Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    11/05/2024, 03:57

General

  • Target

    3297e82d3e782e901201b63ecef3a6a8_JaffaCakes118.html

  • Size

    140KB

  • MD5

    3297e82d3e782e901201b63ecef3a6a8

  • SHA1

    6ddcb44c72856f5d366deb42fb0e30375cccabc4

  • SHA256

    cf5efdc8d9c1aaf9ee5f2d6c3ec5f1e089aa5c88ba488968f02f67cfbec7b3cb

  • SHA512

    f33adb1057273fe35954cf418290a058dfce1e52f630b5d3848cf65668c87ac0b29e4f473d32e2daa3267413c64b1dc63fd626d36fea1719564bb1b51c518210

  • SSDEEP

    3072:l/EWaxiKY65h65h65h65h65h65h65h65+r:+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3297e82d3e782e901201b63ecef3a6a8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2932
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2932 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2528

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    947801e81c4531f9d766926d453a23c6

    SHA1

    1866e3139ac876c301c49455fc949ffdfee76395

    SHA256

    f982ae28813f0efc16b9e4039473635ab280f171003e850b06e4960b1e26f14e

    SHA512

    41dacc78db3f6da8238c3c586a09442f5208d6657ef0d8de8ad1eb1bea57de1dd57472902bc1857616192f66bf8a045af9fa5f8f9456bf72678af9a4b2835ca4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a430cd8d8a387436ea42ae9cc2967b8b

    SHA1

    1b43b7e9f52e977e784a9f85a8b87be10f6c2fce

    SHA256

    4812b669fec7d4c00d252898ff6f9b5a90043488e11835f27dc6f89e65ab9433

    SHA512

    06aaacef35dc0c4049e6a68df6d3bde612640de793095610ec3c6bcc29245a26353711326002a9dc56bee05e0d391d9c926dda92fda387f67768aba5f8dc0dfb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    498c39ed8b420615eaf76fcab2e70bec

    SHA1

    0c3116c2cd33f5872bfb9a444bc2a0f3b9d11481

    SHA256

    fa8caa175d42c30ceaf77cd6e453c7c22255cdf603b48534f5867884f31811fa

    SHA512

    2d6b0f6c1c80b438e5a46332befe8bb8968358eb8605fae4e41eecaa87b021319edefedb9faa74439baf7c55531def621657972c0b0664a7c0641c74da26e037

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75febb71d3da124ca6d5dfefc3b1e5b8

    SHA1

    a3125ef1a1c6c2d0a5a1bbe05e05e4508204df3e

    SHA256

    3ac41f9ce2a4e7e2c2e0f26c2e056321161b55cf98baf2566dfa5adc2a91aa1e

    SHA512

    c42f91cac3b66050f9bfa11fdfee081ebf594b6272e0bdf204ef2a18e21dd9de5d09b6b5c020357be7e666094293f071568949538f512dc655dea27c2fd52ba3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66d5be01593d85cac7e3ff94bd7b4079

    SHA1

    8eb9ae6871c260670854c0b82fed3ae2817fe5bc

    SHA256

    fc740509147b5e28b92ed46ac092f14d1098ccd96b6b82f4da859e66b1f398c0

    SHA512

    c167f95bb2620c166091469b1e1383f928427b50e13e3b06b150edbdfb9bea6e31f47ba97255c9e7f8d3cbffd7ecb1a6dbd2cee8505627d51dd2629165f600bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    262d526c845cef8f0479852e6ff749c7

    SHA1

    87a95b492c112a5af0d968185adfaa8d27a9e953

    SHA256

    a72ca5a9e9e8c893321c7a249eab0464b349c5d13426c54a6172b6ab79bc9b3b

    SHA512

    12778f95b3ac4d88f81b6090dda27ea6467d0e3a70062f1401927c42dea6fc6f0f29f43e12b6485dfda4d20f56dc266a5d7833b19bc94c3ac3acbcd13da102de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb170bc17a2377ee0bf04edf39c12f92

    SHA1

    78c818a75fb9e5efbf7eb2c0a0c1f7bb13f76982

    SHA256

    cc63f3193677302f25f9544311b97dd6cf4e04273eb2aeeecdd9eaa719574fc0

    SHA512

    38d04bd9ac15ed2d723b32a1fb7e3891e2ff4645c15ec54bc5d05b543a9fd9ca41d77062e3d6159dff24ed1e1cadff6cfd1e01903d7043d3cc465841c5f7894a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    948613eaa6919fd132837ea6c1e02d29

    SHA1

    3d421985d9642c592afd7ab552109b087fdd6ff9

    SHA256

    8fe28ce1af9fdaf35760e3cfff985cd86195ce1538b20cdcb223bf82cb1e4617

    SHA512

    cac8ab95be3418867c09ef90fec6f740a637685d3dbf5d62ac7075d9946b301994d58ccdb5f1d258f537fed6b5abb0136cecdee6422a90891218234daaa14238

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b2c661da3272e0de0fff3a3191fdcc3

    SHA1

    5f7afe2224b4b5e8dd90cfecfd095ea5355923cc

    SHA256

    3c9d285188d9e9dbd569d804ceb0cbe503b46539e6488e75dbf5159c615d266b

    SHA512

    ef66ac239e99e9697d60a25ff3b34af962a270447bbe1faf5bd25549bc7c9352e1de19ed71c242d28e76c4b8e65fdb116c9d4cf277fb1c509291cd17b2d28cfd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8cf1802cda568c6e9aa8bcb575c31ac1

    SHA1

    f3be8f0c4d8b5239d8d51005fe1107313466300a

    SHA256

    41d45052378d2b0b2a085b18557e36efc8d8db87ad924fa3aa29bd443a7269b4

    SHA512

    44db4b0959a1c3f23a83d85ba8e41033b1b1742e60f301fb57ebb9fe5f285a0be03d476fabf770d6bcc55df20c1e76b4e6fc148bf7ad9b320c1de4d24beea592

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f71c16c0fc5b093c9a45225b619a6ee

    SHA1

    85b6d5fd4409d8b6f1030036f5737694738381de

    SHA256

    3c7c045690694d984f63d7a511853aedf90fbcc82e6c2f5bb601d5265ed0e878

    SHA512

    01e2fed376f41bed4db4534efe455268292036d82addc1ccd3f9cafabd7cbb4b8568567c2102bc8f4e53e79c45a7df4933832ac797bbbb5efd336ae4ad88c2fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af726de3e963a7859eac26ce8a830003

    SHA1

    88a5dd51dc55debe885dfe69ab695ef8ee236576

    SHA256

    acdf07ea1ab68967e61fbe658388af7337301ec4cb91083e35f285b8d9dddf3e

    SHA512

    f7fcdd7ccd649b86b8c30fe83aaf26a3d1c1c62179144f9da905db7eb092de7bf2e26842fbf159a70bee251b9616d71f1650545f7604af67b02593187467b985

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    348b923a287b71c891b08bb7711ecdcc

    SHA1

    9a57a9aedc52aa80abc2b68c562ad39c3aeddcad

    SHA256

    2e5905fe851deb84d8f4bc2df76594a3dcd1fbd1a49ee98de65eed6a200b079b

    SHA512

    1ca326410eabd7110ae7dba119ffcfdb5017c42d3fc0ff13ee8ad88b61b2cdf83f868c48a566528a5dcd73a71933f6583080eac68ad1d8d3cb9ce310b9c425a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44bd8f6b9f3485da34e8b952db2273f9

    SHA1

    73d605f7d318b4b4f512919071669858e5b7620a

    SHA256

    6d6d047debd586e16afd427a8a46621fec311062dcdfa28dd8653239dcb94d56

    SHA512

    4411bd0383bd49322729d60dd8f0ca5af0f29c13717c30c248d2d67350add69cd3971a1c2f493724cf754f08255be393440dfaa93c0cbb3bb0b5e7e38a90f581

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7746855c192feefd4c897b2e6ac512c7

    SHA1

    d7ec12f332dabae0efbbfc718725f7f473363bac

    SHA256

    440604410a96e987fbbc5a4ddf2142f8abab6d75b0520960b1e76b945da73e5c

    SHA512

    1beef7bdb82c8f58d54227e95f7fbd157466931b73f5313218a422cc9ddb03e6da0a07c9c677a90f2f3961461888001880df6e50d36f45b1cad0314c66fe3637

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0729aee88bf614b99e04ce69225fa92d

    SHA1

    4c70390d3b90aab67db5b9961d42ed1a5e9d57c8

    SHA256

    03f0fd9d2a7f1b07ef00bb496050d1e7153309e3fa0968e43a9b78565c76ac2c

    SHA512

    0ef2c0b2a7b50465830ff1c3c09c036e3a8b1bee8df3bdcaa27d9e1746d5ae65c6849484e4785fb96e2f9d39ed239f1c1fbda78b871f11bb0b6e7fab403fa535

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9202bc9c443fb41001996e2867383618

    SHA1

    ab7f3414e9b8bf62f3d3bcf1a220ff3964463ca1

    SHA256

    53835817a712d28d57944eeea54ac865577c774cccac945bf4c61533a1a7395e

    SHA512

    5f345f822c75bf97c1b34c806068d2f66ea53b6b7b540bec0c9ddfdce0e4855e0ef4228a1dfdc3b980c511ff9de5a131c006d7e04e51c71cf62e9b0a386b2b6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f8ef5ff21cd1414f31e604df3ebb951f

    SHA1

    3d87c1e27fe084d12a06adfba8ae69b2d97b7694

    SHA256

    6847362817c577762b928194df2342c897bdf55b5adcea3d097d674781b088a3

    SHA512

    c150c7cad22f2c555411a89b233f579e7b2b7258e367aa602bd289d1884484948e28f95aaa28820d11e51c2eda09a1848cda7cd94033b1cd20ee58b41b5c90ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e58f64f09a274f56b62e5b09e491a48

    SHA1

    248bc65929603c99602907c587c38eeb22a2624a

    SHA256

    c17a0324ce9f0dbfe9d5eac4580674822ab4970b6f04a98677bb12663f47194a

    SHA512

    8f1eb0ecdf8957ead93e32905821e39be90d2a94b979b29abb0ca5286f6ee6e6e020ba8474e1be95fb82e830de9098b0cbe488fe7d31ff1502296e174f01e834

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f54ced3eac783fd0cf01a64601cf5fd6

    SHA1

    f85729244b41877af7ddcfeeaf130777937f8e91

    SHA256

    268300a00f8d44e65f2c01aa11ad83efa81e8843130408140678e356c386b943

    SHA512

    b5d2bea5124db587283cbe9775e4ec8ff4ba1d58beefeda51df608db97b67edde1b3b411d5d4f58061d4cd5351b1c5e6e6cab3b74605ea09e95a763701fd425a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CY2G78MW\KRGZWCO3.htm

    Filesize

    574B

    MD5

    32544a2a9f9ef23b1a3bebb86809789d

    SHA1

    a3b8fba39d6aa35e6b8048225dd8792387417b34

    SHA256

    5110837d60248dfddb6855ab865c8a8ad1276fe34637e1590e98c98dcb6df288

    SHA512

    02f046aead0448f04049795d838891e3c271adb1c8929041e8b23f46898942bfc79ceedf7ea8f749b577b176000dd0d06a9e0be3db1885906cf2533701c0f53a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CY2G78MW\dnserrordiagoff[1]

    Filesize

    1KB

    MD5

    47f581b112d58eda23ea8b2e08cf0ff0

    SHA1

    6ec1df5eaec1439573aef0fb96dabfc953305e5b

    SHA256

    b1c947d00db5fce43314c56c663dbeae0ffa13407c9c16225c17ccefc3afa928

    SHA512

    187383eef3d646091e9f68eff680a11c7947b3d9b54a78cc6de4a04629d7037e9c97673ac054a6f1cf591235c110ca181a6b69ecba0e5032168f56f4486fff92

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I819HQXH\f[1].txt

    Filesize

    35KB

    MD5

    6b4c44990f04cd3862d3ab7b66039192

    SHA1

    8cf6fd88266cf2bba92fa7d2f3af76713ea91b9a

    SHA256

    639768c1c9eb45eab561d6ab30e6e49a5f2d5f0359c45e96ef4a14fb5bad52f8

    SHA512

    0b092d59437d5bed0a0209ff8a43c28cb56af1782518a590a1295c44b635d5682214bccef9b19ddc3dfc310af5d9100da7f86cf35530bbe4f5e5226a95d6ef28

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I819HQXH\httpErrorPagesScripts[1]

    Filesize

    8KB

    MD5

    3f57b781cb3ef114dd0b665151571b7b

    SHA1

    ce6a63f996df3a1cccb81720e21204b825e0238c

    SHA256

    46e019fa34465f4ed096a9665d1827b54553931ad82e98be01edb1ddbc94d3ad

    SHA512

    8cbf4ef582332ae7ea605f910ad6f8a4bc28513482409fa84f08943a72cac2cf0fa32b6af4c20c697e1fac2c5ba16b5a64a23af0c11eefbf69625b8f9f90c8fa

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RSAB58HZ\errorPageStrings[1]

    Filesize

    2KB

    MD5

    e3e4a98353f119b80b323302f26b78fa

    SHA1

    20ee35a370cdd3a8a7d04b506410300fd0a6a864

    SHA256

    9466d620dc57835a2475f8f71e304f54aee7160e134ba160baae0f19e5e71e66

    SHA512

    d8e4d73c76804a5abebd5dbc3a86dcdb6e73107b873175a8de67332c113fb7c4899890bf7972e467866fa4cd100a7e2a10a770e5a9c41cbf23b54351b771dcee

  • C:\Users\Admin\AppData\Local\Temp\CabCFB0.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarCFB2.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\TarD0C1.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a