Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 05:12

General

  • Target

    86108776130cdecf1a740306235eecbc_JaffaCakes118.html

  • Size

    139KB

  • MD5

    86108776130cdecf1a740306235eecbc

  • SHA1

    0069e1b36f7e489cd8702aab88831dd5a6c04c7f

  • SHA256

    d6f3a532f6afaa6ff1e4513446ffb0a8d73eea542cb897d889622592d33cce3b

  • SHA512

    55f3d79e8e539605193b29f3293b2b622cc90c8d3bf41954b2ac5968a979ad7e993f3ad8e68bd487c0bf0ee8bc33656ff4dc10d4e256845eff33566b3ce01832

  • SSDEEP

    1536:SoPR9NlFyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy+:Sob1yfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\86108776130cdecf1a740306235eecbc_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1796
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1796 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2004

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76db85fad7b0227fc0f9d03a8fb1824a

    SHA1

    03e03468f30292658c4398e257e6f2d99ad68bb4

    SHA256

    6ab949aeaec81d5ca3fffb7a42b5b58c8bb7ff5ea01249405ed6ce98a5e21514

    SHA512

    c1b2a01a21d50dcd6e9ead6198d5cf670291ee7ee68f95c26bfdc52a9a17c013ec1e492ea351c3d4739e4803d9ee68da1d50bcf7f56cbb8439593b1ea6323a4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    011a877fafc89c3b7dae8e44200ed5ad

    SHA1

    6c262e10d8ed19f4cbb1510f10dff52755a31deb

    SHA256

    30da11fbd03643f7d3b8a902e580c888a689aae480509cd4f0919f508c517be1

    SHA512

    85f1e4894aed685abf9a239cbf461286f3cc6b0d3862de4bf71fb024906079c1c1c007c14d7ae9b7dab8ff17956a90c8ff242db4cf2ebc94e757993676f4faf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6cdb7899f666d6ab0e756a3a120630b4

    SHA1

    db11b20d35b7d5691777baf1ea4b52539233ef6c

    SHA256

    2050e003b2301a9026398187b938d60cd0ec4cc61f893d0ab75652af4fe118f8

    SHA512

    d7e97417cc9414f1f9fcff14ad6809d4426afe562f18a6b249e149cd6c04cbee472ee11fb3ab0b3ad624af486ca0f8c936aec7919a835d23b9d6d5b0c3578b86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    03f37937224cdcede9f0665b44618359

    SHA1

    ce813b585b166bcd33aa4fefc364d9c51277c5e0

    SHA256

    8cef7c82d66ebacfb3afea4f0f1d88d97561e26852528739beb931590c5a7f50

    SHA512

    c9c1b322d72018139be52d27d7abb25f4d95ce6f8cc50b67caa567931ee9476f9ea53395f573fd0c765276524dc49e1186058c8546c65e7d2dd3e34b681e3992

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ebffd3833f28ee7d5e834ee509a6d61

    SHA1

    6976bf259726d5bdcb69eb023e2ab8fed0af88b7

    SHA256

    b7dec3facb8b942867faf13a27f766ba9333f26d42ad0685621817470ab57c83

    SHA512

    e3d9be5b78c0286a837b46f6094c70b1b25c50d9320558d4d4c7b34783886d3a16fffa3cc14ded9cacc69386f899185121ce61dd99d555a84fe5cd9172daead0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac85e5ea89dba8bc4f4b5656cd5990f6

    SHA1

    a079248ade48d3941fc1346abb2499830bd698cd

    SHA256

    5a0a6a7e76b90bafaba2aeddd524b421a5aef6b4ccec918beca875f9ca796a41

    SHA512

    65aaa719f74c47492298bb463987b522752aab5ea5cd8d9082c4eb5ac0e9af5f7687238195dd0a5528657c559a876a4d0630e047316cf84643e19c6854aaa0d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d64492a58fae079dc62185d93c2cf47

    SHA1

    5596ac57b67f9dea392037c9a972120e323cc0a8

    SHA256

    73867956e515dc17fd2c81b3fe35ac72dd57adae9f85f2ede6a50941bbe0682d

    SHA512

    f4483dfe47968d2f0adfc815c70ae9790523ab01d9fa0a7c32e57eb67806eca3f63a8ad7cc18fb84b4e9184b0765b02fa7731be89584103350694b97d8274ecd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    54ab854f5a1a94dd00b4efa8ec88cf17

    SHA1

    1d2ea1da9c992f42a459d87d08dbce2f107db51a

    SHA256

    becb7f77161254611f685b6d49e50c6854fac68481dbeff5fd87e6a29488cb46

    SHA512

    95efbeeceb319b5688a6d68e63fac5fb7da21612a3a4cd40b8e03a15b22b6032fa0ef672dcc8758944a85c6d725f3399047ce04b17b2153764cb82e057305f42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f8524e43ba960e3b9118eb5d2a007ee5

    SHA1

    3637e4877e7d52c41803aca4258643a399de7b9f

    SHA256

    27e3063d4af2c329cd19026dd5fd3662dfa2f63bb82b76dda824d91ecd838e9d

    SHA512

    e315efc283b66fee3bd99b8fb0425fbb9ad798dbc2fe7bf875db8d843e0c0c9208a1dbae62cc5cc896d92ed953f739c2d69721f49bdc4c33ebdd9287e4436952

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0326aec1a059ef632d22e8eb60faa4d2

    SHA1

    c2a215ef5928946583bb505487ba5381599ceeaa

    SHA256

    2a2ae10736826f918f55e6afe34c616f162500ff4f2faf226906cf9341ce64f1

    SHA512

    639ec3ff042151a9e375bcd8c9301f653d52e8d4ea6aff77dc66799b62c5005c281bf3b6ddb83193bfe772cfe76bde9d43446fdcae3993032f932e56587fdd5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    23ca72c9edbfb46dc1b7dfa4345e1849

    SHA1

    fc2fe590f2fba44c869db54c59dc0c1919ecbf85

    SHA256

    03716aec2e61a9b43911ed9156fc0a27580e5cd5a1c8b5cd514318cc5da8cc6c

    SHA512

    df3b37a2200ef6039c62595d9192767155dce217fe0d47d3c4d6c17b34aa3609e8c89f182b03c0c4c581022dd7e490beaee8c4201d78a2768c59d403fafd5ad3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    434843b2f2f46873ac0dfa3e23e7b1c3

    SHA1

    c67b3c7b035c9acd75a4a68768a649817c29ae61

    SHA256

    ab11734c5512f5f481835fd2d7aff4a98f669a949c844e023683351b3ab428d8

    SHA512

    558f95030ccfff91764b8bd2e566919cc42cb2074520b678d4482ef8624924d1bc787a66cf696b6130c952c5ae4afb22bed0aac37be6e2830d7264485a5cedc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2b0371b324d7daa6d29cdf811d9ede2

    SHA1

    9f84f715895cc5b16452dcf73bbcb70ffb2c6d3e

    SHA256

    88b8bf43af2df89f14ee462955abb7ee79f091ce2cf800e5e5bdd440b4610f07

    SHA512

    c2a2ca80819827ff5297e5c15fcd2f157242319980fa10ba1bc51a0e3f1c0460933eff77377a89abc5f5185c9e47fbd8d5b29a78fa3bbd5a097b08e97b1326a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bb3f63cbf65aa64681838bd07d86922e

    SHA1

    36f25c51915895842e90be7f581c02363b764b3b

    SHA256

    be05c800ceee2d7e94ad91f82ac753b34ff6fc1084c4a592c5c49cb10cc1c5aa

    SHA512

    6a52c81c6fc7c6e8e5da9707c77b886d79569d9c024b8b04296fa59cbe8eb9bc9b1be8d15fb76639600f168ab9281863e786e9d787466d8ab6bbcdc981e66e5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    56d801c1aa1bf14a64bc76be078233ef

    SHA1

    1bb8d3916a1fab762e31b947061917adf821b286

    SHA256

    ca611e67516d16a93d1e2f6d5e1bf63a7f3d41716e927e80456d7cca98086e64

    SHA512

    479cc43b3e02ac03d1e6594ae2bb2bbf4eab02fc2d23b1aefacc9ee0d689a85d09370a93b55dbae18d2fca2aaf82c3a780d69d16bffdac5979776859f277a0c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f66c024b40270e1dbec8e7370369274b

    SHA1

    611b9c2028138033c4688d9927d6c4242f9a482a

    SHA256

    23efd015909a5603e2eacb44130d0e8074cf0d59f90d9a8c9fb770ed9fd8ee36

    SHA512

    7703844e5ccbce8b6d92f89a78639bb458ddc905c6d097feb8a72c1dbe45d626ef3fa13b403a71bf3782b256918bd93f936ea689c1bc79e617117e34c0f4df81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e4d5cb487f42bc5d03bdb6c2c1e32a9

    SHA1

    11a4196cbd89031f21d75e4f391e6d7640564eba

    SHA256

    1659ac5a6ea12f475c8b48476fa04920d4a278cb7d94aac438879efe4d2f9a07

    SHA512

    1157f44e625617357585f2e01f6b1964f234f674f0a2a3469d99521e9bc5beb155e10ba9030202d492b96074ef6c0b40decde87a5699ed65f4bb09f0d5277887

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ca61aa3dfc2685d9408c34c541a154c

    SHA1

    24b12e2e19249f7def3d97e9ce732b1b462ac144

    SHA256

    9295ad83052566877d070280dd28ed8dd65f895f57e1f42e29f5f3e21a4fd4d4

    SHA512

    f37a7e8e20abf64a13cc3d428248e4bcfed2ef7f5cd0faf79bc7fafba3e7393a4b5b771ab66e633920bd7714be52528d22ec7a0ea66723008f271075d48402ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89eec78aec1f3b3728c230034a9f2ce2

    SHA1

    02d5397308f0cb3d97e0f609c8c8cfff8d95856d

    SHA256

    7d4936b473744f505b549d883df2993d34a705edac2722de14669db4d9d16a93

    SHA512

    715ad48d1274e07516006e2fc82cd3e2ef31b6c9c715fe73206d0e72d820edb4206066c6c287d3b70b6fbd75bf862f0a938dd756d8f3b4d93f6e0de8099c06b3

  • C:\Users\Admin\AppData\Local\Temp\Cab20DB.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar216F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b