Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 11:12

General

  • Target

    ae26d5d89e018329a8c66fc0632c3861_JaffaCakes118.html

  • Size

    49KB

  • MD5

    ae26d5d89e018329a8c66fc0632c3861

  • SHA1

    bb5fa43af813aa38a0f50b18864e12c3dbb2054f

  • SHA256

    de800e2493ac87d301f0218c552ab7fa3dd315c99462ee0a4753b95955cb2947

  • SHA512

    95cde33340d44fb0215ce0ba41d46a6e01c683954f26794eaba733eabd570f3b6d0e10f639435149ade35901214acf5e59380eea5c7a786d863186cb12d00d0a

  • SSDEEP

    1536:tQt/b3BXIw9n4H77XelFmcwlXUuI6Nttai2pS/4V:tQpbebw

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 30 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ae26d5d89e018329a8c66fc0632c3861_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2036
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2036 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3020

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    c480d458c363f3523bb120cfd07207ab

    SHA1

    793a66fc5e4a8e2f843c8138f643e6e3867b6bd6

    SHA256

    607e496ea3dd16acf8703fca4e04ed9209c135816662fe9cb9e90b292d70d828

    SHA512

    0f64d67ec4eae34c990f70b404561f033ed867edf0fb129c4e33bcc4b1726a1b74bb0eefeedfcc9dbf23939341f08c7cc01c79d40dee934a74c5ab26e2712c48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    29dfab01f9c33ab4b89c955407ceea99

    SHA1

    26d5729ce640dc13f00c0c3792b753c2af2a7a01

    SHA256

    a8a425d5f262a2fe7493a241889e455aaf74dda8c1e4c5af7016100f366457ad

    SHA512

    366857892b9181598e180776a0fae304f3399a3c446fcd18a9a22b34d6688703c0d65f82a24baa23f3f2a6265c4ed4c7dc52f9fb29f3066018eb48ea6e657cb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7577b59c07ad3d10a3365daf446e64af

    SHA1

    55097efa9de16c3da2b1ede4bc036ea5a064aa1a

    SHA256

    9cd8fa9191804c6e1be1b8fa5aa3620d9f3da2ad0f4abf9612172bcde7cd8395

    SHA512

    fe2a6e5dce135d5d0a3b39dc129678965e50b1581d6e7089ae93f2fc26f01583433d08c85857e319d474373dfb2db4892d7a628ffe93ffe6edb305dda37839c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85959754dc0bd1e4c90b6929b214aec9

    SHA1

    42d3421d9d24a1a3041bc7b44d97f486544025cc

    SHA256

    06741bfb7475bd5c47b1086e45be4c7532f3154f180145a9abc09956f285ed54

    SHA512

    c97363f54ee98d05f165e0fbd0a42ff9fc67811d8659c8f029bbac2b54e3b73f5a9b0ad74c37cbaed65fcd9e81be2676ccac6a34719667490ec0f5e699b1b5ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c8c58f3b281ae28d6b5894c930aa8854

    SHA1

    6abfd53ba11ce614c2d8e6b993871af1306d4e7e

    SHA256

    74d46f16c439c6061f0b7b6627088c5b417d2690c5334b574ffff6170e691a7a

    SHA512

    bd66b95bcab46444b4540efd6b3b9e34fc75c38a55a7ff742be1e71347e510297b047194e3e2314733494e6d3edd91181bcc9d3ddf68a71c01139da0456063f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    914a630cd3d7e040278003893e67b305

    SHA1

    ac53943825d635127961a5c559ba59cee78c564a

    SHA256

    bd057e1e03384a034ebd65ca326a3d2895fea4f4fc0a4f451df08bed93b869bc

    SHA512

    f7f429de2b7b8567fdd67b0fcba12424b798e019349d416b61a73fa2cb16e2cef4242317bbe80cc1b80e203c9b93bbfaee82d6f2b309ff7de5df25c9574f01be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de195b82d0bbd1e65ea78486134ac9bf

    SHA1

    892e3ed853cf551958a0e7c4d29737e781842792

    SHA256

    523a8ec4b2de7f34cf7888d109cbf1d3612c9372b29ea8c120420918bc0dd02b

    SHA512

    9acbf7e7a5b096a7fc7739fb097750bc1feec1241a665b9d8ac624a194046554da9fe11be69a33f8b6f87b039b24f4e09c4f0ee859ef5e4ee981b8bb991519bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd03b4c31ccb7622002595a38138f108

    SHA1

    c373446611103f120dd61ae2980f0b611445ba53

    SHA256

    d992e4758a575566e21dd64cab442e6eb5e946c931bae130973fdcd2ae07d5ef

    SHA512

    4ea3ce4b08a803fe0b4e66c5047ee2021745ec1eb4acef1dd1af9552a7181f7725d748de5e73ae624db83b189c9885d234295ec85e6a4da9d9a194d234c7c771

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    29d9990c29b0876c73feb019a64a10e7

    SHA1

    b740ddccbdd0dbc40044e8f907fa50f0869aa0c2

    SHA256

    663d6f6a47a02fd6e605d72635f4f81f5a8e2261e7991425cc739308fa839458

    SHA512

    4ab29812def6b7d5ff215a01c8f2875271dfd6802636ef2223c80abfe9407b6d188ce899b82b8e68cfbdccad6352e91dfcfd84af73ff12543311a0894263c6f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac7b5ca83c395ae91a46fe84490850da

    SHA1

    6b4e440105c8b842bbb83383a2984d25d9b478bb

    SHA256

    b4237761a50666eeb6551de98a6adc942490ba25035086860518ab7a890cd031

    SHA512

    e13d23123db703d4fd72f3d7a6be64186f1866e48786edc87fe4b3f97dccda89efbc8cb0efd1cd9acde18329e5d5bd30c24cb1727d6d93000b4cfb635e3136b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fcaf53aeb1c2b2840159ec9e0bf44a4a

    SHA1

    afa8f4098a1f72626d3c972637c639a5521cf204

    SHA256

    c83513fa75e7e55f9c52850758eb381d555011eabeb25a0890a78db8d04cfc24

    SHA512

    e7d401be94f45c206a2583af51936232fca9afdd0a98589227c74fbe8cc9cffb622f870acdc79c50e6674e9007a35a29245ce3b24746a3444eb3a05fdba7f951

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7c4d99041004fc99229cf053d45348fe

    SHA1

    42ef53725cdf761f7e16c78b8454905ae8319f60

    SHA256

    dfe85146866a302686a9d1adb43e7adee711877ca8a0096016d93661bed050b1

    SHA512

    3add9239449999d84e042dfbd2d39229218b95eb60668a3967217c60b15cbf1046ece2a4b0cd60a60fc906fe88b4672ae1bdf93cb8225c18cc36d24d5ea51f81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6821a002d70f2fb4bdfeb49ebb71f0cc

    SHA1

    043df764746fbd2f8f1789af5a5b30fe9f256ec0

    SHA256

    745fd4868e2ecb9b3bf9a59fbdc511c57f0191aa7fad1770c77dc75829d58ffa

    SHA512

    db1bd4841b1c077bc2a76310c2249dbbe4f6ab95872ca4409a8118a661f8ed1b925b655ff55cf8a271285dcb4acc37828b5971231f63f24659d70e49365a66b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4312f53f29c9a729956cfc5853b5d522

    SHA1

    c46329204bca5b9c9cb130d2336e185d9cdf81c1

    SHA256

    219a4cf2907fb2599d7461d8c884506c004fe21cd5695a38ce44182ae3696398

    SHA512

    bcc792228dfc3b04a5afe14a301d47969aa7b82c3db4b2c6b8f76ec415927ae4eb7f8db5af05e646d2cf3c1af059568d50bed7a27f6b3e45ffb47e397eaa7926

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4f574b0b36165cb16f21222cd9a28ef9

    SHA1

    5cc43a9cb1c8f2e46e1e5c5fbc8a32ae8161d7fd

    SHA256

    7bd21cfe8b334ab52f7aad055184799c3404d0194b66c1946e8ab8fb8d5ad556

    SHA512

    7549716d40f70b1a6aef96e84901eb867f9b36d2bd6051bed5c06a4d93d1e2746bcfb6b05a87b3ae5d7abc82912bb028f55e2bf0a1cee90182c8aee445aa707f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a493b16acae632bdef30070ea10f04f

    SHA1

    3b8ade73d74e2b30e03d39501cdc24146c9409c1

    SHA256

    66c6a88ff7aa9c53136669725b58e0f6a432f91ab8154ff059e0b0ea56a4a887

    SHA512

    5ed19e6f1fa251fdb5aa24813a309c68a743f19215644eb4baaa5179dc7fd69cf2278034426f9c2feffeea3ee89a5182a2f6303956af4afa1675428af818d3b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b93f3135266bc6ed8d0ba4cd129941a3

    SHA1

    f5986279ba6269d9d0dc4c08f887ff1dba064f3b

    SHA256

    95ad771c54a3eed6fb1dd890a346eecdb40a6753f941db1c91eb8e49c0d785b5

    SHA512

    3021bb33e337997b5b63d5fc6ddbbf9b6d5b7ac9c3cc73dfb88a36a3da05e76455a7a97aebd9cc6c2dc9cf6c5a0c622139040882fcd2ad27bb03a70460bd0bf8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a53f9f24937aa3a424ec2f6d8cbaa16

    SHA1

    274c9b0bdcdea936915ad253b0d2f26f7d59d3bb

    SHA256

    48cb3d93bf4a016b203be6cc617d3f53cba8edc0dba1ace2e63804b736481c2f

    SHA512

    6ce24e6e3a377fb23227eab2f8994a7fa18386509be63fff6c490c34159cea8a3aaeb629c4cb8cb69da0fabd1e02bc706238d722dc64cdc5f44304352b11e842

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a86e547e64904346a116894be8697651

    SHA1

    6a24714e9c127c0ef0b75c278a0b36100880bc38

    SHA256

    021a180d6597869a28eb383d8ed39c1f59b598815a7a5dea6bcd360059f31b73

    SHA512

    b4374570a3af1e2b24691d8fa7129aa0cf4c07ec0092abc26053b4e20fcd4ca8258343fac6153df662267094ef3620fc50b33a6748b609cc6bf349b59b881e96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    249286b4ff78d35d716db6ef3763be96

    SHA1

    9688f52750be13e6a9c1a271d039b9c50f0bcb81

    SHA256

    3843ccca67f923f75c458a621f01a1cfb61187c70e32411167510e20ef692511

    SHA512

    214d99a3dbe5ddd9b1e98bc6d49346fd5728c14895bd4926751834ef4b7d2e3f51bce9cf72bd7152e16df6b53675c9f024fb89a43a50396ab338f609ae82ffe9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4f0c93924ac95633d8f47226afe6a663

    SHA1

    7c3e74692f6190eee6526f81c2720097a9486120

    SHA256

    10d400e9b815b4fd81b8bd01b38f21a1e90933e8a6dd179176670f517a953dfa

    SHA512

    247cf12243d243042e472df5a0e90eeee2a3962211c8944ee18997c0e96da66a362df8e62df65397b336e9e796f535749486aa61253a997a1a47367b1bac557f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a23a47960ccaaae6b9cc1ccf3dde0c03

    SHA1

    2be5787a7679b8c7d3a6915444bdbd2e2121019f

    SHA256

    c59630c96919384b807843e1863fb0f947325b827ae51e38bc97628581641ac8

    SHA512

    3b6d86824a247be17bca73461f8eac8af1c353d11e84843b6337582dff9e6eba92161141cfd3ee00a82c49ed139855ca6f5d7568bcdb6db9125d41a379b3fd18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a7e96ba0bbed8bb4d100fed6fa1807d7

    SHA1

    57fca672448ff6e2fe03d1e7934c3d3bf4d832ee

    SHA256

    450af74939383e2025de94f7b975c3dcb2dca8a0f68546c556be1a679b5cbe3f

    SHA512

    b85141ca7fec505a5fa9c7e53fb734f33074102a0e7036982f40510989a9198ebc186ae38dd57022e80d387160b66ada8429028e05df3c3342782de248c6c51c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    53b9de1860642c4b8f829bcdef838f66

    SHA1

    3f767721a070a4db3118660ec707e67afba18ac0

    SHA256

    41ae4c47ed92474947a1687c3f39b9cdedab95bc250443a90945852675adaf60

    SHA512

    19817a6a2ec5c0dcb30fd4729b4c28c3a5218f056f8b28ad16deef50dcd0f38f874cc4899e3f6ece59bd2cdcf86b0612befa8e6405aa0e2268d42263b4cd197f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CY2G78MW\cb=gapi[1].js

    Filesize

    66KB

    MD5

    0fe383a7ddb9bbaefc3105b3297f5583

    SHA1

    f80c9d789f251909c7560bd91a9e1b9a10c26362

    SHA256

    d7ad4aad4e48174c30ef21fc32c9380659d2c99a5c39680e10ed9752139d8683

    SHA512

    31de1f59377bc76e5d602d02273867ce750bbbccb7edc8f2803c0188002ecae6752ac3ec31c2108e64b0d871b01e6a8a06711969dc68bd9823303def0e7c1ee4

  • C:\Users\Admin\AppData\Local\Temp\Cab1A08.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1A8C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b