Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    137s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 18:35

General

  • Target

    609559249519580902c6950a00236d4e_JaffaCakes118.html

  • Size

    65KB

  • MD5

    609559249519580902c6950a00236d4e

  • SHA1

    27ff833f4d57fc4ca93182039f44835d62787a92

  • SHA256

    d259e493ee35a3908a98ec0078af5d5ecdfb2a06367abe8138471f9a162add3e

  • SHA512

    afc7c37fc1f567edd1f90cb9a8e7def7f31c85bac0e74346c05b054d0247c8c55bf463975a7eaf2b5a50658a53523feac45df0a78563f929d72a45fa99a61d6b

  • SSDEEP

    1536:ryvfZ0eM0s+WkwM5FBGlN9Dwo/pJbyudfK/M3qp3JhvPHUJFV8HJJvQDBhKKgEzZ:evR0eMb+Wk75FBMN9Dv/pJ+udfK/UqpA

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\609559249519580902c6950a00236d4e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1760
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1760 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2916

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    81772f0cf7c03e699090300980960dbc

    SHA1

    56dada3938fa0c79a702891afe50c91357cf8df1

    SHA256

    da2b92c42e1e4b37fef1ead7edee51086a371219589b76f143bcb105769ac5bd

    SHA512

    31b6eb82700e95c1205aec82302174c666fdcc0c79d313c3d8a653155b6874344633d982b6c6fb516a87a355224319127445d45b99610ed1970a72df749b5bd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da1d3876ae4fe10eb85cca8ec69a6668

    SHA1

    285ae522e04eeb60c915101e101dcd86b229ae45

    SHA256

    83f6aedd39ecb2e7410a6af435e9d7b5335f605ec26973d4d0cba25a3f69de02

    SHA512

    e484f24eccbce8c756c753cb945c25292c12e09a4c704785bd630d3b1ef12c8fc49a0bfa031c58bd8d874530c5d4cf5a67aaa2030b629512053257c8af27c137

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2daa51a107f477e735234690e7aa5842

    SHA1

    2c2a5763116a57f63f382ca4b9ae1eeea72da627

    SHA256

    97ef444648d5ac1d1ca37f62eeba933248a65419fdfda1323f25e226103ce398

    SHA512

    eb3383663f762c5d1e406fceef048e42224bd6196399f4dbdca363ad4f98a7359582a9dd5d1ad343522aabacca9ac4a949cb4f54bd22d4e251d07c88b6e653f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3b2966b48b4f12bb3537778faf4b6ca

    SHA1

    7193d4afbe7323088c22a3a5db752ad34263eba5

    SHA256

    dcb6e2caa228ae4340e1101f702df36c3ac93f3d82c6c051b077b00bec257973

    SHA512

    eca3801592202fe363c7b1ffb29efbe83e291fa15165656e28073867dcad69eee41667fcb30be20589da00286d62e39c956922c635f7b7920cc1ebe3fcf092bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    faec8bff138f94a6e261d19264d738e7

    SHA1

    5782835b53aa1c05922e30a6efb5bf1201fd88c4

    SHA256

    d666c5fe5678f941e17728c81760b52df1b72a3890d6877ae333f5700f4f0e89

    SHA512

    4075372851fbac9d37eeaa870fe507ffc1f9a31d675590a1b2caf42eebe7d598e85f0548a7d7a2d0ad8280626d5e5d6344171aaea84f1e5cf34fe00a4b9dd435

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d82e3f1ba027fa65ab3ded9d55fef60e

    SHA1

    e7c9516b00560773faf7b55385861b31d2e53a94

    SHA256

    ec76915d9875a39f1dc9a6be2c7354e7358518562a2fe9bdb09dff2ad358ac68

    SHA512

    956341f3d507fb176df5d1b2b6f26da093afac2ebea85d16afd020b8e72e600c6c12fa4241b2bf6efbc1412ae6b333a597efb1688155de0350b2b62b5d290445

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3670d6564474597da907727cc89e8d12

    SHA1

    deba291ab886ab1bab70c108f3410a4cc2918908

    SHA256

    b0544182bd2c07a9b0807dff453a248e2e52fc252fe2b56bcae6be0d6664aa0f

    SHA512

    2c27c83b0a838acf714f65992c3275390c2868b20b1fb28af1a4adc8d8d8c56cdcc7f12eefaea04098f02280425d0336abf0fc9d16a9203668e4f560b403daed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bcee435f81e4007ac3230778951f6036

    SHA1

    5c05ea905cc63225383f4d773c3837fa438b2343

    SHA256

    287793cc7cf145e812ab7adec15c6d78a7add72eb391a36f370c64aed43d9490

    SHA512

    deab90787ea556973fb6e75ab075b92c6767334540004065610dc1e1474341f1dd4f59d7a8e92447c18efc0cef9ab653e142a43d85978649f7710407d0c3fc10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e597dc02d22b1990d39af2f99a5cdae

    SHA1

    de6a5af4af836780fae4bea1ac65b441a81ab0da

    SHA256

    5086e87fe19f757a1d64599211220e15d591c8b99f2fc3cb48ef664927750e0a

    SHA512

    6ffde5ee96751cd42ef8cae1aa0f698a11fa2cf43fc6329e90d5ea621728d4fa111ff0f3ec2815660a85881307f2891bf8cbe9b14fbb2f9a1c80a7ff2fd9743d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ff9231165b3b2d887cc7afd1cfe46b0

    SHA1

    8c1cd2ad91a9952bdbed24825334117bb88fcabf

    SHA256

    c2e9a17baa947c1f4a63fea3f5f9368df28ea2da2815883c5a48cfb80d4a92f1

    SHA512

    b5da01b24af081547eeee876bb58293afbbf20b7215d643ceda500c34eb31b973954ae054d189a0739e0b62f6101e9095469f1173cb1f1f341e7dadaff875bfb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a797ece012fc57c5ee22b2643a28948

    SHA1

    f7cd5b2b534f95555804d9b5e5a02d96399e1dc7

    SHA256

    5a6ebf70535abd10b47361135ea547629d66053cf6fba412433210e7dea1b838

    SHA512

    f75a32049a309ce8f3f12245fd7071dc11e0f2ddf6516cb51f7067466d41cd0238cf61289267f2a4638122c3528d942284f1ae41585b4e0d347aed773d3b3a35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2aeca6fed63eb296302ba20ffd4f0789

    SHA1

    13496a39d6e1112264ace92ef938ca543293c7e2

    SHA256

    1ac9d2e751824741b3540e6f1d403f0ce29aba1402f52898b37b60c8cb124e72

    SHA512

    de9d9c853d241bcda39e0f8cdaa9f0bc2fe692435547cda4583ea562c6789564242465b1767a6af7c1a83a48e9dad319b75bce0b955f383a445c648c8ef8bbb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b03f41b078e5f8e4cd370ecd836e1b8

    SHA1

    4c0607540e9922688c772bf928230889b915802e

    SHA256

    3b3cb556d07bb880e30f32698522c54d872401b04ea9eebb633b12e9228b3d87

    SHA512

    0ad2bedab0835e992ed9750a25b6791a11dfddf7f6997a864a9125b0f82b097720ca9921833298f48e474a9f4d8d4a2154e8400b6cebac2f1e4f57317a3cd81a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    623fb4888d3f0fda53835da13bcdf917

    SHA1

    4cb5f8e98ef6e7af6e87b43bda57b82f5cf08c00

    SHA256

    7f4e759be07a09bf2b5979184ee12515c52f7ff164cc7e3457a2c533d6dac9c7

    SHA512

    62b0932d7760e298f5b5b79cc7d2ba8dadf91803bec581c0c6876f9f511def985e8e3ff307a358aa6f607b8830a4d54a6990c3eeef5daf46fae9a48010a54e6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a239c3edb40d878df99170dea76f30b1

    SHA1

    ba592e995c4555a43dd4a9c9d4dcbe760cde1184

    SHA256

    9a554bd5020d4e9c2ed07df7490b9f600c4a889248202d5b4bd0bf146b995a98

    SHA512

    691da2a43e23bec66b1dc326fd4af6e5edab6c51db0dbd23a2030a8c6065f4ea96373c8e9a34021b0853d4c456627a704a37085252cc95c1549bf968c774f2b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    680704e646c042b7e58d91117fdadc9a

    SHA1

    29f3e410dd4a431cc566029d09d84ebdaa358072

    SHA256

    bcb3b40492995ea9a3b5cea3e2a3c8bdc71c6a1102feaed830517bf426e9c557

    SHA512

    a5d368289b08198b4240791125f558b8da2c5450b9a78ef9d93c31622f84cd3cda1c85ddc0720e06c7a5fc22c81deedd92a8bb3a3d44d4d5ee631da4570ef06d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    551eb77e8b329d5db59461953d8a4f88

    SHA1

    51159c698a021e8cd14f1b9238713f1da3504993

    SHA256

    b038cb0afc86ec270cc199a6d60610e1216bfa724ae1eacace3435d8a74e8c70

    SHA512

    83e0b9ee480c95af8fe32f0e7a711ca4a68b59bfbd7543a59473517b8282dfe87c86a45f05f6be9b2a9af987a78fe8c9fe67e7434a4c05f94a79e35929136ce7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a871bbd8f616d77f74462fe71a00c15

    SHA1

    b76ad798301990404a22457acff3ffcb49ec24b2

    SHA256

    08b726c6018c9e78d6e536b96ac54fce1c085370b983dcbab88cbef3410f598d

    SHA512

    13f7f24740258db8721d20261dd1bf13b7747878bf2b73d398a1343c2b94646c998aabbb3ed9299d4614b2217e1ea260c8589cae1cf32d1f465f10c0437ce88a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    026a39df4b5d71e44b2a632fa56b6828

    SHA1

    237a89a9434ef265d1fee4c48cbdb41409913418

    SHA256

    cbca2467764cf307b5d4ab6155cedc60b179761ce05223a4bed8c42b7345b6ff

    SHA512

    1c15a9c443977c48ba9d479d8984398c133838e82f754cd9e8c89461ce8258eb364c3fd994f66248c3a1730dc33e6bcd492b17b933784becd3ad4896d21745c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ec1f48ca287d764854dbbf857e4c2dd

    SHA1

    47217f1b118cd6133b5811e65004a106d90b3994

    SHA256

    ae44bc69912e3b7be2d47357a9765e414d94781bc62b1295fa77cf5a5b3ed708

    SHA512

    5252ba18206042cc1bfe205540add58006ea3a844c97f6a659698c3ba6f736b75b8571ab94cb4f35d7bd4171a00a1e6129b689ae045f4a3633395e859ad9b12d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80923d28dc648abe389d81b372277ca0

    SHA1

    0f5cbc583ab4b7ce3f23283018a98000241c1896

    SHA256

    0806001f4b12a4df41c382e23ae6a52ff2e25ae50eebeaf1cdec0beeb338c089

    SHA512

    919bbab99e127b03a208990b78e0d5458abce2635d231e405b0f8fadf32907655adc0b51b7a30c57eeac54769a725825ad0c922e59be5fbd7d2a851d25c2e166

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c3982ee7463118da3928796d33af9b9

    SHA1

    8704e1057c2a6a4f63d0a4a4da79a1f6e99a6a39

    SHA256

    5099a2e2ca0cf3a721eb7fe98d951f4ec0379b10da0d0aeee4caf7e454b2470f

    SHA512

    f5b3a150623e73b3e50b52feb05e68b5c30687b136ea4458cfe29fed990b66ab05f41dfd93010811e4732ed38f9986ee3dd08c8a7ca13e46457280aa99d8f728

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e282009378ce5b3faad949ae9026dcfd

    SHA1

    3150b05b6e9c98993c586c1536917fe25d264e34

    SHA256

    b34cc7eb7d81f07b2e5989a6214faca71ac7676539cf0ad3a52f25372a4ce3ef

    SHA512

    c1dd5c1e68da98c0e4fa70cbd36ef380cafc966ff409966fdedff035d7b01286b0c25d3627425e7e679252b7c69b0a7433bd7f4cb25d6241d93a0a3ad06a6cdf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    0f67d94eb0d04c9ca7e2df28822042c4

    SHA1

    10fca3fb5be1dc9f2beb5215f9fae7b6ddf4a587

    SHA256

    d45f7c22054ac96e04d014daade44c1d938fbdf16127e8c5e2c3beb34bbe7239

    SHA512

    ca251411e5e88f805d1be057b94e5da31a1bc529f061f6a89e4e5ad41107282d2bcf7ba0a57b22ab2a393de00d89054d6a737cf92b0403736facbc335a2ce4c6

  • C:\Users\Admin\AppData\Local\Temp\CabA748.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarA75B.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\TarA84B.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a