Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20/04/2024, 07:32

General

  • Target

    fc3f7a2b7961ad276555e1e494eaf917_JaffaCakes118.html

  • Size

    149KB

  • MD5

    fc3f7a2b7961ad276555e1e494eaf917

  • SHA1

    a3d4e9c9aa7ea6488a7a96bafb5e23d73d08d124

  • SHA256

    33163a37efaa82d5a6dad6c074c28212e1844f7cb12212760ef02be679595a97

  • SHA512

    0152ee9651c0dcce8249d102afdbb056ea9e7ce87b20d70bde62b8039a7a0ee6fa000d27a38e5df49e6255cfd078a14d437294cb721880bc6f14f6c1c5c52860

  • SSDEEP

    3072:VRgNiD4D3ZnW/8XsPhvyE2QqQbuybkXbkNPgUIjvpqT+7MR+8N:VRgNiD4D3ZnW/8XsP9yE2QdNPgUCvwTJ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fc3f7a2b7961ad276555e1e494eaf917_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1136
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1136 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2308

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    d0de0e43c438486971bb14ac3ebacd01

    SHA1

    bd894f009c5ba47efc1e349cafd3f3bbb86ddd9d

    SHA256

    a20ae85f15072b19f6a3e9a6cff87e992b9159c4ba884dc7ba595a0b026fc96e

    SHA512

    55bcf5b04e6fca909916f48d893895af359554170c44fa4d781710035ba89d1e367c6b86f00c34ed68a87ef7053737d1cfa111d54c094d4596f5406ce7b47f96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2f7feedea7ad184c38e01d855b4daab4

    SHA1

    d6a0ac0496ccaa6438a38cac68a81e9457b253f4

    SHA256

    e3da782dd0a95ad238d4e971488ddceae6af8763acff9bac7fb1871852d31b74

    SHA512

    876c062060d0f3c6c6efc411fbfd95f1c47760bd19adc44a8fe4bb89648dde62a1bbd960364fc3d9416187fbb2e0d4747252def4bd0e5eca7e454d0244f83a1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4df3449af0a62af97b3ca03e83210ba8

    SHA1

    7e2834ba40021710d6f79bf4a6224b2b3fc31458

    SHA256

    ab8068b55923aadd8ff83853a6f12964a2d9ba9e72bbeeb631d8122778fe9a93

    SHA512

    eab5d962457e81478e51fc3b893c140286d424ace72e47cb5892e01e9dcf145b1404ec96fc4d29c408323f67a69981fd00130e4db227a15442fc9606c02b9795

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31f33f148534d8eaa38e43ff8a75c9c0

    SHA1

    536f513737da0ce0dca302497b4b5a35499b1eb4

    SHA256

    70ea9ac0ff898a104c33c38aff86ef9105156e24a107e130c7af71775a6a1294

    SHA512

    9610bc0605290cff24fe4a0ca43e832e713aafa9e2b2c27dc6d3f7e40c466769984828f4f6e19a6a374f2b39ead9ae92e8070a1feded34fb1af4023d560589b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8007a7146938c7aa2c5aa1fb7bc78df

    SHA1

    dae5c4b293bf10749679c11be58c895852258d70

    SHA256

    7c045b62d6fb11da9d3ede58c2f5f01a8e9750ebcd36b1343715937c5c05cf49

    SHA512

    0e19e288bfb204f8e6b8084781d1b594a882c057cc1e632a61603d9e8eb993ef1b9804f1398c6b2266ffde80c12bb97e07ac95ada590f18a163ff1f65f4c2411

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b1dd27684106f9cec2455a7efa195f7

    SHA1

    4516e25a14aaac2012c3a61ecc7104641aa1323d

    SHA256

    628a410531dc1fff63a3643af01ab38aee82c0ab4efebdb44fe0ca0b1c7a8d52

    SHA512

    bca35604bd56f81f336130680eee66bfa8fd5a2dd26681cfdef57751515df5bab4f8554f2b65b445b07e99dba94ff0f9ff433bf534277575f0f8e49f95f2fbd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8de187c9745cd80e1724d37aaa05a236

    SHA1

    0c3622c3ee24ffd76cff4b932b109332b9bf088a

    SHA256

    00fbb67b19e99bc0f2386183ddc4612db78de45f9f51e4a69e43d70a8d64e231

    SHA512

    52eac62dffe2f65619b61ed83a9a9e9c4f45cb0648f01bc21b03b80cf02aea5a32cee60758c13d24695ed1634efc97ff0d519ac532ca83dbf2bd1b380eba1107

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb2dc63ff5a1babe36108e19524c2d2d

    SHA1

    f445fe4afe06d7c00d73a3155cad0f0524d86ae6

    SHA256

    b7c0e5e40edb3e05e9e8498f43e63bed5d637e033f56a8d6497e8ddc81606d52

    SHA512

    a12967f0981c1bf90836065b057bcba7580ed0ce4752ee0b846462dcd61b954ae6954bd681f52bf01f4f08b72ec9b935887ac9091625c0e02fac63fe8b28bb04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    330963ed0273e6a95fbbe1cd4fc1a419

    SHA1

    03cad54fb7aa6fca54caf5fe975ceca78a00754d

    SHA256

    a9d83d3f9a244675a161b9d81b86a18306b2069d61f420121c3fa564009806cd

    SHA512

    ddee95b74508754041cf70c795b1c463faed01ebaf69c60ea2dff701f942126a6747d6540cde69e93afbbb6e472fe30b8c81a4f1573e2b5dcff41e9f22b18443

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9a4c2b2fff58bffc487c2ba0dc6bed4

    SHA1

    44cb2de9834728936e543c04439e1242a11c395b

    SHA256

    9a92f760163115bb8bd1a95b078f8dcbf4a64afa258f813cbea5d42759af2a1a

    SHA512

    12ed2214a8686bfe6e09741d11dbdcfb791a6b659a58658267346ec4bc20ddc03b55dd74e48daf35afec5cf2996470a9e3e1a36dc303462b40f53512035a9ffe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6afaa27a23d51006db3d31f7a665ef1c

    SHA1

    0ed2590dac96ffd30f7979194c6b8acf5531c1a7

    SHA256

    c4cef7932b0187b5b80640ff64c3cb3f65dcc210a2b9705f2e2e6ce81302ac48

    SHA512

    f3a37f88652dcf8b0261ffa1d4dee6bcd9a34266b3a71c347a5a760a2db3eaff842fc022eb689d6c190bd9b60e6869ba460cd2105311c407ca7f9ad65b3a2a36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    269274c88a6197ae38a5b8207f0568b4

    SHA1

    716efe88f40117b81619b1dd8c69bfbbe8ba035f

    SHA256

    9c326fffe6e5ea2e0fbc2513fc8f8cc95710419d7918959c3028738440153434

    SHA512

    a5e4d26ece67dc3e2a8ea64439d6cbc2830b19e6b94692a1a6017d363e9e3f4e78cce2c3b20069f2b26daa5e0cffddcd7534ef5c43d7380733cbb400bd575583

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aaacf0b8fcd0514e9bf6f5bcfdcc371f

    SHA1

    06d2b7e3b7cb1600c0b9bab7be4f3d3fe40ad81f

    SHA256

    cd7ea3da36be676c425b259cc25cbe4a04bfd03d7c61b698cd0fd12ce8cf0c44

    SHA512

    8e93002b54825e197a08a4244836eca013b13b0da37ae27341b70e2743aa06ae88f955b624b47d28b298652679f17c9b5ee0cdcb64c4c46edb9e370a27040d50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c6a3de1278b1f428d08d1a30f0d88c1

    SHA1

    dd307f7fd58e1ccb5e8a92081caf27d60b591f63

    SHA256

    da35357212d8df8056fb97af26b95512352e6d6f30331f7eb6c784f1bb2b21c4

    SHA512

    8233c80058cf883fae15619079727bfd278f51971710588a1205542757ed0f0bafb4cd7a003df7dc41c608421903e49d27bc853b6163607539d5755565efcca3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d35fad32ed0e1eca92e52987fb0bcf3

    SHA1

    bea0f065e61a6691959337a08307b8ace96a005c

    SHA256

    dc03dcf3bddc0a9a4563c7de5f0da6fd35d74c83a78b8efdc0e63910e2aea7b0

    SHA512

    cf5bca8ce7238c1a7f5faf36152d0f692184d9a17ea3a1695700242335d35d0c9defa9afaca4b1b1e157a2c7f17d04612537b21d485228b29447431f9a2a55e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    775769ae880ccd260b1b804d7a5386c0

    SHA1

    487b496a8c98e959634172b697554e6070b92592

    SHA256

    f77edb6bc67ed7398b30c021a449c260b0d70b4f0c0d7060cf639efcd96fa0c0

    SHA512

    f54737de3fd79fed0b416e8ece6d5f81fe1a6b1fb07c03bb90511f19bd67d4ca5e85834442a2c72c272ffef5caf705a1f0e48688f9b2a153da46f3afa063305b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1f967d0b9d92c3c3ba049c2f38a15f8

    SHA1

    1259c73e2af51b7a6d901150505f2e2156689696

    SHA256

    444c4f3e236cf07d3e4c85f8ab4f732d0659085841bca74896f3511d435e3040

    SHA512

    3b9c27f58b09783a2c13e6097ad157256e472fc6e396c117c4d1a00025447e493681dce32e6143f5b774d224e66564a8d0bafb3f4434cdb0ff6c6209ab383a16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9f0b273a44f5711ae1409b07dc2c989

    SHA1

    9be80d7f50f49c43735a04aee0ab14472c2af5c5

    SHA256

    a519f7987cfc3863bf8045fcef17a74f9388a4501fa0e671f57233b83ec1eed2

    SHA512

    5734ed07fc2d75bf06339a951bab7d32d0a4fc86f83f9fc59bc44ed806ad2b614a93e3a0e9886c83fe714b41217d5a383d57c8aa5094fda668ab29e59aa83f00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb14be350bd5e45a8e62f8897c1337f2

    SHA1

    545ac3d334a6198744f5bfd0454df33204986ca4

    SHA256

    de31e4a160c08bedc3a67516ade59adde57bcc5904507bacaca0eb2b1be883b7

    SHA512

    283e93c33111a90302894edf3dbbdc3baadfcd06005bb664f8b2b0a2942f2ea2ab700ee034df689a4cc5da4d2b08c8696a8e23b3acb6241e36a50014bd4a02f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36f6845116dd293c897f405ead175c83

    SHA1

    659bd6ac8f3564dc678ce37d2fa723fa92070947

    SHA256

    72c8c0c23f9f83a973005c09f3463d7f3f239c1a6df46080e3f61694c921b955

    SHA512

    ed5226a9f61b14ca74ce3c56b26ec58c3cd47221b94e51b5acac53eae3088906bc62bc7b4c95298bf4bbeaad10e7233f5161ad0b396532c01e2fe7cc0da2955c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b77f1aa9f3575425fdb4165be47cd2d2

    SHA1

    2b5340e958913fa1fe826266adab0d53bb3d9de1

    SHA256

    6e054d3816100113c00bddc599680239629b32e63907568ce4f3c097801477cf

    SHA512

    2344201c77cbbe8c3de6e421c85d3720b4a2bfeaca521a6b9df2a1f8f6157f2205f9b6ff9fcbdb5ffd434fd43a33a7efb50695981835380911dd35e9236f4d8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    567c57def124bc17b2d4250cc9dc383c

    SHA1

    8fad626ed534a6aaf2da6c15dd319a844547a588

    SHA256

    a997315b5fbeed723cd3bed2e9129700bdf327783545197e9f550801d0fdb9cb

    SHA512

    db1282cd0b16b73aabe6b937f5386c29fd719d005bea8f863012200d9e95efee48484977587b5e7a01745db941cd73896e7507f9d933d7c95a1eee8d977fabc6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    c20a0f7915c6b23f4412b5d6a870736f

    SHA1

    4fcee442550d27ddfd0c5f4fa1d2c324442de4f8

    SHA256

    2639dea99ec5266ddbd72c5ffff7b3d3c55649d773dbf9fc36b09e5d5b01c724

    SHA512

    96c758a95af6960691ff6567f7fdb6e0be48bdc68b152e6b282090c3045cc15fcd27037c0f94e575e2491860a2cf910985a2d5f330c6b680ada041aa32106504

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    8413acc9ac2b9aa7b3d44d2e6c705557

    SHA1

    a21bdc087690fdc711fedc5405894be1a0625168

    SHA256

    ebe786cea55e1988306799e6b0675f59f75985ddccc429479ace6ff0b7aadb36

    SHA512

    88f6cf3087d96052f91ed72c839c14446f10a0927f5b1c04271b850863781c2402bd822d3c5832db56c750afe51b47f10112b45a7cf68266f72c5f0737f78560

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\q905y6j\imagestore.dat

    Filesize

    1KB

    MD5

    a53c1c51f937ad2a04fa4a968e07c94b

    SHA1

    90f81b5a9de93eb2f6a9e25f0cab91e2dd2113de

    SHA256

    34f1b39fec0ab6e3d87c7dac1b3d09c451e7a1850b795af2e208a56024ec7066

    SHA512

    f273126c5ce88b5c59a3d03ceb21af69833cccbac606f97e9f86c72f941ff934ab729787ed90530927b291f27eaebc3f472e136eec68834084e7715487a66d91

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L9PN2QMY\site[2].js

    Filesize

    57KB

    MD5

    37ea6d9bd266568a084e5392828cfca9

    SHA1

    5e2192ba895d1f673ea136eb3434c484049152df

    SHA256

    f153f5305623e0844a609142947ff4d9c2742155697b39b1c55252de11109835

    SHA512

    40399ab259dc0b27fedfd4069de5a4583743f45ae1430100f38c58f437832754e457d53c3681884582b70419ac794c56bad61e94a4d8e138a2ba711c7d954376

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U8A9A2DI\favi1[1].ico

    Filesize

    1KB

    MD5

    129e0e4681906fae60ea32d066a7b4c5

    SHA1

    33c024415db44baa3aba0f13df1399d9b81ac9e6

    SHA256

    0a14eb14e53df8201b78084ab9a276a1f4ca01e55a20c3b8b0b6f3b660ee3ff0

    SHA512

    2bb170137d545c1cb80268ab9a39a356be4b50147e1007d571b902b69d5864d353b2f5218d08df8971098dfab16e0480b1863a089e77d171bda286d4ceadfb87

  • C:\Users\Admin\AppData\Local\Temp\Cab9ED1.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\CabA4DB.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarA608.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a