Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    09/07/2024, 18:03

General

  • Target

    31693e42a4635bcf1d1f4fdf13407f67_JaffaCakes118.html

  • Size

    70KB

  • MD5

    31693e42a4635bcf1d1f4fdf13407f67

  • SHA1

    5b64f5ce1d1d9747037a474c4bd6cb2ab3398b44

  • SHA256

    1afbd28c0ec93a4b86234c6032b6b01af9e70a98787af555b31bf3f11fc10162

  • SHA512

    c9c5af2a6760d96ec664e4a3d345dc58e2c089d8296e028e714b1bb1c5d18a682cc968c0b5d1a00dd35d798493e78c3918ff3a7ff32c6462346c87bb95f6031e

  • SSDEEP

    1536:gQZBCCOdU0IxCex0qYf0dzCNu/4dzQHNVpQ+DvUo1ofAvrKyz5cJp2KHFB+sat3S:gk2e0IxeqYfmzCNu/4dzQHNVpQ+D8o1u

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\31693e42a4635bcf1d1f4fdf13407f67_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1936
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1936 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1892

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b9309c605674a8f66161a58413d454b2

    SHA1

    ae1d050cdf1677487ffbb1dbbab6dc02af59602b

    SHA256

    4209046a6843be649b0904775e5c9c0cdfd5904f9c601cfa6734e52955a9c867

    SHA512

    4459169d417444270f57eeac9b5657bcf71077abfc4ef517bfdfa2ffb7ec0c1767134091d72b3d348ee0b2a034f4a9b88ba94a7947a85d29ddef0bb637f90ead

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a9a0b94f8d72e7e34cb51f0a4df302e

    SHA1

    7333b5be9f4ec2003e80cff4f20ab37091ad5b9d

    SHA256

    9836a2cd0d3c2f6c83d94a693993ad039f9d767d8bfaaccf100f89e57fac5abd

    SHA512

    c6756d311a82119a71cb1d3582b46eedd06f498a8f44790ad92647e2545cf7af420e7b8cbcc048cd19a8b9c2d53e0ffed22808bc2939ac97a7a60c8e177521aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    194d8af3c3d1d1fcd4f8b5a98da0419e

    SHA1

    7816ef28529dcfc63b50f26ff43de236981453c2

    SHA256

    383ca78b0b20af960aed60da867a1a489c362d5ac7515d6f8b3f2a76ee2d0bfe

    SHA512

    d6c9097c3ba0696c454d5b86118586fb9091ceef82da0cc54a6cba0520b46b2a262f88bc7d80e08a7f88f31cb347326a3ca7836ef6d3ee189edfd0a99e18e7f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8272aae93d78789a4d7501395e03847f

    SHA1

    d5553fe2c06516d19c8de34bf12ce9f7271d21d1

    SHA256

    350be5ba8a1a753abd167c2ae26bbfd16bf79f905cba724db426682ce4aeb22e

    SHA512

    b88b5f7fc81f6c21d0129d8ee4e92a70b5180bfc936bfa7e7c4bc0c08c5331df13cc987418829803458b8fe75014393622dda31e2911f6350c999076a80b1012

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6277e8f2110722416a38608ca8056372

    SHA1

    452dd5e4cc64202b23fdad360a0ac23959941e80

    SHA256

    6b83d8a99102478fb71cb79d421c82420cde34d00ed6606cbdd1b010aa77862a

    SHA512

    9d63d5d68984c36edf6ad049164e9e5ad4bb03f1cd67051e72801b44b1af954803eb6a896e8e4e1d346d2e52bbf1b232d402fd8582b0e9f4a02ad5585a27a8e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7e4d46a6c3762f542b1387c1b144e93

    SHA1

    37058436ac8a8cfb8f800b53e5f019c6806bcd02

    SHA256

    e73d43e505f70387dc7e5e92ce79f84b0f3f87236d7f80a379a7d16b9b86f52d

    SHA512

    592c34c07452720cde3edb33529fb98f66b674cb1d8129cefeb3f76602f01814d40495132e956d97b88598930485905b4bdcb71b7af9f98575748884c506052a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df14c4b924842921d525fc4edca82012

    SHA1

    112cb40879fe6c0b7bb1f0048d7d98852347c1de

    SHA256

    c12efc720f73233f6d2b1e6053133c86da4ece65d53d74ee255ad213ca05df5e

    SHA512

    0fbfe3c9cf076b03bb3dd216fa7ad16a70111d34c16923a82b9f8957b32344b68fa5e716df15618b0ce64e62566e558efa1daa265b7c28fbeab9d87aa2e5a5f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78b763b1e191d5d8586dd1e768ca207c

    SHA1

    ba6e6d6823622067436a966417e76cc9b63d8b75

    SHA256

    b3f9331ccb3da3b5008b36c925a2e85801373c20c7baa4494827134156590907

    SHA512

    97c5d9a8507db831cf366b5fe773b2f64b617149f14be730909b01c2047f37170a7393f22a6bf9b21050eee34beec28e8fd70315041025419ddefffe309ad830

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    04af981aab1a053d5c545c92500f1a12

    SHA1

    bb1f28a4ff24319fb5573232ebedbf48e4a361d4

    SHA256

    cd1fd4a49d549e465c95c67783ce6f1499c94c3b5e40920fc2403708d29d7ae8

    SHA512

    d01f5d05bb9fd5ecafa944b1c9e4db859f12c528ee27c23a6b759568b59d71c733affff908c400a056b72bbcf80d330e3ca12acc0bc757dd2bac0fa7c552e914

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d914fada4f99450cb6c86062ead89ea4

    SHA1

    e2bf9c28e132c880d8ba322e816603a6910b18de

    SHA256

    64d24a9760616313d53806c34250b4439370a98bfb1f419a2c1bf9e0053a4ed8

    SHA512

    26e385e11df34aa47ea0c1c641bcfd1ec51ed977f386a2dc94c46980cd2054529cc407681de9a0ea338c1682af79612f3a29f20ab8aaa9df1fcf2b5a90d375a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e5fa3b4434fc852c8875904e0b1f5c8

    SHA1

    2b7df66d3f597d631954c23855e20ae51d0034b5

    SHA256

    1e4af6e5973948a4ff3ff7129dc0bf8ef9c055c992922c4b5247e958a13587a1

    SHA512

    618231919fad8f77da751db2c573060fca233c99cd66fe8bce54de8785ef20023e94c219bb46191718da1b2cf1624e2225c15339cd67364e5af9789042bb1443

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b500caf958fceeb9a29a1d7d3f937fea

    SHA1

    b84a32d1f1a0ba23ab392d688ef99dc53935a50d

    SHA256

    2b1c3067e209a7df2ddad1d7c182301828dd21e3d758175565b6babd7e9a60d3

    SHA512

    22fbba242f64953e6fc8387f3b20aef9d7ece975da0a2bc8bffb6368804263fd761446b9732058c29c745dec9b7162d893a68ad11a7edbd17b5b7e7bcaf2ea3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9be6ccd16ff78aa6484ca089d74d7691

    SHA1

    ae6f738802574bd17c3971295780404de2ce8b69

    SHA256

    7c1808f13e7db431a700f79013371d208ba16d08e6a738232a9aac6b4026c2d3

    SHA512

    41bfb03c4e57492732de74900ff5ac633133e9d21d17b1311fb5c5e053b322cfbe25d9cccb8f599a2c259e1c4c66b2e731b160c36ec890f854ece889dde661bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    432f60d34321cd3242b527c74a3423ea

    SHA1

    9e0097698ec018e97326fdcebcc63622a7c7d9ab

    SHA256

    684627dba8cc0e19ce25552dff32b7f4ebe20e8295d70b4bd67d34af76d7f1a8

    SHA512

    d8472d7c3c8772d3f5451cd7f226d7689e7dc4ba419e0db756cb4e8aa7bb21e099dd47cd1a45788583246154c9fae41293cda5e5abddb061d1ba107b9f9f1421

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    132477fc5c410d2e661f5376fdc3e79f

    SHA1

    9d8d762b219f5641e27481af3a85815e5abfe506

    SHA256

    343fa913bf2dc8dbb55c6727a37e98c7f678b9866b2c9dc8af4a13a4792b1a0c

    SHA512

    7ff9fade17ddb6548386844330ebc7737dc4f02b35a917744a92be3cac1b9492e166e2e1cca5606454c73d92b611cc25aa6d8cab026475c2ecee075c8eafbcf3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4524299ea66670573ff9c5ec6d69c66

    SHA1

    40cb72715d3902b3a02ab4406a1e165c609c92c7

    SHA256

    3167954fdb8c6e2f91c9069549222113e8eb4316ae31d27d4744a7db85221a8c

    SHA512

    326845c31f3f753fad2a7fdcf7a1cd7690c3cabb1a2bd781c028680f765451e0cb9ca20bd203f6d1c2f09ae5b4f27f740c42267544cc0979888db75d075a200a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1689a852d5dada84b51302a025faf48a

    SHA1

    2e6a18fe728e837ab01ce69c20596077b29e961a

    SHA256

    debe1c5ab6ec7384f2d1ac27b3cb021c1a060a2af958aa1cfeec8c38370a4a7f

    SHA512

    de2ca66d51ab80c91789fd530cf47e0fef3034946f86555ae97402169044f17e5781975ba03325b0e9f286ac8df531f0020251f3cb4907b5206ca43285300034

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45d6695c7613f3db0989ba24629742cd

    SHA1

    2862e81b8ac47e5e23cfe49fc2cf9a154082a086

    SHA256

    fcb7338ae3af9b8d2dcad6855de7fc7ad8b23be10ac3cd7b9435d4f176b3d399

    SHA512

    fc43da8554c23bcc03480c64c72d9d2f7761ca70260e22244867266d6c2b52bda6d96c884c89459bf1a48cd452a640325d1521503c170203c207c55c967b13c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d7e663dc5e1e6579da72b36083af5f77

    SHA1

    6c71d71acb1cfef6a05862d11bec369a4efa0f0d

    SHA256

    f708300a93101c21a6bf125c7efd4badfa0fcca69466c32fd0c3cc986bd9038c

    SHA512

    5e223ebdf46d03e8656f914e053ba585d89961768ae53ef308643dda53e42635062a2cbdb862ab8a2ab088b5a45093602881a934a5ca1f6de30ae3b4a26a9227

  • C:\Users\Admin\AppData\Local\Temp\CabBD76.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarBD88.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b