Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01/05/2024, 17:29

General

  • Target

    0c67c97ac280ffa7c5f69aadc944047d_JaffaCakes118.html

  • Size

    36KB

  • MD5

    0c67c97ac280ffa7c5f69aadc944047d

  • SHA1

    eb222a5163fe09a682caa46ca1db247d58acf258

  • SHA256

    523affc8c4b2ee7d24b10677eaaec7fb1dca79e7292541a72accb7c8794944cf

  • SHA512

    7924f2b7298eb3d2460c92ffe6870de64ab569b8ab6cdcab4b9ec94bceae397190c455d505af8bcf242ad851030722336b95502f7404ce5e9a401201fe200b4a

  • SSDEEP

    768:zwx/MDTHUO88hARtZPXYE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6TJZOV6DJtxo6qLQ:Q/PbJxNVbuCS+/E89K

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0c67c97ac280ffa7c5f69aadc944047d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1740
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1740 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2984

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    724B

    MD5

    8202a1cd02e7d69597995cabbe881a12

    SHA1

    8858d9d934b7aa9330ee73de6c476acf19929ff6

    SHA256

    58f381c3a0a0ace6321da22e40bd44a597bd98b9c9390ab9258426b5cf75a7a5

    SHA512

    97ba9fceab995d4bef706f8deef99e06862999734ebe6a05832c710104479c6337cbf0a76e1c1e0f91566a61334dc100d837dfd049e20da765fe49def684f9c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    808f93d982e9c189fc2ffb0245e35ca7

    SHA1

    77d735ad855134e20a2d20afadbf2f3161d60369

    SHA256

    51b228b7f83ab4f02e44048f0479c39ce027c82c4a82d69edaa9b1086e961e3f

    SHA512

    5f2e3535e31502cc7b49b06231ffddd84cd5b1ffb3361a2a76913e4060dfe4970dac594b0e22f5991211aeba049f8e2a6c0ac34ccbcc92385d3cd2e3bc3f0926

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    448e7d96d7e8119706ef5e4e4ee1e5af

    SHA1

    4feef92c65593734f465e30bba09e7320996cd5e

    SHA256

    69d7f82343a5819127ee7b1e959baef1abf7717f1a253383cd512078d14203de

    SHA512

    1a821aea7eb47ed4f251be39815075aa49f185b10ab034810037214657aaa22ca02380deb220e8c025ed87b3255be5ae4784875882a418f29792d49d53c450cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f6e5a441df4406e6fbca51b898071af

    SHA1

    942f0e015ff0baef8198c5ece16fb1a46ff22ddd

    SHA256

    4cfe6a0e47148eb3802f9b36b58645ff315c1d59df1343ed184d31e4374543f1

    SHA512

    6908aedef8baa514d8bdf95b376314e2e567310129f65e3217d05100484c01c4a1e2e6ad59a527e71df89417e3775a35529925780464b02770677e87e9c5bc77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    923304ea9dc90e845a3a3b4b459358e3

    SHA1

    360dec94e77fee5e52aed71ec7fbc5815f2d44e0

    SHA256

    740490f8fae3954f7d05e176ee7c261d9b8742d001442e0547ca4fb634b621ec

    SHA512

    33d074832e9e2edb6c809bde580d1ebd457a0720c4d4b82f40f0a4018796d7c21830280b72da9ecd8e17c2115c21eb2c68f4dec13c65beb8da1cb592234df41f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8069d3376a97c27cae923c7b4f47a8b3

    SHA1

    2e7fb3852bca973a5dc2f4ebb01aee07a42fdf7b

    SHA256

    8fc135943870aec4f2f90cedf7b02cc843c38638c4a5b3857d70e913bf34782c

    SHA512

    8f7df5f7399a1413bab25fc151a6707ce7f634476ff13fdc8aca9e99537ac9aa3f5c612c0ac8599ddeed13ce5e2744205cbee83b23bf08ffcc050ff826e175e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50da93b9d67200015f8d97133467a2a1

    SHA1

    3332bedec720aa33c9dfba8d9e0d40eace253408

    SHA256

    c2844cade5b6dde721e9db045f3cf102994d421e80f5cc6d1097bc03be7a1c86

    SHA512

    952b33ba0dae4b58e7b52d81fc0521b0447e749503d1642ef7ccf8c72d4ee4cc94c6f24c765d88111dfaf4883197ae688fa06a65df9e387731be4fcae237f2aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    822b9101ba8a1409d9fc309ab3610c55

    SHA1

    8f2cb83ec841b9f6ec42a378a2b273dbe661a72b

    SHA256

    365270e0c81137ac6bb85cbc3fc7278ceb7dba6d95b5b347d45f734c0a492ede

    SHA512

    4e3efe76b0d83e7cb8ba56f25e673abfd7986f7b3f7f0a225c5469aab326b4a70c57598bad206e095c8bfc2c268ac479bf6c13f13dd57a9a1f2bdda5dceeb70f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4766c7d0db1ea5fa994f029446ee546b

    SHA1

    3b96abd7e7d00a2c9fd45dc55124fe8ed51177fb

    SHA256

    094164e3428574dcbc60f96d142b360f48a5766a60dd9bd769363d7701d2a11c

    SHA512

    0b1b3e387ade6809e313fc57d8684c3e9996b309b7a7f78b32605a51abe312840146467ff9686b0c8cf6a73228695295cd3f806d0fdd6a55ab3d41552b02690a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a965c0e4940648937446e68d90b6701

    SHA1

    620e414674feaf56c49329de6c4ee4d525f583e3

    SHA256

    87c08f2cc763f509a18335498720707509da01915ff510d396e8370f117d906e

    SHA512

    dd94a8c1cc454f33a92194439d055393267c082279ae0565a5643b614a74c11b0e169ede0d1907563c4e8179cd4dd0e7e593a66724c36376bb8f565287e0fa10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a29c009eb95c53b0b289c1c8e6f22c7c

    SHA1

    4f67687b30e2a5d5889eb4404e08e82d531ff836

    SHA256

    af9713352f75adb336c63f21bad8df0c78bb57b69c2e3783af5d850b9bbf9df9

    SHA512

    2e2a879efb11b26a46c0e77a1bdbf3c9b59f9b6d9fede14d263aa7ef3db7e27050402c2f13bc68ae4dd8f69e47988656aec4dbc135b1bc03756710eb3b7a0d90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08ee37686c8dbe5960560785fac7f48e

    SHA1

    e5702d7cd6ea43796d4bfeb9adfa20bf8070dbb8

    SHA256

    8eca2a02decef809fc18ff16b7fd40ff7715d78c2fc7611d273dd2fde614bb84

    SHA512

    d923fc71b6f16ce43192982394020894a694bb70d4acdfd88f33e6b3fc4fdd03bd579b8727114fae622ab396ff2d4e570236f514c1d2fc3e6be4c11b8b07a9ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    afd590785bdd0c9cedd8d503aacf316e

    SHA1

    2cf9f2603abb0d4c801ee3f18f1c6107f534b550

    SHA256

    27326852321dd5231e5596502a0c4c10f42fcb8355bd963bfa126b980b0894a3

    SHA512

    abbf27a5cac740f812b0280b1183529acaa4b9a2c3525a7ee1b1debfd4222274ca9214380e228ab703f4a7f3b1e0819a813de01e2c0be7edfc028e56a4e8373c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    686ee9b10aa86c4945175f7f815d0cef

    SHA1

    cd19dde89463898174061a28997c4331688fa485

    SHA256

    4545eda19ca1fe3a8f524284741db0de0b25987912d9cc0b10ca0b24cbfa9832

    SHA512

    d046b4bcc424b8b650e88ff222eeedf54ad217fc92738631117844797f256dc35ef2b25961a110b809708a63d5210a52d8d8763741144e5e8dd62e411a0c8d47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7588150b24054c76d020490f910606d

    SHA1

    20775bf4c5a958bbaed4ea231010276eff07c80f

    SHA256

    5cc6d8b732e298bda753ed25809529c79e05c5f6fe52e640e0b4c871e68f663b

    SHA512

    0d670d13e1ff1f5959fe08ec95d13896afe2013f4e5d623ba669ad624608ce5ad098628a6d098267b28285ffeb48fe664a31a1408aada6c271f017dccecb37bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1779b355dd933133144401508122a64d

    SHA1

    47b30cd28ce7598931ad68eb69c54596aacd6e86

    SHA256

    143d62c46e99ea51c47321828e7e18679f2123d52bdbe5a9fd7b41424a9292fc

    SHA512

    ecb41af073ce3f42fe9a8755975c5aa378622ccc34ec31dcb1375af5614680edd44ce21561145c40ef02722ed9ac9104cff43ae3e3f787ab13c9b0172e40e25c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eef348609b010a74f008381b6c3ee2b6

    SHA1

    12e915b95b24cf2c49f1a0a600ab5b996a91d2e9

    SHA256

    a40b2e72464858294db066670ae954f7e2c1ae548bc04cdfa8fa2f8b645d55bf

    SHA512

    8a695f0db33c5a99a4aa60a7976e9a93f9c6344261e2d6c02abd953b47026c262d2b94f7f81bc7654ee29c00dad036a1ee53a19a962cb4c7692f53ba34c31974

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee6d51f55b91922298122b911291a61f

    SHA1

    634a80d0d787cc84abfd0237c31375a48136f094

    SHA256

    4b96e4a00605092235ede4afe900ef0f901487ed6863194d2be11d5353b8c7cb

    SHA512

    57ad91f79517b9b369cd1ba6cadc4f6fb91f1b67ff44fcfe21dd7d00abd7ac6c69f3b8afdff18a24f54f68724ccf7e7484b512271bb3801b433c33a0f45c83c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2678b774489f100a0f82be94e3301e05

    SHA1

    c16ba1bd2b532fda74441c1abe2cdf373b9b2923

    SHA256

    5eed2b33cb4d13db35cd7d168fccb9b7983452f78a46a1a8ad991b1e5f2d55c3

    SHA512

    ec5f31d8240734811962b8aff736352f3aeecc90ddfc133927edb9da5f4f24c1ebae2a0adcfb5c57ed7dde24c9b1705982918198f416685590b73335ed7b1adb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    546b7ec6137e518d3709ff9889b4551f

    SHA1

    8993e5e41c7f3a9a5dfc079cb6c70eada7a7dd8c

    SHA256

    3209f3de9603ac30b2f311eaf8dd8ba9a89024551b97336db1ea24c8e86677da

    SHA512

    413e0992761cb6ef978ee5f57b522d7f560730f71c308d64d46f6c0bdb6e0dddbca42cedf74c424d00d965c0e69df6ce0a1e33b89f3995f2ac03b31924ea92d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78445d4e88f0daa98055f4f0cd2cf724

    SHA1

    7d9bed0df97f69e628c51ecace4eb16782b127c1

    SHA256

    291560ec619bb5f1255700b721e79963dcfbee960bd53a239bfd7a90257f9810

    SHA512

    28b7fc02474c6b5f407ed313f9fe442ce6d7d227adbac6d921b4b42f35323ae8ddd94ad8b4b64bbe78a52e93fd2f76e8eea6be87ee32c139ef0ff19a3f2e0e23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2f9db34b8250e209dccc652c312fb858

    SHA1

    43bf59d56191b68c5f4ca0df543d23135052ecd6

    SHA256

    fa475caeec8628ba2c2900da54d3b017007280963529153854b757165bd51610

    SHA512

    0697f7b9e660d5906937c25429a0cb45036a348aa35fe9b883d20ce9e6467176303286d30c791695f015ba3baeef47e8fedae54c60208bf2eaff5d15fc1ff92f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    480B

    MD5

    7afb38e770d4b80cd14614c70985679b

    SHA1

    d53ae8f282b0ce843b70049efbbc6a73f1fd0cd6

    SHA256

    0f55447a5a6b446350126cc2828d22fa2b4c6d46e0f935e088976466d36bd2fe

    SHA512

    74ca835203c724e376c0ae0deb3d17e8c8c3b8eb28a597a899cdb7d4baaf8e9f598a3843152a280f868ea37e96f6d5a5d08f7263321de43a4f92a53482419b8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    e5e19c50f2484b0ba474a921b1e32524

    SHA1

    a50ceb8c8708522bebd417a8c51f308b0aa3dac1

    SHA256

    00e5231e6de66dbe8f93a10c18c744643645d1612e6e57c0d218e81349cd02e3

    SHA512

    2371170fa71e5ea75b5f2be71c6b963d308a046169a542e503ef6cab8945ee228ea292360825f299e659c499cd91b19a09741afab2e2ef23f0ba486786d032f1

  • C:\Users\Admin\AppData\Local\Temp\CabD50.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\CabE2E.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarD4F.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\TarE33.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a