Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 00:32

General

  • Target

    b0ea9bd3eedc8604d6994b7b686d9d27_JaffaCakes118.html

  • Size

    461KB

  • MD5

    b0ea9bd3eedc8604d6994b7b686d9d27

  • SHA1

    72fa4c30b787672c61036b8a6ed2d09750e8ffac

  • SHA256

    1f84268a8fe2d87e2a06adf249d2c62eb36164e987be7960281839f2b6850050

  • SHA512

    52ea26ddf62d9063f770bbde4048100d0b0928c9a5360f115021f60d5db9cbedc532b4f2ae4e73b952131857d3ab28798733b821f3a10d72772868e573c26ce3

  • SSDEEP

    6144:SdsMYod+X3oI+YvsMYod+X3oI+YwsMYod+X3oI+YLsMYod+X3oI+YQ:o5d+X3t5d+X3M5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b0ea9bd3eedc8604d6994b7b686d9d27_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3036
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3036 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2988

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7548b0c85cdc8336590cfce692f2252b

    SHA1

    8b029d33273a9951d7626c600fd9be0aae2a9619

    SHA256

    7689c09ee9d47d2805013be386d0b3195fa0bab57aa8578cc43dfef0c9f18305

    SHA512

    9330ba9d363cab5bae08fafd6433ecab4a93d5d1109a612017b8caaefba7b5139537018a80b74701ab93af364fe0d54a82124d6c60532a291fb4f44aaa887f69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2dcc614e08cb91b2577c54f320482b7

    SHA1

    485827a1a9dd4b13dcdbdd909f6e9a4b00cdc0b2

    SHA256

    05ffcab688bae5f0b3c017ff1ef5564e6e6736b60ca3b6adb5712bb13a4f04b7

    SHA512

    118354e2885e1b0f24822656fa43bd05fc3b886b7b2fb9ad2fbeb8b697428dc1d7000cc604c3fa21d29dec552348ba2b74f3abbfae4e9f148e344cc8e15f2847

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ba226a6976575b2afd31b5b21017116

    SHA1

    44c7f0cd69a50a19a1e82911c680840ddde8dd40

    SHA256

    aa4fad1564e5b5f3b875fd74bf2d687280abea7db4c037b202934edc765b9a24

    SHA512

    0bee9c7166157db22ff295ace3dfdb50f9988ad88adc67fcccd6fcdd686124dd29e5564e63f6ca5c7d3fbd089a0121069f72e12b75dcb4660580b3fb26ab6283

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e587817b8d8b29a859e6f7e6b0c9e94

    SHA1

    1b4599b7c94d639385a7c5133337746883c7291b

    SHA256

    c02d314262b236fc52fef15afccecc3248336087ca14d06cafd6375d715405fc

    SHA512

    3f462b76dfb0d8bc72242eaa838fceff671b82437541b59e996f03639f6033e1f30318bf0c0567d33ce19843b16cbc4f894435e0df20fc2219b2fe3ed3c0d16d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    838789b1d86bd71b67893644812ba5ca

    SHA1

    9e9d6837d301e70c1eed007b69e4a9d167fd33e0

    SHA256

    63240ca53e1d594283ecf6de5f1e3778456fecd2bde30c217b91f686684ae465

    SHA512

    02b3cdfa6b83a5ea5ea7f583bfeb79a0497d1a9544c8cff4e3afd2c32ce837e84da420d0fe075d3997d7bf671fd33e312d8213dd92c62ffd91bc10869d11fab5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    049bd07f0c3c1d2e56d7797694f5ba9d

    SHA1

    d0ecc80d05e338fc2728a5d39946c0b8de7aa1e7

    SHA256

    4eb8bde4313c87dfdf82c9e1f573e73f9e29b6e7019c0c5e50846cf0c181ce36

    SHA512

    f1641a29bbe7b1ad7af41bb76904d9c49c1cbd86d5f32f5d6885f8503011ea1404aeeef837624185ba7dc80991c82600e0aa81c90b96b693c8d92353019f8132

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    446848e9bef8c26f86ae9d335309fc07

    SHA1

    b59fc37fc87d64def068db4a15213af665f6a331

    SHA256

    cc50a789e8f79ebdeec22af6f6e2e8a9cdde8d764fe866677393019c6bcbc1b4

    SHA512

    dea0641f73e4ca57edd817c69d19d21bd131c5b7111c5d058f4af918d271d00b7846e857846347a89a392acf91c120d64708f65ef678c087f7ac148bf2399f63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f46286a9a739073797a140af2cb2edaf

    SHA1

    494bb2554c706dd91e8b875754e97cba411b5f05

    SHA256

    8ac244efa79bf9587d8a1082a199878bca9615f7743e0a442742dddab89c8ae9

    SHA512

    4a16933dbb0fc615ac1c6e7671bf8c429e17565d5531049e10be0099e8613eb4761e5641e3739c293424d1bd4e744f075e7fe88ae1166129115bc70c98fbdac0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28d2b44eaa018e7257cdcc9db816806d

    SHA1

    5c8d5fa2ff5e46ffb7fa582fd46575240a1e212e

    SHA256

    2fea7f8200e3bad44bce93726db059f8bbb7e30ae43a1e94caefaffe9a1a30f9

    SHA512

    16f3f8411f40d3624692ab7f2e925531ebdf925c3071037a349151203ee5173877218522be1058994069af382e777be7086db4fac82a0f4bbf43bdf2722ca072

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b622632cbd3339c1b575c049035db20

    SHA1

    bef24986b189006e2b6c8d0af8fa6b2df8bf9d4e

    SHA256

    f2514357e3003a1c6b915d7f1cb10902dc4ece2a2e457cde616fcdac606c7129

    SHA512

    5a1e03d3ee555437724256fe1a73e0426cda89e109c2faafb411c8838ba2b79216c56768fa25a41258cfd4571e9a1636670bbd1da88a932acdc9c239c5d74138

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    53b7ff6874de1a1560bc8c9cd23e7ebb

    SHA1

    db1a0bacd65e9681f0f9092fba106777524375bf

    SHA256

    d0cf9f6c258d20574e6edbc16781efacee675e9e45159825b6bee213fdcde9f1

    SHA512

    9a128648931f79ad555bbc3ada68ce1402a1780799ca54215702b907ad12be135157cf5bf53d56e60d5717afabca4ec09b812c4dcb6a77216044c52435b1e70f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    891445eaffea1d043d4a0409ff2e1c09

    SHA1

    8e8cd653adacf89a25dbded13bc33fe0b6f5fc9e

    SHA256

    0631485a3115c0bacdc03961804f7cf99fe6e320ecf4ea9c124002ddca2e3c37

    SHA512

    d24d55876dec3d5cd200b7be1b1f3b2406558a6d0f72fa8c54b304641a934a9a788f82d7569474d5b44706b58d761dce89fa4b1ee5b1992da0058284016ebb86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37409c67e39be4ef8dffc4410d66233e

    SHA1

    3ea174f64965acdaa5f76831e92182b577379c41

    SHA256

    494d78ddd652ceb28ade6c8d633c7599dec17e0df1c06a9babfa4588a43d2aa4

    SHA512

    0ccb7552a879682961858f43fb494e83ab48258e4e71abfb28ff74578268a1af86665207f7a67c5e588b65e38a28161f53c8f51cc5190c138b525babae60b102

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e1b4ecbeca95218676f0b9f3899f14a

    SHA1

    786e5ad385be14cd947b70315abee672e5e5bfe7

    SHA256

    5295d0e3866c80dba195c2111722efc86bc02fc24eb9de37aef0b671fa28078f

    SHA512

    1dbc9b794561972e132207e63e62754d5d39734c16a6801d9d733e46d99b32a5fdaee4def69ff13f6dbaf3a1eb550dd7bd06df5488a67bc1d5eecc278aa71871

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f47a67a10be0318184e879924e022a9

    SHA1

    51dc1c7cc66cc2744e2dbdb6b9a24336d0ce5911

    SHA256

    a634f160086e370479642ce841de8d6882ec63940e5c93a652f57d2efe5a3fd5

    SHA512

    6abcc4f915dbdb59fba9e6ab2760b74dae05fc2f884bd11fa536c8f26cf0ffd9a412735096f747b7ae4cb14516a3a8dec97b2232dc4672bde875b59b60374232

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e67ef70b9e978246c3517bacd8fe41e

    SHA1

    fcaf45d75b8fe2ddc91d84f23454e8d999d66aa6

    SHA256

    5665ea16ec60a16083807da9f176c73be3060006a2678e453a56795b3980b7d5

    SHA512

    60787bf3eb343bd697ce702d9d53ff0fc1661fbd9141201b1e19d3353ef934c9ba6d0238837ade4f7cc3623352f3b64aef143a2d132b0b0d6b4f39bbba570dd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c7f3b60281deef4d3a2d39c81c13e9e

    SHA1

    5cb855af4ae0d559c7c0725ad7de9fbdbc805247

    SHA256

    116cb16a37e802f9e7abb372e2efb452ac9cd4697d46b385f170b4d78bc62258

    SHA512

    84286a4110e2adb1f3fcf61154b85afa416f754d5647b558667a96bdd6213b5156859c27dae3a0644ce398acede8c7741549799c32c36335afd2863a90cdd2a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8dcdb849bda3f71fd45819c3afe4655b

    SHA1

    298a4ea6783e972c61bdf760636c2e35b28daa2a

    SHA256

    9e3776fd3cb5b6901516f21e5942a0453da6a16e29c4c338c32a34382283dd6e

    SHA512

    66e8c444bc43c46eba51867ad8f053aa26dab476c20d56ef6f045296415ca3d6eb939c281c8ad5d9dbaa4f09b5981fc9d8f8f0b1cf87f28ace328e15483a71e8

  • C:\Users\Admin\AppData\Local\Temp\Cab5072.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar5165.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b