Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    132s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    02/05/2024, 07:35

General

  • Target

    0de5910aa0205be0a9114cbf1385d254_JaffaCakes118.html

  • Size

    27KB

  • MD5

    0de5910aa0205be0a9114cbf1385d254

  • SHA1

    81ab5078ac823342f71b7d16b823257f237d7b75

  • SHA256

    d7e508ef211211ffd136d9fbc0b638ea93c031aad28aef3a50ea45b7a78074c7

  • SHA512

    0f74f7b9066ddacec1d52cf7901ec621f5299cb2a55d28d737653475d02e30d57f3225eabf854d416074b5d591a952a79b1c1aec1ed0e00a7dcb1423bd6b0f56

  • SSDEEP

    768:cmmf6b2psG9iZmellPy0JL9Xe+Z4z4nvbV/4VMbx+fgjIuwSf/pCpweDo0koA9v/:fNMSFCKvh/BPjIgR/bLrbdaHKSrdnE5f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0de5910aa0205be0a9114cbf1385d254_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:832
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:832 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2660

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    685db9d854f75e314d8cfa9530183d60

    SHA1

    8c7b2254b6a51e3046fa2f2277af8422ddb708d3

    SHA256

    b4a56041c83cacee7bab3c11bb9fcb737e043e88016e8a98d7db4761fea38535

    SHA512

    363f573d484dbe0de2a8ca63aec9dc735c72f06939c814423806ecb3e3c625e860dc1d079e73de7643c55b6771d65b3cbd92bef9999d0f487a374208dedf5e89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5caee48780b2bf1ad8285c74a8604fc8

    SHA1

    240a5550e77b0a03ef787020d3b2c5844864d4b3

    SHA256

    ca4e4e35e2c9f342e48d0a35908676bd8749b5ce17214b325308fb3c53afc322

    SHA512

    18b39d6512451eea2480cab5444c63a77f8026a1a0c4143c6df7ac1d094cc388f312994952e69de57b0f7060ccec6803511dc6ce0784eae02009dc5b3421ebee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    47dcbc6822bc4e040046761dd6148a18

    SHA1

    4ebe0e322dc354bfea3ce9693c0c047c89929a3e

    SHA256

    5c4cc341f8c0fa4254598cb66737da95d38c18ae09310f6869f90d554caac463

    SHA512

    1da2aa1c8202b65ab3b9d7853cfa8bfea2a13e8e64d8acfb67a9f2aa427154d1d01fd4c4d507c0884657840c13077fa5ab4fcd6bdaf852dccb64dbf309ffe43e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d522e08ee766f270e5d5e5b2b3b72ed

    SHA1

    008ee31d46ab8a0c69e2f3f23113c37fb5f7f014

    SHA256

    7d972c22522468e529d404ae2b9f143b9826c641c90afa7e97a16377406e530a

    SHA512

    47728a3031b2294a9727715e0321e382ff5ea8d0f880eda843b6ec1f7937983bcf58c5e0b633d064bfe3735d57186d8ab4fd18cd22e9a2bb2cbc5c44befb509d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64b93fb165921f74df1f451cdceb6aec

    SHA1

    5e6b484ac4151527d4e74e15562865edc33f91ba

    SHA256

    1f7c358c0f0dc75a0dca1400e05b5c98e9b740ddf0fddf3d9afbf0b68e5aec51

    SHA512

    8d7e48d74f20bb1c635db06f964ec0f30ec9ba928452ce3a6c918ec8a7a12438ff1d47623e468fd76ddb0e35282e1d78ef5b681e31bb4e5ea3ede0d87c77bb93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab4f12f486dfaa2823a1dfe6f856f1ab

    SHA1

    b334fc8602a8178f6f114380f2f75d3fd206957f

    SHA256

    233efd24f2ff2fa25e6a8d0c27e12a6fa28464e1b91f3d2c1a1f1eaf90dfc86b

    SHA512

    a5847b97146f9f659d3749e119951e11348bc80c7a0153a302d865cad2544c34972d1ab41d081f5c6e0cbe6533aab848e9472af990dcc425d6f65302e9db5c6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15cf225f1ccefc3e0684217912a7cce6

    SHA1

    5ddc7a24f08aea20c3d7e495d59e9a662ac9e0dd

    SHA256

    34f6b1a1065586e2d97c3dd8ddf695d502fa8f623e8b88a87c6d214bfacd74f3

    SHA512

    956935265a49084d4b4458cc9b923df2863f9afed754743f1da09bd0242dafe06f66f85dcecc86b38c3ef9b899083277722dd101e7a5aef96498f3764d1e4a71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd837d3bc4d8f639f9ba7a9ba5847919

    SHA1

    53c75f8a30d6727773a12a6b3790b52e99e5a9ea

    SHA256

    0a38106c51aca7539ade47dcd6f79bbe794009eb1c1b06c8107f15c0680cdd21

    SHA512

    2685e267cebcdad361a0190b479c50d6ad79d8043fa5f9d421b90d2bcd6163ab27e685d778cfd8d43e034b4b56f8cac9d1ae5586889d62623b5057edcb7fdfaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33035d9b19a1f11ce7481ccecf5a5bd1

    SHA1

    012d920e5825ed6b6a51db3897c1d4acdea69c91

    SHA256

    611010ebbae93f5315a3dd1b7287b903ecfe8e70c18fa512cafd77cfcaae92e1

    SHA512

    9d6d8d35ac9354a053a52f07654bb62e21c4088c08ba666f01c636b9ee8786c3f995d5c173e34bf8d5c6b765b4cfd9f4f863ca007e026ff975b0c123481eedd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50a3a086c1511797f7b9f2369fb4d2db

    SHA1

    21fc72098a0daafeda5f79ddf0f6c93486ee0a65

    SHA256

    227e2ce95d1ab773e639263aeda4d575221fcaa0f2a21592c34f20e0196a6adf

    SHA512

    8284029a86a1526acb2864a316031eabcb64d61edc0b37a9a6b8af85e3b10f6764a4f88b61f373cd3e15ad0cb0a00a0a7e11a3a1eb31e48c9f12637bd18aede5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb88b191bd1a424a8e7bdfceb5500e95

    SHA1

    316566d392ab934ad7efe1c27c59666df31a1ace

    SHA256

    46d0259cdd7d698ab5a93f33223bf07ce65e9c85adc68b4fd853800b12db4ca9

    SHA512

    0ff5be9c26a2fea757cc1a7cc23b5df76d174607d0985a232236fdc0ffb087b0f27ef0730b7a8ab48ce221c0bf8c54bdd585d8090f09733113c28ce04dc683d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19bca12073b9b5f5376ab46ae63ab208

    SHA1

    a2cee47ffb48809fe30724aca7e86dceca387cc8

    SHA256

    a44209b45c232d6182874fb0f9adc273fa5093093da82a68b09e5ba517e7e952

    SHA512

    462794998a05f8e17e1ce7e9b25e80fe9eaa33ddb8a61e9acc655fb13d07ff0185aac74a613bcee97392bef0edc1938928669895cdef5c085f1c6017de7229ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a48b82a3851568c88cc551a86ee35e00

    SHA1

    c751a9e738c3a26861d08591bf76c9f25c1a975b

    SHA256

    d6c47e5e6ba7f95f2762e6de7fb82ae853d625cc7c566d69d5d24235308c3eda

    SHA512

    d761cec06810bf1cebc00d7c54f24396c544bdc316ed57b9754f3e20dcb03293e53adcfa3d2988359cbe22b6d8bd7cbc19d4bfc33d2ad8ae234cc6bea42bdcf0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad6e22ce5c572ffde8c48c19a569ff20

    SHA1

    5556efaacd90813842d330cca22b5e5067a9f4e6

    SHA256

    214def699144e4b79d9912d2681929c28cf4a0441c1670a8f93ea04c51bb7f5a

    SHA512

    1f879e6be719512837aa6666c33c09c8c11a492618ff3989d7ef31cb16a60c65a2885cb40a33a83cfd3a6a9e5b13f69c9d034113efd25c8f34cf673374625ca6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56f8a92a4904e77c6fd13a4055e5cd4c

    SHA1

    64cd1d30b734f0740703799c610ecdec1e6b7772

    SHA256

    ef5ecbd9af10b0b9fee6a9d42c631e8e00bbba205cfd2f7b57af8946de0c8d28

    SHA512

    19e2e5ca75556a2cd800a151609cea61b176b81e27b1aebe4edbff447f18e3fc198ea055346c686a289e93d39efee369b48f7869e770743f093810babed33fe7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    481735c2e205ea73d63e44780f46bcd0

    SHA1

    fcb3bd51008d094600bb0b42049165eb5ac67ef2

    SHA256

    9eb3dea9b10778a17c1b4ed2f5760ee35d9a11b9fe0c65eec3a61e7f23048e63

    SHA512

    66f028c0f677e344709713580c03928e2650e137aed54f1a2f092993d6ee55544f391dd9063e1d9d47eb55a1c4c173afbf1af71280f38f5f16101e86e701c97f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    84e389c3322acd153917b2f9f8e03d96

    SHA1

    69a1c1f067095497378afd250cc2d970ccc4b6c0

    SHA256

    c78f86163ccf24893d30c1b3450aec00c1078e1ddd54c28e082b666353772c1a

    SHA512

    6185a2dcf6cdc36a8da4f16e61df564485ee5cad3008f5de610c70f73be327153cf4a87bc5026e680efa7098011a92eace683fb673977ccb5fdb8325b5f49f6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    454542947d6e9baebb957110fd48c4e9

    SHA1

    94b27881c151414a0429c49914fc4d9f2124bff7

    SHA256

    8e6a3e3b470cda85c74b07ebe92452317afb83f13cb353d8f25147a7f401be82

    SHA512

    b5676199a3a88cf6ad691affe7188f020b69adef724fe0e38e177c0f34d6c5e3ef1ee985824d815fcf9400d5e4e7854ed58c9fcbcee79f6632e0c91a78585875

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63bab7c8a77834510aef898a521333ef

    SHA1

    c22c317a61090ef5a8901830c42535e08e78b2cf

    SHA256

    a7d4fe616386eb31615e48770a74097df1bad47b3087e2f814a5e3dacee47ab8

    SHA512

    94725ddc6e95219d76d7f5f7814107ea0373016c3284307199bcb0310fb93d6267ad89163168a33d65140cee8813107483571473b6e655d045942b010c98752c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d165bf71e955cf63f9149922e723b9be

    SHA1

    26c0d2f970c08a8c79214cd8f9b2183cf70ab4ff

    SHA256

    faec09fccb77e39c2edd0a55be419dec688f7e61bf5eb8d381b3d1e2f9e044dc

    SHA512

    a239ded79f9de599b8c83ddf896b1c6b11d6bcaa1d784f68d134cf9ecd0471dad9616786b9d1982dd48cbd8396d2cff12e5f8024299ba1a8dca5b16b83be1a3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ffc32d578726bfca43f0502bbab2ceb

    SHA1

    6382d11cb480fad1f821cce75e72389af14c24e4

    SHA256

    572370057e22beac12bb6ba5c9752fd66ec497e85f03ea2322086d04ae7b5f85

    SHA512

    7f4e5a7262352b77e25949f230a54a05a817da316561e41a0fccaa773397cd3799946129700cf17c2b717630f989e866dc2cf1b37b54632d3454dff027142989

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    582e47537a3c8686d53111f1e28fd772

    SHA1

    de2f19eb23e8b415afb8b3128120ca47b36a5ff8

    SHA256

    364a093d482e45b7d807ba59d0a5bc2556363172a285652079eead05a2b83a37

    SHA512

    0928232d0bd60bec94f7c95cac25fbfa4ea31e585c483f2aa05164673cda10e5460ddd33e671a61487abf4068ce193c047ff8b8262f321e05499d2b0f9c11483

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    a4b89adbc7d2dbab04f3c9f0c68514a3

    SHA1

    a70df2837bb8099a1ae038924d9fb9999c9bba25

    SHA256

    f41d7c3f91ad3c0845568090e0a8487d64a48b5c82785ea35aad2528367b2eff

    SHA512

    f1cac22a1fd72f40a80bea0b0aa7e7a47797c6de971242fb87e541e9b3a8ec082673c3f4661755c0db91ea7aa1dfe1cff09d76bd5554eb217e86d852b716c080

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4JZQ5QLK\datepicker.min[1].htm

    Filesize

    125B

    MD5

    769761433d7882f7f436bdfa5296b827

    SHA1

    ad5afa744c5a192ec18516c7105fd662022dc8eb

    SHA256

    fa28631effc4abd9d203847f331a56009193bec19fe538b0fb17091b8e925e87

    SHA512

    2704e1fe47a16ef76d35377a5b0654819bf5799c3d04fd35ad23c627a578494bfaee45f0e5c49e352491f0010f60b5dfb34ced752b8b199c7930b5d1fd41c8ec

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4JZQ5QLK\gdlr-hotel[1].htm

    Filesize

    125B

    MD5

    9af3cc6f3abf28521c2d3150b57085fb

    SHA1

    6d5dae03a4c6a384601dbb36bb0f7a165b6a0e97

    SHA256

    6995c300932b6a8ef0804150c09f7c3dc055597969823925aa9fec025f8a679c

    SHA512

    cbce3a7d0f376450e11cdf550e287af56a73edb349bd32be36c542d23a3fea323a44ad23b158b10ebac81671b433ca4a4cec35d81aad23cc4912fa3f11f4cc87

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8ADCJI8Z\jquery.transit.min[1].htm

    Filesize

    122B

    MD5

    00d64a82ba2d055e5facd3a30efac924

    SHA1

    308e275068e3bec5effca608fe9df2008c979650

    SHA256

    aaa3feed097fda6687c7c27860c24980f3ff105b6f326d10c98854145e9afa6b

    SHA512

    1151e227086964ec19c11eb388ace411a56a6e1da96409b2bfdb5313fb5df75223add437a653decf3afdfbd2be2cde421c512f9de423ad74f2ebbaf81119d8fc

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8ADCJI8Z\scripts[1].htm

    Filesize

    122B

    MD5

    c495a59b6feea64c19db0117bf123ec6

    SHA1

    bab3e3207424226994cd9d0525e4a200da2e239a

    SHA256

    6788de5bab06fb0e7fa4e8e37e6c32be8908ae4799ba7f6c202ed30494e16604

    SHA512

    5f544da102accde4dfc5a69ba3f2ea8f84b0ff5fa0a3d3bbd638c76b91190dd4a16a473d56c20330ea225a13d4671fa793bdb454d9fb42c439f7f30f8f71b38a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OORQXHVT\jquery.flexslider-min[1].htm

    Filesize

    124B

    MD5

    4d68bc709a483e8f62d80dbfbbd7445e

    SHA1

    4869a7a584a07c0862139133de439120d4fecd9f

    SHA256

    efb9444bad6c581505184ef8281b4505c983c043c11af61b5378eb79eabf942b

    SHA512

    d7c4ce33bb76cc2982a229fff39ae0d222e8e1707030a0f743c85baf431934a468db7742f1118936f8f3fd7b45a81e78103528fb8da85269cea9415b5dcd23ed

  • C:\Users\Admin\AppData\Local\Temp\CabC52.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarDDF.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a