Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14/06/2024, 09:22

General

  • Target

    a8f2ced0772b12bc6b7cf751aa81444f_JaffaCakes118.html

  • Size

    31KB

  • MD5

    a8f2ced0772b12bc6b7cf751aa81444f

  • SHA1

    c3f1736e5bcec83e1c207431a3b52af277b27093

  • SHA256

    b09c8423b9b2b84930d51d62b21a8ed3d303eeccf6f769179c674fabb701736d

  • SHA512

    caed89f307c9fa38dd29914cf15b52295c7f139184edcae0efdfa239ad86e80e9a416ea8c5ffed823093255660251a0c3aa88796df58b8cec2350d9d22ea2844

  • SSDEEP

    384:7IH8mbdaC29WgxIG4pJ6NwO+9ATM9H4nCwKmKq2iNqgekPKYzkypekmQy3K:7f4p++y64HpsQy3K

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a8f2ced0772b12bc6b7cf751aa81444f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:552
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:552 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:1680

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49d50a89b9796b8760d0537d06cd2e28

    SHA1

    0e1dd204457c0feee5dd4ae929a6f1cc0509c62f

    SHA256

    3d1aa994f34ce983af8f5d81ccf2e753229087894415de53bcc5a0ba37903993

    SHA512

    468c041ee58cf8a0df2e039d3a3c96e08b01288c0795742aafe19bf81fc702f775c9fe8205dd938fd0c9c8b45a6a52858d27abe591cb5185d224a6363626715d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ea2b5c5444c73b598f71a35cc8ca151

    SHA1

    38e597f31dcab03595b67c746a7100720939e5ad

    SHA256

    13271ccea66528b82f49cea16785ee95b384ee80dcd3aef8b86bdb6901e6223d

    SHA512

    a115a9a94f6ef5552eb6542810fba35e800c2d778aaac3eb6fd46a59347ca3c117d262fc2e5aa0d816d71ddb66675f168fca309c164e239921bd84c9f84f02d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    135f2c09f82e392060a290cd1ec6b99f

    SHA1

    efb47291d157905132d534e51b8bc3e8bbdc90f5

    SHA256

    8269ea16f14848e5fd3862a99b18981c7177b8c089432b7f71a9b07373ee8976

    SHA512

    5197795640be6910d9e2fdd3ea3b665dd70f6b9cfa5e72ad1a26699aff6b6e1fd968e2048707ff8fc2e5b53f6a3937e25697a27d9a9c2e2e5658969f4285476e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    961f15c6a50f56ac648f3a2f2dbb04d1

    SHA1

    059832d5f54073a4e2c0dc98be6c9ada761d33bb

    SHA256

    ac274ba2e1a2387ef38d0145fa7f3573553b935b9508cad5d87cddc5ad218997

    SHA512

    fdc5ef4f528dba59f8d6a6f759169d0049dc877a3bb2618d78957f014d891fb7bde9e6e3ccdeb7f38344bbf0cfeb3a8f47f5a3cfe8070b5995cb3fe101251fa1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a56d537574ed592591553a051cfdba7

    SHA1

    d4f907281536415ce2ec37cb4a466c15473cdafe

    SHA256

    a0ecb888f7b40d4ab4d8b3a111e13184c50f77746fc3055d3eb86f37079637af

    SHA512

    a222550c64d15865f4a80bbcb890bbb7d1396879b5887ab0528b7874cba4cc5c544dc5243c4e8954b8e8eada2736a5816c66421e52f09a19a73021166ef08f86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e3f764a8009d7c3d9e1fee8a47d42a02

    SHA1

    262d6311178363c5d7d2d831fe5aed04522a385e

    SHA256

    6c958a70300d5f85bb1c488e0949d379af91c6db83d2cd37261f12de0cd2e25d

    SHA512

    d92aa2d2bf8001ee5fb215c07b04f6547dac693776bd7c468c48a14e5964f1ae1baa98101a9b400c88f74d9685b528ab09dfa0ac4489b2354f83d142149740a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2268d8e4605fd7677b26e72d8f8728a1

    SHA1

    9d063f05aefbd52a8098174e0d5f89a1c2de75b1

    SHA256

    8b0fc51b3a1f03eab794fec1662600c00d0e210fcccad79926802a3b826e435c

    SHA512

    bf23a0d7efe69f141366cf9cecbd59d011f52bc4c7b1161c45642a5a7cb91a302eb0ec1712cb57c81d59a21839d9dc9be28063d4ad41d4ea807f72832cd209be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7bd70b773517c6d1cc14008cb300e8de

    SHA1

    b80f119a013488f47f00deb34d3cd63a65bacc3b

    SHA256

    40f6d6de50dff2b6cf969a29e93d92ab065492008ccaea498c4336cf706b20fe

    SHA512

    020c3f638ec9eddc770b5274145c574a8f56011467510c0ac5dc7a87d2f99891a153504b8e67317c625c477b39198ba03571554742faa4cca3a99e61b78515b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b84fd6ed429676c31367047e62f7881d

    SHA1

    5bfd2d25607c2b17c8d68521e7122b21b9cc2051

    SHA256

    081d6416d3205c69c4a88f84818a71cfecdcd762194956617569ed1ef6b0220c

    SHA512

    55574d4f8477c2909a43cd1928a111f89fb1d1fd162a65337ae2ba3a88f628594e76d52dcb6d5d5e94db83d4be2e1bce9985c3386853f8d28381c507aa6cad1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11a4c7272137762e7ae6229d6633c669

    SHA1

    b37e4e6c90d4b9455ad245e95090ecc2c669aa56

    SHA256

    a9349399ee6e35350c297664c8b081fdae9eaa700e9c29ffb22ce6f05839be7e

    SHA512

    6edf750d4b77c8fdef891563fbabe57053c915c3926704b31fb74c37d24c2e3bb2ed54ea0fac5aa8f582a03eb195c0f2ed541a3207f3c90b224ef4e30f35397a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7487923f5fa439fc6cda82d053ee96c3

    SHA1

    8c98cf93e922e3f3e43701ac0bb83261bb71fdf3

    SHA256

    e5ddeeea5e0f0155338486f0b67d309aabbf50dca8c7e2ece1176d9e5487efe9

    SHA512

    9fcfdc9bf810a1f874ee3bfc8c4373a9fbf8028292bbc40a9d972983bc14fad32ea2d328e660169f88f1b1fbc71460e4fc09cae83b52eb1609b3765451248b37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    593d9412112cb65639a06e3969a47120

    SHA1

    0ff67106970a93b716f4b9eb325b8053b5afddbd

    SHA256

    d45a2caedc7b7894ae686b7e406ae8e97d7389b07b8b3f2db37f94dc9dfc1c09

    SHA512

    05c01236105a3b5116024e39d489e7deca83fd9e4074f28888d2445534ff6f80e9ba9f9f753e789ac6b7a26678f9343ac83fe1dcffdeeee3408b3e87305fa41e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac8d4aa6e80efcb608fdabba46ca5cdf

    SHA1

    717b7bdafb65b7b8a674452fb48309d28af89929

    SHA256

    6c4b69a501021e4189d899568849e0dfcc742fa5039856f55b685663b4f9ddba

    SHA512

    46ec3d63706291a84fce10c3b9d388ed549c050661104f03969ea82419795a93032f1cbe35e52b2e7de927c42386578a31292f63ca1aa014e9483fa24b2c5369

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d1b90aedef146d012faba63c31f8df0

    SHA1

    cb7e39c21bc8d4fbcb1f98fcd9a4515c498835f9

    SHA256

    6dcf5c18eef9977eafa7ce02451ebb7dc29538da8cacc6deb7d6c5e1ec0fca68

    SHA512

    060625535876dba3bd70271c88da52056f50e740791a6392ad6b1e5afcfda9741511355690c34d4040f61eaa93109fccbb1c61c673204ada14c6a9db50923de9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    afa4971fedbd9902a12f89ca050d732a

    SHA1

    5e054689c95b1a671883f5284e6fd380f4a84ec1

    SHA256

    20968a11ccd871eca185fb107cfdffd7dcc6168f570c0a30c88fa63ece2fd226

    SHA512

    5a43ad75ea3a1fcebe458c7d435eca4b0f291ba29e8f34c9b299a51221dde12d852a1682a2f8d704941b651b1da1fd3a3511e5ee650131ecf7a52e1645013987

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3fecf5a95a9fa673fff1ee59ed9f2be5

    SHA1

    b72e0d73932ed2dd77722dad83ab7dc0c0df15ba

    SHA256

    eaeee974d86a1aa96004b8181352046cdf2669de4bd25a876e1bbe93a306dcd3

    SHA512

    f90e05774d939c22d9dc12b9bde8d63178d52712b474b6f9cda1f5d042c1bf5890799d849ad9447b86a5f0265332774e2d75b78b47fefa9953a9d5eca28fb62e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ccf8fb37b847e73e92a8c7160755cde

    SHA1

    45d11dfcd7b4c44a42e66290d9600a124752c2ab

    SHA256

    37920038d49b61b9794db5013312099bf7c3fcef5e4ccefd6db84317811e3368

    SHA512

    05b05a1b66ae2687cbc6d189fc86601575827818e2983bb28a3adfd3dad2a450b23fec12d24729a3c7bccac607bae5534020fea0521d078ac3b0d46807512ce2

  • C:\Users\Admin\AppData\Local\Temp\CabD5B8.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarD69B.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b