Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 03:05

General

  • Target

    85cef4d1af637e36d103f50bd44a9f85_JaffaCakes118.html

  • Size

    24KB

  • MD5

    85cef4d1af637e36d103f50bd44a9f85

  • SHA1

    f21c5c42ac7963e74bcb78b2c59de2247337a664

  • SHA256

    d903db424ab017768bf86c69a3fae469158c87d574c78b6b57cb1bc3fb13cb60

  • SHA512

    f01f6e82eb9e34cfb3b80873d4a9fb9d47b492139be5ebd747241373604ee6571c84d99da95e660fc254f8109fb60d1959a1d77e62e1b20d08c540105e263bdc

  • SSDEEP

    384:AitwXidpotc2Dpy7M1P4plCuWgbzmwIcyJ:kc293yplCGmbJ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\85cef4d1af637e36d103f50bd44a9f85_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1660
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1660 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3004

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c6d9ae6e41c63f1fdfc3fa63ce193c77

    SHA1

    cf7aa01e24840ce2ca5dae1f1e3a50d9acd38888

    SHA256

    73747fc89a9faa787e1f56623bf5ec7791a10d32c825224175770c2827cda766

    SHA512

    0b2eaf592ae5fec06e301c228973f9fcae59e2309acfd5327e93d5d718d4f2bffd1ccff55ffb8f54586e38a73204469e552ed5cb9a1e0eef4e4a5951af178334

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    84d03750c6e5364701d55b2895a2c363

    SHA1

    e0a1d3ec9ef387edfa65d5477a61a7729794ebd1

    SHA256

    cad92d66683c6cc59a2562c9987c23ff28ad01a06eb661ccb4ce8bbad8f5e348

    SHA512

    0265ee35ba0ac98ec8acecf4e401688405760e685f50ea5cfda94ac1ff3382da2b31ee4710ad54d07f6ab93fc08054735c8f05096f1cea63a3a0d32a5562a05a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf51597dbeec8937dbfd4bd2d7e07a81

    SHA1

    569013c6857aee0860479eb2d0198c22757e3f10

    SHA256

    7dae1f2734381c52df816b254ecc6d0f90766e58067b1c723d77761b45df808b

    SHA512

    5b9b7e3e0a37a758689f573365dea6ac595723e69f77d2145bb090bdc2f9bfe17d04819e0727277780aace80f9897357f321a9c579de41b2053143d24de0e285

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    777642f7861b4f300367bf19b5476d58

    SHA1

    0f7de3eb66966792cc7943a710816a919dd15f79

    SHA256

    0436f293765143e57c6823e75142992829c181d0fc01aa417fe782c1a8e95d7d

    SHA512

    bd1dab88d497f99b7f05ded6e6938a9ae0c02008a50e1307a65c4134dc3140aa09547ea6e551867c292255648710e850f94e73f790f346acefa001c87d517a92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c9ebeab59802b2dd51f0e6addd1b4fec

    SHA1

    da6dcf78a48e0df2ac25fcb38f17b4785e197e14

    SHA256

    8ec2ecb7a74ea8e9a10018c008b6379ea2889cbbfa351c1a5f47fc00d268e550

    SHA512

    7fe4ddc4fa67549e919fcf6acd751aac17b962e7647de5cf2c153d85e81bc8ae7fa6b0e1e3fe57bece8ef483363919ab48654e89be750116e2feb3be67dfeb4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    81638fc0228ce047f79002f86467e8d5

    SHA1

    224ef03a85aec746ca90f33f4bb19fb1b4d14ee5

    SHA256

    1ac97b2bb0e65a6003ed3bc10815003a5dd4e1dfd906e486bb3661b518cea614

    SHA512

    88243504fedc8240616a9e36661a88ee328a5196fa8257d8af752058a676a652a387563a6e47c7348b48a2c2d80fe84d24982526875dfad53c5ab4843672530f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4904210de22509f5c0c3828851a08d74

    SHA1

    794e80814c7cb83b84f755df3a255efdc561e508

    SHA256

    6a3872979c23a2e6d201cba78f746d0de134c33496da904d4479d65226490705

    SHA512

    8b444203f42925bc5847f27260578cdd82953e026ea495c6ecfabc9ca2a7a0227b3f1433e24a2e5bb8a49b1b933a27fb8f920c2a317ca7f8f914b864936192c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35cf4254822ba7a13ae5341af65b0fd8

    SHA1

    72fafd95946d914e863c19f5dc8683d8a48a7688

    SHA256

    9444aceda1f4503bc307211a47f5673dac62360c8fa0f4ac9b48a96e57152ab1

    SHA512

    70100b5c88832a7b7811e83e5a0f9b4b8075539671272331bb1200be2632ed5275340cca3da82250c3181ebc6512e1f7db47482de14fd950c95d805897548e06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e32ca79815b4588882e60f586ad4113

    SHA1

    0459269eeb06b25c9812570342177a23ad782781

    SHA256

    610e56948fc7fdc1d8718f0725f774936806cc5a7ac8b68fcba5fa7b1a72ced8

    SHA512

    e34d7a2c04c6cc2a8138bd0aabbfdb885a711a954d83a19bcf669f199d0ca4188a80fcc8822f5a290a59e6146ae937697e58fde2d6eea06ebecf6455d1846e75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    446ebdbbe5233075466b5a7f4f50a196

    SHA1

    35ac182cda35471b6491d01d10a5874aad0c21c9

    SHA256

    a10de8e38ecfbd3afe438aa0c890cc93f19e181e0fb98d988c331c08ca9b97e1

    SHA512

    8ca7e0a84c507aa27f4000fbd10bae1c7c852123d6259c1a0b7efb6284b7b006158982dee44c839f4632a5dca0a3aadb88a5ed1f2c942928556a1cc4fec2eb06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b06c931ebf7a76da85b283cc8e4fd1b9

    SHA1

    ef8c09fb0e34885cfbd6e9803687a8a73ab8ee94

    SHA256

    75f0202f61873e8df7fda07459e14e5cf542f6820476bc523662bc2639be3728

    SHA512

    4f04e8fcab1e2d4ca8a51f4bc39a21827c1ec11e73ab8feda936478bfa730bacbdf37e91edf8e048dfa38eb70e5c82de260fee976d1ccb280e574045a71b7fdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0093cb47dee71bbfe9ff94ceeb904b48

    SHA1

    6c86f0b16f7d6dfd10018608fcc611158d747076

    SHA256

    65b05200068339322072d7cf6007604193643ec2a08a98802207578f6b31ac3f

    SHA512

    fa6dbfd86a3cbaa5a62ca25cad51029c70879586efc9dc7a57de1395a46aa8e7bfd3373ecaac70c72194810a79ba113c0e3b6cd4d0dd7c608aa7bad2c8b89fb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05d3c97d3f8816b62cbdc36d56928e9b

    SHA1

    9dab2b6fd44f9370d8f825a687f1f456953c1abd

    SHA256

    5455e15d6643c2c68c65f0388a178b90c8dc8d9201f37618dd29ebee59242d50

    SHA512

    e9ab0662f3ba9921226caf4ff4e744e23d39cfd82810f4390f80fa612994ec241dcab02bab2660a33101593218c8bcf4e64efb3269076d23349db8f0d0fb888c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7dcc01d3290a88601c6a83cef7fd916d

    SHA1

    613050b1dfc43984404fe5579ee8772daf636e12

    SHA256

    2eace099443da1b3ded766af0dabad898877e080df923f1b08fa7deb2e5bec6b

    SHA512

    ed18dbccf013a676ac3d5081667c662c1c574f3b1a1d7f2547eb6b8846a7817f1f43c9b25325f64166a1b72d3d1802b9e1326df178ef82fe1912416245a30294

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0461e68ac99c2535ecd1dfbe35432689

    SHA1

    3544f3e3eda6f2b9fb6db59d30f94d6eeb2c8d25

    SHA256

    38e16b9e4c8cbeec8ed3e804cfa7c9de05805b2d28fe251468940c659f8fb1f6

    SHA512

    8cab8868f3b6556328f50fde37d5e772a6e7537af6a2536ad7d3d25e42f2e5d4ea881554116c6e7526521b1aaa535d07be683828e7566c3954cbcde4b939f335

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e6c04a8a75dcb6619a98fb36b1e70db

    SHA1

    d3662ae39d87c8380867f498a17768105c009811

    SHA256

    3fb564d38effa12c98ddf0d01612d4158101a99e1c6761b1bd0840488f40fdcb

    SHA512

    f5e510a797c6e952ab7adf381b535aedfa515f53c6508f3ca580332f92f77a0ddb5ff92fa22c148307c00c7830a8886dbf3f6ca2f6517339d6094b0b7b2e6894

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b0c0f36a82282da981b9f5c2c5705ff

    SHA1

    f1a105ae99f67282641d2212ca9b3372a8fb937a

    SHA256

    25b3030a5f9de0e22051a53adeba5a839a40a1311ed1e349838f9f5ae4a9d948

    SHA512

    4326a5e19602dd1c7f435e8a36c5f84c4ee8854d2b334075921c3ebe38992008f9f23fa0644eb92224859acc45fccc56d49c27877834eeaa64b045952634f71c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ae8112e439b841337b8f761b315edf8

    SHA1

    d94d192be4e0130f633b484aaad2415c65c68090

    SHA256

    523ea78ded438480004af055a0f50e38d546863e873b2a6193ce930b834c08f7

    SHA512

    2de401137af6cf55c86c44ca409f71a8af92f511209a730d6271368309d08951dc032e9b6167623037367e2ce9670faa45513774335d67dc7be55a1b01c78b61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    565558cb6f2b276193de10ce3d78e3f3

    SHA1

    9af1d60590885313c816e18143adaff66897941e

    SHA256

    a05952ebe457955c1ae392d0dca8acd7b43fe229a6f32ebabe95e64a0b381949

    SHA512

    437efa086ff3a907f694cf46ca085102b7d07e99246a8ee53770d4f42f0931d6b7eb11f656ec21821437cce8fe532e4f05c6a07f4d57930018b5eee62de9f697

  • C:\Users\Admin\AppData\Local\Temp\Cab3525.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3618.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b