Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    11/06/2024, 22:19

General

  • Target

    9fb97812bed49b28f1a422d4da25d913_JaffaCakes118.html

  • Size

    7KB

  • MD5

    9fb97812bed49b28f1a422d4da25d913

  • SHA1

    3688652a0bf9646561811071d488d1a9dfcc4194

  • SHA256

    185ab906b48cff84c42b61bbb80e8c4ad05d4eaded6b06a475a44759d745c099

  • SHA512

    98bcbcea2a45ae8981bc510561dccc86cd19e6eb8e3efb91170bdbb3978fb0e0dedfe07c3c5d775f93401f8a9e664e521e6aaed15d48df18ac1490162e176106

  • SSDEEP

    192:jLy80VHZPSqPfF81koOwsxSL45vl20v+3Aq6JXHOZqE2PwWs3maiXWzMijZxNZ3v:jLylVHtvP6nLL45vl20v+3Aq6JXHOZq+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9fb97812bed49b28f1a422d4da25d913_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2360
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2360 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2948

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    a70dc2e89e27bb703ca129490d569509

    SHA1

    32370f6bc6b5075d18c51f3eefc8b65788158324

    SHA256

    10d8a119a06283833c16a6900b63715673dc7437c43d2a6b12782af3f786fad5

    SHA512

    c168ca074b315c1aeae75e125182a7de61636dc4c6e91a4bbf0566f85e835da9bcb4ad58389d9126122feb3e602c1f8473d34eb27259dd04179afdf023e4dfd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b192ea51d2b35c6d6aaa7405174cdc8c

    SHA1

    176821b98a327cbc2a2ba36b3e9d5f411b51a949

    SHA256

    206a780d1cd28e9dc1cc82170694e49b66c9d04daaaf51534fe6d9b394665682

    SHA512

    623fead959867dbfccef4d36364efd371e49fa57e2d30a6554e6c5f78a9cfe71aff9c395fc77fd652ea4284f635c21c391cd65a4a6f6650d6535208f952ea756

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    24f96cc5a8651e17649a2baaa3bf7d30

    SHA1

    d221dad4fb78e99ab487678b815d948d1df1ac3b

    SHA256

    2d97a299018003bcfb87fc52eac7d6bac9432a9759c98d9e11576031d5b68602

    SHA512

    a152c16b0f01ff36d32b2e604167d8c1f61fc9e8433663beaa02e380123cacb7ba2043cc696e293badb9c52901e1c8d0801942c635502c147da4f55a77a4fe59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87e948ead5e14be85588749169667097

    SHA1

    ca7cd4a0dde8fed20d8eb70a9fccc003e39d7b95

    SHA256

    45fe1311af989ec099d32cddbb5fa91dfee15a48da926f3ed0cfb88fdfe27fff

    SHA512

    7fcdb4a03ce230436475eb3f0a164ba802f5934cd10c728636e43f96b1d8335bcda7172f4cf37918f7712f15524515c9857deb5c60fc5179629b2ded6f9a6a80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ed8070c96fcf98785ecae039055b732

    SHA1

    e037771c89bef2a3ace54e2faa0ba986554abafc

    SHA256

    a61ba2f352d49ff3f3f6742cf51e6d4b04295d955e20715aca3d36d18bc49338

    SHA512

    88ef737e6518962a94418085e00558815e8705651f6164af45753cd50ff81d91e2463c4acc7008c6cfeedf73fb9ed893614fd70f2fad1b9544633148c1d665c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea11dd51da1c49d8a07f65858adfa3a4

    SHA1

    5252343e5302edf00e60ca968127e065f5c735b7

    SHA256

    1133de198f6524daa59b0f1668d3602f494a2b3778e2ac6959d1f5da1a4efbb1

    SHA512

    acd4bc5b1f598b2de7208b7e6b14d7d51953c0e8fc673ee99cb222f12f4d970f3bbf63a7254be2c14d7990d1a89794446793ff78110632e3fb42bf1187fa6ca2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    348420301f1cbb5242fb859661ce2329

    SHA1

    a5c37232cbe3d0662a7371347f7603079b6a141d

    SHA256

    27b1f78dd88b408bbc66fc9c47c65466a850d01b255a7c844a284e9821cac0e8

    SHA512

    d97c15cc90d63853185c4407e3ea3e1b24babbaf77539693e762f4eb9efdcc740aefc8ec223c238e7b44831ecdb2ee459578184323aaa789b0604d3da9ec1c09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab73ffe5e4db0cf63bd6797a529d92d6

    SHA1

    b6550b36a653e733721122f43c8fe728c544a11a

    SHA256

    d64e9a1bada41048354a7f9760beb87a9bb6b986acb552d7c52a0cc0590258d2

    SHA512

    22c41a692ddd2194ff045d21c878a89df6061803eeba7903eafb3e4f13013fd1d14e56abc5bbe2b8154a1abe0568b3d9edd383577b709ea855fdb6e067195cbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c28ae8dd2b58592ee3d190ab555afadb

    SHA1

    29d4352507f328a28d87e9eba450ca934ea8a2aa

    SHA256

    9ec85edcae31390e077369ef38189e8a3d6558615f7b2de0d015daeb3ad83317

    SHA512

    e1396ec354b8e56cfe4d68027ceda1ac4d286237632f69b6582acabe589f851234694132af22b0830f88532fea683441a35a9e56e3bcace18583dad8c6f31e7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b8a98f577811e33b32d1a3c35cd891c8

    SHA1

    052e6326a3edac388cb46d6b286c13541871b5da

    SHA256

    a6e97591344661f1768a6c5c4bce73979b1f9154c3e22d80ce22fdb78f8af26b

    SHA512

    1dc554ce81b2f10af6aeea9b2420981519dcd16256918670ab835155635b928c1b35cb08b9a6abc5f188b41bc7e8c48e04e2fa846c1e85d41c632d9778e4f9bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    862088338cf31f1e71339fba3fe31405

    SHA1

    c036aefa8c325bde0cbf73a24d746a6d0709e912

    SHA256

    02bc2f7779cde75a9ecdce87c656b4217d1a0a5f219d9f67929680aaa42ae040

    SHA512

    c672bfd89f2155b8d796c4e66bb06eb5d707277d2170ea76cb3b62a60b8fded4288084ca3e3abe0cc8b2a5f824086b51ab7e0977a6b22ac50ddec8bcd088919c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c6d4b57eaa6e2e7a1c7f9ae268c9ec34

    SHA1

    36919580d66e9144c5e1ee5e1fbeb5c9cad761f2

    SHA256

    522168d8f469d748a8b6601a7e87fb0e9db97c1a57e2838c88eb05fd2fe0ef8b

    SHA512

    999edf2a1cff833465c70ed6b5256eab3f1030ea4ff33b8fc801f1377101b21a3d8fc268fe790104039e6aa5a99d0cc239952465cf9caf45a7b8fb084d04bb09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0590383b628aae9b89d78954900fbcca

    SHA1

    00dd545d2c2e46729214fd13131be33aedb7ce93

    SHA256

    d99495c1e8d6345da70e2602a74da82bc38616400d7cb2f21626177e1506ebe1

    SHA512

    b494b23e74c4728ac1ad110817dfbe25ae496ba6b4745c50639e8ec254ee2c9703e74a80197d8fb9c2c7ea9c2447136854ab119fd100d971c6670288dfc33bf8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7355468621b8bfb6928767f26e523ac

    SHA1

    78a0b9866ab8698504820c4dbcb3eb2d8b6295a3

    SHA256

    54fb529cf02ab55db76f508cab9c3b24e6eeae96f875560db97c1fc178687455

    SHA512

    9347d0388d089661004362f75e0ca37636cbbfdc4f280da838610788b12df8d873cafffcd9d2ff08bee6ab521e39ee94bc1f5c1333a381c3ea73282f5152b40f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00d89476706c9f5678a7a62ee5f2af31

    SHA1

    15a9e8e02e71a9d4d407a885fbcc593502bfeb61

    SHA256

    299ea6f2df7dac2d15347078545bb419bf97741c71db2a9a27ccf51e806c75db

    SHA512

    4c1586e8b796a75efa0c572a939c2b879428d976d7bb9bd8467d473d0a332058fc84753b73289764884127fb5d01336a4930285119321efb06ac16977b64b30f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f8c3b5fd3dab63aa4c17d3054343762a

    SHA1

    2f111827652561be1b09f846cc3abfc68dfa9a72

    SHA256

    6a00b2b80df40ef80dcb61038064f469b1aa37b8a01a4063cd2b4cbfa0a35679

    SHA512

    8cf782b4ec727019315289a1e8f352e91024ff4f5f7f637ac4501bb404a3c8fbbe0e68028ad2e1ac8e7565b00c3a68aa5b818c1647ab5fcd27ab397ac94a7b9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c843ff319b001bedf78baa679c76b9d

    SHA1

    41936a14ce61e0b7ca44c72aa079daf5cd1017ea

    SHA256

    3981c63669bbd4372bfece67502cf41f7e666051518b17c212a2184d22e2626d

    SHA512

    3b21f118c49d82869e56c4bc9490c87114b03b12ce151b4d050c7a37c106c9b3547d92dacb8708ae9cf191609890e54d3882665769d081b209b95b3c5abe419e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    413ba7fcef288586aa6208a7f0b23b80

    SHA1

    9678d6b10010d7e47a51c616f46aac05adf42daa

    SHA256

    dfe23e256cc1cc8667236dda8c54bbeaec870f2aa2404ab1aabacc542468d66e

    SHA512

    11e609d0cf09414331e602dca511479944f6e5a84cefadb9e1906e3f4b7447881b4a848305472c962f5b8631b3c5abee1316f1e998824b85eac9004475f3b77e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8af71823a4d687bd6107d0e6bb7cbd2b

    SHA1

    15eb5a9067148d955f83a7cf45b5f9f4be5f97d8

    SHA256

    1af88ca5df12f30283b48cddc6f57f29bf68824bd9176e778bf8b673e0500b9c

    SHA512

    870e86f3cc8fabeaaab0eedbd02875e7f493baf4606bf0b68c1bac9c5db880dacc1cbc43e1dc8488aae2c722611d1d7b8b7b336e95edcf272a66198bf0d27daa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bcdce7ee0d9b8be0c6ea7c7b8a41aa03

    SHA1

    4eb40c72b3ef005b80adb7478aa132bb2b710e7f

    SHA256

    79039df743fd69a2553ed708dc91c785c04969f639d3a7811ffb7d40372986fe

    SHA512

    d8258ab8a0a7462ce8b7cfadcd5aa9e31c594700c57e1069454b4415b9b68c3da4b88b4353e53ddf4678e334dffda33d52118afda83b912abb4352a755347db5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    acf64443875deb6dedd9be49fcd0945d

    SHA1

    6789b0c09711f590a59de261e9cb9bf7473bdbaa

    SHA256

    26bfe9daa5ae2538b64f502be5e2d7536b3e181af97b5c70132391b4cf2cc4be

    SHA512

    ce6a1fe8fc5d889f9b890d7d1b6c83534dc8f5874573015a95161420a0daeb2951233d095b3e1bbbcde121f4f061e961166d0b7d5982eaa321d7045791f28b20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a40d1500b33540e09cf16e53d793c1a

    SHA1

    c53907220511286029fc4c451efa52db733c9f47

    SHA256

    c92382f158f585d92ee6c02b553e36406df114aef24e724dbc72467b9b4a6e6a

    SHA512

    f7ba499a3a967dc296f3f79a9a3d9fb60209908fbbb634466c65def4bc524594a4362e28613bb5933d9cb71d222d8ff52dc4171a3cef0e42daf0cde62f34de7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8095d7c28ef3ab76beac8b064b102a15

    SHA1

    1edde9aa1f37be22543a7ca514636b6e33a7728b

    SHA256

    2359be0d0264334043434e26e39171f5bb444df9e4f0fbcc45fdbf3144558538

    SHA512

    341c166fff7dc9eb643e0c0c4aebe572aa6a516a7b0d790179a1af9af8756b02fc608adef76a2c724d31f402540d77caf6f1a12053e1fc3b978e91f853db49c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b10be5c76b0edd974bc416c30c61199

    SHA1

    8ac8769a13f8718729b7b6cc7edbc63d422f53ca

    SHA256

    474ac818cb407fdda9d756169edd4b8ade2aace9a08e14789f7ca912b6880544

    SHA512

    a950726fd14210ca7b6e07f3382c394c886578543bec25b23da071c1626943ccdbcb4648fa4de820a13de245caa2114913ccc5f30410682693f6f55380a47b84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    770928d0cdd4b563171501808ebd2c77

    SHA1

    bc92be802f4ccb543636c1c237c08985dde4377a

    SHA256

    0f540a2f96fe7de893f8b0d0a01797c9b8dd645a804fa0b4f637063f0573c77f

    SHA512

    96090c64b31ac2dd73bbe646311fe39ad46433e847dd23bf6de6a22a7ab28d94e9a2db8a7a0bfd0c6efdef971ce5fe3eb48887ecf673534593d34c0b5002fbf8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    f0022a53723bf61a8ce7595d382e8f1c

    SHA1

    c8c3f1fa152be877541ee0ada1b6db1dd0c9257c

    SHA256

    14838b13fd64e74b46ae7dd491624ff70252c4f94d4a0f6a7afece6077e4037e

    SHA512

    80fb610deef13b442eb50d0ddd3a691c9c1a9b73d1eac2ed1ccaf350303079158f272814762cf3cc479359babbcceb929a2b8850ac93c1e6ad37304d56dc1593

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\CabB47.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarB5B.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b