Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 02:09

General

  • Target

    b142aabd0c8dfab34bc2ca317a00bc5a_JaffaCakes118.html

  • Size

    129KB

  • MD5

    b142aabd0c8dfab34bc2ca317a00bc5a

  • SHA1

    b2e79076a354cc33bf1ede13eb7f3f80eeeebbfe

  • SHA256

    bb36680657e9f953117178de4c6e65c73c5c44fde615510f52e34886c3911f0c

  • SHA512

    ce771605871553c3182e952b60dd7cf1667261e6f05f5939eeaade417b8117129877f0d45384f89e162614e750dde96edf5efca1ad967e8af11a504f092b65d2

  • SSDEEP

    1536:SPQAN1h6ZIxLLvoyy4oTsT67N7ZC22++91hvzyLi+rffMxqNisaQx4V5roEIfGJK:SCoTyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b142aabd0c8dfab34bc2ca317a00bc5a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1728
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1728 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2536

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2e25dec91f9f72f4bafa3ec88ae182e

    SHA1

    910dde69348c07bd944b81c92d9170c62d1cd11d

    SHA256

    0d80aed5ee2d102d59d4dd73394494f836e3256b831fb036ee3c3b82391c2c4a

    SHA512

    ea4ff2534c28c0ce1cb93c7e11854b83ab04ed6dde42980ec97542849fde3fe2be62f2dfb755b9137297491d0210c9a4cac74c3c2cd78e05f4213b53e43aa7e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98c5461ee39c4975011d8946e6c89633

    SHA1

    06a073c78cf0f5a25d0c01adcc1b2f5ea7c82c75

    SHA256

    9221eac434cfa2f836761a044858a8a1de7ed5926c071cef9d4284148d44fce7

    SHA512

    f56264c243148b58e88ec9c61c76def8c16e836b543a53f7a8ac71a85dc3321fb027f88ae8b31306ea920c2fc0878bacd98569d8e1634165d19e541f4b962d45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    411b1ce7fb2de29f0ad8aef0d852c8b9

    SHA1

    55b6e2c0122550c0e9ad1d93364d209a13cf6815

    SHA256

    ba228f9beb384c8c8937e65b15240cda0e2f0b78fb3465fc54db0bd84efa64fb

    SHA512

    79af8aa69df33bb4c476bcdda3f8549f999f8d991af4f408f9e1ffafdd686c2b81076b482714061e7f48c7da5578336c076f04912ead3069e358c10641296a8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d6a2092d4ec2f3cbb5fe315dc14f3bd2

    SHA1

    2971897cd4256427394f929090a85906a75c4360

    SHA256

    1717b621476d3d4c7937a5a5079222ea08743eb9d697a4976588999f5731076c

    SHA512

    e598f8d20bdc5c94ccb7a374aa70418a1ecc70732d4d85092466c9e75f6fc16ea1f91f1fea163c9ad23486a6d8da16d481e75c8cff073173d617bf5ed91e1569

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cb4c975fae0b623bd69fc47e58aa0ae4

    SHA1

    fd33af34159a6caa3a927ecf8258a45cff01e99b

    SHA256

    377e07c954745433027cb99dd939ca3a5f7d27e29aa442cbd79e6bdaf84bd52d

    SHA512

    c2a851affc32855860da9accb2fab7d5f9625e9ea1a5045e1d6a04188a6de76b009aaaa48741d60fdc83fe914a3c6fecd58e45612643b1e3e61180ba48f3992f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6734a67e48b905e07595b16772a96097

    SHA1

    b5622531e7e16f1860f52f60d490a9cb480bbeeb

    SHA256

    73fc465223d68cf6a09551482919ea92c92a5d9018b5556fe9f32aa410578066

    SHA512

    2aadfc634f71ecce1d043d676afa598d765d0048e83ffede4b0e1c2e8ac170caa3d028f4e1fe6a848dc057b9510df01ae7f731e53ae7a3d87a992e5d5a1ee76b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    661b80e2b4d0b40f3fe6807adac829fc

    SHA1

    d29ec68431a040a224169fecbae106552df5f70c

    SHA256

    4c7ce24015f98a5d2f18b943054326f1093f6320e17374f89820a3ccaf1e8f3d

    SHA512

    7ab2ca1fa6c744c3f527d7c84850103dcc7f6064e485f0789df0d637e84e8b83806d7b50d95be622a08d91546889f208d23df6a1121fb8fbb6f721883092fb4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7485c79d1332012febbb372218d2727e

    SHA1

    104c121b4ef669cb02b537be074c188a3ac29a7d

    SHA256

    3c89b48c2dce95a43bd552e7886175ebdabdc89dc367b2bd4b2f3525beff20ee

    SHA512

    6482dec37e5e104dfe14803ddcd6f17c3c5b68273a2f7343b7ed068717ff6ee4c585b66b38db5e5c49ed3598d69a9d2fcd768aa532678aeb9697fc46f0ab5653

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    381013f51c063c2fde3836b01558b96d

    SHA1

    8a623db88987d9fb3db2faa5583dba57e58ab4e6

    SHA256

    5724beea0b619481d5c63734bafc10c1461c8bf786204b3c8d1ef69829b0249d

    SHA512

    562b9e64a6787810de802b15db799cbb33a1e4684afe268bbe016a9eda2278ac061a446642fc8bcd46456bb485365700aadcc28a1be6c5bf11ff74a11acecdea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cb8d7e74dc82225ab8991242a790107c

    SHA1

    10f049a963275ab29cc4d5a1d78ed9069fc967d3

    SHA256

    d00e2469068bb18910a2d0ffb3314178be4e3e1100330ccc1af42b4fa0ccdd8e

    SHA512

    5652024cb3edaeb6023b39bb457d38479f635509b29effd26b0acea36a653df5ef71b39d0e99e2ca56b53829ccf5a6340b05d20286bf4409e4a53b1519663fbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    668e3f5f448756d61d470d95426ea305

    SHA1

    fd5c6284568683e6cfae9b1323d0a4f6a5a7e30d

    SHA256

    d301cb735f5e629196dc7cc2239a31ebd07264d3a2fa33ecc20ed0de1f722158

    SHA512

    242d7c6869325f3a9aa45c77509349fa707ab7682ab00f004fe647536dd7b718fecabdff2fa942d7d57b717c69b74ec392ad0e518dd858adc0fe822300cd1482

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ae4582dd77a5a7347e2ca055461e54b

    SHA1

    2e9f93c2ab96b1b74a5ba1bead1c9840229325a4

    SHA256

    c8068268d50dd2332069e8d12b924d46849de852c3cee63260bc0a06e2bc8952

    SHA512

    325fc39350500f9ab195ab5aa98f29f1def0671dac8e207829195a4e74d56a2c42b8ec5d49edf2f48636c9a718ee6fb4f461b0e52c314028452c057eae00b12c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c59e3455c5a2e69db565ed63e2870ef

    SHA1

    cb04764c77ce38dc6aca03f38f7db1ea19e61401

    SHA256

    091bb3f8a818541d3e43fec29f0c235204a6fc7783ad5959ac4e93830ff42728

    SHA512

    625940e419807a433fb5d71137024c862dca872abd1e3ce0b01fe7df55f4c2801629748899003b920d2680fdc007a0cb57e2fec913427a52429c04b17aa69a78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    881501dabadb5cb6df07a8f7523f28f2

    SHA1

    45b6eb8d7ae9b84435de83d3d45cf68967126082

    SHA256

    00c64ea0c40811a1327fc3665e5e6e258ed53d3b6e22f59f8a4ec03ddc8d1b6e

    SHA512

    87735b441ccb00428277e5c64eb524a8c99f061747679a7511aba41cfcab9dd70718995975bcf85ab100e69566180c9fdc18ed76869ed1f06656492f37528526

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4587bfe97f7be642182250d2df5437d7

    SHA1

    bd85d7d94f4438f96cfe9f2043ce949adcbbb00f

    SHA256

    cbda4618801aab983fa639aa6fe5b07a6a8ef32bb495b66b9918d6a898e7cf27

    SHA512

    d4953f9c4019cf5a3460a2c8b62ad35b3c86c9e8da63d84f84dcf6fbbcbba7476a07c91478e4fb78729bdb745885631112a74a4d95c6b58a32e85fc42c88bc16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eed55f47723f776efc57b9574203caae

    SHA1

    3feb3d489e38f0f3bb1c49fd46ebc1d2b33a0e3e

    SHA256

    bf7f2881fe126f9e771b9019d4bb0742d31aac12998a4c121f18d36e320241b3

    SHA512

    de8a6a42c4352e866dcb55be058ee4c1c4dd75a651c6d238addd0fc7abb4917568581bf520ff1ce4e80c96bea8b84c1d9e7c116285806b412119df8990eac32d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a33e664348dfa56d50bcf898d286e001

    SHA1

    4baefcabd387a9f9883e899184a563bfa683706c

    SHA256

    bcce4b87e3cacca706518ce028b4e6d4a7c9a19ea680f1aa6e642623bff7304d

    SHA512

    a9238b9f4a8e8fd39d935cf7bd4ffffce32ea317ab7bf34d9612ac3c7eac89300e3954b4ba7faf61b97cc326d2af28ec3edfcd2fdf8ffbd09e5176dbca41788b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fe91a1e09ce55a182811d34fce80cb69

    SHA1

    20fc7cb66f756306f3086b89d37f082aff07fa76

    SHA256

    d1fbec9e6450843270687df9e278cadaa7e90749b8dc5e2cf1924e503dca0c35

    SHA512

    0010e2a6ce0a95ac60c411b6a32c41385b40c8a277da97d944ebc298934e15d35bc54a16489ce17e1cd8aee1819a24efea61f409a9916abcc1e0facf24c1bbf8

  • C:\Users\Admin\AppData\Local\Temp\Cab3862.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab393E.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar3953.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b