Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    30/05/2024, 13:40

General

  • Target

    84592ab3c3912d231a442943cdfbc5bf_JaffaCakes118.html

  • Size

    35KB

  • MD5

    84592ab3c3912d231a442943cdfbc5bf

  • SHA1

    07f932a20e8320bf87fc558baa42de5759c7a777

  • SHA256

    1f8130132af40f7b613b0ee282883267a1ba3d95892f7bda388299ca8c40278a

  • SHA512

    e40dc1bba5b1d1becce769c3b51f0391764d25e3edab159d6b54fe1dd52562f9c364bf7968b466bbd05e07d864221351fcb95a07d8f7ffb7167e5036ef9b7777

  • SSDEEP

    768:zwx/MDTHZB88hARjuZPXN3E1XnXrFLxNLlDNoPqkPTHlnkM3Gr6TIZOf6sggf6l0:Q/rbJxNVNu0Sx/P8tK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\84592ab3c3912d231a442943cdfbc5bf_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3008
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3008 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2556

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

    Filesize

    1KB

    MD5

    c90575e0768c19282e379d5fbe679381

    SHA1

    dfc182128cfaf78e56dddf9c671e0d37a2165f7c

    SHA256

    42b7e7d1856d7fe90c927d82950da17f1414e7b9f1f5896ba29edd192642c744

    SHA512

    6e453dfff0079c69b5eee59b14456654de10f8846da40fdbb72b4a6e657682aaf993b8b3abb41a67f3eab7113fa4a0f3aeafda39c29282018fb97819527214ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    980B

    MD5

    398722ab9c4f5041188981d7a7dcfd43

    SHA1

    1098df30618ce1510d8353b487eab2ddae15553c

    SHA256

    0dfccfbdf27015d2a8a160ebf9745e6bc0be41410553d09a340e1cfbc276dded

    SHA512

    dd9a9e8691fee59c36e4b1e7fc69d963acf284685d95fcb0f2812c832944a23e8625991cd60e3280dcdfe216e45ee451cc5303116755c0190b6ad646974bf711

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    904011ae18f0efb190b912ba481d0768

    SHA1

    fd5f6a3a65b061535698d9eadf53233ac0f571d1

    SHA256

    745c065d992843186d3e815d17fc572949f40a0133ecdf5b3f4f61532545d57c

    SHA512

    eb0df93d87db32eca4339807edd08217b74804acb49a73597fd785d495b0a2e9fc5255ed0f36d88ef50e8e57fdabb9d6a261085591433374632705095c287525

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70d73d5ff12e820119d9124d89cb4d38

    SHA1

    d2f791ac9b435c97946dc067af65b1c85155b07d

    SHA256

    e46aebecdb19ce2b93cc6c508259e22048ec2a7b985e5e9f07a3a004a1fc57f4

    SHA512

    ce27de995760f543d875ab60e1b22e61cb7d8b0c73c26ce8da58711b48913f435602352d62c042ec412334394f351ccd3de6d4fc20a4d311b63b30a13ab807de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6892eed65409891f36a6a5f8d993f3b6

    SHA1

    7ef06f7fc004fc0d4786434081bf12da79985882

    SHA256

    2d0fbf9241ef4afa17f5a6325c58c194aceaef504505a4acb7d6ddebf4377851

    SHA512

    67cce275de89f70deef9d25e94655d52ea19f4edb6a95a047d0c5805a5500e463dceeccd2ee3b7ce7b063bec9e83e60e1de2723dffd7f9b129f08474ac4b61aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b70bb2e9f0d7301640a2a2c6e5745930

    SHA1

    1c0670dbe3efedf299ae84a1198ae669862c5e9a

    SHA256

    9477b00d6d3a84b0153a0d7ac4f7380ae78beaa3b4360a64ed05294e3fb607ef

    SHA512

    f7a83b9974a20f72f65c198d27eaf538276247a7918fce74b09a9efd8d84ed2733841137a22f5e7d68c989e31f93e186ae9c606f6e55d1b758737dbc8738f03e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    66b0cec6f5a77427317790095a332c6e

    SHA1

    be2d092b86e4c9aeeb5f7a0be8a076fdc8914c75

    SHA256

    ecbc82d6dd33e47affd8a20705a3e721ac8ef684c14034288590f55c77c17c5f

    SHA512

    9c336e6efc7d04a36fc241580fe043e8f795acfd4865d38e6da6cd7f36bd8fcf75dc299aae6d2c6bbf96fc659658c96c5a64010b067dbfca9b6b8ae1f7e488e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f7ecda2e6900aa18c4eb98a2497a182

    SHA1

    a6d4f373d3b038d6c65c041439259a08fd5d5a2d

    SHA256

    2c34c500c44688a0f51b7b5c6fda29f43ffe25b61496f193e471ebcd7c5ee271

    SHA512

    26f371d958124042190f8dda1e1a72bc9b9f610ad2e7b009477f7ccc025f9ef3564ccf941a0745ee6575f91ea88353123b03fd6fb861081864f81c6d53c3984d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    56df5f00035391f030bd8aa1ce638281

    SHA1

    d16d8417863eefd55b25c016446d6a90b18adab8

    SHA256

    a8baead0adf4abe37809e982ef43ffd2800408294bc61c7aed6e2d81c9364bd3

    SHA512

    3c6063392a6d91590fafecda360354f85d4b07974f9b444b784d0f950ddd3fca8c5e7929a24887fbe13e2151e99b3a234f5ffc6ce88e996334893daf269daae0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3781546148d8cce7b90960bc383dedfa

    SHA1

    592911ef4a404010d47807280c92c6831b47456c

    SHA256

    b15db8382e8197bdfc793b992b30d08e68f35d2e6c9ef3d114c7246d266bf9cf

    SHA512

    2977cfa4efbc94c0705c1a7f9790ecf5552a9917197dc12b5e4076467f0c358185d9551a31bcf1bf6413b4cc7b86393a94b23e19ad8e1b655b9fb26ae8995075

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    655538f51694d3c0dababdbb38fc7dd2

    SHA1

    355cba9e1060276c1df7eb408ce8f8baeab8a62b

    SHA256

    08a1ba641ea583c34a709fa419b2f9e3acdc10c7eb570346da68128e347a6cb2

    SHA512

    8fb0e5e3785645d3cfb034eb9034f1b0722f7f968595bfbc08308e55be0ecebc2abb515cb8122e86b593b57133147cee1fbbb8cde6a445c9b7c182e5f12409b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b524eee7a95c7d39cffce0ba05bbf57

    SHA1

    d555f990baae585bd5e630af339be95e74cb8652

    SHA256

    668e329c0455cb4e65564a8d5f530c6495b7880961929ddf600f0f00eeed607b

    SHA512

    1e77f214b6e5425e4913c616d01b5e4dcdc094d08f8bf45072cd0d33c47f83f476c30b617ab82bf6c9e1e79f21130a5e1119cf75b658a081c2cc16296148fce4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d2628a1e6840551842812376a2dede13

    SHA1

    5769870ca92003d33ba08bebb482b0fa8372bdd5

    SHA256

    a054c25df5301e06a6e777b01acdf886ab27b0a3fec038d3a2ab893e0d68a4dd

    SHA512

    b52d5043dac178351b4a448f0ffa12841c6661ad49b6b90c566a60f05924e5cf94c6cd65266ea6eb7c09290879eb1b762cb293f5da3615cf5ff3c8e18fcd0f66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd34faeee6ec8123262a25865b15a378

    SHA1

    0821a6532042354ebacc988afe674b1daeb6c6c9

    SHA256

    0ec50bafddf4d424f08f9ac84592882af3af26a49988e31c3976159a55bddd14

    SHA512

    4c66d25bc0296793407a1af4dc2dc6796c8db711a5d12e6f82a7e86bf694d9a9a4eb32cf90d7e66c60e5a27f29cea148fccbca807669733083bc2a4c52012c61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1eb5cf7f2c84e4650b20bb56639d1bb9

    SHA1

    63c30439f7e97a98d7a6ce0a0eafd2bee036f3f4

    SHA256

    8e769c0ec2710221ce5308be8ae0f86f1c7faf92ddf4bcdeb4ea4845275a22f9

    SHA512

    bf5b094f3877ec249b9242a1c8fa3912001c3f055b09e100811f73b86b246d36e221c57fa9b7dad810c1adc0bdf51af162b7f030bb09fb44963e3b560f994daa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a2b9b7d019e4427328776b3e63e09a3

    SHA1

    891f1b154ae168f583131533901c5c55781ca0be

    SHA256

    5b78b9fba5a6999b9efcfaac76384cb894a2feae9d26de7591d3d29c59226924

    SHA512

    798845a25b069b8392de34bcaf8c5a65ed2bf532b71b75063a0630ba69b0b0beb3d085cae5858d6919c5e91197b547bc4a58a336ea6bf1e1502f0ee2f359ecb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    36cabdb764b72dd91dad9e7c9e8783d4

    SHA1

    56f0e7b2ab83e9edd8629e92037fcdadcbcfc6de

    SHA256

    ef70120176daa94b7451df8c1cdb72ac8e0846fd21b52fb462d44ed34bbdf5e1

    SHA512

    952d80bfb34d6dfd484fdd3474599a6e19fdcbc1f889bb68f9c19c6f185be0c4b696f333bb721249f822b1fa0f0266c69ea7da42db6205a31e1c5759f3b9e433

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    031e0452a3f1017ba77ecdcff352849f

    SHA1

    765ff7d226f692948b30fed3dc333f34f2dae9aa

    SHA256

    fc95d23a775401ad7fceb822b594a3a74e7fb23951877da5b32910ae04667137

    SHA512

    e0e677001816874e7c4172f857d3ba6eec754d076c118cb4cba10d7f2759968aadbad2d487b6e27993b3644c15ca1abf7adec0ff70a39e63b010882bf935d0f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0102e80bc818c0672049c9cdfed7426b

    SHA1

    91e02be84b4f33fd6e0bbdce1e030d2ad6524b46

    SHA256

    fd199a182d8c5e2af1d0f1803bee51ff17996e0e2f389fadbe81e6d9bd131ea7

    SHA512

    c47494c79aff79b7062f411fe4156749bbb71d6febc07db61bf5c154c594ef46af76459a06d646d34dea60cbcf027a35cd93c3e56766dbf0aa0fffa8696c7823

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    161fe91aee338e4bd6b3b88fced36651

    SHA1

    dc653fc803c81a2929beef7967ef161d8231b5e5

    SHA256

    b02310a9d9b570e7fa699c724be031863d03b6b88d24e74ef8fa84aa090a073f

    SHA512

    f46903d220a1a81b7695befa5e9bdfb312462d91af8455eca25c0af2e5be67b0e14b9d58374cfc4c1435d51db212f0f4d6a4d506286d78dafd17d4877ce8d649

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1067009b2031cd10fd6e7d7ef76ce7fc

    SHA1

    136e53e7f80d5b4301793f584ce482524510b12a

    SHA256

    9b45527b4d55e257397baf80fd5b94c9c8aa07f87437405ce97cd7e283a4b188

    SHA512

    d990606fc401588d4cf2589f1663463423a7dec703b087c7c0c5a204c721096cf2734b51804e60527162bc2531286c9df37babfe91dad975bde190896fd34776

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22ccee654f72d9bc6b914b55dc8760c0

    SHA1

    323b9f859642d68beceefd17487940cebd5876b2

    SHA256

    7370cdeacc191f594d2019e6efa5af3617a06cf83a153b11236279228042c211

    SHA512

    1093e105ee68f482561b058846ecde74753c7e6eda086f6b23e75a81786f9783a8379fb061336167a3a3f5de043fcdfc0bceb0bcb505d6bc983e228a072aee06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5576fe9d2efcfd6131d17e93ad8664f7

    SHA1

    397adb82001ca1196ebc8eda918b8c527bf90225

    SHA256

    1418fa06c2d6975ad0f9d52637e036dfa2a6b0929d85c9b9f9742477f2d5ec06

    SHA512

    c318f5bb23eb4c6f2d6589dd1fbead20f6ff70fc71f546974b82c02b85f493bed5b131f3c0290e4b4964761fe64b3195a5495cac9d31d2f6a8b5b7584e2d6cd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1328291d2b7059278bc35e5be786250f

    SHA1

    80e0cb0fdc2ab2dea5274ed2bef1adc320826fec

    SHA256

    76fca0d0072466166065676800f441a9db5dae4e5847c1808a37c7ff42c44f8c

    SHA512

    45e67761ea1b1e209e2b505e5ec7d2e6d0ebec6cb7369a44f77acac18be09deeb47461d36190303859e1774dbed79f8d0261f65c86b015d50d40fd709a8c2027

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    480B

    MD5

    44edc583f34461d09bf5afaed41d7bfc

    SHA1

    1452eba750d48cf53ffba38cd3fd4458d135fcf6

    SHA256

    dc3829f67f98b1bcf350fc203ca27e9e76ef7f4bf4bf6be38038a2c2dabc0b51

    SHA512

    f58fed84103fe29be48f20d92462ca39ac9b03e2d47788c6d318b10883d8408e1062254b6ad771e6f7c062cbef56bf3ff9bc4e150050980e0aef7d90ba95d9bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    bac83699112230907bbfb894b964c196

    SHA1

    e295512850f2ccb46630ba9f6062e52bb0457a12

    SHA256

    f290d09b5ddf766ddc8fbbcacd802b9414482606c3f645bd22f558a79dfa729b

    SHA512

    46e8cc438f02d53c5a202e8a3ba56df8419b3ceb1efe477e5d490ff3997135853d0583054bab9d45a9f381ee48f208a99336be38e1a610f318c226d95583c72f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L9PN2QMY\e93d7024558d2ee595265c43dc1084df[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\Cab8127.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab8244.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar8116.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar8268.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b