Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    137s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    25/05/2024, 20:06

General

  • Target

    73199d2e2ad409474a4eb88d94bf8315_JaffaCakes118.html

  • Size

    144KB

  • MD5

    73199d2e2ad409474a4eb88d94bf8315

  • SHA1

    ba2abcb3914df591ac7758ce935020e88842a00c

  • SHA256

    7e19b9de3db0dbb1699aceb7ecb2d9ab16bff71c7a0f427ace0a899e6ed3baeb

  • SHA512

    d4953961b4a74c3428816642e54e85c1cc65caaf95199449bf2401b2e6d15d46c7bd8ad1e4f34bc79bd99d0f7f1188e8d03b699b68f31649e26835676fa7baf8

  • SSDEEP

    3072:vwOh/SSodbnckaYJNQMcZf+0xCqoph+UKVGqTEkDI11A66/mkwzLFnkwvWrNDvZr:Xh/SSokgrAh1

Score
6/10

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs
  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\73199d2e2ad409474a4eb88d94bf8315_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1600
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1600 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:1836

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    926d43a9bbd226870fe446e49df10044

    SHA1

    77ff212fd17c543e794f1549f0ef671b11caef8c

    SHA256

    699ab720e4c1bab2493b8709aa606ba2d25e7f2e73c830b2d01b01b30e049225

    SHA512

    9eb274a91bb77eff3599d43941c199db56157570f0c9addf6e5667a1e46cd3bf73f0be22bc9578b195c9754095f42fa8aa6346f4d01b35fa173ff65322fb531e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14722556f03d851c96f371e701cf4341

    SHA1

    1be234d8df174ca35c372ef834033dbe2a25cb68

    SHA256

    065982586d9cd1332239cd12049695e252e7ff4c7c86267148f28f7a97457341

    SHA512

    c2b15e0c202730ae1c369e6f4361ac8f09cbd3b688c7a521d9adc2286a29bb015288df9f262b59425bf011bfe7f223d3523e16ff92d73839c49e84e10165b8ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f357d018e051c74fb5caf4be5650b772

    SHA1

    29b1e506f11094a449828b18b2e26f7abf3ef72e

    SHA256

    fbd34cde96b4b5808d2184a324d14948dee21d9803bcc51538fcf746681ac6ec

    SHA512

    c33c0684f940ce616a1a060cbb6f68f1703da86a8f79d4c5d6c472eb0f0a9bb54dbbbf4d0ae0419eac433853ebf320daecdbcfce32fb4fe0327fa7f4d2609a07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7253b28cc2af94a7ad25b2e212c31912

    SHA1

    78bdae109011c1ccaa277ff558786b7e8bc28f7b

    SHA256

    4d4fd85e068dcb7344e398d43d7bc48fe52bcc7c4ac5b64c2985d0d83e33a17f

    SHA512

    823b7f1e7c922f5f4d97c788aa09be18b376c95d4b050ce493d79f8706a023ae31430b1d3b61754704ff2148d750180238cf4eda106ae6b1054c6e5df2d9f088

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a4d0b64faf95dd2d838d38aa133b08f

    SHA1

    5be41cd36d8c8392c7ad07c8572441eeedfe24c1

    SHA256

    d477b766d2f2189b5c00c558bf77e810bd90310316f72a8e9a6e92804ee24e7b

    SHA512

    e209729777f265471fdb549b28d1d96617fff1cd30da504341c4891a9ffbea105b824d1022a5f186540a7515e32d59cd939c7b558ce544240b63d27d4c9b7092

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77d4fa52201e8e0719d3cd14a65a526a

    SHA1

    14dea72438c790902e97652742c6b212e55fd27a

    SHA256

    27ec4029fed59f5df60d51b5aff0d528e562afe8b85d4f268e45bee84f3608b2

    SHA512

    fb17d9c69e5ee16caddde8fae489ad667906ea7cd7df4794c545f537b5e5ad506212de8ed6a8937dc6756b23629ac76701dcb96ec29b1a67f98f95add4c180e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a0eee269da0ae28f3bbc4301ce5915f9

    SHA1

    5fca987a8b8573a13a449a8f0cba091ceafaf617

    SHA256

    2eef9651d4435d88a6d4cb8ecc252f4685520445fbf714d07425b885846be26a

    SHA512

    8a066eed871daf318afe024325a1eb3cbfd2e4ac1fa18344c9c6dfe64c0a17106defbd88be90729115f067100f93669bf175b964f6e94b5988019f57ad4a78aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3fc40f107957a5c5cf811550de93977

    SHA1

    89cc90c228e3a3331cc9e68fda0c3cb37a23ae8c

    SHA256

    29693b8f3d455a2d146cc8bdd2719639a53215ecb3ac6f190e7dd3de7e0521b7

    SHA512

    7ea642d748b2322b25a8aef382d815d0a1659024c65dd1b8f1c9556977725a32d543a3d6541e21eeb8658d40818df81c9179db7690db1210d466ff43fc0389b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c2fed5ea2759b0ba31051948ed6d09c

    SHA1

    aa5dbe035ba2d785d138ec963c6ccf44476a7747

    SHA256

    e4c9d09a8b03ef435fc501caa3a9837f26307961dc078f0257643d4ed68cd47d

    SHA512

    91fc42c82b91470ce54c00a6f3301b81361b14fa73a0d77c4cfd56ee54b2b00bd4c66bdf1b4cdf2c8fe01c0adf914732893435409f6b68cc0ea4f645b49afc39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c8ccd6f924c150612fe2cfed4da2b1b

    SHA1

    d1de9d07033100d9b7d2926d14833cf14d8bcc1b

    SHA256

    ee445588d51e7b37c65396c0c2560e027b2f767cfe2fa1713337f06f2ae665cc

    SHA512

    be012c11e023f6e21688198d183f44da2e24ad9b5f288a7c76e0072d849df37de38d4a9090d5114e8c5626ff3fdd24aa6b037e99d5b2c4f6914f23c13196d688

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    839ea1ea06a9c39bbc813610c85d95b6

    SHA1

    2999af90c81c1f48cb80ac505853f5ee0eda04f3

    SHA256

    e88c6ccad5cb616ac9ac0e91cb3c850497d2b4b036e21451ae5697d818304cc5

    SHA512

    a0d98ee27042f64a4363daaf088d59bacddbe4d717cfcb9371eedec3f8effe6c5b8a58a9cc7f07d6a650e215ff8c7133d37e24b968844636aab92d40456801ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17441a3b8c4fc1eeea6148e8a5fa360e

    SHA1

    10d61113990ed9e91d01ab65dcf40daef99ddc94

    SHA256

    fd72f704e87e53bf1b15af8771dd8c0b66328ba76b7154a2d7fec67267ce6c9a

    SHA512

    c43f4d2ea2b0283511ddf250e264da9c03c41f954ddae28049e34c177332a40ba2a2d7412b4e51f0297acba044996a603fd21b159bb77c8b6eb30d9711f58222

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc56f4712530ac643af98ef2024d6a4f

    SHA1

    d80a3237b2528f772b24a803756c7295468832b8

    SHA256

    9b4bd6bb332b924079bb190a3bd75225e92322fec200815ce49352fb267d9917

    SHA512

    95e662e664e72d38957fe3b10ebc312ddd38da88e7ee7976199eff66a53ab02cdbf5a50d89ae5b45e958d669dbefcdb1a9f14b03bffa9342a5dae4418b1aea36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    546a1938eb7e9003e92a215956692bd0

    SHA1

    cc91a98741660eb668911ee266397459077ad334

    SHA256

    f91b18b4019007df67138c420fe295d94764ece4b3258864d98aa04d3a406716

    SHA512

    75a4a3fd6a5e096b5527b135f831ca161d2abf6a30deb4dd82dd69a8454e02f3fdddbc09e6594ec561d8774bd845018443a2f4ab406c4f0f01b8b5553fa626f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0660101d3dbd2333972990a649ba8c9b

    SHA1

    7caa7ddf6af9f491fa3a041113ae5e17b85e21e3

    SHA256

    5f1c17b8e3107e0a8c36246eab877ef2115335bb7df8bda1d6767fa5f999546f

    SHA512

    e6b92b425bf8ccf1785cc01dbcd0daaa6a23a581c83722fe0649b12d150fae55fe12a54ae8f3bcaab291ca97f8f3a123768dc249d9d92cc01ac38e4461645c40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88b90a74fc9de849c454fff322f020a1

    SHA1

    b4e4a6508496e2e6e0bfb87c7f506c506f9e5f0e

    SHA256

    d1a4dad296fd7c81ca94019d510b0408e970eb2bbbc760977174433d4487ec81

    SHA512

    f90e0a7f5e04f1f698242ed847b97ae9ace534316584ff698e2a57c2b8e9a1dd6373ae0eef171155ddc62222f0b1e7ab124523d56cbae71e2fd5ba6bb5ec820b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    746864cd193ff76b0746935d9027bfab

    SHA1

    f6fd7089c7b0e9c30b25e413eef8792852835d6e

    SHA256

    61494ae419137b96add4449407ba176a7e8813b4654c87f5645d217a4d7531b9

    SHA512

    d6ad72bd85c4bcd101ec2654ac46c7b7d1a2358fff0262410f4eadffa76a820b3b473b264a4aacad5223cc02d56497d8974c9516995e2d32574fb3eed2273c13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cec576e16f1ef87ae281502576aa896b

    SHA1

    b4cc52d89e01e8c9f7af8a04e6a313d9fe2de947

    SHA256

    349d4f0bb3e5634eda8a249b7ec41b72a4afa694a4639df03cef2700d8a120a9

    SHA512

    67044854234cba00cca25e90c35d43550010b834051c285905ebf8b8579086c70de742cb9443165cff517cbed8d6da96ca5b5fda1b4b2862e8c599d11981c318

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    addca70bcbc8eab16594210652558bae

    SHA1

    7596e593ea202ee9bce278e79a229eb3b9408344

    SHA256

    a6484c939adb117b73a6a74cd982fdbb482078833dba0f047b8254807e64cb67

    SHA512

    5ddf00a187e88c0c18d43e0b78e5f164d6ae4d02543bee8e579b4fdb641817436ebb6131fa9b757426699a2153b44b8452e34e8388c98f088492ed121e2a9ecc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b6844a6973ea9fed67930a46a394cd5

    SHA1

    b2a6a6861088ebd6f118d1ddf5f1992265a02fea

    SHA256

    b1a72a95445eba474af262a3632410966e419e779cd0ebd09ae2489ef7d041e3

    SHA512

    e9b6863c12dd7511333a49f76a16c2d15af9f473455e56bc199e7e900eb628eb25700c6b99c56eed16a17db64b38e1cca76e13f7132762e466f2eec5e4bbe7bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    47c058284e466fbd7bed4846e777cdd6

    SHA1

    0ee9f0bb766039e34fd643b160b9c207a0818b11

    SHA256

    513fd82caffcca4842189cb76137ff29a1b82410af3a6064d4c2685767b6b902

    SHA512

    df677cf4d668381a52556804b7855e314215e668f1a4d6a498d3cd2a84b1a18255458919d93e38bdb703ef410fc7357bca9de03d309190f25d36d459c9d1e0c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    3ff9125a1eeefb484d62d5ca022fb0de

    SHA1

    be6438acc3580b418d8bd37ad140693359954d6e

    SHA256

    9ccdd903cddce91178a008364bfec18c4be0b18cc59fc8e57945bd8ca4541596

    SHA512

    05faf7898f282a2bc05562cc66f68c5ae801b7be660b2e033dd27bd5f4c50dba3910d564d06f0d20911a323191a9c82afffe247673db1e150373dffe94cd13b5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\528EVS6A\plusone[1].js

    Filesize

    54KB

    MD5

    fb86282646c76d835cd2e6c49b8625f7

    SHA1

    d1b33142b0ce10c3e883e4799dcb0a2f9ddaa3d0

    SHA256

    638374c6c6251af66fe3f5018eb3ff62b47df830a0137afb51e36ac3279d8109

    SHA512

    07dff3229f08df2d213f24f62a4610f2736b3d1092599b8fc27602330aafbb5bd1cd9039ffee7f76958f4b75796bb75dd7cd483eaa278c9902e712c256a9b7b9

  • C:\Users\Admin\AppData\Local\Temp\Cab7013.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar7015.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a