Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 08:21

General

  • Target

    74de68547864a419a5f956f3853aa0e6_JaffaCakes118.html

  • Size

    25KB

  • MD5

    74de68547864a419a5f956f3853aa0e6

  • SHA1

    29d9a40e0be75c064834843b7e50043cdcfd296f

  • SHA256

    eca2e20232eaa7189ba31b90134a8305c749893f22fcd2406d827803afe97352

  • SHA512

    3d4e072bf518ca9821b2f1de940e95d39d9b85f3e36e1ac1d525fdce85a03f4cc791e72aedb3e6688ddb220ef30a970d7434ac85bb9994647fc851dc44063b35

  • SSDEEP

    192:WLZLwKQqMUOX5UUdQ/uQe/gV4NBlTgV7B+r8Pi6bW1Th15WafW8OhaRxZ9Lp+4U0:fUU2/IozZE1T7xZfvEYP

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\74de68547864a419a5f956f3853aa0e6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2724
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2724 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:1612

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dbc968a29b59f8b755478c7e67f85c57

    SHA1

    19276b0b06b0805d8fbbfe5b62c9898f6e49324c

    SHA256

    6a13f901ba7e091ccaa80e6ae126e5df23ece2d68ce55c372c55671c1e7ac48d

    SHA512

    29c5ecd915871e6c485892f5ba67b445560acabbe97578c2b7ec44d87938cd8c1a9b4be1b6b6686a287864fdacfa0cdbd52c066167f3a39cfdba89dd6fd169c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    22e168e6cfc0ecd8ed6d054f6002792b

    SHA1

    b2f4196f8d9650ffa72e98630347d0a4ccfa34fc

    SHA256

    83cb4b1c7da1d327b2e17c69b4321ffe9c8db665a6960c6e16e140e1b17c0ba6

    SHA512

    39bf42f45e2e33e41e63449909615c22eedae174118ffa18323f22b14518f527b9f7b41c2dcf8d35945246455a142cfeb1caa6696c77ff0243971ad0878e4ce1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d600e4fd1c70d3426361411cd55b06b5

    SHA1

    a65526b6cb22a351c35050aa31e204dfb3799a4c

    SHA256

    9534b32be9175ce4c62a1ee4e323fe518d0ffe59d6eb11eca1ec3ae39688ae38

    SHA512

    7d5145372472337c68ead1480a07bb5263cf2dea73391db5b9909c8cef1cb65ec4c02e21f3bc08c53e5cc193b91ac86486dc7ae5085f8e4219b863811e07a81a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1925e18d6d2863a0142cf669673ce97

    SHA1

    e0fdf64ecda5943a82065239e6d4209a952718b0

    SHA256

    99844d800314c6fff9e3ceb14b4aa04ff7ec92bf2ee25061f80501df7fd2100e

    SHA512

    0d33fad4d593fe7302c4d4dbd2d0275d6f0774787dfb285ba91b9929eb58cbb46b50b1d39da2af575b6664f684666d5cefa9f6d8e0eaa9b30706de0f0f60b8ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b504379f60c535687c5a608ee5fd5ff

    SHA1

    f59dab608e22631f089a9ce7b1a7d42a1fbf0e6a

    SHA256

    cf23f45020449072506f03a996a78cb10dbf910af44848bd965e2c5ba95117e5

    SHA512

    6c02d0b7effa5354826c41a79048609aa4549fade662d1d427068f3a25bf568003d36a113458817010ac555cbc994ec99a1b8c6c8a7328b6f3c90836698df6c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8babaae3ea891bbd958fa4589f0bf80a

    SHA1

    2b19fb2b415c4bf8d2768a6805a74a518dd3e16c

    SHA256

    fa603319b7797b8bbdd540eba3cbf1478924341819b1fc89362c399ed79685b1

    SHA512

    3bc82ffc7a192ec54fb057fedc0b828ce100464425fb3469297a983772590bc84bc3081166d41bd7c74738be801006fa017e53f37876a966bf69db125d9cb913

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af801efe597cdeaceabe1852d2a5785a

    SHA1

    69da46c50cfe7cec581e81e800c3c596309245a1

    SHA256

    7c724b23ca47b24deb8cb115938c9d17d90c740134059245ca611b614b62c032

    SHA512

    eeb30517d23110c9f6f2076e4ed8c9b33368d1a05fb197f835e3b602c12a4a13843d880ba1cef90b2471ece700e6d92f894449158b06129b898059015aee81c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aeec883c6bf184e9c0d691cdd1abc727

    SHA1

    98ec83d0430656b6418f5cbac9e7f60ef0025dd8

    SHA256

    93904529813e08f2269dbb34080d1da8f01eccee89267f22832066f2e6cf0020

    SHA512

    4e860300432f738880ba6743c7065bdb0e0369c4c74f831fbc393db52fa57ee1098c77688d64bb2ec4001b7b4494502c364824b8cb7b93d56c14517e9f0296c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0aa36a25a142eb1ed0641ed8a818ccd0

    SHA1

    8905130a408327d99e0e3bf068f7c44189538e51

    SHA256

    2c003821ab0dc768b6625fd095b550c387eafa37061936228ef1a73814e02de2

    SHA512

    4ba9d909194c65210ef7fde7fb146a45292572ac9403892373590cf18416dca76570bf0bc8a5e4971814003d6811b6bfe0348e3e2b2a39a26fea757b0a1d7dec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e9aad9d52847e6626cbaa7e196d7141

    SHA1

    a545a93b472ee8ca9d6762f43cd6e5c950a04c98

    SHA256

    6ff42d00eafe53b2155fc8123f98e47f8ee06993cc9ef7f9fc6843641351bcd6

    SHA512

    e25bcfb67765296c20b1fbceb5737382ee03b64eaa6a88b68e13243e6b587e39eff5d66af87ce03c73b2757fd7aaa2fa5717eea2bf3046c0f79d6446a6f0d532

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d14a305dc2d7581ef4c5cadd7e77d0f0

    SHA1

    0b749ae8a10590da1d4fec6b05c9edb64d778245

    SHA256

    f13ad6f1bf5e84df11c0642e2f93302b3eff308f623afb8320565544ad896704

    SHA512

    2b65e0f832f784763d03cf293d5226c63b949ae78c41980a978184609307e75e90e78fb34b90c2cf87dac0f1bc2143c26ba20c2f45822bc181849ad10155631e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    135b46eb221aa74bdeb6744ec24676e7

    SHA1

    674ed5a901ec24b57a76f0e39d9e8c77630942b7

    SHA256

    0611ae31ed7b0abc9aad34a65d3a33b22538eb5d1dbf878d223d5183a99ff12a

    SHA512

    f1cc864f8b5ad47cd12e43b3fde2d2ff88dac2492e539a6b74ed027d588fea5ea523a846e956c5752af2f530e63f7bf8b69ad1a3d84d29f75c82db71b6df55d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8fe7b63fe71891864026492b4b3c908

    SHA1

    36b81f6fb69b0b180d40b4b2303d9f75518bac9e

    SHA256

    a1b089b5227d0a982c100dd4422e6ecdd2e1de5a1b7734e9557b138b244406be

    SHA512

    be2821662851759bdb198e1f6f60b618af3d714008c0533e2be1c23d9139afaecf9fc5cc43f16fe2b25780f599b9ecea1d805e686546c0f4b572cfc1d25d8217

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d7ca1c94ed3aac5b93cd5a3c58f715dc

    SHA1

    f63d72f93911e09aaf0e5be8de1e00ef891503ef

    SHA256

    c04e41129ed88f648a5e46e87af13e094b730f59a125cc1ff3cea5a96f174ae6

    SHA512

    8b1aa062c3d4920ddfe1f065b0c3c8b6e51af65085757713a958870ac908c08657d949729176ef697228d62a646b6033cd1fa7487cf6503bc09f5c1c9eb4204d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    006a01a958f101f82b9608a1baa09028

    SHA1

    1499a2d88b25ca6e4e6f6bde0cf099e09a141598

    SHA256

    8f5aa1b40f57f73492dacd513f9d81b2238a642c04619b5fa4f3be2db74cd7dd

    SHA512

    dc46810553a1555ed4742e4292b3f5c86a1f2ad6cb2644b1e7c77bdc1de9713ccdbdb86285f95d3143999f4c37fedb687c6c5beb93b452dd72d95592e912342a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be8dd5eea023bf5f37dbbf4b97da4a31

    SHA1

    c30591b34fbe2fbdf2481b3321e96b3a52d2118c

    SHA256

    6d2f8cab617b74d52beb94442dec413a72374608a38de83bbfb5f3c679d5c5d6

    SHA512

    a2bf821b143da360f6975818d809d8e2d286841042b319fc6c2747a92b767932bc36004c53815c605a1f40c4e7521fe957007eb2831fc95e6fbaa74ba5b66ef0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3576545ac6a90dbc34582dbc36a41cd6

    SHA1

    7235fed1cf552738d95d5d8417969fec0f5741c6

    SHA256

    16c45d01c0854944b350534b3510b5bdfa998aa4ed04becbee36d0db35140248

    SHA512

    b41e6341bc58e09cf3e03c24c47fe2ffc503e5a4516f957a7f2411e1e7fc3d9e0d74f3fff45c65fa0e49630ce4182cfb95cf47770ed8ba2926f4d9c1428cbbfd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea75fb90d66e57de2e51d134bb1d225e

    SHA1

    2ecfc0ba2a86ba5377306bcfdecbcb99f977aee7

    SHA256

    8cb20e0a66ea89dcf38caac70fe3fb33707adcad1a80d3ef36cf0bbb7e1e16df

    SHA512

    c80f221cbb40802eb3bc6b642529d0a2836310c4a2c8d690e27f50c390b3d23ccbc4a9248298fec539c063fd803b7feaedf96398d323dfd57d76f474cc6adc61

  • C:\Users\Admin\AppData\Local\Temp\CabBAB8.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\CabBBE7.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarBC28.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a