Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    28/05/2024, 04:33

General

  • Target

    7bb5841ac5c6974f3393abb4e657277f_JaffaCakes118.html

  • Size

    36KB

  • MD5

    7bb5841ac5c6974f3393abb4e657277f

  • SHA1

    64195572c4ccc9886096d47bcb3673c30f8cb09d

  • SHA256

    caa8f651588ebbf04fbb8696d23e0ef5b51946b097371c6ad3a86a23d04dd75e

  • SHA512

    5fb784863bb096e0ca68739c9f8d36139d8d8ad33bc9ffe81a8606b71240237b5c767ca05965faf1963b00a443cdaae5074a900940c66c329d6b3de129329a7a

  • SSDEEP

    768:zwx/MDTH9188hAR1ZPXME1XnXrFLxNLlDNoPqkPTHlnkM3Gr6TEZO26f9U56lLRI:Q/fbJxNVIufSW/VN8vK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7bb5841ac5c6974f3393abb4e657277f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2356
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2356 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2272

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    f9557cee1e04779e986282ba0635bc9a

    SHA1

    d8404afe8567a68c21d2c53f82dfad4edf77b03e

    SHA256

    0ae3771b9904c98ed6b10641a48f78175995ba2c9917a9eabb2ea3260bc9025f

    SHA512

    abc427f0f11cbadd3ca01ca1e8bece1121a850c145219d01d893604dab9fb298200f42929480b39d1d3ea9d785c85827ca5d2c02d8c4cfc8e5cbf04fe624e263

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    724B

    MD5

    8202a1cd02e7d69597995cabbe881a12

    SHA1

    8858d9d934b7aa9330ee73de6c476acf19929ff6

    SHA256

    58f381c3a0a0ace6321da22e40bd44a597bd98b9c9390ab9258426b5cf75a7a5

    SHA512

    97ba9fceab995d4bef706f8deef99e06862999734ebe6a05832c710104479c6337cbf0a76e1c1e0f91566a61334dc100d837dfd049e20da765fe49def684f9c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    62c7904f8fcb207f1c1b6b79df1443e5

    SHA1

    a37f702c7316caffc737ec4203ae249cac5c7222

    SHA256

    8dce3d21ed264ab67e3b3672fb956152067b4a1937a64eca2c182c7127fbe17e

    SHA512

    b72c6c57f129cb294ef44b8ebc1c85fe348934811580432b30ce27fdba1440d5e8425e68b0e3b1185e85a707976c229f98e3a85e162970edfa884be4b730ad3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    086d88f4f6a94ffc6b1cbd2b30da5f29

    SHA1

    b94928965dbb69e435630fc7186c15359826f07d

    SHA256

    70a608ff6472be3c0cd7f9eee6d118cc5ef3d1643ec0d632c417cd3d5e4cb915

    SHA512

    7a5298bb89c12a6354a7ea01c9132d27253ceb9e8275d6b5ad26a8ce9d8309e58bf91ce5de58dc3ca3d33213b19031bd32b4b3716767ffeb7e9eab6f69d26a96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    274cab88c7d25775d2aa7dfa841d3293

    SHA1

    ba2a3383e1ec9b93fc1c43b39f0728020891775c

    SHA256

    3a41712fdba63a9c296cafda1f4496109b202afce070bf94945049dad5ce8242

    SHA512

    67e485dc90a91564496f5c3a6a3c76623f2393433a695a22943d9a45df99511d65ff4e04173e06f2e8770f5a60852cebfd03e83c9f69585ab3dc9f5397d827fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7b2725ec62ada483672893861c3629f

    SHA1

    eb77703e7b0e200760d98b6483b366a514b58626

    SHA256

    f32b948dbceaaa6de816b870d3bb22bedf1ec6b0eeace5da67febda6ffe3a3a9

    SHA512

    d3dcfd208530f468a0dc27902b2e25c471c1f303f1e07b549c34f05556ca84512c9db98c3094c1fe8379b3f1a3ec3f3e40ba10119bf07cb245eb9f82e4b5ed94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20d45321b54d787ea8244fbe90640466

    SHA1

    f7f9fb851434fc18180678e2d96adabc0f4d3792

    SHA256

    74c11d229c5f33888c53147d6b0ae78d22c364c7fe16c231a5966b65c513489f

    SHA512

    c3d3163544855d24efbef51568cc62364b1ca0ba9fc4829cacf25ab22dce0eea0d7dbdcb06851a4ab4f7c878f7b1ac1f225893cb38b277c2bba4e283c915dd39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff51cade4dcc6094976f5a6221d742be

    SHA1

    a224bc380d41299e828a1e80b7c45e7b07566e8c

    SHA256

    30ebe09306cfcfeb8e363c820c453df5137cd806774eb3989374c7356b0a1038

    SHA512

    c7cd07aeb5ca4e152da10bdc5ddfbac5e9e956430f4ce0be8918db51a98ff090aa05cf359701bb817de9e093a77eb82feb6171646c5386e1d5a7b00318d486bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    822ad95f85f0184422c101fa4aa79267

    SHA1

    99267a72cfcde8dd4292407ae950487fcf8b1169

    SHA256

    57e01a975059947d84d4fedb6f245c0e3d36ae5f38898aea6c29f5a1b19ffe27

    SHA512

    c80ac1a455242025bb8ce820df3ea0f79555d88ddab8cf748eafbad36745f718a0bda912e5e7b1c13767a1d4b1a36099eb4908b4ce9a1bdef5e20b80342906bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b227ee4c5fcc2196bc26f70a80684527

    SHA1

    8b89d6aee089cd71e1b5fc9983e608abd0f61897

    SHA256

    1139bc1117f68b54925962c8abcd277fc13d057adfdeff6e4a5989423fb43d6f

    SHA512

    cbf2051c4efa13e819798edb0ae2908043cd72de495274c6347dbcdb83207480a54cac881e74a86cba2aaa6d27fd592c9934115cc8da8bde868b249c83b2d906

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5416846055e3e63bd92b35f1e7814aa

    SHA1

    2f0b235d6e0cac0422fc8cd80b48f87fa445aa7e

    SHA256

    21e0106b4a4496fbdf76dbd48165bf9ca709d7c6447508618c976271bed1a731

    SHA512

    ee676072c933e6b3a462c0ac19c994d9559e2c439b4375cc0f4997257507639956c7b5ebcdba38b9dc61b40943b1c578163b434cf5a93e4727ff89ef20e6df17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1fe7db09e883cfffe4845c3836d4cc0e

    SHA1

    3bed7fa843754c40a9f2eac20b129f5c1220c853

    SHA256

    387515134fbac6db56880e27a155aeffc52e039ff32d20f6db14837e3156a107

    SHA512

    438e4cd03b59a6756a6b26a5fb3f19607543693749ca4c7a311f1a4b5fe15fc581a441f6745c345413525637b1505bc635e41ab0fb2690dd6b9f4a875b4411a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a6854d1c6532a6a1d362df11cbddbb7

    SHA1

    063bdee864d13abe56d088d203538c6431b2d11f

    SHA256

    bdac5f76e757ec71377ba54654583d4dbf2d0bf85b246063eea4d597cb05b448

    SHA512

    19058394c71da587d9145cfdf98de0c9429f0143309f49a1942054957b678c39d676b72472f572a92f7e5a56892097deda1f8b2079c5198dbee2ec1381848759

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    519639531af21ee330688c9f0edf97a7

    SHA1

    1d71f5787a3253cb62e2711f5739585ecc9ab81e

    SHA256

    9de2e0ddb9ad2ecfb665b484b54a7a3d32e48d02d14ac86c66df852fc0381078

    SHA512

    cffa47fd69f105c525824d9b10598e25a94c145cbcc1e27186e17c890a7c960694eff9236ddee74d227caee2ce322018e2ec9f966c91ca5546b067235c75d6ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    403457624c284e8bd04798c0e0079d4d

    SHA1

    c32cb930773d34928452d9f21d278b298bd26799

    SHA256

    1b8928922a857211bb2dfa4ed4f4bb62e1f1d92362147da1949764ca64833be6

    SHA512

    f45dbd6917e89fb2b77cd0a43f20365009f22f64a6805d38dea8da0371e4ba4a9421f6d7a4a53d4cccadc8ff42cf8a860f9b9f9a0083bfc874f1c77728040aa1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39df1f6b7a2df3814cfd0bbec88b8dc5

    SHA1

    86deda4e1ef0aa7a9a2496de25d961937fc76986

    SHA256

    e1bcc488490a2b631086689fb872fa3a15c4110ea290f41308e781b84f1659f8

    SHA512

    b9ce5e4853e41a96d81b4f21d009fce320a0fb8ee944caeb21d7dc562eea68172e4b4b18b61074c31bb765cccb26493ff94084656a5940e1602996853c949912

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    76cd17837a39932d29d00ea41265922d

    SHA1

    c2dcf03f8e0610d70f391f7b7effd3c64462a7b8

    SHA256

    704be81a4d5690067cee4bf55719c249b57938c65612da9e34db4699e25612d8

    SHA512

    9ba109c0b2a09695abf855a07d0006236edaead0ced276f8c84573c6a6d2300ca26b15d70c70dcd09435637756432afcb0c0f36d1d3fd4a2b447e6f5900a8167

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4f552d2f522b5954b46c325d06ed25f

    SHA1

    273de9ccc1a3aae130cd8e6f99ce79a0c37fba7a

    SHA256

    fc7813969d87760c84d5966808f08d1c09d2c9e5a78eb3d40871a14631fa7976

    SHA512

    702a2dd3764dc5bcecdc99aca7b79a3ec4c4f6d7e55cba44b5be76a7fb009dbb3136fc2ea25f49c234ce17b4a3d6d88832c7f5e3e499318b1aee812090ec43ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    47d4b743e854d9afef891714c9e92e5c

    SHA1

    b3efe6a42b8108a7a23864a47280409bf6b52a93

    SHA256

    fc2c545895ba4774df9ec32a152960abd8615e699e20bf092a8fccae853c5f7e

    SHA512

    cd126ff688189bb5b6e817a01a8b23c6494f81bdd2677f33e83130c60686fef2c43c0c36ec32c194600792d8a81b100b1bfb02ea426664976e005205716d92c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d98cb08ac203ddc192c37f9d61c75fb0

    SHA1

    eb24bdfd0ad9298b745bddd7ce80b60975484eae

    SHA256

    5619f41a0a50898e54ada2864909a96898f0bbbb2d610dfaf55bea6471096af2

    SHA512

    698f2e7ea251e839048b7774c3d246fbd28373ee3c0c570a7cdfff73376c217f2dff3043b172092e981490ce508626cd4d72fc33b80217bdc7735ecd2af03e6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17dbd0ccacbb5584734d007cc3639155

    SHA1

    0c18bff17d49603ce55dbf26ff99a9c78c58b187

    SHA256

    56cb15dd231529e5e928c382e36371cf2a5d880f15f9e7d5321d8f9d06962920

    SHA512

    03be5f2e745f459b6c55aad5324d54d18c16dfd763dba83028db26e33a1a87af8d0e0f6bdbc6d622330085280953901027ec1b425d235fb0668e570bd890c805

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25c4900d9f75025905534b030e9df0f5

    SHA1

    97a799575af21f346d9db35ea7838579b4d0c918

    SHA256

    b163abad1a98e468e11b04436a49c415a2e9ba05847056eef8936f4f96c8c963

    SHA512

    552534a472847d94f3fdcd1b61e8b24f3a92ba0a98c997a930ff9189ea88ba35add8b1afb08b1360afa0f9f85d766f21b37635a3e0dd90d51292ad5163075c38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71287e22d2bb5044b741060d95ca386e

    SHA1

    3e62827d6d4d4b7fd9c5ca8f7c4acfbd4736489b

    SHA256

    c1ea07a5615f91307ada0ab981e19e158068b5f9456f6cfe462d72e4b5612f30

    SHA512

    f14146434c77788639120a66cb49f4738394d5d1e68e1899b64e99cd80245e45472b9d7b555adf69a46797ef1242cbf13a7865b91e599cb12fcaafd723a0dfb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a29a43393b3138e00495308fdede28da

    SHA1

    1e1d2d7d81fa204275a52ebeef7c86d2305ee0ca

    SHA256

    b582dae8f3b84781d4fc08e98cfeb2b443e51cb195d04ac3b43a047cafc2f0f1

    SHA512

    473e704fbc35e7057edef2e5733677f19c629074e92cc76a304509e54756f252bef2dbc524000f59fd7fc4788ba3f5b2c2ec1f7ca98cd5b09014e2c94ea7aea5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7cf7cad6daad4baa958d264ee6f93731

    SHA1

    1fb1df86b3b39d25d788f6a40419296cc083b2bf

    SHA256

    41e5abaa5f450cab1e30e9d749dd58827f506375b18de4d12e043540ae7f5fd1

    SHA512

    ee5b918348b5be73b8ca08032a8b1369b3472b1fc21c0f7b6d42b8065b368986b645ad6f8d91bcbcba48b48dca374cf8d44aca2ab0df53a9c1db4d2d1fbb7460

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2f35f2476c8301bdeb0e9591f0bdc39

    SHA1

    73777a7a7bc1c1b9b8e64f72b19a38d8fbe52b3b

    SHA256

    f65ad0370913092577bb5511dbd1a5a38beeb0b4c2bc79fd6ddcfe49bcc1d6a1

    SHA512

    a6be6fe839d72189e89fbb78268710f3ad467a3b954b88de6801586664691e595cd26329c0f365847fbffb6f87c37f8e816881733235083b19353b711802b405

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    9c34f60c1982c5f91d264a223e259f3c

    SHA1

    d0b61c49183d0af2d516000fee69c9dfefc14a5c

    SHA256

    9677cc25169bdae10a4211b20cb82dcff52a9cb8bffa0654c3374dadb2cb0096

    SHA512

    0eba851f8fa765f181ce3e81a4ceecaa987df11919652ff791005412a4b8ff53bc46e6d776b06859dfa1256dc7a9fedb39654b09e5f227e6d84147cfd9e97d08

  • C:\Users\Admin\AppData\Local\Temp\Cab141F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab14F2.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1422.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar1514.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a