Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    154s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 02:24

General

  • Target

    b1521352a04bf5f141faf62c37532495_JaffaCakes118.html

  • Size

    220KB

  • MD5

    b1521352a04bf5f141faf62c37532495

  • SHA1

    c482efafeeaede5962ee6ffc70ede22f2127da6c

  • SHA256

    dd7365f64503115a12d34db8a0942aea9291fff2352207406fdd859bef5a9614

  • SHA512

    8df0ec69b16918e6fa017ed55c54d1b909482e3de1a4d3ac549e552c214c1c91bbde8153681b26ec729a21fc5bded9a79200d0ce158d0a037d12e087c8affa72

  • SSDEEP

    1536:TG9FsWIKG3xX3aGB33JeqE9hTqs/b1ZFP8k0lcVKrQf87gmcQYl8SvI+UyEiZCDJ:1CV2oeumMnXtHdg21W8u

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b1521352a04bf5f141faf62c37532495_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1900
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1900 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2620

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    686513adddb8d0ec2f3eb27597f1c6b1

    SHA1

    70790a3d3843fb7d2ad5c1a9b6c8c712fd19c331

    SHA256

    f2155ea5178be453858f9dfc65c59573af68dca5512fca87b93a15a4d26c8a68

    SHA512

    40c8c622e690ceca84ba343b6f282db87e90684af054975241d69bfd54bd2063ba2f457f2e555f9d9f25776011c8f6200c67a3ea550ee5059d5c8442f2547bfd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    724B

    MD5

    8202a1cd02e7d69597995cabbe881a12

    SHA1

    8858d9d934b7aa9330ee73de6c476acf19929ff6

    SHA256

    58f381c3a0a0ace6321da22e40bd44a597bd98b9c9390ab9258426b5cf75a7a5

    SHA512

    97ba9fceab995d4bef706f8deef99e06862999734ebe6a05832c710104479c6337cbf0a76e1c1e0f91566a61334dc100d837dfd049e20da765fe49def684f9c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    fbd8c2450daa367b44a7521e8044893a

    SHA1

    d9050b3f0f2df0c174745510552368a7c31c035b

    SHA256

    d71fc6d259ab21c1ba169346770345114c417d069cc829b4dfcfd63b78ae8974

    SHA512

    cae53253bc8820155edd5a451fc5cc0ff7107110376d247cafa4074ed6d01b9ebd15c1bf316850fae5ff64d30193576668a81f24ae0b841839277a31887e5ade

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a826046e91210386b7374e962f91b3aa

    SHA1

    47ef987ecbf977a9377c8d40d829042bd615a29f

    SHA256

    d80bd64825675d17f7ebbd125e1f2395e9d0f94938f2da2a0bc0313fd5fd4203

    SHA512

    4cd28cedcf286f79a185430661c233d34614b2dbe6a7414e02922c64d3f0f270d659a577e549aa46bc6f5f68994a6df51965d2c1f138db8c0bde136d0f45ff7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ecce41b5ab8719fd5ac39461eb211fb3

    SHA1

    7bef88aaada8be9ae15d8fa0cb16aa0042b3a396

    SHA256

    983765d1ead96f66771859bce2530c6241e7df9b5f338bcc36373ba1f89b1de7

    SHA512

    d71d4f0641d92749b49ed6981c25537834c138e81bb987936958cba0e1927a202f9d2f6fd754dea45e30c9d6b11b383cc9b805e7cd73e0d891369976ad901848

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9466e41a76f306270b4ffc8f2fb38fcf

    SHA1

    83505a8d55914c1ae08190c4f8430603d0226254

    SHA256

    59b6c98dc9c841c899a26acd2849e73c1ca89181336c96134b1fd9986b0016fc

    SHA512

    6a558c054a31e19c42b17f95bf6f7e488f5ed16378692a179c6a32fe24b37808099efa493f37b549f77630a0485f387e8882335817abd751fe6d7d19c3fb2751

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f3f6c224bd082c0bbff546cdeb8f5a57

    SHA1

    a942b66048791cc81934f0989d59beda596dcecd

    SHA256

    7d52fbc8d4621215d0627449f834f906160a84349e30d30489904a0664ce48f8

    SHA512

    ead9df841e55527f56a98fb44f19e05d920146f597eece24373e64a4d653ad00aaed3e23cc5735e61382fa8fada80b26d5e664339e1ffd5dbc666e1160a76b0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5984f1f31dfe636aae1a7b7ef82a5cbd

    SHA1

    0a8cd55770e0b8bbc87a2d3af15593c6c79b9eb1

    SHA256

    132e040edbc484a2a26a132a1b2637e414b973d93a7eb4154cd7da8daa7a968e

    SHA512

    b7187f92cdedc16debe00527552f638cd640291be793355ab8719a1ef275397b619efc4ad5f4596199571cd288abad526c8ded7bf7746c75a4cfaa2e2e9a2bf4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c027f36b94fa6642f59310f9865b87d9

    SHA1

    ddeff401a96b63da9cf3251ade26c2ec0775ded7

    SHA256

    42d68d979ac2671ccc1055ae2f96fbb9aec957b7459e12ab7a100a7111595fec

    SHA512

    7af034ede9395fcd0870ec48a01aafb3b583e9be54b628067f2d22eda3880d835c9c384dbb58a1aec88ec842045cbd16b7ea83d64072d66645bea4ad519e7659

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a7e7218cd9f4015a61e8dffd4a5d7173

    SHA1

    d54888b7f02f6133288c00fea2e129bf0a28ed45

    SHA256

    b8ffe143d437e1145b21a640df064452fdb8d0f7f706ead7859a40c055070527

    SHA512

    116188e0d45b1a3fe7e2e1a4627ff6199617a9dcec25b02f1615d4205ea1ad57c7709f13f439afefd1de9b0cbbb0c93fde8ae9d95d6b55c9775c21406927397f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    659e1a4fd0f86c7683a089ba48c808cc

    SHA1

    4b6ed7a64b0a958abd85974e7bf8970851adb749

    SHA256

    5262f9ba2a5418e7858d655ef00b4b26e9ea612010dbf0e954abf1cee9088bca

    SHA512

    d99c9886938aa1088b114e4314ecc07619690b6455ced7960e2d756e18d71d02bc4c73a289f7f4257acdb022bd2ead1243f6b8202782cebeffb14ea121eca2a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28b9859decd493982aef77517d01554b

    SHA1

    637be43e2f6ebc4a9eff3805cd4cbdc6c304d7fa

    SHA256

    57a140f0b567ba9c3e8026625d5ee003cdde9c754a1a4dd2459266fd655ed3b3

    SHA512

    57b24b64adf3357582e4613fb4c650129115ec57e7466689540f7fa5c4133f873d5ab27cb803a84e9c87677423efd090ca2368df275bd64228533e52a3b168bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ab3e41b48487e9e8a5a4b85b3b7eb9f

    SHA1

    b2ac235ac16173c465449571fdbeecf0f2ba9fc6

    SHA256

    14ecd665f1ddd8e3d00dd690db9cd1ef65a1cbbd2ae140fd1b0ff3e69af4b51d

    SHA512

    b7015d6130fd395df960e6628fc7034fdd6d8cb2066df04fbe6ed45d4b3b941f2d57728fa48f355fb488c811fa072d557c8f77cdf9e3a208678eacab6d7b0c34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    88d0c149d729e310b35d3d5938271fc5

    SHA1

    b706a0e3591c613481d78e70d8eae87b6cbfcc01

    SHA256

    92755c04f75f74b6f3dd1aa28ca848f1e466ec6f4de30237972e4bcb66522adf

    SHA512

    d302f87a53534fb9760b44f1391c1c4e4d9158e15e89145bb6d17c91b7bae978d3b1138a486e847e1c84e68afbbb03a07c0353f9631bf2cd989266fc44ae1935

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    20e8571b6b88f714fc3705453dd67817

    SHA1

    501277ad1938cd2380ded048f483e95923928375

    SHA256

    333417759cdaf136a8c71a4310be889c5bda646e5ea23f0fe8ec450278087bc7

    SHA512

    e882651e66474f9be0f0998aa3317331d539b1be082c50e803cf5768c2f5e303120c3723435fd7ae2805c5447d97ae7a78d097494ff179ac703e4974886b23ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75da0c6d7398a513f8df3af9e14bf319

    SHA1

    dcbda5ef29192347cae88f0aa081d9fc856721a6

    SHA256

    dabdbbca1560b6e6cd8a04f66ae636b05fc4d94474d554a11accb50a82c865c3

    SHA512

    6bb67cc24da1810b3ed071432a5006dfa3b87c38ea98c1d89663d7ad696ecb5716adacaf86702e4afa2b74fa02f844dc4322ca0b9a60df3a4811c59d58ec1a37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0c703e3b2da06052743eee9a4a46cc64

    SHA1

    1a23886bcad975a020c055c2545af4a847d7b3b8

    SHA256

    20d817393157056686fcc0ffd423950be4e8679db2562256e7a3ce2942aacebe

    SHA512

    28e977ebb3e29278b9ba73674731883aeb0a2f29be4f3abab83a219274252578c474684dd5dd4b092347d236cfba1f6b3604a925c6d2d81b9c817d8eb6a94b30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4563ce6122f776b1c2e30158f7cc8eb4

    SHA1

    527c45153066a800c0a709121b3c808bf4e3ae34

    SHA256

    04e24e2aa8f2ce7a707dd7c8fb111574daf7e53ca05d27907de37d1128e7ddb7

    SHA512

    59e53c591187c07adc59145287fde51671ee38806786a5d3075ee869441a06ce406fa5038b46a615e5a07a9f379e2928e56beb933061a597fa96389e9d452f0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    676c333745877a26cb5128c5b090adb0

    SHA1

    262d5f45a79f7639f21a027eacad515cf850681f

    SHA256

    597c981949cff7df19504bd65d6798f536b8891b2636bb6d1dcfa658f5c73364

    SHA512

    90e7730f0720e0cfb031f1c5d0528dc1893640f07b24989fa6b631ed49c2b41e8c27c5248de31c37439248dfeb8c4cc41fdf3ba524e151a7cfa65262e9653e56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    498dc9a9669f4c986cd82ddbf75d99c8

    SHA1

    4a135f6044d59599548f449ffa3af9c24a6d9f55

    SHA256

    063a3c5cb1aef4ff1aaea0f2be30c5142d6d4bbf67965798e7578f99774b5b04

    SHA512

    7194d9aa8482e00feaf5aad951ddef017793d6ca8035914f70a0a45d4e477504feecf449eaf72260e5bf5d28320ddc40063b892d107aae7bdc23357ccc81f558

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    21bdf63f4e3236a16a8a6fbffa6f7df3

    SHA1

    13a39c67b7adbc34673b2410107dc550362bec24

    SHA256

    18108224b6cee1ec9287c79ef5672b1b9f2bf200db3c91ce1d7bdbe9eebb8754

    SHA512

    27a95c3d5f78d545303f1f50b9bf8309d01f3b7bbf21a3d61f010139c825593dc7ad408b9d17066c7db38fd88efe07b41037942898f51b8454f08844106bebb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    846a8cb2363e2267b491cf3d8f9379e6

    SHA1

    269ad9ee8cd9067905a9ce4f4020cb2a5a65e60b

    SHA256

    dcac6a7b0058503080306e1516e2c4692e8f5b0c14c07decc72ddf65c339c44f

    SHA512

    113e0553e8438b6968b7bf914cfce344317a4a9785b5d6fee9c1f6307196c203a1a01307388b90e6a6b46a7ab6c795a1c04f4600ccdbd2877a27bb7cf1af4e1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    58f4d44e6a128665a498fcf223f4d8a5

    SHA1

    82d0144b8764fb10789d4f83c50cc4c57cef493a

    SHA256

    d9716e28629d16e2040a18adf3dc70d9fb37a6693babb4153d00978547a5d185

    SHA512

    7c90b22d51cb43cbcdb69db0576b3a3ccdaabc0e9172ab7176b83822565e827ffb683561bb9a7cbdbe9c467f9a46ce9282f855b864ed95b655d17fffda706a0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    392B

    MD5

    98a4792b74e1d6d1a856a91f4792c6ea

    SHA1

    98df4e7145d0bda2d09ae1c71c68766312c6345e

    SHA256

    c9739a8203d701b3f4325cac501f85ae2e778fa2e32106cc6737b52e8fc410fb

    SHA512

    147e1607f8799e7c85e510cf9bc6781735114d03c41111be866534def3b5d0c6a863e87a7f20087c785f6ddb226e899b231615c9a69ac184d6bd6b2340a0c1bf

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\A8DU897P\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    6a90a8e611705b6e5953757cc549ce8c

    SHA1

    3e7416db7afe4cfdf3980daba308df560b4bede6

    SHA256

    51fdd911dc05b1208911b0123aed6b542e9d9f04c94d7504c63d89ca259ef679

    SHA512

    583636571c015af525cddd5b8dc2ac9964aba5a7a9b0acd3908e4aeb4c2ee74cdfaabe49b0aa13d7b142748542426864e91e88e90d7f73bc647f0bfecb0ff7bd

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HWTP8BNA\cb=gapi[1].js

    Filesize

    66KB

    MD5

    0fe383a7ddb9bbaefc3105b3297f5583

    SHA1

    f80c9d789f251909c7560bd91a9e1b9a10c26362

    SHA256

    d7ad4aad4e48174c30ef21fc32c9380659d2c99a5c39680e10ed9752139d8683

    SHA512

    31de1f59377bc76e5d602d02273867ce750bbbccb7edc8f2803c0188002ecae6752ac3ec31c2108e64b0d871b01e6a8a06711969dc68bd9823303def0e7c1ee4

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R3JK00ZJ\domain_profile[3].htm

    Filesize

    6KB

    MD5

    d276132847bea9179766fd609f878eca

    SHA1

    568334f1e3d57498b65fd11d6fc25531776baed8

    SHA256

    7d58afbe1da1a572f730d3b226d412dce9d173bdebc7f08e38a790e06e8bdff5

    SHA512

    aa73c5653263f9fbe23573783afc9ad1f7c90d00122a5f49ff040897be55bde303eb1190717c6d9c51fb549f5ceadff4ae3df7c74004bd58eb9d95f2ae6c7396

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z5LT06Y3\544727282-postmessagerelay[1].js

    Filesize

    11KB

    MD5

    16f1b19cd042265a234dc208fd7efc64

    SHA1

    02f67c09980ab6057f073d29f4c3f2792257d3a3

    SHA256

    509be2bf36ff013c9a1c31ac54b751aac2401f14496662a16ea8af6903d21b27

    SHA512

    652ce3d209d5d4c1e39f06e41e87a14a3174419b8c9cff8e5683846afb51f9f4939c41fb51a7aee67d9d26db80b370890182ab7df089f826479d3e5e2843566e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z5LT06Y3\domain_profile[1].htm

    Filesize

    41KB

    MD5

    4b0ba7e4bc1bd0044e6ee251ab01bd47

    SHA1

    1b9841f3667cd1e17471ef261906fed041a3fc19

    SHA256

    ed269f2f86c88d24c8c44c0589d017657a41910e16074ee36c75f4db73df857e

    SHA512

    1b56f62bdd83dbb7ee0114d858e564c4fb522e9ddb2e4d9368ea4c0b0d5177bf7c5eb9cff478bca5c7db861bf0bbca209fad1bd6b102dae46757eac5f4de48a6

  • C:\Users\Admin\AppData\Local\Temp\Cab92FD.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar9310.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b