Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    130s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 09:52

General

  • Target

    296a7c59ed7f149e68ad9ac0daec4afb_JaffaCakes118.html

  • Size

    39KB

  • MD5

    296a7c59ed7f149e68ad9ac0daec4afb

  • SHA1

    8eaffcf568e4246409a5ff0edfc5da2749080933

  • SHA256

    73ae157eb5a2ace55c3b7539c7c1089223f251ea55c70ca2b8f464444c1dcf17

  • SHA512

    7066f74cd79f324a3ab6c472b0a4fe819a356a088f23c41fbeb288e0f96931ba92ab37a7a5d9e7cdbdac5b5af652e7d7620a49c8d14c917a053519dda1df98b7

  • SSDEEP

    768:S8zNuvqCHCQPCSC0CtCD9bD2YfLbbGKTw:S8puvq+Hl9g+jGJ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\296a7c59ed7f149e68ad9ac0daec4afb_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2084
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2084 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2600

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f7276d7bc40a67e5a642e4d5eb767b2

    SHA1

    fe3245e55aa47b2d46cdc9d3bf76afe8d50d0cfb

    SHA256

    963a0949e5439abe9f5caf324bc4b441bc8b9e850f0a0684ec57b75ec09d1e0c

    SHA512

    a72f61c1bd9f89b47af00aeb57f3e919e3314f98a5c599f87fa60b92820dfff22f7ee9a44901e0b7e5c8265a3772bbeb06e7865890441383c7bd5022a8104c0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ecd0868927d14004c5da711d46efafe9

    SHA1

    74d081f84d213fcf866019639b8ade36451c9b2c

    SHA256

    9481b1d30da5c1da81704cbcf14cb1991f0fb077227141c02d71d8ab3f037a05

    SHA512

    24217ef8f29dfe2ed767a441707c1690108cae998f088833515ded89fbc730d66290510e646f9a21b86261ea1b4a468e365c54954b3290fa45b0f138693f9f30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d975aa2c7eb53cf6baeeaebf8ca8ba5a

    SHA1

    45fdd10c4deeaf87933b1d4eeb7c2b6ebcb3c47b

    SHA256

    eaa41b13c83eec528e4bcbba3d67420f204f50eeda8faafb16120ff5b40b1b66

    SHA512

    3cc9e2771d4be2bacf79de00bf17be4f9d9ddc90d09a285909f05e00e3fe0e26a1b935c9f47c6946b51a6445a0ff2b292a9e24acf081c82af71cdf72022faca5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd27b7254d701abafa80d6a132a8e0cd

    SHA1

    01babeb18d35b271ade1586184d5febab44a353d

    SHA256

    60d4ebaa1caa22c87810168e73d81eab9095c23aed47c15997c7854d57120733

    SHA512

    616021eb3778690c7eedfe78bc46df92dd077a59b01f8bdec4a4b7b860d0b9e0082019cdfd3566cfb3eb0c419fb17fc0a5b5771daf03707fb31cd3c23974b770

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    811c08bc3057ad1947e7713b6fe418d1

    SHA1

    c567c2ba59685049ee6a3299f84be96d9396f1f5

    SHA256

    7aee8aa4b4ba479c9ab5e7f519f3e2d9dec3c6e6b8c558d8995e76ee7de7a41a

    SHA512

    c6f08c4f1984e9c875bd2b13b390a650d4fb806a287be92dfb8a31f739a9cb9235540e1276d50dac3762d22f36cb42095360586cd2a3f0aff0e7fc387cc57e31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    443caa36611ed5fc99aafdb3f2c3be4f

    SHA1

    0f2ab3afd128de62271ef0a646be35497c23adb3

    SHA256

    c4c3867be639202e342499ee58b2c87695d1c21aa3b212a6e036e5946329daf9

    SHA512

    69b4d68a73b5d875caba546883391aa6df9a9f8baab7d049bebc646863365189d518f6bf7a016bf231a9b7ba9d11ddced4704436adc158977a71a3a4dfba1933

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54129785cc65c6276963f438ee0a4612

    SHA1

    3ece511bdedcafb8bfe06f38bbbbd0b4f8a19255

    SHA256

    10092db9059205f77febba854252773ed8ec81a317c316359c13bfceafb4da50

    SHA512

    4bd70589d1da242f66e85831ab327da0ea96df497022be8d637e5aaafc6667fb7bfd6718e8afcb49591d47830c3761fdd919f73f62489917e88ac4955df3c25f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6b035a63e29a1b3710cfad72709e7c5

    SHA1

    bb460bd68627675b12850c35df081a9292821771

    SHA256

    d1c700d3e1e26fe36eec74691932ea279bc8ec00e9a93a1d240b0d07874621b3

    SHA512

    5b9d0a21784f436640ace82dc7828051400f5e5043aa56240f925a4e0af2a20c592277227e82c967f3016647f2d2dafb5f798781838cc5f35da30e9a5abe4bd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00a3778437dd9bb8e9ca15a6e4bc5647

    SHA1

    c50b3453636beae8068b2f0dbff0d934e6e4d402

    SHA256

    726c38ad778f50503156fe24f2218f287b66b1417f49b93fb301a353915dbffe

    SHA512

    a9b08380cdde69c62730f7284bf78f5e0d14815cbcedaf3f62990200a97ceb1656dcdb12039221605b664f91a18cd173ee6e71e4ebc475259d6154eddfb5459a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    874af4bae47098e25933943c9d166094

    SHA1

    40aa10391d9f248330a0534a0d54362019150c0e

    SHA256

    1461ad966e583a7290ac319437fa027b08bdccfc1f6374b8df723bdbea9382ee

    SHA512

    fbe67360d0f5fbb720e1d1dcf98b5ba2c8520c5b74997053f803d3f18ea8b456cf58fcf24eba474c72bcd498c4157e292b62364a95ed46d47759e0d5f0271e1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7abe2105a6e757e9d69e8fd332c2d711

    SHA1

    f707b03ae87a875385d92e02d149ff658ac11eeb

    SHA256

    b0f8d74ce80593682dda89d767178cf3daf3a9f02e2964e5f1030c7217799418

    SHA512

    c32191fae27eb0326de341d0e2b35c35f1e3da8bd3aba5091587aa71500274165d1866b9e3aea3cc27a92fa89f76d48ad06c0d5326bd4d428b42fd379f382681

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4950666ca14a3bbe781d81fda8136cff

    SHA1

    bed8ea5b52608e802e04cce5333afac648119448

    SHA256

    e3549b610a6c80619cd449bbde79144795afb7bb1500c772a64fdbf100b398c7

    SHA512

    0158602a112a1fe05cb9cdcc69bba9dab756ea0d0f843375fa300c732d27e52b4bc4c8d84a93fb9c25ff546191f784f7ff06f1b3eab11128b1c203ecda644cef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59ba1d935bc11666439ee7a37f32724b

    SHA1

    a0c4923405b49e97e9e8e57aafd3581555e31905

    SHA256

    d720ea59dbb2da321ada5e01e525dece77554115ba5b7bb347b5177e65e8a421

    SHA512

    80dd3b1955c7fb7ab3f5cbd57a2c1a94837ff69fc0a6c821479c28c31f1b6ea92c35288ef8ce758da11133c5f25f75fbaf0d1ababaf3fd5fc39e1d245d12e7c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f699fe01e1e9bdee0d8b82f4c47256f8

    SHA1

    92a8d2ee5d4a266e039059364319c4cfcdfd7d47

    SHA256

    75adcbbe24f2576485be031b17e2629eb78afde273a8bf9ab5b0e1523d0b438c

    SHA512

    1cf5cce081aeb21f40bd9c7e719059807ef236fd82c347df24207e662226b2218e2790cf10aad04486a0a9f481a243c011083ec0d2687fa1fe082f92685acb26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af6982924325775d0533b59ae1fea745

    SHA1

    f0d5529f58514faffc5cb1b4fd9b8d39dee0e9c8

    SHA256

    721594fbf4a49f2ceaa65315e42acff528bd194c3031deebc1c212c63b7fd7d0

    SHA512

    7eaf3c960373ca645b8b2ca7299d26d1bb4f618c45be1f31039381706645e840e64807d8421dc0d66fd3f3b3cbdb920bf3f08ad1a5376f13813602cfef30b217

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d18ca8f84a2bc80a199b136297f83be2

    SHA1

    4009742cef6b667d74302395515a0e6a1c952927

    SHA256

    2fa6d856b9c2a4c4fac4617c314d8d3db95abcaa4ce8e984a4e9d3579517a785

    SHA512

    eef95f9fdbed31b85628c4edfb98a70d5faf27909d3819f15710263a82964d583827957d6cea6de20b1df639d2dd9b1ceca352cd34e17f3f6996c5809fe84618

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd56d4f741ed7c935a49a850df27c87c

    SHA1

    4614ff9e30fe991ef8e6f7582b2ef6f679ee579f

    SHA256

    e0d4de2c8ab91611a4bf0b9960bafd531b7b07e0612e486a50c01f85cb9aa706

    SHA512

    35439fd4c3ed6cc01c5673c2878b85da78d38516fd26b7c0b102db8a488e2fa7fcf7a396c9b5bc86b6bb5e5fcff32c406167e753b3e4668b39bd07a7758023b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc80fcd8435a5f0156300220d0fef674

    SHA1

    30cd4308b953266368645e8ff5e74f5b25d4643b

    SHA256

    142ab7328e5d5c26fea9fcc2bc0024c117a27844227fdfa039bcedbd47cda299

    SHA512

    2baa964c45bbe0ef90efa7aadee35c2cf6872980ac2f72eb84f0b4956689b843d5181e94c25d50eb4b6807633c70236601181193f978672d005d2a4ca51581a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8c5f808c5b4421e183ad5cb63bf81a9

    SHA1

    38f4c64d6406a70cf79a228faf673b12154c0bf0

    SHA256

    9c9bb1a681d722d88734182d84b33644850eec38a54da05e82e20a6846cd86d3

    SHA512

    9365980eddc3d63f867d4d50cb1d4bb5681b70e2c10e3fcdc5eee380b3e80c222bb3ca72b76bf9121381953a05ba60941ce4f0649541e5cce0ce5f603752ab80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23ebc77047cb4d477e38d3f9f7725860

    SHA1

    ecd26959f3ab28b4821ab549fc44265d60e91cb0

    SHA256

    d4d6e19980861aedd129917b1d39bf8d7b346b980002d338ccf1383fb6448a83

    SHA512

    16dbedf5df22235a3fda58b1f08cc3fd107c4674864e7ffe7463850b304c071c8ecf96c803097ae3a3c3220da2d9f395b4d50e106b8eca67eb8a918e40a41d7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a7dab4dbda087736d69bd2e55ec51f7

    SHA1

    b80f127d383e3b099813e0c8f89280d8818f661f

    SHA256

    2183c4893c5a54e4f4e41ba28574471a4a84289b7c9579d0cfff9c5bb2f130ea

    SHA512

    26954e5e85b03368caeef12bad4bd27bb326942f2690606b8039db3dff18d4e9d330103c338bda558ccb3c3823f5ef910d8679bf35f10d8bb247c1d57633f817

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c146e3ba082255d8e6f798fecadd9f7

    SHA1

    d1581b5519869ca028d5ec0c8aa0af0f14a7c481

    SHA256

    dd6d9c353719e92a59077b4338b6d7fd931166aa7fd611a59bf2ec553458177e

    SHA512

    51f7b28259f6eeffc55f9469271ac49d63dff54b50c45bb2ae23e5023d1d73e378fe566936db0764ee620a1c6b9bff52c52870c7cfd7792a83da98290bc85d83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b30f70561bd374868ad22718abdc34c

    SHA1

    bcf21ccb0b203a69863017bbfed23c56b85f6ac3

    SHA256

    1f7a2e99073835bbcc717451ac869861bb767f7c16b02c91fdda016d720d5884

    SHA512

    626921c2401ca81dcb9e37a8a62d23d8c6c490f8d99ce85da8adefdc9be26735b9dea22f6bbb308d5b5720c2fac228d96ad57c827c724cfdd9bcdeac8e1100ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

    Filesize

    482B

    MD5

    d7e24694df6fd6ed973e89920ba3464d

    SHA1

    0bc7aa807bc4ce69eee6f9449b897b35bfaffc59

    SHA256

    0f2005bb6743e62323fa0fb62dfb4579451e04d673f0733da3dc26fac9f73dd6

    SHA512

    2b2a775bddd76b2cd4d9810869d23803a65f43ef9429da2fac8cfc70df73c8ae47967cf812ff2fb9600398425b41a5935e25fa20bab6fce6310eab5e4094f2e8

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\52G8PVLC\3604799710-postmessagerelay[1].js

    Filesize

    11KB

    MD5

    40aaadf2a7451d276b940cddefb2d0ed

    SHA1

    b2fc8129a4f5e5a0c8cb631218f40a4230444d9e

    SHA256

    4b515a19e688085b55f51f1eda7bc3e51404e8f59b64652e094994baf7be28f2

    SHA512

    6f66544481257ff36cda85da81960a848ebcf86c2eb7bbe685c9b6a0e91bca9fc9879c4844315c90afd9158f1d54398f0f1d650d50204e77692e48b39a038d50

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IO0LJX84\cb=gapi[1].js

    Filesize

    64KB

    MD5

    63e5a0b45632b3dde3694ffcaf0e3f7a

    SHA1

    923736d0cdc308331d5cfaa0ea159bfedc83d53f

    SHA256

    889109910477919b3457416e7764bcd0add19fd959848253026125c7c35c43db

    SHA512

    5b886c4b5122d61f0209ede748aa84445c9388cf38813316c41b3dbd2308216e88394d9a45cfc27113c0cf3bc93b9c37d808f6d3c67888244c176ee095d42259

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SVBQZB4R\avatar[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SVBQZB4R\f[1].txt

    Filesize

    35KB

    MD5

    7cb27e698a55a926e195406b724e03c1

    SHA1

    a383000f71825b6929bc99275188ca926d08677e

    SHA256

    43fdd2935380f603271af9e843aff46ffc9028e7896068dc91452f2ef2e3c2f1

    SHA512

    9805b150ce6a903a4a12002d9b5c403f51b207a291f59f1e4de7577c963c172feef26f6d3690da8261df5d7e65059bdd85b01daa7bbd34954c32e505c578b095

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SVBQZB4R\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    23a7ab8d8ba33d255e61be9fc36b1d16

    SHA1

    042d8431d552c81f4e504644ac88adce7bf2b76f

    SHA256

    127ffe5850ed564a98f7ac65c81f0d71c163ea45df74f130841f78d4ac5afad5

    SHA512

    e7c5314731e0b8a54ab1459d7199b36fc25cd0367bc146f5287d3850bd9fe67ba60017d79c97ea8d9a91cd639f2bc2253096ce826277e7088f8abfe6f0534b63

  • C:\Users\Admin\AppData\Local\Temp\Cab1853.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1866.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a