Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    14/07/2024, 23:01

General

  • Target

    4727b5ec56fdc646d4a94d662581fd7a_JaffaCakes118.html

  • Size

    121KB

  • MD5

    4727b5ec56fdc646d4a94d662581fd7a

  • SHA1

    83e96ac2fa2af9cecf61fa19cf691a275a7f1bea

  • SHA256

    60a2e95d708b43bdfc043a9a3bd737e6c8ef8a3a482dcd248525d868d5ebfa28

  • SHA512

    38bb1a3c9c808dfebcbb3fefc13d5a86db048e3e5108407e6deaebb2d6cd9632e77b8d523d4a02d384e3f2f249d8bc78991c9879786c7fec84aabe04da386b31

  • SSDEEP

    1536:aKIBtMEFrm8slKIzeFjNI2g3tUdvpNxSfX59u:aKIc2rjslKIltU5pj9

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4727b5ec56fdc646d4a94d662581fd7a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1992
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1992 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2536

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a6fef6abcb20d39aeb6da1e1d1f48a6

    SHA1

    db281764cbd92ab945b8be99553c8a718c8630ed

    SHA256

    4282ca8f49dfb090ba60bf8c346022b56bb2e1acc2f69ac856214bafe01b7a94

    SHA512

    7a4ce3c9a65bd6aab0b74d1237ca371572f179f1956432f0afb6076900b58d2aab5c9605fe587c16ff111d61e3d9df8662e290fa002e7ae4ca9c155651bd4df7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4534c5a40c9be9a724fe63855b7ca3b1

    SHA1

    560e2efe34325393ca2ae13d2ca1ae8b657b4d69

    SHA256

    bef75812035d9b1e840687dc0ab2dac0096615c724f004eb92a9c95ae33e4035

    SHA512

    d98026c799e041d3e95b2295c137a53dcae12c5762ab1fe6d3ca6ccdfb3fb41a145c2c02d6655663b1f6c5ee16d3a5c385ea2a13765a46a3d90f5987b21c47a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    953863309ccc6e6ff1f264304c247a42

    SHA1

    384e9f3425e2efba0de829c2fd0cc5e920205752

    SHA256

    498b3512be8e940548bdd3c8f0369819478a8a70ca3706e27938103adadfb3e4

    SHA512

    bb3f2a817a8c00a96de63795cb2b6aca190ee03dfafd31cb9e5e5d6d9e53d2d5f96723b423af1c1714d00319b4b0fb96b6d3fd2a14db6305ae45afdd57e890f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5f48056ccc323d339dfd7f681234d98

    SHA1

    d910efa62e1a2e8bec856463a6790440e0d7a9bc

    SHA256

    1ac6b9eec8cac0470089fd1d1701342b8070ad8fcd5fa0ba3d691177d6e004a4

    SHA512

    013eba54c0a76d25b7300c98a49efd0fef26d3af0eb3f50064d61a32d1eea0e81b8e1f1a770f0e1e6839046906f75ae06027c04dc5a11692f1f253e932cb6514

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a9584715178d7c4a28f94ae85c520658

    SHA1

    69291b341da15649718a05061a1604931e7549dd

    SHA256

    ec3b0e5e420b6c14c86706b27931c96e206f13436c36f8c693174f86abe8ac24

    SHA512

    11771687d7dcee6bce3e41e841bfe81e1a9a49ab789e8439585250bd47d2e97ed04df1c5d1f787cd5975367e2ff60f9eaca87e8eef527b54cc37225eae4efe23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ef2495636eb36aa8f0e05807fff1d17

    SHA1

    4b4c0e648ff5c7578b44428ab8553714a63794ce

    SHA256

    3b8e5868f4e478a216cca7132686341acddd85731094aded2f6b18b350321ed1

    SHA512

    ede95532dfbafade8f75e73474f7425bf007334ee807a551dc6c8aedae20fa7f91504b9a80cf2158b5540aba0b8bb6d3c1efed507dc2539c88d949a48c50bf46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    308ffa5a11249dee591d4c4c443328d7

    SHA1

    3603868e5b1b12c1462f69f1ee4c8cac99d8cb55

    SHA256

    32362cb14e5d1d721ac2783a56c040c879ff6db956a90d16e7504201df600302

    SHA512

    23b5c32e44d8fab32c1e85f45f2409f0aac2f82fa8ba635e5fc93685acc14c871335abc64d5230a347a77a3a45fd59e4359ab8c210158fe04f25886f84b34636

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f7622ff8099bb3acccae473322f33a6

    SHA1

    fd517af1e7c44d4ec8bb48d7521898161a731b2a

    SHA256

    8aa8326775e09dbf7acc9d3ec61fb870d9fc61460a9ef86f0414da850eb7765f

    SHA512

    f90f5011b62a33d98a182e8662dba11d5899132f956f6da5c5e5064f7a9eb701eac82a7cab0bdb33dba4cdda0df71edf5fe239ee1b8a5b74a088ef5737874f97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05a2f01504227c4d681d0ccc313fd1a4

    SHA1

    b80fac7e82745d5187e4fd9882d21429687c3e72

    SHA256

    639dbfbdc6cb5d8b2a5c0b538849bf2edf40e8f60c0d2ec3c3be16bfe693a7e6

    SHA512

    6a7826a66ac0711b6201d059dda76e82b2b386be50d2da2e04fd3828f6971661029c008585198633c355457fa7609b88a8ba2543407dd0b5eb9231342b18fcdf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35bb04ae317fd2f0c3c250ead17d93d2

    SHA1

    da8ac1e65a8fc1464e63eabbec536832d185497e

    SHA256

    b72cc47dfbe4309911c0dd8796b6d378e32b02e0c77af41dd399d042465c73ad

    SHA512

    562fb6c7c283e3831442f86f37975deab5df93923b90001f5bccadc057071700d6ea23bb016084abf3e826c190309fef52b8f3cc7f3bdb6c09f243a7e40d76a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    33d386fe2c277e6079b02a5af4a2eb1b

    SHA1

    97d6701a08cd69844fff13c5fb375ecd6fa5b217

    SHA256

    9fa29c30a2c0dffbad457057a2d1a914f87d97723f54eb646b6a8196fdadfb19

    SHA512

    225ce583a2c9a8985d0e57049252fd5e629f4a6aa5916a6b6cba15f7c63d7edf528783c74f82cd459dd02ce2bfd20854143612883cf505609e38df30187d4675

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    944ec53264e7a2e25567babd68921a63

    SHA1

    86ce4f671d2777dfce31ab8e946259e47efe319c

    SHA256

    2a75d023c9c24cdd53477607b71aa80873b2f5e7fdd57081cad43b4251a18a73

    SHA512

    9c29c06ff9458d3204675070b4fe85dd9f5b63f59e6207aaa9ed2a97f59ce9834bef8a0678a5bc99dc2f15090d43da3c666da8fa20698aa583640f841c3258f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    53f9e0f5372dc530bd29adb221354f92

    SHA1

    296ae4f5d23262aee216a37e2cebf4c9d55d9e5f

    SHA256

    afec57d4f795bdcc497a308c66d7e0411419203846bbd521e714fd0e21da6da1

    SHA512

    62f51b47b6e1242455a138ff32969ec0109080018e6ce6634287ebe6e5e0173f75bf68c8f70f16008cebb416eea2585c6514cd5e5d46c623c00e095ccd5baadd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49047717bc0182973e05a80596d8bced

    SHA1

    201252b64a207e3044efaec37d67a34c299991ba

    SHA256

    9b8abd93868a96af200c2c0bb5d7fe54fbdff698d33bc7a3c8327095706aa68f

    SHA512

    7bfbd775a2ca61405c520b4f0f017ee615d73aec93a22529b5d75813050200fc2e116b80d373d34107cd42256ea9db5918f99831ff99fdad6bb511145d276632

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4df6aea91e1d449c870dc1cf99ea8e29

    SHA1

    80bc2e1d5fabc6866f67c695825c7ecb4b3f7e3b

    SHA256

    c9f1bd7066a2fae1d3a354a767eed0b4f405c85a7235a1c37cc4e5d10a5a00ad

    SHA512

    1d9ff85750b630a5c667b1bfef63a42ae21162a5d2d0b1763f50a200b1f83696bd0f14d1c7856f61c1bbdaa5549deedeb894518d1db19c7d413b38f953779431

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    132d5e866b1b72695f0c97ba3062ddf3

    SHA1

    ab2fe4c923330c425f6c31e2ace9f31129c63a08

    SHA256

    836cc5ffc2e076652c950a5a8f927d98fcd714f76f7bbf6af3d30f2817b05931

    SHA512

    1415aa03516ba4b84e91898e0cb150d963b6ed8cf72416bf7a0906d0419be64e6b4b61aacb2cfc225eba9b9b934dcefe58d2e6467aa1983300c5dbb26e09fdc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ffb064b01844259932812a99393f555c

    SHA1

    7b0a9ff91cf126dbb1efe8bfd187cbe7ce83edc2

    SHA256

    62db9c54b785cdad0cb5d0b62409b971f097f6b22cac9e2827eeefc2793925d1

    SHA512

    8750355f6436e94c47de5682740b60231e89175a27825e30572d3241e5cff2353971d2f453758e6f648bf261fd51b3dcdfb8ba96cd734d62f431405157b05111

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26dccc2b2d6915e480ffb341ee80d899

    SHA1

    c305f69fdda8b074ec4ccd45604f8d4103fd13f0

    SHA256

    2c5f4efca5d602796de4a108a311436c1cb5a4bee7a9a1a449d55cda113ddad7

    SHA512

    eac9d0bcf8b9aed06aab59efd8b4c6ab25847ad2b6ce266219460bdd471d5637f27f3cea25f78d1f35278a35fdcb79e6b450a49507b857a4fa3e84bb975fd6b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a8b263b2fd35170ac680d453b7fa2cf4

    SHA1

    d52e72e34229d62b980aee891564140c21fd111f

    SHA256

    2462f92b7dff04139d56ca928d947b391ec59d588d225d7c1b9dd441a3cdf619

    SHA512

    c73bcd93f341bdaccef98c3c892b92c3ab44858427c7820a15cb2c400a5ffb0d90ec32949adc3c6dc2e1fcf8dccf8546dd5af11670375c3d39bda75c51a81139

  • C:\Users\Admin\AppData\Local\Temp\CabB2EE.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarB2EF.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b