Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    147s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    21/05/2024, 19:54

General

  • Target

    648f9de8dd6c4e527e4b33f6853d6600_JaffaCakes118.html

  • Size

    74KB

  • MD5

    648f9de8dd6c4e527e4b33f6853d6600

  • SHA1

    eff3ad2334abdd9f94313cbc1752c891130e4fef

  • SHA256

    d4eabc986d6a7b990c5feec18819e1bf437139b92adc16507fb9da4aac047ac3

  • SHA512

    825f5c58c188be570be991731c42490d7b107f80a3ef5beef288de1bd7e5ef3300c165aca8ba82ba73e79a6807f91811c9df2977c711b4b965418da6e251b9d4

  • SSDEEP

    1536:dEaikcMLU4hakanp+ZnWaUwuW2s3c6OsOC9rCX7CesEvsptLYTzHGx1JjESEhKMI:aaikcozakvnVmsM6OsX9rCX7CeFsptLh

Score
6/10

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs
  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\648f9de8dd6c4e527e4b33f6853d6600_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3056
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3056 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2164

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    a1d955617a4d146e70544d0d9a0390ca

    SHA1

    5ffdc4453b23e24a7cb0e634b26864c169f5257b

    SHA256

    8dbff2c0018158256912d87dd495a68c351303a319f50f204a930317e867aeb3

    SHA512

    0bffbc27638b12cc04f335de8c4f3c74df01ae55b56f389f8d046d797b4c62d31bbff057ea75ce32f67cdd3b878fd0aad3eb62e983f814296e1b94de3c6ba810

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    7a83efc34b3985c8cae93e2a7c0ffba3

    SHA1

    5a0a753a9726bdf3e961b083f1a6149a42320bf9

    SHA256

    e0a9e9cbe73bba0827aacfc56986a7a26ad6c2b51cf4cffbf26554dfd5d5d969

    SHA512

    de948bd74d3227b39f832573fca0e35d3b280d4f748702dd838bd363deee19c15c23c763d342764446693833b9a05b849a34d66a748fc55c42c56388b2745a51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    cf02a72a7aa02b7b62b69d9fd0823a24

    SHA1

    32ce3ec60ec56fb0c7378f44735e0caf9e5f99ea

    SHA256

    a330cd8ee37bd4ef7b0374f5e3bd235e23ee10a4d2c2da3123eb24d28e574186

    SHA512

    3ffc2fa97509b962d2725e97cf4e2b9c71c0c0d2e79f485bddab4b6c1dc14b8fae81f7b334b856f07c81ae46de1cccb7fa7a4011325a6822a769e54ab4c8eb04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3df4c8bea87b600ad0648be902784d71

    SHA1

    9f9806cd40255b00584a84fe247bbc91678faeaf

    SHA256

    2220b4d43526ba71cf5b975ecfecbed66f253164381023a0f449764058ec6d53

    SHA512

    f1c065df70212b59199d3b2e03b42f148cf596a8173f3dba561dc1341e6334558358b38f4fbd3fd8285aa253cfe61cf7ae6a6ce190e040c9e7721cacfbfff99d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f337bf9ab851d8b7c2f2463915c16848

    SHA1

    e0d912fc0714b7e642cdbe5500af953c6928bda3

    SHA256

    f6a3e15a7095e6393c64d7d25cd1a21435bb15ccbc493ceff3b636d77f92690a

    SHA512

    066c5aebc94d9dfb9d8c5bd39a56177625c270bc69dcb058068a9101b6840109e8d984bee96aefcedd2fbda7bb07517dd76d56432e622160d69e5feb5e2e2f29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a80dbe25e3c9a35b63e7438a045a5c5

    SHA1

    b189202a8793c07811e294ef9da02f287f261d93

    SHA256

    a3515f8c9a93ad4aa572c671e4d7e28496119a752b2bf5869862a5b3e717c8cf

    SHA512

    1f847b7e1ddb87ca235dce413a31567f9b00baed74a164f699b64371077f6662b13162d00f9fd52d8f04a9892caaae654355f6765bb854396f938b558cfac33b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34d3b86f3e2164dd453a644da9ebe65b

    SHA1

    4ca7428637a70ff650a8dad6e505222012317b29

    SHA256

    5a1c91a0cfd1336e27c983ee26620861921f02945379ad33f33c6ee4c62999d7

    SHA512

    1ced3706e7f794f2bfcbe1dbaabe943ad8bd6d1cb200a08467da2f422f0a32bf5ed76d995b7b9a1b4afa4da84932034123b6941acb3d813164bfbdec0f0cd5aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb75faf195c5990a32922312d250dd06

    SHA1

    6fc703d079c32f43102910efc1d30dca6109688f

    SHA256

    42a9e63a771c894790575cf9cf447589295c59322664199b9b5bad4afdc15450

    SHA512

    80b9ba4e4f9d419d90767cbe528b330df6b09074736c4c4a923dc3380f40d435d7b7988a3502f5b91a88aebe52b468fbf90e856777da32b5a5565eba787f4a51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a1ca533222fc87071d34051f2b435aa

    SHA1

    234140bf9fe7847923557e167829d6acbd27a890

    SHA256

    8f50221d90caed36d189659c80407c2b91d004bed59f8619ff423079c22daa67

    SHA512

    34fca8d5fadfaedebb1db630bb55a102550ad906214489edace6836866e026c7b074f1cc89d3bd14b3224122742b57ede3237a2d081f53b469a0d4e39c090858

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac18dc2a2b53d7e831da9a667d7c0ec9

    SHA1

    62d55dbec6fab019697390e79b27bf9900e15134

    SHA256

    502fac62324f366040260dfa61abe4c0366529171979f968725ddc429e734d9d

    SHA512

    1125205ccef23618d8d9f49f075ce8c43b4c6230b9b3e127766c86a2a386f6aa29a5fb2186560afe48ee05184aaf0c3b057c25a77c9cbc8e264040be252dfaf7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f378fc4cb9227bfcc00838c7fe22351c

    SHA1

    e2e552ece5ddecc60de4c1a8211625dcf48688f0

    SHA256

    e3fc0b5ddb2d42171d6d399c121aec68676acf678b7e11765f0490acb5a41457

    SHA512

    9b94de4155bf1b0eb36aa4bb4f3f240f448bde4b9e6b957f008564074a68234c541126e58b6c9dc65462abb43aa2c4edef4df6ef82b0677a5a6b378e8c710397

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7060ba344b38502e10196edd9243ee45

    SHA1

    8fed38fca639aab57b6fe64f0bde6168d573db8a

    SHA256

    5869c734a15b830440c3169744c6778ac8a88f37c51bbad3b8b35eb8efb708f5

    SHA512

    c667b5a0386cbdb266a20951593df7602fb6e8f0401bec5381d67791aa7bffaa59b9f56e367c1187e901fd68befff047d4057a12c01110ff5377c7ce95c4e602

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9b53621670555c140df1bf9750c6c03

    SHA1

    679357df4c1c6c3b1349fdcee551a94e0c6b9599

    SHA256

    6a4b5202322eaa295f5c9ebdcef1c667fbb8489e2bfce5a7eb144b18cb45c9a1

    SHA512

    231afd5c830b9279dd852f2eef3a93c2e15a5ddc2468bccd9deafea3b6157f599a55dc30f3572b2ea5c251ff32ce03d0eb58cc055e0b495450e9ed43ffc9a768

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e7902e571087f8aa3050d5f3cf27dea

    SHA1

    b7f5e6a4f1e9238ac70135a69524b49762048c9d

    SHA256

    3d92b06a643022cfcd55d8a640bcfcb590bd1ea4259bf5f3b86c00fc35d51b4d

    SHA512

    a38fd8e9c8797ecb636ddfba584391fb56889d8ce5456a6f54d48711d15edce9ce2704b6553ec19c91c13f0081fb98dc450344982a83680cee27f0b6838bd957

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36faf4753f7785c4311b8aeee32b4b9e

    SHA1

    664e013c8d06289ab5cc055dc2c4874ac312bba1

    SHA256

    e4ff4acdb5355780fbbe68bd05eedc12b7ce9989fb0c8fe0a964995e9b146b8d

    SHA512

    14565b1600746f108fdccd0cca9fc4aaeeb9fb8b362e24281bb539b9731377561569c5b83ce0ec2d55ce9e1dd45ef27b38aac7cadf27f1c0018adade94da1673

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b1943c292b13bea16f822ab01681abbf

    SHA1

    0d74ee29f0bcefe617c17bddf5f7e876c1ddf9ba

    SHA256

    82f9c554dd4b55a33246f55688a9b7c06a3a0a26061650a261d33381033af82a

    SHA512

    fead4d8d7bb0daa0b47a47fc1c626046674f93c747fb2f5545f28c2cb78411cbd4e72f713c4167e7a9091761249e6cb7ac1848de110aba6e73fe13e8e8eb1b06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec421b68b2a7c18d3c9b06abdf746917

    SHA1

    bc8a7bdfdc436fbe19f2e029ce96293ce37f22fe

    SHA256

    e13dde4912eb3a3a774aae94978bcde8bebeab6ea3ec49f1fcb80ea7a73b67d8

    SHA512

    6f3665b4c11262716092789fff3eb4939599e5245c16b979e8b017bc272a92727cb391440188e0b492483ff6f7a1d4c002a0b3fc5221ceac772d16cad7f36f57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56fa46e85c7afabc33253d4296249a3a

    SHA1

    579fbb4f7c5bc09a77678981054b65031a8ce060

    SHA256

    10456864ac2ba83c4fa63a02d02a20516e7aaa7385e381e5d7fef38b5cb7b7ba

    SHA512

    d867c7e6945cadf62b8e53846fb5613292f905ec92d063a652e18127f750ab5bc374bb1c0e77321abd670b905a963d42c3ddc4b5b6be97637533a14982fb84b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ce50c8544646f41337e0090d0c962fa

    SHA1

    87e06ebb8a6f20692ef5f9ef9e9810e0d23647c1

    SHA256

    dafcfc6915d6d5841a7e57243331532609aa3605c6272641789157d0cd97d602

    SHA512

    830be3c4c52b920154c1d9db74729fc3219975427681231609cea42be59258457fd988a29538eeeaf51e75670138ee118219af30e90464a377fa554e8d10474e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    559bd1550698003915a0b3c6bcc5ec11

    SHA1

    6a6f4a245c4767bb1396c6275e0d93e8be7473ed

    SHA256

    2010930e752efb5ef09da82a8e70b61d68d703e9d3116e17d2a89cd70acf1bc8

    SHA512

    37d4520561004c23de7249e76ab936065267308368109134d22af1227d48e74e18e3350eb7a19b9a7a462ad3c8c71c70ba37e96b62c688f534de6961cc6d0e38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0a59699ff051007fe2b594b5b725a50

    SHA1

    148cb6fbeb7c0936aa597fa1f02ac09a0a5554f6

    SHA256

    6b6a00621de55841fe18ea443f0b74142cfab5dc9e89d4fd85cf9040d3f38b76

    SHA512

    39d4f824cae69c4a99e4ffd463cc73be135fcf33a0a90778afd1370c88be74d0d119bc2ca15d1ef9b16ef334f48823bd2b8fa998a42a37dfc0cd38823a672dc4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a7c15ee266f2bb814b39fa01a38b450

    SHA1

    cbea60aff438ab528829301104a5e4bceb05945f

    SHA256

    c64ddf3e735a00a8c41e42a5a70ea263a7b447431414c0c87178d17e52c236e5

    SHA512

    cc7ff797f7d555e3f166b7593f14da19096d3158db1fab27e89505fe315a905e8b38f21d6b9c0f273322b1974d0106128369dd412e8b8191b15a3478f3519809

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43190373fcb26868ae7a26a27bed678f

    SHA1

    8f0de60dddf84d0a5f4898ae4c2e54008aecbf87

    SHA256

    231d119052de25d09b686f63522d2def3a9a43215f8dcf6bcf01615b62b54601

    SHA512

    13116436b6f7e891d6ebb29cb5655d78f3cdaf1c71043ce84d6c69df1b27333e605580d30f98054b5131c08fbe7d3faf9f4a7663261fd66517a4935e589ca4bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    88af849c67e80e65d8a9ca9f72ff0c93

    SHA1

    8667906293e36b0b8443d883e17e7ab8c80bbca6

    SHA256

    64c3852f2ba7bb79690c6c901262fc2c0d2f7164f3968c76521f4832753489e2

    SHA512

    ebd51dd244f4ba96b835668de35921784b66b3a36427eb472f016a308b51a0f27198157169b04fe92beb7b3f84366f0874479b7de7d3e77ad081cf76a7dd44df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    2fded609a8b07c2745d0e2064321f982

    SHA1

    fbd50f2a7e0973045f51d3ec7454a3c90b9ef6c0

    SHA256

    6c7d73f5d157dc33546ecff3a6c5e56eb32505c5d115eb87e644770b4576095f

    SHA512

    7423505c0b46f691ba80d78da123a23411660a36365f21e98436aefd7b4e4db04243c7aedc9852a674f6a38c119101e55d72a14615b9dab45f69332496116c00

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G17BROQF\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    23a7ab8d8ba33d255e61be9fc36b1d16

    SHA1

    042d8431d552c81f4e504644ac88adce7bf2b76f

    SHA256

    127ffe5850ed564a98f7ac65c81f0d71c163ea45df74f130841f78d4ac5afad5

    SHA512

    e7c5314731e0b8a54ab1459d7199b36fc25cd0367bc146f5287d3850bd9fe67ba60017d79c97ea8d9a91cd639f2bc2253096ce826277e7088f8abfe6f0534b63

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J8SD872Q\3604799710-postmessagerelay[1].js

    Filesize

    11KB

    MD5

    40aaadf2a7451d276b940cddefb2d0ed

    SHA1

    b2fc8129a4f5e5a0c8cb631218f40a4230444d9e

    SHA256

    4b515a19e688085b55f51f1eda7bc3e51404e8f59b64652e094994baf7be28f2

    SHA512

    6f66544481257ff36cda85da81960a848ebcf86c2eb7bbe685c9b6a0e91bca9fc9879c4844315c90afd9158f1d54398f0f1d650d50204e77692e48b39a038d50

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TTL9DZJ3\cb=gapi[3].js

    Filesize

    64KB

    MD5

    63e5a0b45632b3dde3694ffcaf0e3f7a

    SHA1

    923736d0cdc308331d5cfaa0ea159bfedc83d53f

    SHA256

    889109910477919b3457416e7764bcd0add19fd959848253026125c7c35c43db

    SHA512

    5b886c4b5122d61f0209ede748aa84445c9388cf38813316c41b3dbd2308216e88394d9a45cfc27113c0cf3bc93b9c37d808f6d3c67888244c176ee095d42259

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TTL9DZJ3\platform_gapi.iframes.style.common[1].js

    Filesize

    54KB

    MD5

    7ef4bc18139bcdbdd14c5b58b0955a67

    SHA1

    afe44fd9a877f81a3c36f571c0fc934324c6cbd7

    SHA256

    192bc707852c5986f930528442d88a79e5bcf4513aacc2b722a3c5e964501838

    SHA512

    6c2920e80e4d5059588a32f75bc2b5dcc19f8d68224c0935d74f9fbf49476ca5b1ce43c279768f3d36871dfcec39f36db3fcad559c2f93cc540154cdbb04dec2

  • C:\Users\Admin\AppData\Local\Temp\Cab343C.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar34BC.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a