Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07/05/2024, 15:56

General

  • Target

    20fcfcede2eb9694f6f9415b8425e432_JaffaCakes118.html

  • Size

    36KB

  • MD5

    20fcfcede2eb9694f6f9415b8425e432

  • SHA1

    c99d4262f354e2b93e4705a6f1aab3af56b32ef9

  • SHA256

    9a6c517432326bd7aef2e2535375190e91926d5a0808a66acb3059a7e93622c4

  • SHA512

    92a41e02eaaa64f4600889d8d485c7aca0d12376a03ecb88cf91529153ec581e5cd985b5fbd0ba46fd560eee29759d3ce9e443adfc197927f7d43ff358275539

  • SSDEEP

    768:zwx/MDTHzb88hARVZPXkE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6TAZOy6txk6lLRci:Q/jbJxNVAufSY/R8SK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\20fcfcede2eb9694f6f9415b8425e432_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2176
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2176 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1724

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    648c85839e7254a2fbc93f592bb7447f

    SHA1

    55cdd89cd957f4fd1969358ea24f6d68623faa36

    SHA256

    20b6e820f80d6e85ed693c25d89059dce8eca4be24fbb2393c5c7c2fc409ab74

    SHA512

    426874318871dc8f1011739836380ccc9fed292cffc4688a9eed74d2a3c6e0265c148c093db31945f8e73ebe8aed43ab2b0f936d3ed2bf76adcdae17e8c716e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

    Filesize

    1KB

    MD5

    80840bec0300c2749b5eb7113919a5d8

    SHA1

    353b9e4642ec52157a663c2799fe2b502abc6200

    SHA256

    19fa66bc083d56765964329291f9c6591abd931f41944589172348d35615e798

    SHA512

    d6c317a56014d32881c670c701d4849912d92ab7d0158689d2a9d89b78afaa98901d95e83856acb1fac677d6358001d85cb5c444e95db8211e0e34e5b6343511

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    724B

    MD5

    8202a1cd02e7d69597995cabbe881a12

    SHA1

    8858d9d934b7aa9330ee73de6c476acf19929ff6

    SHA256

    58f381c3a0a0ace6321da22e40bd44a597bd98b9c9390ab9258426b5cf75a7a5

    SHA512

    97ba9fceab995d4bef706f8deef99e06862999734ebe6a05832c710104479c6337cbf0a76e1c1e0f91566a61334dc100d837dfd049e20da765fe49def684f9c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    978B

    MD5

    068bffb1bcc37658e15e70c2abb29bd1

    SHA1

    bab14b4d02fd24c6f5eeffd2050e8f632f08cf93

    SHA256

    3be8156cba861e9ccb47101114c12f88477189d0ab5432ea131d7d5cb509e186

    SHA512

    30e697270f8dd85ebd0b1e2024f3d5ee96d38aea48def5df92e38ea745a414f92918ffe11c435eceace6db3f6c59d7653c160204dc69b73deaf10d8fb064f2e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    1a4ef090dbe0b97ce6066769771bdfca

    SHA1

    377820694b9cde15893dae15ba3ad453b1aa666f

    SHA256

    6346f4825defbd5f3cc399cd19d6e2f2ecaeef35779c9c36da534561ede064da

    SHA512

    68455fa30363a99db5e6eb7e160d93d4e7cf9cc7b2dbe61a936edcecc9a0e6acf1a7ca7e9bc1482586e4d4147d3e1b939dd03d4dce49e9223fdeef8a3f593cc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1675d4ceba0d50aeccf07dbcabe944f

    SHA1

    20cef919b65e3687ff6d3a2a5e4cd48e5f2d3032

    SHA256

    54faa78f137b43803506edab2e24ac126492ab58a9650505e5fba6262fcd3aef

    SHA512

    c752cd34049c78623169cab672b6cfb7fcb32d00fbbf54e80bfd9afdb7e2361bc19cb9092e471f76dc48428d1d80ff1828841e07ab837b970558624f72f143b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d6e6e232b027c983cca13ee1867f4a4

    SHA1

    e7fc30597b8d904fd928d672fa1c48dfc765517d

    SHA256

    90159c85d5f3076b927095c2e4a50903b325c8286d50f154c02a7b3c8a16af23

    SHA512

    794a5c74345220d94279386e9363a040b6daf29d53add182e1dd5c75b176628033193ccc1ea818daff8f8e908686fb23d7fb8c1c91485bb9867ba22fc1d6d9b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42cd54cd16754a67c48f49232ec816e1

    SHA1

    e4f773cdaf929b3e76f79ce54c7c16cc51b7a0ad

    SHA256

    e63032691eb0b752e0faa5bd2eb6415e164189d52232517126e43834fa7e7ce1

    SHA512

    7af631871415f4d70163cdfacf18cfa7d279f1c04d0850fe0aabf7c62b251d18f9f54088422f8e1a26f6fc582ca9e9cb5b03b6ee9bec779f11ffa5493c8ae164

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30aaf7fed855227e4add757ef0ae6fe5

    SHA1

    f6981f1f02587571db5a926e09ae08b3ec4a9b9b

    SHA256

    bce481246179fa1d27411381507357d856a238086bb28a14a10c48c3835a56cd

    SHA512

    8337d58bcdcb6dfd2b49e26b3d55ac57d2ec52acae1815fd075d0eb9fa07adb5e6c26549cf779210d5c78d9f08935b5dab720a38228d750d819d96bf76411290

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cfd7be731788b343b41953736cf96ffd

    SHA1

    5642d118eca6e19b860622ea023bb044893edb08

    SHA256

    bb5da007f4331c11f0adc1ee16455f2a3f63bdc4d31bff290664a8d3458dd767

    SHA512

    82e365fb2cbbff597899871f8f1217ac6a0e8ae7699bf41c1bafef61df61f6f4c761bb3fc71840c83b59ec5c5cc897862552595790f19e98d682f1852541a3d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53efb230e0aeba9d0511da92d2fe5c65

    SHA1

    8d79b75f8aaaeaf39a1ef4e60f9a184406b7dc2b

    SHA256

    99aa06626a092874777c575438de18d92e0685ca6d61904662a92408fbccc181

    SHA512

    d29e97f9f2974e8d5b3ed26330d38d6ef1f6a01c3c94a4b133cc27d9b0262357c1a42a8da5f07825a4709dfa3fe3045e3c38d485f7d8a484cfff97b40ad2c63b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8977d4542ac72bdb83a3436ffad659fb

    SHA1

    dd65b0ad138c78843141b4c26c4c9188b7a2b3fc

    SHA256

    ee512da83679043966a6e0b5c98f6b9120608cedb2f06047fa07848aa396a64e

    SHA512

    bdd44c1cba8ff1774af6ce56e997f090ae6f48ecced7043e21704adb831ab87acb1b953d245ee6eac33dcc86db18fda16c5a8bfa3a6f27ee4ab97e591a7dd4d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    816dfd68c2318aa09731dcd241a1b0ba

    SHA1

    db2006099de6c6cf32fd907eaa0abbec179f310d

    SHA256

    a244078b23b7b81ea1e45e70dfe8161f22c9ed60833846e0acfa6d83af04e8cb

    SHA512

    c19480db9f325d202037ff5d7ff784c59fa308f7e6f2265902a8cccc0c94d244a02be241fa34503a682c36cce82646e6aa4b672d925d7e2234165fee54447fdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63a4cbec5c5206b837cd6e438b5ea336

    SHA1

    9b16f9d1d900d57fa9e995bfe15ab2f6507cee0a

    SHA256

    3fac74633315a256480309e5bc011a9c93eae3424dd166b121090d349d920727

    SHA512

    617966f2a1d454ef457e317a389065ced42da508566ff61a20fbac30a32a72a2349886c25f3e8284ab1e9cabecf3774dcec6e9349afdfc62b37102eaab28221e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0cf1975c59ce36503d974f9d825d852

    SHA1

    185a4815e413912071fe7d73ee8dd23c7b244686

    SHA256

    7f74f33c6ab41e88258bea8a204b1b8c481babfcb0d76e2a9b1ffbc0af8369a1

    SHA512

    325e378abbd068df0c72dcf0d39c99452b4a97ba26570bff6203ccda2ac2dd83462c0be1c1a5fdd5e487fa9633c2f04ea0fd3ca0ff2d15f81d60b626bb9fbd66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    375c69ece85a2406057a47b650e043fa

    SHA1

    57e111e29d8e9dac550da35b1f37b2ae8e3e5339

    SHA256

    af977b7126086e3838ec7316d3833d5666ed3d3d8a1bae0963b081482901d08e

    SHA512

    bad83a8a474919df42a7d81a3fca626467d4926848bcd67b678b618d8cf9a3a92a257dc6ba9c539b06a7410970531eb88f79b2a9721a25b1c81f846d01e7a9c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56d285895714c64b849f03757f487a75

    SHA1

    bd248af71f61c793a09bd72d13a871b9439a4fcb

    SHA256

    c1198d2eae876f5063ff57986b2551ba7561cd49400e11c51a9112129f39c088

    SHA512

    920094189ad43a87942ad59e2a46487aa07f786e8f6d9c49adfaf8895fe7498cedb5caed645983cbc86cc5b8b45dafe750a7474442be44af75de4f67d7ce1948

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d47a57a98a3ef223c05e8a7c69d2c168

    SHA1

    d62174a20270355fb9221da5df226dacb74bc907

    SHA256

    2d0821a3643f05113261408aa89a6c8e80a2e7281c44d09759dd83c4dce3123b

    SHA512

    de1bef6c493a5cff6403ff10197d312f2202857950c93fed58a3b2acffcd8b161414b69b85d9661cba2446e6d71d621da3d1fbd9cd71d484ebbd74fae9897e8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83387273d715067fc5e587fb793d159e

    SHA1

    415e8fcf50cb2baea004e48c093a7c4f62a68d81

    SHA256

    c0ba55c7363e8dc5e5e676b88850792f23c8c4088ce85e2679df38e45c74de2f

    SHA512

    37be3bd384a881301d38b798233b7f72614e1c06c9a16ee8ee7b4843aaafbab02e903d8ae88bd48cf1b77983be997f33457c9e55d8aac43e9e2d850e39c0e8c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    480B

    MD5

    b8c20e0a8dfa6e5831abc9312addbec2

    SHA1

    860827f4e061512ca0c94037e08473569df07e19

    SHA256

    fbc6eb47a297b142f4513f2af4c308b76cde4702c88ed5b4738229d04ec20890

    SHA512

    431c444299118836695245ac313a834685bc3cabb40b9935c26e46c2b098325e704f02c038ef02f4b9a6a3a3ab9c3d851f419211dbcd428b5e9fc3f6a62984ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    fb8bc5cd13b773d4c53aefbb2b0a4cf8

    SHA1

    2951ff9359e950a11e0b21ee414057372c54df25

    SHA256

    8b6a1c201218c655da26523edc8c6e6fe50fcd7f5c28200f5643f742cd0138f3

    SHA512

    3f68d0c320155c553dcef3665bdbc796208475c227ee7eecfdcfe96d2d0e6752ee687698b902eb2763657714333d4c425f171182fdd7ecc666c0fc8c085862a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    f4589abeebc901fa5335f4c8a036c2f9

    SHA1

    1e0d9e8d6fad31ded9a128bf5c29b0561ece78af

    SHA256

    ce7434b24ed67c56d0a6442091e9aa7bf16d76678ba0c3e0247d3bb20f3ea8c8

    SHA512

    c1efbadcdbb7fb8fbc2c632dd1be76ba42bf79e7e03197b2efe7b60dc0c20dfa95dda997347d338e075fd640b680565c3f454fdaeabd80e2325a116f6a36861b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9ZQLLOZN\ae111d25cbb9b2d7293e8bdb2fcfe8b3[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\Cab1F57.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1F45.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar205E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a