Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 05:12

General

  • Target

    386e00dd96a3f0963dffd22afee5ea55_JaffaCakes118.html

  • Size

    265KB

  • MD5

    386e00dd96a3f0963dffd22afee5ea55

  • SHA1

    7b192ce7bdf27f33fd5659cf91fd7d93b3402ee1

  • SHA256

    5be81df3ea8f1ffeec967a61894082b6819bcc123526d457591edade3f869faa

  • SHA512

    21f8fc522c572996911c926d38bb6ff517f510cd81777f0989d7289581542e936b99c942fb1dcad0666e70fb741760d547472d9054fd91b8be8858ac882ac8db

  • SSDEEP

    1536:mgQeZjIzooYmdkpLLSSNNIIVVWWZZTTmmxx66ii99XXoobbWWaaggggiippppYYW:FZRsLJQfD3+fHqfNCA27

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 44 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\386e00dd96a3f0963dffd22afee5ea55_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2936
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2936 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2860

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    ef5318bc395c571a0381898374966cb1

    SHA1

    dbf1f7880ce9bca614d9388e258c798062afd4ca

    SHA256

    cfbfd4e4823ff77810a1813805a40c45a58bc863c35cadd748d2baad824f0d56

    SHA512

    25caab99ea27e61040c1c27024f19685f47f984fea750ad708d6816746885944e8068bc65b00e35b99cfb70f9819412368c894695cd7ad75abda7b016b24b8c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    724B

    MD5

    8202a1cd02e7d69597995cabbe881a12

    SHA1

    8858d9d934b7aa9330ee73de6c476acf19929ff6

    SHA256

    58f381c3a0a0ace6321da22e40bd44a597bd98b9c9390ab9258426b5cf75a7a5

    SHA512

    97ba9fceab995d4bef706f8deef99e06862999734ebe6a05832c710104479c6337cbf0a76e1c1e0f91566a61334dc100d837dfd049e20da765fe49def684f9c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    a3245f29b5993d4d1a1a05c18dac2018

    SHA1

    ee7e00adaeccd76c59eb7d314039a650bc8e0fb9

    SHA256

    c7ff0740515f10ed763d39c1c07d732e5f7436d776cc8f568f0073bbe2381d42

    SHA512

    0fdc8463bfc927934ffe0af7247d396bcc3accd446487fb9565b39956709e07f7aacbd6eb8c7949828a8d65ea5c5bc444ee7aad9b93b8b2dadc4d41a51171d7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1bb1946cc3bf846e8f551bfd53e7c04

    SHA1

    cf221e773a144e480f1dae225e1cedb441834c1f

    SHA256

    985627ac04e0e6df7c13fd9dc022cf9618df68d72b01ee2a679cc562dc4ee043

    SHA512

    bc7f46e9cd87f0615d7dab9fc9741dd64e0bb4efc0d75842d60f6e650f2afca354a960c7d343f92a1f8e70d784136f9edca213e8c4cafcc1f357232005b08fec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33671dbff41347c697085a1fbd99cd81

    SHA1

    b343398743ad069eb50c37dae8492a6dd0c74922

    SHA256

    748b251fa35209ac47f6d8fa8f00c0cd63f76a240538e0959454d3eb90b35338

    SHA512

    87a894b394460581fa5a54379dcae001005de4bffe4e3a46e3274898470963435dc1d58622e07e2f52f5554afc7948cd5728badaabe890a4644c80189fdd0f77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    70ece7426a64317cbd2dede14b9027ce

    SHA1

    59201d46ec2784bf553049bbdbecbd9b38cb99d0

    SHA256

    f962f037c50b704069acdcbe9313bc09a0971110277f89869697d56318b89fe2

    SHA512

    d83192097e119e99434d79e12c78b5d278037a146d9ec24b97012fec1140f3e89460dda14664e305d01ea76371612585b7222755f56d9adb57f749fa71b9fbd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8fe170185a90770ed0c21e8fac980e09

    SHA1

    7b99b62e3940e67f209bbcb92cbf32bba84f918e

    SHA256

    9007fc3715536fb91648e80d733160604c56dafce4a4a9346b4d6dca670c9b43

    SHA512

    4982954994232c84dcb68b5570b366291fabb0a885c266ae6ba43bbb320305877d43511ff1bee89dd7c03fbf3a77dff2a6927258694c756defc007972c84675c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3568c1d45ca88cd1414652c39e251e71

    SHA1

    5bb1f7fcbd0f7579f015b9a284ecee162be1133e

    SHA256

    c3e667a0b9675695b68d3587d722f7a95b4acf837be5660ff3269bf9a3088e67

    SHA512

    ae3213a3f260d6d2381181c59e89e1c1deda0657f06de492c90945c24ab50fa33327f7fbdc3215de731831d004a0e7cc789d2e1c3f16083dc1ad18d6d21dc43f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a49445b31e6dd90eacf5cf89c39a3d3

    SHA1

    7cb05816f1085fedd127a4806a627ea1cd740f81

    SHA256

    739cd0fec2893d06703defec7a01cf8a45166aeeb8cc83010d2f3a093e686054

    SHA512

    01ce9726353b6578c35866d5b3274c2328da92cfb8e40ac68453fb569e142e81ef7ae59fc177407c25d2cc67579f347429902ef98c8f4365a0e21ed2f1ed6cb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a344c5a66a84c82aa320664a98d95643

    SHA1

    329a5cbb43c121d6892f3128580e1dde7b3fb00b

    SHA256

    506d8af96b3a8f078fe5d4a0e42aa0b41e51217576ff1595513f5029a3d348dd

    SHA512

    55b3315c255f1bd0f22c13cd36ba4ecf308600b6af66bf5fcd8ec8c81bc5a9eb9b4a75eb73002d08260006d2ad9ba426fd06dd101e4e4112b3f1fb1305b45e5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4d30017b69af9ab883a65d794c2ccc8

    SHA1

    9814bc4864a791170b52ccaedc0cb109c6f4f6e6

    SHA256

    e5f95bcac5a6ada32902725f28360545e8d6f621b88d88b0e0972bfeebca59ba

    SHA512

    b07dc62575ad7063eb57ab8a48ec04df8ca0c4b45f728b8ce6f28539f3251255422ac80b8cefe530236bafdc6687af1a4ed2d65c48d76feff888940a9eca420d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0fc6816139320bc108227630cef3a8ce

    SHA1

    13a7bb5216b49f2ee42b7548cdec088f5f81bcc2

    SHA256

    e93f0aeee134ec193df697fa065ddad9b5b4fc3e2941d87ed9f9ab93f4a7f0ca

    SHA512

    b26a123fbb06651591f49a91e7ae1e4d0875d52c8134afb1d1a6111804dd2955c93e287bab5dd587e3e8cbff3cab7b37cc9b02accdecc9b5f1565d187f031d5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5c9ef470725b88396a982d6c6a253eb

    SHA1

    db9486507546c92e8cbc45e4510f711aa4a5398b

    SHA256

    9517d766900504261410fa78db24f14311b93d27e95274571c683d75e55c6c14

    SHA512

    491db79b83ead740d4cb01f2e12721d835593226b31a992db1816d4a13758b5e834c8e899c91535d34dc2c8d8cb7aeb79d7a6303ea330c2eb33faf4fa3b7df59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    68c5b6eb7c525cfc4e96c039a38163e9

    SHA1

    4e5ea7ec4b709ab29ca5b272834a9ec5f44dd15f

    SHA256

    683a51b8427582668205e715d654ee8e7659fdf48d0bef53b4c965af5f2e99d3

    SHA512

    9b12d5f3761b14686823ba89a43d29e39a89d0f5e13ff0a5e3aa8a77e77548ab5c8a8a62bf1b4966a775279ab9cd1a6e1aa0379eda85525095e1ea923ba58b72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    473aead1d40593bfaa8f65d59ee6caba

    SHA1

    3a28e1d0a27fd2a0514a0b15e11cb50a9374203c

    SHA256

    25cd02bfb2e2506be7f6bacecfb0cfbb2e6845dac1ed594d5ba2f397cfdadd90

    SHA512

    5d39a166709916a6e339fcf6c1e59be200aab186b1ab66a51f3272b7a691b88d9c2156bd47e74708b8fa76fc87f7c11881d06358a684dad7d3d1360cbc2e7b74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12e04b2bb1f40476e7072b77d931cb7f

    SHA1

    59bffaadc73ac401682e7c22ff46759a36f36aeb

    SHA256

    7c90bf329929af0e20bc4fcbdbf91930fcacacf4f91064d209ce7b8aef732fba

    SHA512

    5ed4ce4f814c65dfa8581543760a7e1d3fa1e975b33214183c486e3da366c40c5ce9ea2904bcaa83dcecf2880a503fce5b28b6498c0e968e0182f399ddab2801

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d99d90b0af761da9b334ceb233e5594

    SHA1

    0d2b7824d247bbc426beff37e452903aad94dcbb

    SHA256

    787a5254d802045dbc7bfab0e2637f7899bbdf89e21205f6e2cc8c2ee0bee733

    SHA512

    8543b00731f2a996bc0b2360e9356316852f6f1f0565408022f26ce55ac62637266e50bb0360f601d403cd6f624c5ddf206a591dfab75ce95e60b339bfbcd2fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e815a522b25cf650236c48bdcf42888

    SHA1

    8cb9c686e2cfe3899731bb5247e8c8559762c4d1

    SHA256

    46b2de8e6b08d3251a429883c0ba56851ee0dffff71da5a6d846070fb2081e4c

    SHA512

    6108db44fbdc8565ff33777d63c178337774621a409b5c93afffb443e6a6473d6ed9055115f6d5abadefdfd25e5535a54533d54ea540a301689f065e8ad83e8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    831a0de2876d1c0e6458e857efdd7fa1

    SHA1

    a1063a952696b18a7e3b8d9051a2d2677c7f8a46

    SHA256

    3eb36aedd6863e17d95b0aa1164f8b78f33c8a2f207f1061901e9cd7e666f837

    SHA512

    aec22bce5258aa6711b9d75cf73825a8a9b07f49f68fa48a6e9755ca07350c22372a4609278f9970893e00c9e351303801f463476f66807bcc2762da42b83697

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a7129266d90dbd4f20c23849d4a6e4d

    SHA1

    5400a3ad867d0be7082a444f7cb2e986e3554904

    SHA256

    006fb0399b6f9009c838e305e1db7cd089db2766e2ac25401646f1cd7c96b0f7

    SHA512

    5e9e23a8a8c881a72a90b5af24ab1c0452708c7a78dcaf1c4b2f97c07eec7bfd957fea470a5d08b2d08be5f95d41a1407b2ece27f22f121489e0f1c70d727471

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6076be8c403886dd533eef1a70bedd6

    SHA1

    cf8410ec2816494a88ae2f8c66395ccc6a410e19

    SHA256

    06427dfb3d38783d82a2cd35cc356e01e4edb066357a56fc86bfe1d5dd1acd78

    SHA512

    db6011c953dde3dd79b136226107013fcb725b60f9cb2d8687243842c10cc7b6486928e954a928b1265d729ee75ee04cf49d839a4e800eb0f4ab4a1db7a36657

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7883644d4eeabeb2c923123fbfb89e03

    SHA1

    a311134f77b1555b93138726e7db46b72286e581

    SHA256

    95b7a35fb5f8240fffdcd04a594f2f0e97f828020aaa6e0cf42333d2b47db840

    SHA512

    67764c527b3bf67d05aa23c5de2e18fd1546d02f733a6f44f55d9519e96b799c372c599ac0b672536d2eb710ca65fe3271ac1ef81382c134720c374ec1e60f60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7473ddaca076e835e92e6702bcab3a44

    SHA1

    994a3d978f1527ac9e5d2f1b25b6147f82ac35aa

    SHA256

    d4ef5ce52c5bf4c92bf1261e7b2333250be274aa302a4fadd9e3003febcc9c60

    SHA512

    4f33cd98542aab9f185cc0a87b99fc14931ab295bc0fc0393150c9da8e2a92d4c74b9f76f9acb3a5cc15e03b46d31b56b05f0ea02effa947be9e042a76f66ca6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f2692db3ce71bb0dc38b1509d7b7ed9

    SHA1

    2581a76da9cf1350b542f232a35c630176d5f304

    SHA256

    8e1691442d052fbca86435704d9ba2ad54cb9ffd89cf2f7aa334251e430bbf78

    SHA512

    a81903344b91d951ea7eabac54547eb7c32f3c684b184f24db565ffa96c8c1ec210c2dc13a9ce0a0b589fe70fa28b1aa0573062190063a767afb340dafc9dcbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    392B

    MD5

    812f5d7d5a5758599335656457d62ab8

    SHA1

    599a8d50d32997fb892a14c0bd8fa32bbf516c47

    SHA256

    5e67364f378293ff33c36561520663f36ffe5e1d909603c1270fb1df6f1d737a

    SHA512

    e83f3784c5952a0141c0886c744179885d34860dc6f8ad333e9ccdfc0d2a18bee895b5dde6095d9a7c2bfb169bcd899a696e66162b6d12d1d88b7280c9f38733

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\UIFYVOBF\contextual.media[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G17BROQF\domain_profile[1].htm

    Filesize

    6KB

    MD5

    15e240080aa8764a5f5f351fe131b22e

    SHA1

    c7c4792dd243fc8427e460627d1099b9eb3a2e17

    SHA256

    fce5f4a1c6e631c0186e5da7da07c34989ab57ee037e544c6cda550567fedec0

    SHA512

    1ca6c9be76335323cd032d920bd532866e28037f4e6b2026b7311e59af89e094143380bab461326181b3293ffb757fde7036d0f31233dcbedf898382d342d25b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MNCIS1YI\domain_profile[2].htm

    Filesize

    40KB

    MD5

    d5d6d01e42bce9d1cda5ef844a824af7

    SHA1

    c59702fb893a6fe2a38388d71082510192054a49

    SHA256

    41cbd3c5dd4ea7833ef31b33373e0b3b7e0996dd35934a9a266f717e057d0440

    SHA512

    09e6939463f27a5b50f37180ed45b37dc7257c06d829b09c00ad55ff423e4a2525f736b998771e5d5a37c123ec85e8ed1ce927b2490d6f09772ea28b14d6a6c4

  • C:\Users\Admin\AppData\Local\Temp\Cab2628.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2A02.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a