Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    02/06/2024, 08:34

General

  • Target

    8d7948eec91776c589aac3f6d5a16068_JaffaCakes118.html

  • Size

    36KB

  • MD5

    8d7948eec91776c589aac3f6d5a16068

  • SHA1

    61d0515f8943b995100037901b7efb7186bb5fc1

  • SHA256

    0c4a8136bd632683dc0a9b55a18dd80961d46ef4f6eb0a954b914f7bfecb5a55

  • SHA512

    d95d5bb1704a0b2a7ee0068801afc515b9e585e0db8961b28d076569991c3eee8e6ab84141b3638947f48a649f948f53ef412ca077f7209743d6209ca70f8a28

  • SSDEEP

    384:BQ/sBMmBMABMABMFBMFBMFBMFBMMBMMBMrtaLij2yV7cx4Rcm+wDnTlHXCZSmOtQ:CsCmCACACFCFCFCFCMCMCNte4KMthC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8d7948eec91776c589aac3f6d5a16068_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2820
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2820 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2684

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f2bedcec1f4514131da524ac1105ae1

    SHA1

    26614be066c4eb04fcc916549ec6e83290b4e3a5

    SHA256

    a5ba810f968f022a2a14516246bde6dc69b1d8548b90d7ef4d8cec0190ad22df

    SHA512

    7966cc17cf383d7d8d1bc72dd3696a5b2cb9bfff4af87f305b109719dd5681965acce6084d6feebb0d3a0511bf42f53e536990c0ad9fd4c0267aa50d63754a73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    010746683f50a4ae60ad7789dd58e248

    SHA1

    e0ae9bb124ea67f1bd96e7a3d800ff11ec0009d6

    SHA256

    7a24ce26156d055bca4b9810fbd96841f9d7582e3b10db3cab4f3e5817eb87a1

    SHA512

    951d117d08529d43935eec4190fe394430ca5bd566706eb48e62accf1f8aa68c90180d7d5d52b086eeb2fd222a7f179a735dd9d9ce0df1b5b151dc8d87757f02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da0058b84473903a545832be5a7564bb

    SHA1

    061932d081997b78913b810190d628450fdde8bc

    SHA256

    0ec675c150cb9960593e8160a452443a06f4be69840802489aeb517621ef20ec

    SHA512

    5479d88319e1e02fed9125243ddac373b5485f26548a5337ae2dbbea4ced171ea51b86eceb7f73f85254585eccaa2f5c42f77bade4de6d96c38335cfe042c89e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a89373a91a7289e0eb9189da9f0a1e8c

    SHA1

    494d83f8a04cb74aded1d4ac8017fb88ec107294

    SHA256

    8fd61ac358e1926ba983f8998b167c054219ad9f572594aedac5bfd708982fbd

    SHA512

    463e19d098187be0a49f74a81401019a1d3311c9060b51c61a67e3b606f6f1c64af3ba902206a0d27024dce770d4b34f4cf5b378411e24077636a7600ba7a369

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    54da1b8cda062bf048e581dc6341d4f6

    SHA1

    691a0f08b54c0938f075d1f7572b05cd3768ae86

    SHA256

    61d5809382763b3f763c32f2aaf9bee35df0b55b48fa94d2475c8c7fd5860039

    SHA512

    e344aadaedb18d3deb5814b339be91079c87feec2a2a5797059550495d76d395e861d94618a393f1348a5b35f730ea3422b2cf91ef0c8b6dd17380dff6b88915

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff2b156683c7507898911b916951670f

    SHA1

    da3a84bf4cd4aa311f446d607993b84f441c5a57

    SHA256

    8c8a54da31cd3b2bace5861f2efd96d59e4e575c2b5e4a57ae2ce95dc833dfc1

    SHA512

    8084dbeabcacad4cbf5ad98403b010192d224cdb0cfafe2b42baaaa6c50c471c47c0bee239a9e8457f662f19269b0ae025a67f43b0e543d3a2983659917de95f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e16a4c94b49d75591a78cfd0343ae9a

    SHA1

    1e472aeaf869cb2a6dbae7c17ffe69a997a48d08

    SHA256

    069d6e6e780517d40cf3597077c35f84fb8d848576a274cd1707a0103adb68fc

    SHA512

    196225ddbf8b62acbacb1e04975b0b13fbc16784c5a035ec0e60d64506ae1ba795dfa2614762ed1f4dab2b241d6d338cf2d51b5cf8676f00aa0dd12a46d27ab3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    005347988f5b0e918f78218308b3a1fe

    SHA1

    7c3fff9cf2f83c65d6a5708a8b76e2dbd7362db3

    SHA256

    51a9ea5bec6021ef3966d752ef521a284f35e761638bbb88ab7f0b9e0ddda60c

    SHA512

    01829b0a837dece6244011a2a5d1997b5794a4e45c1842492d741aa5f472413cefe0bc22e895b8cd47def24aa1552d81cb1490467a6b56646345bcbcb1e2a8cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    13905a2b3fdf080eb9add50a77866353

    SHA1

    213d08c27abdcf1a40304578b996befc7c47e03e

    SHA256

    15cda90501206c0bb7148cbb55c98ab04af17fd3c9bca40f023ccf684ad0e2af

    SHA512

    1c9ecac5f39000173e5218acd3c901743fd957ffbd400221dc40c15328a55d23f205f4977787c66b503858dd21404a98e566222f6b6eb5075bf4ad811149b5db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    50f966a98d16ffc74777222e1dfa0f2e

    SHA1

    1ebda94970e2925ae6f1a262349eb2f68caa7ecc

    SHA256

    2e568184329e4f38e308e33a8716c130e11becf710ef8c0eba401f7194ffadac

    SHA512

    bf7a56d749de54d989e62efb90d883f7bb0b961322f738ed72ab836ed38cf646a6d7e658e8f9e85fe670232204ed32a324e4f31afaf5ba0fb17ce564bf36cff7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fdcf3c7db7e0d7945d371ee323300127

    SHA1

    4c081a3ab2ace7417ffee526cd7e8edb71d10b01

    SHA256

    ba5f46dd79627ad57e9b71709c783ee26fedcf986c0179105232104ffb193d96

    SHA512

    50811da52576e135c919677acb84b3140f04d618041e65b2d53ec374df63d863dad1ea7eb90e52acfef3217197051ac248d320c3d275687f23a610b1f83ee137

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    88c844ff7ac25014b907d9c2ae7062ce

    SHA1

    d749ae5ee4ce48a80a822000e5a3daf4ebe32918

    SHA256

    f3fdf3f57405e353a0d1426ddb2e1cece21946b52ba9ed5b4aa6340c4e4f25cb

    SHA512

    fde33e568daed66e6a3cd3c1aa96da1eff9649efdc6696a96762b26b8244697950150b102764566ca9008f07a39fa0ddd999c17ecaad531bfa2a8b3e3dbc966e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    980cdc452d0a25b19ce2d2c984305078

    SHA1

    e7020c59c5ae5c3513e5ec70f58569ef0ba37969

    SHA256

    c0012d3c45766810b94970868406d5f149834f23af88d32b07b581b5067075a0

    SHA512

    dbdfc4fcc072b30761790d0358c16e0843ea5be7b050e35d232857bd8b2d4e9e0e077357831532d7d3e85650550a8375d28266f86891e23725338a5058e61ddd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a48ae6d1bffc6670d2796d0c23a41683

    SHA1

    dab46b9788dfa99602cbc7101ef002ce6815a4d2

    SHA256

    404f73ab81a86b3de8d01c31aa7ae6e46a2732fa9dc06098ad8829c1956999a4

    SHA512

    d8b0584bb804d0b0b84d4e63c0dd142e81dffc423643f3bcaf24320d88e76577c2cd28ced3221c4fa9ac0187e9b859e5da8f6f788cd20c9aca423519a30b9893

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee6e50ce8215e0d2ad87c246a209e757

    SHA1

    b88ba59a0232b94b22c4823070f5ecf0cfa147df

    SHA256

    1a38d6f0e25b55afe02aa905fc8c64337a307fbdade1cc5b449540e613aeb3b7

    SHA512

    d2f1d9f94eca9a09583f0e7e4e8f301cb874bf9c2d9e247a892931789d512d9c01b8ecb3b5671c90644e2b44c1704377f7f702eec2d0d1c11ce3009c076a32db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6abba89a9eda500affba5cf2c61d62c8

    SHA1

    a0c4ed96162e1d4be21a1ee0cf5ff0d88493b65d

    SHA256

    5f3f6513b9ca028d669b6f5c4f26e59e00aa023198857333abb3673e4f005ff4

    SHA512

    7902c50251b2ca7016110d0da513d0ad4638826ea3f5a849282ea90b5a102df4f8db5f97616e36293750d509b687f5d4171de1c04ecbcafd158fd05187097be9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2d3ec46572e27b075075e97de364f51

    SHA1

    777ded9214b4873d84c987080178232129499ff3

    SHA256

    6edee4e48740ab9ee8d4bf8aa2eedcf5fc3cb7fd33909ed537f6cdfb92ba961a

    SHA512

    e46b78f72b24f6d20e5abdf0a803afaffbb5d39de021f53cd002a1619f76e9ff5e1e66a4bb275c8ce028ff8c6388ff5b8ff81ad2cea6a3ec7946b4b8da7a48ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    50b09564af81c99ff573e4cab3cc8a8e

    SHA1

    3f42a3931bcfd53e363ca4e7b92455b7762c914b

    SHA256

    02f54f9a3c90f90b30b87a6206ce7b3e6483f12efb31bdb83ba4c9007c25ac8c

    SHA512

    fa9e091ef312f67adebe13ce42fcd74078475accde5bf8bbc7c6132f0db207585d2f853623198a389867063cd1cfe4d51b3cd7374dfac0f9c1c089d98532767a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd600f7d519a482e49e3626d7b51acbc

    SHA1

    643692d1a6cac0bbaff503aa7f714e664f3042c5

    SHA256

    b6cad0a3162bcc9c4f2926bbcff012370cd92d4fc3b6901c2d99466b6355f22f

    SHA512

    6247bf997a1957575287b0f11cdbc41d23f734f4b57fb8c79a4094057e7a22094cb19e7b95a804f2d1b76d549eb08bdda11d1d5dcd15fcdabbe9a60a92885f5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5c7a2c6e2decdd6ca1ed96285c6e8499

    SHA1

    190878c8c7074bec05a5c1348262c711029002f0

    SHA256

    ae8125865c47f550399761d4ef09bd783d60dad97af6e4b6d21857e1e89dca82

    SHA512

    8a238f9790d6fb7bbd6119ef958a373745ef879ffe9a9d8d0cd28d5d071c07e1aa4de98d25148ec384c4a4042ac1cc041d187a0e992689afe40f785f0293d619

  • C:\Users\Admin\AppData\Local\Temp\CabCE68.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\CabCF55.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarCFF6.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b