Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    13/07/2024, 10:13

General

  • Target

    4140da7dfa8dbf0beb3feee4d5577f4a_JaffaCakes118.html

  • Size

    53KB

  • MD5

    4140da7dfa8dbf0beb3feee4d5577f4a

  • SHA1

    afa769897a26799b070bddc499c22f63ab8ce093

  • SHA256

    c05e956c7052377ab9f0ded4150eaf8a7586eb0e98e0d22478e068357df953e1

  • SHA512

    b09296bc4761dfc6814170363cc34690ad6b82529b2feb9e6023cb345c5e9610fbef64fb5ea9b995c27fa9ad2bc4ce42f0beb55502af41b2bb77423c5d66fad6

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUvrunlYw63Nj+q5VyvR0w2AzTICbbco5/t9M/dNwIUTDmDL:CkgUiIakTqGivi+PyUvrunlYw63Nj+qz

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4140da7dfa8dbf0beb3feee4d5577f4a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2412
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2412 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:264

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    edebb385800f2d87b22f9c48a2c42cd4

    SHA1

    38c35d5169cf5c035e326053ed29ac061a111be8

    SHA256

    3560dacbd95b0222cda0d722157af2242344e47f7665e602956d66ee65d925fc

    SHA512

    60f781dd8bcd4ae1b88b3c69fb966b9f46f7b10d7d6a1f36bf41a692ef9e839b8186bda8a9937ff42f300c75b07be0d42761484dd250b759972da8a9c9d6d938

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ef346d46d76b115a908083c01527e0d

    SHA1

    e218e73bd948c11894984e572580bf42c47f47f1

    SHA256

    c68f5efa163d23ced3ac768d8135dac8f6b8729b207ff66920e16a3d377e92d6

    SHA512

    e23d05af7895725ad56f2bb7cdffa8851dbc484c789c46411609c66c36d6e5cde75217df19032aa01ca2d9eefe817010abf68ff33b997af538172a77b7c5062c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5efa04be2b18a62fbc14a25a8a156bb4

    SHA1

    47aa8ab7b50013d7a17fbd7a5d69128db3ca515b

    SHA256

    2d0c4da5637e471df0d0e116319c58a730fc564a60d32d808638b32aa4195145

    SHA512

    e222582a98a8c186e115efb91ed8a25c099233972f779b663eec54b16642a07be8a85bf9f8acda79eb820961c220a4fb63213831061490070eed7f45faa665dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1af14445db4a55c372f24d1c6e0383a6

    SHA1

    e40754112d9babde90ae13b328ea9ea131ad0035

    SHA256

    f704d9f4a58d1cb8a614c33c1693ed02bc67592e6b4c4c7c334b2c7542ce1fea

    SHA512

    e7cd6b1f75dd98a50a45d915af3d5e7c97c9c0ad15642f29b65bba9e37d4c823230c3f094f63c11d39b69dae77d0b4223c547d2c7d5cbc05160e3d9feac8f9b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1493f81c0f14eb61a0d1333de04c52d6

    SHA1

    117c39824efeb29998b9514e7ebb31c6243f9389

    SHA256

    7d2b24464783445a72c414b59dc6923c65a8c49ee97342e35c8d92298a2008ce

    SHA512

    243ef1a2bed7cfc70ed22d721cc01a0b822eb3e43bc9469cf8d142ce7b9beed5848470142ada2236a1dd1bd0e068edd7cec8f6c640702aba3510f46d6be4f1a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    696c9bf5d15678ec16bd114fe5b55def

    SHA1

    812995f4f43fc206e231f5811901feca969c7b73

    SHA256

    f2c9bc8ec1c6fd4c8f488bade778e68f53604b4463be8d9d166eddb730d263cf

    SHA512

    35f17d778a9d3ee7a829541fd91804a9e3c875339f5847e93934c9207a6505da99a853c05568890b4d3fafc2860893e44a6ebc03e60c1424a74ef6c3d3850cac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2431b9f6d030fc9850a4ec81773a0403

    SHA1

    15ab3be03271b3fc3e7da2857e426e8b6284177f

    SHA256

    ed4820643e53d2bec1662eb30ff40204af688720c8d20ee62e956d1f72eaae23

    SHA512

    4ea599b13abb3fef5c44682fac3b55e7b733cb0794797939be8219539cf9edb20607c9a191a4b0d26024412e7af43e0336fd55f385568402d9e8860a4c90d9bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae218db0b3776117202a76f779d82abb

    SHA1

    afbe81f4d376e824d4ed0dce760b09f95cd43e7c

    SHA256

    fe32ac26af26e5d7267f01778b8b947f908d1f5e616f563a07f35e3182a28146

    SHA512

    b8de244df054ec6addda3de21745c93aea28733ff70becb098ce034b15aebfaad782ae2923630234948dca478a179bdb27c94e398be58d728026058252c38eab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3de8337836a000a029943ca552617283

    SHA1

    245a69fc27babd8ef86d08d1e7136ab4e72f1f42

    SHA256

    fa2ba85544baa4ab3486b3231adac268df751a70ae3618dff330250a7a70cf8b

    SHA512

    cb11550e5095c6b8528ac31edee380a519bb103aa6addb4e78b1e7b6b40d238a11f74c4ab530ac275ce005b331841b408f62d660e20d2e179928f882a97fb3b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f80b4f6cacd7ce91b59a0820a1fb28b3

    SHA1

    89f23c4e554f369f5f3a8b26c0ff149e1ae612ff

    SHA256

    25636f6fa99349170beb76d7c987a6d8007a58913bbdb4d63ccbf9a6426f0bcd

    SHA512

    7457c72e5611f233ed31fcd92388f77eaf8931755c622a43d15812c38eb3d1cf36680446fdf1adcc1e36551f8178ba858f2f1f7bc41b9ef192a3830a195cf96d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    499c1c3e51e0831b6ecd619a65a3875f

    SHA1

    b502f96b22ca282cb7211aa7b66427d431cefbe2

    SHA256

    ccc0a2652ad23c71a7ed57b0ab5b1f739b011d402d886acd816ff850eae7a44c

    SHA512

    87e2abc3d9be02b80493dbcd4dff1ae359de0175376e6cc5d608b1096660d62f6b7f3cdf0383cbcb1d429222aefec4e5e916e7952eac15b55dbe8e2b33dfc852

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06903856578ba91bce1c34b7c7e0218f

    SHA1

    ce5e07a6e251a79e52ebf3e19857f0c82ac80cd5

    SHA256

    1e28a72b9097862fbeda9d92c2c7d39ca855fb191fc7ad3066baa6c4d07e067c

    SHA512

    8197658d53d9a68181e9fdf285bc00dab1cd5a17c2c0c4c3c5d50cb4a240bc8127d37686920055cd641b221ccd8a89acf9cb3cd642deb9c8c984525cacc6b7b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1097268bf0b7de1cc39751ab0ca01cf9

    SHA1

    083ba61b1fcc6a1bac06eadae74ec8aab3d8703f

    SHA256

    6c48aadc8236ff4b0e2c6fe4b472367bfd8c496e09e96949127628547e677665

    SHA512

    2812c4f194f29a20f9a920e02e79a49fc36b464ef732b231e9a8f098e0fbc8591a7264552a8c3633dd4d5df9302eb914cc678dfb54660174accb24b3bf5aadab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3924d5d4f131d6b05394031658201aa2

    SHA1

    044a507045ccc775b5bf8b833e41be54f240837e

    SHA256

    a5448b3366bf5a510fa86a28dd0151b8273c5266df37900d040339f574a11073

    SHA512

    43164fe6171ec953121fc196cbb9cf3a9ced4fad5b7dc646fa837a95d458fa5be935b76657e291636f70d4452cb4c4893498e5f40878292e4f1d7c9c0bf3d2ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8965e59e0cf6d8d79aa9bb3621d1c47c

    SHA1

    8d071cfff9fe11724f0159d96d80862d94a59fa6

    SHA256

    28a16c35b32e3add11f417be1f8fac1f95d600b2cb1359526958589efa3c2fa6

    SHA512

    b2fb02bf1ada0c1d55a8435949c4a1aa6c94d8b7682eb25a99c547b4f246ef71314fa9ba7d96ddeffab8947ec4ae1818a3778ea20f60533c709b3cb7c778d3ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f0e4cd6d70ab5e6d3e85e0dc93da0a79

    SHA1

    7ce9d6bfbb993a4e3957a76146074b371e6cbc75

    SHA256

    f4c3302ca1371ff64738de69a6d4c2eca9cfec711a950910e02d000cbaaff7af

    SHA512

    20abad060207130538096f8afc8710b2c42aa4a7476ec0939b711ba5458db5f95d1f09e2f7dbc4d5cd5e85e794bccb3f6d52c32c835cd487d5525da4c35d7757

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5549ea153a73b3e5e5f1d23a927789f0

    SHA1

    be8f3ed81a8f05b5c34932945c20f3c134a4f9d2

    SHA256

    2bb2be1eed91e6ca7a3bb3005f55930fae301dafabb7b2b9532e9115a2d0d8cc

    SHA512

    7cda0ee9904c926386ab49cace1b10e44b500b5d33747d9239d92fe9cd61702023a3aa22daa9d67c8261d57a9ba344df91328abf40ba7bb65cb299c03a4e1937

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    42ed26c6da87bb16ce503337b096c8d2

    SHA1

    dfa3312f7beb696c8ba41e8031ff3ed982fc6f4f

    SHA256

    95b7337152588b0ea5f10fab623babf3d0a2e4875e8683eaab058fccec375151

    SHA512

    23c204f97fe31a2ba9a438726cf4f05877f5bace8d3870db30073f1cad40d8e48e0740d6e6f1e4d06ca8fc5fb0361715241a3698f91186c4effcfcdae9f2c20f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M7GT0RRO\glossar-js[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\CabD55A.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD5FB.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b