Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    11/06/2024, 02:30

General

  • Target

    9cb9cab67871cfaed69f14bc8300dafc_JaffaCakes118.html

  • Size

    139KB

  • MD5

    9cb9cab67871cfaed69f14bc8300dafc

  • SHA1

    0e705b1402897f8cb5b8d3c1025d5ff34218dc29

  • SHA256

    a32f26e20a50038a09296260153d1101667d00c694b64a889754ef97bf9f2148

  • SHA512

    8a7702368f96be31340ea0fd827e21e894537b171c0c11225b3c35e655f713fac96f47fe662a46663cd2a32169e4bb2c7b41b0fb91ed166ab9dbb1bc6c879032

  • SSDEEP

    1536:S+5N8L3QnG7TslkyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJA:S+5I51yfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9cb9cab67871cfaed69f14bc8300dafc_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2912
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2912 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2004

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4910ee4aba828b61f92e02b373dc8eb9

    SHA1

    a78afb032b77c53ea14e4f5f35826650d5479fab

    SHA256

    b6cfaab311122b953ca3bfbb5b5aa54f836ca259e38aa8ddda28d9bf5e291e17

    SHA512

    0e8137249e0e900171cd09492b34436bf3505964fc362b1ede54b1cceff3a2ca2efe222a8d00f1c81d5ab0e0bd14ce651ddc96dd5a1853b8fd5604b116d51ca7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44a98c1659358a01d9ac99e0b9cf23b6

    SHA1

    6b09c8ca315ef11503490a87f4c13a4f92d46fba

    SHA256

    af6f247b7affb95432adab1f8d722df5ec14ad3ef1c6b0823654d6e796953cc3

    SHA512

    aa2973b7e5fa753a4205884e5cf5edfbec16811fc967b02ab1dcd259af336da3676c433e9c87b2d6a1657b76e3df6af8e1974145c0765a030f24d8a158ef0dd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa48e416ceb7fe3aa887272511c1cfdc

    SHA1

    1eb6015af41a99a05735b141a42a67d87603b23a

    SHA256

    7cb9bc45f95fb741059974e8c9630cce9aababf24830a37c49736825503441fe

    SHA512

    4be7f01adfc80dda21eac4c9574e88bd9ce7dce7394c3417264abcd6bd51bcce840bc4d988f7a367dd82ea9a0a5c9ada151576c3f5a1668de54100ac28988130

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    993639fa61955b2a0c10210d56d77516

    SHA1

    b6d3bc852343231bead517dbf218a95bba8ccfb0

    SHA256

    3dc161e74061371e90c4a271167c7ba03f7277921b2dec8ac653e928d53188f2

    SHA512

    29d278d80909ceb571c85bc4b4f440804f2d305797f01f8298147562894607c3fdd8677454c1e04a19430a31b9ef992e9bff830a84427489fa14f907ca7cf245

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80d5ae65df9af1d61094e7cba1a5b738

    SHA1

    bed59d4163f2b493bef19124c2324a40398e70e7

    SHA256

    373673890f09d4b90cac066e7d62c8459931ea4353fe2a6505b7f771f4b42a0e

    SHA512

    7b6e6da197fcc50b968b6a9d3d2cc764314f6eb1003c8ac98e4253cdb92767150299038b93eddb2e775a761a5294c38720bffae3c14ca849dd57cb1f860531d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67a861b92c3c79f9b5c80b5ed71ec1cb

    SHA1

    f3a585ee3f160cd403de8fe66b8145bafa7801bb

    SHA256

    c53bb2ad5e6b9d13c93a67656a2df22b6c0897324ced5b488f8f4960ec4c5f43

    SHA512

    dbf6cb21d0e44852067f598aed1dcc0f3738fe31e66de9bff30853fce02eebcb121567a917e129d194657117afcfa14cd5c0472b7789716525938fef8e99a211

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a509b05b5573865bc23083d2cb92680a

    SHA1

    92da8a7f981bd732af29d22c23605c1445587209

    SHA256

    700dbfe7f44338ec5e1458ce3b576c37348b497a4410bf661dce763b2320fa39

    SHA512

    e33f9f9a42c51d07d61044f84d2521ee22a9d1bb01d3d16b77597117fff182e9db4374e8634b0278f32688794e435b1d25723ca2dce7987cbd74ce5ea6e13a21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a6147ffa05a5a05cc925a47bc4d52f7

    SHA1

    a8e590aeba87e348ec39ecef09708d4ab35d665c

    SHA256

    633f5da6abedd14ffd891293d5b374307ec5f7b510b6d031283349a99a21d684

    SHA512

    0386ce14458a284305c8eafcad7bf5ff72ddc0d46bc072f96a8df9d421f497f6f931ea5164a7781767eabce80b8702d187345a2aef91bb4ae2a6eda6379be851

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    909dc7421f52bb2ccb520ab9cb6cdab3

    SHA1

    ea1711b126c5eb0ef8f5b664b0fec4b0782232c7

    SHA256

    f8e2082387a71231b7ea9cae8981d744d9d80bed7e3d010d894100655c170821

    SHA512

    67cce83d3af774a6ede48ade18e10146ad589342a07f964543e9ccd6545d6c12b5b4141f2f41cce98932bd5a01a4cc55a7cd44be3f7b5d137c94880a5432c758

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ce377844c9a0b6b931b7926deaa9c77

    SHA1

    d47e82260c07a92548d9164965e8fa21ce91688b

    SHA256

    be2be35c75b6e782da5611d2fd57a1c4437602239b667c2fe8506cd2d4b6982c

    SHA512

    4e90d21e8c1d55e363e8c3ca8b606c2c6d71a794d0d562d7b9b5f025897ff4d69ae6607b128e9559ff3da604fe58e4b6317c01e75015d318e413820437a91cf4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd35cfbcf1c30d75b8e0c632aa98f053

    SHA1

    89ca8b42171d030fa52e5eced15f9cf15abcc175

    SHA256

    58a2a30c4f20648d646a12bdd50306ef4eed7f989538996a29992e162b452dd0

    SHA512

    2ffc01023480517204c50d4ce97ca565c3631034e0ecade656466b546b13e93821d4e60a4a19f7f3ce739574af4f9337df6f9cd89c1361b1f5c99e8af1d9ac06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5ba67d509d6b75a3bf4b37b7270bbe3

    SHA1

    b46c8ea8916ece651e1d6f12c2087eb80c85522f

    SHA256

    cb30f9744efb32f420d997b815e48b88569ffb7aa021ada8493b3dcd4cb330eb

    SHA512

    e70bf32f36a3a57896d08677bbb1a96b9a9cee1d6d7d34075d68f0ad7e376a335a83ec83e2d7f566f311a04a72cbdfa691f7906a34e8222ac77fcd298a73e570

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6de518f4c214a2ca249e0362eeaaef2e

    SHA1

    0edb04db712caccf7e1ba07e769f7c677fbb86a1

    SHA256

    7f21f23bd5ca94bbe141db56ff35f613a32c361c8feed5999b7c08b926fc30a7

    SHA512

    916e577b6a0da2fcbca807c0ea4b89bcca898c5bdce87270c5a18dfa63c1db1b4dca019d7262188da447c133a89505a6fb60f0b22238ed0fd7df6e5109425769

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de891cc6cbb68c04ac9da41354f32efe

    SHA1

    0ad52be39445dd1052ea4a7269d2b26f1e361331

    SHA256

    2b673b1bbaec20137935872f2271afada5f3989dadbec0d9fa5cc147e02e6987

    SHA512

    73dbc961001e3f271307b3d2d5d85c6f1e4021ff31b8d9440edff76dbab260f909c24cc428f1d400549202903aee2e9738f96ac1c857bd28f1949ef01ca71b7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    48fb03d0f137677bc55c84babdee7217

    SHA1

    b932a92cbe514b47d25b79e531f0d39b9c6ceb47

    SHA256

    fdd09e8f2105dc754cf8dcd00df8b1736ac180d57e6dd89aa11c5f148b665a91

    SHA512

    f8ad5cab4cd2d1da2955dfc1236b0c5ed820803eee42610d7105c1afbdfa797b4df8abdfd2b00a744c129195050673ffb7e616a6c890159a55f9ed206f898a54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80c228deca159aafa57fd77fd5759bb9

    SHA1

    1bdab1bae26165e8bb3fbf370c777bc2a3bf4e21

    SHA256

    c3b7a0466a7b24dcd8a728dca912a67365435ca41998c6176d0b7828536670fc

    SHA512

    212f4581eb710b82886cf41443256dfdf0bc407315064256128568f5e16bde92790e75887cd57aeddc6bb2fabc4035b42bbc2d327459469d28aedc208f6169db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    33853fbe8044542fe9c4aeeb14c1fb37

    SHA1

    87f08672113dce408e2d1029c60d4b9921cbdf6d

    SHA256

    49102b9f757ed811a5ad0a590d7d8c6645fa23f23c0e99673ebff2aff088ef3c

    SHA512

    581d1ea439257dfe17f21800db9a33adb8fbe6719c27c56317eddd3d964b3e43a6bacae39f65f9c2db35c356eecb1156230d2712d28c28683ae3a6fb0cde4260

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e4f4cc14909ee23b3f89ae176097124

    SHA1

    5e09dbbab2a68350faf3c74bc2528aaa16591db9

    SHA256

    bd4b04f3634afd8f1265581699bbad1034378338eddd4b9cc00d57fb66bea7d7

    SHA512

    058ed1a00db8792414c58762a2275e9eba9e040647e006549d101a9527d6586e6563019e0a196719e24d0bb1ca5ddcfd5b69450cfebcb7a56dbddfb258337c0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    447fe615014d44a3c046107f046a3c11

    SHA1

    47aa15e20db149b7fe65f4ed480b1cc99cc11ecc

    SHA256

    1455b484a4179af5d28f5b5a5118ee06b4270b9e0574e4fa1a83c99a0054087f

    SHA512

    422838bd28f933d88b59bb887f6c391d75d8106b1eb3844102102f0ab9b0e2aca4338f3200db212430652becf44ae70680096e7338bca9ddf51885b7a3e2593e

  • C:\Users\Admin\AppData\Local\Temp\Cab18EF.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar19C1.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b