Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    29/05/2024, 23:48

General

  • Target

    8264f6cc32f1670e6e4c6fce67917b63_JaffaCakes118.html

  • Size

    146KB

  • MD5

    8264f6cc32f1670e6e4c6fce67917b63

  • SHA1

    8b13bef4dee77f603c30424b150efcf477f0b025

  • SHA256

    f5c5cbb244138aa924079c8dd6b354b99975a4d609492d7b960c27be623d1e2c

  • SHA512

    ccb98c05cc0b21589d1ccaf2d8699d200757bbe21dd1b662264329a27fd9de8c61a36110107fbcb7cfd8b22df41edcb399befc7696500fe08d64c4a2f4cf80c3

  • SSDEEP

    3072:oxDNvG8rmAGXmNJUzcQ00ieNBfGoPFpNHoVa:mkXmNJWd

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8264f6cc32f1670e6e4c6fce67917b63_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2008
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2008 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2984

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    7accdd5ae68e7d4e5811a515b58f3e42

    SHA1

    a0dae23c3fb9029e0fb0c899a1d8b3c507fc3aad

    SHA256

    c419f082161c6938bfb7e7b721ffc2ce738fc24890e5044a370aa46b7f48c440

    SHA512

    7e7e5ed2422b74c230ff1c5f3e855fc8efe4d6788041641f0d5f53d8150c7f8a94314ec8d1c660d8fac714367a8f17d1eac209ffec669a94aee4b8ba7e352594

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    fe8dbb0a9863ffd4721adbb6383d26ed

    SHA1

    8521da6f160e6d81fc2c7598639ca1df6840e6ce

    SHA256

    26321ac2e34aa909d6f56953835ab594f8439044a0f2b339b2a3158bc06c5b0c

    SHA512

    76c642b7de54ec8241f3dae7e75e99c86db42226cad2a53c0d502a921186a12a7deeb24c8fb6448bc49e2864484b759dc2ea1f85dae573a3b14165332ac165b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    20e78213d8aebe44e67af83ce89e7a90

    SHA1

    32a7daf42a8aa1d2cfefbf8b7abd3e385220ce3f

    SHA256

    dc7ba34522d52ffd3ab77fe5bea6a4a9b78c95c859800ddb1f30cb0824f395e9

    SHA512

    99bda303838f2589f728b323b621b6a0ab265bec90f370836727b37f475a3949bf38653e70f7ee45162d8ffe6f1bad97e93f8a7c4bbc330780887cd0b6775d16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f3c9490121acdadf552753513b7bc0f

    SHA1

    a457e53ac49d6cccd47beb3965f7857a537a8b6b

    SHA256

    4841ccaf58b65582f23c70a6be7475d4f715a5b12561d2e291a425233dff2459

    SHA512

    ffcf58bfd4aea90c4a0bdc293e7032b6f95899493c7c3c9fee2a78b4351dd7c1438870cc06268e99fa099013f743fed8682f48a6d926e2019ee1411a8b92c69f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    18cbe1c5fccdf568aefdbc0758813099

    SHA1

    5750a12005d1dc1303832062b1112b43e8983350

    SHA256

    9227e056f06dc4a5492484966ce86c6417e0e4f20fec8999790f1d9f19030e39

    SHA512

    1ae8d4943d011472ced7eb83cd57dd6493b83fafde59b1c3df13cf4c6d0e802f2aa2d37e2b031af64cf67b1177459bbcad0cf6afdc7b15f4347a6b26963f1ad6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fdfe079b1a2faebe773002657b812d4e

    SHA1

    7f769df8648a2b3602aaddfbd325bc4e289d5758

    SHA256

    4f30f8163ce9d657325c56b0d7585a2a23658c5a4d9ce347476b42abf9306912

    SHA512

    99e5283daaaa7ef40118ad0140bd9030587bce01512d5021dd429a2ea91946ead811d75548f7f9540ee9654a3324ae220691819650ce125321b001f9b372fc8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    31d58462929ae39ab7a29430e040fd21

    SHA1

    b21a274c98864b440d166fb83e8be20325d7b240

    SHA256

    df21f7a12e1734e857f530f8eb796ce9673e2e2481524491ebf5daefe9d720b3

    SHA512

    5c9f8166595857d8176fa88ef971a97642a2679198eff83f14f41ea04ae2686715bc8ba82ca6e961e5c512fc7fc0e6577a60f3b495f9a634a61fb8bb81a71305

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6f92ab7a58801c4233f01f16b6ef531

    SHA1

    a3b9fb79411aedd07facf7865491d90d0eb73cda

    SHA256

    f867256ac0bee1d171af2b0c171f8a07896f4dd05a88b447e7d8f71a39e17bad

    SHA512

    9df307edf3eb8b73418bdefa91c36b9893f8b4f6b254979e3df1980aa8179efa0e949e851a5bd2f6a8cff5aed6719d0fdca937da94a067e11b223c262f255b93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    132256f1808a762979b029a533665b3e

    SHA1

    34eedd3dc74b661d2d959590451d905ff5ebe2b2

    SHA256

    fb0af365611163490b09d1abfe04bf21a25e306e30b04422d45787cfcc5d41a5

    SHA512

    5d2715230804a851509a6d67bb1095c388449d74b287d33790ceff1083b42a6ef02272fbe156179bc89053ba55d29568eac30f992ca83e78728f0f95f9f47d83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    16a6f1e6eab9759839c6e5bbeaef1eae

    SHA1

    a4603c44d3a5e3cb02899d7b0e593d7931e6f173

    SHA256

    5856ac99a5d7349a3e19651578c2f3f88e4e8d969b7f233b737e234357e73eb3

    SHA512

    9e46a897fbd68f51ae55c43de583cab31bbf6f250abafee6371a659b283fc884609d98f54023fdafd65505baaae705b8ba2b40f91bd12405ef5454c3ec21cc0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fe966a55593d44e908f796cc75f5da10

    SHA1

    509ed53a075807fd1ae675e27f12c49bb3132fbb

    SHA256

    bb453c99787753a4c1969f92c6a1b77b3cc2da599a5f3f98fa26182a64e836fb

    SHA512

    2331b70dd8cc2c9a42245199c365479f5ef528483b83918bd04e5eac1207234d5c13fcaa4656cd30ee22eb023d9b676e7befc5a03787354127e2c9db2809563a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ccc334fb7fa11e793feb2dde75546e8

    SHA1

    81d330d521ae4cc7cd0cf401aa1cedcdaa2b781d

    SHA256

    c646abaf49904abc2c9797d62522580d38fa5138ed8fd518ce77dd7844ba57e7

    SHA512

    d2d59011690e335b3f7f64c0d8c93c9f0d8c639e4562602f1fb42f4bc28b8dba3b13f115e7541c242ee54be1bc7a5001c860ecb8704351313c752f0927a04b1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf1d53287fc8d0b1fd1aabac0e98af49

    SHA1

    6272da562bbedee7046dc84d519703152efdd79a

    SHA256

    62a59e91b4f182ccb4e61c0b85f66474f76675eb01cd7b333e6652edb4446409

    SHA512

    43dea121ed1aed453adc0141bdceeec56bb11f6f472383f3d5d59547d43e58ded00d069c8ce6851ee578dbf8d50306446ae56435e0d4194e082af9fa8528f9a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4bf715bd25a3841cdb4904adcbaed203

    SHA1

    bc32eccc1d94ff3ad9717581a03eb3d8a50afa36

    SHA256

    3bf40ba673564f6524dd5c040523df5f72c9cc1502f29a5c560ac04d3eb5c34e

    SHA512

    1224d48795cf98afdd495102534cbaedde5d944343e7752be7f68d97f62beb41abf77d8e6b658b5ccf27c44d137d34d1b53efcb2afc15775e5394ff995eac110

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    01255c12ff60f63052b06b50e33bec1a

    SHA1

    a9b2ac33402294f8266d921344079c57898b9f03

    SHA256

    b2f8513f7a9edf8539323337b6917f5b67dcbed448deecfd3351f8a6641f6058

    SHA512

    1a94d6119f578c91379670233a3b0519720ec1012650dfa4ddcdf8b1125377148c024514184d566507dfb35478545f0f9909b112a401a765a022d4b806d89c67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c6ea0c2c6e48c6c9d40f9934f95a4f9

    SHA1

    435dfc0b5bd9f78d072a1ea8d17dbda700412bb8

    SHA256

    f02a4240b116f471859c95ee1dc2980d6a571f4e1dafe5ece4d9b41f02a4a217

    SHA512

    9b28e16b8e0a9189a9f462acc5dfb7d7826018351de94e961055fcbcc36f1a97e8c0a001a8f454b04becce86351ab11a4885306b180c5a4160377d0df06f27e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8580268947606ab4d984af642046bed4

    SHA1

    b3d52aad144a4fa3e95922d168043a1cb153c5fe

    SHA256

    bbc6cc747ff1577b8956bcd54d16fd9776ec803b8999a3c07aa3824977a13dd0

    SHA512

    60f459863dc8d14af9fff9b51408ac53a128fa2161310365114649ae6852ee8652e77d4b6303a26f382948f8df310b08ac3a049c13d13cb35f6f6e6c6f8b7a7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c6912bf452aae157c4c0a137fe53769c

    SHA1

    f5048de0ecd1b6853041d14d875895e5dc4b4e9f

    SHA256

    5dd9abf657eb517b2b2100b5ffd9e1a76b466a9462e5c3e5dee03047e77d29d1

    SHA512

    61d41e0b45566a9cc385eae21f6aa6a2d79b1e72a8ca953495bd6d90fc9a74a1c7cae987abfeb1562a13d9e0ab7107a5842d1e33f1f015ae3ff5badd4599cab4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75ce3d313dab16e8dedf36427a6735f0

    SHA1

    fea166b36ab291b261245e7f8837c745de3b0685

    SHA256

    3c3e351042fe97ab8719f528a9ab5cdf83c402a168880d59819801b83dabe8e6

    SHA512

    5cfe08d29de25b1b75f79e677c9252597cb4c1074ed4d6825ecc2fe9088f2896ed683c4ecb84cfd267afb8e5a1eece3bf780aeea068c31f95c2ecdf7e6903d16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7c87e6b38032ecb37e221386f695064

    SHA1

    4db06bbf831c19bddbdda3f7b3bc83569e93ebae

    SHA256

    ce973afd0c29437c3a43e425a91ffeac19dec3535b354f761d1060f42262204f

    SHA512

    7c224e59e51f608cab30577e038366b143a2295456916ae2c4c650a8319acde4a7977215aac3363dfb7ee6b82a216061fd4ce67597fa02a9926df92658904a6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5bce6478e9213d2b3576ea1e65391fb7

    SHA1

    8614b376cad1448835a7765a3fed03e6905dd7eb

    SHA256

    3047fd7bd311a7231fef09baa9c224b62a1fde21e4d4ab650871d9ed0884fd65

    SHA512

    e9d2a85ad2fa1c518d1d1e5e3af3bc5f720ea310020762f8cf481cd2a32c06f1bba4a95d9e91675c38f0a40d71d73ee2607c69f4ee786734c53d33c3e38dbab2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    745fbff5191a7b0d588841436d97d1a6

    SHA1

    6ceaad19a6246bc8e20447f1e0ad5f9700394224

    SHA256

    bfad8a7982ce40513e571253ea1d11b3931207757eb2985f59219906a1592715

    SHA512

    1f06c68c6b48c458be7dbe971ce7ac04a9b1e548ecc3cfcc2cbbf4e86df84adf40dc7b85eb3fda1389803cbfc676caa47c0805ecdb363ca6175184f0241f9e7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c6385bef43a9b3f0279de5605e09fc1

    SHA1

    4ff682ec76c55e44f7fe8204dac1838333f55758

    SHA256

    72338835a39c13dbf80461bd048a43dc5e3d0c4bfa2a1b1de63307c3163dac9f

    SHA512

    e3ab55fe569a0aca19b21e8a8434a18d8f3145a00555ae94d0a7c4c9a8e29a4e320a440858da0986e745ef803a5d40fcb7d3b3baa2255a5260148462cc5b4a54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cff669b0d0ab6bb911bb41b4530d7a74

    SHA1

    a2287e502a849a92264b9fd91584d528a746167f

    SHA256

    869e3502f7dafcdde740606e838df57d2b2d59d96e4cda22ba87434d9fd83d95

    SHA512

    e4c61f0aba5755a461db9ec4d96d7073d27fb56534e25740c633ce3e4359399d5693e847466956b8ba4f8a500d27de151be1d5d2849c3bf9bef0b802c973f896

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6797744a2ef2b33afd62c1978146e1ac

    SHA1

    f3bbd0229a66305c46b05fb9c8bad216a2bea864

    SHA256

    621cc3d1cc1574d4b4c9a1d53a12d970041df13540b3540f5c1ce50ba04ce6ee

    SHA512

    cf5e2666bdfac324f953fbf11778bc4fbc40bba8fdec9132fe918d2dc725c5e3608f683594066fec928d0ef9c92096e5f3c88f0d4f14d9e6e21ff5b43c271b99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    3ba49b39b58cf6b37b043536a286d660

    SHA1

    b4e40b1d5bbc73e877de2b2993074b79652dc378

    SHA256

    240ec07155360600980e91c8c60a460d838e295720c921d767491405aaa0dfbf

    SHA512

    711691ec8467c0c7af1d33c00c96321b10d56c4e3038e19a5d248237f8b7db4588d00bee97824cd2a386fecea7e8687eb2539bb60c5782216bedcd9601fcbfeb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MEFTDE7Q\cb=gapi[1].js

    Filesize

    133KB

    MD5

    4d1bd282f5a3799d4e2880cf69af9269

    SHA1

    2ede61be138a7beaa7d6214aa278479dce258adb

    SHA256

    5e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693

    SHA512

    615556b06959aae4229b228cd023f15526256311b5e06dc3c1b122dcbe1ff2f01863e09f5b86f600bcee885f180b5148e7813fde76d877b3e4a114a73169c349

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MEFTDE7Q\plusone[1].js

    Filesize

    54KB

    MD5

    fb86282646c76d835cd2e6c49b8625f7

    SHA1

    d1b33142b0ce10c3e883e4799dcb0a2f9ddaa3d0

    SHA256

    638374c6c6251af66fe3f5018eb3ff62b47df830a0137afb51e36ac3279d8109

    SHA512

    07dff3229f08df2d213f24f62a4610f2736b3d1092599b8fc27602330aafbb5bd1cd9039ffee7f76958f4b75796bb75dd7cd483eaa278c9902e712c256a9b7b9

  • C:\Users\Admin\AppData\Local\Temp\Cab12A8.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Cab1532.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar148F.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

  • C:\Users\Admin\AppData\Local\Temp\Tar1556.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b