Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    147s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/05/2024, 19:49

General

  • Target

    81b56a7270133f65a348e9760f3ac1c6_JaffaCakes118.html

  • Size

    80KB

  • MD5

    81b56a7270133f65a348e9760f3ac1c6

  • SHA1

    0947e1f5d327ff58b82cf72be335a3f431acb38e

  • SHA256

    5114ccebfa4d1d6b0df71257d6da7367602ecf78b41dfed53e07cb4082ab1a53

  • SHA512

    006cf511c125420cec783b6660d808d2f402c37a0e06fdbe82a9cb194dcf1a41500b753307238d10eca9bb4c8c6a3e2c69522cf30b038aa1b7f552fceb48d48e

  • SSDEEP

    1536:VbA6BeAoJs2u5LwLfwU8SYEELVAHfUZm3Ty//dMMhj8ZxbijpjS9hezrveSeh2hu:ZA6BefJs28LwLIU8F1Vh8ezrveS+2h23

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 28 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\81b56a7270133f65a348e9760f3ac1c6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2164
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2164 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2052

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

    Filesize

    1KB

    MD5

    c90575e0768c19282e379d5fbe679381

    SHA1

    dfc182128cfaf78e56dddf9c671e0d37a2165f7c

    SHA256

    42b7e7d1856d7fe90c927d82950da17f1414e7b9f1f5896ba29edd192642c744

    SHA512

    6e453dfff0079c69b5eee59b14456654de10f8846da40fdbb72b4a6e657682aaf993b8b3abb41a67f3eab7113fa4a0f3aeafda39c29282018fb97819527214ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    980B

    MD5

    398722ab9c4f5041188981d7a7dcfd43

    SHA1

    1098df30618ce1510d8353b487eab2ddae15553c

    SHA256

    0dfccfbdf27015d2a8a160ebf9745e6bc0be41410553d09a340e1cfbc276dded

    SHA512

    dd9a9e8691fee59c36e4b1e7fc69d963acf284685d95fcb0f2812c832944a23e8625991cd60e3280dcdfe216e45ee451cc5303116755c0190b6ad646974bf711

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    ab7e63aac079fae6317a4ddcbc4e881a

    SHA1

    f0a9036833b3ee9e97ae8c45d39721bac2b9f3ba

    SHA256

    663a9cd574c4d4283b6ea52a00c909dfcdf43c0cfcd66e65d9529328373c8ab9

    SHA512

    6c2ba89e79e26791059baf1d33841fc61a871798fcea1e6f93a85c1140dc5d0b7a2edc613c72ecea2e5bd70623a40a7c31543d1409646b687dc317eaddaf5574

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e34762e5ef25f3c9cfe1f94e6a927c2d

    SHA1

    3cff8297088cba419273751e9d876ebe3ee2d666

    SHA256

    a4123317b6dcd17efa934b50cdf0e9269a53245b1913b33a342b826c94728667

    SHA512

    e301a6000c66961f75ca39d2e3ca118485bfa07d20b56e60fe8802ee420be05ae5615f0403b725fb5a0a413636ea3aaa2f4181060e98ce40ec6d91be3920d0e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    08e12de3e7f8dee25ecce4fd69a2315d

    SHA1

    c160551349d6cb89f88ef1fdebaaf9db0ec914a3

    SHA256

    4e32f357e6c08052fbe690cd2cb244ae17a612bec9cd10eafdabee9524b266ca

    SHA512

    ab20208f4a9f1bd4a4ffdce35ab37343eb1d03de614d7157370d218af301791f67fb0f05bd7fdce787a80bb6d87f405b2e3fe498c93654cc50ec036aea5885e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b76f204cc7d97f6e75a733c34f3c3df

    SHA1

    675da83a8e337ea3e9cbce6efa34098aab859712

    SHA256

    aabb52c10065c9ee97b99ed54a2a7d26e0fc6225b31988a2c699adc2f63a9dd6

    SHA512

    3dc4b278787d80a356c57e35ce7407f34d1f6c3f1aac8046a6b9e186b126dc40655b8914b71f6ec54695e458490e542f6f0ab30adf763d0b6cb4fb8bf1e7897d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2822fd48f05b380c8bfb939ec3fcae6

    SHA1

    583dcc92230fd07e1a3c9cbb2863fc7cbed960e9

    SHA256

    8871b84285b875cfd023b3211bd26fdbc152ad906e7c5364c57d2cceb7c938dc

    SHA512

    dee4e5d93661ef608bcb4cca413c3330b33cce11d4ccb28426cac7a52bd74cea0735f052e6420cc37495b846b06a7a5e9ba28e806042de8be8663880126017ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e8a4b9f2674993f97d49fcc2d79ff8d

    SHA1

    a457080fb0c19f2ed7bc4bfaada1b0815b3fe762

    SHA256

    640f0032db36efcc06c59b7b5af07e6c7bb86cbaf336a01b7760f451e0f746d6

    SHA512

    53b22dddc41d2309bc7ab22d77b0c01ebfea7b2424d9a20e6386bd8a6e77bc4c48e4451f84fec0e5c56912fc8fcc609c3e45557082a924b8abd631a0fbfca09b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    51f461aaf0750834c47a3e2257d367e4

    SHA1

    16bcf731902e95a2ca06230376922a1f8a3cbfca

    SHA256

    c9c275074067ad0afae4c4599f4190252e2f08fe529001d86c59d332e1644f81

    SHA512

    af5b21fe0683772a81166e9aaee55c03cb838ce3873525ad6a2e6e6ae0e90317e56f7d8479135b2aaa08b5c56cb10ede02fdaf2c4066f08dea926e74f472f3f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3859f93228dd5806e524f8607a2fef71

    SHA1

    5320f495d276f4bc3a5775c9a08315d56a2e9803

    SHA256

    0d96c17c00ba552c3b0027d32cd095c57871ab711a17abc9d7c5f56dfa00c524

    SHA512

    2caf507807d136564359ddd2dca028a3651b67022c4b56675c7d8625c2e30124818e0384843f2bceeea6f216ecb262e1fde82e09decb8f67c74e2d67ab3d6582

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d47b3cdad485e3d9b6b419eca5fc7f05

    SHA1

    eac9346b7fd61d3a0fc00633e9f0d75be4cca773

    SHA256

    1a037369249a444b3a99d36a4f55094443ea3ca5c1efb4435e3b0bb6d213c99d

    SHA512

    1f3a106e22daf6ef37f77de48ed012e2f7786ee76a8c50e75e3efdcd52f22ce38b21b033ee829b65906522dbf78c4615e048c0bbac180fbbc6a4ce331adc6e22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5568becb9bc5251e5ce0bafc0cf9dd0c

    SHA1

    d160bb64a82faf09ccabbe93ca9268c59c696b18

    SHA256

    bb060fe4371562c654696acb7410ef85c9303daa84dfb2b8a1cac29a9036efbf

    SHA512

    dd907a398c3b7fe280720037bb1687076748e4a1cbcc2a3229fd5114ba39d67b2272c771224ef156d0bd270df6369c88eff63557410574f6b0802446148b87f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d04ba96eacd5479c788f8c32d322070

    SHA1

    07cbb83d69212ada77c217c88e31d7b6d7e4d0dc

    SHA256

    f77d8eaef1d5481f8d7b876232ca1cb1101658fa9b94575fce8835d6a69f3577

    SHA512

    46291a5d70ddeac6914d0edbc768fee5fc4c8a2917abebae5f7dacc750d3d665bfc104f7576a1ec1bb3f37523da6d355cc3b7bc50ac41fe25105aefe62afb8c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ef4e073d454ccca5e3d9e2bfb123fff3

    SHA1

    034e481230cd56fb015ccf0ca4b48eb4f001f0d3

    SHA256

    d6d04877e8ce4ff249fe6bc441d15ec09942242fae58d7bb5d2a291c87723c63

    SHA512

    71cb28aaedaa8ba2ccd514b4982428c43a155e7111a5f4ae96e41850d9ed5ed4860231ba293629a17db88df7b7c348262c0c5471b5ea07e6f8a1c6019647bede

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b961c586fd91931583959516fc7273ed

    SHA1

    23cb6c6e3c105c0da8f7e34cf8269124addbd8cc

    SHA256

    3fdc64b1f040f9236d1175ae446ae0a6ba2c5e7a3bca7ab39d378a74a2924b1b

    SHA512

    0f6549f138f8130f7b31d544c3c637b3491a69eef79d0cafc41cddfaf4e7c71531d3c5572329f3b83a37d8e87e593cd8efcffba15f1dbea0867b2f4d3ade5fe7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e9fdbf733c41e53929ad9da1435fb104

    SHA1

    9f8ddbcf4be11d6ccaac25bb085c3e8a9d6ea2d0

    SHA256

    fa93a1bd5e99620938bc26501d4efff997e4993a0d6d1379638a88957017b75e

    SHA512

    1ae8c6f1cde0472e8b0e84f50fa59ed42e9252a041cd82f98bb530a57f41c7c1206da3eb11b74e1284e281f41a5c41aa6555150576a01e201b420bad72894d35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e24e8bce8320a5767ae32af80cac862d

    SHA1

    b17d8b860dfc557b651d9fec6e4dc30afe6fd660

    SHA256

    904b8ffa78d6d969a1ecff10bd6e79159a78dd85cfd75e82d56ccd320593310b

    SHA512

    2c6992a83f05470f1ea25260d1ef8e51fcaf51ca4de757324073125f47ef8f2544ebe12b05b8684a779afee73b4aa2054d5ad02aafc78ca972cbdd467d7474df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    86dc637f7fe86663cf0339fa42ebfa90

    SHA1

    38fb9384ae4a3c7201a222a756529bd340deda71

    SHA256

    48958b69dfc8f8aabc48306bba8fb4f27e1fd45ad4e46a7d45c13e4d3cd38188

    SHA512

    ccd57e4c738098b55fa4030120fbab7ce00765db4f4926297a961a58d08577e7fc56b0116be9a55b31e165d6cee132fe9316b94af4931df5b692b36c74fafdf4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    20abe14e6021e661eafbc0e14d90d97b

    SHA1

    3ac1b810c843d1335aad4c666a009f1662e5eb48

    SHA256

    92130479404f4f6f818380a9f1b19d1f2793d7a2cda617b8c362022ee9e20336

    SHA512

    21d381bed8d775c01603f01eaee0c080b4ee49bcea281ab239e2ef2cab783fc69d29a0e78512b7c5d13627b1593f65aa969847bfe560cca26ece44845100f258

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    f6807c163c289c2aac2ca019823b4570

    SHA1

    b1c62d371c85af8ea2927c98d4697343e8213136

    SHA256

    342116fd1ee27c0587ded1873fab39b5fde63478e6c1ca00ce0d2137c09eb9cd

    SHA512

    7d79bda3fe3d1208dfd2667caf2fbd20356dc3536ee20a949c9ef922ba0eb10ef0ad4ed4e6768b6e6ca535bc46ef8fc096f3b92286ee392fe53303863e44151b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4JZQ5QLK\3604799710-postmessagerelay[1].js

    Filesize

    11KB

    MD5

    40aaadf2a7451d276b940cddefb2d0ed

    SHA1

    b2fc8129a4f5e5a0c8cb631218f40a4230444d9e

    SHA256

    4b515a19e688085b55f51f1eda7bc3e51404e8f59b64652e094994baf7be28f2

    SHA512

    6f66544481257ff36cda85da81960a848ebcf86c2eb7bbe685c9b6a0e91bca9fc9879c4844315c90afd9158f1d54398f0f1d650d50204e77692e48b39a038d50

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8ADCJI8Z\plusone[1].js

    Filesize

    54KB

    MD5

    fb86282646c76d835cd2e6c49b8625f7

    SHA1

    d1b33142b0ce10c3e883e4799dcb0a2f9ddaa3d0

    SHA256

    638374c6c6251af66fe3f5018eb3ff62b47df830a0137afb51e36ac3279d8109

    SHA512

    07dff3229f08df2d213f24f62a4610f2736b3d1092599b8fc27602330aafbb5bd1cd9039ffee7f76958f4b75796bb75dd7cd483eaa278c9902e712c256a9b7b9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9ZQLLOZN\48217ae21906f2bec406f2c9933565a5[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9ZQLLOZN\cb=gapi[1].js

    Filesize

    64KB

    MD5

    63e5a0b45632b3dde3694ffcaf0e3f7a

    SHA1

    923736d0cdc308331d5cfaa0ea159bfedc83d53f

    SHA256

    889109910477919b3457416e7764bcd0add19fd959848253026125c7c35c43db

    SHA512

    5b886c4b5122d61f0209ede748aa84445c9388cf38813316c41b3dbd2308216e88394d9a45cfc27113c0cf3bc93b9c37d808f6d3c67888244c176ee095d42259

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OORQXHVT\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    23a7ab8d8ba33d255e61be9fc36b1d16

    SHA1

    042d8431d552c81f4e504644ac88adce7bf2b76f

    SHA256

    127ffe5850ed564a98f7ac65c81f0d71c163ea45df74f130841f78d4ac5afad5

    SHA512

    e7c5314731e0b8a54ab1459d7199b36fc25cd0367bc146f5287d3850bd9fe67ba60017d79c97ea8d9a91cd639f2bc2253096ce826277e7088f8abfe6f0534b63

  • C:\Users\Admin\AppData\Local\Temp\Cab2702.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab2807.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar2706.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar2809.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b