Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/04/2024, 15:22

General

  • Target

    01113223afd3cbc384226c8296f6ab27_JaffaCakes118.html

  • Size

    35KB

  • MD5

    01113223afd3cbc384226c8296f6ab27

  • SHA1

    eedb57ccef6221dc862720672c458eb79463882b

  • SHA256

    33503794a28cfc15b1129bc303caa715695cb1ede954d851c6c5c3d52e84a867

  • SHA512

    6848bff9f76c7118938b2db02499543ef17e9083a8832f97957920d3c2b6d0b42121a4058ef871a7a4406a7d91145f9faddb0fb236f3719a809bd5097f15c26e

  • SSDEEP

    768:zwx/MDTHas88hARKZPXVE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6TwZOU6DJtxo6lLC:Q/7bJxNVMuvSe/I8qK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\01113223afd3cbc384226c8296f6ab27_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1628
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1628 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3024

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    069d0310ee29b489c012daa53bbb802d

    SHA1

    4d1a5fa55d576282b7f308cc8c1fe1ad07ffbc2b

    SHA256

    8dfae75ff4c447e989ab690b07a4eff686c15a190fdcfe10a4b774eacd029a1f

    SHA512

    941a3257318a76ac1a939a2c64a9a93764a4f745fecab2ae5b9a7481c85f22f115cccc016917f94ff6e8beef62a6ce23b862bc7507bfe6355649f1baac2a0972

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    724B

    MD5

    8202a1cd02e7d69597995cabbe881a12

    SHA1

    8858d9d934b7aa9330ee73de6c476acf19929ff6

    SHA256

    58f381c3a0a0ace6321da22e40bd44a597bd98b9c9390ab9258426b5cf75a7a5

    SHA512

    97ba9fceab995d4bef706f8deef99e06862999734ebe6a05832c710104479c6337cbf0a76e1c1e0f91566a61334dc100d837dfd049e20da765fe49def684f9c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    adc9455b7725d998549b43048c3f4971

    SHA1

    88f5258d6de4184c07e4e4646205c420a2e655b5

    SHA256

    b1cd5820f3eafb19d9f20cb51ca9268f1c0c9b638de31f6b933da50e3f45c6df

    SHA512

    38ae43cae27cfa220c1f76e982d60a14fcae1a7f4b6d4105f9cb66bd204207a8cb9af5740355b320b2ade09e75242a3aac0538bda246d700f144d50fb29e9403

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    b8289af3c66767e2bb91520727b055f1

    SHA1

    1bf60c7aca4677abb94ad9849f26ef54f1bd73c7

    SHA256

    c7d1a6532db3cfdc38d4e32bed136c2f6bc6fd3593427c9ce974bda7b047aaf5

    SHA512

    d7e0ef1c79c0e6458da00fcef9629ecf728e90381bf6cca2e344c2525c800e1d052ed0d76c77072cf063db7045acfa3fe5d0760e39a710c984aa78a3fc986c33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    612ebbb9c25642d8f93ad018844d30ce

    SHA1

    c24289920d32263c44cb0768c840fc9ef2f9a43d

    SHA256

    fe592da725d6d77961eccbc5f41451ac9a4740a84f1fedba41d4477218bc729b

    SHA512

    8f86253b8054a736d1b1be1a2874bb1bb345ecdcd66813523fe73c51c0937044a9ff13771ab4da3d50f447bbf26cf958acad975888bd6e3929e7b947a657b374

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cda9d7ef4fb149cecb7f9175c18b93b3

    SHA1

    f77ca9fb4870aca684a73a08644554d5afa71796

    SHA256

    5a9265c50f0ebeb76a038485ac3b6e3cae83aac79865cc60e4b0161bfd21b0b1

    SHA512

    87b03e4c2b718d63ad839112f0f3f6a8e7316ba3cbbadce31dffc069e3481a634bb1a092b876a8d3d22c64b7ce7f770dc162feb3126d24fbc52573509874ec8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a04548e1e841cd7c590c0c3341a71752

    SHA1

    8ef540e0169da9eadc185b3ecde77b8fe458357a

    SHA256

    2920a04f54dc370efce580a7418f313de9fa816dc8d9f9b498a97b84ab77329e

    SHA512

    b5303f95e6ebfaff41af662d358208c114391ccbfa56d19185367fda6976af910896dd1adeff97be4d0275c1f9c63bceea9c8bdf0a820ffc8af0d89c4075a079

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09d99ec84f7e080127fce1e3a7c7c138

    SHA1

    9279e94331569595b1a08d9bbca4e389a84fe479

    SHA256

    72ebac798465db62b67757941cb6ed4f4031be7db3ab2a0dd30dfafe63dd3ff5

    SHA512

    1119751aca175f6c9ad8fb111106300baee0c3e598664dca1a8f1af6ffdcadbda9c05cec5f35733614d171ba15b40dbe50b1e8136ec34448b72aafe709288d24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b50f40c472fbec9b8bbca77fb78f0a08

    SHA1

    b99c3e0e570a3e92147fb60da5128fb456230c36

    SHA256

    bea2636c5a21dde8dbc30c82bc28863076afe55e68af5dc06b063247afbdb276

    SHA512

    eed8052641dddeae7ab9c8101b417475a29360a25308f9773e49b013786369eda1619f2598d31a3db01e954bf161363a8ef1cf2afd9d15ff75fd62555d003a84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dbfe0c4a205c0463a211a3818282ec5d

    SHA1

    b86b00694a2f369c6b983278de093b05e5eb3507

    SHA256

    55c657494e402875c13e39cd2347461f10cbb3363ee0070e749fc4a2191facd6

    SHA512

    ef978bdca67ed17403610ba3b741a5d335039b89005f2d4bd2e07a6111576e9a6045fcafaaee43c0f1440714fa9edbbc34d8fd3b88d54a130ca30a8aa1695e37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6fb8e5633a6a7e1b062a5eacccdb802

    SHA1

    1184f3562c576ec7b9b5a77eea5dc8b6a0022677

    SHA256

    a57574be5120b36bf03898f7b8f1cd25a9774126c138cdef7fa3ed17b7bdb703

    SHA512

    86f780225895ff7ac6e3d0acff74e97798ce1543cb33faefc409c0820a8af2fff8301a1b6fce741f264dbcdafbfc5444033a3d5b94c63b007e759e6872921030

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13e5642f0cc8122139e072cf75c599aa

    SHA1

    95f1a78abd91a07dd04698821dc3e6010ec56e65

    SHA256

    88998abe90a113cd4c23b2fba45283336c8a753cff7fa8d097f5361f7e82bd8b

    SHA512

    f0bcd34fbc8d863b21e4c4997a699186243d377407895a1cb394def0cb93572730e0a030bdf497ea53da6986d7d28d83b9e2c3bf8ce6d35c95de1a5bbd0276e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb6f967623ecd54f118468563a10f888

    SHA1

    d2fae288822781d44468a8c13301ddb626660be7

    SHA256

    821c967d79e7c81c3c80f3af3528e9b52986bc489c4ef0b46f06be2dc7c79ac3

    SHA512

    f9d306ccfbc965e18e05c2e6fa3d06e7382a583e38348d5a0752965dc3282b264aeacace0dfbf6f4de7cb51223230864a4397bfbad2077d1724fdcd29e957647

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23d611d2f01376decd526031f497e9b2

    SHA1

    6c42e28517d4becfe23b3584865460570dcd06c2

    SHA256

    cf463f913ab291266d316df80c01312f4e70e54c5a78952ecb7a9922c8072cc3

    SHA512

    5f28a104095d437af43565f8074737150a277f1dacb338ef94ddee12771a0c00330010c604699e3e89f1300be88910d54d77dcbb158a75894fd3a12c9644188b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1be2c13e0581c5efe7ebaca7dbf433d7

    SHA1

    f25983cddd8660ce25200a55808c2832fad5ff88

    SHA256

    e2aafbc6100a340ac346bfd7a431de17d2e31d4a34f3f23e4e1bcc115b5baed6

    SHA512

    0d3abb8eb2fcb492c47bb3ad088f5db49560b75bb124617d77270a54b7c4f6a17ca65d9ae25a1ce6bb67d93b034b810a01512b07a3f572a8a704dd58c46c5489

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ffc5588a1d40a4100c43ab649c21150

    SHA1

    0200b808785747c0b5e7bfa3e2b89c33864b4630

    SHA256

    64287bf96d10cebd6376d7062a1f76efa11e95f1f529992a9f00c711ddd6ac01

    SHA512

    befcd4b9d8c393ad92680ed49d211076161386ae35a2853c8261a4ef4525ca285d310ed3b5935bc329660a85f3eaa44ef14e50ebde70fe920eabc90e5752f94d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94331e659a3085df67c39350ccd6f7be

    SHA1

    4894edca88d78e87ff94f6f1e368057d50a5a753

    SHA256

    bd4cdde022a80a2e0014085514acfa6db1289cb89e10966e49541a8485c9b89f

    SHA512

    c29215d949cac4ffbc93f8ce419226d83954e7ae1d302aacb1bda76c689dfc867ee4f5c8806b3da3782d22e08189f89c45a7525be5e385f634bcc9af49a11def

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ed9bb392179a48ec2bb4bdd1a5cbf34

    SHA1

    c18a53ae75f35045568701824e5b86bb81799ee5

    SHA256

    43f7e8a56a8e65bddf36e5213ab30dff1d7c22f5c33d2958e11ff67907e0a8e5

    SHA512

    cf72e02533ce9c7ed44c7e777f752c29d6eb822612d18477679181eea9ffe4f595a4edc86d4d09932267ec8cb64f5d89395e95e9e2311c9d8834cc4fffb6ee11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92cdff870c08986970c4a0e64e457bb4

    SHA1

    4b708bdb849f8064be74255eae0a368191d7e76d

    SHA256

    7fcea0fddf22121babba65bea02ce23000a9d5b08c60f151573e808a67603b38

    SHA512

    6c68e2ffaca74796817b0b11d1a70132ff653f7dbbee7b489ec0b40d738b4f33194547844473c2d0e548eed5d0243d04e3229eac9070be3427826d5f52da2504

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7cfa82c72444755fce33b83947869e82

    SHA1

    d3be2291f8a2c8d5ea997e9f3728224faf7d9ebb

    SHA256

    37c249f20d58e3d2cb17afa53f2535b8db5b6d0099dc7adeb2b551f3a164cd4a

    SHA512

    a3a56312798555fb36372609740a160a7707b03468bad3975248bc0e897851a8a0d5c4441dcaa70e5c1345ea961d131fcf72ba960e2bd2b94a04b46ab26ebf3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39a2b01688ada9302d013e0433f54b2f

    SHA1

    b74b9f00785e14e209a05932dd1d0e0b9d02c517

    SHA256

    4729781cd136a65f17c0b24522a4abacd69325541e5a79cd93691f3e4c104bb3

    SHA512

    3dd2ced00d6f28b0ba91a1dc6f6db38817d7b43b8e78b68b468d799fc5fe8a090fcc5debfe21776bfd247e5413fa8a773f9d83c2cc6cf3843534b1d38cf970f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed21221b3372717904c7228503edf84a

    SHA1

    d03e6ad5308c4b516a240672e852e773fdf96721

    SHA256

    2dc944915e64111bc03d87d4b29caaffd7cc973fe9cd141118fcbd5f77488f92

    SHA512

    59c2e17c74f8527562e59952ad0889960471576c882125e0ecc8c6e98785826e1d0c3c5547a6f043b7b8598f1089f3aa26719a5dc38c3c62b24ea7e98fb8c124

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    220cc90b0fbcba4d26eb61e9d37e44bf

    SHA1

    d0182e93cf5711b10401a33c05f40f3b11d4ad07

    SHA256

    4752f4ff41bc458326b5307c45d61e749360b84685a5673c6811820ed7001ac6

    SHA512

    00949ae6d2f75671c99c2f2a1e2ff5c9b2016481c6613352cafe4b98adee44d3e3d5fa369f25e2242310049527c3c20641e814fc37608b851fde80d523241147

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d38f3b591ae747e056eb37c046f02f5a

    SHA1

    24ecbd9359e5a1fd71b32e934fb37a776301f752

    SHA256

    1fefdc5c55a0c28caada24e2d8a20308f810d420b13259f8b7d954ffdfb66698

    SHA512

    a27005e00d687bb2830e0fa4f09633c14a00a139a8078bee63fc330055c2a9cd3bc181e208f8afacd501c50006dd1e66d4264e73d4d54b26abd7ba8ff1b1f917

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

    Filesize

    482B

    MD5

    ae9070d269c22ec7051d16461ab9928f

    SHA1

    4b248c22e64f700048ab5b321c4404cb7d2472ce

    SHA256

    e77ccda25cbb0789521f82883b1c4ec4535e90997cc5e089b7e0d39e891cdb67

    SHA512

    4334e96ac15d234d98f75c8eac5f6fb6636bb444cba598b57444170963d77ea3a3fe95bf5df9bb8b1e1c3c4cbd3664d9a3f1814bc5bac88da8d4d02cce001408

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    392B

    MD5

    799d5e828afd80247b1247ead2cb494e

    SHA1

    dedf37c010ece014ec764fff0511f73d50a8ce0e

    SHA256

    8eeacad62a5cf2a3c4e2261847aebc6be9ecc5a4208a0fcd142cf9d49eafbbae

    SHA512

    9e60d8da2d95347071dcd49cddb208fa215bf7989b6c22f1b26159cbdc994e4553a9966e0c74758615018f5f96fee837ac1a4420d93d212db6514416fff56210

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    5a647fb11a50df38ceb3aba5eda017e0

    SHA1

    42a5147c59865d27fcd8f3abe9955354a4630647

    SHA256

    7e257760b5804590c5f0fc95b00b3ac0935f21f13430942f21ea302e9d4f0621

    SHA512

    caf1d6ea580a83daf6ccaf50ca418eb9799355b6b70738a7f2a1b8c597882a0d5be7eed64b30a954bc8e997240437318c175bae32254fc9721f84aef8b087abb

  • C:\Users\Admin\AppData\Local\Temp\Cab2271.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab2355.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2275.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar2368.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a