Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    03/07/2024, 12:06

General

  • Target

    2257dd02a7cb0975fda64a4623fcb69b_JaffaCakes118.html

  • Size

    27KB

  • MD5

    2257dd02a7cb0975fda64a4623fcb69b

  • SHA1

    b569d844f7f4b942d8b58325e2118ea9ed7c7803

  • SHA256

    610907073bde38d279ce13d7919fc02869a06913e4b6dbce2f322fd8095c0128

  • SHA512

    d963aa6510b192769263a5e28fdfbb6bc13cc40a58b9b0131f7c6d00316a87e27e88ded840def3799d8db472ceab13e13d5d955ffdb7456872c809374ece7bb1

  • SSDEEP

    192:uw/Eb5nDOnQjxn5Q/KnQiepNnjnQOkEntOsnQTbnRnQ9edJm60H3hQl7MBJqnYnY:mQ/vED43IST85

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2257dd02a7cb0975fda64a4623fcb69b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1904
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1904 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2868

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1c829f3dae8496394da45bef099ff1e

    SHA1

    2450a2fb67f94a8d84d65b3d0fe094d129feac21

    SHA256

    e53e3a12f395f95ababe6c6b482534fbed10b73af1b2e0b2559e43c206fb8d1d

    SHA512

    3bae3b8927c24f25831106a5ab7a712ad9bbf5c5e2f17ec3085c8820b39662ee6510e35d00cdf17df0f5b24163d862035829484057cc01348e4b7b038c6e2eec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fe0a64f5ee8de2656ee3ed4ecb8d1850

    SHA1

    e68ab230243242a79ac675b8769d5c46e477535b

    SHA256

    c03fca351fbbf5d4113050e68598076397dcbc29b7adebfd65fc8a50217dac35

    SHA512

    779b83c4f8b790f53075c3e8634644aa115cb58a83ff8f61bd3ed8564ff3fc83655148c5d9482a8b88626199ef66b066aa0cc63946e73f4860ba641944796d35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e451eab09365df02453ce3f5c4bd65f

    SHA1

    c1f49d2b28abb43a2bd3c536003a031278ede4e2

    SHA256

    8fb72657636e8350dd2d9a4e6d1a4cf4586f0959f07843f7dbb1bd2b05d81a19

    SHA512

    36939914360c119319cd2f5f7b7bfb3e4b6dfff31daa7e3ebffc24d989a588dcc03e931943bb7d0adf97407c20f8369c5046431c2386613e94019de4e332cf7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    549965f406243d06c888045364a96867

    SHA1

    5f35d57ced202282e8b14a198b4bb34d3d364b3e

    SHA256

    8f0847147ac96c77d87dda7f67d1462acd01320485580e4eeea4e202142d3d31

    SHA512

    bb817898fd9bc7537ba2e01a1b301d266f284901cb562a76375d575b718af62d2bfdea0d4845109d7c38762ddba6edf175e91322d0f2a63a9c36cabbadb4af93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6033a716dac1c82373ca2517a21c3813

    SHA1

    77426f2b2d9710a6ab14e0404945934abe106161

    SHA256

    619f0ab26550b7d6b70decc0102991c97954ad08d5169e4f710a45a278b95821

    SHA512

    f035184e8cb28c4bacf2b20c4fecde510b430ef456381e97e48f64f639f76efb4cbdc7d7950c2c3049e23cee50613b7824a342787d6cd86ab165c813ab78f7a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7deb8bffa3a9c0d9e0311c73b04f0996

    SHA1

    a7dc4536419d64a82a72c1cc30804b74545c7f16

    SHA256

    4c8d79f2472519a21fb3948eedb3c84172a0d6659d614344d9e1a74b4a9338ef

    SHA512

    9d2a19223bd7216ad8d7347d6a198c7a96fabaf966fbca7f69aea8c11b79915d6d699cfd599f82038260f227f7116b438861a785469ae5326c8583f0e9a3ab94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    23ac0f6e897bdc7cf7092a03fbecaeb1

    SHA1

    b773563f4a8e06ef26857e110fb8532338e66986

    SHA256

    771aeca9d21d103396dc2aa2da9989e402ad21a3ebfb5075de51df2b33875e78

    SHA512

    3a55c25e5d1b3a6a96892273b27872e58a06144af723b7cdecc36efe4d54162082084424af04f5dc974f0eef6db8ae13e0ec54bc0a69bb77c9af140cad18b36d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0c6506aa1e238a5176e64808e64b9f8

    SHA1

    606b233fcbaa543589d7f1eaab4260660d2e6ff6

    SHA256

    667da78571d44a412f5ac7f0001316198add18e286c573ca2f23c22660ce44b8

    SHA512

    56139b7621b6d642e19c4540ba39d329bce6f7febb0cb98773ffda2077a46f7bb495a94e6534246fd17163bdee927727581c9f9683d38caf6665bcadd6fda812

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a3a64d8b74135c84b444a27e344793b0

    SHA1

    84b65ed724209af53b0483ef597345cc92e0f7c3

    SHA256

    7633332d388b471e314fb9bc818c23902ca690357b51f781d2104d14c8caab9c

    SHA512

    6580e7fc97968443e55e606835654d225af978bf57eafe43b9af823cbfd3fd73b8661652212edba492dc2c1e44d4815fac231c234abc9078dc964df509e7c4d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    951e4f171b3448960a9fa0bd80e96dc2

    SHA1

    82915a31a813fef28cf19b5e724c9d3bc509d4c1

    SHA256

    9b228a09428d5a4f1f44f6c2aa021814bd2f3aa2c2f85e31ee06dae642f19a21

    SHA512

    0fea8fa42ffa0a3215c16e6e738270d29ce7d5d53d27668ac301d9e167b5c352043aaabda08fb700a48614e7f95fd0a9557686b1cca365b44d2a853c7daee69e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6017c23556329f0e9a17fe56a38c5c48

    SHA1

    7c57ed4b0cfcff8e9e21bac0040f41e26d36c761

    SHA256

    45ebcefbe7941722fd66bbf0d40aef1513244f73aa84ea7c3937347bb3662d8e

    SHA512

    e63da1e172f36c1d0c7749e2e2127339cea3314210121003c708ae7998f2613447ba2681507d11a2b5c24499d37d4806d61c5b9c8c3cb9d6a33f79eb4c3cd60f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a9d48ad3290cd448cdb3c196bc1eeb4

    SHA1

    68358152b08b8f2c759999c7e893909beb4a8889

    SHA256

    5f9d3ca3657f4c8a0fa0ec1f8229978ea4a59b34285ead39eedeabc4a39adc24

    SHA512

    651a76730b9de1bf3e17d5278e1b58013cedc6b3555af406daf61ad90e524f2cac4e3fb24bfdaa1f4ad38cf74fadf0b6da4ca708ae2bcc13f8c76ca9afe73c9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c07ada3a2f03e9032d807c49c7d3ea6d

    SHA1

    c1d0f0108e9dd53d51c7ae8a0b3d934151435fb5

    SHA256

    f4fdd3dd57076e475ede63204ff79322b2e748c69f7d7ac84588f52f3b605cac

    SHA512

    7de249bcfeb8e9c06b53f4849417cb30130acacb7e723b1a5180b339976bbb8231612c9ca85181019d04532d1f3ccf5ce95b1e0fa1746b746156783ea8b4f829

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    699a3511d757b6acd7a6551ad3bece6e

    SHA1

    27f0fc325a139fa20ab55635ae8fd0498b476227

    SHA256

    e8de54715574c8e6b506ca7cf19e5ddef9dcc2ba3b7e85e5e4efc06f91b5fd7a

    SHA512

    b32aa7375fdc3abd7bfb94f3263ce88f866af62e086a3a0dffad71ac072513e0581c2fa992b0aef782dd0430cdbffec7940d2494aa94a3932963f7601f5a183f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c508a5b5cd3d035757f62cf300dcaaf3

    SHA1

    3ceb4e7685159159334bf9c5f6c31f2b2f0bc204

    SHA256

    4c75441a36bb263fe9b76ce5c4473f86d128db538248c7185ef3f834563ebf06

    SHA512

    a18701b7b3ae29cb933d16bdae3b880fc45d1d4c2ba1c4ef9d423f720ac9b712cbf067e812f200bb88df95c534a424967e4cea533ffab5748aecf5517fda8660

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    56f4081786bc7f46dbc4be4a3a60cd30

    SHA1

    d1178fa02b91d83356d99a39e27da2e61893318c

    SHA256

    664f0dda09faeacff1ee7448bd3d6e9fda1cea741654844858eb4a9d512eefda

    SHA512

    bee2d17b88887e28d034a672565a9950949a6bc74f86979b972b27dde434a79e038c6d7f27115571172cf1544fa76e85c0046bfba7216ceda3ede8f89605ba4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1439edfe84adb6f6f7f027fac19ac011

    SHA1

    179d3f0fd368635adeba5dcc78e1e77af67d91f3

    SHA256

    fc5bc04a393f3bacc7ac512837b04d9826cf929d262c450d848790bb2d1ba0f6

    SHA512

    d05e78358415da8200680440127693a25883ac0e0da9b529148379478d78f6ed376043b80b6e307990358fdbf81f0c7651cfcc0fa12a086217e8815ad6929d16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a49470bfc0fe17cb8138b7a01f58d4a3

    SHA1

    15dc127ccb9d2a047d9ffabd80cfec2a95fb3104

    SHA256

    48769a23d4e7d4f1d438ff820a0e2ea400bf387b17c41cfb9851c6432a6a3ab0

    SHA512

    34662fc6a560257d00367539a4ed19041deb1af9095d8fda4612d0554edace970322863d214a43e384134f5c04a7b47a24f160c7e7366a3d819082076349e07d

  • C:\Users\Admin\AppData\Local\Temp\Cab236B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar243D.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b