Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 16:36

General

  • Target

    2ae2632c67e6b95e412227a94e5a10e5_JaffaCakes118.html

  • Size

    72KB

  • MD5

    2ae2632c67e6b95e412227a94e5a10e5

  • SHA1

    f620300500424eb8d318655417cb6ee0ec2bb0fa

  • SHA256

    2240fec0f3e44071f13d36834364d6720888ca8478af3e2d27efeac02e8ec6b9

  • SHA512

    b23fb7fbe040661ccab5cbb682a845dc9f4e162a0e383d36bd6e8356fc50d7f32efa62a259f2c44c97dacf3cc492ce138b149bf0a8ed3286e2e4c637bee38714

  • SSDEEP

    768:EUb63eSdBWNla6owrEQvQHXKTMM28MwttEkO74/xRAE7KkFZD7fq0:EUb6yBrJ43KTjPMUSkWaRj7KkFw0

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2ae2632c67e6b95e412227a94e5a10e5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1592
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1592 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1756

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    def160c037e814072af98d21913d3855

    SHA1

    3e8c1cfc541ade5c1083b9e376531b535074888d

    SHA256

    105eea9a33d596e337feefb4a7b383cca557f1f293cd6b3452f1de9ff831ef3a

    SHA512

    717e7d1471bae85c1fdeb86f1e3a7b5d2f6a0fcfceca98d66065bf549335cb8a6c2e0d562793bb343a53a9bbfd10eaa6a8524bde3219a448c7c43b036fa4b10a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    ce6a84d093c05401ca65aba9a288593d

    SHA1

    5db6393530ecb8e7b5ec2be2f44242809175bcaf

    SHA256

    cce8d50b018330e60e698023ea90920f4b85049e2a4c6b1e7de8e3a1eb66562d

    SHA512

    8cd40f9f5a3b835a04c51bd61c4a5428e63bc1952a639c254c3f56b6dbde4bd48c85780419d0f4e69572fc4256235ed41a4e0fec04c2dd234391aa6ee2c2d8d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a9c1dd49c2549b05ea1afbc81a7d01b

    SHA1

    a5f17ade9a343ed509d58e4c690411b562fb1e89

    SHA256

    3eb602f3538de3e5ee871bcc08d0a2d98fb7148a087778cb8ae642bac675034c

    SHA512

    8e9d1ac5899dfa53f667adb863ec3a92b1f8150be0f87f29fdf9e7fac16816acf6c22e7302cba65033e2706d3a8525afafd01b09e4174158ec9188668f0120f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c7418a51f965c1705be63934f0349835

    SHA1

    e4b54579fa9cfaeca90a2d8436af7f62f4e5d72b

    SHA256

    2f47226f140483d79b39fb0957c5270ae13b91544050d2f2780e211032ee49c8

    SHA512

    19bced1d69f743421bf3f84ef02914f2d55b0f35a97810c21464b966be983f6fe5694f7c72baaadced7546a795eb6fb3787e285cc33c86abd60bc69159006c97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5305a1263532a11b1b9089c6ba016df

    SHA1

    52f10f388545b6756989d85d40c5d7b4b1843ef8

    SHA256

    21db11b27c1c67845a8362c2c595f8c97922c0b408e42e21affc44fc03b9d175

    SHA512

    5d832c4a79d7d6d0d7b17921a273edd52822422c130193c500fffbe52b00ae41128964d2d7c29cc3297200bf9c4228c8bf933e4ee0d1de3b1d84129e66c67897

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89fbcd4946b4895c635fba3c2d9c53e8

    SHA1

    60992fcac90c1bc3c4d586263238863ef8690ce6

    SHA256

    ac518bfa598bffbf744351330d671ed60ddb927a389a54a8ac1d3b062b52b747

    SHA512

    97609017e9e1175fdb2090f30136e4673d2a4449b2a7503365c16fb92348668fdc64cbbfd3153c0c36bfd5a24f4f9e5f50f7925f7c3e2734f685c129243176c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f1c87d9fea373ad9ca6b7e724a57aa5

    SHA1

    6faa736c4f7bf2496b5c0d28b6748c06b8abf716

    SHA256

    f9cd48345d009751a3a5f41e55cc4a2beb83814df9aed63cd8532d22580e76b2

    SHA512

    43c92d47a607f9c4402e59c92b8dbd952d351c707b2f666824c332ba8c066bbc01cf5ad7187c8624d91d978ad799ded20f19b8dc759defe30ce9ffe80081f2d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1a2eb227f8dd31f56037977978d91aa

    SHA1

    70aa1325ad48d4c12c6acf7d9aa07595c0648055

    SHA256

    cb9da98a843f9ea9f45945d72a124936a7e7e3b9b82cd00ea2a7ccdd466fdb0f

    SHA512

    5a5e696896b9bf583cff0f7780743e5baf349b756d48609f258370c67f39c745cc7abbb327fa1d7110c7bc36f38fd8c2b5edca885f6e5d6add4021a51ef26dc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b475d3c1e0e9c0b3e0d01d7511e0158

    SHA1

    abc7f38c94614ee54b0e959861f993d55b97a76b

    SHA256

    221e0742adafc44f36a4cbed190c65b60ec4477f0756bfc67d0be637fa000cd5

    SHA512

    139551656e7562a24cf4213954954a59a07433b7bc23aa801d1c4a26fd4b35d41379dbb45d865605e7581df8c6554c26e3a8b92d16e557ec14b400b8eb8f235e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bfde5917469db0294b44372d20b26057

    SHA1

    9f5e0a11629d36b7598667f32f3e3f1cdedeff1f

    SHA256

    b4f6d1f7c5c2802643386ef3ce7cc22d5f09daad8b4aae5be68bed2943c11fb1

    SHA512

    50ae3411b33816285b6b2edba0b077490a3a2142d9b7edb785af08850788097abfffeb8e1dbbcd34c46e98e753120c0075579184de7463c165a9d66bd7b0a44e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b0d805fafc5205357292bc4db32c580

    SHA1

    ec3ad9270f6ea747c0bf6017d66ab0654e883686

    SHA256

    d1a345f0d10c98e020b33560a7a8e740dd9901c3c41b5460124e9bcf7d250ae6

    SHA512

    ac29562d783299f19c50393e3b853f4f2462e757d7c6cc646a2d885784c26b8e5c8a1fd21e73111061e6fb8bae9e0bc0c131c74662ae22c9870f302b64389c30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6adf97269966bbb893e5785834b7b4f

    SHA1

    be5e37047c76d5829dacfd3da0508d676f3e522f

    SHA256

    fbe1071279c058f9d45c9659b9003fa1c5292f57d805df07295d747c38f376dc

    SHA512

    7a3f9346b997f068a02ba27b5deaf54651315c63fa4b4bfed419b345df2438d88de777d3a8e7860a78bd33384f2732e4486272362a8289388d7706a67a95e6d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9648e80f077380671cb3c378d87ac4d6

    SHA1

    b6284a1276c3d13b9dae31aeae140dc59e710337

    SHA256

    c86ff0b3e675eb55d32975e3e226aa87bd026cad1854968622e2f9fde67d5f4a

    SHA512

    3eb676f433bbda891ea4a37b5f83e41a0a7c3f69b6bff3db6d044708b0713968820c469c558b0982a6eba2a719387890cf4b284cee07966957cd49d99c7e1bd2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2dc1b19f568b9b5182af7d65b19ee4d2

    SHA1

    d607653daa38f1934e8ea769fe95e79302bcffa8

    SHA256

    109cf7e7550211ea7b649d37f06cdd9bfbe867a703ea72a7d60d9dc26e1e3b5d

    SHA512

    78c0b761bc8bd33e0e7eac0875b2d50cec6321ee24da0104e6a43ecca5db0b9d4af84a2b17e779e28c5f584c403623256044d86b1976d1e8943141938031aedb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af980cc67bac5332109ee5b494778b5c

    SHA1

    46c26c1048ca8d14ea5bbca684278502947eae7a

    SHA256

    0da10fa51818378ab0f0dd0282baeb2462d9524ab47520da90b8e2e060535ba8

    SHA512

    97c08a417af6dd9e39e065adf7f458f7eb0b1ef8538dfeebf208b15a437fdb45e2dbc4cef946cf5d1a77205ede73acba7269f297c797ca112441aa64c99f2770

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c317356e0bfc98c9bec19877888133a

    SHA1

    4fb81c9eae6ef55c347280c52bc3bc4996e98d19

    SHA256

    b60c884cb529dfd252cbc3a6ababb490092b59daae2e5b5ca6d5a201f9fe3da9

    SHA512

    0573d0563c023f1bf021d45d276bc57c544ec7f858dcea50ec63124d85b723c3a2f23f6de6270d521e04248e1479bbc670175ceb7f8d8bfa66f2d616fc682df7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8598c029f7d4b14742920a6ec1c80035

    SHA1

    066e666b0acb17feeff57104464af3e09c40dc2d

    SHA256

    fd73f6fe5ad175ca3f6ffe0484512ea1f4f97f73bf51d72a9f8405987b16be7d

    SHA512

    35510490179496f6a83d96aec29e78bdb24fb284fd42ebad8ffe3f2786e12d06f1aabc9f0287ff19d9d86b569ce24de1afe7ebf0c2f28751d91e7270d6059755

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5fe0236f5456f59896aabcdcf76e27a9

    SHA1

    b9b554af720f0767dacf9c668aa96a1b3d6326f3

    SHA256

    4da337d55fcb59a1756459700f8f23d4d12d1ef5bda9de8e7458c8299703dbd7

    SHA512

    21c4c33ec29d8707ae9ede5ac528778a42cc2393638ca6febe8cfc13b2a4af2e52e594fa4c6d533208210ea27ae3b1fc932c7f566bee37f501623773ec1c4e06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07cb815651b215c82c3ed914d79aa491

    SHA1

    d882f1b722e1f938edffb94745ef29618427e153

    SHA256

    734bf6f1f8429c4ea876f8d44fd3f2c0f5f8b1f5c280ad932a2add5faf2d636c

    SHA512

    14e5a88b41f06ebd6e1f6d2b2d7399aec752d6b8dccd0db34a07af04cb1e855167379d9cff4008fb3e9ae2a3beb94f1400471db44766f43f4ef8ab012cbe6a1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    5e6fa35743e4fb4df27e17eb7c2d7143

    SHA1

    a6e24b59bf28210bab680255f064169765d60571

    SHA256

    56e37dd8050fbb03418dfcb927af7b8a33f88092e8caceb1ebc4af3e3491dbe0

    SHA512

    e027a5fd9103ae79410620601eb3a66ee7acc5a6b78abd6696624f6948c19e2a97b8924a245fe6349aee24f4acf1410761904759363d6b02dd468f4cc45ba7b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    e835bcaf2d89c9cf30aab84b9048fb4d

    SHA1

    90357883952e39e2ffa0cc21f0621e31fd1c13f3

    SHA256

    0f9e05de12da29ac1099e047b34350bc74096056542f914842bd9406ea4bb2f3

    SHA512

    a7d66cfa8fa44471f2e3959d09286a05a3960017fb4630164238e85f60e5eef76d58c703ad025eabd2e58115bc94b0e3c6d85b39391e854c1350e1520850b770

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DKX8QD5\platform_gapi.iframes.style.common[1].js

    Filesize

    54KB

    MD5

    7ef4bc18139bcdbdd14c5b58b0955a67

    SHA1

    afe44fd9a877f81a3c36f571c0fc934324c6cbd7

    SHA256

    192bc707852c5986f930528442d88a79e5bcf4513aacc2b722a3c5e964501838

    SHA512

    6c2920e80e4d5059588a32f75bc2b5dcc19f8d68224c0935d74f9fbf49476ca5b1ce43c279768f3d36871dfcec39f36db3fcad559c2f93cc540154cdbb04dec2

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U8A9A2DI\cb=gapi[1].js

    Filesize

    133KB

    MD5

    4d1bd282f5a3799d4e2880cf69af9269

    SHA1

    2ede61be138a7beaa7d6214aa278479dce258adb

    SHA256

    5e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693

    SHA512

    615556b06959aae4229b228cd023f15526256311b5e06dc3c1b122dcbe1ff2f01863e09f5b86f600bcee885f180b5148e7813fde76d877b3e4a114a73169c349

  • C:\Users\Admin\AppData\Local\Temp\Cab9416.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\CabB14A.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarB08D.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\TarB1AF.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a