Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    30/05/2024, 16:56

General

  • Target

    84d3ec41a6d1510dc3d699ef6fc3acab_JaffaCakes118.html

  • Size

    297KB

  • MD5

    84d3ec41a6d1510dc3d699ef6fc3acab

  • SHA1

    50c74fcbc7a1af4243b841d8d76fd7c5ef5840e1

  • SHA256

    2d9a6bdb01fab6c4678bfb4b4a360011fd1614d52bc946689eaf696caed8dd41

  • SHA512

    01b53329721771268d177e6e4f78082a684c25173e5a0cc14c24a7aa2dd138203eb74f3a9c19783cfe1b205adc62de9ff886764c598883be24849b3e70a1ada0

  • SSDEEP

    1536:uD+SbTTF1SjT16NkltM/jVII3IbIre0uimZTmg6o0AtLkQnq0uIJLnvqU8UtE039:s+SbTTFA6ItCVI2QyAtLkQ1upscqiTCH

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\84d3ec41a6d1510dc3d699ef6fc3acab_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2960
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2960 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2184

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    a1f939206fe6fe5a182e60eeecc38caf

    SHA1

    587d167f19598e7343ce201a602df58c535a0ae4

    SHA256

    4ea1163f893f902b1314e9abf9ec109aee858162c33bb9e676ebf4ab724a35ea

    SHA512

    eac4818bec16dd860fd31d63c0c83fe18cc0866a2e7daab4c240fd0c8ba7b36a4839d3cdb04362991ea57fc1c12cb69f8320f87066e6bc37ea91551875e67129

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de42b356564c0a724cc331caf2a7adc0

    SHA1

    3c0e6874d13acc85b9128d9f12d32e52e85a9f79

    SHA256

    70c14d5788e1f9b55c27effe169cc88487b9fa278bfbbfe272b68c5b36c99f0a

    SHA512

    98ab0c69982f810ab4bd124ad0c73e3b8b774239464f96cf586deef9afaeffdbd713aad3462e4d92390da9b67f111e57de73b42d75d91650a122ce0a7e983c42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35749f0a3aadad62925fa43a12bd929d

    SHA1

    0a6299a4a7ea3351f58bb78de8ce44193527f29c

    SHA256

    685c668f3f48dcd44379bfd3dcb28f428ba5392a84ecc7238fb158a5b38dbad0

    SHA512

    c0f3e7c6c955921b285459749626696861c9bd79d1732f23210416bb1149b3459ab22caa51e49d883989f3ba5cac66efd5faff0d0ac745b212ea27cdace31900

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7110d8119166fbe44758916c6baecf6f

    SHA1

    1c5b4ac97ab20ac4b72bae17a2b8453023a0e1c3

    SHA256

    a03710db262de35b79e0250d9843cf23c5840f633574a681da7231e3a2c60e50

    SHA512

    372795f1e55c66556b0f7f76b0202782a8da6e6ef5b9ccb98f493ac8ecd5faddb6c7640736bcb0275e2753393fc11b2cbef4095bb7b17eec73f4c91811b1cf85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e9d0beba5731ffe32b1890b74f0f7f9f

    SHA1

    fff82adb5052ed14e441edb6cfe7dc9e83d98262

    SHA256

    a95776326de426f0091d38d26ccc1eda52b58a704e78d82745b14933fb7cf2ea

    SHA512

    2bd1bf533c6d4b7ec6dfbb21ea5eeff24f5f5172911c60564a05972808b804cfe2f61e056f763f29ba2f23a8a711162081e51ada140bf709469cd06ea4dc997c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ed203c907083c8e5a761df12d7a53c9

    SHA1

    979182542eb41ea055366533d27ffb0410645e59

    SHA256

    6e397fb84b10422c789880f207dc30c5d99bc2a9b49db19b1d2f99ebcf1e7aa8

    SHA512

    ac232c28ffc450d38123eb660cd44d1a76b211c6f4e96a21bc4394645018a924e2227f75af3caadd0ac211295fa52161466282ce0a4ce0a65d781ea493392f4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b793fbc3561d4e31807415584c3bb9ac

    SHA1

    78bd20638a1af7aa9a0de7b8c2e18192e25c2d30

    SHA256

    fa05b7e1f87d83c25a6080a741dfd0d5adac76ddb3f878b1a4250131933cb623

    SHA512

    cc86b0ee1b199f551d00ec86c5da4c0b24d29dd8f984a6e3b431c64c2e0393f98dc315d9f5e0d416dbe34a4024d986090e97cd0b71c7f9742ebfad6a104ddd88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c328951c4d2b5ac24a40b5308649ada8

    SHA1

    ce4f6d42abdb377daad73c8edc142bd925dbadf8

    SHA256

    a7610257e6ab0225a04f509457bbb28d76d7c699eb5189ef30acb031630e79b9

    SHA512

    a948a03a50d54d365235eeb1521004775d638851e3e99ea1aea5c037f730c0af1ea53ee284ecbf2a5917cb78237d64a41e22b653d3d1bdd5444f7a2710a589c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c096db6f2dde369518f0971aa361d633

    SHA1

    5abb26d5addd40f17cfd77aea92f450d53615bed

    SHA256

    bae985ba7fcd77bf6d9f66d6c9acd412d815fc089eb9076f79122d2ce7da29c5

    SHA512

    5250f57403f77f8a4fd3403eaf5688e25c44eb43ac55e2fa1a9352f16243d72c2e4deac054457981b41adc7852c4cf60e02cddac6f69e0c49b962beb2a5c2720

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d77e6e2d68a4d53fa0903b72ef6c1f17

    SHA1

    cf72fdcc796d45a833c508b88e0a7f569a25f21f

    SHA256

    a492891c84451b42027cbf0e2e4429ce1b190b34742a975fb13b3cb58873e506

    SHA512

    77b52f5be8726a4342d346bf78a5b3198039783d7e5484f16bca9ab916657d59e0e00968f390dbe0ca2c1d4cc98766bc03b4e473cede3edd9d1dee668183b5ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e0016f3c75224823cb5718f9ffdd011c

    SHA1

    4517a3fc33352b3007af8f989633cbf1826931af

    SHA256

    8783bf83878e42256519fdb679215f7967b4f5cca884656c32981ed631af3437

    SHA512

    e0b8b91483e8a182d48fd476d4e76af95ed58a1f874203ea602ffc92c0cf3ec711688a9950e8f6a75f6ea002246782a4d57fc4fe18eaf998e43dccfb09e742b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3032d6aafe8d0e59089b66523358a65

    SHA1

    bd5724ff1125971b57fc0773a453060de01e9553

    SHA256

    ac7383de0ba7095c9ca223d29ca82df6958b52af4560bf79fc4d3b28e2e7e0ae

    SHA512

    2e075a28c686fcca776efe1ec88ed67d0aad6702468f5655d9134aa416fc1f1bf64fb5de82de624bd1db379a1657f4960ce6086acf61b1b05638515977702ccd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d1d3b11dc4fb9601e53838340b0759ff

    SHA1

    f8277966c368acdd5432d85ab5132bc574d1992d

    SHA256

    f6c3ad44fcae2e70c15cb6ce0fc0b77a3077822ee9aef698aca8dc586f3a9310

    SHA512

    cf97940abcbe24c8e553ea9818bda95c838c1ac9c0e34c46d1cd2903eb8a79b9148c10609267ea3a576435034f85ed54807cfda8b8abde3be78ea5652fdc2342

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c1bda73d56994f6c0403c541c65551c

    SHA1

    c4d3aaf01153624996ab8a3078383f1915d7f17c

    SHA256

    d9b5e44995b8e88f18b04d01633a928e63e85c029efedf1ceee6b3aa9b26ab9d

    SHA512

    d3b6430e81a570bc90582d4c53b442a6259a52b074e2cc9d6e993778596ada27f06698d8f57eefa928d449144883cb4b5d118562843f4b39ea549da30a2e3279

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c0657e0c6151affbe8e8c0633ad02db1

    SHA1

    f9c2b21ba3a2a5a1c52446a0e4e4636e17e4b7f3

    SHA256

    f77626a6ffae07dd456a3e450c3e69f33fa86b3f5b33bf2eb8d3f4e661a2e8fb

    SHA512

    26214cc82ce36b22c009743e2902584524f137bad75170627b6c4c19379faa81410ab1b7003cd484d28aefb8e450878d36a4cd394c57cb5e09269302b0485f31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a7a52f8ef386e43a1994015222071fc1

    SHA1

    20ba9b08d2dcbe5d30baf2ce7fdefdf22fdae49f

    SHA256

    71bf57ec4f1ceb952df779fe4efba335be9176950c203c085003772ccd9a4ea7

    SHA512

    ea8c1b73bacb6999f61e151734429a90d94e1fd8908ba316be9dc8f1e2fb34ff66d3c7141589df40e4f3a31be9a3e50af18e534a04ef27893e57ab25dafbee6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    508dd778fccb37d68ac0917ff99e80e7

    SHA1

    ed052c4500e1853f4ed5a84b1ec53b3b25536da1

    SHA256

    89a4ad477261a3c2afb3197fa28814b5fb830d8ca9c340136a25acc301b78d51

    SHA512

    fb832a7cb7cc08872ee5e177025d84ed2a0899b031f977df364a204e6a23fe85efd466d91a9f707ac89b786b1494aa37b22bd5b1ba1419d5217f3cf3d4581676

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d215b6a7809d3dc78f9f9246fd6c74f

    SHA1

    0458c7d9f3f2390be8690dc49ac369a432e9c20d

    SHA256

    17ea34dc805f8a0fe7638749289c5ebd29814439e40680c7858d2e1afad65584

    SHA512

    82735788dd00286f1bf5b8dbb8751aa4edff3693f5cf8e504db98b9c0edeaaf2c7d0dd3286484f3226fe8a9c27c7b29d04031e9f6018097bc863f69ff4c88c51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    59912e09dcbebf636e976953227a6283

    SHA1

    4bd34e96345f2775e184775a138618f4efc380b0

    SHA256

    b5675285a62a7e335f969d936d7599e0edffd74b916f96d997ec1917e379a6f8

    SHA512

    f297abb3bed35ef9089826d16b1d7402cf7ee6a9480f3fb7df457191566921512960c001eee0089c7e62e028dc6cc820d8ef0af1bd93e749f756b8a69c14d9f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e5885d97955e0f51ca96cfc249e2695

    SHA1

    9c77c677010cee6a84ac6ec286d596e67e8310c9

    SHA256

    75883267c83d556990cfe41f525392d8a995d209a3b538858f8fc69ab993ffcd

    SHA512

    1ebfd05525d00e952b1ea12f08ddfb2225518a4ccc39ddae822be2a7fda770115564365b1752901e9dd1c41a921069bc28a357330ec507e3903861d7693a6cd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f65b68689da4e3e40a125d9a282a0a3f

    SHA1

    e49aa3c1ee4cfd7465fcea3f5bac3972a7138cb5

    SHA256

    a33eac3af917c37454f6f0a937c338788cff61580f2475b646712366778bac81

    SHA512

    6ae47107918dda9de5d9839db0d4fdd7581f9a4e19d17d8316512203ec3fdc4a109d3323bde3899dc25d421543303ffa07efb0ba9897246fd59085f216e3014f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7295a0b169e24550b98a32482bb3d522

    SHA1

    2cbc0b787aae581b99b4a1b4c973e85fe8fb32d7

    SHA256

    a59db198e2b2b42e9b3c3786f10a70d305567c636bd1af9294fcb6c7cc18bab3

    SHA512

    b4802738326f568f7167c70236feb010d91a2274d9cc5a1aac97b0eee1fc03ef006713aef5e5ecb0fd68ef046d5279ef5a5850402235f0c9ed1c55a3cf8a8fab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    397d7d57a45901a307b17896a8f62657

    SHA1

    9e32d4cb4b2faecdf86d16e0e3e73f5df3657795

    SHA256

    d0a1905ebfeb6abf62bb87edcd7141f32fd6c2b7bb1ac4c67e2a6dba5175c5ba

    SHA512

    d6b014c823ff958c5c2de5e8bbc876e024bc09afb14a3a13dd4020b980607d74e0361e2162d8d8c8613865400bc5ee67c4c7ba5dc8edb1dfe3aa6bb1b3ae27cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    40fa25793ab31be1f1d23d87f4a46359

    SHA1

    8a56dc77986150b8953d556350dd3ff26d3cee83

    SHA256

    6b1e4c46647cd247a30d49a9755716b5f5c0f05dab51efde65e08dd06affffd4

    SHA512

    72633f2cd886523ac2b6cf7ea1e9990c57003da9c8c6face2aa786ff05007de53f0c99e946401eb71e9295088ee9b2cc58d21775cab64687e6ee04bd819fd063

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H09CVCL3\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    23a7ab8d8ba33d255e61be9fc36b1d16

    SHA1

    042d8431d552c81f4e504644ac88adce7bf2b76f

    SHA256

    127ffe5850ed564a98f7ac65c81f0d71c163ea45df74f130841f78d4ac5afad5

    SHA512

    e7c5314731e0b8a54ab1459d7199b36fc25cd0367bc146f5287d3850bd9fe67ba60017d79c97ea8d9a91cd639f2bc2253096ce826277e7088f8abfe6f0534b63

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IW68H88T\cb=gapi[3].js

    Filesize

    64KB

    MD5

    63e5a0b45632b3dde3694ffcaf0e3f7a

    SHA1

    923736d0cdc308331d5cfaa0ea159bfedc83d53f

    SHA256

    889109910477919b3457416e7764bcd0add19fd959848253026125c7c35c43db

    SHA512

    5b886c4b5122d61f0209ede748aa84445c9388cf38813316c41b3dbd2308216e88394d9a45cfc27113c0cf3bc93b9c37d808f6d3c67888244c176ee095d42259

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NVDR4C1U\3604799710-postmessagerelay[1].js

    Filesize

    11KB

    MD5

    40aaadf2a7451d276b940cddefb2d0ed

    SHA1

    b2fc8129a4f5e5a0c8cb631218f40a4230444d9e

    SHA256

    4b515a19e688085b55f51f1eda7bc3e51404e8f59b64652e094994baf7be28f2

    SHA512

    6f66544481257ff36cda85da81960a848ebcf86c2eb7bbe685c9b6a0e91bca9fc9879c4844315c90afd9158f1d54398f0f1d650d50204e77692e48b39a038d50

  • C:\Users\Admin\AppData\Local\Temp\Cab257D.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar26D7.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

  • C:\Users\Admin\AppData\Local\Temp\Tar277B.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b