Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    04/06/2024, 02:49

General

  • Target

    936e888c77f483a48316bb38ea91996a_JaffaCakes118.html

  • Size

    29KB

  • MD5

    936e888c77f483a48316bb38ea91996a

  • SHA1

    da551fdbfc5ff85e13ef802a1925e4d21dbd0ed1

  • SHA256

    09916e1d1c9a3bb45d9990a7bb21595067208b9db97a09fe851586ff427b55a9

  • SHA512

    34103f5f31f4603e8216adfc43dac30005d449c04f2b5ff290bb143ca646a144d4be009493521c7892bd08793b84dbf30e93dc5e6b866afae0b9de8999ca7bc8

  • SSDEEP

    384:9rIIdA8Qq/Lwl5Nj/wm2P6MnS/MC22WI4N0abv1oz4mTJXP99zziPh:9xdvi5Nj44/ofNDNQF7WPh

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\936e888c77f483a48316bb38ea91996a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1760
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1760 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2400

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    004edb284c233f10ab9033627ed2be48

    SHA1

    be764450f41804902d6cacda93f679210b7d70c3

    SHA256

    f6b5138397a69baf151d30aff7b4ed0c86f9b61018c3b1278fcddcc868f2833d

    SHA512

    5dcbc56d6d4fbba12b7cfb80b0828d798283d194c6bc1c0c04ab4c399da719dfe85667ac09f771c124604658f5013273cf7c40d260cc13443c3d214da249ab29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bfc3d1b6813a8dc97473e2b2123843b9

    SHA1

    6b17ab78f45522f03652695199536db5858ed846

    SHA256

    7badf9e4ac960e217684a036c822f2538dd1f2ab9bceffc61e166f6f50c65be1

    SHA512

    474c43908d1d69dfa7d5bab46be0ef44e1b088a4e6a0f8f92af4a12089d7166bc9548c81bb3a98ac7c7547693b0ffa73d0c1ec2947035b5af8d17925cf5664d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a0c3fd8dcbaaa723b05df4fa91f8b00

    SHA1

    1f817d9450a28836757894b4b303d1d2bad158c1

    SHA256

    22535fed4c64e504f1ec0322035601d3f25d52028e4dbbfd0504d56808477401

    SHA512

    a07a514954cd9d9f6851d790cb1d10f4cc31fd9187bf98801a261142a0e09a4c260502d9f092bfd2c6697229a50b520677832ff8763460362b510aed9f88a81c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    12202e025404de995edf490f8eae347a

    SHA1

    507a39011fb8915f409fbdd22a952d78bdfd458c

    SHA256

    f5088fedde0a8b0fc5728f6d60a91ae56e41f28e03ddf83748bb7339b9cea460

    SHA512

    4d4cc46239ff6b0fa6b572dc4ee4f5e162de1f67d8a528d8926bd184b51530fc18f1ab4ed70707ff26ecb1ecf0fc86d3a4f9eb47f726dc4d530e9c919a59cd32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    294b40464edead41d801d00c58a447c9

    SHA1

    6d5c4dcbfffce30e30817a2c513578c0885269cb

    SHA256

    7bacdf746f62ebf3677c5db1e723b28ef74c3685f78deec8a1ccd3caae8fbd4c

    SHA512

    9234b58a217e152bc16f9922eaa0028568ca25f033edcf3b5b58312145636c517646b569e6150cf765adc1d5cdc35c7dc08dca9aa5b1d14ba194c62cfaf76652

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ade5bc3b459d6b4ad0549f5e836441d0

    SHA1

    1cb37b0df024c5e30c8388231c9dfa96e67fd010

    SHA256

    f539d99d1b80969f3d3ebe4e628b4be19a9297046d74e1f54b4d7780470e72d1

    SHA512

    855fcd69eed615f54a95f83703afd4c02c3cc376f254b53071e37467b9682a2423ba5e852dd8577e008202274b6c974d20d35a493310273a36edcfb086cc9012

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8336b542b0f61e4100aa293aab30bc1

    SHA1

    1c18f73fd53b3a749e21350f3f2ebb9bd459ad18

    SHA256

    1a14f35ede107a8dcf0a122dd67e709f4eecaabf10f9546ddef81252a2553cd2

    SHA512

    553e46b529362a9646f34f6c3cee7c8f07d233c4192ea58cf905f646ce435f07a56fdaebd5fada000fc4e124fb5b9f14ec0734c47405de905d5be5fb34bc22aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    693c58f1adaeb2ff408e72c3faee5a4f

    SHA1

    4e74a257cc5a5cf4736e84d8423dcad1b7eb83c7

    SHA256

    74094657aababe16acf31cd6d2237031586e635d07d7ff56a7becfed2489dabb

    SHA512

    8e52486f322e5f7d4da33371e489a15c1443263b2724e1fb13e7d75c966cdd86adb5991102c644eedb483964fcaad4a7c6db003df32ad08288021f025a078dba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc4bb88a8b3c3b22222df583a47cd0db

    SHA1

    021698b317fb3615a765659e11ed33b012beb412

    SHA256

    05530ea6f2896ed65005bc86f4b3e50ea54dd47c2e5a3deba4bcda7662ef9e9a

    SHA512

    260a59558401eed048ee57b6154aebe687a5d3a0e708729ce8a804c62e2d6c48f5415190097136f180df6d191cc59dfdc24488dca0bef28aab43891dc58686f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    69b4b31a50bd2af800212ea7e3ac4e4c

    SHA1

    71dba1f8a3bd78f5b0a6440261633f5cc58c7f35

    SHA256

    3993754698499c193f3d2ca303ff73f90e930c098343179af9cfe389c2c9b5b2

    SHA512

    be1880e73fd04569b92f8b073ec117690455f2ac43765a81cbb15dfb499223454cc2e77ad174838768543cadaf8cc59d7d415f7c741332b3e77417c590ab3d92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de01dd253d25ac5abfa523ab84a0e2cb

    SHA1

    9f2933fcfb28c5519fda00c93f87aab028d1af30

    SHA256

    5637067d3bcf22a5d902e3b8568a4b12815a8f47edb6b274a51657056a263e05

    SHA512

    51c165987ba697ba1cae8a436fcbeb0f9248fc28e28a6b20e2c7ccf261c9882ac1a2dc2c495f38fd7fdcfd942061aa1acbf86bd20c03cde9eb5af7e0c0cbe74a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a461c4ba2c93538d1ef2b0408a845a48

    SHA1

    cd2bc8e1d2443417344d52b2c2e10e4231dddc99

    SHA256

    c163d656f24c4c6e02d2bc8555a10d83964fe2b14b94543915ab98c2a547b401

    SHA512

    ad5d6111c8ba4ec6321ccd33689d97638b4c2f71e93c186731596be7668f62c5ed693edb08d830e27859100c4d6f39c9dcc80e39f51e5bcf1a8e3817e3073bc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0d454dca4dbc5493959226779328e07

    SHA1

    d6f223063cbfddd677a3d86330f98401ddfd56bc

    SHA256

    c7530bb296f3e860546de45ad7898219acd66740694f2a94b61c9c7d6908080c

    SHA512

    3fd0f72e80264ad8e9ab88ee3e28ad61cd39ee5ed01e445ee59d5ed84e34b35dac5f771e472fd571311bbdeb79e7302fd054c0f5a93e8bd8e732339b55fb8314

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75df5f645395c14f5ab2f7aa771953c6

    SHA1

    a8e0ebd39daba1053b04baf87eb74bf2f972c814

    SHA256

    cdec4ebf5b8654244e877770352d7333f8ddcf439987083ba7bc51019e5f845b

    SHA512

    21f7018fdb91fe171266c6d0279098b18077bd72052adcc225821932fdb29dc8868664e94b4970da327cdc2cf6f12e2fb759c40621c3c6db658d7242fffc91cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1cd8a3c0523caac6ba7979e9f9e8e2a8

    SHA1

    d2b43033df55bde6f91b912ed669d5464f1197de

    SHA256

    4628bf75b19e4d03e653708057c5a77576b810d8b33767fdc2634a3b10685afc

    SHA512

    f63f42c6c243962430dc16fcaddd10833dd5619861a671fa9a38d931d89883918051a7a5dd5e6d6052776537c12a7d1ed2ed71dcd01c2c20e0ab7876ed433a97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a55d840ecebabe43d533c95b923dd316

    SHA1

    41e8aafabd0d154891605183e7e07b077a041b25

    SHA256

    e1a42151d27f09874e70058f9a9afcb57ca893480d8bda1fb33c2de2f49b71b8

    SHA512

    f46edbf7ca379e27cb4100eee535f6ece268e9029e2377bc1fa6a117567777d4bf20f91d48da85bd7c78c4e0fb6c451b6bda8eb7105ce9d07bb6fa4ae69a4a3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f74d85fd326be05944d2a8d31840173f

    SHA1

    e0953cb4cd644df89145e58db560801692ae8107

    SHA256

    8a133a6b8993d10c3b1d79633b269dd2240697f23d7d71a4fb965ecc190e9f50

    SHA512

    5580430616fb55348cf00c34b3850d7e6b22baa31c57fc8fac4640b12a12ae77db9b033578c9774fc0dfc9fff04482eee378dca3033786a1b6831daef37f21b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c876fd3930e9d26d989f7f3ae43b5f3a

    SHA1

    445f92071541ea3f7adc55bb9329f368288662ec

    SHA256

    6d3e7f20d9c7ed269d118123f44fbc9eda50a8d41ad9ccc0d6ea4a7e930431a7

    SHA512

    2dfd32e7322940605b2e75aed27f607a53ba9931a8a99cc513c211c59253756f00c86c7d0973665a3b202a871d1686251382d3886bbd871e3a0278514d226bed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    320d5369feb3d10a3bfa6be9bf93d748

    SHA1

    e6427b9df5246f38b0261f2dcce1b82b1757a17c

    SHA256

    0b38f0751023a9f0849e0847d88dde509abe5a53ca33674c49c94453813ef155

    SHA512

    b0cd75fc9743032c76565b92f0d9769f74c8badfcb11f5bede5a587d6ff4714c78831b0e9408b70e22d24c37e92c2481c1c15d6695ab6283d1f3b04d619b3b76

  • C:\Users\Admin\AppData\Local\Temp\CabD818.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarD82A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

  • C:\Users\Admin\AppData\Local\Temp\TarD8CC.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b