Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    19/07/2024, 16:23

General

  • Target

    5cb6e963fb6184a0f61b343e8297a264_JaffaCakes118.html

  • Size

    57KB

  • MD5

    5cb6e963fb6184a0f61b343e8297a264

  • SHA1

    d560439a0f761ba58fc05203ebadb4a7a2acdfed

  • SHA256

    d7aa0adf0d5bbc67de56fec84dcb1effde3b1ab261abfc5e6ac5dad07e321f21

  • SHA512

    814c8941648ec8aa2775cd16904d76cc5e6b32b613755fe9dd2ce2993baab6c37d73258ef332917afadf00f45bbe7fa461696447a06db3b8e204481995cc5440

  • SSDEEP

    1536:gQZBCCOd+0IxC6n8jfAfKf/fkfcfLf5fof7fGfRfZfSfGfefLfdf8fbfjfUf3fFT:gk2E0IxO4C3cUzBgTephqu2TlkDrs/NT

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5cb6e963fb6184a0f61b343e8297a264_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2076
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2076 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2176

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f9c98d7dc94490e7ddc7207196b7cafe

    SHA1

    1fdc0a7346295457f63d1f8068554eed6aece138

    SHA256

    04f3fa7bc4052b7e495a6dfac855ffd0f33033cfacaa29f102a1de0f890ebd9e

    SHA512

    67ae3692e3681168d25f801fbe5133c5b45fca9a89f62dce0c675ac6913168a63934641bf6a1a50fd84e5961425cda26a61bb6fa947f1c670426ba0b2326a47e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dfb7a203dd1694fea611c504a7abc8f8

    SHA1

    75a6f3b5e50d133217e90130585888d80345a9ae

    SHA256

    b66d6c4e5741bde7a5cd24ddce19f5fc33475bac8a3807decee0efa059430e4c

    SHA512

    f715cd3c6afc7511d8d4e2489b4f8a2914182d27089f787a8aac36350efa0cb751da1c766a8ae7b13520ee857bb4489242656dba8aa449b115153670e1a6793a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5b1bfa1578376fd4d0c4f08bd1d923f5

    SHA1

    9a9b3fd57d29acf1ea2df4466ca6642cec78e112

    SHA256

    7eae35fb33476de9b7c68e3c562395205210fe5a4773dc941dc755a6b1f7ed1b

    SHA512

    6ab1c999348b8f07f4013c3d84b9889239cac2a3fdcb348f609e61428f48c7260b9fd44e5fbc68c01705363133ff372fd357a514ddea8047083fd1dca0f7bbc9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e4311aede2c86e5ddcd3c72a324076d4

    SHA1

    2522ddf250454553dd2c33ef6857d8915cac54aa

    SHA256

    dd52408de809a2453da45ff34c96c2229d075a466a8b95bba93d5ab49a145c29

    SHA512

    09bff5202811beb606602694c8b62661368b4e5d8a3574e279ea8de48d4520361c324c66c6eee349345841eef0212d523689721faa1b63be3200ade8217f682d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ddaba3a2ff51b6773fd713e135170f2

    SHA1

    667b461049ac760c512b62ba5dff0f2bd1bd6dd0

    SHA256

    76cb788ead93a9fd87340fe770b1a694dd9f142e39032ab426cfc6d86e41f534

    SHA512

    b82d1b601aabf1a1021c3fee56d5145e9126c7cbe0721edb9b572a77a5ff50b36ccab0d4c4c6d3fd4861de9b086f06ca11b7e521a45e1422cafeae0d846ebff8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c356388c578a3bd15dce459fc28a8e7e

    SHA1

    b2f978786a331be5e3f41bbf949119083b1d918e

    SHA256

    9d5fe11c70da110435a5ff58f15c8486567801f8702780edb11f71e82a3330b2

    SHA512

    d3780ceb62f1c337c48cdbab337351370f0f0bccc68c6fdff86eb5754dfb3a7a1ec5a71718f8c756f56765554c34d3f0cbdd24a21fefe4fa1bbf57e9f03d2651

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2592a685f0fd41d3df1e082b49e550d4

    SHA1

    cc37fcfbeddafbce96cf082e9ebd0a0b0b4fa950

    SHA256

    4ef8e73b193cfb6bb1e4dae0fd8affc6f5ef2b1f94abb0a1c3b0113d08854abc

    SHA512

    dd9027ae7b0f4e7a6eea6bd226a47ddc9058ff551e89a775933a44036a01dd8627b5d8e628bf7aa9bb58a365890bc5394d710e52f4dea037059846344e1c36b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c641a3443f681006ffa83de93e679500

    SHA1

    4e65b6b4cd80ac633b5a389ac9ea91199c41c0ea

    SHA256

    14f43bdff97a6ac8ba950a82939b70a1fabda2d787300dd52a1899416377f832

    SHA512

    417c441f9ec3e287eef078671d282c60ee17550478563b603bed218a84bb9a636085c02d25fa844646a1cc7ee4369337ea04899617f0a4fbc38d1f31120af438

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a88bfff6de7e3923bb22bbe3b35216cc

    SHA1

    44f0e03b1e0943a3473aba0b2c2ba1656ac69ea8

    SHA256

    917998f20ce88567c8ab2d9b4be944b42e8fe462bfc8c78a054089a3740c339a

    SHA512

    2ce24fb43cb35c936a4e827d3a851eb219666c8eae7f4ca676b6ed118731e65aa36bb216ece9043d43aea28236df9ab2ce470def459a0f62d80d0cab58525ee5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa7ba1f461b870c092af87ed54caf40d

    SHA1

    ba5c914ed284f94a7bc6433ec7a40a0542624ddf

    SHA256

    8865be5bf75e797c4ec1c448584794593d72e2ba46679a849c2394ce2b73efed

    SHA512

    fe1e846e149f65f78bdca26f1344f8c68e4830deb633e1b3ba7bad911d30a92d134e4218171598f7a4296aedf404f9ed92646f2a5dbd5e242dd269a2bd2e4669

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af5e49afb6a9879760b10cc8567132a2

    SHA1

    e77b78922ae140095f5146a76dbafab3880a2804

    SHA256

    7d570dec41d2694f80532487494e8d038122b8fd3059dadabf174e15ebaf0f74

    SHA512

    6cbc6c2f2ceaf7fa83f8a2b3336e9ba4902dbb9a71a1e4799247fc9c8bb9da6fb0ec96eff68e731a9e41d87480938f249b902a0b276e70faf7b070ebbd002653

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb72224d8ab0ca761b6d5f1cc0fb7246

    SHA1

    467115c2c9a21d5db12ea256a4ef3f48615ff17d

    SHA256

    322bff4d03243715d74302d5e8aebd26320034a91acbe2279367d7c0dedf9fe3

    SHA512

    c6606a04621538bcb40fa67239825926899a6b6e38536c031c07490bfe4e17c1612ab701d295d1491c400b0750fddcb7ecb4f9b6804535dbc025faa098a96505

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5196c08f33f321f079b33d41f4c73f0f

    SHA1

    1fe39a2abe4f775237c6dccead7d79bf4e376fd7

    SHA256

    e9ec832c91029905fa7cbc5cceb8a7ddc02a09369a91c986dfb59b84021f2e58

    SHA512

    e009acc24f91abb3d44dbd52618bb7956e96e78e7253b6444c6aecad375b925bd86ad894e633f62f579eded002b6aa0d6063aaf5bba36f1ab01dbe1826a93d2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb794dc045a16e2a742fe1a9cdc89653

    SHA1

    05bca642f1c3d9e54804b00f4a11c2830671d7b9

    SHA256

    edddddb48891061b5b5a7d4ec01d284dde81304438d1093f755bc4006dbaa20f

    SHA512

    fdd7967449e0ece486e861b804c4c18d4e3e323441eead883b45f3793eb07cfef8dad8dda3d5b3eccae5e0dd79ae2552f9d394a6e4e1e3420cd6bc3ea377173f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b4a86f9f2944440784bb289137adc01

    SHA1

    2bcd8401ce105533ee5e2eaaf1c721e2ff19aa20

    SHA256

    c3e0807fde039c0ab7513c758b5e2eec22b4a534faef825aa921db7aa58bd554

    SHA512

    9f938f980decfb6bf7f70a9aa96433cf84b25b95b3120d7511be52e161e2e445393df12277adbdcd45a53b27a0868c93ff472774c8154e51386218c99c041bd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    196f1c16b60e1a577b5c17d07893d8ec

    SHA1

    dbf5c08e9eb187ba99b8e04c0c14e1c9c1ffbc49

    SHA256

    abf46559457c06ddb78df4eca8e4855041eccca0c342b2b59ffc0e0749456ac8

    SHA512

    da226b42fa003c362b5d7fadb2c10918db52ac6fdba95601501829083fafd64eb6257020a9c61362e03ab6dac51cc301cdcc7b7d06b175ef371a9feb77eec1d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ffd8c2bac9d82be83d8e44cea202520

    SHA1

    1d314b94cb5e68ff4b017cdb6cf244b34266b976

    SHA256

    b375a150de3328e3275436ec93d0b5644390e7d9ca2f49af054ddfc0b3fdf482

    SHA512

    50b15a5f1748988f5640704953eb4aeb55919aead2b20719e8585810b73f62b6e5dcb3f12132e722dba1c68cbf455144869ca2539b80830823cef8e8e547bd38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    744bd042b6a2a3ac1b1d4617f06e37ed

    SHA1

    148662d039b602f185243f2000da38d1d44908dc

    SHA256

    0c650e7afb6e0c9de489e8654febf86815d36ceea26fafa493211fbc926ad3f2

    SHA512

    44a108407343f1bb838dce5a90518bf5f400923b6a61e3cc4aec1fa5978e46e3d3482ccb3d03e65e57e90d1bf4b96590267dc12f6201ba585c999b09d2296114

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac4d4d98079387602241ffc24645f915

    SHA1

    2d7e46cc4ed7814c7cb398b221ddec7b55694785

    SHA256

    ade9a5824d01bcc78a79e2c5a2641d4663051ffdaf748d19d2d07dbf7759cf99

    SHA512

    eaafd348f91019cdddaf74691b676f65ff9a66a2b2dc65f63ca8207b7e18fba17f7723432babcc32101d9736e20728d42635d51b47f32b5ae330a408077b3295

  • C:\Users\Admin\AppData\Local\Temp\CabED3D.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarED40.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b