Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    139s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17/06/2024, 05:22

General

  • Target

    b6f48f3fe1b2b2943341afb61090ec2b_JaffaCakes118.html

  • Size

    115KB

  • MD5

    b6f48f3fe1b2b2943341afb61090ec2b

  • SHA1

    ab7355dea4bd1ad2adcebc81600c725a4644433a

  • SHA256

    42cce1024758410f3b05c810e2f4c9829404bd5a612012d13ba784c53b09dc32

  • SHA512

    eea50689168fd88c35b558b2a1633f9950933de034e428cb15fb70650cf7cc4f58a829be72aa1f920013afb1817f18ced59d747596efc83122dd5c6bf50b1be5

  • SSDEEP

    768:Sb2QTEhZhJUtAm7bhJNBN3n3e3qEFQjSYlY47LyB6Tq//H:SbnTaUthbhDBN3n3e3qKQ+YK472B6TqH

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b6f48f3fe1b2b2943341afb61090ec2b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1312
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1312 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2944

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751

    Filesize

    717B

    MD5

    822467b728b7a66b081c91795373789a

    SHA1

    d8f2f02e1eef62485a9feffd59ce837511749865

    SHA256

    af2343382b88335eea72251ad84949e244ff54b6995063e24459a7216e9576b9

    SHA512

    bacea07d92c32078ca6a0161549b4e18edab745dd44947e5f181d28cc24468e07769d6835816cdfb944fd3d0099bde5e21b48f4966824c5c16c1801712303eb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C714322932DEB6135F89DC72D2636866

    Filesize

    503B

    MD5

    f3ca131a0160d2a4a24c5d5945625554

    SHA1

    32ea5c6adc7a9f1a4b9306ce597bb82edd4a1610

    SHA256

    b6c20779db550f0e3a9b4688e7f6469a9452fe656d071eff45b4f39184500d3e

    SHA512

    5d2d983c1fa6ba3c8557dc5716dd3256850f5cb403eb0228f5cb82ca73738254a6b9a170be080e0d46b40e8ece4b8c0e634e26634a9accdd021a097e21fd7515

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751

    Filesize

    192B

    MD5

    7c0822885565625f0b930875be688270

    SHA1

    cd5ffabe01ec86097a9592c248ffccc0afc78fcb

    SHA256

    4a335034fad3a8187b597737202762589eeccef22c944a0c7f52adadef10d63f

    SHA512

    a97e8515952577762e68b715dda0155a92fa8231e5414d2121360b3035eccac9fa8423106ba9ecba3bc04d5666611a15e834336fda508653a134d47ee5cd00fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    db95f9ce8e422ebba8647031d73e506d

    SHA1

    11140b150e66def5d45b0e989f5c6995176f27b2

    SHA256

    41ccf3545c2b5d734604f0ecd8f5f4b7eaa9d11b826b9fc91a330b200e4b3ee7

    SHA512

    dd19d5af851eeaea1fd4095bef4fca9a1b5d2c0fb8aa5ddda95421dcdb3f2ea77670791775fd5911904dee833515749214e22652e06a2fbf7b5db362b3258224

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a61098456551e726a6f1444441cf1835

    SHA1

    9b66a2930174c24411b72193ce97458bdb2c9260

    SHA256

    155537bcff5441e264a35505197960032705353a18d05ed360c2be95b0651db0

    SHA512

    67ee0b6f99fa86b835e08d13cc15b07fa964011353057d40a395472a4fce1d30b7c3d3f13884107c5e8f09a9cf9469674bfa177b56f60a9c2b681d5d24e37bac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac0f59f4102d9d01cd80aaf6572a777d

    SHA1

    ff9bfa146921cd55697daa0ced6cc2426d6662ca

    SHA256

    bb7615273f72e80d65d62b7b06b784fde4798b41e6229e5937699073ce4f23fb

    SHA512

    9ab4c69e3f15cd4215d3f9207a755d41169d3093259d6ca5b26c595da8160535ae6124a1cb8c98e5a7b797807f5e99531bcdb0ad9721640822006d8d6483822a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    020e5c9f8308a4c78c309108201cfa05

    SHA1

    194e9688432b828e364f2b57cab723705a96bc0e

    SHA256

    e3373db5900627b9da69b6008420ec47097860f4030fc069ca61b0a28407c187

    SHA512

    839a0001adc1ec7fe42b9630911b8d99275d23e751e49a57899d73defbefdd39c9dd14ab4f7a04923781199ca90f57677a125266bfe138ddd175ef79b3c95e70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0943fbf760d0c4be4b9bd6b485b76958

    SHA1

    e89e938226cc3a5d2c3e5fdacc332806da1572a5

    SHA256

    80909809f26286abca612d28bd86ab71bc897acd3238da1d9e16bbc33005c696

    SHA512

    a9fe22896511a4c7e06c416ed76a628bd560954043a08bad0dbf2d8368011855a9849cd5fb2cd64c8d20d001b72ea5ec47d86b234ed5296634d1188b0633e730

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fbc1e4289f1dfc7fbcbb2007ecd73a59

    SHA1

    5dedd0c2e891595f1f8b235b3b356ec3656386a5

    SHA256

    634a1ea07f52f79f63940d930d019d61fa61aa69cc6a8b9fd8fdbfca5296cf9e

    SHA512

    945e8ad748454ad7db424378c3ae44a946b1aa408e3a9e77641ea8f4a4ea033615ebd2b52969b1a141a99f5d4461e63dbb8657852b5ada0f8ba33b8e47f3fc90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9fad29a8ee4c428f797deffcc0b4ec94

    SHA1

    67b99e989fd968ef400bba1d2fb8bc682edabf7f

    SHA256

    ba69b325b4646e9143dad37c149cc09d76f331af62a03274c9332dcafbb2289f

    SHA512

    378f82b74f74ab720104ca87f488bf97fc6792d256b863f8bcab205ab81e7aa74f974a517d1a8ade60ba110661557e75a3ee3cab5378ba188019e40395da9e77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1dddea458fa3ed09cb9990f79633c041

    SHA1

    58b58d785a538c73ef1e7f3d21af84837a31cd0d

    SHA256

    a5390e9d02da0d38ea3b7b06daa3f6e52cc9229216bcbb701eb51167d1a38f53

    SHA512

    07393f64e1b6385e4980bb778b60b1cb1a2e4e6b1a916dc0bf99092df635e73886be1fe097f76f6d43e1dc41355a81451406bd5f18d76cddbb627ccaaff8936a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c098394ca627c1a3b42473c1a4a2d1bf

    SHA1

    eb29c98d09811cf32722659c33b7d8c9909ba37b

    SHA256

    8a56a8821edd6e5aa38d70effef782ed034fa2484e19f2d15972a8ada1a3c9c1

    SHA512

    a97897d1b6c1fd16e67f5c00341977171313b1a4dbdf60beebc83114215cd51578559c1fe4ffde6eea68c1a6a46f2fc599eed3e04f20c9641fa7eab9290c2f33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    674b589648fc9ea04a59972161474eb6

    SHA1

    5bd6e966c33112c6426edfd2b16c8ee28c7c4dc2

    SHA256

    49b20f3ba6e6a8108edff1c72b8f9e16ce362ab80b00b1005cb09f676137813f

    SHA512

    829ba9a81746dc8dac297c94b85168f9aac7cdfbe784cf6641032d7eca3142ae660126a1e90c22d5f95ed55be299fa1ea6ea25d8e0b74cfad72b0cc457564033

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e82f55760a9b29b493b9f01cdc798dd8

    SHA1

    53c86fcf4f93e350b824e5e4f22ab92109429822

    SHA256

    6e306bb68640473f412cf442ae0d74dc29c46e651a0dbd10f04c96a2b78b661e

    SHA512

    89e5c364298740adb1acae9e196713e7fea95bb0dccce7d778669cf10addbdab301434e5f5598c78388b66f328ab699c3b9f18dc26577ff20686047c1706dea8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d9d559519a0b4263d099fd2881c147b

    SHA1

    4548599973ffb0231179bd59919de1fec6893f67

    SHA256

    2b4595e3cdc6455c713d39df9fe65cbba937fd51911f9885613d3cad05230eca

    SHA512

    13ed1246f172cd3c9e7d12f8586dd58c2af8663f7df3476cddd625fbb69c6a0418b53cbd5b2e288144f5ac54e793ca456d4ffc62956236c9e18551f58dd9127e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7222d0458e8da8abc7a948821916d906

    SHA1

    d3580a927633fbab956e164cb64e73d1b64a38f2

    SHA256

    dbea9905eb2d83b79984f44ead2c4d266c51922625aaf887b9105a95e999c77f

    SHA512

    8bdd50dd87b412207c85467c293b99ef64ebf555a6c98f02df551f9901e4bf5be0ccadc03b884638e125970c368371baedb39b41eacd93a1217987d80600593a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f5452c509edbdce58ca8e7a0d4e0b76f

    SHA1

    86372c615d1c44a7b31138230f9031822da8c05f

    SHA256

    ca383c8067fddba155dc6c697fe77e817f2ee6cc9b225ee7cef8ac01b0710935

    SHA512

    206c9e53766cb5ae0d8f4629a42721ec7cd7838aa81d7f8f503911864f4842d6a3873c035fbc0a4437104139206a9a808a63e742945a63cd0db988caa5fd84d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67968e6407c176e31ae361d83843a81b

    SHA1

    7a120b81433f19238416b061d1cac1881ef0312d

    SHA256

    110d0446c8bd3d2c526c6ca586a826851bb83ffa796e6f413cff6fecf3c61204

    SHA512

    948a89400c72f4ba8fa860328bce13b31c7e7bdcf916dd364ff640d2d843e1ecbc0dd6a031abc0b22d6cae2fe93fd2be16ea446b4a5a686b8459e655e0049f24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    51090f4648a249c135a87618fb30a33c

    SHA1

    e047f70eef8f35f59cf4e6eb5a077a94c1994513

    SHA256

    3a92635915483b2424ae6f40ec2217bd0c978516752a0a35f05aec813e04c1a4

    SHA512

    f9cdb255ed7927568e224b9d6e9932ba40a1a04eb8f673e061495166f0613f5ee7b88b4b94a06165562249335ad9c05f6d94f3f88b7a1022578690b398a29966

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1739b1c4493215ecb0c212807a6f094

    SHA1

    ca212a126f53e1c93f68f883f4a7614f55066d51

    SHA256

    2cf9c886c41378ab33b85d14317f1bec6679d6e03c27ea704bd1f160e579d664

    SHA512

    3f9c0b1d2926abad8b1137f563beb9808a3aab7740f5e1e1d427ea17b383afaf600a2c5efbf4bbfb0e1e62a47ea32b4aab260d07f48f96cbf77198850e80252e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    527af048a7f111abf52328fd1d5ceee2

    SHA1

    2fedacfa1627304d7388f016fefa7ed1c0fb7cb1

    SHA256

    1878ed85cb47ae92427c0a110cc7eb1a83d3d73df16670d015599c84c19fd245

    SHA512

    b8d88fc55672209ea02e0669268b71d3481b8865e270e006c82461b6132f96f5741800ac7b09ed338576d69e753e0d8cae915f76d28f04a1ecd9a2c3e0067f4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a3cc2654f104b1760299fd306fe05078

    SHA1

    dbdcadb178cc8ce8b3dbe019a4cd329c4a6ffd49

    SHA256

    2fee94c0d69d19f0e891b28bb071bdb1b388c4470cdedbcd226ccfdad2e1f5db

    SHA512

    f2ca5f78e13ca187f8fb80dcabc33a20a5df0e819dea023d3a4b1d5cd9eba5bb66cb0e8e07a2d78597194c2795fdf68ab30c6d11c90018b0fb560ddce6253c91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f8ac5ce729fd04068da44e24cbf2a5a

    SHA1

    d63625a97992c2914ca7a2302913aec6a64e0671

    SHA256

    7e603deef3dc4b3e02683fb9de32cc32c4d89c9c624f957e6583b172b5fa8116

    SHA512

    d55db7b38677730711b252065f2470f54c6f88c3f8f21acf748a4106bf72bf6c739a7bcb1c4aa9d44e79879ff0d9cbc831a8952ed1275de6543d76d428ad7787

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    640138c285530a24c0c24ec56fbc908a

    SHA1

    440a9111d2002fd47c499c888e6700d93e575eb6

    SHA256

    e7c81dab7bb4ba3a55bb3c4a4a835d6de1aabe21459c5ab5fa32083cdc587a6a

    SHA512

    03bcbb0ff5bb2e2254bafc257d06a8541fe7168f843c0f7cf4d8b00dd6c34e36017d5e886ab868e9aeffe108945d473bc7e9aef451c7691cc0f860c444b200b0

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EDQW9R5V\tbtj[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\Cab257B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar257E.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar2739.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b