Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/05/2024, 10:59

General

  • Target

    630e2a433d9750ba303d6cf4ba9d2364_JaffaCakes118.html

  • Size

    49KB

  • MD5

    630e2a433d9750ba303d6cf4ba9d2364

  • SHA1

    8990a5b580e32a5a44a1d73d2f7a67c1150960f0

  • SHA256

    8a145915a1fa76bb417fd66f5ba585fef61516840e2bfede85d7eb8ffb0693ee

  • SHA512

    434b2fcf396da51966f069893e80f8855eedbb8546898c584cac13180b816bf0f7faca05a46a598133b9c95f827db1f94c04ab6de2f89e80d87ba4e0c1090d29

  • SSDEEP

    1536:EophowP/povKr6xA5sfAJbwFa+cRO+plUXPidJOlo6HE212MGYV:Eoba25HMFNcO+FHOlJEwp

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\630e2a433d9750ba303d6cf4ba9d2364_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1924
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1924 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2080

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A

    Filesize

    893B

    MD5

    d4ae187b4574036c2d76b6df8a8c1a30

    SHA1

    b06f409fa14bab33cbaf4a37811b8740b624d9e5

    SHA256

    a2ce3a0fa7d2a833d1801e01ec48e35b70d84f3467cc9f8fab370386e13879c7

    SHA512

    1f44a360e8bb8ada22bc5bfe001f1babb4e72005a46bc2a94c33c4bd149ff256cce6f35d65ca4f7fc2a5b9e15494155449830d2809c8cf218d0b9196ec646b0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    7d959385de99a2e6cdd48a1cd020cefa

    SHA1

    4ad0b3ae4817b757b849546dfa89a2fffb350ebc

    SHA256

    ec96cdb6b3535188af59a357d18f4f1f13c4fbc86c43e7ccc680e5190ed1df54

    SHA512

    7377e976c5e91dd19b040ab5751aba1ac4a027faae8729a223573cdeec2b0bc0a68522a6d325260f751184d299a070976c790482feab78ce7de15d74a64b86c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb00b24a4917c6841eeb175b453e75d0

    SHA1

    875f90390f66f586f3c663ccd9ba33e8509d2f40

    SHA256

    1ac6468d91b15360c040fce4d7378899eb28d2daaf8e2fe0b9aa0700d0c66e04

    SHA512

    f60b005006a6e7279cc2c2737d0fc272842266f94fb105664c47a669873ebfa1c525d5d0a9d880e02fdd9d030c65c7e4e26192f03ae268e0bffe626b2b3fe30e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e89030f49f5264e909c95f1b83a054dc

    SHA1

    2459652f9344c64b08d111e0ee710e8e04c76ea4

    SHA256

    575904ac5096cbbf399bf5613e784775018b77b1054dddc035be44443187601f

    SHA512

    4dbc641397cde0e9832157678a7ef10a3b5cf72ed877a5f1ff21c5321a2a48be5ff415a24eb6f44fd6d7bdcc1bb151df4cc970da0c872bc821d1d7de0e94d0ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1ba3dda7911776e18fa6b8b7b2fde3e

    SHA1

    6a2709dbf5dcf4b48c7ced90b6c3a3edd4e3d74f

    SHA256

    d1efcc6ec18cc5471f559118992ce98af703eb415557edc2e4d7643e16201852

    SHA512

    4f662934f374970c8bbda2f6368e6aa146aae80aa6af3ee4edb29012a78ab912ef01763291c6e032f367aa940ca6cfc82dbc68203cc13293b5cd4919e0de769b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3dab6af83164f185925ae3ce18b3e958

    SHA1

    fd3f707f8a0ef86968e46e5b38473311490f5964

    SHA256

    d29188024fbd6bf7bd730610bb6ffe62c669352d3fd1f5e2a80b132ccbf15e28

    SHA512

    9fff27898efde7299791993c71209aa5a19512af0b8b4f0ab6322f91fb2886be9623ff8cc125215b5e1373ace53471df70a43788af391177b99fc5283c90315f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20eb828e92d742008e76456f16ba7f55

    SHA1

    08502aaca47c0486a50ab71ce0beb822e62f11dd

    SHA256

    752231fb248b7edfe2be66bb5f88c5ca91c1c899dcabbdc9a2c9f26f368d34d4

    SHA512

    b7dc8521cee19110809a36b017e57c34026ed42c45834eb67adfa89671e2f0f48fb7e1a00eb6ea1c60ff02dc2130ef88e9cd8680ef29cc371d8f86660303fc9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29f99f3419d3328061d62b7cc62d1abe

    SHA1

    ded788edc65455e541cb62696d087c1e9c2284cf

    SHA256

    73a57ea6803376e66e6833a6c1a4a7c58ce87a15630bf275959eb595fe985d17

    SHA512

    a6d2bd44dc6a3ed41acc37356dfd5b8223a056c79e1b44f62b5a13eb9f553dd04f44e994bb94028ea5edcabb57680410c8b729e8fc9f2791f7a62b546a562adb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    053b7db291e9eb56e06f303afecc27f8

    SHA1

    57139ad26358c5b052018747194d60f93066484e

    SHA256

    9fd8f6d26a17db87f2150ddc9a7751c3f9256c9f8f0917a99db1c315f4b55c25

    SHA512

    3dff20a5b98ccbc015e854eb7753528e69de7552f9cb192c7eea95e4fc1e5b22c39514d4bb5e14c1454757fb2022860d0b085beaf4850571d1f7c18daf989165

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d736d08c8564dcbcc00c006c6cc44586

    SHA1

    52bc0f844a4d6e34db7c9232c7e0e5a4a2df8b76

    SHA256

    7c49bba81bbf0f76f830ae0e7350d06e818b6f5d3d0a42f3354bcbc6c531b311

    SHA512

    44202eabe60c6d7ad4c58c2d04a8f98a5c3513c118b83a6166a9cefbea2cdf2bdde8205cbf27261bba884816277dd7ebd3e326683c56bc04ee53f86e5588f379

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d688e281a00a977021bdb96261d15432

    SHA1

    63e5e5bd5bb6a4e36609cf1b7d31d162f1d03ada

    SHA256

    354dd683581ed1dbda9120137d4276b54169a360b9da266476baf2f98cc0d111

    SHA512

    a16369312e38458a4ff63c61cfa89e5fc75e4b3e6cd2fef6b2b053b305b62222a57afe491d65283b623a34b2634a17a26d48ee03a7a982d4dfa46a9ecbbae943

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56f021a9dab748afd212a73773a67094

    SHA1

    0eb48736d67e1c0fb11d78f47e7d41ec531c4ef2

    SHA256

    563f56042d96a514ca9ffa23918c71c180bb9d0f72cb0baf1bc216403284091a

    SHA512

    cd368b97630a1004cddb28d5007148c5449a0e14ff4cb4cad8f7b05fd9cd541f25859d467d9be202bef3fac32fdd7b6e824a7a83da0e2e41f18a858928e045cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    76ca09b90c05c94224ed2476937bdd47

    SHA1

    250748d06a5c1dc04f6aabd29ce81237a68f4ea6

    SHA256

    da8350a21d3cf8796320992807a207058ee545bba6602345212aad2d6ddcf92e

    SHA512

    05c0948aa09b982bce50b8ce6ada81c3ff1b6f0f3f86b9d346d5127ffa569a2de8ff62898a066098271aecdbe5f4fe7430413a307ee6e905bae05b4dd3afff85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14b93abff211ff3b66675893f2d4c75b

    SHA1

    3b86f125cdb942063b09c4bd25b79e07253c9da2

    SHA256

    9687ea64ac76e69ce499cac1668bd4741ec35d031c74acb3b941c1ca94609953

    SHA512

    054eee7e858a37aa34db4f2ac37d979aa0dfd81ab7064b0e1734b97758c8a82cc300abe800ca17c7e84845048957fcde04020aced46ed27a06de525d9231affa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3e8b969ac62e207aa18d3a28a5ef656

    SHA1

    3af8a1479a10a741f4ce34958a86d0c8411a7a93

    SHA256

    0837ee2968155ff39574fe78652a8234a4afc8e7c4e44749709835b8934ecc4a

    SHA512

    423972935cca44ab5fcef36f5f413c46b3bd81b6fd486e722773c7aaeae92dbdbfbf2bcd0b90c230385bba84b8dacb13f69527cd85a39435fa897a53f4753d78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3120020ab59f882d52657f4be2b8ae4

    SHA1

    0db8620205c9afc21d46d82673edf543c4682941

    SHA256

    049e5565d41f55df86605a27ce20f70ccb1a33f2e7a2505021fc88c8361f6f69

    SHA512

    8e34ed51ef5ee04d07169096a2418ba6e4c0347c32490e92b80d0b85f702da935dc73e6f96ced2a72a1ff18ccbd220de014fc5016a153974f8ca4b5fb98da0e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    137bc7d87768360953f0c58411fc69b3

    SHA1

    fa6a68b3716f3a986c169acfd03fd4eb844af08b

    SHA256

    f3cdfc8aa8cd2000862ba2148a6cd1d130fb81de31f02178461edb813ae0ee11

    SHA512

    c2d35eb6651cec2d095cdbedc4993a0c79ae93df5822424b161dd3f742a39279fe30bd289d0eed4c80365b713773288ea298f4d38fe9ca620437d92545cd5069

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65e5abd3f60ee28fb38cdc6ee80f8aa2

    SHA1

    90c4151f9466a437e824964ba9c910092b969d29

    SHA256

    3066b6f61230f09cb6ac8218726c50af52167a157f458dc1506d17c624930be1

    SHA512

    c65dc993e1d458a7d367d571c5bf20264271b8347adebcc75b803b6b58385706b01ca660acd5e0206194a5da2ca848b7cc035208d26f39b69711ef9243a8392c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4985548b0ed9388b812fdc7e7ba49235

    SHA1

    75b7a5041683cf6236ca0a060d91fc2f10e0f9dd

    SHA256

    a85fa2ecd276e553247f0b43da9eca16ed38b0e842b0cc7d8972cc1ed5b79567

    SHA512

    e952f7bedf88a42cd6c0f5bfd2446815dbeb1f76712666f504aea6706c583718ee5f1246c327264d88589526f29cbe73943a5fccbc3c9a5b0ccd2c2e07ee3bf2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3db889adc3d4ca588c7fae2fb54649e3

    SHA1

    09b00b58e7aad209b560b30ff29a96113254dae2

    SHA256

    e53c400e0002a05dc13852ce2135e63f0ed3040b42f6e2f0d71dc5067a1a22d1

    SHA512

    c2ffbe0139abe08c6286e00c1f9802bad64b70d1359761e7318b518c4f388f258bf2f41c01c833c9973510fec004c132af3d4f097ca62e7d9f08b997a81cd9ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e230dfaeb2caac890c7d05f54074211

    SHA1

    1b09dac29bbb0dae633e912421129b82a41cf7f3

    SHA256

    12e5a4f0d288f939f29d679b488e606067ea3872e22bd4143f86d735fad38ace

    SHA512

    4cdcdfcd61f2557aacad431e875d4c00ae277d4e26ad54eea1af639da453eaf46ab51b684c0ef7074e8b99b6bf3f9fb5cd8ce4b030714949fa7d3b2035b253b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    389ae25ac8125dc14fe5b40791e865bd

    SHA1

    bd15dbc30dc516b63ed817515d71d1e688b8c40e

    SHA256

    3f647d79cd5ecb6dfc761a34e7fb5f4e2d05fac985d1bd776e6e6fcefabe1892

    SHA512

    a6c164ac5efff97984b475bb5379c172863cf140f878282ecdf15b73feac3d8ad1988df10a4b29e6a771af2514bd7415d36b885b8242b0cd62db552dbdd3ef1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86c827852a33ee9968932932e59cef33

    SHA1

    0dd55d11b4524583a5f87cfb5399f12587769c92

    SHA256

    bf9455a33bf8f2e3e63c8efd9d3735af2b03001fb6496d77efc173612ecbfbb4

    SHA512

    f0c335097b8ad68cccf1641c2000d903d11f716ad0465468d6a9440b3aab25bd89d0e6a879e7803bf924a515c575c668177742bbdeecfef87e28e9f00a1897ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1735d9228a232aa9b2a78c5021cbfa80

    SHA1

    3ce30ab71bfe9266607100686801f0a3b3c984a4

    SHA256

    31e3f638df12ee5704d98d6c68ee81a9af7e0bddbd78a06bddc821a9c5ceb636

    SHA512

    38caca25f133131954b38e61dc00528da78831d0a79937deb9283ee5aeada3be1400a89271dc6055cb373e89b026df213c43649fb598148bc119748aebf0818d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A

    Filesize

    252B

    MD5

    51ee8b220d354ee592b671fe9edcddee

    SHA1

    3b418e14ef7c8501c3894839e3e30fcde8136f53

    SHA256

    2460db1fb0e314ec4549b8eee24cb762ba1268718d1d650b3d9c13746cea7113

    SHA512

    fad46c5744f8e03f32c73a32c62aa44de655248eae99dc60a36c341cd8c4fccc4d55db0230b8a1b93566ac22019008b3b2f3b12bb6864215055f21db8b974c5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    b8655aa562d616298b6825b855d84285

    SHA1

    ea77a720f7fe9d9c1d7edbfe964c59e6e3e51a50

    SHA256

    9bf260526b9c6b84fcc2a433e3a378d03d72668f31960fc00207c1b0d9484859

    SHA512

    fc99136cded70ae33545a2e8a8651737d5c52c7ab6e278df324de3875ea7224833893ac0ac30feaa4904aa819ec89abe0e28963853ce4975faa496d33a621770

  • C:\Users\Admin\AppData\Local\Temp\Cab254C.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2550.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar2655.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a