Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 07:11

General

  • Target

    38e291384ce0e43dcc314661f45b9227_JaffaCakes118.html

  • Size

    36KB

  • MD5

    38e291384ce0e43dcc314661f45b9227

  • SHA1

    a35a6a676a47177cd47defb587ae815c5657bc19

  • SHA256

    b4afb97d8ebe2f8c683f4d3278be5a60b4305fe0dd6fe80c42def2e5087f3517

  • SHA512

    3296507f4b50997197fb65b9017422e5c5431d016d0ef583985e57b1e6d19a389e43c70caa2725e339177ed4abd3778664b8fe06e9dd87c9a0d3673a0d03a723

  • SSDEEP

    768:zwx/MDTHyU88hARuZPXRE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6Tsdi6f9U56lLRcg:Q/XbJxNVpufS6/s8jK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\38e291384ce0e43dcc314661f45b9227_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3008
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3008 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2660

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    efb4234dd6df7701ae5a7294b3052dc4

    SHA1

    8e99f28d99a7b22112e4e097b6d8bd94b93d92b5

    SHA256

    315e3d9155db37818b7a5ff0852efe250ee5a86017c9539f021c88bd28c71fdc

    SHA512

    ae92eff642f799a20222dba62201691075fd9e8c811a9c01352efa56c039b404b57de57958b8e8f0d8593454d5ec1d29dfda4dc733f30d49fe9bb9d55ba4b0a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    724B

    MD5

    8202a1cd02e7d69597995cabbe881a12

    SHA1

    8858d9d934b7aa9330ee73de6c476acf19929ff6

    SHA256

    58f381c3a0a0ace6321da22e40bd44a597bd98b9c9390ab9258426b5cf75a7a5

    SHA512

    97ba9fceab995d4bef706f8deef99e06862999734ebe6a05832c710104479c6337cbf0a76e1c1e0f91566a61334dc100d837dfd049e20da765fe49def684f9c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    6311905c41df5e25ae16fd9eba854cf7

    SHA1

    f9e6dd0fba12e2e9ee2dde7747888d4521fd61f6

    SHA256

    bcdc148b88ba02b04876d87dca5b1d654f75cf7bccb76b19c232c01171488664

    SHA512

    954538a30de28561b22b7d5c2dcd7bb91e365a18e96b3f2c807140257c348d68b5794a2c846c020d9f6ad8ef7a49ffb316e4923b6b5e6758d5c92b0c34c0e561

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba36f8a24745753824d84ef02a975f0b

    SHA1

    d55bd0a1c43d37bdc23714bedd8f0e4d8b051184

    SHA256

    8ca86ca585d5f67b6a4bfa606ac581c542a4223f66a935efbc44433c8e0d00e9

    SHA512

    534e725d0ff49aceb8118e4720379d8883965a011ae936d4f3fd821792c7e6c724bbc762385da3759fb3ea6ba020a6d264ee913893c08318757e2165f2dae730

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b27380dd6764fabe73694f51d965a5aa

    SHA1

    3e2082aed33dc61d4c576c9d15903737bb20e65d

    SHA256

    ce1248a57856e415affc4d370c2264639bf2792d3c615dbdd4eb79dda31bff58

    SHA512

    3254ceea19620a2b9f9ca1c57d616f40ce7c98f2dec17058fbe9bff5645d2ed9b45c19c382e4a31a983054f8883906d9d75d6dc12a3c7d7a65562cb3d83054f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10763f9b18c924db21f0c415b4c75f6d

    SHA1

    df4ba5bdc1100a88f1efaac5a121d839858f403b

    SHA256

    2e9257eb42b7893e2e721bbef2607c4282d659557488fdf09d2aa738a00e895b

    SHA512

    a523c1b213bbe91b7eb31381430c2b5f428666bf8a70381c5b347c316765301d6054c41c06a62af889810679db158aef8b690fb5fcfda4aa2704bef75e9777f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8bb3d3ea8c3aeeb42445d05d27e5a8a4

    SHA1

    7c8ab34eb1aae2f3b797eb4bebed945ace5436b9

    SHA256

    b03fb69262ad5ecc8c3599d10a420e1e33270bda45d74dc14d43c3eb0b1ffaf6

    SHA512

    3c9e07a99f4f2a9ba4f381d43b3cc988f29fb94eadbe17bfe928368b1fbd3f4eb55d87f8a07f42c8ac7762b674bf117834605f6cc41eec706289e40ad6e6b3df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e734811083b3342ebd99c996d3ff8ce

    SHA1

    fc02bc01a335e6c8464b25aa95fd78381dac95dd

    SHA256

    b84cf3c21aedd57698b4504d590cfb8bae97fed7c9bc435185133e7be774bb4c

    SHA512

    e063f5c39df5807224e8b4b196cba89600c075a391142d4cb1a3b197bcb7912026b8e20b28cbf7baa15c3b86b8a6b41a0f056bbb2486e906302864e8de0037c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a8caf28f60662c548a41603eeb836c6

    SHA1

    586d5326c443238088d8b5492635833793e70a99

    SHA256

    509316eaf2e72460eb806898a6ba26d723907856aaf7106dee39c1475d39581f

    SHA512

    41972cfac843553dc0dba1b00fff26007e44c77db5a7feae4e14c30a678222ed307d6efdf04a1fe509ae38e3376190da7d68a83ebd5a1727f29f8b5cf838da12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b09c531a88dcf52dcfd156a330fb46d3

    SHA1

    b1c5bba0f2b515f8d2a19d1885fc5d7945e152a2

    SHA256

    a1816ff0a6ab6c89e85050b6a881bd891c9a0a09c701d2f360106fbb57fae62d

    SHA512

    5c3737ebd0347363ae3703fe6737beff4250ca6e5d2a5b37ee75cbe2572b2d5906c57cf3a26ed1692fccee7d5647a781dad0f71264beaa9b46324039725c6b43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fbaa06206498ce08e68ae0830bce38d

    SHA1

    f16f4cf581fdaa26d1a4df5e14a5900590c7e8c2

    SHA256

    f4fc5c6abc2624502a44f0f38b19dee64020bce73801dcfdc8233a6bb224453e

    SHA512

    686f7460ab7f2538ed4d0b3f80dfa91ad6b1057d491318a5fc64d39507a6fbdcc7a1f5b862745a2e72ff97cfde261f289df99a28c1c15dfd1c6e2d7a487c15a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec0bc1acd3058d5aa492f5c849c90b8d

    SHA1

    c6b1d6cbeffb2f7f91545a381f080a7a8b390c2c

    SHA256

    b847c2b04289756a7cf8ce63e378c35bc6435b4c9aa3c246b90373894e0b24b1

    SHA512

    32acd6fb61863688e094f4ce6c1b9ec8acab7afcbd3ad72efcbe3d7730268a1d0d119f02a9ef75ebcf66ec4cfbcb9e891b5f4aa3efd69777ca8514f044ce1b16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c7bbaf3ee4e9befe0b726ee501eb2f5e

    SHA1

    a9b9241eb037006ae32fc12ee9c9f588b711b9f9

    SHA256

    4c124669b4c6e42666a499a1d317dadf1e2aa733df4af9836a3723808ed5932c

    SHA512

    c8571c4844632be84ccffc909ada903c5e84f377c0aa93a37601680aac302af69d67a25c3498630b6e6d4d64e0e82763257b445e5c0409425a4b4051794aa63f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    295d047ffa2968f14a06913f47f9c371

    SHA1

    8f4c58fd3c7e250878109fbebbe458db1ed23583

    SHA256

    8a254d34887e85b864b769778cc02cbe57bbd98ae839a2b43cc3bc58908c38e3

    SHA512

    0fe02353fcabcaa1404930bdaeab6feccfb8ca6b337fb801652d151718ef8d9ee6241cfe807d5f6c73ba75e8dc1250e7a25f9395347e18457d32a9f3c952a3c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    802a2d6e02e3f58f04551136278676fa

    SHA1

    024bfae1277d92a45d29396c305e08cdd5de4c6e

    SHA256

    1b5f15ccf4cd5c4b6d36939ac2b475ed4479959fdf64ab47e5b68fe39a5f4843

    SHA512

    243fbdb58434dbb097e217a0f2590a0495703debb3b6c3f5773f42d462614d2068beacd8789519cd659af2aa31bf9731082b3b49982597ff1b67abb7f5cd53e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09d1176ebda223dd07776887a39c69a8

    SHA1

    5cdb3269da6b040645d10a33eb37646d92cdbfd5

    SHA256

    18c1b672fa5b95bef17942105cfe8e1c710696d076783e97b861178eac57bf26

    SHA512

    01f236951426cb9707bd462ec2284a905bfd90b098c0976938f3cd5b3e76e7d5b01b46e9f63f5562b24f9a501446b5faa53370b51d3491fe9a30e2bca998fe87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7051b392e85d9b9964fa12f381eda5d6

    SHA1

    f8eebe8fda4d8afac4dec5ec5c3bc80c487379ad

    SHA256

    1fba34db37eec78a5be836c1dd58b68dc4c23d7d23a4bfb8aad426e3630906b1

    SHA512

    cb2b1d570ca30d2ab78e934d92d2189503d500b44f20ba7e7d772381698bcf066eeda9c08ac5e92413d868a6439d7aae995f6d99a6db73d63861b848921d616a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    081bc65042a152086ba7a93b10eac83c

    SHA1

    1ccc1f5891dd09ae8039d24e2e4f82d830ce3bd7

    SHA256

    7272e8173d6d6a98482655211b3a23a76920ce6d8164fd1b840dcbb848dd2c41

    SHA512

    867917a98e3971f0164063b9fb241bb6715d7329f4cb0a9091e3f64e0babf4271c381f2fae1f1591fba58d84c726a61fe05586e6a5ec2eacd3c984da6d70c6f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56a1ab673efd68855b89886a6f21dca2

    SHA1

    adcd8f9453ba07289ca7a7acbb7d83fcbf0e226e

    SHA256

    5a9fbd8143e7bc3b10562a0a041abb8b8832381e7628fba78741974d34c90e2c

    SHA512

    efdd543a200e498939cc7c8006555ed99fc1f84513a14abcccbb1b3e096e98d1e632e7173e61780ee7fc629cbe0a05b51f095ffcd25d643e2f18646c3578f5f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    443f21fbb916dd51ad0ef8632061c53c

    SHA1

    ebcb950dc9cbca314fe9425ce7d306a7e3b1d4e4

    SHA256

    5f12ec49875c9a7923ead32c924bbe4745465081f49b5adc4d1f9a9975844475

    SHA512

    61f425d7754b6b9a3a7aeeae06364bdbefdff5fdf4e73a3aac0ab66ceea6510033ecae86f41b8db8e73f09ddc4a89a7964794b712f4cf93e648a7f0beb05c413

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a33fff23ef4d60af0ee64ef243122bbf

    SHA1

    cd1b2e75e95cce8e6cdf67ff355745850b8d1646

    SHA256

    3d6047a147b7c34ce82d83294da4e06df1cb9d559cfc9c8730ab7f2a0f7b156f

    SHA512

    ed5c51d8df527e817582b5b5a37f1c27a630bd033f25a4f5dd2fd424f26a686e0e6cd789b620c37023e36bf1d48ff780212bb850be36173b1bed662181b0dfba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94d264c35f2532b9dd5c2eb08992bdc5

    SHA1

    f12c6de7964bcfa98ec7c348b087e5c00bf88def

    SHA256

    58c8c3eeb7ddb179d8fb87d1b03d075ce98d6d62ea20f8af44e9285e9b6faa45

    SHA512

    2dd57b0098359d1406d1fa0868e0568250f474da7fb3f4a95c5072f23ab7f61770df3cae5f1549350bfc3e5acb386065ab1518ed6c850de1f71fc56ccde33059

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25eb2628383d27b691785072715f4641

    SHA1

    bcc5db8422a7b13a2837389a3b567d1424cdcb67

    SHA256

    d2a7892b7aeeadfd52d810ad0d5659bd13ccf3f782ac40ff3934d5b377fe531d

    SHA512

    05decb82282fc9fc10d2947e2ecb9b53c281499dd2d471dc793b128fcf70667a2951ffe844ba68d2509aa57b33cdc7774f1a03f30445b472036d3ec67041139f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13bf5d64fc4346e91ae166b842376b49

    SHA1

    4ed92c03c0377409eb6a764322c83fb9bfa6d14c

    SHA256

    eec512c107d13fb86000825b140bb3e4937de67cfa649154438c19fca76e033d

    SHA512

    64a1fdf488326feda643d80778224c9c12fdf55d9f4dd8d08de2032b7caac907a314d4834f0649348178aa0c725c76f5e522667f4ee3baeb3f7ff4841b173644

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd8f61a5aa8918aabbb05f1869c7c97d

    SHA1

    1e219b56ba4e2e0e5cebdb41a5c5893622fef661

    SHA256

    d399acf5f522295d9dc13d3ce702c09ce7bbc19483d6facd954bf8e1d80bb9d1

    SHA512

    166571b7886772b1a30126b60e4870420b70496339d72a95276620670542fa832459ed9b4b90e623f0be04a826afe0c95ca6257c604735d41636634fa46f4440

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    50da08684b5259b1ed9daee47ce70e51

    SHA1

    7d53862d96d0c7b7955072fc0cff12cc9e03d9c2

    SHA256

    359ea03954d2588d5bffb9421baa7b237554c4460f404c82de4ef238f743ac1b

    SHA512

    a082dc406fd4723e761937e75149e9b74e5580860dbaac9985a4c56a62c783f5a446b753baf0abc7fee5862ca03327b121e69b6b615a0e8f1322cef9120551f0

  • C:\Users\Admin\AppData\Local\Temp\CabCFE.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\CabDE0.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarD10.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\TarDF5.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a