Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 19:54

General

  • Target

    7a5374345893ba13875add636485c8c0_JaffaCakes118.html

  • Size

    71KB

  • MD5

    7a5374345893ba13875add636485c8c0

  • SHA1

    05f9a9afbb1fb92d5060f22c212edc0e6a5cda28

  • SHA256

    c6ef2ac2311a5e75fd93996abb180d5339a82170add44433a5d610b9ea18682d

  • SHA512

    db71b09aadf7ea2e7d856c8f65e1b0a675495013d10ff3f9e77c0edee2eabfb978a4d1268955202f1851bd5c6651d7ea4bfef5dd30a2f79685b90fb2003c177e

  • SSDEEP

    1536:FO/DTeYWEtTfTnEYkDRjvhYkDR2ebM4jgm4sW+HutwTRKA4BOyyHwmc63okUnrW8:6eYWafTEYkDRjvhYkDR2ebM4jgm4sW+q

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7a5374345893ba13875add636485c8c0_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2980
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2980 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1284

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c71b457cf71f98f0de57c7de17d01d20

    SHA1

    129d257fc5878753e1ad4d508d13f98f12fc4a95

    SHA256

    712dc8d6fe1f32fcb77bd13ddea14edd0dd2352fd061cddc50d87a3f6814e9ed

    SHA512

    f8e9b2aa6297803b285d84a98c5bb41a29cf9729e141503730380c7c77c02f47fc97c95bd2a1413e7da5836fc540696a2a91d79693e7667ffb2dab0b338f1fd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef0aea2ddd3b8e923e1e77135ba507fc

    SHA1

    f30af198ca194593b8031c8ce009bc987d139c89

    SHA256

    d044bce802b1e96b1c6c307c67cb4a9f19ffc6ace9c2250f44845ef9b4330cac

    SHA512

    d2da2c270c69fa2824e51f653e7d39000acef322925895972a2305e9758117ff204f4698af27c24a409c55a990467d768000a70a8f5bcd4cfc1f43e45aeff00a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c02aa68e27000c0c8a414ba5daa67995

    SHA1

    a87e0223ebc5fecacadbb255ca93ed5db0cff356

    SHA256

    57e333769d92f5ee09a935955970faabb45edc56988b8159016c45d5c945576c

    SHA512

    42c8ecc8acb131b14986ca304f7e27f91d175cf8ca620aa6563b0410dd69318ab983419848a8bef42a1fe1e0c3b8f53deecdfdf8a6aa1ff14f68e18615701c94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1da3d8784d9f7df3e16b64de17efd5f

    SHA1

    3943f8b9b5e4294b9e8c382709aa21963b7b462e

    SHA256

    01dbab416f247b37e66c95968924a19bc88d07a1807b8df52b21cef07bdbc893

    SHA512

    57429eac73949bcf34b236201d2b7c0ff85da71806fb3d79d45f2fc5097dfb4baea279c15137325d7d5e9c17e25a358aeef3c7e05d6129c72222a0ba99a1a6e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c89a854ddb38ab4821f6b07390c47029

    SHA1

    dc8d6a7e4a2a0fb38327ca39f7b5555b65cc8780

    SHA256

    c4e4c0e92e7a59cdeb2afe1eb37da21d368fa0849a00eea0eb2071e3a22f573b

    SHA512

    7bc357f60398e8a425cda79580bcb88940e5f6cd7a621b1f66251ac80a3ab7faaed3158d6bb066f09bb6b3bcb0f4234fa7f43ddabdf03869e7cbd862d40fe7af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c50abaef671546dd79656adbf00ba85a

    SHA1

    89cb7e7194a4d5eb8cbf5db675e5bd3a81aa66b1

    SHA256

    692d619d86be0615a79865fbbd7023d6d89f39d2b85f09d48adbb324873c0043

    SHA512

    0428af488149b489270ffa47b3c2975f885d7363610c4d6957eb4e8e99a960e17e6d94d020705e203728ac35f6d1d3fa6a2a8b8294ea5809281f1307e1f3208f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14f63629487eabfe55f4752ae1135c8b

    SHA1

    70649e9250576ebf003e98955f25730b96f9a555

    SHA256

    8dd14f7860da0b43e20018e79deb52c76a6133c4a6a892c561f46e67b5e7817c

    SHA512

    10ca262734e51d91ea1e5a5869243378e9cc0e47075ec3ebd0fe140f0c906bd80f514b548c6817773adf143250a2d8257dac78820b88a36182e57e50a951db5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43271f1094e2e8c3262bfe4c071d5874

    SHA1

    ef8acc670278d3d3ab0f22a2049ed708a239d2ea

    SHA256

    c71ce432647e0f1c415a507564e34bebe2d6ee657e8dbf0e28d4345d8ce98520

    SHA512

    7bcfacb10f39644879ddfd689bee6a64591d424d1c957491c6fb85a5a1df6b6d964dbe92a874d7b0736d7ab95ac4580c00d4ea3a817583c75dab3fdbf57f489e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    562669bacab23ff778f188d3ddfde056

    SHA1

    a21999c499d6f979a1d52669828be3f866985ea2

    SHA256

    703c352ee9bd2bc72fdfb17984e3cb7bed33e58445048f3e9f85acb5f1a3fb14

    SHA512

    7dd45765a3c276dd008c959eb3c74bab09dabeecfc7663bcd732e528f645fd8549f770b5e01e485cff8841a4978d05d63fe62d7ca71e111561a7e7e71ddc06eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44d0ade2e1c8773c1b73664314176ead

    SHA1

    880d179bbcf892ba506a9b3b32110736e84cd79e

    SHA256

    b5bc275fe0ac1110a78bad82c55641a6b1fd26edcd5c81d0c678f4fb703b710a

    SHA512

    c776d1d0e955bdb2d624c64572ea347245c47bd3781e5b30c005b58b271393e92e2acf4172b4f65dfa694ea8b42b2cce35850b1347977199eeb9cf132c5d7fe3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a49d7be0c4e4efe99579b61354d24aa

    SHA1

    d26df635d0117a1545ecc7c12210a216cbb9275a

    SHA256

    40b24f2fac91366d2a98a3464a9dfc0a972c4040e46997e95817274a0f18df2e

    SHA512

    2868c4058b554c3bde1b82da2b83f02f1c104167c58ce055fa8db58fc85ff38d3b70c12a2fbdb0a65d88b4c4615c54a0dd1a40127ac81dd1c8e4fe36a2dd7ced

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    32c37f7635db7ece6a1c1b2808228bad

    SHA1

    89f439913c2f09c4f91fb7e048b128810e32dc6c

    SHA256

    1e1f819af48af34a961294d9641611658ff834d631bb105962c82eb444859f87

    SHA512

    47ed694c77127523837b64b02c520fe38a2f5ca9a31d0b954b6a0225ae18e0f258674d399d071217f2300d2b01dffb094ed118d8b83c5fd56560d168eb0f6651

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd08f275145c1a6197f187f721987a62

    SHA1

    dc73d85f9fe63c5a926e8ca0a4b2c53d6699791e

    SHA256

    18d34c7c777fd1a193cda79d26ba16fe58a47abe37957b4461292da3a44a4ade

    SHA512

    ba27992d6585be6ca083bb51b6d835961ba9e6aeb900a7ab5909d52d460d69b4c62f2792258595fe1d4a5ce31d4f499655b16a35a6b8d118fc399156be751131

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d21bc75990773a55e46d43e39d49ba8

    SHA1

    635aff8f501c0a526bf515b33e6f8d981153e5c1

    SHA256

    64189f2d249c94bcdc547af019a482d2268bbaee29a20d8cb57847c895bfc03b

    SHA512

    4f22174b6d42e4ffb77e7a716da46639bbc389513c93b9af5a1809d0ed3b248e00a7e064c0c80daf80ed440a7a23568106d5e63ff1d393cb64ae4eb59e2bfaaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0eed68c780506b86e1e6e5218825b2e5

    SHA1

    3c432bdec2da16e4b39ecd439159ead4f2756684

    SHA256

    beba3a82ba14b415a43929ba97ddb42ccb8ab70ab60a249772c60f50c0bf24f5

    SHA512

    9b5f88fe34d1410a849092c1f98dec77ea6dcf1e419c312274148c381612d34a9da542f39e5d326af0ee3898f9fd5a99a0eff2936b683c3db3881f221375c09c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    998694bf3459a530fc65ed1d9ec7f0d2

    SHA1

    a5a7d6b2fe3c48df030377726bf30f7d4944d1a0

    SHA256

    71915b224af1251b3a012547f0235870b9ea86894c5767403df6d5a5b7f60a7c

    SHA512

    9b6111e1bb9ac2cc35ca89f21b6b89110f84cbc7507487cbbfd8a23d0454c1f1f7db259d696910638fe5e6bbee00d1f03455be8bf3321724634bef2820932eab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34c0ffbdea6de4af51d9092c81f48946

    SHA1

    c884f2f1630d143d08e602688964250ea9b77b05

    SHA256

    8b9bda2309df7a4523d230f18b0a61d94651207ac284551713d56540d264209c

    SHA512

    1740c7406052eae6fb3fb5b0aa07968602a66ef67b7b6e33513b21be0c7477a2a8ee259ee4eb4a814a2d0fae9c64f1cdf2ddc062287e0d92b893813b3ee3e22f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8fa2248ac8babdbe04a30d553072cfd

    SHA1

    82c71872ec4784d1b48f753050b49a07432b7737

    SHA256

    05f608bb2ff1e5e758d1b22924057d2ccfbaa2824b229540615394377bbc3b40

    SHA512

    812e9e6fa30622cb4e98a6a61f61c3164fd3aa8dd40bc88609b51520efabfd12af32bb92e477c06a3fb3a6f102fce0999ecf34aee29a696d314708fab3c7ab00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    630d6860e317e126ffb959bef63dcb46

    SHA1

    b67651f8cf8335d5056fcab1e0c32e6167a3c28a

    SHA256

    ff12d0501a7cba7054c57c0caf9833be0a8c97e1b394c0b52a268636080365c1

    SHA512

    a21850975b599a044809364f18245a640b11413139645bfe480a4025387409a5bb1da5c1767302cf2b615b2bf1f5a1da77ad5c5b476106863b0ad7d85082415e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd3ec1c7e7393aa00af022752ad85d65

    SHA1

    886dbc8919939c237fe867a6b97d7187c83f9481

    SHA256

    0c07d3e1e476b97034bad2a04e39a04484026f5e5961880be27f92c1978873c6

    SHA512

    6937a3dd14fd5f8f358cc58507122301bc1c522035ba8e13b031cdc3218b0e933b5e8add7e54e227514c08da6f92e5b3a0ab8e97d3eb6fca6cfa560e117321d9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2XHJXO3H\fresco[1].htm

    Filesize

    124B

    MD5

    8df8b85bba5eb9ebebda6507c72c296a

    SHA1

    bb55b38da20e01f137d2f3862dc1838f04c96fa8

    SHA256

    eb87a88b50fa694627abda5d64b0ba599293a9e55647a170398e6e9de75977d7

    SHA512

    b7fdc357172e3f6f9107642af1b7db1c0a8834ce0a0372ecf9bef4dea7aca637bdae9bac7a397781f61b0f13a8724c4648d8d16f7e90bb19c65499c7628b55ff

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2XHJXO3H\jquery.themepunch.tools.min[1].htm

    Filesize

    124B

    MD5

    a5f48b8e96d1aa79ffbf52cd08f1a6b6

    SHA1

    e06ffbf45f74efa118a27891224c6bc3bd15bb62

    SHA256

    25537a1aa19853c5bdc59b69a9b647a218a31f3d2f693a92dd8df5e3d11edd42

    SHA512

    8324bb88d81a004306acb4d590755d8f87dacaf015aa75b1652b2393556abfee7bb119da604b4bd56900dbf83a5a438ec026d7aa3c83a818c905dae0631016a6

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2XHJXO3H\scripts[1].htm

    Filesize

    122B

    MD5

    c495a59b6feea64c19db0117bf123ec6

    SHA1

    bab3e3207424226994cd9d0525e4a200da2e239a

    SHA256

    6788de5bab06fb0e7fa4e8e37e6c32be8908ae4799ba7f6c202ed30494e16604

    SHA512

    5f544da102accde4dfc5a69ba3f2ea8f84b0ff5fa0a3d3bbd638c76b91190dd4a16a473d56c20330ea225a13d4671fa793bdb454d9fb42c439f7f30f8f71b38a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2XHJXO3H\select2.min[1].htm

    Filesize

    124B

    MD5

    ead3c28a18f55b03bb636de7cb280484

    SHA1

    cf387e6fa397278342a74259ab85a1c9526e8d20

    SHA256

    cf51f2e03ef02c810169b867f97b2a1d62060f8e1d8487d440ac94215d0962c1

    SHA512

    de2e4da503f19519b21b6997fb984300b1df6a9e763d47e606d3ee570a072174ac7ef21e00ae07beffeab332cfae362a5d58d27d21e191a5251e6433929c41c9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H09CVCL3\easyzoom[1].htm

    Filesize

    122B

    MD5

    00d64a82ba2d055e5facd3a30efac924

    SHA1

    308e275068e3bec5effca608fe9df2008c979650

    SHA256

    aaa3feed097fda6687c7c27860c24980f3ff105b6f326d10c98854145e9afa6b

    SHA512

    1151e227086964ec19c11eb388ace411a56a6e1da96409b2bfdb5313fb5df75223add437a653decf3afdfbd2be2cde421c512f9de423ad74f2ebbaf81119d8fc

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H09CVCL3\jquery.nanoscroller.min[1].htm

    Filesize

    124B

    MD5

    46da0c2bcb668c81c4aee109df751b2d

    SHA1

    af88edf5b2d191f25859b454bb967300c98a7685

    SHA256

    d18a486617d487797aa2751e8046c800f83b054b528746e3dffba009a8ced271

    SHA512

    e3f5834dab8574ddae5224e2d77b3b6f24dd3029ddbadb8605daec17ebc6fcbcc3eb1e894ac90db9405c726cc98b754d39bac5fc9a6a329b34fd82ebfe438e22

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IW68H88T\owl.carousel.min[1].htm

    Filesize

    124B

    MD5

    e6fb351c7f8d27671239f5e8d09db930

    SHA1

    2ec4be6010b3b6d7a4c24c35fe1b72316d4d967c

    SHA256

    014d3d06512a15a4c6079573cb4ed34e60467828742db1a8514c398ac3a63d89

    SHA512

    14ab93fa7b9b9cda8b9af21b1d075d20e7b1bcf9c03d36e57021431774c32b21e4f8526b71bdb028b25f802009d039eda912b39c182897f77243c8ceaf7eb13d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NVDR4C1U\foundation.interchange[1].htm

    Filesize

    124B

    MD5

    15682ef8b101b7a3b980deadf178734c

    SHA1

    f878e3160f7dae0d2cbb657beec98ebf53f171f8

    SHA256

    e249f90999b4e2a48741210781997bcb214aaf3079dc9b01b26a5b6d9d28031e

    SHA512

    794d298890a418bd0039e6da1f7f9569823cba3a010bd2d914bff1bca31b35fb12292b7bfc0fe0d8c2b55c1c783d57ffa75c310785d47eef013e186c6144debc

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NVDR4C1U\style[2].htm

    Filesize

    125B

    MD5

    aa80f4da71c08898b1031c9c5e77ca67

    SHA1

    938c3e211b6def64bd4c4b9f3e64dc39556f9f4e

    SHA256

    268c69f55f5f3dbcff58fa64e9a653c5be2e1893e41ac875ce413e9d4af3f67c

    SHA512

    7bca024ca3a48c96dfd9b5c6449f916c3aaafe54a04da15f8c78ab5863b944900bee1ebb13c25f75495b4fbe7ffc725c5d8271af4b47ec7307999ee0cf512392

  • C:\Users\Admin\AppData\Local\Temp\Cab44BF.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar44C2.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a