Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 18:35

General

  • Target

    609639a6463561d44dd1b2bd4520f62d_JaffaCakes118.html

  • Size

    43KB

  • MD5

    609639a6463561d44dd1b2bd4520f62d

  • SHA1

    ce1d5d19d2062576f2bdb81d7cb21b2c7424da56

  • SHA256

    c4cc3b104e229a12c1784565daf96f05ab446ac4571532d947970fd53eeb04a8

  • SHA512

    4e9add0d49c9c003d0411e0b381fd4d3ab81292ab584bc7a96fccf42bd7958fe4a994dd45003f85f77789b51988d7e866d42c418910c7ef5fb3441a261ead305

  • SSDEEP

    768:lkzgn1blj7QZWtjL8PP5CaLH5Zv5vLj+Xr:lkzgn05vLj+Xr

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\609639a6463561d44dd1b2bd4520f62d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1276
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1276 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2368

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    2861063c0e5b4b97b9bceeff935fe681

    SHA1

    6a4bb48270c696cf111fc5c27206e84aec145f54

    SHA256

    104836bc45abba5fa0b04c6f65d9eb8c0d83faee20bbb2b515cc2474d5f109bb

    SHA512

    c6f3ef2ece358d6cb29f7640e3b470295ffdad5229eb307378c71000999bca58ec698881aa2571c7fde0e50b0bc1c69a915996260f4618c27245b25b9c4a24b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    724B

    MD5

    8202a1cd02e7d69597995cabbe881a12

    SHA1

    8858d9d934b7aa9330ee73de6c476acf19929ff6

    SHA256

    58f381c3a0a0ace6321da22e40bd44a597bd98b9c9390ab9258426b5cf75a7a5

    SHA512

    97ba9fceab995d4bef706f8deef99e06862999734ebe6a05832c710104479c6337cbf0a76e1c1e0f91566a61334dc100d837dfd049e20da765fe49def684f9c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    3b2337ba55160f072ba0b291482e7863

    SHA1

    3f30b4a2e6b68a5c1395d73f483debb10fc80091

    SHA256

    5f33fe425df51224bba432db10e747727902c82fcd1f526909221c3dea347cb3

    SHA512

    68c709fe39aa04f1524558854c87eeb2392269bf04609b31ef959fb32582d66c1788111f8f649499947414addfc8c2eae1bb6d3f0ee44e92031cb9f625a826af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42cf14260b5f5fe8ba385adc4d14ad33

    SHA1

    5f652bc6379219d6948dda06d1638341f11ff15a

    SHA256

    e5241f48e24d9d1eb7afb8f0a247fc133dd11f22141ad33cfa573fffa37e105c

    SHA512

    f049afa7f4da5eb93f6b56d68e86c0dafca0bfa678e740a2701a859b522610077157da8a85c204f71f59bf060703698365a326a1b88d393082b955e513f129d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bde61ee91fa1995967b4ff025a8748dc

    SHA1

    053048667a9a419ad2684baddbca4e38a12d65f5

    SHA256

    3e30de107d094804714edc47b827ba748052b2fdd682478ac6496dce1b2c5081

    SHA512

    77eea68fbbfc90d55e3054eae754fb3983cf0cb875205d3851b075f287ca41865bea66a3998858fcea9ab48aa6dfa93570aceb65225fcf3e80d3b9d88869db0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b945cc3ed85a62180551de562b184d81

    SHA1

    f47ac8c6728004588ded703e0ff3454c16d91b3e

    SHA256

    b51f0e3ca168ca06a0fb8b19fa7266d681eb1e9bb57b05feb746f15760fa350a

    SHA512

    3a42606327a2f2fc29dca5601ad77734e1e9ccf7b9810c4c2889b5d2066ca118623e5e91a788d563ed59162060f498437fe26061ea6af1d47ccfe1d4f9139e26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b270b7fcb7c1e6632ef57dc558b70603

    SHA1

    ce63e06bb640f8878e61e0b8020b04bf07d21673

    SHA256

    92b1c0d678a4dc72fc3add54265e4853ca3b95788bc42d7a1e4d895cfcb07949

    SHA512

    cf5d2df47776276ebfc14e6de28cb75e4aa5852ce33cc96dcae6ad1a7b66f77b66f71a0448c227f8e2ac33a03d06899297bb986bb0490ce7c43788508d26490b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8785f4024db5c730bd7aba35560e885

    SHA1

    c36448d8770bc5673b42e29b96db47937ca54c3e

    SHA256

    d8524d010fea0251179609bf7f43a9129fa3562d413611660f67f79b58141f87

    SHA512

    fd614e18b3f5062671e0c1586859cd6d9d890f720fbe8f24dc5b67e59f2d5794b1c52fce06ae903baa87eff44976b00473ce66f26016db479ed986a4cdcd9530

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f31871a0a7f4aa521281b6f83eb1accd

    SHA1

    21365f9c0e5061f602a4dfca35cd169a8b24f14f

    SHA256

    eeab847dd35dd5ff7b4966296a269e0ac0ee3c5fd44fd369018ae0982cb0e722

    SHA512

    939ed3656ed40aac23552bbf5974a0efc697383b11efc1f087608a2791575d0970be8839ab023f1e54558692df632df977fce1639e729c61248896286ef00dd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99838f7baced75235a1811b5cd5562d3

    SHA1

    484a4cb972a74526c7e0155197298764ed82a0b6

    SHA256

    685aaa9cb73a0239941d7e94342b159f99fce5d99e067e36bb6d0b1c2642f7f4

    SHA512

    59018f8b115f76fdb70126e6c02551fda56c58e58c54402880fb9a6f656b235aba8f74b67ff97b18d4b2687ceb6730365dcec668066a6b4a25e0d2952e8fb47c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8df0761035f47f9449c48593839d0a13

    SHA1

    02e985d341596974be4cd0ca14ab1cdaa9c40500

    SHA256

    65fdaebac256118b139f919a8f8d080e42ccf2b81cace95e11162fd70224935e

    SHA512

    83ca6e1fb44d5f479c4351876452fa38ed24f25a7abba73eeb472b1cbab93f060c3e5eba6f72386008401f1616d82ceef1a23e7358b0524699e9e4971fd7a8bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e133183f73aed84a3dc83fd25df4c9a6

    SHA1

    2933e1a96701b02ed183ae7977b0af22f8c8b3e7

    SHA256

    0ce5fc87e5b866677adc35e36f31ad5efa0579e5b5ccfa599f6d8a7f473ca867

    SHA512

    fe0ab5a233c265875603312c15466124d3763ab023f412ae82c1baf92d577e9e6f6920886bd7b8e71e507e405778aebdff9357dd440a482c551e3843488ee0dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89408ae874301fd3a5bd64da6b5249bd

    SHA1

    8b031b9c437082b19b67887e1b58e10dc3c3a38f

    SHA256

    84a93e95ee08ae750053307ad2153c055ac1efe3ab03d7eb3c10648d7baa14dc

    SHA512

    a6e43763909476a03d3298b99da04fcd669a5c8ad85692ffc4014990e7debe5eff0d0c0afff125eec96774f6ec3539c549ce35d71f3b310f4799f06074334b85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b8270fcb592f100a40f0fd4417a678e

    SHA1

    1eeeda97f3b5a5fc7443f8e9ae23c38bed2b3a73

    SHA256

    90ef078fcb5408744536dfe419bec7d8b2947345dcf8bc28fd5afaf228456335

    SHA512

    83aef159555a3ce99cdbb4b3ec20aaaa0e8beb017dfda7377d30e169ba24e7068a314dd93cc94ddc08a63464bfd75c3e03ef91028243b9ea5fcedd7d5e123e9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5295e3551212145ec54efac281328660

    SHA1

    e0eb105492f28b3d2010f75de1ff9058a3e13d34

    SHA256

    c7e316be99912f280b6c762cf7f31c843524894a095694606bcf4a1d2cb7bb89

    SHA512

    2f70fa1bc719deff5cd480639254f40490bb9c3fe229725f0c060c7070bd63c392338eaa5f91eee9b6aaa747ae80165dab8ba22b9b23994ca1bcddf1ab7b2634

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f34142d47419de9ec3d5c3070ca6651

    SHA1

    54dff0243981933b8c5828dfd0ec06168d423a95

    SHA256

    26f403fe17fa6e1ae225e0e9d5a57d5ab25f240dfee95f72f7b376d02071c99d

    SHA512

    f3370dbfbb48db53f0e46d1318912b217abaf38f941e6f8040b8dd2e517b9e35b705694692a46f67177f69ace63c4dd304ad4b00d58695337ba477892f24e3cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19d326a72bdd6bc5b97bb36587aea326

    SHA1

    cd33695fc4c5a2db448336ddf05e828f502dc88e

    SHA256

    1d00e770f6784f4a04596b0ee3f4f5c22232cb6cfddf1799db573ccf5d25f690

    SHA512

    87b1ec9d258dedbda3fb32559acc9a1b94657e9d775f6194265212c5b1998681575c823cb520f0356b7ff80f7500922ed25d46816f6c8c381289eddb049fd953

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3dea8e5cec7693637eb87a4c8e05c05d

    SHA1

    37cf15c1912742d8c3345cea6a0a55c7e35ef904

    SHA256

    a2256d03b2b4d68a70e1d8e86cd57a395d77c77d4404986b3e20aece1ea7a68e

    SHA512

    8d7a9497ed2e067950a1cfcca9e9aa6467b2541ddd991091fbe9c77082c0494873a26b8c9bcfa756f4c0db7db6c485687f061289dfd91ec3163d31643a46cdce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    167828d030dd3941ec74108575b51219

    SHA1

    1daae41f5bd5d7f8d93d0d9d598b0b2c57943897

    SHA256

    cbbf9cb26e01747675cc537d5ad633fe67edcafefdb36b390ce9ce0b59621f86

    SHA512

    b8d41c45c20a4d1d27e830bcd77057a7c2c2d789b2cbe095366edc3f94dd50913f77750495e1f4256dcde17b855782ec43d90e186462cbc3b7bed6f5fba17088

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45c2dba94e8b8fe5d70e2d56691948f0

    SHA1

    2a2b55431c0f0b6d850ee5e8d68a2951ab97b6b9

    SHA256

    4e155eb4390a66317d27f7c3a8592d7708f99bafd8b8d3d7d46f216901ce891a

    SHA512

    db1bbc9b427705f4ddc7ea02fd65cd321f451ce687af7e5443ba3af8ad5fe75379c7dfb9d105e15e47eea0b7ed2a91879396fd00f4fce275132976d92bdad553

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    283d35a9c077f36cd0f4b1d3e0e9175c

    SHA1

    bdc053901ce08ff614b457d5767dd4a7681c5c71

    SHA256

    92db11d7a072ef183c58e2e0eb121de704a1a424b24ff67832eb39f1eabc006f

    SHA512

    659ffc3c9e4212f09a3d01a9e8d4e4387ab4d9ca39bfb41a9055272f2aaf51b1a7b3c91110f16f6c761900bed690cb841bd58619e0e7a531450138071a79118a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6230be571bc8ce77fac83a19af72ba0c

    SHA1

    307ded758bb19376740353acffe50bf462746336

    SHA256

    85e14b0a9469135a1ded56f0246a7e954befc9632e12de1a78802649f615621e

    SHA512

    3115abc301fe46fd13f050117ab958dcb3c055ca9636b68c4b62a71804b99185c722a1ea2ccf7d0a02cf0a5ae0d12fbe92bebf06e635de261e8b6a65a74105f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    033246d9b32fc0e2afe154844e2effc7

    SHA1

    b44653c596742fdb6070bb6a29c88356d1c044dc

    SHA256

    bf09d0f8899d248efc6490ec57ddc86e0e056c1b322458d01e8fc52afb2c3d8d

    SHA512

    84ed4af0cd97e1a01d37bb1d2a8ecc28762270f6364880a2ab952398eca173e790e9c81e8ff376ba1092610ff7daf23b6a2997c3932aa6c2723faa15abc99d7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    392B

    MD5

    119e028e75378643220f55e8f8300c05

    SHA1

    307b358803098e329de4c9450f4c003485fd8446

    SHA256

    cde83ba75b9183bb328d3f9df32c9ab612290465d3d655948382236104325809

    SHA512

    36340e51743f0e0d8a9901bb53f90afc910f7f0c4c947f5a09b4999cc996d1a68223d85f901a183c67b4a990fb2481e875b9f93f4d10f052b81f0bc967ba70f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    cf2c875e1827c1d32ac326e8bd80bfbd

    SHA1

    3cf7a97a9ff02f5f0b24ece36d70ced193f0a692

    SHA256

    ac1bde6f203750af5c608c4e871b06927d5d21e4c57a81c3e609275c5a4927b2

    SHA512

    9aed5f51489f49b37edd34f3d3d6c08824f76e3bf0d681dc2a209e368a5785039b63a38085a50bc11bed2e1bc0cfb566b46f10c8489b9719696851ba32bdec4e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\673IEUYT\domain_profile[1].htm

    Filesize

    6KB

    MD5

    b529aa1bee564984f5751c9736757824

    SHA1

    22516192a1e10abecadf50cd92cc692ec45af21a

    SHA256

    c9a148bf8c7c099fb4ec8f7b1c67ef239c7c985f2a326a10834e47d1893d76f6

    SHA512

    59259d2c8576bf59916bc07fd34a0818c0dae0ef21fd7b189d11d9dba3d6292c43f2546dd188cd118d51fb5b6524f8b1b63e3911c51a4112c76cc0d5a414519f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\673IEUYT\domain_profile[1].htm

    Filesize

    35KB

    MD5

    f19d5b5ef2b4887279ade8c06ee8b8bb

    SHA1

    e6f06ad418d88b3e4a5d6170fe089f32bbfb99af

    SHA256

    9c7ad78b762e83a9f0fddd70a965a4192d02765c7a720cc6b83bb5d97c4509b8

    SHA512

    7363284c986bdc18869d6853aa1ce224aaff1790d8b83fef8dec6c370dc30d41f0596fc5cc2ff13e0e742abe1cfa2c5ce1e975c46bed08b7f361be326a8819f1

  • C:\Users\Admin\AppData\Local\Temp\Cab18EF.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3008.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar3109.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a