Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 23:28

General

  • Target

    614bfd9188469a5c31d5ff3ff9ec1047_JaffaCakes118.html

  • Size

    503KB

  • MD5

    614bfd9188469a5c31d5ff3ff9ec1047

  • SHA1

    406bdb144a3f05133fee35e5e659d4dbb2d0680a

  • SHA256

    ec7c9d6bebc915bfbc608f0b1cac953b8c4d57df565a5cd734896fd461114d0c

  • SHA512

    e8e60ea694e4417078c088761acf0eac3cbccec994ead4caba6677a34c18f99b0d751fc5533ef339ae63e1012b851a9aa09c94d4d7604962653e405a8bd05d9f

  • SSDEEP

    3072:wP+IpBxYUVq9zfs49PwVeL5AmPdmBcM2mq1K15:wP+IpBxz4tLTFU

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 26 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\614bfd9188469a5c31d5ff3ff9ec1047_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3036
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3036 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2560

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    2861063c0e5b4b97b9bceeff935fe681

    SHA1

    6a4bb48270c696cf111fc5c27206e84aec145f54

    SHA256

    104836bc45abba5fa0b04c6f65d9eb8c0d83faee20bbb2b515cc2474d5f109bb

    SHA512

    c6f3ef2ece358d6cb29f7640e3b470295ffdad5229eb307378c71000999bca58ec698881aa2571c7fde0e50b0bc1c69a915996260f4618c27245b25b9c4a24b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F07644E38ED7C9F37D11EEC6D4335E02_02C4C6ED250727F9B08935C0A9565568

    Filesize

    472B

    MD5

    d456a7204acd684da2f69c4f0c5d14c1

    SHA1

    d9069189770d3c9e47cf4d3b1750ca48d4f2bc7b

    SHA256

    a90ab58bc9b24fbe138bfc66a3062a01cf200fd9bbe9804fdb423fef3afcbe28

    SHA512

    e8d9354b20bace68e8f66b2d7b45b792696caf6c1f4675864f1e4e8f2866c3e71bc4e99cdedb72b09a53d45749275d00e1b365fbe1480f18ca669f825eda8e2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    c301f2450b6e4b8ce1b651ac90a231de

    SHA1

    27a317d1c9f8acc6099e289ef2dbdad29ec1adf6

    SHA256

    2155bf3055401ab12944e91a4f199dd1d4c6f6df2ef57e45614d88d1398b24f1

    SHA512

    5d095c0f23374bd06551cf31ca5a549651357a7bbbb43e91b218b31fa11590539faa62e3a25dc7d72ee2b30f485150a4a407672bfd057e4426e2b5fe0452ce6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    b575a1fb2b22e0f0f93df3c56058b2d9

    SHA1

    1e990b5ffd93dd75b5a0cc3c54ef2e44cb77bd08

    SHA256

    02694e59631c0270fc4fce44ca0d50d4ef25e2c4fb8e5ff5b334c5a1a88adec3

    SHA512

    b573b3f408a89c2cdee1082a9268829b4f4d17f383b95039309a9cdc317d7a0285fd0d0064485facb45cce36c50d6ebddeb7bd6135d3b90be2f3e8afd168e4c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4082835ca6aad280671abf4ae4aa7b87

    SHA1

    0c195c39a9b79cb7dcb3de75caae323bb53dc043

    SHA256

    2a15215a7ef7b805c6337747244eacc380bfffcb2b20cd48c6b1ce90daf950f6

    SHA512

    a2ba71fabaacb431cdb3a59412ac6acaa61da37f256b54ac55ce3f2af061758ff4bba2e783d3ec2ef3212264bac4e2b7a75835a198e3419789bc9db78eb628db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac4ef8fa10bf5288b299bd69455cbc86

    SHA1

    ea261f0847273ea82709436713681fd468beb60b

    SHA256

    723a56c5f1d4bb9476894e8cc0acb3f3272f2d42cc0be2275576740c3b21945b

    SHA512

    1179df4a87952554f3c54c880e4c7dbe4368871df9eebeec6b9432bc324857a2a1cfe3dd2b407d5b10e9cb5ce1044aeb828e8db2916c6d4c1733bc2a63f35732

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a49a5bd1654d2194047dd5171a3e4924

    SHA1

    8d6fcbc51882331ae654ef10a10f2ccb28bc91fa

    SHA256

    2c9590b34aa7d2320189b9464cc310ead0e514a691c61c997df9a6f903571514

    SHA512

    c98fd8b445f79ad44406eeee33ea38a1096195f54c0add5a0f9d31077df11477c495145b08109e18e8960bf8f11e7f6ce26cf46800dbdc2cb5ba95f3ba024920

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54e1d3df1f329de8dfde4022ceb45ea7

    SHA1

    642e241df16b18cfcefc4a3a1d4ac510304e3f6e

    SHA256

    53ef64e20785763c346e657fbbdb8bc75a3dafc94ec9227091d7dea8840bf34d

    SHA512

    cf44b42d80edf3755349c75afc4929b172ed92926f5980fc8ade2e0b9984608c6a49c195f8e0104cf33c193fb5c970d748f523ae889d4f0819e0a173aed12a4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d40f4714cb17c6147e5e02858435930

    SHA1

    466391bab9fe0a4e411d8553124bf09d540156f1

    SHA256

    7650a084a811abbc1a741f702daa62674cf94fb05bbdc7e0d674226a8bd0eb34

    SHA512

    0c32b923ba195a34b4cd42eee4cbd2c9eeb3ab50b8929d677640827b6c57ce3689336ff10e7bcf7cd669633942897b29a652198337cd1b43df003fbdb89973ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    530a09ef72c5a5a64730ecc043077fd5

    SHA1

    b91450b18a14ba09aa8eee7027e1d120dbb2d0cb

    SHA256

    1a19f5875084942675b3506263637217f148c7d761b82fe2b9d1e7d2343f8f19

    SHA512

    d61713960f56a6129b6606397afeefd9b75d23530924922d264232ebc3f549547626e023d1b767aa22411e115a2897958ed13197f1ca0a8d75c081f77be18e2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d26c3402df77d9bfd42480813ede0601

    SHA1

    a9537283a30e1d0c6667d9c023191a1efdf26c63

    SHA256

    d7b87aaa42f29e3e6a7ce9ba5c52d871c4c340f6f543c89baacc7aea52759ccf

    SHA512

    abf00e9022408605004e79db9731d4e1993c9f5c3a4f363dde6699f3bf9bfe23f50d1775e04d1728a7329f65375ef558398620ba56d10752deba515ec3e79208

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f363051362c19d6d1a8a5174d2c9c62d

    SHA1

    25e151f02e38c0e81d5b8b0e034d43afdd25efcb

    SHA256

    77cc5a79341d054e2705a5c04845b8db74d3d2eda4f735ebc90f6ff05915e07c

    SHA512

    f73970c0e763ca646288bd40de458ea8b7ed7d448a0ebf31161896d02911e86753c4a6477a3f8049716e7bbbbe7b43fe6cc5c24c3814f0c871ee2ff2cebed532

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2a89042e834bf8013ff7052f148d06c

    SHA1

    c24e3d1bbaaaa3a324c9b69543bbf3269e48a4c6

    SHA256

    15076313faa1acaa3289af9bb1b6eab602b7b6b293ca0d47ba24c65b3e244cec

    SHA512

    190a03a0f590c3a5f2f96792b92e5811760fdde6e6e8066aff0ffb34e8ac3851632c0a27962ebc01e9095fa2c668cc9c35d05be68c1e748f716b790ac5520d78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c899f036dda86a0eac1912f90330604

    SHA1

    6ee2576badd002b22a86b06b761976e85d4c1baa

    SHA256

    85b83f48d2aaba4f32b359b725a098a9919a6f142762c1858be6c6b8a24792bc

    SHA512

    b32d286dfe744e0438d27f3af4a0d2df12efe0e3cb152ee4c8fc65d112f3c52be1535a5476a8d450d5e2398652323719b6093a4806baa1164654106dc03145fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a946d858daf46e8e86a47e02b747c3f5

    SHA1

    43ae928ff5241507e6b609e4b77e68302a30f524

    SHA256

    0f3897f7bf003127beda603459ff7d634989f1159f98da0e35a7730863aa765e

    SHA512

    b9c5cbf4244988d60d30fd40c4b74e080710761ba10dee4b2283188226a1bda630e3146150391448bd6504ed637ffcd1aaa59db495c8ed09933dac0df15c4a79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    763e140e9f9d1f393c9412374c32c999

    SHA1

    daba72759232388427910e04bc8c09d17db8af31

    SHA256

    d482c9e1cb5054f9245336c2bbcec9efec7cadf5a6cf9d0227a6dcef3efe45b9

    SHA512

    915f4c701b0bbb7b11a668c8ce99f7dce13d91e89a174fc25bb3bbee76045de2323e781c0ee26c72ae1ab5f8497c6eecce3eef8f2ab145a8c3b0fc96fe59ab60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34ec3cc9df4462843e40ae3cf663e019

    SHA1

    0d91d48b4253d50b06bb29bd2b873ecda6df8213

    SHA256

    833967de1db8e825206716c29849db89c5327c26e6cbf4c3bae170039093bc87

    SHA512

    9b097299ce143783dcd27d6eb030c7f09497d8eabbe1245f1e28340b112582615d6db0f52e50c5bd8e3f2bbdee9e633661b80423b86e71a534f28a2a8ed1f01a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    6e7322fd5801f81f9ca4b49c5ee80b27

    SHA1

    5f38d0d8bafa9b88081e6a32e37a269d3dcdf037

    SHA256

    52a99594a356cb47b12704f5538b46e780abec43ca3a3770cdbd999efb93300e

    SHA512

    ede5d8f73b78866a1d1b12e8de2e9ee2ae5feb3ae5679a3dd0c5cd3dea3148a70d40c775396020106c9d9865c175068503b3013f6f9e13f757478793d786435f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    d09f2c1ed4c41a5acef8deddbdbbfff9

    SHA1

    ac7c3496416f4a638b978037cc1068ea5d43fc87

    SHA256

    37431b585fe9c9388eeab575bd131bd8365427c192e1590e171c92f5982fc4be

    SHA512

    465d62c4ca803ecbc31375776dc464b5e1784981cb463140c8ea189ff81ea46d7f9eb5ffd02d6f1a39d037f8f6e6fa26deee5fe16c88cefee05325f37173efe2

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U8A9A2DI\cb=gapi[1].js

    Filesize

    133KB

    MD5

    4d1bd282f5a3799d4e2880cf69af9269

    SHA1

    2ede61be138a7beaa7d6214aa278479dce258adb

    SHA256

    5e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693

    SHA512

    615556b06959aae4229b228cd023f15526256311b5e06dc3c1b122dcbe1ff2f01863e09f5b86f600bcee885f180b5148e7813fde76d877b3e4a114a73169c349

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U8A9A2DI\platform_gapi.iframes.style.common[1].js

    Filesize

    54KB

    MD5

    7ef4bc18139bcdbdd14c5b58b0955a67

    SHA1

    afe44fd9a877f81a3c36f571c0fc934324c6cbd7

    SHA256

    192bc707852c5986f930528442d88a79e5bcf4513aacc2b722a3c5e964501838

    SHA512

    6c2920e80e4d5059588a32f75bc2b5dcc19f8d68224c0935d74f9fbf49476ca5b1ce43c279768f3d36871dfcec39f36db3fcad559c2f93cc540154cdbb04dec2

  • C:\Users\Admin\AppData\Local\Temp\Cab736D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar748D.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a