Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 06:50

General

  • Target

    89a96c501ded4ee41cc57da634dd46f5_JaffaCakes118.html

  • Size

    46KB

  • MD5

    89a96c501ded4ee41cc57da634dd46f5

  • SHA1

    ac09cf671c4d5e5f46070142c589d90b67ae9bd7

  • SHA256

    64a5411d086abccfbddb3c9f1b2f79d776b7af8454f312c2c3c0587fc7735cc0

  • SHA512

    10daa771223939339ccc330119c8e579d00da020cd0cbc5c59757b536c6482fde9d04b3deab7da66d6aa16003d7157a94e597bd55e922b5caf0be125bd379886

  • SSDEEP

    768:S8tO17uvqCHCQPCSC0CtCDjb3zr0NLbbGKTw:S8Auvq+Hl9gSr0NTGJ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 42 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\89a96c501ded4ee41cc57da634dd46f5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1084
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1084 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1132

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    171a82f9fe70ae5eb3f11178562127ef

    SHA1

    181cd773bcbd35751a4ca4809f6e373de908d2ce

    SHA256

    9ed7ba70f22bc7c64ffabf2689d87814a9d7c818c19e9c7417f812c0df96d325

    SHA512

    f1d04045fdeb831753bbe376c0e0368386efdef7f330f466e360b25f9162734aee53cc4dab372cd739a5328812475e46f008b3e8067590d9d4e491287d319bd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a1eb82830f88cc1be0aadcf2b480fcd

    SHA1

    3171147206f899d0ea4fb8999ade143ccb164e9a

    SHA256

    97780222f121eca70c39f45d08372f53b4965709090059738295b03ddca0b43a

    SHA512

    9d285c9bd59eb660c815dc589b7de76315ae5abd46c4f78b9f150658efad67c5b5d4e284ce9e95a09b57a6c85d4d893277bb97f72cebb6c5dc44deb4a0544150

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70418b95aa259502a94429669bc44661

    SHA1

    34389ebcb45a2b43b9e832c148ab70d84cb2e58a

    SHA256

    a3f8a2089fa76058f991738e6971770130648a4ad7682369f61da6eb21ecd9ee

    SHA512

    14f140883bf4d3bdec00b65d6b387abf4959e559232fff679603cd04dafe07636332e85114ac99221a1ad3776b29131880108bfae6e09ec28c1976490f8fba50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3aed2d8f218338c00c0963e0c6c96f8e

    SHA1

    bd87bb87999d661d48e37d931d7e9a55a232d255

    SHA256

    821f24fc507f6091a31d39b892a23e09b43873b1fbef1fece9470c8bb3a6aac3

    SHA512

    1cf33fdc5260b16f5192d67d58fdb3ba88ea8a5a934510ed1bb020d986f4f4785b83b15a1564da3737fe0b9c1c867f96a28fd3f828571764414ad6a05086d256

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c63c6a139573c311bb655b55c19dc2c7

    SHA1

    9e8f0fa3b3e8bb57571121dda8d8a02dc5e780f5

    SHA256

    c7f63d6dd2dd9e1506e78c24f074f8f2646edae2b671bda6b058df725743f4dc

    SHA512

    24c769fbb704c136890d54f289bede3d55def5016f5233da36b7e70f6129344e61394eb9626ee34bd70e1887f9e7fe68dd755952c61c621e780ddeafcacc08dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c993612fa8b1fbe823882dafb22f53f

    SHA1

    16fc525c3b11f09047d2b371535849cd5586cbcd

    SHA256

    1fdfcd070c78b0d64cbe0db514cecf45c795366fd3082ebc6a44e8a94a0aa2fc

    SHA512

    20d4e1fd2a3ef68b4001c255ea80a1d3c1d307e936483dc02f5e56db38be63c0269fa0076b1a0e5cad890edbf9286172c367e777c85edd8b66fbf40124a84fe9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    166184d191f36d3f22bf378aedcf0a8e

    SHA1

    22caa86bd4db690f7680fb2ce118400eb1087cda

    SHA256

    12ea87d72724ade45f3abafa2c3e87773d8c6f4d83f0778a7c24206cc2a3e604

    SHA512

    91020734efda6a79d213f11857060d259d77c0dcbaa62819c98965fd81a2656e1573e92d648ce5909712cf6020ba206aea729168839f0dbacd644fa35f9f345d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da50085b6fa6b3e9855ce4d376519b2b

    SHA1

    b29a15e4555ebfbbebc88d70840777cb97f92bc6

    SHA256

    e40c40b4fa5ea5a346d29cc19f7899c55ffcbc8c843ecbc8668e56342e18c57d

    SHA512

    cc86c24dd0efd229677886c4fa7596bcba76f09b4112eb7fa52495e87913dc5e1aa30f7f551ff519d45b6ea1d6b91083c24327c65614d50be4fc6437bf74c805

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ea9e2cf39322fb9739347da5dcfa037

    SHA1

    001aef14367516456ec370f37895b4df043f5fd2

    SHA256

    ce3cabf9d0b72250dc4d20f6fea68592ac301c87230cafdc3dd479e884194722

    SHA512

    584796175e4af5de50534c18e28e52d6dd383a7fe415fe5631e73cf99e75f29e4e0d2a52957f4e7c515b5e67258bf8e556ba91eaf1ddd2ad3c61bbd0d1a5427c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e4137f003eacc4e26cd9b9d9e643352e

    SHA1

    aaa87cfd72968b32bc983d8981a3e9e637a2bfc4

    SHA256

    e80e3ba513673bdfd42a7b993f357e833e9153b53934b564193d957310e71246

    SHA512

    4573d1e3011b46118c2caa028b64e26e1850e7e5574df43bc993db2d54e90d6d626128d96547c5ab2a44818e0768f31f28bd149cd9a1a7366d8e565de2a66f04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd2777b991d79670e93c53ce3ecf1fbf

    SHA1

    08b3c145fca8ef3695ec7a4df2f70b265b4833b2

    SHA256

    d575da9bd0dd3c64e09644ff163d20d84425cb05c82ee33d6b1e8acaae13a4a7

    SHA512

    9410f3dce56b0fdbd5344894385753e3801e0656479b39d320bf9b11ab1b98705021e0a02ef4c0f73e5d0807118c9d33af036913eab7ff43930ad4369f6bba1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f5aa8f66c8c16a6d2d991104ec1fa955

    SHA1

    173e97267a6a3db4996e68a210848b6d9e4af41c

    SHA256

    a498d2526605168a01e9f8a4917043e24940a332c050b6691926c8e67955e478

    SHA512

    9dbd68963c76103cda6c748c992f1f7aee719ec9889ef242fb3f1beb907080c3a3e7193f5f2f6a34ef99c5f383441c56b44e3504ec6d57093bf65a8c0f8b015f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e06002c7b489939278b8214fd1a0f07

    SHA1

    3334b895e24fe41ec04f4b9c0e9c59110b6e912b

    SHA256

    2c2b76d830a13b70c2aea0e93b06a4dfbf8874e95b51f4e304e6790ac6704f6f

    SHA512

    cbb8b50cdf4755a94c48f13c85f46d153ab71eaaa17d88972ebc0ecc8b638f937e778aaa09407ce4bae822983f6f93db25af4f1c4af7dda8409fae43a6fc48a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f6e3f6fd949f1599dbdccd6326607c1a

    SHA1

    714267c910319ab5d185712888348d39a217afa8

    SHA256

    deb4fc4eb79b0972de734095ccc9c128bbc54a63f2e1da1eb24f7d2a2b1c639d

    SHA512

    1d5c1922888e12bc8b370bbdbeb520184cd8d9fab02e3ae69f97306bf3f76e9f8538d85ea976189481ecdb4a667c88e79de1b641f63dcdf65da2089d0063d011

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3a61ab04a4b90d35341c3cf5c9f10ad

    SHA1

    789baf33db7d4f6f42d2f8d8d0f4aa0aa26ae181

    SHA256

    a1a69b802f344b61fd1f4c37050423d859a986e55be29f96aed8c954e5ceddbf

    SHA512

    ca1b125ee0f435a32f736819cfc86b37ee0fdf47c57338a42290496b5b40695b23d37ef0917ab7a1182dcf6c2cf8883aa363916afa1813a74c52dd59292f880f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3fd3fb8b61a2e88dc99b3f306191efb9

    SHA1

    3061084b291e6e3cc421e2013a7d15a21feb3704

    SHA256

    418998510aecf1da55b9fe2e6f18e3f578e5af2680bc416e8380ce1566e2785a

    SHA512

    f31e910faa4004cd33b6587deb13b393b45eda584e9916550673c12caf1a3cd4a7bf2c070a62f7716bde0f5391b40b1bb29e0645aa3cfdb7e75e6b082dc4f770

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00d1dac4942a496e0207970e7c2c9a41

    SHA1

    8ecec01c945ef07df1181fdd83046124f0b8d8e7

    SHA256

    953899ffb986a0ece94ecb66aa9acc9b3348f161f230d8dd954b7edd04846df5

    SHA512

    dac9a062dde13b4bd77b5cdcfc1e234c61d26fe71c3eb9c5d4ce2788718a01c15d4d5ecca87d78a2bb8a60c369bd51ea3593307f3796383bda59cfdbb1f324aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    118814d0ce2291155cf1467e47f5cc56

    SHA1

    3e45de406267b10fc009b30eb8023dbd3715a898

    SHA256

    4506ccfdabf1f3936483ee10b0f5ef24edd8f584bbee1eae60ab4582ecb763a8

    SHA512

    f678c14b24c427481e22225ad747867f3d72d3dfddbf8b33ae1b2f40a29ca3648bb5cbf48148242152016ec712eea744d01d011fb0cfe5823b91ff386d60245b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75ce7e4caa7ea74d8f239b414c12a710

    SHA1

    34a8f3090d86ac6801cb483c9a607404cd11eac7

    SHA256

    b1fb3e0a20dd6efbc110c97de4ffae0441e9e26dfddec825a03e07c87d73f841

    SHA512

    8365af07572eb7cdc7c7f7b4ca1c1c64c9baea3523ee3ea0c32395c07c771747d3e2f888d9d4cb8680ea66a9c957ed75f768f49dcafbe122650d9b095a0d9d26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    18191ebf43335fcd6b0a1dfdc161aab0

    SHA1

    e2590b6a50ff00a173ef7ec65136ad0b97c89ac6

    SHA256

    830145569d4b6b78bc137161844ede32e20c0fe55c0157e41e160fff6800bbaa

    SHA512

    4d77b552e34c41e8f7664b85a505602d15a5ab6418d637438c5bfed544a85a56994a4e10f4f374ba6c1f705b9870d3a819fd0e8a5f47f5e2a8655957d7031d05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a6652894e4c61d14e9381e974822252

    SHA1

    061b1415c7dab1dcc7dde61bb3ab296424dbba9c

    SHA256

    edfdea05925664cd13034535e78105ef33809ac84603df58e1024a3f6b3c9a21

    SHA512

    9a25d20d9cba90d84a608bfa56cfb6cae967d1f7a2014845facd7e85817c9880da44ea64a8432ddb43d29d348b9185fd5b7d1d40cce35d564afef76ebc6ddcde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa66723f7bbc60ab9be3fd38b5ff086a

    SHA1

    cc8a7616924e2a8dfe7a9df6df9a6f26acd7a10d

    SHA256

    0869ddebfccc6bd45b8364b703816b53e9f771cc6d6dcc02636d0c2957c40972

    SHA512

    bfb6de1778d3d6733f8418a3921722a0dfe2d83b38af438540c9f59ac077a1401ecd929d5e15861bde10a07e8b8b76ba0d2e1e8523899696ee7ecbfa435a5536

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J8SD872Q\3604799710-postmessagerelay[1].js

    Filesize

    11KB

    MD5

    40aaadf2a7451d276b940cddefb2d0ed

    SHA1

    b2fc8129a4f5e5a0c8cb631218f40a4230444d9e

    SHA256

    4b515a19e688085b55f51f1eda7bc3e51404e8f59b64652e094994baf7be28f2

    SHA512

    6f66544481257ff36cda85da81960a848ebcf86c2eb7bbe685c9b6a0e91bca9fc9879c4844315c90afd9158f1d54398f0f1d650d50204e77692e48b39a038d50

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MNCIS1YI\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    6a90a8e611705b6e5953757cc549ce8c

    SHA1

    3e7416db7afe4cfdf3980daba308df560b4bede6

    SHA256

    51fdd911dc05b1208911b0123aed6b542e9d9f04c94d7504c63d89ca259ef679

    SHA512

    583636571c015af525cddd5b8dc2ac9964aba5a7a9b0acd3908e4aeb4c2ee74cdfaabe49b0aa13d7b142748542426864e91e88e90d7f73bc647f0bfecb0ff7bd

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TTL9DZJ3\avatar[5].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TTL9DZJ3\cb=gapi[3].js

    Filesize

    66KB

    MD5

    0fe383a7ddb9bbaefc3105b3297f5583

    SHA1

    f80c9d789f251909c7560bd91a9e1b9a10c26362

    SHA256

    d7ad4aad4e48174c30ef21fc32c9380659d2c99a5c39680e10ed9752139d8683

    SHA512

    31de1f59377bc76e5d602d02273867ce750bbbccb7edc8f2803c0188002ecae6752ac3ec31c2108e64b0d871b01e6a8a06711969dc68bd9823303def0e7c1ee4

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TTL9DZJ3\f[1].txt

    Filesize

    36KB

    MD5

    8bb81f4f0a5cbf40bd07e52216d25545

    SHA1

    8c39c225297b0da113e3d80cd7955607892247b1

    SHA256

    d1b800646c396c6bf7615928bf4b8cef19ca8cb9b0f920bc9d76318a1e131de5

    SHA512

    deaddf6008adf04451a22cc922e074e50df1cb11c1509732f98f57efe289a8bf850f0241ce0bed62d6988e6e35ba9f8bda6ffd51477530cf2e2d715d4a4094a0

  • C:\Users\Admin\AppData\Local\Temp\Cab1170.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Cab11F3.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1173.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

  • C:\Users\Admin\AppData\Local\Temp\Tar1208.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b