Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 16:23

General

  • Target

    4bfa480f34c0b37cf0a1be780d83457e_JaffaCakes118.html

  • Size

    36KB

  • MD5

    4bfa480f34c0b37cf0a1be780d83457e

  • SHA1

    6c49207712e356291c379588c85b41c4b2beb129

  • SHA256

    b4948dbcca1878b2a77ebb951582af679d9455f61ad0aee8cc2d0cf4c01e3ec2

  • SHA512

    84ecfaa633246771048afcdd89a6676857e3c38e10a6892f0c9c205ed6c72d0a1fb742278612dcc21ac8155bdc1fb17ff5c923dc53489299b1e53cb9462990f0

  • SSDEEP

    768:zwx/MDTHnf88hAR2ZPXVE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6TyZO+6cLV6OxJyt:Q/nbJxNV0u6SF/j8qK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4bfa480f34c0b37cf0a1be780d83457e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2056
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2056 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2904

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    aba467e1ffa28443e591c4b95eefea21

    SHA1

    26b259498ec38eb46ea64290fd769ba065db10b3

    SHA256

    9617468444e2067097a5dd44c33e03407eba1f11c9575948033f0d0adf4c5b5b

    SHA512

    4f21eb21e4fb1e3c543423c56a466f4d5949cb7b0fc8b051f88555828088a731b2764034aa5ef62f16cf75642fdfcee3288e84d57c9941c786cc2e5ee48791e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

    Filesize

    1KB

    MD5

    f4cf43768f928b60fb50245aa2ba197d

    SHA1

    3e0b011b6299fdf46abb2234197465a8c1eec0b3

    SHA256

    7fb836a3bc5b532f165b3aebfbe605b22acdd379db34939f47456864efebec13

    SHA512

    003ee0a6f517bbb47398fa6371979797d6810714adb234da3db3dd06c7509f39331adeb1947a2282a3692536f36f622764356cadd4fd0d952b18dd332338b666

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    724B

    MD5

    8202a1cd02e7d69597995cabbe881a12

    SHA1

    8858d9d934b7aa9330ee73de6c476acf19929ff6

    SHA256

    58f381c3a0a0ace6321da22e40bd44a597bd98b9c9390ab9258426b5cf75a7a5

    SHA512

    97ba9fceab995d4bef706f8deef99e06862999734ebe6a05832c710104479c6337cbf0a76e1c1e0f91566a61334dc100d837dfd049e20da765fe49def684f9c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    979B

    MD5

    0e57294ed75d5737182607e95e369e00

    SHA1

    ce97c7ede67ff772d0fec9e86b60e8fc3c9af708

    SHA256

    316de0e1b5f70f35db62a1eae0574273a7a6ca8e556ea306dc2c117d87670aa1

    SHA512

    6d2f2907a96507b343fcdea6e305c413dca3edea0971f14301f60b85083cbb7016d7ec3c2ce8226f453cc03c02d77d149260c3eb8cb503c94a277af5c9b438f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    59e320b44336ac1447e51a0e270b6d2f

    SHA1

    9b94a6e17755c6c4c20f2d482b652618a0a937fc

    SHA256

    40d198ac11c0490b466708e8f5d1668742f9271ec785511831509bb6d7014fe9

    SHA512

    f362ce25a78d834b5bb70238c720d3710779fe4806d578df2ac9d5b255a6342d2d1ea83055c6b55fe2b935d92bb60248a6cd403babff05a6f0ceb4220b658508

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f7e91cb321257e4b688195a14ce7922

    SHA1

    464fe5f6932facd325770588697cdf5e9133efa6

    SHA256

    8d1e091c867920e0d4a43ef99068e9621046fa1429282f53581b19521d202c08

    SHA512

    42e669b8f4e038556f07c6db63f24478b1485f69fcb4464e408b290bbca80074ea5a42550090696620158a7288fb5a27339bd602b3c8d2fb3c0767f86ecf3773

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ddadd8ec1ffaa570b7bc470f91ab164e

    SHA1

    4d151e31abf1910fe14164fbb7f8fb324ec941a3

    SHA256

    6d4de515c5c718827027e72ce478dbb2b8a95df2382c43e6fbe5a92937797b94

    SHA512

    440703afefd60747b14c7a575633c382885920add1c160a3be986fb079863158ca2731aa9f03a97b9cf1bd1b9bcb9d2dc85b364840b02a86e1c049325405281f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a12084b6d2caad2c29c67ca1bb9329db

    SHA1

    5747521161a851a27de1e484df211ea8b26aff5c

    SHA256

    c188b9f4f7f95c63a721765deb5937763d4e14fa367ec5352825b06f8bfdec74

    SHA512

    ea7a194d5742986320a9ce584db3d89446cefe647da81baebcbd726c682898c2518300b4af7502cdbdd273a4ee1909495aafb667ebd3d0847aacdf5e16ea5906

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c36b2046021228d43f77bd8f8bfbdbe3

    SHA1

    5f315d2d92a9b3c86cdf9bc7fa05e5d122a52d84

    SHA256

    780b91042d806ec47bc2d9b0df187d769f14e4e0b9cc622061c5ee00fbd29140

    SHA512

    85dcf2b94f10964174615340d6f8ce24a1bd7d5735beb27802c0e647e2e833514a191478b1d6d79255d1d05a576480f3b3e031309ea6ca48fcfb211b1f40a92c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e39024d3ac0831a6d3b6c82cb135df77

    SHA1

    3f1ca5ce6aecd1f792d1950df1b76844fef70af6

    SHA256

    9d5b10c9b9c85b7080295b7835a679844c77eda039a0a845af9964541b52b9e6

    SHA512

    51f1b10730e7f6de4c72fa54ad3eddacd81b58ac9e24225118193aadb01fc6c43f29893e8ad6a00ff266683c4777d376a8cf82534228086d093ff39bb7f0e6de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3d62469efe50ef9820766afcc2f2e15

    SHA1

    51501e9f2a32f460a3469de1e75ce480190431ce

    SHA256

    fc418cc6af31c16b25694e941a90f2284f98f132380cf939770f5c8006e0fa5d

    SHA512

    8532f455e165bac25a1e5b19f63f33403e68e40ac1ba75edd50a9421bc6eb60d208bb6ed2cd13075bef593e75eb10867d7a2e2bff17091abd5ab9115b9fa01f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6cfe1f00926627d05d3a1cd19fef6fc

    SHA1

    5550eb7aaa23918c5c7630db017416847b669738

    SHA256

    5a8f31f0120e704498dd10d840e8bdbb95c88ffb5ef8b7f0f94707aaf3b16ab9

    SHA512

    ad58cfb5b08630f72288df5b27e24f280da85bbf5bcdec492d363214762ddcb3dc0923faa739275e8c1eae5769eef24e1bc8d15593a157305dd34d055d0b7af9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3e74445438bb36377bb798c2ffdb489

    SHA1

    0ce34cac6d3f11a272e9676ec1a921a4a4122cec

    SHA256

    524a21574dce44a6f608c98444df29dca81b31b15ac00f9f77daacb048e98c69

    SHA512

    9dc8f1445780d61a7ccd65ca055c797a77ba16a0540113d101d81a59c689fef3357ddac8b642ff13b9ba87d90fb7b2f1b60b8fe0db8562551dd081b1cfa3e384

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7603060a6056abd57cdcfc3a59fd605d

    SHA1

    54122cd731da87fa4a59cc271fd4e40a6ff6a133

    SHA256

    25b9908cab0d9c572ebc0af46ce1fdd8f648c80817a3bb548cc22074c434e9ed

    SHA512

    2e9a565a37d3d18b16855cd18d4617561205740f5769875b6659644280b03d87b4a787b96b70cbd52859a054492b76861e69407e7ab498e274e5af18f3479a4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    87c4d338b5cbd4bd7b72a9e3a28a6e9e

    SHA1

    331698f7c00a137334d5c78be4227a71b323d81d

    SHA256

    335fdcb356b5d251d19647a0bd3f8bb31d9330f158c8037abe4dec206abd2bb7

    SHA512

    6318a05e43992a568ec1bfb9db0132d6a5040fa6f4a6bcca84c472ae4a0686116efbc8e9e5ad0dc4bdf0cb64ca501ea03b8347c8c41569c92cbf073f5a1eef6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd46ea03afca84c292faba43fdf67b49

    SHA1

    2a0d8a7ac7420300aa1660438dfabec9d4a6d0f5

    SHA256

    a9cb936dac95d9458b0f58f2a556057694085c90529c3f226a5cfeb6e35120ed

    SHA512

    6f0bc20134e8e660f7292ad1af07859451df911a0e09fcb10fde1ce4914235dc2a1d0c51b096515c0cc4d67b383ce3ea7fbe2d6cfc4ad0918ef55693678f00f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    76698ee5a6d709852c42cff0c5e8d1dd

    SHA1

    8a5218fc7968bf15f474882d041851694fbf5db1

    SHA256

    06f72ad19ba920cf88ad4bbf9eaf196109589e37c932b4ec2fc65f7df7ce005d

    SHA512

    df9d443d8ba3697c90ef85f740c9d9b0b04b3b3a0955d1d74f501de94ea8485753429bcc0a40f6c83cacd8bd7ca049286a4e43b449eb8e77c67e13ec8b610c2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cbdf18c4199289b396537f42eddca13a

    SHA1

    e758776e68162284c2fb01b3e50279d77bcc2a0b

    SHA256

    08eda0169040e24f7c82ee194d9cb1e4bdbbbba1811ca90a031977bd3649afd2

    SHA512

    d4a814242570b985775c1e301b0dc6c060465c04efa4155a5763211233e44e7409fdc32a724eeff1640c7c889413869750b59781cedad3e0b9250b18bc10a0bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7eb385f73dad74f74400139915719af

    SHA1

    4c6d4ff68fc83dbeb2eadba3e958185abdb997a0

    SHA256

    4892f2a8dafae6b749daf3ad97be23436b174528c26008b4db10268fc6cd2870

    SHA512

    f91f579875eab0671a8a60ac974b6642615859332417d4595be51625e18c7e6760fe6674364b21e764cb01489b63aa5232ea8512583a00fbc112abbe95cf3663

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69d6a22d45a9bc2920d94b829a891b1e

    SHA1

    4e43a587cc4e5fe1055d78c78989e049c138d1ca

    SHA256

    bc48f4e8cea76bf19edd39ce71fcde2f050ae0608570bad249113ab5337aed14

    SHA512

    d135c3186f34ba0ff79cfcaba3c6965a786e29961df3a5926a48c6fe69eb8035af96f8e9240d8b8015d1f554d9972174edde2a1da4c8138f22ea77571d0e5bc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    428de1621329119613023d9168a605df

    SHA1

    361248df7e8643582de2f4dfbe49f0fd6b43cab9

    SHA256

    7aca5e045943f7ce0be9808671686f55c8379e21687eaedbf9735c07ee4523e1

    SHA512

    c5f0e4c8541ea114ed291e7a93b9a37ed737d2260b1e371c1843e4341df84db10f2c1b44653c59ab708aa3b9970b2fcd5c9336ac4fffe193a27a83a796ca737b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c088f8fecf713c0ec75c9863b37216ef

    SHA1

    dabd293ea3272e043b93144fbc8d83bf785742af

    SHA256

    4fb9523f554e831bd434d24711754415739620101e3c17f4573895a55c31cb73

    SHA512

    c00130b1de4fd362621dec5ec7a007ba1537a5035548fdae70602cbb152ab8ff02f929f3740e063d4ebbc6db212278d7b7237f700cd0ab8d6450861295d04284

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98e858f53813d9c2a1fc2a953462965a

    SHA1

    ea5e8687b84021f18f09b434ff385688926cb13b

    SHA256

    ed4f33359a77fe595c6ed7f05b7ceee94988ae6b17c1ec1c26b0a9fb61807a5a

    SHA512

    08a8d129daa3f35322ba76b8ff939d89fd5ab73c1a2168490b20db0003cea45d2a2d9fe29f5a803f12f4c80bf2ce7a2e4e64435775b26af385d5efb815fd9dfd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f44d2858899a4c3eca57eb62013dd8ea

    SHA1

    3914f2dadeebfd1dfb2c345cfe56ce691bd0712b

    SHA256

    b3fd1d6ceb5414b4d867f4ea05a803e3f9413c28a270170babd768ee23db0723

    SHA512

    abbc8b45cff921a5881d48308a0bf95d315995f0f0223f42185acb127f47cb7c3e29596af6206e6c910be4b5db46c0e819cc25e95acf19b0bdafedf0972289d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec6c8c57dc53ca10b87f5ab84a3d0186

    SHA1

    e37340d01881884716458bb0504ab32d7c5f628b

    SHA256

    6404125d876a88613f31a6a17fc5d3dc7c0355c1d46a6d8e9f13b3519f64bfc0

    SHA512

    8b76233bfef835b5602439e8215a69d78eeae492889e8e7e2d744ef694336790f38a24b2c1e3937398a6675397fa8432e309dfe121bf3e1c18de53101bad9c56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8f54588b42a186c9afc0b714ae02972

    SHA1

    fe24d94258de40d25330d5b1d558acbccb7367b1

    SHA256

    dca646cdfc7f7becfc790c8a3405747fcc1a1d0e0689e6d78ccf3187d232b005

    SHA512

    4a0257e21a017ecfc4ceeae9938d7ce038e86afea01ebfcf60efbbb1e18f20f5437d92bbdabfe6bfe35b19cd31d704c366ca1cde5a26624738b0d6c357d93d75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    761d06df7f2a5933cd9d16b88d193ccc

    SHA1

    5caed1f762d3f10127a2ff1b1b5820286551cf6d

    SHA256

    0f66a02b3afee2100f4638aafa1cbe122e028720a639e41381cd36f3bc2e5969

    SHA512

    6a88e40cbdd685a15fd51ee61edf16771e523b566f75216f581f3a5d6cd03ea7162c780ea2a675c15b98e320457f073782f06482e22b6ee126d66db4754400ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    392B

    MD5

    3fae0849f67e37ed8193575c991bd615

    SHA1

    3b494f6ada08b5b5c4818842d11e2ae9c243a2b9

    SHA256

    69c1405c10339a5fdaf1bafba2388e0bcec01f959a7cdd495514f168a86636be

    SHA512

    9a374dffe520ec028af2e3fb0848e56684975084750bf2ae5fda6ab5af6673f201ea87cc198388c266ff462453ffaa1c882dd4687449a6161b9a70b2dcb49977

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    480B

    MD5

    4989efdcaceb92710345f5d2b116cacb

    SHA1

    7189104c83f2b192935c8219eec07b15abaebc90

    SHA256

    7d244a751ae945065e81b4bc96f7754d0daa99eead5fcf31f979b089b02b5909

    SHA512

    19eba63ef8fda354edfa7b01f2538695ae72e858630327b29a841ee87a84521145628fdf23afe0b9d5aeac136afefa1741057060d866d3672a4f6133327f10a8

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IO0LJX84\3229668c08b0c6b05485dc56f9b63b9a[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\Cab242A.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar243A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a