Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    137s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/06/2024, 13:58

General

  • Target

    98564450f99be0f6cb3eaa05922819ca_JaffaCakes118.html

  • Size

    81KB

  • MD5

    98564450f99be0f6cb3eaa05922819ca

  • SHA1

    d302cec1f260de67af701d0a3ba2b889251636fe

  • SHA256

    bea2312a0e507ed3dd921ffe8233c0a43b0c91998c2e4b5ec8f56cf56bc44533

  • SHA512

    59a14c093367154d4875815e1b46474d974588e0214be607d5241a51bd98b30318ff9d46484c8b3fbdc4faf220833f51756d6ceb087c5196c0eccbc725077748

  • SSDEEP

    1536:J/ZwAHxdAHKMyxSTzNen0tbrga94hcuNnQC:JhD7MyxSTzNUq4hcuZX

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\98564450f99be0f6cb3eaa05922819ca_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2236
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2236 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2040

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5160aeab884a46416e44316b828ec456

    SHA1

    0717523f03c16d8eb5ac8a4808790c30a1d96584

    SHA256

    5f340a9add0682d62dc5ffa2ae0f4d72fa481a5d6f6a39de8f3858c4263490f6

    SHA512

    0d636d0c8dec39c56b9030e6377097afce057b475db1bd4024fbbe7a64f6bb23a09c540f7c28518428f6e5625971c18480e2b77fcf15994bca2f22999288fee6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    77f4144f2eb383f2d143d70b4ce54420

    SHA1

    59a190882c3d03db141ecaddd1810033cb28822e

    SHA256

    84e7594fc233ca5d84ecdc05d9f00a04cff9b9edf2b7fcdc732f5867863ec068

    SHA512

    a2f00b172fc49f119363de6a00de1d2cde3c81bae0a85f93826bda031488992a6f803d5d724e959d04f0adcbafb1c9a2973fe39ef747441f2a6d00602cd3a744

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    181ba1ac8a0a0c38a4f0225cf1053cac

    SHA1

    52dbb539dfcf223778b9ce02a403ef692ea7b079

    SHA256

    f84caa366c5c63ba2fc8251dbd833f114db304efdf5b4627b5f0e886fd697f50

    SHA512

    c2eb2ecbbe867bd5a2efea114983b34b6635eee79f8a43e683ad3e83b05791738b5ba9449bf8aaa483af8efd332c323b4e42d8c8f34e5484ac7b9a07fc5d5954

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    819b4bc2ac32b966f761638346294a8c

    SHA1

    ddbfe7ae0a4fffd3fc95efffab5551b6ef5dff33

    SHA256

    64b1b764d58c4cc64e12895b8fd86093ba024efc63ff942961942a9a75bc7280

    SHA512

    01a6d03975034fafc60c47b528b384c6ce7068c4a090ad903476681994d35b063d0bf2f324b8b910a6960db76a28bb3f79769afa47a73caac0e92c52f2e8d9cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    32e83b93fe9c0ea0ab744e3a43e2cb0e

    SHA1

    7e7e3e7f435b77ebe1379378f09fcc01bda4cdc8

    SHA256

    e79ae78c8664e46b0463e0c7d0c282a553f12d5b84816a28e57da4e0008700c8

    SHA512

    3bd579b2fcede2c5755db19bf7406fa593a09715f0867522c2845a2817a6c23799e70ef221a596db98ce488f59a3488f9458c771a77a9acf800bfbc047d50cf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    64d6eff7f1e6b8efe035c63469e66e7e

    SHA1

    aa67ab0b6c6c440ad1845447a55c5dcae02ca963

    SHA256

    5f8e6d90c5f86f853cbe33b41bc48965365b9976dbd0b5374534f13fa7466548

    SHA512

    7098b74f56ee9561d0db62c151147bbe40b523a29238f30e35f5b77b8b13824b32cfec299631d25ac6094c65a80c5af143d6d13af7d2f712de79f597f4800c6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    976b37f666b3b7c3415db15cdbbcffa2

    SHA1

    f2b79da9bb9b422fd1a4d8a0f71076c47630912c

    SHA256

    3c5a6033c1255cdc228dabb3edd7166c50c8bed08b6728c7665e8c33ad28f918

    SHA512

    f06d6af20bc9ec319620e79a4ba79a3f28756ab3021fd979f39b4b335379455c9adf58e3b60920b1ca17c9be5a9c628ed8baf84a7b58460076f634dc2ca8224c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    97f55563f4085f119970ac7188b3c45c

    SHA1

    7505e29b4f420f0b1ab85bdca15e756ca9f80901

    SHA256

    50c83a9fd00cf95213ff8d0673eeca5ffbab643067824c7d20ad8b9d899fe37d

    SHA512

    4eb1b8ee5ec9bbe2d99adeffb0c37c02c16a4ffcbe80fbd297bad4f25637bff5f9c8897d69f7fb74fedc3c5394a182b45f7356cd86971d0c078f91735d56423c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f541b7baf9577787df88990c62b85cd

    SHA1

    7887dd44f3fe21cc6e51b59f9dfb8e278c25ee89

    SHA256

    6010b063e9c38f62f304454c93bc5c32d08b5962217238c5b4a53e80a1bd5b74

    SHA512

    1fc2e813ee5981616c6bf338d107f7287d4a7283463a46546b46d679eb9fa0d9045a5e50a7cf072d40d854f3932374d4ad75d8ca01c0fe21677e0bdaf7c76ee7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    56d0e9958c9fc45782823fc8653b84f4

    SHA1

    f49260570d52660dfad7ec895fd42cdf343c7fe1

    SHA256

    5275ff3d08594a78d4d12f6ce84f89614192e4167d447c465d2d3394d5fa6b5c

    SHA512

    fdedd724e4ae01f5cf258a5f016c1bd445fd52845c311c138dc3964f5853adbddb51813e60be655ab79dd90a7c47494f97d92d75804655e4a5a3927c3936a66d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    beb6c1839f5997482f476cf5bcce0afd

    SHA1

    f715a17ef716775738496252f3d4c813f6c84568

    SHA256

    2c2122d276b34522b7907a1e52bd80bc2537350488f737eb2eb24d9b10499b80

    SHA512

    ca073666551d7899f5edbe4801021b5cda5e8793d4a2608735cb1845638403cb37c6ac15acb17e2ba14c4affae567e10d0ed05569cdf6c9cbf16dbfdabd8dded

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9444ce3188e3a7173ea2caac0719ea23

    SHA1

    862f786d675ec2ee465b940007a5a0f67381118f

    SHA256

    45dbf1d56df1aee96c153db7e526a8d46aa68602e41144548409a19aa841ed15

    SHA512

    6b6eba08a075b894a48708f136363abdb4c185d786f58877941b3e3d897b8915710854efce6d11639549f74c1e8faf4d319be9720ebb93d63b8a308eda7a43e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    65da58d4b6c554e982b37ff27b17ae6d

    SHA1

    6508a45d70b07bf5d2f5651de07fccde7a520b5b

    SHA256

    4e5dcb5e644c16d8d88cd0b42abb0a07cd23df7fef64a813adf38b6bda373039

    SHA512

    e7329a4903f6e41b0afebba09c95dc49963b919fb612f0933436091c47f196e771b954d3a7aad2ee0ebf60a8c53bfd197f53ae70c93743d3f47d4c15a9eaceca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d67f0f85b3aca9991105f24c33323671

    SHA1

    a5c44916924070ba9065c5ab7150d47362b310e0

    SHA256

    59e62db0b0e53902516149de32e4a994c0220f5e6df238fff0534262f59adef0

    SHA512

    aa422cc89061c1a64a1eade0488fa4f1faebd46b5529efbf2eb5d686ee3eeefebd5b6fc773f9e422eee058a7b290ddb17d1558ad827b6526fd4af2750a24d4ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e6be509defcefac5c078e7a5656e93b

    SHA1

    de40e12fe131f2f2ed06ff85bf0cc8d817215513

    SHA256

    f95e864d4ab894232787cad7233a09e7ef2304e031eab694784351a469f9d7eb

    SHA512

    0be7cb97a2478741fd8b66d8b119e6debd815d5fcd20421659d9ff763cb16d7571099e8906df94c5c6ac8f57a1adbdae287acbdca6a7e5f7947da156a267fca4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b881d213aea23a71fc3dbe2db018a31f

    SHA1

    b7781d035a07c8d1d912822dde05d18828dc603f

    SHA256

    260f7c6cc2595e58814e8131bf3f50a8bd85b1aab3eb41cc44a6f1e2c1801644

    SHA512

    6920d502fcd65f069671540e967099f36615e4af0900ea01c6ce208d92e1749b1a97a964c32789c0bfa263305fce9c982d2b72726f16fe56a0b209d036f6b746

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e79c4c23a1c3b5abaf51b28d850b2e3f

    SHA1

    fa0cb06354ea5db322d05b2b811bb85ed0bdfd49

    SHA256

    4d5b92d6cbef9c9ffcfee8c702c4106389f6f69636c376e65933ea26faad3b6b

    SHA512

    06c5c32775989c9290d102350baf29fa047aec47d6504f95bce8f31fde9fcb1678d65fc83bc1d677792e538efa3643386a4eb7fb22d4a17959743a31e09fa1bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed9bb412a780ac7d9b70303ed21fc14a

    SHA1

    fe05739c56686061679e0a9aae39cc3cb6ea993e

    SHA256

    04385cb4fbd93de6ca4c8196531863874820ec596effa3f0ebdc852666faa954

    SHA512

    e47467128ba13d4e73e06830db4c5673c97cab55e52808d5de4d28d37dc29b44709d1ef071c56e17be67663a668dcee881826f5aa25ea6b680ff7582e9ca0316

  • C:\Users\Admin\AppData\Local\Temp\CabD0E8.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarD285.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b