Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    30/04/2024, 13:50

General

  • Target

    09e26b1c5608bd845aea58dba596d603_JaffaCakes118.html

  • Size

    156KB

  • MD5

    09e26b1c5608bd845aea58dba596d603

  • SHA1

    3bdac3932166add727dad08f769984f643762cfd

  • SHA256

    31adfe42db31398fb09f3346bb8e7d11288699f5b3e59e70e240ea0bafd7a4ac

  • SHA512

    c9de8f92cf95b11e290012c2ee5258b2ff6176f364531b9e381d1bd347b1901967caf313cd2c074890aca0cbe6ccf32dbe7151a833c992592c7c71dadbd50daf

  • SSDEEP

    1536:CkkS5lrLHa3onzkvn89tF0+SYuW2pwmUTAPveX8og/pKk1aVz9V9V97SkrUfNc/f:CkkS5lHIo4nqtFxyFCeUoWAqXkfI9

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\09e26b1c5608bd845aea58dba596d603_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2168
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2168 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1796

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    76dbee626e092859031c8c555e746371

    SHA1

    3c1bbbcb55744d1af5ea5fc3e8e4fcdeecdbbb1d

    SHA256

    4b7c1d94320e9ed3400c1425db6126fb67802d6f88be1469da35017228e61e11

    SHA512

    a151dd4142e1e0c39740972ea63dbfd2d9ff602c2c1a8ba2ef420e0b680ced539d4b43e2a3b0f240f7260b0f0ec0025ffbe8d9c225ce68f2886ff88ffd46805f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    9de7f2497f6c0abf9f1fcee801a77e13

    SHA1

    106f41c27204faeaf433885457a8823bfef6e5b8

    SHA256

    a8d8d91c2ad05be12627d958fe8e5182205021b737dca79d662ad10b4a455e8e

    SHA512

    c2baad280f4b8ba13c0bfe4360a5e390a8cbcc64b51ba3fc57fe38bae35a987f20c13baa1fdc937ddb9f736d25052edecac7db68b3fbb3272cad294790091512

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a678b8d317d416dc535cb2b3772c33a2

    SHA1

    a19c184f3bf168e99f2a9173574decdedd80a5ca

    SHA256

    93d1029d0e127af1f54c09433c740fa1dc8374cfa0eefd870c6ba5174dbfa7ae

    SHA512

    6c1c233a168e4329e7854e7e92c7c8f64b4d134bdbd086c61a87294e20c2e462bc859794352da9164985615e9af4ef2dc08a1cfc579cbddbba0453fdd3c22c0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0823c24349ebaf10bc3299ecdaa5302

    SHA1

    80c1142e1286f4d7236716b2fe5aa0c8b0415411

    SHA256

    da81df46e143e455a3aa405b6d5b36542ed2fc7e74939c3da1165bf11440e37f

    SHA512

    296c88e80ebda458d33d2d772135d1731a739a9de58caeab34ee08168307c938fe7b351fe69075e8497dec297a474ffe05f2fda85ec851b8def721ad3a2b2f13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3af81f99b9069d0960c733b558264bba

    SHA1

    8b044205a6be2897e687d37f2f46a7ac96bd5488

    SHA256

    6c755d018c5300ddc7c7d0c463e33388c02c992f5db0ceddabc55ff712cfbf95

    SHA512

    f771f8211be3d207dbda3b3a37ae4ea1677b862ad437570d319f9660bda58bdf855ef8710994e0b9a3aa9b151bfa6cb400d92a8eb0cbac55d3078aa4919540f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c17373fcad34ab4b1401fb77665de91a

    SHA1

    45bacada3b87e12320a5a7d06d14f2fcacf64321

    SHA256

    226cb8a49c7d25a1429b5670ba2b884ab697158f8da5138fcb8671e1985e5e50

    SHA512

    a46f7196ce8e09e0ee181bbf5892fcc657c341e7c0f7dd12daa458cf35099132b712de8d42edffa1de7f9b94605306f6b17fd301643e8cf4df5bc0c21f23b6aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a313268f473572585633f09792935bbf

    SHA1

    946ddc66f935611e33451be2442418ea79ccde18

    SHA256

    58c7659df41a02585358ccae9d351dc2506c7cfe90b793500a3b05951f6a4337

    SHA512

    ebaabdc46a4d820f5110b887955bb2932f369d8b135f44af7b622009bc147b34794683aa145170c3e1895183031b286dd10683f7bc457605e77a035ed26e3f25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e479710c095572bb931b62a353b4309

    SHA1

    d32199e7697c9d6b0a7c3801221ad7c682fab8c1

    SHA256

    74e130e0414059a38c01e19d576175f0df79a9dad64b054931611b44cc483eda

    SHA512

    9368ee47cf0b5699a484bea64ffa52086c79061cefb6b2183a35ea38ceb573669327c5732fb27737f3e18c8b3fb68525e7e726d7229bf3e3e718950943374cb3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db2fbb480b61c79fa31fb40040c80a28

    SHA1

    233a9438c6280edebf8cfb085d3c47bbfec18274

    SHA256

    cc5ba86a2d39aa7f2c1814ca3e545dda17b0be3a5f45546a5fe5be81de5c6bf3

    SHA512

    43c7c5947b6cc6f1935f0d03d426e5a969ee229504c330f1d0b913aeb98ef59abb4abf50630592d3350ee33caf67cdb1095d7466ace6faf82e736bf2a2cefd40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21616c94a3c5df6aacf72aed38698a96

    SHA1

    a8aca78982d550df42e08c0a6467d76aa43a4c6a

    SHA256

    2411e3dd94c1b94fc3a75295f326aa91767eeeb9189e3f49c6fb7d4ee957367c

    SHA512

    e57816287e974bd6768a054b50e906b85d98ac9fbed89c8fa2cf066cea8bfae15d7a092e69dff4f55507c0401947c7e699eae1f6798853eb4b35ac77ef37e832

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96cd7924416e354cc90b17a3b91e2de6

    SHA1

    958b07c9d0db0518b441096f25f26e6ff04ba73a

    SHA256

    642b57f5b4b5fcfe6ce61b9c32dd7e6cb385ed70c4c3840b0d7f3c50a4326bea

    SHA512

    b655531705e52d24aa53a157a6a58beaced716372cbecf0cc79c18d808c60f75fe46a4fbf9c340ce14a2970f1eea3b91f4c8a91775e5df70945deb9cb0e81fd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eaac0a65bb5211eb795cbb69f3d4eed1

    SHA1

    245c9941930f9f17f212268e68d0a5ab6df947d7

    SHA256

    fb013b37cf6a4377154f1cd209a7c5dbe57faca75954cc85d70e4b94d3dbb2ee

    SHA512

    a8e1702251fb53246267e503ec74f6512505868aef8eb357a9d5acd565fb0270218e5060e21604c43dbaef864070a8d454921dd6b50af1d5e37cb61110f43642

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    007cc475e4c86ebd8fd6a802ca539752

    SHA1

    4967bf311c3e6a1aa12b08b8b7640362281ac81a

    SHA256

    f5b50e6d2fcf5be8ecb9270a9d133b352a3fc7301577a60ad70145eb96f3dbcc

    SHA512

    ae34c0114f88b6a2ab6aa0423f8c0c35b3211c56e08d00c184bcd169d8ebce5a1dea5322b74260a597216bb1aa9d47f8aa9103824dd3f72622edc9345463c893

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f20a18241c4bb7498980832a9b8e95e

    SHA1

    126ab45df2524ba98d564f1656c88e6fffd5f615

    SHA256

    bc00e88715acc607ff0f653c7efd82c11c455bb403a77ad7c2af183fd3508421

    SHA512

    de5094f71c3e9d5ddbf68a2183c1decbd9c669118ee839e467432eed5eebbd9cd8374af6fdbbffa2d5587bc6a4c84855aab0eed50880e7dd94b32c7ce4dc4d7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7abcf3ff50da989e466b9054de9b0efc

    SHA1

    481c60e677f9f9592035113086b4d82bb7b43c9d

    SHA256

    cdc6b4174561be9d021c59a07dc87f22f35d1a80513cd37145a952afe944d767

    SHA512

    7f4ccbdf289ed3058064f0f15e45763211e5926f39b9d74f409a570436ee8071f2674fb91813d0244b887f13281c4fe3bce95025a96def42ed34e428c3376ec4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2138198fab8cb5e71c9e22c80d0d1595

    SHA1

    f51789875edd74f14052b46de68645822485fd9c

    SHA256

    3bb90d756bd475c9c0c67101e5e81d6f456b203198a057d765c6a24cda26d3b1

    SHA512

    c80cc5348eaeee6500c7f11a48843bd8eba6033816bca46f30463c878eb1848902a556bd65b6812775eb4eae7930ddafbeb46d4e3fb8c47ee9d3ba80ffad5d0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4b313edab9c6e6da6f1cff79ce92f70

    SHA1

    12c96a2e33012de8e33a866683e2d3539a8b3d58

    SHA256

    28192446190baa09d81745354981a88bfda5f90b85f5268b9163073e5337e4da

    SHA512

    9ec76f5f648051ba7fffc178352c2567d723a4f945c72378b9e550bfed4c52abb05981565aafdf156966bcd1ea1a83f295a15a1d8489c1f543adbbccbd6b53dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f35df3477b988d23dc3e2ebed7308a86

    SHA1

    0d27c5f498ac2e2c4739978b744e983084d3cd5c

    SHA256

    e27b2c8254f44e74e46e9479f41c302fd437e712b4a61694614693ad704f0e9c

    SHA512

    150e3579526ad053584b21a8a03b3873ffabd058fdc6b9206efbcf8d750704ba96ddbd94503ea40b727a4e4ae42d11d9b2e303bf64165454b73b38f710ac5847

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89fc23be1a1b7e807d48ad2aa448c556

    SHA1

    0926e1ced99bfa5e62c55b342c5a1fa1968f08df

    SHA256

    92f4afdb1007a295831bd2604ec1cbf09feab0bd287026c8a418c40f98d98b51

    SHA512

    2aacc60f92273757775707d011f16abd5d5f2ee75632bb9150299e67185b1c81650ccbc9eb9fde03d580dde8844d707e2ab44bb9474d5c5a1daba5f8fb73a07b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af90b0484fa1ca10b47481822c2e6934

    SHA1

    ad6374ecd3cbe10a0aea5516fcecc39abe06fc86

    SHA256

    ea77c14fd577155a1440c58368407638ae1fee749c1978d014b20f5d8e8588e1

    SHA512

    e57b5e725a488e750c2af698e79f0fd82fe7196ed3645f90630c5a1a8469c70379ea7d68c0a3badfb030195446792caa04daa5507f999854f2aeecc0d54391f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05604d873051da22c5da9ae5915681bb

    SHA1

    b25ff87f1ac2cf889f6727a5b6f1fd61482f2a20

    SHA256

    bd69ac1ff6dc3c10b5ae7379e03b642fa304a7f81a580a55cb358ac7eaa13381

    SHA512

    8f64a164d1fc7c66c536e77a4cb1655c8fb1b4c7939e99a76ce840e3025fbbfaf0c4ea4d7187cc5ae08c0ff579da58aa14d9abcc70a3ccc702fff945ef102ed3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b242a2130a6cb4b4136bef68c0ec7bca

    SHA1

    aef8cd221d743d1911f345beedff75f95983d8ad

    SHA256

    be4d9b76cd960c1462ab9af4e7853fe997c9666b23c62ff2bb6d10b84845dd29

    SHA512

    25d6a8660210bf07490de0a754aaddf7d9fb7ce43089367df70172dd22c7f86e7915238aea8ad700f2ff3c828d30520a94fe57bbd539d9cab9d18c997d2e0c09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4edac65aa4aa925f7e3f2bec7b2fd55

    SHA1

    47a0a085537eff23274da99903e542cb6838b9ec

    SHA256

    018bc8249855e995d4b6cd78216eedcb0b987b404cc5cecfbe56b77ccf358a0f

    SHA512

    dec51bf28f19f72aa1642183501f4ecd86a917f0c1593c4404f6ca727ec6319c15b2e48d85005a8a54afdfecf929600f854a6ca272edc3db8d006c7622ab2138

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    27abc612395d8834d4a1a3430962a2e9

    SHA1

    6ec2b8467bc3c27d7de389d8488d43e304d993f4

    SHA256

    69f41c5ff154b0192cc58623f2cb7928003aabe860731f653396b48f53f2749d

    SHA512

    175bdd1c9a5bd1b7eabe33dc52b629c515852af45cdfd193cb5ac2eac31a222ad2360d0dadbfc362daa2f8f7aeeb53329a23cdfa54ed3a9607d10682d98e6317

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8ADCJI8Z\cb=gapi[1].js

    Filesize

    133KB

    MD5

    4d1bd282f5a3799d4e2880cf69af9269

    SHA1

    2ede61be138a7beaa7d6214aa278479dce258adb

    SHA256

    5e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693

    SHA512

    615556b06959aae4229b228cd023f15526256311b5e06dc3c1b122dcbe1ff2f01863e09f5b86f600bcee885f180b5148e7813fde76d877b3e4a114a73169c349

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OORQXHVT\platform_gapi.iframes.style.common[1].js

    Filesize

    54KB

    MD5

    7ef4bc18139bcdbdd14c5b58b0955a67

    SHA1

    afe44fd9a877f81a3c36f571c0fc934324c6cbd7

    SHA256

    192bc707852c5986f930528442d88a79e5bcf4513aacc2b722a3c5e964501838

    SHA512

    6c2920e80e4d5059588a32f75bc2b5dcc19f8d68224c0935d74f9fbf49476ca5b1ce43c279768f3d36871dfcec39f36db3fcad559c2f93cc540154cdbb04dec2

  • C:\Users\Admin\AppData\Local\Temp\Tar219B.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a