Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 13:03

General

  • Target

    2a1667efb0bf112070cbdd922e66a412_JaffaCakes118.html

  • Size

    56KB

  • MD5

    2a1667efb0bf112070cbdd922e66a412

  • SHA1

    713be6858e738805865270989328c04c43b5e959

  • SHA256

    aa9e1b8a25ba3eb59bf26b17a25e0f3fe88f694474950b23cf3139915881ca1b

  • SHA512

    2946e42e57227226043631768b9bf19817c106c03aa310977e90568d5a32d3154b29810c7bfdfee2b4f8e2abf4a8461fb4eff50f4efe8064cb17e8006358cf69

  • SSDEEP

    1536:wmDiHv7oa1HEwaQdT9eDFwYeA6eWJp7KAoeAQQJBB5zw4XhWRe:9DiHTTlEwaQdT9eDFwYeA6eWJp7KAoeK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2a1667efb0bf112070cbdd922e66a412_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1612
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1612 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2996

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    01f6d72b5b393cc9da0cf0999531628c

    SHA1

    575a3ce0e00e20cbcf5f108654b653b7abf0ce73

    SHA256

    543b85ccce008b8183762d5314650e04a3e3574673e62209965853a497a77a23

    SHA512

    e2f68cea9401796945b9322e7dfa727c503fa17d3f344c329194c1038e4239421d350a725ce806084e4e797d87a0f629eb25fe5f6f42e605305d079a0cdb2ec6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A16C6C16D94F76E0808C087DFC657D99_F82FCC341F124F6AC9D153F6ECE89FFA

    Filesize

    472B

    MD5

    94d9272cbcd99643315e3e8ef025bd78

    SHA1

    a0fa9f75797641d5a6c0c5ac3b66cc34b6be4801

    SHA256

    8821aa96b7ad3305744ad769e70c726766782d6ceb0cafcd2f850a82c922f500

    SHA512

    d47539c7b4a0f61a2714083310be4ed85fbdd7ba08bcc741e1462c35257488732b4b8178b2484053431087df915481b839263924266d73476eba1f49d3e6a340

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    93e4fa337ddd5cfce8a5f2eff325a2c5

    SHA1

    18e3ed92ce24c07e39de18194beec41fc818a859

    SHA256

    978492c81256bf5199e3fd7fceaa5279a306720553b4b93ed3034effc0ad846e

    SHA512

    11383226f969e1576f8d77e45ccdeb6f86462b54fc48c627e75e67c28de36451188fcd6be0ca46ba50ac6e349f931c70492ad9296c7aff4dcc86f6249ea9f8fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    be2017e9c03f080a52ff057865e5856d

    SHA1

    1cd535208febd38f0ae73d3e04ef06f905681f9e

    SHA256

    565882454328780028dfc449f167e9d8a8d5ac280e43574fa8c38507b38df6d8

    SHA512

    4a791a1b7265135c6fc4e53921a38e87a8dc7af03f4391ea89dda4bf38e04fd03353e7f9329d693dee06b2c9b9154ae66845429dd076fc64963353d11dcfb848

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6aaadf40be694caf604a21c77e5a0ab4

    SHA1

    34ae3525a549f31d5601b2dcd74ae032b8a574c5

    SHA256

    ba6171ef96e573c90b8bc0320554d08b51f65c40f847f9b0066fd931ec3c6498

    SHA512

    0c355833dc5238e6cc291dbd328959e5451f0bc97805a928441a0dc9a10451fa596dbf4d7d7a3a26028bcb1f010cd75acac78b99332438685378e4d3c20eb05f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b103866bfd7adea386b068acd6886be2

    SHA1

    0ed4565598df011d0cd9a28126ecca76884fd7d0

    SHA256

    89eccc6ce75849a61d1ee5b9b86e92a3f35ddeb636aaef48389ea46b318bc706

    SHA512

    b0540750e09f5a8365aaf6af1cd2e6026a6f1097b3c6512943e373d188a365087f745e54f0fa55d2dfd877a7181ac22149ae4717b4b7cec02d7b5581e3879255

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a1c67601b40c43270dc0c9a7a06d5fa

    SHA1

    e93eb5bb8034c7c072bd1a9e84af4a84b823615e

    SHA256

    5f368afe1ad57a4b02cc411fa46e5fda19d1ac23fa23f45a10fa81c008861726

    SHA512

    22dfb86a31ad4eb693ec7fdb35f4ff8053668be96ae97c2d6da8dd1dc7fe25791e1302a8098b73949da94752cbdcd075e111ad4477be9fcfbef76c4d040a52af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ccec8714fac7c46d3ac7fa0d1a281b95

    SHA1

    a33b9bd98f5724fb397f751adf43449dab0f26ba

    SHA256

    5972cf5592baac40e0deb52b68e52a0e8ce4892b745f6731a54b2cae50bab017

    SHA512

    5c361a9ed1c5fd491c81b8f44da879bc66a1fabb1dba0308dd9857e50475894dbaf650ef19b1816800ef6e592c9fe9639f0fee3631ee7b4ef34ce5b1e93e22d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3866dcb6cb88ed6111c7cf62e2ba381

    SHA1

    16c93646b62b28fea78fadd5fa16133fae76ea48

    SHA256

    033a87ebdb7d3b40453da201ab34ff24ac3cfa8e9881fcd5cffc107d33acbfb4

    SHA512

    eba2488945132f1de6a5db946770d74796368f98f711d02c2a14e0f46aa3f3b113accff6145a8fa91bf7915ae580649cce093269f06d0643239c0f3c124847ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e1ea43d64c2397ab43559244ed5aa32

    SHA1

    19705d4d303df3430a23a843dcc943e0881d8491

    SHA256

    1e59fe43935f10977d30e0c868d2fe31b06af97a7fc17b27071ebd47d769eaed

    SHA512

    c77d5f6551772d13d2c166f47cb0ccedb60d1fe9eeccf2cee71877945be70c8b261b9e7bfa7f9614ae7c819a1dcfe51911b6c46d15e4010dba370180bad77687

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8901130051e88da8de311ac0124a860c

    SHA1

    acfefa1d3d31b49bde1929b9eebd832a3f874e78

    SHA256

    8c4e60f88ecc1372e527192999f466f9190a8cb943845ae7daaba27636a0216a

    SHA512

    2d458ed8d9aedf965442d2e7a32f1d591f63d17bacff5023af37ea7a260d011c08a6be4ff08a81133142742d25800ebd0b8201e5d01e3293760e4e78443055eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c73b719d9b15efa29f68c6582d60d1e7

    SHA1

    4ab58fbebf27beb684e020295870ada2c4773460

    SHA256

    25dccc3e5b607599b06d85a7ba642241ca4bd8336e8ab1f06829a01c37e4bff9

    SHA512

    07cc36ac316fc8ff7ddaa68d6634ef709af268b2f2e518a243eae2fbec7220251e9e9ecb3fe29c6f64465747533c13cb2bbf1f005467e36855a6af365e75c804

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7092555df1b7444c23f0f25c6998ecd7

    SHA1

    425cd939bf799ac115d32463ff484ec7f073cdef

    SHA256

    a5e44e67cd33598c5b23f65f63f5fc4bbe0f122836566df698342ea794e01e5b

    SHA512

    aba0eae7a677ffa44e03c1cf25aac34db7e1ecd247a1bceac069d3057de1d5ed89ef8fea2ccb6d7c257bbb6173c9f6cd992d2e7905be1e5774fc83e95a6c5e20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5aacca54b22168dfb043a7b8c3ee4c8

    SHA1

    0c987b45f3e640d861d893c729c8c1224c2ef2d3

    SHA256

    586ce2cc5196a8b62432d878b13282cdbcbb22c0843492574bdaa7e88f2a885f

    SHA512

    fe9afca673975954fa9d7f13da8173864db426730f0c6d2c79fc96d785a8c558770646c10b1d9dc22d3b7c15d83e863379b1aa9ad29ac06c0398115912a3d9bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d15a10c76ed2e45698ae89c3cfa7d10

    SHA1

    81357484694b87af80f7ceeb8af0d17177dd24fb

    SHA256

    d30bf5ded66e8da5b08db650bcbbe71817efb4e5be8047d6bb2e4913e45a97ed

    SHA512

    ebaf604da24ed7d8642390e8090d165afa7fbda09eb083c28a1ed32a1b180ca7b941bc7bc2f8b8ebac40110bc2f9a08c4b4e6cd4d2b66743c1e88543de5a30b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82449abcf0a3752b2c849a0eb1254bdc

    SHA1

    8bbe6a7a93d7eb863521e4705f34249edc5ddcc5

    SHA256

    5cecabefb511ba23cc62bbf1c4c0c397dae2e796900cbac639c9a1af3f0bb0d4

    SHA512

    6a0a430654c55315e96f1019c8b225018df460dcfdded009761602c3262411389ec7606294753e855ae73879d2dfb04805d7ddfd1566181b47489aff23b02e62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1e0cbaea68042d7a83fdb734c51cd68

    SHA1

    908d49177a7f646d7f667ba02d11dd972a53ab35

    SHA256

    b98471f19f068385344f7926cb2cb7d06c07c9dd0a3c261d9dd9f25c3dc0e53a

    SHA512

    e250c66bd562a652ee68f30f99b35628e1b61fee22a398fc293c56a6284ee32ecbd1fe08ae7e18e49c9769578c4a404867ae47fab2c0156c001e69412810bc92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd81e09fff130f47485dfdd3eba70a3e

    SHA1

    513d3005dbaeb3a631468e334128cc17cf234c3e

    SHA256

    2e994ddb0dd0933bc11967e40ffb6e1cd8d5a5f1cc59cb74ec3e321844162999

    SHA512

    50d048141e8ea86644a99a6a98f19f60bc27a7191448f93c98818a5056b6d97b4861114f666379507087f7239b0020e8b10074effbf033aa2f4df017d7d24feb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    892c1316d480843bd51da90ac24ccbff

    SHA1

    87ebe0707a52c1065bc8f90753bf1895a582038d

    SHA256

    dd63abfead034d194b509c9eaa595fd1d1a219ff9ee4a067eb8b0dc988c65d61

    SHA512

    3c19b10365acd30bfe434c25b97960b09a07854a45232e675d862d470427ba1f1c7829f4db421bda87bee95c50993ae1cfb32958ff8ba2290250530213d31d34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a37f5075cf76dc1ff40060c32ce4c3b

    SHA1

    2ef3d82cc370e2f32d7cd5fee7dc942fd8a4f356

    SHA256

    ebacd1d5973987bcb9d763ac928264cbd6ee6bb563f97b7dfff2d95f2224e5c8

    SHA512

    68e0ab1b826bdb0478af4e764ebcf3137a7cbbd06027f673640ba2b9d378ed026b11f85e0520be7d101cbb6dc2a88fc9c1b954e14718c04d3da12212ab2f35ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fbd73d8c8ae5c8fc4996425fe9a284da

    SHA1

    52db2a9e83df224262fa40be60f199cca0883e17

    SHA256

    b8688de1d759c474ed00ef55f9578265a9fc1f7ebf49901cedf344f76760275a

    SHA512

    17ebbca8a3bd6444edb0b5fbcf5662b5cf1c4718ec272927cb13c55e9184798b5893e5b2b33dd32f43f5885000cbaf467f2acab3ef58e147b9565eab4f9f7e96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d07d2c3db994e57f24f6f926cb84cac

    SHA1

    7931ede3fa239d7b4748a84b709d07844adfb66c

    SHA256

    b3cae509aa4a15eb291514b70224cf485ca04e05db81e5bbb54cfd86ad3bca16

    SHA512

    18091603bcf16bf8adec5e7c09cb3cc66accb3417ac31ca5b57796e752d12acb232a878c9ff6cac6b330cf742b5d007c91d4bc9b80f67f62afa7d040ef7f1cfe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1880c5df63b62a8567713461e7fb0ea6

    SHA1

    3702dd038cfade6b2ca952cf9b8b6d7817416ed3

    SHA256

    d616309cfb212fca32f091253b7c8291085efa424234ffa7cb896a352c389ee8

    SHA512

    5005a04e787ad0ab00de8c38ac28e60db5dc60e41315cf84660a7d865e002306f0dfe4c3a706ee7e29b15d462ead8341a80c55e18b79c8d5e1069031191a116e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b264822e648dcb300e53846be5dab2c

    SHA1

    9345bf116aea86c337d5e710da909116fbcce200

    SHA256

    2a62d0562189b20b3bb8f181145109b02ebfc9054c3764aa1fb012fda85f9331

    SHA512

    3cfda202b6def515642a3c36fbe21457179410b0b8316648ff22b995ea9149841a79c815c712f581bcebcc3cbeba35ede845fe32412efe35147fcd9554cee1a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c00d9e6d30c00f586cebb14006fa2bf9

    SHA1

    d0ef9b5c20ac82ebc6e2f6a72ec358f4311bc3f3

    SHA256

    6b8e28c48986c91e535504477ba3f7ed285fba9188c01bfa4307b2fd8e9f213f

    SHA512

    a81d384a268cf3f5b63c99c2991b273096d1a750a21c1176edad6c03db0d23b6331459bd1c875d039514f56660bd8ca91a6ae6ee870c05411f7bd6e5b1d61373

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IO0LJX84\platform_gapi.iframes.style.common[1].js

    Filesize

    54KB

    MD5

    7ef4bc18139bcdbdd14c5b58b0955a67

    SHA1

    afe44fd9a877f81a3c36f571c0fc934324c6cbd7

    SHA256

    192bc707852c5986f930528442d88a79e5bcf4513aacc2b722a3c5e964501838

    SHA512

    6c2920e80e4d5059588a32f75bc2b5dcc19f8d68224c0935d74f9fbf49476ca5b1ce43c279768f3d36871dfcec39f36db3fcad559c2f93cc540154cdbb04dec2

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MEFTDE7Q\cb=gapi[2].js

    Filesize

    133KB

    MD5

    4d1bd282f5a3799d4e2880cf69af9269

    SHA1

    2ede61be138a7beaa7d6214aa278479dce258adb

    SHA256

    5e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693

    SHA512

    615556b06959aae4229b228cd023f15526256311b5e06dc3c1b122dcbe1ff2f01863e09f5b86f600bcee885f180b5148e7813fde76d877b3e4a114a73169c349

  • C:\Users\Admin\AppData\Local\Temp\CabCB0.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1875.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a