Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    08/07/2024, 07:36

General

  • Target

    2b7f1eda8ad59758dbff6e9db675e54c_JaffaCakes118.html

  • Size

    9KB

  • MD5

    2b7f1eda8ad59758dbff6e9db675e54c

  • SHA1

    5affab4f2e4fb4b3a4dac77fa35fe857c6a00318

  • SHA256

    ca022d56d5d766a6ed4cb627e9447cdd1a2eefd5569c5990d4fc5a6a0ee2cf33

  • SHA512

    1a79f11ac96aca4982bb240166b6c41a5fb491276ad9bfab628b3c9ec4672c723b6ad8ab018e907e0b384b8c33e96b8331a514fd9f931d18f54dcf424cc9c325

  • SSDEEP

    192:qmJed+pVA+4ImQFtBUrVT3R3JqIlp90tn6cVNf1vwf+tQ43C:b0d+c+4ImwUBThdlAtnZ7f13tQAC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2b7f1eda8ad59758dbff6e9db675e54c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1252
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1252 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2016

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1682f74e8fdf1aa7f6d902ec6c578ede

    SHA1

    2f89cb919eb02c42b3e5455a14170f809482dae1

    SHA256

    50cbdbbf19b801c8124076ac8f552dc5e38433f0e00098a9fecb77215fc30235

    SHA512

    280f1969a2bd8a483cf87b455ee33871fcbe536230ae3284d90aeb36b48fa329456f3d5153a2f5ba8dd0558ac1f75fc3c5d816d4f1f4e6688e1aebe9c4de94a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc5f9654760f0d96db58f8d080141e8c

    SHA1

    34ec2bb17128fdd5e9d3faf062c38b47107d3f46

    SHA256

    53a23638923f0f6bff52503a7dff63ac86e6114ea8e0f901c97fe2d24576925a

    SHA512

    cacb35abf2ae0fce90b70f68fd64c41cb16e99fad594caeeb0f5bdafb73d1c3474b627f2675559c40cd0ff7fa4b758591a72f281d046932418b89aebc5877c46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    147e79913adf5ee9d6475c7c58b43306

    SHA1

    dbedc5cab3843ef0c64f9d7b3f6ef924c9573002

    SHA256

    1bde9cea0ecd6fffd425f7ed725f47b588f111794eeaac553b1ad1032b6a2aad

    SHA512

    d2402c0c72ba2e1e86bf33e8dc411a1ae381793acf2ed546663e2375a36011eb39fcd1dc5f6c88c8f12ce8e03b128c8fcb7eca1197086b53d38aab457b555dce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae0af46c58bb182b61ffa315a57381da

    SHA1

    fe7c6ded00a6855fa15ebe083cec9b43d4e56c64

    SHA256

    edb59269c532bb3ab5f43111126329546bf5a7c9f861649faca92702638d7c4a

    SHA512

    b275cb3186b93a5d916ffba1126dd40b49f4d78e9191ff0b40f4925053d98b4efa3d03c9f6997864004551c38954ec4593ea31bdcbff2da1f96593c27e4281f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8296584f9fecf214e3ec4723d5afa93a

    SHA1

    b75491351c4f0ecf036ecc8c6ecdce6c87d5ee65

    SHA256

    2a588d32b5da8742a24a8a14f74965da0d947b3184b2c0b7b6658c3333af2dcd

    SHA512

    02af635b783805fd756f5d614e495310e7ff611d64b6b70616abc9e400bbdb2efb324e8abceb7c38350d2768a1345ce6622840c33319c10a293730a5d104d785

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26d790caac8aadc64fb78f8f3f0ae469

    SHA1

    6c056293242992253bc5338630536a392c144fb4

    SHA256

    c665ca7dd4d2db06e0facdecdbe2d0e75b444177221b828331973abf47fc7bf4

    SHA512

    7036a6d5abf03cae285170c85716e6bb4ac01dd5ddaf9f527dd8f5d707094631bf70433f2c501f543a5e0617231f0475880f146fc5e2e10a14aa8963ccadc06b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    448fdc8e78799292e37265ac22d7285d

    SHA1

    95c274b28829a65fb3645e2d3924f11c30ebcb99

    SHA256

    04b34fb79e17af18503b3ebbf25b80edf7ca4043f07d3cf2fe158be8e8a84483

    SHA512

    4c55101570c9343dd3d93b98b99ae47563a32cf3be91ce9c4dbffdf23d44ef52da85b58c64f122436d1a513b8f453fd3601e965f5b1f1677682d29515a72aab4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    83ccf3d910d867f4a29f30c157ed87ae

    SHA1

    040cb967dcd8b614268ac34d198f5bb5ca3fc5dd

    SHA256

    dba2508b4293bf3722a852d0c94e1a3f260ea705f2faa05290206241e62cd745

    SHA512

    d9e15d34791a6e3184b8e945efea7dbf739e3bcf02303d1b2aea0ea2f8f431518f6d8115b927e664af9071e9f9ddebb3618754ef6da0fd6b8a1f13bffde013a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5e7f027303dd4317290dc42ae2cc6c4

    SHA1

    e1d8d8f4aa05b0e2f19813b5de50f278a6c59ac0

    SHA256

    2745699f4af8ad7fae738fe0421f5790ddbc32571a24e748671ab76d81e095e3

    SHA512

    240a0bce15e887809e591013adacffe2bdee8d181e1ec99782a4475798f42f983b2de0275a99c18509222c1c6e441137b690036d4d5fb84e837d94525acceaa7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d9c068ef5a2a80b3a6e1097500febfb7

    SHA1

    765cae6820a373c44232902381a1f0899e862efa

    SHA256

    4792740e426e3b55dcea0b422b76fd2d8b2982da7b706eaa11245403c4592d39

    SHA512

    27f06cde22d0907e1f028261238c645992128f8e6a36999c3cebff84da3c445088b53f2c747733e90cb8fbe5ec7032b9e24c0d8c47534984ad15fc5a56c55750

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11baa498175eb962eab33f56ba308312

    SHA1

    938c77b79c483d54f2ef9829fd9101ba2e5e83b3

    SHA256

    dad90368b7dcb9f82f80c4b8afd15fee485efd00c8d42ea6753aa78aa84e81c2

    SHA512

    554311be876deae830efca46d787ef2e199f24839c761a3b910e2280364aecae677fee651e5d1d7c62a8d68a23958273a61b4d57df3a14d67eace606a9c1f02b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9102928d4684c4df9f32fa5b06b49f0d

    SHA1

    bf9d2358ad3d7d944b42f1a5986c4ee0c89b09c0

    SHA256

    f91af604df8800e3da551e4e2cfeb29ea50f30d79d6d55051d1346c404b24011

    SHA512

    275fba826b6d89d8b9d269f58fcd557f4d073abce6a97dfa003d0d309e86c2dadcf3e580f3cbfdedbae49d463816a1812914ff9b0a08a1c487b6e3a1f83b2973

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5585fd67dd6d9efb4ad36fd21bb1a95

    SHA1

    e49ed93f848844c87857886808e5fe551c615d93

    SHA256

    0d3a4e753b39364f41c45197f02f04add7278977f3e80a7b39a96f5329ca839d

    SHA512

    8a37cd2558940d2e233b37068e9493c4d8cf9d46be500ca77cc6cfac1fb2f93d0253108cb9ca1834d528d381ccab60be74ae031f82ddb02ce62090a519c1c448

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e5932597636f0fa33814800c645ae74

    SHA1

    4dadeae98375dddc8962df5fd8e3ccd803df3914

    SHA256

    4d2d94786a95a4668fd37e0c0742d2c61b6fb9ee108be8324479ae840b12f84f

    SHA512

    2964272eed6641b3ef5e3848cdd13d29b24e5ba778429759f2514b89bc221c4baf3620e1cd87d5f8128558f3340c00809b7ce762e45d48f3efc8980acc4012cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    246c8ea3cd3c607d81d5a54d8bd0674b

    SHA1

    09864f9eb5546121f05da96e6c010c113f04cd6d

    SHA256

    c63b26be126bae541254227b47c9dc935dc6d98bc1b66447c3476524687e5ee9

    SHA512

    f2e151803c18c942c6ed888a46374e419c3de17dbe574198ea3086ec077441618d6d8f6cb00edf8e439d73a2a6f6ca001af5c54a73f1a218ffc8f51d5c80eb2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b086cb0ae1c2a404187bf0db2422204

    SHA1

    1fbbfb64dbcace5aa5ade8a06d0295fe806cf158

    SHA256

    6feb09614187dcbcf1b94863575d8a79c665c298383da004f1c445d32eff0f5c

    SHA512

    fc628ef9f9c7e19f0c78dddde2f26804a8e29319f8a63b6654d312de340e3eee683591cb1b566c0e14f41717b3a34808bf5ccb6800c935dcfd37c93259b1c793

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b266482cebc15937b42a0bcc493a29c4

    SHA1

    5cf7899286bd785994ab20361418b6a6bf186662

    SHA256

    f55b65d79e2d5d17578c82853642f106200410319bb77e2eee98a1c3332a2a9b

    SHA512

    b914cd35141dd173f9d4d71f624c65b1683a4d60c5e5f34314d3e4fa79544b675100fab9b4834d11ea32a76f2b97e65a57b153516eef9aa42060ea985dc74cd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22f3f57f14db30ba7a56ae22d73ee134

    SHA1

    d9f849976bdbd4c43977cf03e8b84cfb31643e3d

    SHA256

    8c39af1b0d12d60e8a074326a83fc39754f422e4b73dd1afd47c2c078b15a2f4

    SHA512

    0be353033e465b88905215099029de59d951d64f536e119ae0d0364cc5657e3d357007b293f76538128f2f355cb200bf4ae72825c8e8f4d694a40fe31891893e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f37c5c1bb2202dbe0306d5891a85c0d

    SHA1

    f3f6cf828f2f6071d5889131e28791322b2c2962

    SHA256

    220cb60b66e90676099bdcd771e021762befa23396e665c8781d50c25cb86199

    SHA512

    e3101d4b3c9d660c3261f6519600166c4594d5920d73af63d206ced532d2c007aea4cf7ec0ce6312d6358e98fd8664baa15539705fbdfa0668367d0879edb8e8

  • C:\Users\Admin\AppData\Local\Temp\CabC610.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarC6BF.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b