Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    19/05/2024, 21:30

General

  • Target

    5b912cbf9c80b0933f56639cdf1542a8_JaffaCakes118.html

  • Size

    49KB

  • MD5

    5b912cbf9c80b0933f56639cdf1542a8

  • SHA1

    1f403287b086afb2d35bd8b448050a6031599b9e

  • SHA256

    9ffa2c46a352c4d954240013bef9272f144aa57c14f392da976fdf8b3b1cc7f0

  • SHA512

    1ac55ad03689f22da08a5062c4985d36ece676ffc78dfadbd4fdd20aa68b4154cfb4b3cf9ae330527f0d507ea2c62ff7038b23565cbdb5a0496dfbc75d0aeaa4

  • SSDEEP

    1536:Q7iVXXcGl0DoQ3OP4g2R4a6Vi2bJeKiRllTqwwuH1U0CffBP74q3Qa2W8q2ClFt7:V5l0DoQ3OP4g2R4a6Vi2bJeDmbLiElHL

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5b912cbf9c80b0933f56639cdf1542a8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2084
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2084 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2240

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751

    Filesize

    717B

    MD5

    822467b728b7a66b081c91795373789a

    SHA1

    d8f2f02e1eef62485a9feffd59ce837511749865

    SHA256

    af2343382b88335eea72251ad84949e244ff54b6995063e24459a7216e9576b9

    SHA512

    bacea07d92c32078ca6a0161549b4e18edab745dd44947e5f181d28cc24468e07769d6835816cdfb944fd3d0099bde5e21b48f4966824c5c16c1801712303eb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42d889f553cf73ab661c3f30ac764f2f

    SHA1

    3d6f1a7dd4340b57cbfd1772f7fcf2dfa2e6b501

    SHA256

    17d522b884e8f9374ba1349898c03cd08db5d9c258818d06b62c0708f4b8bff9

    SHA512

    8aa9c2a8c49d1858aab49525184aa3f065c5bdff7af87b220c8dc00674727c1aaf4b80cffb79dff703df8fa172517b1f23ae4f863a6cf8c8adbe0fb18142df66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    243f103afa6deb2ec3673d87baedf246

    SHA1

    a3080d0fe35a3c18ddcbd6cac2d2df5e9a9c0023

    SHA256

    3e7240ef4716fe98e9d9a21a9586fc2cb776a8874309d0826a0ca6a7a3bf5006

    SHA512

    357ff9601efe22aaab4baa28a20ec570e1d92ef8c2d3bdbb2c09108974eb65da8a52ee78702431b97749280c19e737b3f32203ff6cbbd904b3ac6173df06e87d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e1a7a1aef49f5d3c735c8f82b07c33e

    SHA1

    c2e030f9366f21c00c0db2d26d68b6a93bf1e98f

    SHA256

    e0a6a7d8391bc70b0b682cb292a5f18d7d81b91b5cb04ef8403837c1b458829f

    SHA512

    bb69b2e655d15fdc6e96c4dab912b2f23fc60a32daa7d4a78956ba80a6ba0ca96b2a06e0443040716d24f72757495fdb9d607847cfbe09c31549d6fe3f5b1090

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55014967f2fb7dc35769b0aa781d7f92

    SHA1

    0b076edd12546d088a54ca60031e9c460171e375

    SHA256

    ce04cf9aaaab6b0ecf2f3414b7e365f51f8b411a220d4a86450b7c00218cc0c9

    SHA512

    0d7c886066572108aa55a93f42f093c57badedfeea9e756f1d00e3126d67a18758089eae70e46cc47736bcbf34aea5a7cfd6357b0fa8ffe15e91787ed976e4ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12db382b9d8dcea6c6614f788be86d02

    SHA1

    e98ae910f4ecf64c2db920d81ab7cf0f337f5dd5

    SHA256

    83d745bb5eaf8af87fdea7a49aa8d200214b458904bf6b872fba0f50c12e7391

    SHA512

    3e5da7b3fa1f8b9321112c0186bda280261dab823a8fd441ce05a91730ddfb112b96b6bdcf16b106e3e632da94187f2f19ceceeaf5d617575a750dcda146bf63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    109a426756e67152e71c3db11f86b038

    SHA1

    6e2b02cd1f42e49a7d70e51f03a130b06b945857

    SHA256

    949c7624a97aa0cb582f0058f83f28cda31cc9764d7b5f62707c95a760a7f0b5

    SHA512

    08bfb02e36c22ca4a84ccff295d37d5be2e6cf556fbc9b2f561988f70d2e91d1d81be741b5f812a8b9f7bdc77c68fb34a260c8b48461e086e9821d080412ee41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db4481c1b3a5d77a2b179d2773d6c4de

    SHA1

    b4bcff00a4240d98343d871d54975571c8f41e3c

    SHA256

    35559129e5e996ba122578da0c8047814dfa62ff3ddfe192fe6cf02be17bcb98

    SHA512

    c1951f0f67e1418b9c4a9801c170e5d98d9ddf763e59bcbb2fae8f3ee8094c5ee15f049465ac0e1d3224ace4ae5ef582d08af98efd763248ebe9477b0c559ce2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    637db134f692417055854d692bb48be4

    SHA1

    3e0ac76d802c18bac0374b39b9aaf1f415f1812a

    SHA256

    399264dffda59b41143c3cbf501b504fe94729ac660e95c1ad7741535bbca269

    SHA512

    896c2750fece34953753c66fb979009a191b929a01ca7d71b2b9e1c7f5f46aeabe4028668aafb66d42db4c72adb5e479d2c0054f801d67c78d4b2ebcbee0d0bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7a72e0d23f51aaa8b7c6281094bd27d

    SHA1

    4b8e1126aa1ab53b31d560bd21f878ba25a7d7f8

    SHA256

    2ddb7561487662feecaa6aa9641db812b200e2f8c2040dfa6bc2348b2402cc10

    SHA512

    50ee241fb09f10b2cf5ccf93b69fd90996158543aa291ffb525b2da8fad5781bd7b05aa09e6d1efe9f24c68b44c7524372102fb9a844dc06190bd8e29aaa33f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1285a982577fa94812d666a0ae43cbb

    SHA1

    11c34d374ca3f7704c72328eedb272999b3ab0db

    SHA256

    eb4ff892b58f8c6b08c760e4b5e6fdd416b96ece8a3a79981ee26cc4bb570426

    SHA512

    867c77ffbf58ff0d6eba31e2b7496c45da1820201a8cf3451a634f6c8c92ed078571b17964aa406811d22c3992567c98ad2d2eca05c960cf9f635c5989af841f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3b7785841dc193e0f71c137c16a4251

    SHA1

    4b1284ef58c36b6d5a45e7281641bc06246d593c

    SHA256

    25889142e385cb73214b6289890c6cef4e3d4f042fa163decceb11eb9c129852

    SHA512

    1ca143bd6ecb340a25a5b189939ba05d644da76ce63b2c60f4c56d9b8f38f0c7c8fcbc2a02d599f3b362addeb059624408bc334594f77b77b75d8e9c1571514f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    816a38164393232ceb89fdbcdb203389

    SHA1

    001355c6e30abaac6a8732463645a905f23f0fd3

    SHA256

    bde1cc51afe332303ae1e9c50222ebc1957c61c2351f93d906ec4f7f24417904

    SHA512

    3711129b0ed024b370eb5648f04809bb02d2eea69b75bf24e43dafd65c5bf606d9c3885df894239345c83b89191dab165b3274d66080061ff8083bf4571eb1f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66b60eb6c8daa3b7775d29cb48cc2693

    SHA1

    8a653c288b63ff6e2445ba9a3ea829b27cb2264c

    SHA256

    0244213b1991592579264821e55a60edf31e9427f0e1d58478f163014780272f

    SHA512

    b9d31baf8d5ed4c23a150a5310ba920fee8f8e8f5abc8c6e1c4b828d46bc52a7296414dc6cae2649821ba58a8895bbefcfd6242d2f88385659efa9ccec48a3bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4d989515e5009fa6af8efab731f7faf

    SHA1

    7eb25f6d7a66820af65edec62c2b813ea154a4a2

    SHA256

    a944f644a5bf6bd7e69c345345cd8caf8a03ecd3694775cd6072652924f4c26c

    SHA512

    9bad02b02e1651b005fab8df815a887adb6316eadc491dc67bf299c5919fe404b002ad67ac879d4ea2b84f88e050d0b0bc13921775c8ebe9976df89dfd5f0714

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5e74bc5c9616cba936c23fff5825dd1

    SHA1

    a4a638a80cee637421d08a4edfc52b8e4415bdcd

    SHA256

    cc6180c82783474f5e84127d5fca539a07c412e4f5d59ac35024620dfeced54b

    SHA512

    8d368024ddd2dfd82cf58959088cef87a552173dc3bc9b3bbc5e7a2137a90b00de73f43b90bb990a6d1aeebed8afe2fa54592eba823819d88fd5e33fdcd10b7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a784fca6707820b430081e001814dd1c

    SHA1

    4aa5eeb95f0c18229220a8add053a734149abcd8

    SHA256

    43dc5b11f11212541636db369024ad5fe3c459e8795d5fd52b0bd8beddcd3ff1

    SHA512

    7e4c6ec8ab1c4ffb9c4ae8f8b607274e93724bb548396c941b7ff0bb64a744886d2d9710d61fbc6bf2b79190991ad76707e1c26daf33e191861e1d5f3fb39d48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98ebc0683475c2a3b870fa0d1c6ef744

    SHA1

    b8fa39181dea80a836614b49dde05556f6b08d5d

    SHA256

    f2d278c5374d7857e281d97ffb77ff61c70190ccbf090d2c097193434ccc57df

    SHA512

    4c6093f6ce8609a32ebb8362cdcf0643bc3ab96dc55f7db3719cdfb3178d8bc036fe62c97ea63ca9b25b5f089a4ae09c9be96021ec951e1723e7808d16008aec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f34f75b45c4e61940b90f125ec015fd9

    SHA1

    99525b739299a19c9378f55d0544c63ed17e99c2

    SHA256

    b8c9e7dfcca80735fdcb2ae4c1e01c389c594304b42b241064e12125c34b4be3

    SHA512

    4bd90b1309c42623a588bc95114042682154950df73e95f53ac994f0d38973078a1aabed6c7b0e8f211d62abd1dc493fb1a481f4fad1bb24e392e5463d84d3fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f0a3162b10b54fd58cbe3c68b5e4552

    SHA1

    832e4630b8bbec15f37a59e3f0579799df98c430

    SHA256

    8c5910bccde346487284c91a51f0a688d579d6033de40bdf32a2dbcd27da9685

    SHA512

    a20396d9a5d48a7a46da23892e125d96128da1e1bbca1ac6919b11efd1d441c5a366eb590ce000a5eb758d08012d9b924d41d12b9e11f812ba729db0061fb0da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28e3a02510e56cfee1277c3f07fd68a0

    SHA1

    0228cb0e4139cdeab78ea443624b02eeaa149bba

    SHA256

    b7e6623b7fa8993876669ca0789eee2dbfb93ec798398b5ed28348d533da764b

    SHA512

    4e702c795c400513c26628ff34e715e2527f420c8a6e156422fbc9eab13e03e7b076c14b507f315b63cec9e54d1fb03f29417c5eac4fedf07c999f1d2961bbd8

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\52G8PVLC\3604799710-postmessagerelay[1].js

    Filesize

    11KB

    MD5

    40aaadf2a7451d276b940cddefb2d0ed

    SHA1

    b2fc8129a4f5e5a0c8cb631218f40a4230444d9e

    SHA256

    4b515a19e688085b55f51f1eda7bc3e51404e8f59b64652e094994baf7be28f2

    SHA512

    6f66544481257ff36cda85da81960a848ebcf86c2eb7bbe685c9b6a0e91bca9fc9879c4844315c90afd9158f1d54398f0f1d650d50204e77692e48b39a038d50

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IO0LJX84\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    23a7ab8d8ba33d255e61be9fc36b1d16

    SHA1

    042d8431d552c81f4e504644ac88adce7bf2b76f

    SHA256

    127ffe5850ed564a98f7ac65c81f0d71c163ea45df74f130841f78d4ac5afad5

    SHA512

    e7c5314731e0b8a54ab1459d7199b36fc25cd0367bc146f5287d3850bd9fe67ba60017d79c97ea8d9a91cd639f2bc2253096ce826277e7088f8abfe6f0534b63

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MEFTDE7Q\cb=gapi[1].js

    Filesize

    64KB

    MD5

    63e5a0b45632b3dde3694ffcaf0e3f7a

    SHA1

    923736d0cdc308331d5cfaa0ea159bfedc83d53f

    SHA256

    889109910477919b3457416e7764bcd0add19fd959848253026125c7c35c43db

    SHA512

    5b886c4b5122d61f0209ede748aa84445c9388cf38813316c41b3dbd2308216e88394d9a45cfc27113c0cf3bc93b9c37d808f6d3c67888244c176ee095d42259

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SVBQZB4R\jquery.fancybox-1.3.4[1].htm

    Filesize

    795B

    MD5

    5d8d79c3cb9af023240b1be6f5057aaa

    SHA1

    df22980677b134e83d878893f7c7984e0d78a240

    SHA256

    e8b101a7c7f64aad528cc734513cbeb02243c0af37930dc0f3239749cff184b6

    SHA512

    66f432b622cee0bcc06cbc0f833de1471ea36c295b4cd93eb848d97e69c2252acd2fc8972db51ea35475a424f4d6cb5001325525fb04f71b8704eb24de1c4008

  • C:\Users\Admin\AppData\Local\Temp\Cab3823.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3824.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a