Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    124s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    07/05/2024, 19:58

General

  • Target

    2180a08e214913fb89fc32313c723961_JaffaCakes118.html

  • Size

    27KB

  • MD5

    2180a08e214913fb89fc32313c723961

  • SHA1

    97c04d3707ce7f7fb556c351e688223bc6d97030

  • SHA256

    205f880e4ecdec7a5c3ac2d3eda84e02590da9b524f88565308fdf117baf135e

  • SHA512

    f235d819e00031259212c26413325533b0b322722cbd6ca75e9d9c76c8b2136c12d192f1eccb62668b0c511b83407d0eb0add43f82f98d8ce56063e11d185c9d

  • SSDEEP

    384:JDYpmteubDNTLtN60kYQuIfKx81HMiy8VRgEKKX:xYpmteidLu0kYQffKx8HxVRgSX

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2180a08e214913fb89fc32313c723961_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2276
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2276 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1948

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    e0164f578fae2805bd489379a1c443bb

    SHA1

    3f07a909b7199fdb7e74a55506fcac098897bee2

    SHA256

    5348c2ec4ac0f940e3c9e53b700c83fb30cae2fb9132b320586c4fe6e49cced5

    SHA512

    5c6efa7525120b092f799ebb68d32435a35c11167ad6bad59ec3bf69f1d26b5b13a97f97f8b186d3085087279ba6c8641d630141fde55795dbbb52d8aa181693

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0ae67d2ceb80bb06383eb1f32929989

    SHA1

    0787a6dc720d3ee40e7d4144cd13353555942a6b

    SHA256

    b08f1491a51ab235bc66b544c6391307a298c8e32be3ac566f492e293dcf7989

    SHA512

    d631425ecb6d29fefa4e646feded1011c9c516bdf39ab2f520fcc0dad497cb9a80da51bcfab4fcae4b15af340b206b1de6a92a17a1e21a166a0d911945892de9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f63d85affc5ac45ff6ade12950935a3

    SHA1

    ba3e9e5345407135e295d5f246b856fefae9af19

    SHA256

    3b86d5af22467a690bf21be183d6990c6859dd9669fabbf10a2b12f6640ad5f4

    SHA512

    70d15dc90d83abf6530796594481aeecd1e95b4c84820a13c709ef9faba0c75e811a595aaa551b17176b20a7398ca1e6c7586baaee89ce1549a0d1c458e69480

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c043126c2b5353ec70f18ac82b91e11b

    SHA1

    642c9811556cf27712b8515ea71063caa60e4503

    SHA256

    7a27623eea129bc9244fc57d9155f7d1caaeb236f8a92e676e787292ee4273fa

    SHA512

    dbfdbcf3a9feca2e14c0a67d025299fa26f905a5d4af60a43b670e82ef2d372dadbbfa9b9b4227014762c3c2f3c690233cf9af352c21ad49c0d09ae52edcde29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2461629d105932ce6d6a5ea37b294193

    SHA1

    969113fa03cdd782bbbc44221e0da5cb1eabdba8

    SHA256

    2bf2c849143b306014820de9d927bbfd529ed422b5ba78d09d9f168f29613226

    SHA512

    cb2e4b245b54d4d19d68a781122531844b271a038c244909277406337923cc64b7e308de3b0158c87d442d36faf52025a7982535263caa31a41cb44afe84d0d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e738cce44491504ab646a9f0fc9f2e2

    SHA1

    d570689db20675cbca898e4ce5258b153ad1b00d

    SHA256

    d0646943d5440457a261ae03867ddef62fba43641dcf5877bd15c9d3449fb64c

    SHA512

    ac4c21c194051cd80e12a8ffcf50928b65695a915bf3c1991507425612126b7eaa5ce7aa41bc9528f976a92680df80cb887c594a54cf271a3905b8271ed80cd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a220528ddc787accda798d7e30cd8010

    SHA1

    69646f962b353ab53432f5b2d03a3c95d7ddce77

    SHA256

    b55116028eb0efdc99cbbd925927beb4ac99bd9f5e36001c325921cbb09a3e46

    SHA512

    038fe2624e83819aeefb834ea3a5f49d41287cd519511b9a2bf02a8ff0ab1f94ec98d0c7cda797bb4ed4b14af448d7cf75628e66897c07de7aa916239190f751

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9ada7c3ef186d4e78b321618915087c

    SHA1

    eb2e54c262ea11531561b83af249c72af3ae4e03

    SHA256

    cf97f64ff58192dab368c789a34d6c1d05eeb48bcfffccea4ad130596318c070

    SHA512

    7fbc71b6eb7160a6276ad0b849a69cc19d45d9c1e740ad5ea39c3d15608f5dc9996c1bd2f73b5ff2ff5efafa68afef826012e116151eab7da1476d3bf2e3795d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6e07a4953b9603a9f57248869656d01

    SHA1

    ee3030f6bbd0fb46c30b06d976f7596435f7a715

    SHA256

    e5b31870fa037da3bbe213cfdfcb163524ab8bd6d49238aa72f6bd930f5a9e61

    SHA512

    efa9886e06e3709618991d21f89f278d5677fb5c2a78ed35445f512bc8c667660c21d50e25343c4705fb648b808c8f81f477262ed2149eb40c70655d082d0d73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b43be1fbbb82d9fbc1804619e6b5f422

    SHA1

    ad3e1e2e5f6256307cdb45cae123d006afdf424b

    SHA256

    df5e54e60473b29736887c57a5a29aa5f29e3e7f3938568a8c53da87eb321387

    SHA512

    457259d7db2878817e89a5af8deea93d0e83bb52fe2cbccc503a8ae1e55a3aa0d0990f2af30c58e3cd16f108b6a8db790ff870cda6f8af3986be90cae2a98ba9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c7804e11b341358305bf2ff65b11894

    SHA1

    b8255f1997c655d838e7660b79c10ced8d5a2842

    SHA256

    72f8c056125038f2696383720d8b0439c68aecfc68e15b7b6b428f5dbd84f5c1

    SHA512

    e035b0e9ee76017f2e2aa6de623ed8fcc25edf5231fb219e184d7067bc6a767e954ada24eff243255f18a261ca96863cf2dbc352c01bffc50e34eb8783ff2d28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e875dc62a90bc278bc8f1966ce62887

    SHA1

    fc47dc1ba0d5298066105aece341f409f83e6ed3

    SHA256

    61198b9a6f4ea3b67048a7e0ad4d2e5d130ad77a2a81ee39707ea7cd9e4f572b

    SHA512

    e95d3f585ebbaf5216b68fb8d1ce0b6b9f4d04758cadc495cf781a3c4181498c21b5f008a9a68000f8de01a96c053021e900bbc6bba16900d575806c49c0f78b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5beda52e6cdc3361b020057d84f1fc2d

    SHA1

    6e862fb1f6e7ce638b600cabd3a4de8c1b974bc3

    SHA256

    738865007200a22752fb8ea9d533b8461f177a9966ccd4bb6a258e822062cfe5

    SHA512

    41d145806be1f86f846d34a73687699987c50d017ace4d735382c2679725280ce2870a051af3599cf369ac80c5eaf233ee9265513293ca6b1187284ba0ddffb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66029cde22d7877e9119016344d2dae0

    SHA1

    7f224375e1a09656155bdc29bc018a8a470bfe5e

    SHA256

    c0170e8eea264c3c6f0e29704722bab19cc5d6e91bd39b043e340d93c1a87431

    SHA512

    371d9d2a5d018e58ed57d36ba0c77258edb2165d589ff5e000771d0f2257dc34b1dcf1b5778764b7866d05a20a5634c8b48662175b34470951372e36bdd4f870

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75dc19ef23e595df3c1a70330cdb3552

    SHA1

    847b98032cf0c82c44b83b19d2fb9f8e44afabcf

    SHA256

    0f896cb3770ce1d28cbc4e3eb5a53d6fe698b0438aa0fd7f82060674fb95a529

    SHA512

    750ac42a7c301dfd80d0ea6e23f226b2030973014ae599aed50e7aee0b63a7e87c01614e2ef0f56edff5af15052a35788b954f389460feee02dfd726602868cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc5bd873546442d133f8780288eaac97

    SHA1

    2cb01d7b4ffbd62ccd6901b73811a35f0c674474

    SHA256

    84e3a267c525334e2f71593bf3df023bd4b69f8736055bb05df65e877ebe7361

    SHA512

    b68625375db4c4610db3ff60dfde22d5d2b86b63898b58d3b0f4a70aa56befa387786fee259c75e0310764c94070747805798e4b1528e61574fee82f57311c05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    292687456432f7a7606c76f94123337f

    SHA1

    ce01138468ad37c5b3364e347e713f7f16433038

    SHA256

    97db30f66fcadca8f84ba1657401adeebf23eda4a7b8bef8403858ee9e1d06a1

    SHA512

    16e524c9294934b479149a3c139a0ef0d3d92f6d4b00a6ddc05acc886970f12f8428549b3c79d4d1cda4b0052b86f352645e40f347d97d34be72df285472ed98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39fd14c80564e604874cd8e367b8bba2

    SHA1

    43f8720baf766f67ac63a66d3a2dea58df78758d

    SHA256

    aa59c6310fe1150d0269ab7ecfeef8cc2d52bb81c2e8bd7f68085b8910e52bb1

    SHA512

    5226b5c26e3c510d2b96cbf796b6c0f62af135a3d8c00dbae6db84204b8fafbd70bd6faf60e9d8110f60531ba5f26c84ebc3189869f6116ad720066bf399e018

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6bf9ae8def6231070f62ed70b86c6402

    SHA1

    06e4c8aee47ea689b69979616cc9e0b4f9724971

    SHA256

    e16f1bba223cecebe622095cf0e669c65744644672c43f7258c0a88ad66bf277

    SHA512

    d832820a5268f2fab201e31fb129355851aa3ab30e5aee5ebac3c66d467d479a37a0a4310e9374bf2930f0544d686a6e9bd4cbe790ed13277e7aae6b50ef4ed7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48cbf1ab96b81722cc906aaa10367854

    SHA1

    91898fc61d643c5f1585e4fc76bdf6c49be06b94

    SHA256

    c98a2095e103818447ee828f8495f7b216214db6009a066395ac1138b21e88de

    SHA512

    94782111f56ed6c609072194f77454a06f5e8cda624c634ce26a2009d3fa25b8884f77ce32603b804d325d0e649f741274016c0724e9c77b7b3a626fcaf7f3a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b46eb3a66e072e99df1d89c9728114a

    SHA1

    b029385d97e2687d60056ff782491910a26d7050

    SHA256

    9e93aa563fed509cbc79dbd877028420b024482ccdf01d187d452ade6ba75910

    SHA512

    11cd3d16c5af39c8ef9d20f71039daeaeec9ab9cc81779e97fff0dd37882951f9871c1cd61c644c4b8aed6721ab88dafb2af753569e606449eef811d71399160

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    286e76dd6351e3bdfe22330be7bc8911

    SHA1

    999791ffc73f9b677a28b95efdff47c0ae5132de

    SHA256

    e196e4b9f0875851c870fb3835d172209c7c465209836067cbe8f4237d51c9a4

    SHA512

    e15c44acbbf3bb4e622c0f4f44a2c8a7c4d9250bb04ea58f424bd8a316f1796a8b06a0e5230b74777bafe72e32e0f75c0456d884d42ddac98d6e4a273ffbd4e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c00fb2e356683aa08630b9e5fc42fd12

    SHA1

    178d067e5621b30763e1e009be3aee27837c5e72

    SHA256

    8aa7f9e80a05d20bbae49919f6050b39d68f0d185fa2835a603b1db434adc3c1

    SHA512

    db9b17644e7d1e33093e08a2f3d0bf6173c6349ef02cc778e88cc6455ad5374f5af8392db09d1addcad14dd611fd4cc547912fd7186dcf3f44cf32fb17d25a7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c259a18daaee8fab8171adb101924f22

    SHA1

    50a4b68eca1762e0cfe6257eca5e499e6d44e875

    SHA256

    cbcdf227ee31027be96af23beb199a0a4bbc9f7097c4b37afa585d5eed420ed3

    SHA512

    0492bab7363782eb2382eb8fe5385270502a0bc84827feaa67e1e135c9f9a24354a98858f9ff572ae3c0f08774ad1e89abf9e33abc0f8e1df7c1509c379bcd57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    e0304137d90b57f9c5c6aa7eda42819b

    SHA1

    4a0bd88353c9aa5802a0602a1f36f8c4420f6aa0

    SHA256

    964aae05894203d00090bbd65cc43dbe63dfc5ea11b610effe00c5c588af2790

    SHA512

    a0413fd42686b094aee265b7d44e7d6503aab99c99a0fdeaae06608c0df38c5977414a6a94b5e69b12ca825afc90bff08714684fba4e3a8d00ecf6121f8e4a12

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CY2G78MW\cb=gapi[1].js

    Filesize

    64KB

    MD5

    63e5a0b45632b3dde3694ffcaf0e3f7a

    SHA1

    923736d0cdc308331d5cfaa0ea159bfedc83d53f

    SHA256

    889109910477919b3457416e7764bcd0add19fd959848253026125c7c35c43db

    SHA512

    5b886c4b5122d61f0209ede748aa84445c9388cf38813316c41b3dbd2308216e88394d9a45cfc27113c0cf3bc93b9c37d808f6d3c67888244c176ee095d42259

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I819HQXH\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    23a7ab8d8ba33d255e61be9fc36b1d16

    SHA1

    042d8431d552c81f4e504644ac88adce7bf2b76f

    SHA256

    127ffe5850ed564a98f7ac65c81f0d71c163ea45df74f130841f78d4ac5afad5

    SHA512

    e7c5314731e0b8a54ab1459d7199b36fc25cd0367bc146f5287d3850bd9fe67ba60017d79c97ea8d9a91cd639f2bc2253096ce826277e7088f8abfe6f0534b63

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RSAB58HZ\3604799710-postmessagerelay[1].js

    Filesize

    11KB

    MD5

    40aaadf2a7451d276b940cddefb2d0ed

    SHA1

    b2fc8129a4f5e5a0c8cb631218f40a4230444d9e

    SHA256

    4b515a19e688085b55f51f1eda7bc3e51404e8f59b64652e094994baf7be28f2

    SHA512

    6f66544481257ff36cda85da81960a848ebcf86c2eb7bbe685c9b6a0e91bca9fc9879c4844315c90afd9158f1d54398f0f1d650d50204e77692e48b39a038d50

  • C:\Users\Admin\AppData\Local\Temp\Cab1CF5.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar222A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a