Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    15/07/2024, 01:24

General

  • Target

    47a316095dd749f564bd65a1b9e476d6_JaffaCakes118.exe

  • Size

    182KB

  • MD5

    47a316095dd749f564bd65a1b9e476d6

  • SHA1

    2621a9d605a109c6b0e3e7e6e838bd4ed6822fc6

  • SHA256

    1ff92845ce256ac2f5cb303774c8f6c2c3017ff40f6437767a03fc5f33dbf9e2

  • SHA512

    c62cc19991e7902039aa75903cf126aaf8cb9338216dbc0507199a63f010cb9ac6990e9ef306aa91dc0e565c4183f373d57cb1b4cdc46b918dfdf1925bd6dda8

  • SSDEEP

    3072:SwaUpgvs33rFPGCWi87IG/x+YkU4U53EWTOXYXiHwXvjlkfro3gRum:sUQUxgIpYR55oe+wXRNwRl

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Internet Explorer settings 1 TTPs 42 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\47a316095dd749f564bd65a1b9e476d6_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\47a316095dd749f564bd65a1b9e476d6_JaffaCakes118.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2800
    • C:\Program Files\Internet Explorer\iexplore.exe
      "C:\Program Files\Internet Explorer\iexplore.exe" http://www.flogao.com.br/kel9k/
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:2652
      • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
        "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2652 CREDAT:275457 /prefetch:2
        3⤵
        • Modifies Internet Explorer settings
        • Suspicious use of SetWindowsHookEx
        PID:2944

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    510d1ede43acadeac424fe4269e832bc

    SHA1

    5ec2189da09091e3439c9524ca7806fd431bd751

    SHA256

    4b9502843a71dee86ab37fb2dc2e64d1ad5a198c596bafa43c3d528d6655448c

    SHA512

    6fd804e07c9362991ac8aec902bf13195c9d3bbf82cd1fa7c56c25678274f214bdbfbb8ae56c35781413810cf4021198b4744857a016a8b4fd1c45f990935723

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc6416ec629d7f68b6c41111d60b3ff4

    SHA1

    34c0dcb84283e4aa6dcf326dddbf4ed3a5ec729e

    SHA256

    68267046229529490e812b5372178dbf1656b427bcdc419300bb9a74008f06d3

    SHA512

    9e8a3033b78a38ef3dccdb25b5048d8b959e2c97ef68bf5117781c257c3b8e29eaf5224ac9c7cd31d02a8cc338a0b7a66bf78be3921fcfcc072089b073feec13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cccc4c3c246a4111fb0585aab3b09501

    SHA1

    3ea392f2e883047a6b42c7157f6b8ce727694bd0

    SHA256

    95876719f7660de1866c202febd7ac340463a2abaf3596c278c639d923faa506

    SHA512

    d18d6ef05cc6257cc61092da191c0c4e104f22becc1d931084e7927c66096ba7eb84bc0f4afe28f5fabd6de552bd9e0d3094c8a8457e5d0917b0db197ea15f04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22193f06f7c6a23f7f0354b7762f9efd

    SHA1

    6962c774c96694bc921e746632124032fc424b65

    SHA256

    627afafadeb904e8e4c37097f2fe4c08d2ddd3411f53a8a70a32ee38321c8bd6

    SHA512

    29ba201826b0cc3b5e96b379dcb95d20a681848ef5cfdfb250bb9352ff24760d25a7603739a4084fff4d17a2c7c515f80b30fce51b96a5c92e8e199732e0a41e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc7ec3208cc61e3ca20b15331864548d

    SHA1

    2bf186384201bf41c21d586a213bc4fb22dc73ca

    SHA256

    b5814b5ced6623f142e0cf3809bcb4534ee362453cc42f99c163c304c6d839af

    SHA512

    053dff34bb610ed0d30bb9f32f75b0507b02aa4af957da8383c8b0a6fcdfb9e5dacb7a0d69cf63baab52340a556f2546f2cbb47af220db1eddf9e889c97f87b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a84f49ee6ae1f82b8a79772de47e1633

    SHA1

    6c7609d2de7de156fcea252e46d6ed8e6c3e7e8e

    SHA256

    05284f95e4b45673c078b99aae08b568b26194efe33109f43a27a57f1f54c04f

    SHA512

    57d6fcc644bc4075410273a5ddddb59962d3dbdd7f3d09ef40a7e34b6f43d930da225a75b8604ac0238bedba1ca2541083f4ddcaa9b0fa0ad29eafd9250425a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    534585f6b9f28c9f723cb2087c082e45

    SHA1

    a548e09ebfee46911709138c609b413b2176df43

    SHA256

    45cc5af7fda76ace631948ae82f2d881feee6ff751de05d9fda5e28363fb61aa

    SHA512

    fdf53eabf737db128c7b2df6b5e6555b9827cda04715953631669617e46504dee61ffb64e7a3532c3ee5119bcdfa2c8f12d1ee1dd2bd9fb99744bd2d0c0d8a2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b91abf8b6487f3a0c527f4e99d87de89

    SHA1

    be05f2b3a274992e85ce9b93511083505c4fda63

    SHA256

    5bbacddc9e1a1233df9f59465d5220d92acf776270e86c40bb8b3833fd883be2

    SHA512

    fc8434ec147bf945256df1c8e008675b7ac4f3d6e144eafd0ea64fea007cbb9756044aa4437c74d32dbf07f6df5e43da30fee211c972c9a8a602a0fd1c0ed340

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b32ac782d1460032d1764cec7a85c007

    SHA1

    127e1d4e3ed2616323aa365061a29397c0224a05

    SHA256

    92c3826b8e5b812ce76b5837ce9699267ee847842498408dae08f46ed3874790

    SHA512

    500fb532a7209b89243c639d24b727254267fddfd337b7aed633a63c45469607196ff334a91f82e675da0a1a2d535d237c904b057d92645eb814417a0b2c29b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    02f42b283d01b17220d72114589e1302

    SHA1

    e1d40431d2f3445a57ef4672b02bdba0e9cecd86

    SHA256

    91fb26c40dbe5cb2bdda639f24452006188dc53c3670478917a77d7db0566d7f

    SHA512

    e658f1f8be26323ad93c8517cbe1050bf296735b895a7307713ce9e92666317b8da8885aeccf9e30af59c4bce0923710e8ad52f9cd0232c707389769203b3707

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e37de9af17e2eff4016a548bffffc424

    SHA1

    5c6c0ae9d93df6346ebd2f11634d385ebfa0aa5d

    SHA256

    cc1c2712a1ff3d651f4ed6ec580f933b17b22ec3aa11a45a59ed4b2bd7501be0

    SHA512

    50d2ad228ebf43e07f12ae5c5fed381cf1b878a2b41e6f73e381327db163cc9f6fb5c9b465d9c6238d5f0c379998051228d56f1efbed97d798e4cb1a51028371

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    04f082c7eebe9006c377d9a3f885cac3

    SHA1

    7a5a0e038c9e0a4fe6b22927d45e4860881c1a3b

    SHA256

    f6249a6441f9583b18c2a49410d351ec9ed7cd2fbe8c1630c8ee0842e7f380eb

    SHA512

    2d9883482a279bdb9b8817baef6cf9c1bb1bc1443a1d5129d493aaa8400dd5dedc1ff41628532855227f81d534a7a1bab8d2e78d13780a84c86addcb95820394

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf311ac90fa7d232bcbc9103541415d2

    SHA1

    1d639c5b9530fedc370332c1478a5b327af21942

    SHA256

    a249dd2b29ceba7cfa312d1023d8f6bd27e04e70686d0c27154cd6f81e676885

    SHA512

    f9f2981103456cda6cff708cf3610c9ea233e9604abd2eb2857bf9fa073c74fdad8b684c790d26a2a85fd3f1de205c2f467a0294bf762eabcfe3c8cf50ff1081

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3301647ef0891b886610e212d3f25fe6

    SHA1

    2c522df7eaf8cdc718f75d222a3c1e85359bcdc3

    SHA256

    ed07a7390cbd557ded18676ca92f8ef3df47c4d6cd3b44e9522c5ed496b93a60

    SHA512

    132d855d05e485b12d62cc188200234e0f7d8de39573fcfb8dc7152424d7cabb463246b63054cee7676338a956b9df63075fea046a16d88789bf870987214ec4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    34cd24c0e2b55f651881881b24a2c2c9

    SHA1

    4c4ddc778445e0c471cf00200f6b18f86695c3f2

    SHA256

    56f79b6dbf37fdb75e640615be20b0ae5092cd17e973c75a0d004590078a6c41

    SHA512

    6cffc283f50e29b1c8ec91d0dcbae72a5774673f07412fb02c91c94c8bab98cea12bbc86a1c764a529dc58e1961f54b2a750305db05ff7afbe43535913357505

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c53f072cd9031ba935580625c8e0053

    SHA1

    ecd96926bd3bcfb26b7b8458b5dbec8e60334c85

    SHA256

    59d5988d82cea501dbdb24f1d33c6ad8c7f942b01645a5ac5429870b2e163129

    SHA512

    1170e304450145ac78d6cfdf263afab6419d4d76448b6e408cd380947aa27fddd7d0293a9baa24d4eb5a84fc51a7233a6aa1e88fe19c7abac28ba114f2b6149a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    32c7649cd012c7e3f7add14b395e71f0

    SHA1

    dc2185eb792b8fcd42975362c5a4add746e03b87

    SHA256

    5763810d006446ddec43ff51c6bd08cc65f29c901341ec8a02a64a7977e511c0

    SHA512

    e69c4d645b7e3320be73ff981df8692eba0b7e05b5493ac89facb38fdf2cff76b2963009818b867e87ba825dcca93071707053454677bd6397587064a01628c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b603f0a963a580f5d14417b7fbca95d

    SHA1

    0a8869379d85dc54788ebacda7363ae21c8e5d84

    SHA256

    b13b914c5bbd8a684d7d671f933ba3ac2a8114cc48d2d7902dd813f685d5e0d3

    SHA512

    57d713c20db87c84ac0349e97f3d41e6f0aa0a3ae60523a8140a3b7680958bdcf07c4c451048a65eaad18a1644eed745f4a31b9f27190d6009660fe54e7ebfb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    566adfc034d60558d030f5a1f4978fdc

    SHA1

    e43e61e76a62e1f86ead6341e3d81b5aef916996

    SHA256

    d52fd92f16461327ef54acc05b631e4aa660d508a37405692f5e55383da3767e

    SHA512

    82d4f64f9bd345168dd4936d3eb145ae0e4122f4b2d1d24278adbfc30baf0654adf44bb49d63db6902cebdb6e792bb79f108a071118c3c7713f23a29cea68542

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d5b999173377b6f85fcabbc2cfa856b

    SHA1

    5c820ed646018df0baefaf70384213dedd0f300a

    SHA256

    73135caad4bec3837c654213ebbeeac067354a63e1e1a32bfacc0d9721d67d0e

    SHA512

    889d08bc99e2991ea682d83bb32dc32b3e31bd5a20215e43fe442657a645946659d606781ef5a543670f6422e754846412a1bacb249c01b4c16b05a50209f5ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68da60d4060c82374a748e6839652dd4

    SHA1

    a3fe3895419f50b3807f8f5fa3273b5a8c918529

    SHA256

    776e4c50e77b603c02deccef32eaf22916a200783b3d33ca8337c0d1f2189ba2

    SHA512

    063f5100b8f51d8519497992f85490933bc7438b40b7ca3c004fccce5f36320e43fe7f1265edd0dab2d4a6debd3c027518a2d1e6ac15a525ce30b65efb7aadb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    666aef023256ab76a84542c020f29369

    SHA1

    eaa6ecf82597a63fab37eeaaba2e36e3c89e1f00

    SHA256

    b29bea671b97f76251780c96860c183ac69022fa4de58949c9e3e9dbde08380a

    SHA512

    864cf521638185b0869a1c8f141931abb03198b04c5924b604d2980b0d0d5c3eb63473bdc9282ce8c11898fc2df47fff4d3084de98bd929c559744e65c1f93d2

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XY2E4O3P\recaptcha__en[1].js

    Filesize

    533KB

    MD5

    93e3f7248853ea26232278a54613f93c

    SHA1

    16100c397972a415bfcfce1a470acad68c173375

    SHA256

    0ec782544506a0aea967ea044659c633e1ee735b79e5172cb263797cc5cefe3a

    SHA512

    26aca30de753823a247916a9418aa8bce24059d80ec35af6e1a08a6e931dcf3119e326ec7239a1f8f83439979f39460b1f74c1a6d448e2f0702e91f5ad081df9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YUF3ZB4A\styles__ltr[1].css

    Filesize

    55KB

    MD5

    4adccf70587477c74e2fcd636e4ec895

    SHA1

    af63034901c98e2d93faa7737f9c8f52e302d88b

    SHA256

    0e04cd9eec042868e190cbdabf2f8f0c7172dcc54ab87eb616eca14258307b4d

    SHA512

    d3f071c0a0aa7f2d3b8e584c67d4a1adf1a9a99595cffc204bf43b99f5b19c4b98cec8b31e65a46c01509fc7af8787bd7839299a683d028e388fdc4ded678cb3

  • C:\Users\Admin\AppData\Local\Temp\Cab12B7.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar12BA.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

  • memory/2800-0-0x0000000000330000-0x0000000000331000-memory.dmp

    Filesize

    4KB

  • memory/2800-1-0x0000000000400000-0x0000000000464000-memory.dmp

    Filesize

    400KB