Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 09:49

General

  • Target

    8a17edd49444eede91f37d1feb30eba3_JaffaCakes118.html

  • Size

    139KB

  • MD5

    8a17edd49444eede91f37d1feb30eba3

  • SHA1

    5e6b180b11a3a33a0da58b17cd633efece287c0a

  • SHA256

    6880cb355fdd182ea6ddcd1b18a55fff82df89a60911b2448708bb8405827752

  • SHA512

    7f282fea3e354f805177bd8ceba4730a776088e686a7b433abc8156cdc4f37a50a2be0fd1cca48165d734103abed5e488138b25ced02e2960c4d2e97c655aa49

  • SSDEEP

    1536:ScbUkoxlyvjyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBw:ScroubyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8a17edd49444eede91f37d1feb30eba3_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1336
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1336 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2632

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ac04ae03888c401b317c1bc6a4fea34

    SHA1

    42488e49dc8be898e968dd19912611b748664f32

    SHA256

    094f2c1184095b2c106a36c8fcf9c98f618f979788909787c21584579048114d

    SHA512

    af6b11b8ba7dba2fd6142f2852d165ace8d3d25994856b45793282df3c119826d2b19f0d8b37e70dad2c7a1aad5bb122d423ad1fbb07ec0a8491c0db89605604

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f0bfe491b63ca7206493f6e1a8750a2e

    SHA1

    09383e680393e1bf00d4f63ace60e27af7d26e5c

    SHA256

    4c287e9d127c4fa05778a07c796cb19f072df2389483031c315f84c3a40691f7

    SHA512

    d08cfb03c3a4f7a8c0c552c7f3a285b34da0c27159c1f02a9caac4715942836c13f33bc3373af5aa75bd2c5696790faf5f1d1809b762e4ba66e72dd322d70361

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f05f293bc78eec4451b6f42cd907db44

    SHA1

    7e79e3bfa562d38a45094433c07a15401802baf2

    SHA256

    2693da876eb5002b1affd064c6caabdfdc061ffb364a3c953e7910c31c8a57f0

    SHA512

    2b0768942e55e2aed7c303d1e4c32a855d4c2063bb89a475db3130db3ba24213ac111dc0699b56fbed753d1b71d953cd11d1aa28b08ca1117675ef9b372d1ee7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a8b68405d3c23cbbaee8e8b1d7f3a68

    SHA1

    eb60e8eda0a005e8a7a454ec0c662d9561fca690

    SHA256

    e4cb0cea162c3c96963535c1df1292f08722eeb07de8f77a8fcb98b66549eb85

    SHA512

    b3009f240c0616e446cd9d29f303f3f248146c66bcc7c450123bf63e8f6511ab00b48cae72a765139050dcc6ff3d75dd0ab23d020b6092013e4af18a222db238

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8247169f0a9927a9dc455b51ea01a52c

    SHA1

    1fc12224c35b953cdd4b1164192e61b27361f618

    SHA256

    3ff125ca855872b66b3907179a10106eb67dc19768b80530c7fcabc56be5aae2

    SHA512

    d940d0e080acfc5776a77c02d6d1cf4ff2465c5682b75cd8eed776862e455c23fa855b29d9bda8d3b15e7444fa3d875ec4cc416afcde7b9fbbfdf63c98a7ff70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00b7d0984b7a63073e8695cc09b2aea9

    SHA1

    1e747c1040f2624788b25e6d1dceee017999866a

    SHA256

    05d523f06ce5ed38809c3cf14856fd647c14c7ecff104637ab8c3b0470e2c7cd

    SHA512

    e1135e648f16dc5200b7373f68f512d0ce552fcd8aa47eb5e1891c1203ffc865ba69fbe6f651ff1de8d2ad4095a171b76614999a7199d25d803b6436a504bde2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b7d6979c61a42f32c2db19eafcb3319

    SHA1

    2eeeb135569d9fbc70640d9aa111b89006f92794

    SHA256

    dfa737336d8554417dd30318c43fc44d53e894a74780f6192ded3c56b390890f

    SHA512

    bd3a135acae6e810141c6eac0b65433594a0417bcb9ab622d01efe082217d16f0996cedad9e1866b18f4bcdf83e2789b8141822252791a807c89ff009a1397a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ec0192cf3396148de80062e36ca402f

    SHA1

    5beb903029b7b9faca3db050d2f37be0c7b1f510

    SHA256

    8787eda9847a3a133cda80af293f26cf86de7409fac88f592433c02bd6925203

    SHA512

    3cad05eff2e9f563293b3d8fd68a6591d11219e1bb207681205ac9fcde401275a2c3f7422c3dcec4767c165d20434e408a7db10b033114667c7b525f2531500c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a77be75007ded328922d0102c906413

    SHA1

    b8c47f310193407fb18e9eb4ac8c562044892b74

    SHA256

    d39466cff91674dcb64bd5314b583655bd96800a6605d4f8cf8c3b5cf86bb896

    SHA512

    7c5fac4d951d1041f898668c7b402c7708c628369c82d87351ef91e07d7ca01867b6829d71e2283800e1e4df88c958a51045406947633837288e14da2236fe5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b0d52c558a1ea02a313163179b9991d

    SHA1

    74679ba8be20028ac84860b5072022e5b1cdfc2b

    SHA256

    039c3946a7a59b76970407c467bc10e6955ea28dcb7abfd196ee95974cbd26dc

    SHA512

    94846e404d4319c64c32822feaab8807490cf892a17b82161f625fa2463a1fd4dd1135d9688465ba3acc89201c20e34e2601ac41e2f9a090e1464fa5481cbccc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b9e132ae3dd4b81e2bdd13e25efad138

    SHA1

    ba97b1ecee4ca2ffa7d9fed66ef344133e8f917c

    SHA256

    4489530cf165df48a6019850f4eb625ca4fe5a5be31928195184319d1a201877

    SHA512

    eadec1576093cae8b88ebb0bac511e57711994d668595e167411fad4bda33ff7c516fbb6d8c9bd979a9aec32faca1753ce849ec6f574790adc9f134c5c84182b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8f48fe66ba38d25560a6c6b10903de2

    SHA1

    0600aafd644213b233cb845c1e8432e38ecb57d9

    SHA256

    42dc33bf9766e68890d8b01b35876427bf8e071654ca3967f73405ecc21cbc73

    SHA512

    13005d25562794928028dcbeec8fcded4bcb752e634ed0176e830c0465b4bf573c8b3a5a0bb8e17312ba7e530815a3fef07e1eda7b7c3988a358e4b9f6ef9f8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    99f4cbe7ac2dea925cf714782d1237fe

    SHA1

    3fc235ac78211cf45e2acb5a2b3ca269f5b3b763

    SHA256

    c37cc0255d84bb0ca8822011c4ac1e3f15f1afe9ee5f073c91a1af878761ac65

    SHA512

    7f141da4042ba0165f0d734078181731e5947dced120553d33d2caad6190054242292afbac1a5d905776b794f18f12b45b7b1361373f1f710833bd0766bc4c0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    323048b35e4497bb3d1d6a363844bad6

    SHA1

    21ea16fb99007892772da75d387fe8246ac17846

    SHA256

    8e157acb790ff66a03751a4700a9b011fedfce740ac45748b687795658f7afc7

    SHA512

    c0cec42925e01e01a0e71afe39b23f7d3699697470a7d6f1560752c2f646cdd4bfccdd64967d2090af9df32ca436e14c69287c3323669c2f00f953142c06f1c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d3fdbac6335d3ae85501410ab18abdd0

    SHA1

    84e4e5e1be5b0d956eca211a982f8faf560e144d

    SHA256

    1ff9767bd571c453b5411049f8682dcf05a7be56440f82bae232aece6155329a

    SHA512

    1ddb7bfcbe68b4c8eff62400db5b7af6b0d3ddac68013b67559119a6737a98da97430bc2e622f970f889a4a3613db691c687abcbc63085d19c255bc9cec44176

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d328ab3a44820bd3c4a9fd175b9036f2

    SHA1

    814c7456fa8948c11a8a7770219b6a90e48acf9a

    SHA256

    898ec463caa76a5e0d285e89932ae1b52f699ea1ce5f2ca6713c4a75deb93c93

    SHA512

    2c41278cf3f8223201886a162d72d25f309d6c6a8fd2971b2ff52535c196dd51b2b36f743ad4bae56e909619407065c3c3e097d031bfc8edd3f7502e77ca9142

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    050c06586a51f2a59295d7f107b76996

    SHA1

    6f8972b4150f300b2d61e4243315dd881db48dc4

    SHA256

    4218c2deb863ef7dbc7c87efda460d94860f7b24d4e4f7f2a80f5810819173db

    SHA512

    045265758ee4832a70bce519ab9f1475efcac80e0a9c2d912e7ea1f2dbd345e7370f9f9a8add94251f6ccb7856831d25ab9794e32a9fdabfdde8ce40bc17fb0c

  • C:\Users\Admin\AppData\Local\Temp\CabA100.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarA242.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b