Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 07:04

General

  • Target

    66684f828b6905c43c4e5a2028f1bad4_JaffaCakes118.html

  • Size

    184KB

  • MD5

    66684f828b6905c43c4e5a2028f1bad4

  • SHA1

    4fa047d08392c7d9b58963f24791ee055d666b29

  • SHA256

    b7aa351747f849646ade399d7ffb223aadb02ce25c10009ad1bfed343aac620f

  • SHA512

    684e9f876b800d05ef0650c4f904aa366fd62c42e7eaed5b4e94e809e4e0a2d85c27563a55dbbb9dcf7e614b9f8648aaef26af03bedb03c75f1cfe813e7b8bf2

  • SSDEEP

    1536:KMiYiHhzv/njbO6QVL80E7sTWRfa7m6gblrd3D8ihZ697/GXmNJ0zIf7iK34FPgH:KzhjjvG83m/GXmNJ0zC349T9illtxVR

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\66684f828b6905c43c4e5a2028f1bad4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1928
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1928 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1784

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    195fc28150bef9b30510eed36fb325af

    SHA1

    1ea8a314d8af1d431b77d5280d1782e9a8e867c6

    SHA256

    5c2e51ccf5767f80257a0a0bb66dee40957e5379431e15a118e7f1343ad1f6e0

    SHA512

    537da7e46d8b5afc796c1908042088c583c5380fb729f3665845fe36286b3efeaec9fa26475e9c2263f55b1eca04bd7ae26088a9a85950b2b7f750fd24eadcfc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    a79a9ae4f051ee924c73a9ac2a913b8f

    SHA1

    8d25ae014aa25939402d41fe6f1b725008b0175d

    SHA256

    6deedc4acf20c2a01446b5a49c4bbf70239aef65a46864a839ef5d36058ea73e

    SHA512

    ec57b3c1c646a1dfd12473978d14968b978c8fb50b0be2251b3254ea43e6301aac91ada4a6a678f36179855e0e92f69022b2c4e8d7910303120d9eedfeb5458a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    17f8d3f58b3da3c822937bb00c7e334f

    SHA1

    bdf9803f3f50a72c7a030cddc6f838870e7677c8

    SHA256

    c495e20bb77b53bd4bb4a328368fc65480c09e7fdd3468d421e8687a880c319b

    SHA512

    ec123300a564670d8be19485304652d4f020694d77cff32e8d7ce926d1ae8ffeff050ee31ca176683ee51c44c1a4d63d85400178d9996ca7fd15a1c8e90414d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a4b153ae57ed2a03516bc1d66365a654

    SHA1

    1a45284c6d774511be8599f25f6f0084f31ee4e6

    SHA256

    16ff114b2cd38cafad2ef8ffa50aea1e26c1e55b357335aa69977110a226082b

    SHA512

    d97b8ba3035461673a73081298d8fbfda46787b02887dd1246dfe8a4b2261697f0b5a729cac38f788fab0bbc1075858e41bddba817b80f5d88ba19a04a4ef05c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ccf677ab69850f95c03955bbe48f9b1

    SHA1

    39271d2491317145920f0eed0ed40552351f63f6

    SHA256

    ab7568059f169f2e80d12e316414113fe79fec09470f281e99ec6bc52157568b

    SHA512

    0fb5ecc2de1ed14203d25301e851bb2ea06d6608263c1ed5b3df5a3b73b7ffea1e93a4d584e27417bc0a6a54a2d9534158cdff643bba2c6d3af97b30bd4453b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    351801e4aaea131e0c5e0a4c89bc68b6

    SHA1

    7194e6172865b14c00a10c15a2a5275df7346048

    SHA256

    635597032fa758d3deb0fb0e8c2f6c4bcb772ddf2443fc6f39a19a2c527b0914

    SHA512

    bc3c17ee2291e103f2f2fd81e970241c7601502eb3cf5ac2db2e24c478a0fb905efe1514ede67debb43c5adbc1e4ec79a452239c6e0299a43bc2ad51155e83ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f0885aa1a149b5c01fe2bd2cf5a4aa8

    SHA1

    df3c3634e08482f67bacd68caa3f49fcdd575863

    SHA256

    56deb34e648166ad361614a7d8e235290649f2750623291916ca164a60c11538

    SHA512

    d97e5eac16757cedd6cdd246b739807e7df9b861ca0cf20557862f613259fb29c2b5d5b91edbcf963adc802f871444b060a518a82b4b26886a61fbdcfc86fe23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ebc713e6711e5d3b38c97cd81923d2b

    SHA1

    7afce35ab5a7931ed45e28fde5d97c9021002eaa

    SHA256

    0510418e6ed2b12daed5b060535420fb1bb23cb6523eeb89a55137a9f789bda1

    SHA512

    7b69cbb7cc0a16f399950681df4cb036685e218aac704a8ee0a1a023aeac8ea641b55a63419e04a94f1744cc13a90a670fbde072863b04e8af52c3c7a17b0b5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35350a8d65365dae7fc45581ee6378aa

    SHA1

    3760b3bae97edc25f9a171cbce350562575fdc22

    SHA256

    b236bdc4205815ffbd62a0ba0ac1177e32cfd2ec22ed62188eaa26e1d7d50229

    SHA512

    88a2128faa233ae173a7ef3b8234bdd269d09a4322bc57dd8890b40fb3e53fc0b3a62fa2f35dabb4596847c40156afae310e2c2743ea1fbe3a2c91c113ac08d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9e507c14a415045a7599d3c7e45a65d

    SHA1

    d8001aabe0460cb05da075cc301e6e1b4aac671d

    SHA256

    40553f05f95123be30a420fac9011880ee45a208180eacfc176de8d8094074a3

    SHA512

    66c298d904139433a75caf0a1728f33906c2e716d5047727a174a05929e415a6b6fa98c84c59a3a99d9928b7f6fb7376cf8844d211fade2cde9f2fabf730a43a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19bc5437810e9ddf4120ebe14e68691c

    SHA1

    d7b2c8a017876adb72f8884b10b84a5803eedd27

    SHA256

    b06e679e7087cdb8d170b1c5a202be8bdf78a53bdfed195bbc39ab81a47a92fc

    SHA512

    15ba605f79a9af03c3848d499bcc99f52b799a1f455892946c0a29a3b10a8b7a6549d207d705e8087ed3b9031868335ea26bcc56f6e9aaf74524cad7d574e0af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6dcd75e8659591c7e92753d97c2a8251

    SHA1

    ba5c008c33075405f601ffbda62b63bfc32bb3f2

    SHA256

    67a13adda51ec14ea1a78d1daa9bf76fb407a77984644b6f9e78ef5c28c7cbac

    SHA512

    e82ef4773cd8da658f586fa16705980bf44713fa38c166099a2b2c468399f8d1e1e9d87fc1a3c0c7b51aeaf420f7c37383f0f9837aa24c178dd5c545220dd02c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2017794a49541da60181cb6ed03c0497

    SHA1

    007f854a5eabf7a5a4812418d1086bd67a7cbc66

    SHA256

    d177f11cb4b87ba751eb136b5d80ca943ea62ad989da85150a7eba47603add50

    SHA512

    398d602990cc41473a5996d81c0f510a6132f8596f106526ace72250f890963a1b67f7d5373cca32dfc859bafa202c8d4666f7672b0e3da0758fb97be6ca4bdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b0749417e86f4d43ec6129c77aa14f7

    SHA1

    a86ec7e3b1e824bdd6ce4a137c76e00c864cb52d

    SHA256

    a712544892cdac19a481af8015b012eea70d473738b1b870831fb081dc5ef541

    SHA512

    ed16990959b23a3fe357fa02ea30254e3c4649e31531ba8e2940853141455f44344de82c7f2ba94f1ed184cb45f10a7c1d4d6d2c00554c084c25e976519cdcaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2404ac67d03c9d068bc49d8381bc83b

    SHA1

    d1194c25598a6f2730b09172e6eebbdd742bdae9

    SHA256

    73811465837681ff90afaeefb9157f19984b20382ae660dfd1e22f86262b056e

    SHA512

    0715dfdbfc096a249b9e5ec6f83463c12d2a68c76a1db2163fd0d3c3656685c5be0dab620d30dce53438cf3af05c76c402be64ce3bd7ea27aff1e397cbcbd141

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c70b1793441222206c090a2d44d0c2b4

    SHA1

    e0c00f22612c595184ca12bd067f4e2334731154

    SHA256

    38c17d633b206fc733ed14f2d4051ec75cdc558a68020e55037532c3ba82d90c

    SHA512

    75536f14bbd158abab644584b4832cfc00e087392f0070a764e034d0384754f335333131899613d9a79ce14769fd57c44c1766d8464e3eb24e48dd65dffa22a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0fdead6ba2c36d870a063ecfa1343d22

    SHA1

    55fcfa8cf0a4e14d4e781056149296ebfa8848f9

    SHA256

    7760dc296dcd9bf30e1b842481574580d60a5c19a5d88db147f862362845c86d

    SHA512

    5216981aefb99a22702c7a81a59a53254300764ee394f9cc8040da14eb49def0171da3696463f1f0e3e410ee172b6a8efd56adca35da6dc3d3be7081b894887e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd3296c28e010e4b6ce1fab8904299ec

    SHA1

    4b9ac1129b41d62d0d9f86723fe523ab83db8ae7

    SHA256

    8b4d51770d7fe8f80726923b7aaf1bef652fd6c62155feebe637ac340def25b3

    SHA512

    3d0ea79a871b53b997252d0efef19150cf1b52095962cbb36d586c53af2bc77927ac023fe953c0d2bea51f6476077e9f2a59ca9c42f63699502481ca1a3fbc37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3a2788b9afcefb20d75bed46a67e685

    SHA1

    6a83f91809a8dc3634204cf6d13504edfde80048

    SHA256

    6ba6a4f471d1ff4caece6244eb3c5fa36e57e61f9ee5a82f4beeecfeab88d70a

    SHA512

    213814911138d869541a2751d232b47cbc7c07edcebabaea5b801890bab60a4a5dc133773baa2b37f73999c2c50b6941ba89d7eb3efdf018d871e16709f3e724

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ae16104e7bf900171d79b779e412570

    SHA1

    2cd31ebce5a9084c5f658f494a3b367765f659d0

    SHA256

    123577ea9c6e9cfa74e65561526a0caae4c1bcd0ebe825750f9c2e2f58c7b8ac

    SHA512

    97227be545c8d96e8607f44b75c6550f0c770bd4f3e2cb09a681e2a79c7770a9d96953517ef3324babbd029c504c567b4d5cfe197f381f99fdd47e90b46c8aa0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33ef089f915efc7d9cf23b8d7a9613ac

    SHA1

    8f1f3f6dad977d5ec3e1d1dbf06f0ed2e554c168

    SHA256

    94e03cb7fae83e3e901ebeac5faaee598c0988f5a3b93a2897e61e6d96394a00

    SHA512

    264951a1843867365df0a27d38db09d4569a986f8ca52d576dd48c946ea3ae07191836f2fbeb20ed166be0d8ff4370fd6ae465864a67b78bc516b2c8cff604f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b824ceff3f38a2b8bf93d81ac0bdd2d

    SHA1

    0b196adbce6c671d7c1d4ae0cdb5b3ae417ca1a5

    SHA256

    f35ebba64629e68a40b511a23a8a577f57ac2e480dafe58971699db03dee8dab

    SHA512

    31c5389a3dc65bc73daf463f02bb2d5d544cdce09ea5093ff66dad8edbc516ab4372c7e29c5f2a09b85826d4be21b936d2eebe5adbf485a83d370e86413638de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33384177bdbf32c5dc8765fcc8f56695

    SHA1

    f367209aeffd10abc217e0fe38c8204c2e8c45dd

    SHA256

    572bbd5c9d6d2184090c4d78e97e5906a6e8f1ee8b1e15564cbdfeee36bec404

    SHA512

    994e7f8637f25fd1040e8fec95584f7a51c63ccc04a646284448eff4d2f1a0f116615b9d6736ff82721a0805c598b1a2ffa70e3236635812716ffae2107b060b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8db461a1b20ce6e23475523667f7b3a

    SHA1

    9ec65f65ff063f61adb9a88d587f4f1127119c38

    SHA256

    32f46318eb3c3ed219e2f4f08c29bcf83b1331a94fe07ab349d9c7eeacaeacd9

    SHA512

    e8499bfa0d46b53cdcc7a646c788bfac7f69eb49f8b2a5f9309f2349afd2e6b50efbf38c407fb5be44db8cf5cf215d4db9bc22e4240c4b75df6ac27fdceebfc9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f16ecfe00a0137db0ce8f7925deeabb6

    SHA1

    509953cd020f7c7d31300a120aa85ddd77043013

    SHA256

    ae6a18d175431e8a6625c249f9e2aba3d681f0d9e434688cca134ed1a350c4d5

    SHA512

    a7b73b4da69c4a6df906809dd5e42f9b988490e5da43c0786f11435f07b35deb070473ddbd335d9402f7f96a7b6215404a45970dda3f5176407ddf0805c175a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    a3f1605493dd0a5fb5bf093d2db617cc

    SHA1

    27e97921d041b0cc4ac2f293e509df58d12e62d3

    SHA256

    c2d1c4bbe20702928e90bba55bcfe5493db99deb1b6a2657430a31d32e52f5d8

    SHA512

    9e5b2db62743cb3ed438630b838998c2034be751934047d5a711463f6ea53657828e5235b11877b2fddcc5f814dae9055fd8dacee684fbbcaa0de45a042eca8a

  • C:\Users\Admin\AppData\Local\Temp\Cab8ED9.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar8EDC.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar910C.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a