Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    146s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    24/06/2024, 12:17

General

  • Target

    0873a80dbef0b3837e1c431586497950_JaffaCakes118.html

  • Size

    10KB

  • MD5

    0873a80dbef0b3837e1c431586497950

  • SHA1

    044238e4ae24cc19b67883491cf7db5444625fa4

  • SHA256

    c3d4166582931afd65b9643b66b270f8f34a5f6a8ac3d6b169a0a64be1c89f39

  • SHA512

    cfe28ce99bb9a5f6ee3509a5251f5457172bbb86398e91f7ffc7e9af69ce0895585aa965c641260432d28e41dde9e697aba4582deea1b826b1e0be09aa285e7f

  • SSDEEP

    192:OXGcQc200/Ke0LftZt9XgLqu6ytxeZbfVHC5iOlatThesi:ncQcG/KZTtZt9XgL0ytxeziQOatTAsi

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0873a80dbef0b3837e1c431586497950_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1844
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1844 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:1692

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a9bc836c38390f0482fe63b6d85e69fc

    SHA1

    dae2a64f6f99023f83968be2055cea9d651b2e73

    SHA256

    92d7921648a6ea1bd83faf2f82f194e233a945cea7e557933d0c65648bc425f5

    SHA512

    c375a53368f1398eb28db8c4c628aba282b9db180a975339ceaa2884ecb5bbdd8f336c8d7ec5cecb40782d9e873f3dfdcaa25ed285b4e3eb3472ede73f90f3ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d48e6a3e539120e2b0e3917090ac3af

    SHA1

    c0667a096651ebff9f63b03094bf3245225a2bef

    SHA256

    8897b146cade98baa974ba59067850be3bedd68cc7f5e4f90c7bf3ccca73d7c8

    SHA512

    a184e6b2d80e1edc9efe7e5e7f6453a8e8cc8012649ff3db860d4adc4a5366b0db0e97f74d4cdec6a61689407034866e16b7c2410656d34070ec19cb444ad43a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b53963c7bd89bc8b31eeeda511f7bd4f

    SHA1

    12b706520371324322ef808643196c2b42840e26

    SHA256

    5d03d125718fa3f98396819deeb6ec791a7017770f2d1c19b0017c845bb46c30

    SHA512

    f94762b41aab39dd09086278a0b2052737391e0e2119724a4d29c812a2c1a20a8d6bf070338cf15fb0f04dfa38718379015ff2b70863f383ad186a7023176f79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    070ba208676c52de1b95549e8b73fbbd

    SHA1

    223ef734db90268111a48391598d50cc99edf801

    SHA256

    fdd2d99c8b490eb70f31d79bda70e2b80768b7589b6150246b3132105b75429e

    SHA512

    5fd0f49e9c12088f151acd55310b7f10841abc8f5face422b88ba6f9626508dd58421307f7b9a9367599124a334baa7bb8760481b7e358a542ce26001d678c43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22cf93a6f65a3a1801996f6b08c95fc5

    SHA1

    86d9abed7f2b98bd686bfc429ce3aec3af20c9d1

    SHA256

    e3aff843d91f85b84b023ab506084cfa35ad1440f4c8ff27d9e7f52e5dfd9b7b

    SHA512

    a6043630778789d4655f5f95a53926bfd18ff23c0238f3d2720c0a7d3e7d2ce875079c7a1e16ff105fb957944db7d6af683f00c45badf3f36db447d71274eb6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f0937d4e72c5c4097fcd995178a793fe

    SHA1

    c4b89d43ab6f0677b321f854b39916c338d34279

    SHA256

    6db48edb77d0af2f39a647d22240fad2a9020cb9642f96f6d7e3b7892c732e49

    SHA512

    1ca90ae1c05c1df01d89e6cee4329d33009db819d7eb90cf0f9ae3ec137ca85e05d89176b6a88128fe46333c7be538e763f47878b81244380115b963b8ae1c83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    31e6776d77fffdda288bd88538fd844c

    SHA1

    88dff1e07f942554172d3951514122ae78fcd78e

    SHA256

    6e31f4fec8aa4b00f5467d39373e2fe790a4503300fb4a092fc25a47bcdc6c8b

    SHA512

    ecf7d35749e66f5e3ac0b6deee01f636466c51cfd83d81b60bc200456d051cf608030d547a4dc67a4e98c891329edc664504610f3a17eda2c5f3e056a6265b49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c688433609d766228419f64c3dae798

    SHA1

    504436d4c5c436d3d5c93d20629e22d75c3c6265

    SHA256

    8292ad790d55bff3cf77b38e37ffecbc6013fe9a0d5834277b318e3a00888913

    SHA512

    20bf3d72c7494f734fffd1c620bd922a584f3728e9db08a16162153513534c62d7fe1a3255aa080f990e9a2971f74afdda28bce3359011622e796883c7ba3c5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    faa047690e4f9697032ded7065fba2c1

    SHA1

    0135da7b3958fc1fe03a7d5b4d40759ab651ce9f

    SHA256

    504e0dbe077e0ede0b11dec66ee2515afcd22cc95886182bdf74a58eaec57beb

    SHA512

    f5c02136dd56195f610bdd9cab07db1d4655dc1bd577aa5888ed04cf1b8615e13174939634bb99b1b0d8c29b0680c300ad9cb10e62550120d3415e9864809a0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a8f685850e6e4961dd08838ad68f6680

    SHA1

    13a204f6bb4d3457bea5cd840ee333febe586827

    SHA256

    ff79c1ac9ea6e045219fe7a7e5240e8447708d1b3018f5e42fff805ed182b870

    SHA512

    8a302174f7e2351ea94da41f69ba86de8d4762e0de8f5d38486b6ce8abaee25a46e6909b9eb7abdbe63b29f75fcb45e0902a56947928c2797da0526285df05de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89e3ea7f54cd1bdfbbb4578dd7177517

    SHA1

    661418a750b9d864c88c3948e20e151da2b2a4fc

    SHA256

    4ce06385e7160fded8348ff3245e4ff3651e233e0066494803202cd96f3d9790

    SHA512

    2bb4cd6daf104d3e7abcf45f17bf2625b88e773e102ec74aa53ba97e2e4f68fb0645d4023689c34e46bf78f000cdbe5e32ba95cc763bfc0dd68973c5223a97e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af0583de0132b2b5b4b19a03e677a891

    SHA1

    ce51959600599733461f628c5aab1d54ef4fcb4a

    SHA256

    0eb4b8abf46507318de96d97a366481811321170a9e23b8a5a9dfe6b7248dab3

    SHA512

    522ee911f4c4bb27bf41f16620af791ba2e40bd0a0158147627d896400df77b55bc14c6e7dab57f39048f350e642f7111b8b0195cee8acbd7038158a6f5b67a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc49910c58cfa73b8c13e21e5a78fdb2

    SHA1

    b5e25c95fec3af0aebed5396a9e4af1d6cc07e53

    SHA256

    7b1b13851e5f3fd1c59cf81b646727131c910f29dd2acf2fabcd7540c1a39f63

    SHA512

    ff27623d9124b035aeac83cb596222f92d380d613fd9ef0aca5dae847901d2c6f96b3be72d5fe1a26df1bf47c3a1e91c4d641efd02580f099a159b9412563333

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    680dd462e33cf6c3ed1e378d1de977c3

    SHA1

    10525d7c8f830fc97f060b50e92d5e048d1fd82f

    SHA256

    6b928ee219a51e50d80578b718bb87c0514abb657f7f39eed37deaeba217f4c6

    SHA512

    449019e8af62168147d5f4cbcee0792c46c207bd603b7cb026647e449918d9de8d619aafb64f0b6241b1b78ca2b6e36bd5563fcc2e9427b26fbc4124e21bdc7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    acf8635a8404785d977a40f13d04c4e9

    SHA1

    0ad41f1546149ac67ca11c6897212d7a7b091e28

    SHA256

    c6873b9f608b57e23985600038061e6a235748583f2f6704f95e0ad98f57aeb3

    SHA512

    23cff55208049520b64125f45d4d2454892d86389a4d2e5658ba442419a69b26e232b2130f60adc8bececda0de5202e544c6b4017d5115c4191996af7cc70cec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2597dea96e350bccbfecb004a4ad3ed

    SHA1

    fb2b4cfbcfd3e643b992645959c746fe03b69752

    SHA256

    73271c60f1c734db3e8a941e4097e6dc4eff7900d77851266dc5b027d6399436

    SHA512

    5d87dc92fdd2fb21cf6278bd8657323ada3df5e09164b6d36e0ac859cfb1c81eb5a8edd7d512515d3114542bb29154676f05946e59287ee1cc7f7c5239c3b4e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d599efabe4fecba6dc3414ec0f73a0e

    SHA1

    e98df06fdd790d59fe90a6f9f8ccdd7df4690df1

    SHA256

    e01e6529b3c8e7242fcac95886e56711bbc453fe39f0c8c10b8cf669e2269c2c

    SHA512

    cd8206fa7f8d1e34c2c13de666c8d9e8764187724fc6351d0144bc270d3444eb2aadcc18c4703e06622347984794ccd66ffe3944145993bd4c8574821a875251

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a7a0a73f5e15a9f4aa75f432bbbdab0

    SHA1

    f7f2917a1582b9316b31b2af1267ce2071c06939

    SHA256

    200d23ccab469a6fe979225c4599fc20f1957cf244d1afab122cadbcf7b7f895

    SHA512

    6a58670a9a96e69aa8bde76c0e2ec9ecf7d5951092c6f67d59c1958c7b3208756198f6a84897e48d7e42aeb8747a9cc3e0a5d245f651ca39cce87fe019322d31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d87b833053ff91ba9cf064bd6135d5ea

    SHA1

    05f5d61e3cc482d749964ecae54fbfe2dbb6f06b

    SHA256

    83c9633cd492dfe7250db673282c55b644fb653a69d5d0626d2404cfa0ec91c7

    SHA512

    dbc5796d60adc5331466be67ddfc5029333df2469a1a17c706680b1fbafa38a5f16e82afd72ad8b2c727227c384e6b0bfd43aa22a09975a66391b84025e138ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f57aca0e950b133a23228bdaaf9cbdf8

    SHA1

    e3385f304fbad02fe9721d1e25ed803fa02af9a2

    SHA256

    908b8e9538e2c541a91aa82ebfe2b3c2e649b44fc7ef777ba125d26deffa2752

    SHA512

    e531114da18ed13a32da380d2fc9c98e359280a6017ca2186d6e4378df4ce4cac89f609e1133f1345b2e421df0ea5c7591f4e460298027b9aa0b3191fc735e7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e2ff154bf6cbfdf971a2ffebb87cc1c

    SHA1

    c4cccc468920181ad30dfb6266750f8022cdf2e5

    SHA256

    6cba635d15d94dd3123264458a4083ff0a8596a871951940deca939bf387da35

    SHA512

    f8d7d9f0841ef8bf6579051591d57b18e214c658994c212fab82181b6ca717d995b1eadcaa3c1966de296d6522ee7f18ce83bc09e1f2d39cef264b06dfa7c433

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PJARS8CM\px[1].js

    Filesize

    346B

    MD5

    f84f931c0dd37448e03f0dabf4e4ca9f

    SHA1

    9c2c50edcf576453ccc07bf65668bd23c76e8663

    SHA256

    5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584

    SHA512

    afc3089d932fb030e932bf6414ac05681771051dd51d164f09635ca09cbd8525a52879524b6aa24e972e7766ddf529484cc1ec416de8b61255435a89ba781f8c

  • C:\Users\Admin\AppData\Local\Temp\Cab3FB2.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar3FB3.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b