Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    30/05/2024, 23:34

General

  • Target

    854bf999257d23443b36654fdf6347c2_JaffaCakes118.html

  • Size

    32KB

  • MD5

    854bf999257d23443b36654fdf6347c2

  • SHA1

    fdd783ade052ad132cf2f1b3c359c6f5c7463950

  • SHA256

    5f932857c0a1523fad51535bab2e9607ad8d7e989720d93588f501846e3659d1

  • SHA512

    419cd2e8ea0c6286ba5e6d14951d2996bdf726bffc6b0ecbb65594234bb767c1b8bb8cb25abb3a5d9e0c3c9c0555109dd9b3413ff57b867f87c698f7675ac3f4

  • SSDEEP

    384:S16YfMXD1qGBwRULdKBL1wIJtLeudx5PmfC4u0SSz3aGEuWHimSmOOcjaJpb8K:S1hfSwGBwjTeGx5343SS+GEJWm4Kj

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\854bf999257d23443b36654fdf6347c2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2416
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2416 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2884

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    db701d6cd8962c1827980403d837d670

    SHA1

    c5a824b08094f9b3ef37ebd5c7db25b823b1b885

    SHA256

    53bda6cd130ed5a21185f1e377d48fc054273784824754e8058d37032a4c5942

    SHA512

    507bcd4ace817f3bb7e862aa9f7d565b20efa9d822121997d87acb8c8988adb540d256ec5d01f2027899c29bace4d79d4696317e768a45a4d3646534f50e1be3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    48a872f2f7a7b5f4818a7aa85a677c60

    SHA1

    4eea6c00453aeb84dca0962e5b47d74996d3143a

    SHA256

    8d5a2c27d446270d22dc9674d4a37442e862473eb1f3c5e345d7a43f8ebf9e92

    SHA512

    8b405ac783335360924a6dc64c82a8508f5e84f50203b1311efeb6d8a30e9330c036b6de7669b62e5fce35fb13e832b6850f3925142c6e681719f36782a6ce72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5d84247589b88913f4f48c1d5bbdfe19

    SHA1

    4c5e84a83df242ef96cc986caf7b2ebe3cdadc9a

    SHA256

    e18ff879990d5c55e976583c60c69350420ac075d75aa70d3ddbbb32feeef19d

    SHA512

    bf0fc6f7f0b6cb44c63c77c48e824da50d6c06cce68a23f39efa88bb6dee6c8278b5bb307cd398c1cabac4aaa1c7921f1615a3e32667bd16dd9e9efa6996a90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    0a86f8f1b78f6a2d8bdd2422c23054ac

    SHA1

    70d8266b88527aeed57db713ea19e17ff70b6760

    SHA256

    e58679860754e2a63f384dbbc37ad1c575452385cf1546cc77a79fee0b7a6ba8

    SHA512

    77f356da0b9e0919bd482e6f6d023eae0e02488893fb8152598aa7660199a30409f45625c1d68b7cd8deef96044ae08b51f82b8cdd52a18572fbb2a79861fe4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    02fcbab81af0b7599bae026135bf7ad4

    SHA1

    3b1ad42bb59a5e0d95aace6bad5c43bb54d583b3

    SHA256

    4e434c9eae2af5b3300874bcc30feb72c2916634c80ab93e1f1d8f682d5f03ff

    SHA512

    961ccc57cf92a5b5fe37c3b03fa3ca3d6f1adccbd641f02665aa3b47a03cbea6910388858776461dfcdbc348e03e9b7483e195bac6a0463f0005b9b3f761689c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2e37408fd0781b1c8951e3b60723324d

    SHA1

    769ca04b99151dda8b099808b7584ea9fa945753

    SHA256

    acddbc90443a269f43533e244c29918c667baf84951c0423ee544e42343caa80

    SHA512

    55ad93a4d2a003aa12330d268906f2879a507bf362394f30d1ae11253778fcb1b1fbaa9b382dfe56b15835219862d5d06d25c76c7e6c4688f2ed9bf5ba46de89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e4fe721af1ef6977ad7635cd96f764db

    SHA1

    904bdc1c79c93fcc7071d92cf6956da4c54775b2

    SHA256

    b836f427b06a676eb22525b336f200902baa3aabdda54bc4e417705f8f0b4ec0

    SHA512

    77720b7dd0d42b2d49917fef20aa6d12012a4650660f64dcfa702a2a82cedbec07cd3d735dee3cf9aaf4207dbc4a01bb18d547de456fdb170767b993f343fe3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5ac06d796b0cd07e490d1974b1707f9d

    SHA1

    ab32af352f54adabb2f249e2bac911968727772c

    SHA256

    4a582ba55a45603e0ac43a75389e6386faa305e852f3aeff91d70a5dbc7a0433

    SHA512

    ab3952cd74cff2a86ba434a8e335febe0d1a84f12c5c16c8606fc59dcfc0ccc524b58a25106ba877720c14bd2e704dce77510b068f7d6d0e6e0e6b5752c660c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7b4099420b190d6306bd52027aef34eb

    SHA1

    80515a842a5844ed2287df004b80526985a59701

    SHA256

    64371c376e301eda79253de685af2e194b098ac19399f15d03de820321295ab1

    SHA512

    2b91156409326adb9c5cb03afa468bedacc398d27309bfd1c262cebd1ffb75308fa653b893b0e0d34d7661ec3ed1093c82c58bb4b9906ce6256b80c0acf71751

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5038471e6aa79625944c440bf4631576

    SHA1

    ff47072d588cb1871ed896a5a65251e27960fd56

    SHA256

    3c1d2fa6bd55ca029c71a2477736285081625a0681cacdd67b6550bd1e881e00

    SHA512

    eaccb56ecc489439a6996633d845e71b3ebe1e65cc26984a4fa538ac8b6b2cd31e1472cae92b3b5d47c3aab2b63cb8ab7b7ba1e3de0fafd99e48c918561686b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9ab295fdcc293f959fd356ccebbaa7eb

    SHA1

    5ca6a251ca3c946948047f2ede268e9b13d0c897

    SHA256

    a44e929c10ca7b7b54617e220838f2e3e05587bd72b9d807d607af7b1cad3f46

    SHA512

    e6ad8f2806b69aebeed4eb109fea06a374df5d0f8e8bb7de7554c29d0776bb7dc9922aacf9c2eee2197facc957e6f4e6fd81671343aaa59e71b3d30acfc484df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    20f17aa3b5b6399834d03b3993577877

    SHA1

    e852804c99db1549d8788510eddd7da4b43122e9

    SHA256

    8bf419a85c741d6b8c79cedf7c22a9a9acc6995c728d52e4b73b780b57c6a7ea

    SHA512

    2d7b1ec9edeb6c42a8604a6a81cdc1e8ce08b7a1b534451988712a57d3d93dc9895fdc498d36d2b49f58e52e582827cc3c61abdc426f19202b098d74b0fac32a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a139179dcf55f5f7da270c96f604673a

    SHA1

    2e583071a8247234eb5ccb7e9f7f5806e5e87ba3

    SHA256

    feb3bec4dcd32a9ade7511dcdefd3faa41d453a75ce612bbe2ade13d0f07091a

    SHA512

    41708964291716a27c315f177ea075c556e747275bbb7ee9d8d97fa0bf17b953ecbc169443bff18478938861addec24dd0763e4a437200cb2a348d767d41ad12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    4a0859b218706d103f5739c4fe7d8193

    SHA1

    b612b021ff68d809a559931831def76a26bc7e0e

    SHA256

    a54145296adc931fc22e29c8c904248da38bfee0628e0a8e8af84d129d715239

    SHA512

    fccc3468868b549d6999035fedf621b4eaeb44bee3db87fe572f7816eabb78c8e3cff0eeb17e895bfd612552d16e46ff9475464099e63b6ae2e4dbbcd1660eab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    debdbb272d750e520669dd5aeec5f4e9

    SHA1

    5b7f3ac1ec2e97d36837bd922bd14ea2517fcb80

    SHA256

    163c0660e5695492fdb0f4bd14d6a644f4a5ade9715581f192c6523c7ed63e76

    SHA512

    b0eddc976adb7e6033f5cca8901fb609985a07f6fc3b3ea62908f0eea2f408ba24dbe5ed36ab54d599c393269c78647a8c810e59e16d0a943ccc44f5850c96c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    18c7bd4a0cd0950e1b4c768ffb5caab6

    SHA1

    21be2b16cfbd781c8de5c488c1170928734a1b9e

    SHA256

    56631462fca204888aa39577f0431bf5537f1b5e6272d5bb7d82c9d6ee5c19ad

    SHA512

    d4c19fcc2776c840526287f0afa3e4481c99f24bee409a2a113119c98a6de15dd258a15791dcb3f8ed7addbb7143a3e8ec7bb830e58871cd4d7cc39df3477c87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    cd471008807619980bd4ee272f6500bd

    SHA1

    8e3914258da8929993a106cacc2c083b8c69d92b

    SHA256

    3a6dc7965c9e5a8f2191e0f92b1fdb205d5a04909cd956149116c856c9e3e299

    SHA512

    aa3b11824826a016366b3597204ed9e4478e511d468e266a90761dcf5518b3a25ce7199840aba4cec9e109ec96f12e5715c6a3267da2406b93e975d1006bacb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b6beab32c6818970f20902bbc5a11143

    SHA1

    107e9bf06bf3cb16d478284f012cc66b2865f250

    SHA256

    d9ff858994b3fdc1c555a53ec5813b002ca0822097d211fbd93e9fa0fb36df3e

    SHA512

    33c7d12ff8893118b64a532d0bd318864ef946e73f50aa0bd23c5424effb2cb4c3b40088483bd985db14b84f07c34ad5851fd0fffbaf355e0532ddd87dcc6482

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a667fc9a8e49feb9fafc262698dd93a4

    SHA1

    26d65ef421f17f1a6f6ed24b6d198c0e6591e429

    SHA256

    0ec96760e9630ac5ab3e7a8ca4255e1e719487248d49554d6330849a0db5c2a2

    SHA512

    fe277e719728c5cc20ac04333a06e8348e017e31dfb9e1111ad41f081d9175509933d600a87c81abc14956bae9f7e608e8e261196fa65df7e3be006c9a3a20d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    891ca496de831238ce76d4ab8d41a270

    SHA1

    a1e567bfe69f401e5046264422f686164727a215

    SHA256

    7ff2f73ed3e11ff595b6c804410458b382ac7bf70d2674cf7d6d3f056d15319d

    SHA512

    36719bbe111d4897e3b72c52d5550ae8e588bff35b20e068e7a7349d8e65cd64e33626b4488c14ea6381b01f9e4cebe0745e4764639067c9e99b28bc6a88cb0f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G17BROQF\PortfolioLink-S[1].htm

    Filesize

    167B

    MD5

    0104c301c5e02bd6148b8703d19b3a73

    SHA1

    7436e0b4b1f8c222c38069890b75fa2baf9ca620

    SHA256

    446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f

    SHA512

    84427b656a6234a651a6d8285c103645b861a18a6c5af4abb5cb4f3beb5a4f0df4a74603a0896c7608790fbb886dc40508e92d5709f44dca05dd46c8316d15bf

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MNCIS1YI\5HOUM0I8.htm

    Filesize

    221KB

    MD5

    dafaff8b1e08dd3ac0a3593058c22e88

    SHA1

    e6cfff5646e29bfbbdd98c4e5b9a7ebeaef43ea6

    SHA256

    69ad2354bf13fbb6cead823a22355a6f6d28908e7ec46f26f279f977d8255750

    SHA512

    4bd6156a879d013dcdf8de3de5d3591ce14cfb321b67d9396b017bffa2dcf6e5531660f8d834d1c44d9bcc878233cb2ac92c9ff008a04f49be8ec5072c197b33

  • C:\Users\Admin\AppData\Local\Temp\Cab24F0.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Cab2EE1.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar2F73.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b