Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    137s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    04/06/2024, 20:56

General

  • Target

    963919e7c85e73999a331627a1052a77_JaffaCakes118.html

  • Size

    32KB

  • MD5

    963919e7c85e73999a331627a1052a77

  • SHA1

    0dea738c9e2f67ddfb71cd57974c430092f6c4c9

  • SHA256

    af136089656b16ab97d4955c67bd580f6e6c2e5fb738eb82d810a9e8e6397625

  • SHA512

    df4ac6442f79c99b844da2516a39424642fa5c53df5d1f4aad2f3cfac45174b5dc30fe157aeb7346d4c10b4c6ab02002b7172099d61f0407360386d451a98c48

  • SSDEEP

    768:SieiWsCvN1N1Rq3vbB46JPSFk3XTmzXCCXUqwdsbhbALCXTzqXJPSFsbp:SiTReN1N1Re3XTmzXCCXU2hb+CXTzqXn

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 44 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\963919e7c85e73999a331627a1052a77_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2900
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2900 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2420

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    3235072b049be1903023993b19c995de

    SHA1

    a08260b9b022707b9c3bed024a1749414b5f33c7

    SHA256

    7b2fc25b1920dbb559890482ef1cc4d8aa481b46d3fc8a46e2712afbf4824666

    SHA512

    89d81cb8e8c4238cb6fa473dad344ccb229edd33a4810af243958a7c20deb78ebaa50617bdabc01673e74b82669c4f624c45a0beeff2f3e0a8e92b9f8d479272

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4010aac24d94c7c87419c2742ec5603c

    SHA1

    8f82856d0b139aa36fc6988cb15c4d2246401053

    SHA256

    d6eb929bd042936ef6fbeac88f3f3d79e77937dc96e392c9dab9ba0745799a04

    SHA512

    c12df87facda6c2bee415baa1d277b42d1b0f56f78fc0f6a64acded6046e8d251a601fcf901f75a59df729763902d6055c7484693c8bce763ba06aacadc7bce3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f58d0f497d7de45311dc91c0478e862f

    SHA1

    eaa05c03bb73182e97ae48c81201297dd56a886f

    SHA256

    604cd0d38ca74e02f65da488e3b8970b02c16529d7f1a05c3cf39bb448b07d24

    SHA512

    afaa32fb6a451aaefe74725a4dcf14093e3b6002e0ac60ed6ae13a5a48b0f8816c37af82c5397ad61cc85ed37e90eca76d9a1b83254b0284cf42186ee0d1608a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e286d4946b2aa69ae6e920aa69d2c84

    SHA1

    d7fe57dac0e9c9926cdf09731c3603eb44d47939

    SHA256

    e00a24c5c193d0a7f8f8bb114fe7ac37fb37e8785488a1ebc83b3118b831edf3

    SHA512

    fa21fd9ab7d6e5f2a987c357f5c9a720245f835c11654b25b902f69cfb730568a8abf4674666d2cba6f609e5eb2bf985b1193f6166df962aacb61b387693a881

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5893f330e7ea47670f1a8e21312da9e4

    SHA1

    7d9a099ca48ff2cb4c4dd934364f13fc9f3bc03f

    SHA256

    1376e3da10017542467d2dcb104c293a99bc5c4c9adac6962ad92b5ec4506d06

    SHA512

    38e2fd81eb99dfe9b532f663577fee49fcc9a465e597b8acd489bc176681733b1097d89d118acde8b9938664461c8feed9b21e2098cfabe803d482460a819a9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    210547174e9a0ff4760c28b3ce5a5643

    SHA1

    59808bbdfc4558b721b3ecdc4f06570003043e1a

    SHA256

    41131850e2dc8167e98bc9adb5c934784e25ac6d695dc3a60610dbecacd4452d

    SHA512

    b6fea6ccfb6a43b28419381627af13c2c40f22378280bed118cc8420fa97b2a3f66a4e1bcca55608ab2ef32eedd79e89bc14f5cad3c9cd6a33dad11de2989dd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc95620b6345f57421e5de972f7ddee2

    SHA1

    5aec8b6a56bfe3939e4380d8b3c88bf08e436e6b

    SHA256

    96bdf23d913d00f636020c8f5411f049dd53610125d2b4c54a9b26b53a509e3b

    SHA512

    9cffbfa331c528093caae5645d68795c5c491b1317e2c14ebb7805c04ff2b5f4362951de04f1000b4b3f5796c446f593e3cc1fab5811bf9b3a94254cb1e0d091

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b263c5d9fa368891bcee5e7488981c1f

    SHA1

    d2cc8d803f5367d00bacaeaa6ec0c1f7ad457cc4

    SHA256

    ea0010c244d69dba7d7cc33642b2cab9c80ad766037b752b1e9da58495bef6f8

    SHA512

    a1cc8732ceb60b2f2a4576152822c1b07c2d655bd095bcefe217bdfd9847454e6b9bd119ab4a8c9e982a87d05676b0e99277aaac5ced4981214046dba30f2456

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    244deb46ec1ba7840632ce6c707a25b1

    SHA1

    ac478aeb6ec08e13870c4032e96c0880d269311c

    SHA256

    0309223dd85e1b3ed4ace7119859b20ab5521ea3af9d641551eb90aa3d14120c

    SHA512

    71d9245f6029810fafbd9152926010332410b8b91428d54916000644588195b687d7ebea63444b6174737c278852686c58586fc8a40736d3cf798226f166ec9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9d0b0dfa49c146f4bb6485f32b4c45fa

    SHA1

    f4d838049180e58699ee9ad6aec202686b02cf8b

    SHA256

    4c9cc7ad89b4ef6bb9671af526353466422c79410f41364f18e4ba5215bec805

    SHA512

    bc3b9e24e6f40b82a48f3b194c9910e832af38728db8453b5afb681ac849a31f0b32846a18eb159213af9da5dfb5f559d51d0e79fb4b42d10d5c5a07367913f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2626c9ee6d382bc3e9584ad835a554ef

    SHA1

    4a2d525fdf3143b4190791004fa932d8f7b26401

    SHA256

    9415a857016d84bfff16d478e0c2b3dcb5ac9fd9e2d5049916d216561f3961c5

    SHA512

    0a4b00e00acc1a93fe6ee35da98bade51e43cf06ca27be948f2466eb0dcb106babb4640120762a7db06d449994017f3bbcf67715b2c6d32abbf016ec3563f73e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f92aba6dcb03c54d39c73a36bc19aa83

    SHA1

    b60223db09c48f8609ef1c7b45af02f56612fe71

    SHA256

    df315cafe6f8a0888bac180f571623d1c3528ed7f657dd41d7242af4bebfa45f

    SHA512

    33d436fb9f10bbef97a67bbee2199d8d6c3edc16969f33f25d6352e671d83cceb13b1ad462a546cbfe56d2b3c8de1780c3a45193df25166c3ca014a760c594c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b2f0e0050e23f9cbd7dc60f5aecd508

    SHA1

    576c9ab157821245643439b76a53bcfb7f57169c

    SHA256

    6df685dc3fd492954da93996a0fdaeba41ad513516df58d2f37fb157a6d59935

    SHA512

    85129d88b9e9056e95f9f735d2dab0af43cf80aad309d364de0d0de141c91ee60365f1a6a03c2ed9a92044ea28bd4b0632de840ceb7195df82c7750c2b59dd43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7c596bde7db20b637511ac81d0ade99

    SHA1

    50a0e529effb8289492f3064126e24c4c5092c7b

    SHA256

    ee0d8336e1b2c90b8356f68add9b4bc100d85db3532d455dafd83386b53944d8

    SHA512

    ed54c3a52d4dd815b1d77bbb9d9079a080f5f2984318844ee297b6da0c5a20af53061c55aecc1398513c6ab8385fe80705700836175cac9acd098461872d8284

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75329a9dcb48e48b2f6a6410bdb89760

    SHA1

    3e09823895452cbcf4039934307a00198eef279d

    SHA256

    f1bbaf1aad266a3ec419d19a4ef459c268c02ac05fc3869581271970a5c1c2a6

    SHA512

    7c181678c62439e3acfae0f6e99496937306e8b11c56a3eae134bb47c9a39f49cb1d5741aa7020fba4a9e010a5541c5565c27c9eb9d4358d64d042f816037856

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0be3d2162a46ac3ba65e28b555e9f185

    SHA1

    74120bb1a152d724c5f814f46f339f68275bfa61

    SHA256

    7fb67fc0674a26fc579970c3925990982d62b997041f9eef4e815997a333ffcf

    SHA512

    b4c65ec5d7a0662088a220be4c89e1a390c99b0e692a7e2e38e39bd27b527c344c1451c06135c77b91e28f3bf2bfdd0546decc0534114f783fed91d012a8b9e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b12d27bfd0d8c3f2c3c939b6972d43b

    SHA1

    db10e84d2d54a3596f4fee5905e7528c0dbe5a72

    SHA256

    54bbfe0673515e340159cd02a0dc69c5ec832145bd5b617db32bdd8b3901e76f

    SHA512

    0b65e485c27d00ff2c6cd1c1744d625827f082fb5b088c686f0c4ec73347c28c7d0a2bcd3a05cbc4206aa6a609a6ebf2ad1f33ee616ab904b773bc4e72f0a08f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75fcf2bd44d5227db4a730256790771c

    SHA1

    6b4a223130e0e81278c88fd343ac80932a80c66b

    SHA256

    78522b82369ca15770511008ccd6bb33c4f95b2cc4e70064d88ac722c5aff3a1

    SHA512

    e99b38973b1ea4e1403c069a0091cc730dacc407f9aaba3e938d7b0b1c70d00920382f3aad666eb47dc61c0b1f99a45318300b699232a97d18b217bf17b2d5ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    357da2a875596c0794ad2f120b5211cf

    SHA1

    f3e5af14fdb4e84307ff939fc1e6dca71907fefb

    SHA256

    dc015e15cb4e807ab1547259df4b000a90d94cab6b5f0cdd7148f5f5156343e5

    SHA512

    351ab5318859ac23b67f9d9b9ccd81be05c1061e5e99838d9b91e9101db7167cf1600d768c1c824a0bceb3bf883848257ff8ff35b6d09feb358f4f04151d57c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    38ab4207539eb967c17958a67a0dcbed

    SHA1

    f0a01e2932311f1dcddcd68d21404f0376a09b5b

    SHA256

    e5b4e9fd866f10dc100103d262586f4605ceb05fbd94715cbf038e5416187301

    SHA512

    7cc13e516afc7c5e0578a0d14577bd7f76949a92261a7a8a6ecaadc04b4b053c93fc55d65696d01cb616b7b7cb1e2014b4dd94c5f9541801624e4e6f601e590f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    86a361d5bd4fed443512d5471ea360ac

    SHA1

    f8d5d8bc3d1d5630c2ba2c35122e0bf2600dbb08

    SHA256

    aa2083a8e883d4940a6c9b909b5098e913809533e727ae1dfcbed3aa9a8a82a7

    SHA512

    a64ec095bfb621ca422d086bc7fd087bda507c9a19ba1a185bde91394104167bfa076da1b007e8d0b12d06a510611c0fb9dd3b8d679541750f9e848a80149ff8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    2e9a599b4ee796416ae0b67095968f5a

    SHA1

    1e4751691f4272948d154d2b6b6cdc032133184c

    SHA256

    fc95df08ad3220a2bae52d1018a5bf62bcd327f7c2c1c9e63e5d7bf570fda5ee

    SHA512

    9da5812c72ace4d315837648045d42a8fc7c544bb5f312bd820cf30a209f7e20d5912bc73c3a54b932f602e59474e7bd504573d3e24a28fe7ca05af435ee1176

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OOWQLMJV\f[1].txt

    Filesize

    36KB

    MD5

    15af5af553d8ae8088f7a7a633ffcfc2

    SHA1

    14ee347ebe0b0eea00a0739e1e586d3e882c8f60

    SHA256

    52b1eac40418169c672b4fb4854bd4a3d9aa6659fecc4cb4ba2a3e38e924415c

    SHA512

    baec823b08ba85d669e0ea307879a78977c63127240cf8d62be97230ee09a0670701ceb4e03703f718e932def0fc432e0408828ffb182f1be2761a5aaa0cd864

  • C:\Users\Admin\AppData\Local\Temp\Cab36CB.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar36CC.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar379E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b