4f03a8b0046bc5eaa188935f37cce8c4e600b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17a160baeba3168eb83cbe19a8783d31

    SHA1

    74a2ec96ad4dc4a31d0f22fd9c902d1400cea9a6

    SHA256

    bed1eadb48e91fa2f4ce8df2fa7b9055b7992c2fc925958c4cb1c0b2f7e2cc0d

    SHA512

    4bd0c676c53a3001040deab18cd08e783283380d9a46e7d2742e799fbdc63ef966cde7ce6bd1cf963457a8e932bfb836dfd25d6043550163f5b1f53e5a0e7550

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1a3d9057c4446942fbbd852c71505c5

    SHA1

    3b524ccdddddd8c3814c62d47cc61ebc3f069893

    SHA256

    093de2bd37dddf381851375c5ab930758bdc2b40284b576cc130bd26779e4994

    SHA512

    55e9c4a279a0c2fff40d8410fb875a2cf14ad9a6aaeed1c31a5fde751890d09e7a579ca8c062804d9a7fd166ae199880a6f84a26b08c01fa3ba3f8d13359786d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5272bbe6660bffe9265209388b8a88b

    SHA1

    f367c0dbd82e1f51e6c6b93ba0589aad66ac6c9e

    SHA256

    4c0c59d02927b8b52885c0cbc0af5e37d63b0abec7cf969d50cb9ff719cb5d45

    SHA512

    7afdf9521f96575f0dcdd3b011bc8163f1567664f744387decd3555c981a58714f5f68ed4b075505925c782e39552c90684093f76fb7e955f8d2f2a20cd6934b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7b88e09bd6f5fc2568f4a100e6c75d7

    SHA1

    e9d6ec921d92019b7b9f02ff1347e9a5f870145d

    SHA256

    f437881426d270f6cc82b297f6b0755dc2e7ccb37cf80e3e623f4d959e365fc8

    SHA512

    317dad7a578670af4af2107fc84bb8c9ec97085b42a0cde44a98f6f5981d473659829d2959668011bec993f63a25c589426cb8e3bcb187fbda479beb969b3f05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5be3cd42d0ca63ee0f4b599a4e02955

    SHA1

    8d60af9342843cc756eca4a9c90694bbde7523c0

    SHA256

    e8a54c80405356952268310336668595eba27b0e916206a7b895d2a62daea096

    SHA512

    af0f47eece197ec476e5061fa9b1b558737d4d289febcc9684bf01445c363bf0ed6df960ad46c1ab305b9a287971f3e08a68a188808430cc9c6d43c0a413db40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c59f1a9b687ebbdaaf7c518a97d8b17

    SHA1

    bf079145d4a254cbe85238a82ad00683c87fcb21

    SHA256

    65b3f344a00df51f83fcb9a20c5c00c34760b7758cf3919924b95225924f0981

    SHA512

    dedd034dc92ee52d719a1eb5e8b8b4af938064b34161edadffd1fd2a1345ca3fa26752863e69a4cbb1139c11fe51dea7b387ebb06e921f96f5f406291a88ac50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd668d79342074cdc04feb857294a81c

    SHA1

    200a8302e9eff59a4b511dae5702fbb25c29f2e9

    SHA256

    43024ce2bda8a041e2c7f1e3060af09e88fdcf28f93d4b8ed5616e315f25f0bf

    SHA512

    4fecfd149b4b649acbd818b975a092f0a43166a764ab4fbe5df5be7322256f348e53196aaf69ce0326c2737368549d5d5ef81581221fe152c05c9995945fde22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62027dbfc4c63f10dcb0e9fbe117d28c

    SHA1

    c611986ba7e9ea8372b05c15676e1b340c87afed

    SHA256

    9391142b85baee4b3e75b93bb4a8212a2b6eac0e82c5b10af4f33e2715a3bc80

    SHA512

    a2e9eca35dc3c3a142fd9a9a41c073eae9240ffe57930de7869f9e6249cfcd99552f6ac8dd25364303a95bea5c65c4ec4238f33c36d3be2be2d330e64ab46798

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8380a0f903cb4fe619106f4821827726

    SHA1

    6839be6f9b57b1b65f0a6da9bb7f90eff33d3a31

    SHA256

    fc698137197d14277a2b4c53bfd6a3f8fe4cbd186988b358af61b4ed0a2097d0

    SHA512

    e438fcd370bd491ce4e43b6376ee7b72659d1fd52deb44f854dc052a9735296546a1c450a3952867a350ee3228d9b4ff7e1795a03235dd0523188b54e768e89b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6b5f54b9a857b7c5eed67caf90147ac

    SHA1

    38f33cf07c2964b886e65acc408ef1b16577cb9a

    SHA256

    04ef6c1bf53c7b3f806b4d7450606246996d6ad8b37ad3ad8e09820ea161e2cb

    SHA512

    448ef448182495bd030c84b9539dd2ea1e26e3497de5f6a64d2280300ef0c727381af9696465c677b8739091eae18c66ab508ec31559e95ce6e84eee949bb940

  • C:\Users\Admin\AppData\Local\Temp\Cab35C1.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar36C4.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a