Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 13:19

General

  • Target

    91edd017f1f2acbdb6420eaefbdee1c5_JaffaCakes118.html

  • Size

    460KB

  • MD5

    91edd017f1f2acbdb6420eaefbdee1c5

  • SHA1

    dfc75b6e5530b66584ec4ad60a77365f4b24fe4c

  • SHA256

    78c78c568928c90266f5b69267c40bed64e9da4de7dab1f91adbe2902eddba19

  • SHA512

    74ff90e56c1c90ef6360b61936274b76d406d190bb52b75d7b3d862c471c6b3a72a38776f9a48ff69f5ee668c0fae80c3c2c5ae64052823daf7d87a8d894e701

  • SSDEEP

    6144:SPsMYod+X3oI+YqsMYod+X3oI+YPsMYod+X3oI+YLsMYod+X3oI+YQ:o5d+X3G5d+X3t5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\91edd017f1f2acbdb6420eaefbdee1c5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3028
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3028 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1208

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c1ab4cbd81f592bb7e7b5eef98754e64

    SHA1

    af1d8a992ebfbfe781f5a24fbeb1cdff03ad5aea

    SHA256

    304338ed4fdb680e3917f29522f10e6ee9b9d4b9cf2c2fccc86d3b1a976615ff

    SHA512

    d1d7ae13a47cb8f02baa9d49622c703495a9a2f5f9f269e3f88d027c47d4ac37798936632b0cc6dbd621043d7d8439cf17a34a697e9d80b12724edf9e0481cf4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2bc06e88c1d5b12ff13fb84cfc6dd0f

    SHA1

    df541c86bfc316307e74c0e90176fe9e0c438384

    SHA256

    dbdc0b347957494a2daa343f4ee16b5047c9ece7bb40c07f00ac3c6937149cd4

    SHA512

    527bf731de4a66a0f69604715d0abb708bb802a654b88a8428a1d72ab77bdd386ed642a5cbeca5df2e4492821ca3f4731b249204306e4ca607fa41a818515fd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    48d1a4be054b55e276c60dab7c6972cf

    SHA1

    5ad2ff2b2004cb154c4f5b270fd64d9d39771c70

    SHA256

    cbfe4ac2fe32da8dcedbd5225292eaff932c5011226a17c5b153c22d0ab60c55

    SHA512

    cc410bafb8f5d34e872c4bb17537ab2c865a2ad87cdbae85e5d847aaf7301b2c5ee216499a263bd5e22e9ab6e290ea73187fe046d7feb5c1b97d3e85914ebcb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f71b362be23f079c84a32b11d0b81eda

    SHA1

    8fea0c1c5368ffb3ba01387746a7064015ae57d7

    SHA256

    f4028bd06fae0cc0fdc845ad883ae3e5d00f54fcb891be3e6535b4b45c37891a

    SHA512

    cc22595ff4141abd89c4cc1884b75a562c51d7b771f6892fe49d83b9275f1553e895b824a2be3077d939e6ee13d936b5de638ec2f3eedb0138513827a4fe279f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06719a5c30885aa989ad7dd16f1580ce

    SHA1

    85df9ce5bae89b8db9a6563c511dcb7020cc554d

    SHA256

    f93c7718a3419065b35352056b13406e1be3839e26ab5050e4911c82043e1bf5

    SHA512

    83d5b3c97aae244e1e9c70f3ec5cae9992a5e64c0cd8b4a50178280a23b4753191457831cc7e6941ce588d6bab584f21f2cf9ac1ceef7cec1cdf55ac77994ebe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d73a2bec8329b620f871c06ea12201a

    SHA1

    48d28c15aeced5929683d35ca73061471e55c559

    SHA256

    43abbed2f5a18f8e69c15fad07e16e5a90b7b868b54509852578db591c08d4d0

    SHA512

    ff9d40d12335a6d50b82e7f5523d899735fd9e1a601c4cf66bd71f70e28adbf4c3a780c3449704084a3a81b5f75548b6d6213ee65f8bfdcadcdc48bf1958a588

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d739a8414d78768a5e087fb62e36dafe

    SHA1

    c9816b9f88f817042d9d136665d6720f66785b6b

    SHA256

    e049378fa6407925d33bdc1ea7d268111b2b94c8324d6d33923917cdd787e9ab

    SHA512

    d8262efe4f18db03f9e945ba831013a15e2de55a8976c51fb627bdc793ef0b161615a2e1b3b8c59d64efd634c34b6f2f0d565e2064ecd460ca39f3fc6265b486

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ced8cc2ddfaeb24f9a878fa8442ea81

    SHA1

    be488f13b2bf311a7928a9ccc644f4ea2cf774bc

    SHA256

    82eaef31ede2cf607391539ad5fa69ea9cd3fa7dc7d8f36e2f1f74c59cd81820

    SHA512

    996b0148c050b46cd1c2f49faf586e590e0da4e00aae59e12b122c8a20b5ae8d15e9346e2d4f672a28b45147581ba26bc6a895079d622c86fe1c15cec3b6b47e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    72d9c7be68cae2e91421f7533c68f62b

    SHA1

    438d60ee4758659cd64f7f84b331c51f5dc9e656

    SHA256

    8cacf36011212f7be53c7a093a77b2e4a3477a683f762fb7408d503306bd08b2

    SHA512

    b88390465f23425c382a6c06a853f0c5bdb445d31f44958620bbc7b2e517e9cf285e229814e4b6f7b26f6a547bb6e2f8bfa57954e02a30344723060328eb9a84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8cfed3faa57c978f9a0d918c1c12445b

    SHA1

    4571d2547bb221448f88eff3e757ea654c2431d4

    SHA256

    66858dfcc648344f32ea24952c90fe78853fe651f4d1e16a04de5cde174143c2

    SHA512

    f8ced9ea170beeedf5b4c3e85822bb3dfc9d6c1f58091acd35a181b5446c2a4bd4c2803a1f0f34110a812abfb9b9e39a4e9ac0080e187ecfcc001e47a9e3ea88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a6de2a14b729762c30a4878c5eb866ea

    SHA1

    614c3fe32f7505cbcbb203c89a4f1e868a80fea3

    SHA256

    b0f1964953f765d42d52fd6417fb59cb88f70dcf8e346ce16808152d11e5b86a

    SHA512

    9aa432bc6dbd2ba69253e7083bf2361af47c503919eeea90a9398eab5e057712d15a3096d608d474815d985e007d7ddb61ca58bd4d737b084a9e9f1b5a68b050

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c12b73fc736243b6ce53befb048056d1

    SHA1

    499a142b93a0fa248aed398329df43b49c2ab3af

    SHA256

    682000f776b83caf30c1cff3fb903ae16d2e3788db39c576542105d7ffa6503f

    SHA512

    728c067d818dd6305551b219533da0bab8094d6135c058f039bbe2a8d62b341ae504dfe5bab24439dd83f0db8701ed3fcc22e2385f2b52ebeefbb2e71346f6c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e2cd814cc746208587efce09720d8ab

    SHA1

    59476ce8b2087822e2046471324028837c3017d7

    SHA256

    a6599e7db91ed281f75d92039a58fb0f46b447a2bf114ef99933e0fe61cf77d5

    SHA512

    e857e57220b3ccac1bd82eb70ed4a61693c26643bf5faa6806255a604125e00dc5d2c81da370f741767acfd70e0487452da4f44eac4d3488b6389f21a87ee034

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5225fc40e8c6f56f414e33e594fabbb7

    SHA1

    7383b0d2db42ff17a468cf9e5e357c64b49f73f3

    SHA256

    c6ce27719ab1f21a490087c8d7500dbc60f1840b665db7b37fe5071ce86dc880

    SHA512

    46dee509a23d42e4bd23747f3edc77c195eb070a12dc58397f33a493e1f3fd4767180ec7314a4d2c47ad3fd144d05ae55a6d3d0324a2921660a46fcf6d2c7335

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7e10918c391af5319d2420e4657f3f8

    SHA1

    83353d993ffb463c6dcf424643faa5811cbc620a

    SHA256

    413af6ef239612fb6160f1af5175bed4209f171ad091a3038c8bf5f4ba938ce4

    SHA512

    4c430dfdc3012378d49eb1b648add70a5102193c62998a203f373b71be86e4d7024c17cdfb5f0025f5c7ef063b1ef3bd3e73276e4d4c80dadb8cd4daea744603

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d728a2ed99bb406fc607aada71fae0f2

    SHA1

    9fbb5530cb4a1de2aa1c46592a992a753da9dcad

    SHA256

    cbbbda6bfc206c83e0458730cbdf5684384b677c101b46d4d3b1a6b151ff4397

    SHA512

    c99dd173058e31284a964df6df550112f6aeccc9ecc27cbda13e1207ac9fe90044e35dc7ae67da0db37b48e2bdb24cdd457770920c0b3dadf82e9d22e3863a28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2847acce27a9bb80bcb524dcde2002e

    SHA1

    35ff23dfe6f661814e71d702e9a6a106b23e417b

    SHA256

    fd1f32ac2f88d8c459133c0b10a3df254f379b9744df4091f975e79d665b377a

    SHA512

    f5dd1b5dd40b39a0cdf571b86d6f01ddc8147c77a39d9ae5a1aefec3fafb9bff35cb801d011d03e83072e42f3a44b4e9346da74387805150d0c36b00b551c923

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb334c4b9674ee7afe9304e99dabc8a3

    SHA1

    1c7cded1f74baddb2fd38cef11714c6f6af47fbc

    SHA256

    3c6602ae2247aeeef59790dcc959b33bf2de7932a610f44539412a916ea946ff

    SHA512

    8341a7bf3293e82f480db75f423f72f518529a565436db3c1a393f6a772fe25356181e227b9a5ec60c1b7a2b57fa772dd3772786fbac6477136220383621099e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4971586016815483a50eb4b354153875

    SHA1

    0aab5b69fabc4054ab0ea363a489d5e69b39101e

    SHA256

    ca1fa6f5baeef2d1465a038c2beccdd642fc8f2553b683fb16561b377829235b

    SHA512

    95155df273eb0e6927c2684dcc2d1fd15c61846ba312dc09dc12fa3a748350bc47cf8f0ce9e9bdb7cfbdbc1884a6b994883f1cd4e05377d0674d9f782b71b965

  • C:\Users\Admin\AppData\Local\Temp\Cab44C1.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar4554.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b