Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 08:23

General

  • Target

    74dffd01a12433cafc4c7267bac8b70f_JaffaCakes118.html

  • Size

    69KB

  • MD5

    74dffd01a12433cafc4c7267bac8b70f

  • SHA1

    2684a7df80df9b8959b1929e7af8ff4c8af1b482

  • SHA256

    06c6e07fae106a2329d1bd2e38ffd808f57cee6d5db47415524658a1ad937a2e

  • SHA512

    50fe909e284abdc0b7efbe45338a9fcc231b192599ba39012d73e4dda303574a26aa6fd32ef17250d4be6335ce87eadaaf1f8a63b33e0562c4e84ca51e09480e

  • SSDEEP

    768:UzkcluTsJO7HxfN9zGgtmJTTs0xmcab2o8fWSJuQEPYVM3ctTogE1p2SubaJ:ikclpJO7HxfriPsH/p8fPubA6LgE1/

Score
6/10

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs
  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\74dffd01a12433cafc4c7267bac8b70f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:308
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:308 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2392

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    be3f0a04d543b64dfc8f405ea4a5505b

    SHA1

    897b54fc3338a7d42f3bf579095f061da3eccb56

    SHA256

    90bd14730c49d9de6f5d78f7d2f744b0645a1f018e44877b83c6bab81d4531a4

    SHA512

    a0d8c9a7e0914cbebc67773a7acee36090c9fb0cfcadfea8c1cb606ae060d227d5cecea379b483fe8de91f3a2e6c5cdf4141f5be6979444e974ff1e3a24682b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F07644E38ED7C9F37D11EEC6D4335E02_02C4C6ED250727F9B08935C0A9565568

    Filesize

    472B

    MD5

    bbd8a22bce8e235ff71c32a1c69268bb

    SHA1

    bf9d0b7346510ab10023a7432e1462dd8a314668

    SHA256

    1cb9f8b414abb33992f9db36b33cc6de31155449b134b719c1ebd38a90f3aee3

    SHA512

    31fd88f0a24bdc81ba3cd2a4a1ca61064bce259009f1ca10261adfb8ffa6ecb2c9776a136caff03670a4f8a3a6d87cb91e4f2409ca57be1a8deef80855f0e688

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    c1204d3e8a7334ed78c7054925e1ca7b

    SHA1

    cc00cd1e4f35be1068e21f63f72771e6b92cab79

    SHA256

    9fc6daa93dcd1ac98c45d101a848c6c1fa7cdd7ab1c582e17cc4fd08a43f26f5

    SHA512

    2552f839f1ca60858f87e166f51ed894e78b274a263b61b7d6c68b4670f9312df1528b627d2712e32e51e482de40744ab871c145d829c44664c34380af846e2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    943bc357d2c9ed5f06045eb73c10617d

    SHA1

    f37c3cc6f6767f70c56c7d50b4849e9d3943c62c

    SHA256

    ebfa68fcfb626f9fca3ab40639e29c67e321a9450e1290bb8c2e9798216202dc

    SHA512

    5f5d0d6aa8f72b57b239b731e50cc303c18b7b65889f11772a2ba65d037bee59141c202de1a21cd76f60f384567af19d3fc16e4d72218ecd8fb023a200bac3ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    269028b88f76aa701519711522db7224

    SHA1

    a636206ba57389b7509c548e62725f288d179726

    SHA256

    6bf29300b26d333c84e44294518389a34a64252b88275927633c19e47041c83f

    SHA512

    c6373c3d95cf0cf32ad029a7a5e4306edcc8962766a06a4fcf4f68a971f5cdb639ba0e8f5ba9df610901c5f81453286ae86fcab375191ec8dc0c1e7d446d4ad7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6bcba8dea985efb49250d84cad51763b

    SHA1

    17bf5773bd048066fe25da1f64efa0831c68ff1d

    SHA256

    0c9839050d087b3016611e16f5e5752adf5304297aae5da40b49db36bd1ec96b

    SHA512

    5247ed4c4946a94861d94ef88ca00601d24f5db8f454ee5e8a9a7a1d8531cb45eb76423f685138153f2721682a506392f2d289870314eb0ac12777ae63976ac1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fee2bb8f459ee0a89cae7e0159194a0c

    SHA1

    36fdc06a890c106f23d53d974953df2dcd0684bf

    SHA256

    1a37cf971818f38adac6750092f74ce1b8149c96c57f53ea2580343b8725762d

    SHA512

    5843681440e0e6758cd282e0464ebeb6cc21c084b3b3d3e5909a38e4e12eb1e983e21f08a8a6660fcfb78fd6a8fbd867d4aeb7d40f2cc3178355c350e6980315

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94870a1274706bf584069f9fba9234f3

    SHA1

    c43a1a6b0ada5bf5cc72f27c090eaaf41b46966d

    SHA256

    58f0596f0d72bf46b777515d9a5a69b7ab3216737c957317a396d28c877b4004

    SHA512

    730bab958f6c1029762a6208038c5d8e8511ace3fb27d9c22d25ce8f8157f600d5221bbcfd2d9b2e267e6a3ed72c54a33ac28fe93c0a7a47a04460ce9ce569dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63451bf0f245123c4dce5bc1999099a3

    SHA1

    b167ef9a81e9f76787a8653b4c3a964b4242ae9d

    SHA256

    be080827d057644879b10490ea80058a2825806688273da488e6dc6f5b84e54d

    SHA512

    f1ec93729dcb3f3e76a0a0dbbd818f19b19abb6b35aeb787b8700007c4ba273db617e2b76b021f783be81607a33376ceaa49210d1df38401887bf1433e4ddb0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    018bee931aede61e889ac9acc82590a0

    SHA1

    ba5779da383719e2042c8a5609e4ae6a81ce7fcf

    SHA256

    f6563cc47ce67fff6d90157f9ceb1d1181e58d86343a0ffe0af36ef853494b59

    SHA512

    df0e291932e49c624553ff64d7d8bdfb9c643b29853459d57aad0f897de05f1d99c057c87276e4c5f997d2eebafc1a1c3634fa548c1f96a1858c2b0645cb82c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c11a1b2512e8a3f1809ca3e4383f191

    SHA1

    b6d0ed6fc9728f35bcc421e2fff2f46200c57c01

    SHA256

    d7f3a8d0f877d4e7f691f69224385a6e130584919fffcb5eaa3b83612d06ef25

    SHA512

    1345ea94b425effef17ec30fcc276a65593d635a810ab02dba248b589ebd2940d9e304920388e9266945a20a9055462c363ef398acc7f0dcfc78cbe68ad436f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4481b0ff386f9a6b8009c43b7b5779b8

    SHA1

    27320a21c86159f88acf79c35b3726dfea34602c

    SHA256

    e29cdf89720eca74b5d3905e11bc1842949bce74fd6a2c5a2f3a76db9b949902

    SHA512

    fd2d90c4874e73b43123b2a7492c498d58e049d642dca205730a8a793e7a238fd5b50826cf40187bed0235994f82806e44ce5ca4a9a81bfdad3514f7753a27b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ebe525fc5f4fd7e3e4194167214876a

    SHA1

    1997a2e0049b28a2cf64ea534113c93532104376

    SHA256

    8eed16470919ea9fe8fcd56610b1c3ff6b875f454e5d466b2fb7e0de4f76e217

    SHA512

    6cba41e28b66cf0097530c4ee24d8c216b9ae9f41b07f6baa814eaa0d95493513970d8b1d0e9135fd45227704199a371abaaadd0de39c738d71b5560a50232b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9f86b4355399d78a52e9baedcbc45fb

    SHA1

    3c87f005be8a2fd94a75024f2c4a9c68ea6c2137

    SHA256

    f7f340ea8ad2b507b908be968eabc7c8de80ec090ca16a5bfbfdd17164be0fe9

    SHA512

    44a3aa16c96d2cfe8aaaec5ae002d07f6f9c0d344859b6b35addbf08ebaa917bef6c7398a9ae7fb8b970f95f10a30513ca26ea6a6c871df8f52bec3dec0b0d96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec8046de569abc16fa21d142fe06eed6

    SHA1

    b4089249d52666e16914cc8c00728e44fc618e45

    SHA256

    7b6859f6dc9980776b5b9bc735785c0ab858e84ff78b800c643ae1ab731afdd3

    SHA512

    79d27001ef67fb8c17d870c45f29d45b24dfba23640249885ca6d30a188463829ca30655e571d38f728d6647336b341026148a402a71fda77c956e90d99abf66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df71e6cb8692a0680f5b279315cd43ad

    SHA1

    451218a9666703ea38a6d29e1192ad39e624442e

    SHA256

    f45bdf8c90cf72aff3260391342ab4a2e508d817451260f4891ed7f3483733e7

    SHA512

    1c81e849618d68041cc2441322418b0fa8b3507f836c6e6ec678bd70d59a865aa198209ebdcb6a96d0fa368d2fee30cf34bf170d15d53b8ae8351dea6865635d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8eb2aeea97024b35795b509f56884fcd

    SHA1

    d7afe4301b121227a011cb863a7061f554c1ab80

    SHA256

    6b6af51c94fc0be256a614351c89712d04edd0ebebf5d5b59e4632ef41cd0caf

    SHA512

    3f0355b405d7b0dfe6bc2bf0973bb9660150143d9fbb2e2e2d35d0c28c5d722e6478eabd9ee8bc19e24ebdd35b8efc84063335ed5b6581e753d83bfc59ad616d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a55703ad40306ed79e162855ed8a6027

    SHA1

    55f03cea1f56955c0b500d7115eb930e378e4c69

    SHA256

    d491971e8ccac488f941eefd946a63c142e9ad04b88162c097c7fa4f5eeca853

    SHA512

    5ae5176a6a1ba14370a761b145b38d6dd8ed09f26173b788570f7482f467c043b467144127a36909b6601e46d00826f388222035b0868b01e3a473b797d82acf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb35f8a358f6d65a5efbe3ce569bbe68

    SHA1

    8511c3ce6fe7e4ac216691d16bfc7d28b0efa7b3

    SHA256

    8ff9f15f8d291e952aa021dda71985af94836900b716f5c705b2f86cbc9952f6

    SHA512

    c3f0189b4fc4e2ef6f6511076a0c8a47e73bcf0f2977ec053109dd927da946a0b5001ebcd5b7e730aea0e89b8cff90774c701ff1b8c48d276a37a43f37548007

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c0812f4eeb5b1829abd4bab8e0671df

    SHA1

    47be76d72c3874fef14ed2a20acbfd151d7cfe31

    SHA256

    c132a8eb6277eb781a8ec8eabf6d6a1a31d1876d663a23bbadef69e5f1613da9

    SHA512

    b47c035a294efacb5fc2c60b5d1eb8c5b97374c8e3a25ff1e337e968db7dbac7fd0aa8349c06a5d27935744effa4aa017b51cc3b2c07d3fcaf375965840d2122

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67373eded6e6d577ca8c502dd7dddcc6

    SHA1

    c601a81e510e8ece950b3ad4bc5849aaaf71db77

    SHA256

    a6d61a66474d3c50689a22ff551502bdba5aa02d53db38f3933f89b9b835e44d

    SHA512

    5c6d69d840bca0a844571d995695a16bade07980865ebe4b0e79d5ac55bcd5d99179f089f3541ec12eb15f4bbf0ac91b888567c7eda7238571ec61b076f7b7dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9b108c4753cf08c43c39bb0f92087ff

    SHA1

    a938587f0f0a3ae59c1e390acf53c0adbac4c016

    SHA256

    829aace8d44e381d9964b655652a54c9fae4f4cb99280a358837eaeeda7d5cf9

    SHA512

    b5c0f64868e617faca34bdbc86ee5a695c03d3b2024a430fb74b07dd443f572c649a9585adb372d47c557881b6aaf98058379446cf35e0651a100857f90dc9b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    a9b2f370f52d1a65cb30be13d9bd14ba

    SHA1

    368b08b3d4d69ab6342a61f23ff3c7a70670740e

    SHA256

    34ae0e6d107afd8acd632a9d16b45f1bf24300752965bb17fbdc7e3bea665ea7

    SHA512

    7d5a5a48c0fb9db2c2df014efcf6cde62b3e164d5af77471fb7b13e5b9626dd8df227d0674afdc9c3e20d53d10861b6301ae840422ac922f8387f8dada740784

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    2fe90bec0777353aec00a72f3758dfe3

    SHA1

    d8cd4ffcacaf1fe2d9757bb4c55bf049b0820ef3

    SHA256

    3568421565e02a47c69cc8498234e55a0e230a70156d4aa02384c5f778832184

    SHA512

    9882bdea6485c34c869e84fddddb809c3f4af12b0532aac01c26865f82b5cc61e70de191ce72e24ed67b6cd113084bd3ea58738990e661cb3689e61d49847cd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    ec4763cc6efb0cfa47273915cb827e67

    SHA1

    cc68b109965afad141c2c31eb296d7020bb7aa2d

    SHA256

    8452a6a205b7cdca64b00b6768d2cc70c90a3b5580a283808bfe2fc3bca81b31

    SHA512

    47eee10e989199c315d9bab460363c40779d4beb9e7fe50cdd734106d8cb1ccf3deacd6ac742b7e83c1fb33940801e570daa6035f5aff092056eb3188310a74a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G17BROQF\cb=gapi[3].js

    Filesize

    133KB

    MD5

    4d1bd282f5a3799d4e2880cf69af9269

    SHA1

    2ede61be138a7beaa7d6214aa278479dce258adb

    SHA256

    5e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693

    SHA512

    615556b06959aae4229b228cd023f15526256311b5e06dc3c1b122dcbe1ff2f01863e09f5b86f600bcee885f180b5148e7813fde76d877b3e4a114a73169c349

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J8SD872Q\platform_gapi.iframes.style.common[1].js

    Filesize

    54KB

    MD5

    7ef4bc18139bcdbdd14c5b58b0955a67

    SHA1

    afe44fd9a877f81a3c36f571c0fc934324c6cbd7

    SHA256

    192bc707852c5986f930528442d88a79e5bcf4513aacc2b722a3c5e964501838

    SHA512

    6c2920e80e4d5059588a32f75bc2b5dcc19f8d68224c0935d74f9fbf49476ca5b1ce43c279768f3d36871dfcec39f36db3fcad559c2f93cc540154cdbb04dec2

  • C:\Users\Admin\AppData\Local\Temp\Cab230B.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar231F.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a