Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 13:27

General

  • Target

    5f514ea7eeaf5401ffe03843638df4ba_JaffaCakes118.html

  • Size

    236KB

  • MD5

    5f514ea7eeaf5401ffe03843638df4ba

  • SHA1

    80ecc3014ee64bd6dc36438c9ce65193d0e16641

  • SHA256

    9a4c6c2132a2c9ceadbc10eb6ca41ca28f3362e5e8b2a0038388698d8ce7bfd3

  • SHA512

    4b4369671d6fa488e8f981177a76653af69f29514ef96d9807ad1c0d1e56e7491b68da02702f1e64078592e17ec207c93f31654e2705703ce0f945286f0e2519

  • SSDEEP

    3072:TsfoSloQSJVGrsPFX/IXCs7wIEu6WjuY1b9tv:TAoSloQSJVGsXM9Eu6WjuQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5f514ea7eeaf5401ffe03843638df4ba_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2372
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2372 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2548

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    4729bdc0e745b3293b606e2af8a3986f

    SHA1

    5c5bca22089d566d5f4e2836ea97026952ae1b1d

    SHA256

    ab2d2c145ab00319ef5b1c4fe09623700a26c25fa009dc18bc3cde11c5bda0ec

    SHA512

    381e495c91ce282e54940596b53998e152e196eb257853e3c0d97a3e4a26cbf7041cfcaf179ad213d93058aeee9987292dd2302a1219b23a2190aa898910466a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F07644E38ED7C9F37D11EEC6D4335E02_02C4C6ED250727F9B08935C0A9565568

    Filesize

    472B

    MD5

    7a1e441067e2f71efad6da8ff30c7500

    SHA1

    247c339a52f9ce202be20f1524b462b7fa738bf7

    SHA256

    b125be7ccf15f5696afabf0c2962232f59245b7933d04d789c0d13a24bba22fc

    SHA512

    d139d706c00ead9dc1e6e438bbbd8df7f3bceae51440aab815661bd72ed8dac385f8b274613477049ebbee7124b5846e9b93d86e5914f7a521ad0974f898ff8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    6b75620068a0d0727e32d395e52941bf

    SHA1

    3a3b4a6ff7b32910b70056e53119ff4eeb73cbff

    SHA256

    db876b24c42d024b22d2020dd0c9396b4f836a89c1b7a09b592c487d1c8f48df

    SHA512

    902181afb99024ffe0a3d083e9fdd0d6919ff60b1557f513af82b4a4b7d070e07cd141a176903e69e2a46eee310e55b295e5aab249059f05c84ef6bd35c73cbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf977469c7f771c8f5a4ebfff614bd38

    SHA1

    b25c8d5d064cae8a77d93e341355953e06f408b1

    SHA256

    f5e30006692a82edf0413552c34f4817bb31b2a7137a3d7875ce8a694cd66ffa

    SHA512

    9c3e04dcbddea1ccd090aafced732fe2d6b32569b7e6ef06bf92933d13b9581da821d28ad150c4900dc4975d7878548949defeeb6262eb7584b4041fd3956d73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ad58fd638a34fea4d716b135feadb7f

    SHA1

    1538be0b3b8fb3ccef59c8eb71514eb589850d96

    SHA256

    d794984d10e36a79d37d27c2a2b606562e72be591b9f59506eccc98e6e5a2a97

    SHA512

    438e5114e38427758258085a66cf38b72842d4c8360d35f22c0a9ae8c4c12eeaac960a1b818bc3a1b450c7d45032054699dff0340ef7a8dddb8780b1cfdf92a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c113e365a441385c62defc257149359

    SHA1

    b547965108a89a827d0a4a59d2a2f8eb18d8c690

    SHA256

    01cbaa48d95eefbaee3c14386e6823bc560b60dab172b5347e30d1983f0d2762

    SHA512

    dceaa661667e8e8d22e71cc9fc1a38a10a88e9fb4b208923cdedc21621f0e6b9f6654299055406bb31ba4046a988f5f60f5bcd98229b100b1302e61bb0c25ce3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89ad1910a0edd6afa18cfb9e0a447ddc

    SHA1

    ac0d923b5082494a384a32836dfd5fa3715c1754

    SHA256

    a0d174c40e97647b87bb4cdea39da22b91d75346f722486f213923c7d5e169d5

    SHA512

    1eee1f82ee414047f8923c09f43747f91e89a0153c7a37e34ae490e1cbd5fa95692ef6464f78ca10f176b8b58cf3e0841fae9c1baeaeb96c6227437410a6c431

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ec367146baf90e62dc2233f81a79530

    SHA1

    a58904def9d6055c3a084640c238d015b561ad9c

    SHA256

    90416be703d15356f420775b4c7097ebaf4496a60c2ef2fb5683de1ed52987db

    SHA512

    89fed64e786b756f13f68b839892994eeb8a4e14962646d5bd9bb8377d2cd18227baf85803673018584e0fdaa925c75de7c61a391d002d27edb0f05d2536eda9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1071c74236d6ae6e33815390859cca4f

    SHA1

    fb92f759986979d82e76460a8a7790418aa3a258

    SHA256

    79afa7f3f4234dafb9fc6a6f73cb0d8c0fae789be6909b326e39137853177011

    SHA512

    844974642f09c60b15446292e1cdc7944a232a6e02bc236ccaae64951c606d8b516cd66a5ba180579cb74f4a8efa686527dcb077ec40aad456d4ee11e5d52925

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e28a0ff5b2c9ac135c3975cb576df71d

    SHA1

    1f97b382715cd74fe94244616e34782cea84612b

    SHA256

    ac0e63fa8b20ebac878ae8d19840bd4b4c12a13dd835dda685304fd4683a3469

    SHA512

    41c56b7b22ab6c2fb3304c2193a5a6b24b798dc52a864aacc21d622303e7d79550809d99c3fe4cb11f7ff797a46e320b0431b4529cef92db982234bd606c7fb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9295c842fca1e37fff75adb001dd239c

    SHA1

    cafaa157f10a367de6bd3bd67b7a2b254cfeb7f3

    SHA256

    f1e5a4631e205f90d7358f7b6ce07d0a56db3e2e09541be0da3fe010e39243ee

    SHA512

    329a2b57ebd346a4715cffa42d93128582f2cfb2406764febc5c455741dc585b73c2adb82707dbbb6f3f4a74d8993b8d8149916d612daf583fb7ed3aec893b83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f37faaa5e16a7eefe802068482b0d12

    SHA1

    94407ba2d4940f5b9b49cafc8386755f469a868c

    SHA256

    0a2b1747a813e164260115aceb85ed84c65ecb2292967f91628680f97f7f4872

    SHA512

    2b96be93b29a9c677a29638a76325ee5c5ca390f421355d16f565e1abcef1a833c3e720737fc4ad749e8a149347c60324547c99ec530f1452b75bcc72a1621fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    845c781b9af0f68a70a20db0867059fb

    SHA1

    2ac1178c1a3fc77f36fcd09ef5760c8ce8d6d5b6

    SHA256

    bc2c895e055b806143fe4a2d74caa1722c1cadf41b9296d971c2358015ce226b

    SHA512

    9f50279abd91323c111472dd257fa01fc27175b1b43030e772e929809d5a4eb64d44c2d6dbc94e3e49675dd971ca1cbda9a1aa39e48b4e54afdb9693a3eec8d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b31ff9a4660c7c6f0d9ec09bbbf9457a

    SHA1

    19938d692627b30fc8ee2dce010826c2deed8b29

    SHA256

    0b47a5c74766930125b61a94eb75ea8c43a39e31fd0c582e33c0f278e34575ef

    SHA512

    7c930740a2cfe90f5d8a567faffe9a7b3bb65d5cda06ac18d0f84c86d0563f7379b4170c90c2d5343d60dc1349b84feb17b1f0de6ca7cf86587ab15dd17691ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5850b4fdf22b087675e39b9d1e83fc6e

    SHA1

    2d12e69a928d1f4c0e0b9ba4535d20f9fd17641c

    SHA256

    77a639c8a1c6604ebfb6912eb0cad9f48e455fa481fb22c3a829cd2053fbc4a1

    SHA512

    cdd32fe5ce125d2970168846443fc364096c0c0d29ea51e984e3e03a4d71426eedbd3c88990fa2bfa47fe5f47e187df2a8e8479f6b19c34e1bd5d2ddf1149839

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b47857e78cadae1bfb32d50da79fa5f

    SHA1

    f365fc4953c3516442313b3ade093d31424b6194

    SHA256

    74165a280f398465d867c6cda070123878bda47589fc61553b0c5ebb62d0e67d

    SHA512

    8dfa7237041b9a5e4492f1000c845473ff30840c3de8ef6616a1fdecef8ac39807b29e163eada9bcc84516a37f65ff2bcca679bbc93f03a805cd43b5fa09a406

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b39c238fd845bf1d9d71de1e4b20836

    SHA1

    6b4596c7d13142c6f9e8cc8c7712c6d09d057500

    SHA256

    3df3f4955b20caa0a6bcf5aa288ebf27d98097f2a2a20186a616d9def0168c8f

    SHA512

    d6404fc92cf42a466be6d45ae4e86ab1cc03a9ab221940c2ee07f4d5d8d0b24afc1ef9591b84fc61f9dd6abacd11d223f04d2d94663e2c398e9eddfa295d539d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9402715f47b4e4292cb2ec6e4e1cf3fc

    SHA1

    6e8d257076213475a1b43ba5565edf612782b0c1

    SHA256

    6ce40b6dd25f449e378062ab1742b8a5551d006e97e9d7eb19b1ac853adc073a

    SHA512

    45de5764d602351415fa4c08dd87e5d5cf66b38bc4bc8f2fc08895110664c31477ce5eacfc39806fcad62d8ffb2eabe1bee5566f90241323c545cd279b7e0851

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db41ad6bfcbe940531e4d8b03c3f380f

    SHA1

    de42128e81562c9bcff9f3ce13af152e8cd8c9fd

    SHA256

    7e6bdd3f49bc058304a9afdbe9a9ffeeceb69d97adce94b3cbbdda43643df773

    SHA512

    a5d30639b1f038b865cd9a5fc418385535f4b4997908cbe53ff20ba5203474dc6c307defa3a778ddbcce2f9e65bee22f96f46be34c136c359a83e35a253eb46f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea045b720d33461e047a634fefca3052

    SHA1

    308961a974d22ef92fc7a2895a7ba96d691db7a6

    SHA256

    622393e76e686cc634f3250dabb84cb8e5f0dc874cf94d7e37bda19bf7fefe6b

    SHA512

    b3a70942d14fa67f4cfd4be370a6f9e32fff39eb692b1c7472e7dfed28904e722abfc2f96e6de21e66f81a4d68794482d7fb2a192d7e90335561eb1c3c02bd4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    226d47a8218e39efa597026fc5bcad9f

    SHA1

    5b8445776a672dcd74b2eac57b473add8a4c7c30

    SHA256

    bf9cf6e3139a32887a5f2642218f1b79358bb85624440969ac1f29febb5e7c56

    SHA512

    4df90e83a33fb83469fffb3b3818dc12e353cf245adc34b95e001350a7673c0af9049faa87ac347ea9dfdb538c74b19e6399c77bfe8afaf6eff082f3940108e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f965ecd8814aeb5a2a9ab2fd79404a9

    SHA1

    2b1be798e45db9075351cd297ad3e80809fcf28e

    SHA256

    c2ae8a1df1ca1f7ff7263785d794a0ed6b464f2fe45cc7261f69e5c322107281

    SHA512

    d00ccadbc273469ca68f69c29bd025d136ffdcb5b718b2115704c24eb983d486515e7db2b8161c76d51d7ee8897701df31014123da842144702fa27309a64ed6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d7d0519fba996cac030da7e381e6914

    SHA1

    da453175dca21bbdb4d957c25106e93f9f6dc27b

    SHA256

    7061f1eab033fa08a13831d4705a93512e239e0e61d5c95480aeb8024b79d612

    SHA512

    82414e8689f646ce4770e29b0f187406e0f57e45d27bc888eb0acd3141c7e364486232ae1fb056ef2c466d7b5232eda0185d180727c04ddd56be73b8076d79f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7cfaf093e031560ffe871c2801d8710e

    SHA1

    56b18fc58ca015c5f9d28f8e3dab9e615a8348cb

    SHA256

    52d2f859ec4844a8e094ad7b38f02d78f3d0fd0659fa4fdeada2902c587be901

    SHA512

    478a156e2d3eca945738c5a1130fc13020492a843fbd318e215a84445885cfb4e98df076ed002be1bf1df465766d6a45ddb27a227ccbcff6523f8547a6bad17f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    f15869c197bfc6efa7ab662e54b6ff59

    SHA1

    ca0bc55d00d9a6160470adcaf34f4f26f552ad26

    SHA256

    f56bfec5ba5070f1e127dd6b068cee4a885eb88a3d44fe6024eb52160778f6a4

    SHA512

    657b799ec172497bf2388e2359b70c01f4c20b341f69c0a6266577296e9a24975abd1ed7477f8ee1a64b2f20e50cb9305cdcc5e8c26ec72224f87692e1d3f869

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    3032943ee015e91f8af1d965c5fff785

    SHA1

    75b3898e42cb503befe7073f47814864c8024a58

    SHA256

    833a7d151acd49a45795958d1e95ae6c7de96d2d19e120bbb5b78acae71ed752

    SHA512

    f43d028613ce528b475bd72de6a33f119382373fedc24c3129b0650eb2eb9fcb0c3ae2fd1574b1a2e93960990b1fc72a5213691619367b9130e3bead29b0216a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F07644E38ED7C9F37D11EEC6D4335E02_02C4C6ED250727F9B08935C0A9565568

    Filesize

    406B

    MD5

    a5927dab7e319d53f8e1c9d1fef36414

    SHA1

    5b744640db17133871e71309436e1e0b8b3e149c

    SHA256

    5029f611cda311d6f2b8a915ace187ad4ae17dfab1292a264f1ef05ae776daa6

    SHA512

    efeff6a6ffc721e93fcfffa9ed83e71a7aa8f39dc9896f61989228e685c3ae87526ceff55a2237bc856708d1dd2fc435d08e3590d1f5969ce667fc1b67f23ae5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H09CVCL3\platform_gapi.iframes.style.common[1].js

    Filesize

    54KB

    MD5

    7ef4bc18139bcdbdd14c5b58b0955a67

    SHA1

    afe44fd9a877f81a3c36f571c0fc934324c6cbd7

    SHA256

    192bc707852c5986f930528442d88a79e5bcf4513aacc2b722a3c5e964501838

    SHA512

    6c2920e80e4d5059588a32f75bc2b5dcc19f8d68224c0935d74f9fbf49476ca5b1ce43c279768f3d36871dfcec39f36db3fcad559c2f93cc540154cdbb04dec2

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NVDR4C1U\cb=gapi[2].js

    Filesize

    133KB

    MD5

    4d1bd282f5a3799d4e2880cf69af9269

    SHA1

    2ede61be138a7beaa7d6214aa278479dce258adb

    SHA256

    5e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693

    SHA512

    615556b06959aae4229b228cd023f15526256311b5e06dc3c1b122dcbe1ff2f01863e09f5b86f600bcee885f180b5148e7813fde76d877b3e4a114a73169c349

  • C:\Users\Admin\AppData\Local\Temp\Cab278F.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar27A2.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a