Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    12/06/2024, 15:47

General

  • Target

    a135c6e69e4d4d3fa963f66cec6ec86b_JaffaCakes118.html

  • Size

    114KB

  • MD5

    a135c6e69e4d4d3fa963f66cec6ec86b

  • SHA1

    ed50bf3334c4b0ee719d5091416a091ad8dc437e

  • SHA256

    39d0f05dcfb915e7ef77796612665f60c6e73eac4389b3c39080dc245741ebc3

  • SHA512

    6f7a98025ac853ef55d6392ca44c2e2808d9d0c132b7af3addca4defdc9d5190cab32bc4404c5eafe9b430b0343915201ba5cc89cb18640e461d0189081a7e14

  • SSDEEP

    1536:6vBLyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGC0:6pyfkMY+BES09JXAnyrZalI+YW

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a135c6e69e4d4d3fa963f66cec6ec86b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2536
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2536 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2272

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    176e8dff5cfee24c5f57d0c6d3051134

    SHA1

    2616c4e62c1ab72b1ecf2bdc5ff247466967f383

    SHA256

    b5afaf663aed6068019c3d8e4496acf35b8d12e334fe173bd5d30cc087647353

    SHA512

    be96d2e4a1b7eae1d6a525cd364c5a134ffa978f5266cda91c20937c5be2a58b783443d579bfaf748825ce10ebaabee0747a2162cdfce4b7d487cdaecf4110aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    060de12d9e8484be673948bcace288fb

    SHA1

    269375769c6727dde61dc54f6a8ad66588b63ec7

    SHA256

    001bd40bd89fd35a693af2e0989429e8322ea0c8d29417d882567162dd483bdf

    SHA512

    225002b644c5aa9b6ef1348cba36f55b7a1689e5e537ed793608a2084f50b0bbe17f9be441f3b4a45d386a49d6e498205fa7f06d001ac4344c9b7c52d7e980be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    537dbf1469d2dad4fb22fa7a7fb0c8ca

    SHA1

    f49a5bee97ee288bf3fd6d53423488a1df57b387

    SHA256

    6f67a109b640074379455ec9bb924ec475b5c70557db0bf9e4b300358747e990

    SHA512

    c731758e3658b3b58b9622bd32c54204b32bba1c2578fd1d419ed89430c18245e3c6e036d7bb2e7ad0cdbb798f1c22919536ca9677ed7cb145b684da74333ef5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3545bb4cfc32f3372cc42d74eae4c9ab

    SHA1

    bcf5545c15921364de7b801baf31139368c992f8

    SHA256

    eff1da90c6e36e8ade1fb213b065127c43c0cfb57f81719f4489bec46c5c28d1

    SHA512

    d1c8ca3ba1f00571d426a2fa092b32ac3413cbd8f53de5289b21deb93f41f8e8801f57baf05760395fbbf48a2bc574081ae5947279b5f46ea4fb87fb8c843855

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    25490d4396cac8590836f816364bebab

    SHA1

    16b38fd94ff28d88a52fac6dde0eec0c04bb3f51

    SHA256

    72d8ce7cb68971f58fb6b0a0b7c70dc3b77ac7c75a2b7b531ce025221ecaa8f1

    SHA512

    6c30085cf6de1c25f5ad08ca30d563a31ff896f933806c7d4fe500d97c3b15ae7d76bb675d24106d4cc7e234d760527c1de0ce57cd27b0b4dd695b1afdd77ffc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0c5a83dd9157e46553b5d9acf6b9200a

    SHA1

    5c36e22e448f29d3a8f0f029aa91a95934af56fa

    SHA256

    3209e02cd177a4126786127c75b19ffe77e64d42ede06fedd123e8fb39d17073

    SHA512

    e917a9236aa7aa21111d37b543ba00c671d5dca5b1c172a7a1ca8ba64103abca7612a23c2f40d355d0b05c1a9ff1438bbb0f77a0595f714d4e8d890dfe091ec7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd27afabbf3dc70cd14b7f35feec935c

    SHA1

    3056b29d2c8b2eb668f58305140ba8dda0260b95

    SHA256

    6314a8c7e87aa34e592b589faa4976e0af1e4be147fc13e07fed903c26cf4954

    SHA512

    2cccb047be1b46a44db398ac5ea5947bea640ecc4314e61ca7ae6b1dcad3341a31cd7211eae42bec501f83cceefbee73bf732f8307d71eefe3eba25a8c7fbce3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    29ab71cdabb856630382fe377d327910

    SHA1

    f0b15146d432a81adb8dc2a211a2c6410ca0e7cb

    SHA256

    8d4a5fb32a4b0c120978db27f26a27c37dfee36409be130cb7f4ef6f5e247e0c

    SHA512

    79a4aaba1727f36d01bb354629d851f973d5f534e63cc5b799f44742f116e3ab1c630c4d884d9d5472fc6928f439ed5021cb27847c4c4a6b3f7928ac9fb664a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0942cc20608a1183d19c808801c977a4

    SHA1

    872121a9c620bb0419d8fae415cb346ec0f719da

    SHA256

    e4b67a3e542955a0091f06b354e80f870769b156f7b0c46206ed2b72b842a7d0

    SHA512

    0e746b4983a6d36066bb1dee20ff39eb5a16da739b46d2b7f0e7411a6b5e84b59feabd7679a8a8f3fffdcd9fa64c1849b1fb0490e4d0a2e4258d79e101c3a83c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1487001b6ebff1fb305248ba33ee32e3

    SHA1

    30a1834d395c602c1cbd6c98237509517a0d7dc1

    SHA256

    26851787ea8d5e6effa7e8eb1a149373355f0d0f18c37f8680e911ce7a61af72

    SHA512

    6c2646d444e16f98db0d6611d4fae6b84945fb004982f3b44151a096c076ba28661c0d2bb29900c1de80fdd705ea5d27a64df3601dda1127c99f9a3591aeb84f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bb037a4475c493f1bb78eb61842eb510

    SHA1

    496ca0c16918c77d18efe5092784d1fef2254df5

    SHA256

    8502edab3cc479cb42dac02d832a05d00a178f7be9202edf5ea72d311d8e0ff0

    SHA512

    65c91d58f8d30fa016e9f7f3aede07e8353d05e000d227a51900f6f8452c9aea2f666941db6b4c9e19c96836d993f51b9708a7eada7964129437777890dcbeef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    baf818d54dc86964102f63aa3094f6ac

    SHA1

    227c9361c5c8f2bfab895dee078ea4f12895f551

    SHA256

    f0e5bbec1c05d2a764a384038855591741f7a1a18729d2c5ee98f1a58ab8f661

    SHA512

    54e39825c65b87e1e44d72d088da0557a9489544742c4d0af6eac229f23ccaaa5bbf285532d68923ed4b434dfd686127cca49bd5fe9f44291dd4885de9e49f27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c212962ce3d19fa8e824a5a21f905b83

    SHA1

    6fbb475d57a1f88a5cf136c0acc26b318475584b

    SHA256

    6e8be1050e13e2b09596a91d5cbf287aa533d7beca434a8e1a124cc302dae0d3

    SHA512

    f10536c294e213a6e15888cf9102dae650633ef40b75ee648d37a89fb2411619141a5dbd765e0aa36b2daddf4c84d662cbadddb3b212cf8d06f61f2d95bae30c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b383278212877986fed29638987b1767

    SHA1

    846495b613f6590a213a069af7a27fd154397906

    SHA256

    4b808660a78d0e3750e563a15b13661c8e9a16355ef91698d5a0cbf046f29cec

    SHA512

    f9f9363ccbb84969afff74a0eb0dd8a764b93e635404b48da43fbff56e42575fa685dce0d088a2a7750fbda91579daed8e6b9bdfccbb06d967686a0c56a07f4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    36702539b27ff8c510d6d1f9ab2a38d1

    SHA1

    20462c12dad1b29a0b22aeb853efe320484d404b

    SHA256

    651c2fcf985a0b1d1e8f21b50300dd117bd93c9d7858cca138ad7f45e04e9100

    SHA512

    731fc28a6f31321d03f83d584f71392c47859cb4d368f4d9a08440b4fc6f4ac3106faa06f05507c2750abcb36727a64edfc7eaea4c7b0b12979ce06996082ba9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e42b6a405d063f5732ec44ffa5cadbdc

    SHA1

    809fb1daccd7a731adbc1b020d72c54ba7cc2778

    SHA256

    9dfab89288323843f51b8f5eeb0ee1d0048897ff8e0d80af8b3d25fffd76bec7

    SHA512

    90111386d30e6a9591f71b61fc34b4e047004f5af6607e6e705961caa4898662e5fd084dd20dca0479f7169cb29adf30ba3af70e49e86d658b2a42629a8bced9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4bad1457fb55f7dd2dec97a5067d6646

    SHA1

    bed3b0885084ba05f750c6a974e89f401a6dd09d

    SHA256

    2bae3b7819b9267d6bdb201cdb640a400e354d4e1c78611c5b3936295707f743

    SHA512

    d0c094d7d993148b47bf4db9c56197d8798b7d098da0d8317b3c5a60e4ba5c7e0465216317acc2503cade0e42949150d632f5e51d94b9daf637dac9be2301326

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a51a1f0097bc505c59cbf22d9976331c

    SHA1

    b232257b704170370f41972652d187cdd8b3edcb

    SHA256

    986306e09a225128bbfb77ae976cdb6a1da5f87b79e92b100ae822358a5c0661

    SHA512

    bf0388872acb5f3ee7ed22fc29e1e4752ba12a0bf24184d73bb750a0bc1881bf0f7a743db2ad3e551f01a05662407aeec1f14d625c87f251063236b156c45fa4

  • C:\Users\Admin\AppData\Local\Temp\Cab7FFB.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar8194.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b