Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    23/05/2024, 16:40

General

  • Target

    6b96096c063229cca1e95e3993bfcca2_JaffaCakes118.html

  • Size

    19KB

  • MD5

    6b96096c063229cca1e95e3993bfcca2

  • SHA1

    fd50f116c8f27e21c19f0e333e311b1819fb42a4

  • SHA256

    4a6b9ce46937f2a1480b9bb9de122cbbd5a42d675c508e780c6f526d67247f99

  • SHA512

    a615977b113e1b8003607451b6f723dd81c2cf411496be8048c8790217aa2979193092c7926c6f02bd65681c8b1a44296f9c5fd93fa46e7cc45d708ee37583ab

  • SSDEEP

    192:9K/ypUhT8iqEWwLTgE9d3lOhx4MfljQB2ghJxOMlUx9V6cxjb79DX+OunNiFliSg:4/yoT8iTLXfFEQBdMp55OOunNiXin

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer Phishing Filter 1 TTPs 2 IoCs
  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6b96096c063229cca1e95e3993bfcca2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer Phishing Filter
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1600
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1600 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1908

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

    Filesize

    1KB

    MD5

    55540a230bdab55187a841cfe1aa1545

    SHA1

    363e4734f757bdeb89868efe94907774a327695e

    SHA256

    d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

    SHA512

    c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894

    Filesize

    1KB

    MD5

    1142a4a2b96b712b2fccb3802b50d01b

    SHA1

    2283883c128ff11adec068619dae1345bf5fdd50

    SHA256

    93e98c83f8ac00dd60d71be7278005a4841c7992ce95503f1b56aec89df807f6

    SHA512

    63d1756c7fdc3e1883e9b0f0d8ca9ca2489d6ad866c0577fcda9fd9b50ab24a3993acd836de524203fbcdb2d09e910e902f6d8b040b7d2951f11d3930451f50b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

    Filesize

    230B

    MD5

    b008694037d69cf6085849531add5dbf

    SHA1

    6e66b82dcd93596e3ba1250d72f08e6853db86ae

    SHA256

    9150c5665787e0a631753e769c5c57c54b48ba10a9d14441e94fc11ddcb20d78

    SHA512

    364d235568a0578a9ced7c34f04ff4c1951de123a35d51012384b4341de783e305c86fc8c9e75ebd9fabdcbbe2023d38d7ec9c9a80febc16fd2604acc7cda84e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b27ad62a8d9b9da4f2342b6c152110f

    SHA1

    f95d009cdea828097fd8d71b04a0c060ab08e7c6

    SHA256

    9d2b32e571f6c8aa969fbc8037660ad621253ae12c7b4bdfe3ea0151e6853004

    SHA512

    a082bf3fe526affa324439c59ded5283f783de05cd35735887da65e6389f985ba432a6fbaef1651cb7c3a14077b85243ee4353ceef29bf1d48119fae6cdfaed2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e9a9d2fa9f32a3772f73ea8811d637f

    SHA1

    0da8f66cc54a97cafe930604714939317b863f84

    SHA256

    e9944facb0c33f26bb78865927d7efcd8f395a9a4b78798337c7518dd9c13f18

    SHA512

    d98d807f486937e7d807101725d1020462db33c8c79a6ac49bb9d76902dbea56436f67c7308237f7c322137e6758f34ca2863d414b125991845b6412064da9cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab7f8b14b6e37b693f1dd6559465a40c

    SHA1

    3e8252135d1f4a30681900d0191a212e6828b8f4

    SHA256

    363ff9945896d613c741ad3fc06c33f27a2f4ca8a85356567e374625aa2cbac7

    SHA512

    99b09539e7ff4d606e2e23902da779c080fbc1f8bed6531967aebc9cecebb564c6d2dec98d7afa84e4fabfdad88a96130a99ac017588c35a314a39a69962fc5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    648867fa4cb50d6dce6f139d2783311c

    SHA1

    21b5f37946ff85d91cc87facbd7d87d106ac96ef

    SHA256

    a69b7612d6f4a616c80b341a36da4dbc7100e42edcf3d5bb9caa50168a9706a0

    SHA512

    6946d1d92e69305d5355197c5906b6712e113d59c487f56ea210d337983b3b5aa0e68f3a635a00ca91493cae355678cd963a9c33b9b7267acbb57270cbab0f13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b75d5b429327f6bab34eb1be36d5937

    SHA1

    98f1c0b9dee26fa93b362dd59878c36e56730378

    SHA256

    4fbbada3c5d8b846b973368d1d988da09aef4333f889e1e81e46cfdf0355ce9c

    SHA512

    c724b0f628347a830ec437fda0d3e64f87bf969db2ed3d7a40c33f6addfb1314f17d62b2b0c8e4c5c0fc7b70cda4ed02b866c3c8f25077554ce808f2369378a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8fcde73ff8b84791d5e6fba4d861f448

    SHA1

    a3dd28d9897d69b05928eeffaf8a9613724b5a87

    SHA256

    0493b18fe09c0a774ea7e23cdfdd0b69b8ec792e82ad348041b1c34286bc1942

    SHA512

    cf6730060b8c4548dfd18d291cdbfea87ced9c0e22db744d6d857f8b7bcc56de8c767b9231fd5e3e32c6b9c21452ae9649f9d43853428527fb9685bb8d61a881

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9cf29fb533eb8abffa2efbdd1713ed4

    SHA1

    63c191e0b6fa08c9458aae19935c75f0d41c9640

    SHA256

    856c3b3ba5ae0de303665f4751e95ecdf2eb6a71c2a431dbce3c79e0c470550d

    SHA512

    41d815d7815c656389048508d569b88b74b3b045f3dc79d7f4aabaf03884abbfa59b7c843347480e207bf4a4594c08698e7a890881e787ebaa604b5cacb3bf4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e12b387c55aa00071604333e05e2257

    SHA1

    214be66db6f3d100439e902305b6c6345b6fb278

    SHA256

    8a5ee9503b185f4a820dc961e5889ddf35bc53230b27ea9c6449c195115ddead

    SHA512

    d34a9e4cf8297d0feec79dacace745f4500430aa98c37fbb9a56af146602172ecbf9734bc869bf09020a428a3626aee7d67c0075cf7ff707e071c93d010acb56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2085499067d403906267334225f1720

    SHA1

    597884af5f1f80d907f006cee9a5944a09997039

    SHA256

    4d08f877f60c5d7ec5d8350f8db65f355ad6aa7dd43bbbb5388b05644a6af3af

    SHA512

    84084b4c8de345a7dc19d27773daf3000261c5252fe2d99c4259f55d45a04f9d61d6c33be6240645dc7ffc9cd4fd087dac316cb217cb60932b02b3805b67d24b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5e14661dca808757170880acdb01c7a

    SHA1

    b43e1343d6c9d1516074849bbaa39ec5e7d593c7

    SHA256

    f601681491d1ef4c84ba23316f75d8aea5597bc4bae898916366bcc0b3e53037

    SHA512

    d5a16d193fb91d050a3ee34456d71581d4f467bcaee2ab16239fc1c6a8faf0f7a6832b6ad98fa76827c6d8cf46952a834f5db308553bc12b384711e2c2efb13f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5b86254927e9ce139ba8843f9299bbb

    SHA1

    36afa3e161f4ed797aaac046eb8a96073e94e169

    SHA256

    4c47845bb0a5b46275c69c2e7ad0dcadb68de0100d8199858426a17d8b317998

    SHA512

    f92989b66faaa1db68c3eae0d4023047756c017a047793d8ab965f7c05dee8120b7b186e5f96b0ca179184c437b4e3cc187a0b92b1adf343a9cd57c8821a9bfd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb3e22e127d19d55d5990fcbb3704467

    SHA1

    72ef47d1f78d5eb7adcdfd522c199f9223cd6114

    SHA256

    ca04f93e8dc837f42ef38849480377559fcb606e37b7467d246ac7709ba65dea

    SHA512

    f5f4863a67703fc0f1e42047ef28597d415ade63226793860ac6eb5496ba4bfadd1be29ff6cf7f13d8e289e46c6f5cdbcd38f6ac644e586647d772531932b997

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8b00df1777ad8a8d7fd307bd05bb79b

    SHA1

    4f7ff8b0bc7900cc0908b567d5bea4d2241827d1

    SHA256

    b456abb2bcee008cc9361adb9eaa548d60bfd2a1992f2e65ea5d40e277b7f050

    SHA512

    8634a79c9262beb1a94dbac298ce7510dd98caef8db33b5db52ac36aaba8980937a184c62cf44ce5e4dce1b716f3f64f2723a71feaf3b48871c32a5472360e2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c8faa2cf3370a3c70b5afe150c03834

    SHA1

    65817a1ae8fa166a12ea6e9c2796b51cef416894

    SHA256

    bb29a65b096355ceca7d04139e7f72f05e0b9a3b45e293ee61c13661b48fff16

    SHA512

    b4531bec0588086bac532ef191d202ede75ff90a639d363a812d289aa411d44bbe6a6e5ff88b04d83a37538d84397b7714d0292afed8a79c20edee475c93f8a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aec30ffec64adcfc79dd11e36e91a512

    SHA1

    9dec6d26c7abbfc30400a78951e0e57ae453cea3

    SHA256

    6a1da9b088e644721a4801ab2c72e322ff4c4063cdcdce0fa05a4ed9d4bf96b3

    SHA512

    883b463075ec5eb0553fa8fa6544cbcf10042273feeed77739e654c71b5fa1d5bbb6abf803aa18f9b61c115b8038c55f15cea69712038f5ba446a92713037392

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d697d77e56ed2693b2de137f087bb969

    SHA1

    a762942501b573728df328bf61bb64a3c46ac10b

    SHA256

    4edf96a92495e2960d9301c59f09c282a17693dd9d1bcbf3ce3c7f7e23007cd3

    SHA512

    46543e71d57de88b4c98d2bf713d0451862560b31e0967675882086949b9485087974f3f9af7481e12b22b06d7dad0dff970cf7c5f6167b8271c4ced56bf355c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b6efdc65aa5246f512e16dc3c98bebdd

    SHA1

    398e45ac1b6b9b0883e68f8968b08037a78fedfc

    SHA256

    b678f0868044821f0ca5fd2c31c41cb21bb08f6970f960d4e468aef44f50d830

    SHA512

    dfbcfd467205054925cae5333954ba888783bd3ede3d3bdaa4cd713114d31dbde30837523e52df23ef129233aa65862da4b95889f3d5755a2b290eee32f0e82c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa0cb37aef7e803b6735d795b3b3a043

    SHA1

    e541c650a86d79993d00dd03a37881c5eee462a0

    SHA256

    66bb52b28649886488dfea98fb0e210708ba6f8bd072e31240cd61d7c6817a24

    SHA512

    4faa16803aa9b868b0a33c1ec3bf6996f47bdf1b8c45e188c257fd1109f05d152dddebdd4ea80ba341268d701f7dd8a9db0f95cef32b583404b8e8f1f2ff0c83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42c467f44ddc7171a309ede89d6274c5

    SHA1

    221326d1e2841e48fbc9b7a68c2542a725ca6e7d

    SHA256

    62634a48c8916506d3248f1f73645bd0f2aae17f9dfc8b540e8b34071076a612

    SHA512

    e4fa63c56ad8a945181c204277d44bf016dd5df1f4c044fa4f8199767fd7f922d78163392ae40894fd4715068b9183ca68295dc8cc277b97c9ac3a3030fd9daa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d52ae52f5883435830aa66329fb1e6b

    SHA1

    62388c51455ba6bbb23615dc4c97271e4abfa14e

    SHA256

    0b9ba1ebf22aa925f376a0cc72f27a8f019e03952b3bf612828111ec4da25425

    SHA512

    81e0d10499a2712ca6db658c6609fabe9d8e20088175e6f3a4dd1302a4b5a88b486fdc9f2199f4751552ace02bbccfd0fc1ef5a0322d313dd586209952e04f82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48168c51b0f058a8d3fdb2a0271f3f7c

    SHA1

    e141357260d048d29c59c68ca7472d597da7b33d

    SHA256

    5780768a989ea254007a20d30317dd47aa722cd8061e56f54a9b2a7e89ca426e

    SHA512

    02b7cdb8f90aa51a77641b0d2f1c3ee21bd307aa2934c575148fc61ebed01e688de6b894cf723d67807809dc13cf72d597b12ca5b9337f5a6a9862e96d11aef7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    589650c2e0db013b840ae9401c891d8c

    SHA1

    48126c8bb6df6dcbe61b1f881aea22485ef6267e

    SHA256

    fd81ae3d36a06fd0825513a549a9613918d71290ffc339ae5cb1b89786a6fbf1

    SHA512

    f04714ab69e2b02fdd97415881d7c003b66fd93b9f52c76f982d3d73214e5cee15cecb0e668e62cbdfa5855d57e87546fbd81fb4fc6eebcebd3960d25c967cfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ce93bfd6e28b831246d3b20cd82cf98

    SHA1

    38cb441af63f4d0caeda6d8b639c7074182945f1

    SHA256

    4e0835b5bbfeb8f96e9368a4d20bc7ed058da7e20764749bad7d0c5e83ed25ee

    SHA512

    62f1fca580e4c6e9944cdb742d723332939be111fe3a4078f04a271a8a6bfd293de7d7cfe0da1197626870abfcf0b4835708b6a6d660983e89d03384d51bbe26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    815bdfa692ef7012c27c6ea23b61de85

    SHA1

    5855065c74e5ec239f97de0f3c315df9145a3750

    SHA256

    fab3d27f7da07e4f4b9f1156cb5e5232d9c2b691e74ada7149c15b44838eb6d9

    SHA512

    a207f05f727e2e22bf495c00237dc8349f33f2280386aa92786585b76a46560f529fe8e9c5c0c9bf6c9a900217161e211c314cc8f4b847c16b31101cdca4c5d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b9b3cf0431f7962ab8fca9825307a8c

    SHA1

    af542c9885e93c7faddac9934690d92bb960d929

    SHA256

    2841349090d4f0aeaf695b5b2b2cfec1d3ff52af00d2e2cb1974b642ccbe5c74

    SHA512

    9126a618fa47393b2ee9e162a354df33ddf81f9ef4722e616201c8edc2282bee9f2f546794b14e94fb9719b9b48aa181d3ea707789fe712de14957e2dfd8efe6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a6c11cc52b4a870b094788e86847959

    SHA1

    519b879adfd721e5ea64933652d8a8a15784d4c0

    SHA256

    03d05b3245ed0bcc7ec02dbe11f869854162a9834da72da5faff42b46937487f

    SHA512

    05144c139ab74f9a2ac50226b5c2432844a3bb25cd3851447e17f3aceab90ba71dc86af1a8940d80a684c0b0badfb2d966b4339c8a0cd957ba4fb526a5d740c9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NVDR4C1U\1282[1].htm

    Filesize

    134B

    MD5

    4aa7a432bb447f094408f1bd6229c605

    SHA1

    1965c4952cc8c082a6307ed67061a57aab6632fa

    SHA256

    34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a

    SHA512

    497ba6d8ec6bf2267fe6133a432f0e9ab12b982c06bb23e3de6e5a94d036509d2556ba822e3989d8cd7e240d9bae8096fc5be8a948e3e29fe29cab1fea1fe31c

  • C:\Users\Admin\AppData\Local\Temp\Cab25AC.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar25BE.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a