Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 03:14

General

  • Target

    b17f5671c81c90e0e50e5c989afe066e_JaffaCakes118.html

  • Size

    221KB

  • MD5

    b17f5671c81c90e0e50e5c989afe066e

  • SHA1

    25950466ee6415876722730b1dd216335661cad1

  • SHA256

    6daf003832e9e810c573b7ee7cfe8694520a33ad7d7a42310284a8151dd6fa1f

  • SHA512

    69d7d21ada6804fe3b1fe7ce162bbf3259adcdcaff3e86d19d1ccd24e8daa266d03b67dfb9824c985d1a1d10a9e693b292dad8deaffee46d242eeed73b653991

  • SSDEEP

    1536:/Te9D/k5vNyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTs:6qyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b17f5671c81c90e0e50e5c989afe066e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2228
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2228 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2124

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    12eb05a34b4f62219a585224b697c36c

    SHA1

    5ff0af6382a0f1f5c3f0783c5643409b68fe25fd

    SHA256

    002a77260c2e65698b73ff0cbcdd4cb027da4c19eaec7ff8fb9d959101805ecf

    SHA512

    14c3a123cbfcf407ab318b643ff7d96b84f2a75898eb361c2619043735109c7b658bf81bcace66f4c5603e75d486cc47008a78e12d096be9ec38c2d3ee0bd50d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49eab7ac969617660bd18dcc3ed06aa5

    SHA1

    694a8d77b7b8715e1d7a9a79aa2fac28e5461b6b

    SHA256

    051d8bb9aec22e6f60d5ea93e1b4dbc1bac69b5d2c487c35abaf75006de374fd

    SHA512

    6db763ddbea54ee11bae473e59935acc5538003e9e824571a547a1bb442cb20bc8a7bc3578ab66b8b80cf0874beda3806a15c1406cbc9cb2d7e831ba2de90683

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af03216a150968b4bb56e542816514e7

    SHA1

    f68202674b3bea194c7eeb979d868589ff92907f

    SHA256

    486021202f7aa2dc03d43c03a2c8911a0fc06dae51e9d0a1c8916842ac496288

    SHA512

    0e843d7c8865b67be2f0d22638f5162da307ac95c60c3fc62c7ab3b6cb4cee57cefbee965f2772148cc7c95c2bf9dfda484e44f93db3c22e79dc1ca8c9bd86cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9d8e3ed1c2143a3256a4d75b53f2470f

    SHA1

    63d895fce804b76ed18386ede462dd48192e248e

    SHA256

    9e3d8ac4156f274fdda91e9e5d4f1394c2d0334251c32d7f4c55702ca9dcb581

    SHA512

    60d8967588e16aac4e543a601926789fd0209b17573eb491cfdc2540474f2b64ef3724e1c6f832dfa613d0b059785ffae39a8d41b765f68ed09efee5cc9dc125

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cdf064a41298cc958dc0f368edcd9a90

    SHA1

    d8c1eb7cd70c5f00185e1630d61c773aedb0d3ae

    SHA256

    ba2975b4e8a81de87af7ae8b0c5739980ba16bdf3c07929ebc272edfc5b02d47

    SHA512

    56babee8bba7f7c6f6f8865e48e6bd02825a668c6b470445200bee2a8c8bb6f650ece60a369016be55bb5490f3e855225a5ed94fb61c13208cb17d4388d6a689

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ef3a01fbff60558d01d65b74be0e74a

    SHA1

    1c5b1b2f11e9dc9125383e7f929fd71126d3aaf4

    SHA256

    247bb7e47ccdb9668d040e83b93c28e9e7b2d7240d335462e9d789950fa5f184

    SHA512

    69fe481e81f919102dfd53a3fb30406504706ff95618e45647d91e55b9f34fb53fb1cb573ceaa00000a1c3c90126baefd6e773828dbc8839b0fefa587476a9cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5566b5de464b24af978953c6e8484811

    SHA1

    c02084610757d5aa9fb58bd6396781e75201bdd0

    SHA256

    9afb7c97ee5a699d938617af14c391f15c44b9ea371ebf630fddd0b0a476a078

    SHA512

    8085121ee164b1e2749e1a199e8d90c869339d753681312b7b201955a786827ffb21fac8dce5f2b319922f7a041059af4102a00fac30389d90e255b1e50942e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f96bbd16cf240db8584027ac685a7ca4

    SHA1

    c2e1305ae6c9425a5e85303e2b9b20c906638fe9

    SHA256

    6f44e2d648b5d6edf02e7c718f75ce9ed342e92e84eadbfdf56d3504f832d0be

    SHA512

    599bbf9ab2ff48f3e8848276e75919a4941c515b8b280e55634d9e9f5d43c276d3f50b1c3d05f9bca9e6f1b99295ff69cb4fd93be309ae37802aa2a96cdb243e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28347dd42f09000a9a80978fb2ef785c

    SHA1

    06a3f3bc7352c10dd76e69838eb71baa3ef5c1a1

    SHA256

    59185f71c1034c93e5c1f448c0e4f781819aef014f19f2509031f47b84e11464

    SHA512

    b7fc310e95a9b43c95e48e4be230a4eb7dd1cd71dfaf7e78e87d1a3034ba551ba34f81af3c0a703241354faaf32c2caf9580eb01f27f80519160bfbba2fbc071

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    087b549e8048f44785cb86cf8429dca0

    SHA1

    e3acbcabe7769058390ca879ff04836de34aa600

    SHA256

    9a4fca6a4f9e54f55da33be09dd3eb787be4fed65a8f5102af603a622f6c6c0c

    SHA512

    d1b2f75ad73c3be733675860f22d2561de31ed8c6f512678facb2df8fad14d9ca4e75eb113c30e0b65e3a6ecd3abbe67dd29ffb2817224226de1303db1c002fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5778a39163f9d31b3966d8f0c39beb82

    SHA1

    f8412314714e79fa62a95f54e3eddc8a66c7c541

    SHA256

    a0092e3db42d01cda423c95d35331b3122093e29c5a7660abc774df0a8b1bdbd

    SHA512

    3c2b8ece29f45f2d72d305ecdcd8f60ca86723bab6b9da5b591a01b06ac46db5b5bb32656169e3a91f6adb64b5f2722bc4b054dfa1ab5e41444214ad9af8b094

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    53642f12b8a699bb0e3fe241e6a6a017

    SHA1

    404e2e5a09a771a8994bf6613d9db96b04c0a48f

    SHA256

    e9180d6044e8b7c3affcb18dcfe1783b12419e2766feb7bcadf0f1e22713c6c7

    SHA512

    53cbfebeee46d32593e38b467ffe5d7da18d3973b78788fddf67066521304cb52d9b112915e900b16558d1abec7c56bf24c4e83004cd10016e0bb0f5d199396f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89b346fcc7841682b8cb3b4a01ea985a

    SHA1

    75cf02ad20b108b7bb5c6c3d2337f3a3f63c40bd

    SHA256

    687302024052c8d90fef7b8767305074fccd846bb54a120b60ecb229751e1d4e

    SHA512

    780d63ae04339f774a499171c78d0fe5f994fd8534cfe2f6eef78bd22804b3a41426e279144fb6ed20aed5ec5e2bf1d01494ffac3e26bf02a41550f5f6b0f4b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db32df20e1e9f1e1645e596a180d293b

    SHA1

    9afe6f252b50606c9cc4781c3afe870625501731

    SHA256

    d62e4c35b559681c0e725a8010331a7daa3410a04ae149885e17bf36c2e6b28b

    SHA512

    b98fe0ad21dcd697df2649cb8fd4e45cc80d14c79d0f29c30f11d50c35d2e55677caa863a7c3e288c6682ceef7a574395f3b90d18787a4113954e463c29a76b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7a2c7b7efc48d3f0488d2fd65bffcc7

    SHA1

    6748d82541568d63c7e939a6c0df20cf32547f9f

    SHA256

    daab8265ff9ba545bab1cd9c4e1a9fac15bc0d3548d0d644db2e7cc5976b1fe6

    SHA512

    d557976438222c6fadc862445e17dfa6e48f79b698c7f1594d54ae839540f2b367ce9a42883b59e59ebb9ae0ccaf3ac0cd4d0a25e5e615d59ec53dc97909ea88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dad500c9e8a0bd919abe96f31383662a

    SHA1

    42e74323d16f5e47eba5531d3ead01c2a309ac0a

    SHA256

    2c26471035af7ed3db71bded2ec71b466cd463c5a8d410a67ee31d2ca5e0f338

    SHA512

    872a07b6ca305dce40014881078e3ba2cd92a0c07f4f8db7764a404144fe9d920fc95f31188fea17fe3010a34160be408a1f6723784608322fe12143392cdf2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c1da390632650944545994b50532078

    SHA1

    9cc5225eebeb2277e9e7567daaab6b8cbfefd9a9

    SHA256

    b9c733e735c7c371607af8fd1c6cd04548cad7f2c8d2f305821e0a76c15f528f

    SHA512

    a5b1887ff6df2f60d3245685ddd1d3e80507cf54e88b8c8f2c872c86780aed0e9d1646cd92bdc157b42fd397d537f68989476afd2e524d0bf7d5389cf34f0376

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d44531b72e128644b92a8f6991852617

    SHA1

    4d6684713145c831bb4ea6c4a67ad66a198012d4

    SHA256

    1fdc93b4c4d98ac9daa90cefdf51fbdddbf4128ece841b92a055de60879934b8

    SHA512

    5af75ca2609c0ebf9b141639825ac236b032c270108b487ed03c270722dd1c92def833d465c18f97835da803962c04a122c065adb9acf54113edad3db4535a9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f6a107232b7745a4fd81ee64df478377

    SHA1

    c83cc5fda1e8fb0f0236bd921e6f426736a6ee72

    SHA256

    9ec56aea50124658444cdc0fe15c7816b0d6ef5cb014057bb824dfb48d3dcad6

    SHA512

    fab1ca42960d702130164a6ac4cb842ea38a986cdf19e846697b9a99e2082d578d5b617b67d5f9a51f79f6081318f1c36cce2192328891132c80396dfe3b9b20

  • C:\Users\Admin\AppData\Local\Temp\Cab8F37.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar8FF6.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b