Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    154s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/04/2024, 09:56

General

  • Target

    008385623538b6f64eb43a00c538856d_JaffaCakes118.html

  • Size

    146KB

  • MD5

    008385623538b6f64eb43a00c538856d

  • SHA1

    0754ee7a97b0d8cd6170bb7fc445194292d7603f

  • SHA256

    4f7ea0dd8adb02e9847bf8637f8ede6f8ab77f9bfe6501008923b3dc444d6181

  • SHA512

    ee8ab432de9f3dfd63012cd2a52a558153b8552b163b4c6c7e26d237a43c08cd600ad494bd7248779e56276eb061fb2f93ef705cf37467127036ff55e7da63f6

  • SSDEEP

    1536:ig81uimdM13h3l1Aov7YE55A5GxFaU0li76jNRgV+3ewZ4dmdAo69ps1C:3RdMJ1l1Aov7YE55A5GxFujPnce69i1C

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\008385623538b6f64eb43a00c538856d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1084
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1084 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2280

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    62157377b2466befda9ec988b5e1a19e

    SHA1

    fc3905dc5147971391252d875ae2c38cdc67dfdd

    SHA256

    5ef7675df551d2cc5b627da581d2393fea05a6117c87c430e74caa70c713f0e5

    SHA512

    fedf0a40d603f987e172ef8856f1ce73b7e853fa34276e6fb6b44cb92f00f23a97ab9399f5cec8205c1f6cb814af730e2b35cb688e404316fb4e82d080f9714e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    ffebe3dfa1ef94855ec560df36e0d632

    SHA1

    ce8fcfa7fdcddafc4e842f522ce7bb5d7ef6d9c4

    SHA256

    c2a0f5341a102219ac0d5a792902cd7b85202b242273a9d5427b1ef40d705da7

    SHA512

    95ce8e92c6e574b846ced1ebc7c43e1d7174e15c58e88877c13a9f0f2f384fe247a7978790af56555a341354bb48a11d6c4f8fad7062c9e51a0374846fe463f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2bd3cdf3cc50cfb0b1f7f21419140f49

    SHA1

    368b3e71e772e92200a883d0d2f5b98aaa17e61b

    SHA256

    9c28c378915e8114d31c7a40f3768f235a611e6207e286659349806791be3bee

    SHA512

    d8bf2d4daa12ea4568437f59c517f5a270d79308bb7c3c53cc452a787719020afb4fcb20ece2ec90347a2e758ef40111fdc76c715429e85bb52fb02b39581729

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fdc58d267e03bbb706d646a05c1ad8de

    SHA1

    9d7b086e5161e79de5be0f3f6721414f0aeff549

    SHA256

    30cc592ccf65561db6bd18c8a0f335009400d3ccbe599b28f64ce0f51d6455b0

    SHA512

    4d67636efdf730a377f2be2cb938eb907a8a10ed1c71d132a1a1ee17d54b284c5c186376cbeb918901c4443263973b1b46aaa61861669ebc5ad06401a679fe27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1be1f321acd4fc459c599ee7a98ea6ac

    SHA1

    7e6ba50c2ec41551782405c14ca42c9bea82c60d

    SHA256

    8ba9c969944d4fb29ee3804395749d335b2c84aac1d294319f34cb0896e316e5

    SHA512

    6972b0f24f6d248d42b4dcb8019196b5694fa9eac5391a5dd98927ba8c3b0d7ea59d5384153476565740daa188cce0651496a11b07892dcf19ebc53588226c2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6f055b8b601f70d2b7f7d28708a669b

    SHA1

    9b6d09407c3b41a5e3d1565a3ec6930d7ab5bb31

    SHA256

    2222d3b668cfe011118e440e9362a9cc68da64af7be3f5a31392420cb364f744

    SHA512

    baa97864fba8b49c5faf0b8f633914d307bf79245151be0f92d3013e964569bc326f415f895d792e5686dffd95cab5efe7cbeecaf47df2bda77ddb8589ffc9ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82f3924aa35cf7ada1f614800e6d6f1d

    SHA1

    0ad0a22af20d14e92d78048784abe71a9987953c

    SHA256

    8db5c6abe5bcb9319f46e34b9493466b124737e14d1c892c10b9891bf51122ab

    SHA512

    557197cdbdf16f781ddf544fccc35a88051529ecb62acb7a9630e072b6fe228ba34831cfebae7d3557dc39fee50f2c1b914f9058b178034c976614f05b96485a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aae9dd4837a02f5d8d907a55f80391b4

    SHA1

    8c0f02af1142f346b63f0fcf09e70232884175c3

    SHA256

    c21e23342f185e10fbc7ef58f72354785e314a0cf44fad38f9efa4830ca9865f

    SHA512

    b13d775b40594dc1fc10be42949efb9ed585c63d455422b181da86e339b7eb01128f0b47713d3d3cc9eb679ac0822c6f5f1e85e7629971612088c49d1896ecbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b0a6b9da385e75937b20aaca1738e2d

    SHA1

    1fb67301ed4995d1ff539b5c4382521873ee5edd

    SHA256

    536e1f4bc3581cd2c82770db7fd748f5d483678cd4ea5fd27731b3c9b5cf4f86

    SHA512

    724fee2006ff94b27638bbb58dc3a1450fb2c74fcde9ae9ca2a5d86444905ba3f9064245638008fedbaf4e4fd74dd0cb0168dec0140ce1f8df6f5a647440a545

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8ea88ad4d10bb593d06f1d0440c9398

    SHA1

    57e5d7af507b3eb9be8347eb1efb7ccb3e3606bd

    SHA256

    d22c8fd5bf6b39b4c26502c5051cfd5993a0fd88777678993ef58514d2fb4b11

    SHA512

    67a7b33c95c378e1a16a41d13d0dbd5056ea8be27dd3d4889b6da7f7b3719386a7b21934d27048abd123f78f3ae234565bd935424ee574a12dcbb74eea92669c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1d6b2db34b8f9282f7af6fbf14ff0b8

    SHA1

    7111d7226adb3814990ae8acce15c77ae9c972fd

    SHA256

    8ba53d6131f03646bac93ff57f2db6337046b73953d8bd8225c0aecd69947202

    SHA512

    1cb947644148967de077deb42c0d2e0ceb2ff910a78c81ece9019896a9a39b63d4aef8e0bb81abc1657ab8d6bb69387480819eebe04b3d9c793281b013814fe1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c8a2301b53f9d280c343e1da5deabe4

    SHA1

    02ab2538ee124d5d08a2b87614d9ef62634672d2

    SHA256

    8c5ed8f088071b06c0a4ae0975e14da24e87f047b8c9a6eb275f51480939eb36

    SHA512

    9ce1bfc850acc2b70902c1f20b36d2d1cbdf3d5a647d3f136679bf97dfb1975feaddff07d69734343f2826170a6f9e2f8afdf55b44e34d5f84ded23a09bd6468

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c17bc8ab0e12263b352de5d967702f5f

    SHA1

    92400b2709ef829b52f982ecd798b2327fba3033

    SHA256

    71e934843438e3f032db17c940d538dd1f60be309428d33d14206286f7e1648f

    SHA512

    e26007590f8037e1450b13f1e62da3e36ed202147254703cf42857a6d5d94c3cbe90ba34b39b76147879ffd62f673394d5c0f6ed7c2ac11a95aa5901825c8781

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5743368ffa9ce3d80477db9f6b545e2

    SHA1

    27d127daac74e1d0b6ec831132b84588d8c73904

    SHA256

    06c114246671d5a6309d0f775c74e1a1205afef2971bec1ea1cac3148b1e34af

    SHA512

    aa14a257ab82187c145d080d4e8e408ceaa62c85ac8cf4fd34b38884f27ac471e5feb8b10fdd01869666af1794d20252009d210fa902851fd0ef214eeea7fe8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6aa9383d95e0f5a7d94cc0779d457f72

    SHA1

    6ecfe9a415ad6224d41ddaafc2d145a84c79531d

    SHA256

    0d9a0bff3585a50bcac1d39570738d56972928dd3943b9df6ce399cb75c0366c

    SHA512

    6f2dbd7b9f915644b16553f188b44fe4219579392ba38834d03e3ff5c267c7123c49adb73a5a247f9af895f4bf4e9effe1836341f6208401de67fd157f50a9c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5993dcaa36265a0b7a15af47b60d7a9a

    SHA1

    20e2defa6a2912b611e9b20ec2dded169d11a769

    SHA256

    d84c89c09215f190172c467041f89eb4ee76f0fdac3c8ba73391c793f12c8338

    SHA512

    7dc7ba02cb1c8d32d85775c46c0a85c0d68b54d2f729ef28831b5f889ca9bc6d94ecbd63272710e43a09851ae9cd213234346b6375108d2f081de8439e25d516

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d7577bd6ad62d13cb090b5048884457

    SHA1

    5b38969f03b13159ab4680898c6c13430d4be78f

    SHA256

    633d3ce44bc0a199ab7e7f4d2ed392dff5b0fa4759813019cf867110c2b04ee0

    SHA512

    166bfde5789e41488f04208ce98d4dde72b8f6a3ca655dd1955e87248afa158f36d435624a6aa3987607bad72cdb92c6d0c098ca6e01ee28c71c41325e06877c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58ee139f22e0290ffcc0dfc3544d7bf2

    SHA1

    90a62fa33ed992ca668938d24b5b03f7dccf9bfa

    SHA256

    7a87806f6d5ffe9efd86b808b08341065047534b7491cee00edf60f7296e1320

    SHA512

    3ca70168aa8bad5994af5bdac82baade56673fbf0021f1c3a1b5096a34571aab3571a1c63e5045f93baa06ac0b38ba115cb3e478c3ea152a76d70a486d67bc98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b4e75fff0d2ef037d3e933324a0b57f

    SHA1

    566cbd73ef54db61fcc14ac1efed5aa16829fbf6

    SHA256

    8f4ea876db69d33fd0268a3e65920f7dfdd2403758dddc9f7f321457723a3c95

    SHA512

    1c05b8d040fcdac94d9ff625c770c14ea3699f496acda5d8db9e2d016128cdf925769d862b8c96263ef1853d7e1bd86a1f13575d9f1b8388514a87f61a75b29d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f066dd4ca242ec61d33611e9bfb71a52

    SHA1

    580d6558f30e6ca924ae5cb431a2ac24c93fc1f2

    SHA256

    57a268a77ab0a1be2d95768228a8ed23dbdec2abc520bbad74c4e0c61c3151b6

    SHA512

    e0586e3f7a5f56ef804aa6f12481ded9b215dad2c21132734bc9d0e45a4649b52fbad9a4f1fe28ffcd032b25a36f0f3e04ec7ee6ac4fa5fc1f09288c2f93f657

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c02d5a77beb5e6c784e7aebcc275b272

    SHA1

    b2c9cb2a457d7bee54de86424b2afa9ea9f8cbc2

    SHA256

    1fe20b2484638a679f6622a326676c1f81a7ede2c17db4619c5ecb04eacff69d

    SHA512

    19235e190ef0bd4d41dba3f0682c81f85f6f5eeaebb359f99b418b64a9eb09ae9568d713db4f60d2da93881c6b34e9592ae6683fd3674a633852926cf472a8b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55f8701a1ec530e9f2992255ec0fec15

    SHA1

    cf9dd7b1bbde1173cee9a50cd8cedb1e712a54ba

    SHA256

    88bb1af40215fb59a25d468849081bd1f9bc3c3a09704afea63bc686ab42cc66

    SHA512

    7fc5aa4d6bf82d3f68a4339537b940884ef00c19696094cb1d7270d1e3b46abb949e8e70d88daa69a675e729432b3402fdf3d945d45c2dc7a30bcba2b920fd52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A16C6C16D94F76E0808C087DFC657D99_91B924923180E8714F1EDBCBF8DDC70F

    Filesize

    414B

    MD5

    b36a9acf79f123a9f47b6ceee6310ab5

    SHA1

    25d3bf72d99d2b8729b0cd2501f96c9de13716e7

    SHA256

    32ca32e92f8fe5a1ffc10335fa615a11cae17ed828413de5ff0d712217b7bcca

    SHA512

    79f9d92f1e5497f67640b4628ea657a6768b368a28797ff37c83b2527602663137aab78c4f8cf92242bc8130405dac0fda18239a73a375d0ce43bcb08f71ee30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    eeaa816d2b4a5a132569b14ac73216f9

    SHA1

    99a0a47a928d01c1b5b6afa84bb610f2626d5104

    SHA256

    98c0b0ef88a277072531ac84dfe3f334508d4d025efdf1db21eb83549432b435

    SHA512

    032a9f01019a72f7fdd9acf98f44202a7bddea577c68080bda56b32d4613a128b7868b924e43807f2fcb04dac083d61292ba2f1a9140c3dfcf9fd0f16e2a7b82

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DKX8QD5\666177490-video_compiled[1].js

    Filesize

    36KB

    MD5

    af1a0664bc7d31e530960d55461e4f84

    SHA1

    ba235e0aad98a82fac7e9b334d420183704cacbb

    SHA256

    2b3d6d65223a3ab715a11f47373419909b1ea2bee88cb06a1b57a4a09ffef204

    SHA512

    24f9fab2a2509b44ba5a0303df391d761bb0c855971718c8b86951e6d612fdd943c2b056e8445494a56a6865da3dd28119f7fb175dfcceba53df595fad9dd388

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DKX8QD5\cb=gapi[2].js

    Filesize

    133KB

    MD5

    4d1bd282f5a3799d4e2880cf69af9269

    SHA1

    2ede61be138a7beaa7d6214aa278479dce258adb

    SHA256

    5e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693

    SHA512

    615556b06959aae4229b228cd023f15526256311b5e06dc3c1b122dcbe1ff2f01863e09f5b86f600bcee885f180b5148e7813fde76d877b3e4a114a73169c349

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9M0HR0P6\platform_gapi.iframes.style.common[1].js

    Filesize

    54KB

    MD5

    7ef4bc18139bcdbdd14c5b58b0955a67

    SHA1

    afe44fd9a877f81a3c36f571c0fc934324c6cbd7

    SHA256

    192bc707852c5986f930528442d88a79e5bcf4513aacc2b722a3c5e964501838

    SHA512

    6c2920e80e4d5059588a32f75bc2b5dcc19f8d68224c0935d74f9fbf49476ca5b1ce43c279768f3d36871dfcec39f36db3fcad559c2f93cc540154cdbb04dec2

  • C:\Users\Admin\AppData\Local\Temp\Cab95CA.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar96F5.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar9814.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a