Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    23/05/2024, 10:47

General

  • Target

    6aafdcbebb8a8b2fc9dcf976b7f3139b_JaffaCakes118.html

  • Size

    116KB

  • MD5

    6aafdcbebb8a8b2fc9dcf976b7f3139b

  • SHA1

    b9925f0b4e8daeea7ff05b8471fb13a9b9bb2aab

  • SHA256

    2207c73035391caa1014e74f3d7fc833f8e4059d0351fe7b7390abeee416a854

  • SHA512

    d1c9dcf9e07829b546475c70e9ec8237fe943cf354f354550d3e35b5275e1280fcda27231031f9ddb89cfa31d7bdad24905ea5248a238b562b5725f704dfa45e

  • SSDEEP

    1536:pkh3yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCW:po3yfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6aafdcbebb8a8b2fc9dcf976b7f3139b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2228
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2228 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2648

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4bcf94d7c822099a588c63eb20831ead

    SHA1

    367c762d3942a740808647e8be0fdaefa2f72711

    SHA256

    4a112eb5e28fe7578f562047bc56384195e28db7a20f61474289396742a6c7d7

    SHA512

    303417649f0a838d9d6bbfcf18d8e68f8cbd4e0c2e838b69b61a88c0ea30d61e00aa5b44411e453d24e6f414e98215e68a90f69f50d906cb3a0a46a426f20cc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    353c7f5d52ba3d97f0c90b6d1ec33ad8

    SHA1

    1252e9b597987bebb37e322986d54794a82677df

    SHA256

    00803887fd697418610ac68fed0f77fb6ef679cbf6df0342666885d4232b4598

    SHA512

    96c78b307e4ad8a3585a57ad7461801784f0b50cf0706c47e3db59c6fb8a907d25798bf872f821cb0928d8a963f345cda460e2c58244d7e3c12d5edfd6e62be3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f61cc8df34a38cfae85ff32dac3a3c2

    SHA1

    0b29b46059e225a653f6692f58b3980c0e85cf47

    SHA256

    c83f3a6ddfbdb1b016725f6aeac7d50e191e55ca87f5eea7991119d0fa4e836f

    SHA512

    70222805929d5de20a55151af72493a6ac1db6381520adbe8797ad814d8cb1f6339ce947da2bc09116dc6e40bf86bda056a4fee06285cf591ca2ec47ff5c248c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    acb020739a1a66ca48eb7974aac0e974

    SHA1

    ccca893af309596dd968dda95c0a62fb52e30176

    SHA256

    0ea10f0ad96e36b7c3bc4807e9ace832e758a024137ad115ed8396a98d9981fe

    SHA512

    33c84c13547488d7ae7515448713f554c68b01f85c305307a79359c209774cff2d65747a3f8f0b2698d7e6eff2bfdb3c573ecff58dfbf5215af5c0a69ffa09a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37120f094aace45fd80ccf143402f7c9

    SHA1

    7ac2c6b87077eb796e778940118e3caabe40cf33

    SHA256

    e1cbfee289fb4e8c73064895953a6d40a2a8f78742d5e9efebb9d4def64dd745

    SHA512

    ab1fdd05024a5f70d4b2028340272d7c2dd51b2a0b6f38e63b46b383d4efa81d103f6d7887542528e7b9d3c8f82c0826bfc0489a8eef52db338f458961ea9e6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d1dc823ea76cc7c7b18f51de20b5d75

    SHA1

    f9d11910ac5381af777e17cc7b2e37021387fb71

    SHA256

    f0080f68e421323b20179990eca65c587db6be0471ec40fa942b9b2d3a204a75

    SHA512

    1a193d891061cd2a1a4b0a5f9aad2927e49835286c52c797e63b791f38c7dfb8536c72f463e3e543093b7f1dad3354be02684682b92dee4d4f041ac179225876

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f088e4bf3fee07e61c77745fe0d553e5

    SHA1

    29d6b8db7f94ba50c93eb9a2375a4209ee53d0a4

    SHA256

    6e3314fa196964fbb7af7e2fd8f13c9e10607d8ed77433fe6b0f16473693d93f

    SHA512

    fe05608563386c23a5fefba50e04485685d149521a6707a61440cdec1ac8f27027858bfa3c9c264d45d952d342b7a8820c0becb9af3293a1b99f75414f7b0304

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5d19ea128185e196ddb2962759fe1f0

    SHA1

    6816f62a4d5510770c05cb432a3098eb8c158c84

    SHA256

    f302d7ab67ebdf72aaaa76954e320f7e5fb48b1b1ae0fbd1575c2a3aa7ee0ef7

    SHA512

    9a98dd4c4e67a80bf266e3f6a703ef461d3f345d0b14385fc04a1c659e302122949c78092d33331a34376225205bf185723f06f8e5313f992c84d34145eb7c1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ded445d2abff4010d932f24b72dc27a

    SHA1

    0ff7b984b72af3baf8044b577ce6c09629f78455

    SHA256

    d4260738353adaf9e320ca921dca5e9b54fa1117797faa4533383a20742e5cda

    SHA512

    6d1634551780ecc1f12fd04bdfbc1ddd2895f4d7486ed4949cf8b0438d01cd0cdbcae9029717b361b9941daa17f55201011da959304e18954fb105ae710b35d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7257b3f3ec316c3f5f6d8f253d19329b

    SHA1

    35aa3f58ee496e5bb4d289d8a0e3fa0b0022a61f

    SHA256

    4687905a07bc434aad31b0649d0945852af636c6b32ba8a9852199ff2fbd62f1

    SHA512

    59b02c89e584b457d8c2f9ccba3d8c522abfb39fbef007c0a9cfd6961771da761b50e9ee17b79d0fd9f5ec777f51183746389e268ad2a290870efcd00709bef2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ae1959119b69ecaca12d5368dbc7789

    SHA1

    9165d6991873bc0b24619f0ff53edc7d8fa3480f

    SHA256

    206f0b5fc9ce4ca59a36dc89c60b08461fa2506d770fa6662986460b49d4585a

    SHA512

    dd5dc233b8ebc04d4bcf7aab780c44b4cab85cd4896bb5e1ea3325cf1252e14ed46dc057a30f5887476baf067f01f3732548463321f43458ea103b11a0c34303

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42eb8d022fa0a037c22c8f1781f14c15

    SHA1

    708825736500291d371a82c4f29bde574a3da4ca

    SHA256

    ac10920e0b568bc0fb0dbf5ff08203ef28e24ff5a150a98a51697ce6bba2f760

    SHA512

    c4edf314e6f1e57c6c0ac301470f1d27ba11f730b2bf3d98fab183fddc7f578ed7265a4fcde4209f3a0aaca6dbf4c69d078e561c30fd164829d8abb16e01baf5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e4d35335514e089383d12c65d83b02c

    SHA1

    e06299a7c5881ab8bbebe727ad9697e3dca9cde2

    SHA256

    5d04d03ba15bd80bf48f70df3d7494de47a87e86fde35e49af306cfe12d01d1e

    SHA512

    4befb9677663a2b5bc37df1240a6eb7539639f9f37aa358ba9040b6404394fca23ff2dcfec5b77888519ef191ce8dfc829f50bb29ab43b06beebe4090dde0ec9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    220ef3b07173eaf4d6291742b5e50390

    SHA1

    073dbb5cc94a01180a92c6775e2d45a8feb61b96

    SHA256

    87413252c10f51a302a65107930c95e86847ad6fd3a08e548a1af19193200b83

    SHA512

    db75e41f33912f3f93f8b23f004dd0027031296ef561e2e507b3059aa053ffeeded3d87580f6b52f7975963e9cc4b5a19003d30e6bfaf005a1c9d886e130f7b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af0322b99dc29785b42fadeaef50e63f

    SHA1

    c8290dc68c487643e85af673096028ab01c1b042

    SHA256

    16d6315ba7665c70b148012d32f23603bc6af77a2ee67e47a4353fe964bab664

    SHA512

    e783655971efecd129f89ec9fb2e5b06b4f1597e32cc4dd3a4b8682bcdddd15931912e3c37db17dc9c53a42e4b8b0116a6e34e6f96effcb965ff45e9667c875a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f284f710c83b564d58553c7ae1bda54

    SHA1

    d741fa14aed023ec8617f40c274e3df63f0887b2

    SHA256

    4f1c86f36811707afc644066b5459c811cdbf3127d5bab91f76483b1f715c1b4

    SHA512

    30a5853a40a87b2d29708dceb0317c3824d4f6ffed73a5d3fa1063a593883bf232fe930884a22d156cfc7769e4e8ddd3f75775120999675715c427fdda95a697

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a2d989475b9a42b5f1fc1dfbe91dab6

    SHA1

    2f0f4936abbd14ddb030bdaf20c4b5643a929670

    SHA256

    9c280e3cedf9f82040f80fb2f8853e62f59500a806aea704c5bda5829897039a

    SHA512

    b4c658abaa946f1ff67456b91f6f23e3f718b31639b2ae6d8ff087200461789bfdccaa34e6f6ed1670818d966c98a97f79513151b2549505847a58138c35cf57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48284add011509db063723864c18dd30

    SHA1

    2afd3faad54d6274f9d818ff1e8e444f53082e62

    SHA256

    d855326c859448d0f839600ea742f409e8e670a6d645e341f1d4bd6f9f6e5818

    SHA512

    090f47321c981d7fbbfa31f7050e5f1a0b739aed356f4fe218db7b621cd3da3caa369a27ed275eb0cfbc131e1cb0c06a1ce36258cd0f713171547e967efcaaa1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21aff31d763375a55a4f3bc8e20bf3dc

    SHA1

    4bc6348c074369c4d6e23fccb58ec3a9a459a9d6

    SHA256

    ef09310f5a0c1c5e8fd9fab590d78460416e39ffe0b7d03c31e83c5b821bc728

    SHA512

    084613bf6d0f8bef774d46045fcaf71f0abde3c9163f24e7de4fbb38f456329533fdd9f28b79b0706947a533b0f4dedb328d923747f3b58f342e323b4d2d4ec4

  • C:\Users\Admin\AppData\Local\Temp\Cab23E6.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar24CA.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a