Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    132s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    23/07/2024, 05:02

General

  • Target

    663de5c53e22543ce7198c062587b0b4_JaffaCakes118.html

  • Size

    19KB

  • MD5

    663de5c53e22543ce7198c062587b0b4

  • SHA1

    5ad888bc4a38906b35a42d660991044d2e2cbc85

  • SHA256

    4a4fa56d33c2843db19d96c0f5da05d7dee3da1e2c42d6ef44655f9f54ddda0b

  • SHA512

    248ac4409d59ed4c030ff3af09f3eab5340e112fb0dc08362d9aed815cb8ba7233016ec9affc1c3b3917607bcb6ba322e15664c25e3de88ec7dac5b55be0bb3d

  • SSDEEP

    192:KYak/aQHyHqB/6hqH/2Dgq9RZX084oTxjR428cH02yI8zm4jHgfnWuocdZt3CBLU:KGrFu6Agq9vnTxsa87Li1dZt3gHYUEX

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\663de5c53e22543ce7198c062587b0b4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2124
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2124 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2724

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

    Filesize

    1KB

    MD5

    55540a230bdab55187a841cfe1aa1545

    SHA1

    363e4734f757bdeb89868efe94907774a327695e

    SHA256

    d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

    SHA512

    c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

    Filesize

    230B

    MD5

    7eda6146a64b95b249b2f43524e70f81

    SHA1

    038fdbc788cca7e3285c1c1168ce65a0bc2d2542

    SHA256

    317ec6fcb01a2bc9b5e17eed9a2ace82dea23bb5b7cd1ceb390f90dff73b9f0d

    SHA512

    cc2ad489b76fdd494ece06111be4acf604886bb973ee9ce02633973d2843606bac9d029940b4c7cc827b5ac7884c8565c4d9d506cead885d0609064aed228292

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b61711dea2e938c5a54abc345ce1672

    SHA1

    e1b85027843b797d3a54eea07f0fc767e5395d84

    SHA256

    e8caf24661c4599d28441a0cbaff69e7dc71878e4c5ecb6ee63c8719f511d06d

    SHA512

    38ba3349c3b517018fe9e2a9151f6352dd26df0d714864404812930f3baefb5ca2533e737eef790b432f93d150d74e0a83d2898ce2fe78567b6506195dd0fd74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7c3737fd4fbd8e84c932d445970eec9c

    SHA1

    d45ee28bcb51af7a98ea624ba3d81e1aa7eaa08a

    SHA256

    08b395b148b0eb7337baab783a4e267d006edd0aeefbcffd2205272ee52eb4ba

    SHA512

    3b92f2eedf301767f1357f446d30f99cadb4a4b27c500224ec0062ac261b8d37d1ef2016ed585f4eb9852699f38078e9c83936cd8cce0555cf7e592670a6d2dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc1c143d5cccbb6ca139bacdaae93a05

    SHA1

    e8ef67291912f5bb33378648d06f6f22c7ce4adb

    SHA256

    628c865537f34b7e8fce3b19d1a329c2af73aa20c5419bd0a364186b33f6fbf9

    SHA512

    74f0d819dd2611703243b566641f3de4eb41a6099fb1621f158d53431b656ac8c06eaff64ec6553971990b6c8046bdccfadba33bcb28b66468ca4ab7dc07f26b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e0d6689c92b2ad05691660dec693caa3

    SHA1

    7bb831ff1daf098c6e6e3462a63856d5ae3bb63e

    SHA256

    3553f75f9849d2222c4d3ac420ad3585c1d2949b9d6e20192914441c5ff270c5

    SHA512

    6a61b77a9cfd3a6d8b13023c77d768ce96d78c92dd9a28c90a973b8c40da030ec62ff635eb35fc02c9198f2110899a8435d7d34e723581e79b7531ed8f384470

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1cc1d1905272eba10ebb6081862d1502

    SHA1

    3ddec97b9695fbe8326a16d0ffd640b0b39aa84d

    SHA256

    e82bad0da33e536cf93d451ee6bc94e9469acd13246709b5cb1c71e055a4b386

    SHA512

    3405bc41b0916ee30ded15b94724276eb389bd041aeaee3f8ace4d0de0fec7098e1ed359284fdbd7c8e86dc7035ba291e2b36eaa6ff9e8fba7651281225527db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3edc867373f3b3c16527c212d0ad7c58

    SHA1

    844d969c20f82489c86dd3d6421d14189151387b

    SHA256

    e4114de63cb0b32c61ca1f9662838c11732f7afebfffb142430daa11bdd6f127

    SHA512

    52b88ded7f3591475cbb38d7a56f481fcedaad413cd265d262a184ac5c0d438b9e92f1bac85fd51daa07c164781a2b6194e716b3d7b40a0a186b4654265aa7c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2239b316dfdc8c937904d28cf466da40

    SHA1

    9f31cd8a6f7edabd25e4ea91467a0544a03c8a11

    SHA256

    9952b73b07c8324f303e6b179d6ec09ac179cc2e2003608864c4bcd5feec829d

    SHA512

    723bdcd58e87e3db39d3cf76b1b07c099111c2e49cc83314b1ab506875b67b5e06f207ec86e338e80f9ee6311ca3b37fc35aaf3c66c4f4e11d73c964f016bf59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d7b48048c68f2c730cf6ae5c020a945

    SHA1

    c0614360016d888d5286f13b20ccf2dd53ae28c7

    SHA256

    214f7f0f74fa93b93d50b3ce9b74204b1dde98ff2297a2927f24b4fe3747bf8a

    SHA512

    2628a84177ce3d4d9ddab19c72b2d29e60074d2784bd4cfb2cf27f92281cad4d9f69091df29d6e2218a7a8f795e372c03fdb6122dc60a66e19f99d2ef36332a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    310109dd1154ee749637f48712917248

    SHA1

    f0812d87135f422faf06bfd9499eda2c4b804e5a

    SHA256

    17104ff1561fddd74720ca35688804b8783815c292c1e0dc2d4906ac3d196eac

    SHA512

    b5d3598950f8b444fae1ad987e09815da7eb21a149c5af2acb7b30ea3be96e362daddd5f4c309e95eebb4cd329496c8453924fde4d2fbd63d7f26d79dd5039cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ee6a785ad5f7ff02794b4833f9e2c33

    SHA1

    2c49b4ac83350582616ca59b58ecc8444ad04208

    SHA256

    7fedde268bd482d7a38a8331bf43cae24d038a22aa2bf881478e7fef855bfd66

    SHA512

    c3a83a566bfbd4d66eaf7330a56436b22f304c442a7225613effe2c6cc76e58e2aaf3bf430c290e108cad5a1e3ef169b32ad82c158e258af436a1586c0605744

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc6f4f1242a6d3b09234f08d5bfc2693

    SHA1

    23a871fb17ef695601c152e50387622ecb7bfc2d

    SHA256

    356a3bbdf18fc03efb0ea551a8bbc360cef8d3fd853f95463f53e0aad07e3269

    SHA512

    f4a2d2a78186f00a34db95c6c9f88e6a56f25b4067400203b30d5fa84b2f7bd51a63642ed0ce8089ffa5d0622a0943f7b1c6fb5b665d747f03c014b795beb89f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    226ea8b052cfbbf9f028a7630a858b04

    SHA1

    2fdc4d1f0bab5d72fefd97dc3b81663640a64844

    SHA256

    1989f06d29752d993b3c8f07b2ade96a5bce8903a38218d5cbe42b6d84d39c2c

    SHA512

    fc666bbefa9b8bda302642dcbb387d3f374a690434dce478b4cb1fdf73350db3016c1298e2a944c7045d245216393f5903e038482c8e13a335452269ddf9f368

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    676878e721fa0636dda618b8eec9a3a2

    SHA1

    d68083aeba2fe50630d80f7ea1101c1869013969

    SHA256

    83572f546d921327a087bb0327d1fdc414c0992d364afee8e539631f04f5e419

    SHA512

    6bd61c0abb185efecb74ea4cca5235d6f941de000a44b41f9d606b2767afc4043c46e36bcfaa33830dcc4d47c6c2ee2cbb0365d57f18254426727bd2e3ac8759

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    acd19e3a44f53cdd38bd33bb5c1d99cd

    SHA1

    a612a075b46311e8fb78690c115a7c36aa4d3306

    SHA256

    9777277b97b3d3b2cde60ae97827dad8cda4fe5d0c7a49366f3d24b5bdd6a146

    SHA512

    c9fbca77a9350192eefb4184b719656eac244fdca89608dfba2e804dcb571496b28ec20bbe6df9c58fad61fe05d85674f785961da671f58d34dd59d171d5fc2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    72a936821971e1dedf130314db0fe14f

    SHA1

    2003d8c3cface88e7d31cb25317eb9d355f503d2

    SHA256

    29b6d0d3a82829d183f7e5475958a833a98fb7ae1c4d1650e7c648d97e718798

    SHA512

    ec40e34c87352ee235385e457aed1e9e5a81f191a488ec63093a3d8fb4e6dd3ad64d3a12916c4bb6f9355fc359b07764a60cc8d8967f4c96f86e6815f0a7201b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    136166bc770e890a283063e0c7b973d9

    SHA1

    77fa357d63e4a97cbda46facbf23bb2f76efae72

    SHA256

    02b7e31218633e8009574a2f14d87cfa51529ad8b146e7ffb555cf544ee792ec

    SHA512

    4dfdb36c898fd4541129d558fe833c1bd2156598c2f2855d1df1dbc042b96c4337dcf609a9d204549a9005c19a0ffaf3d9bbfbdc7239bc850b157b4d0cc17d5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d504e1051da30f1053da2c7cfc6b6f9

    SHA1

    17c34bae35bae7c0dd84b7bb03fdb9c13ad5bdf6

    SHA256

    9833e772d926d66ca7882bd4b74d10e2f2dbf10eb1e18876d0b3ebf00caf0278

    SHA512

    02155338f0cb5e81297b135a7a49a79757a9e0b692ae9ae99a602b03ba1987d4c663a9a3d4aa7b614d2f9afbfd81537323f7d6fe1eba0eb40aefcc49d952bb27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ba47b7c64bdd368e758b26386e40cc3

    SHA1

    84b9b6ec42aae92bc8dd8e561958d04d5179255e

    SHA256

    c46fb6f13b8ffbf5e72e9bf805a3c8b5557af51241b0317c9d32181ebca4ca98

    SHA512

    9e5a9af140475633a04681f21f89b9d23e534eeb0d9d585e56e0a706ad35e174f1b4b33d67e56b157da2ac0b73859c28167f8bc5bb812ba29dbbb0b73a89213b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf517f54417f9414af2f17ffaee0bfa7

    SHA1

    7d7c19218240d1011fea98260693340813194ab8

    SHA256

    c16145c04dcf5804d06d57f98855eb51b821acb9e705894c08561a75cc3df8bd

    SHA512

    3ca0185e65d198a3dbfe870d60218e12f52545b9c43b478ac325705ca80d48b7bb4f115156e2f57a6057bd37c01a5390f228dd00d1ba4012c1c8e210946704b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8e00ae329bf3913953a98b50fcc7ccca

    SHA1

    7a61381292a508f04a5ae23fd2cd9085066cf25f

    SHA256

    21813a72f827f6d119f4f098fd04cf3b0d3678d8c22b349ed875371efe8cca83

    SHA512

    accd7bfb797e40aef3292ff4fcb677381f16eba8c09eee7b93d634d7d0d6709b703832dc99555fa3004aed8bdeaa8ae7c31d56a774e0f9d5d5af8faadd0004b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    947bce01156f9b97e7baa66bb9d3620c

    SHA1

    1f2288a814a31538600be8d2ad04e4ae121c9b8b

    SHA256

    195beecef93fabbc7affc02e54846d1f3baa9e101d047e6f3cbadd72a29d5e83

    SHA512

    9b8b85c07cacefffd22827c0aeba41054e4000d5de61d5cf9dd55df242926ee6620409db4566e7146593f0967f119066548607e556b9b3b7f89f4eb381d57762

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    72691524e9a1a66ac6ff06aba1d01812

    SHA1

    38b733e67afa756386533beb6e3e8dcb8954eb09

    SHA256

    411781aa40dc0ea6da680d961737e272a434261ccf1562bd672b4528f9f633ee

    SHA512

    1b76c2b937232763ebf4c1deb3f882fcc73081b31dda910c2ef8e18adeec1e0a0a27c4385e48bbf9b122e87e28abc52db159a2968ae18340f0b6a29c1c8d8b40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c58f7dd0ae1641f2d42e317182434cfd

    SHA1

    4e3d7f2361220b41a177d17cccfcac152463ea74

    SHA256

    49bc755590b3bb53645e95f4df3aa6b0d04507cbf4a5bf88022809b1bd87934d

    SHA512

    4fbe93c92468d942bc743cccfac45e4cd30e773511d45f4b38bdd8f1695e251717c23dca6d6b3efa53fdae3af47eaf8afec47d5309d2312591b9235a0e63d41d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bcf1db2cd503b4a6265ae182c57e7e5e

    SHA1

    3085568a01e89d7d17a4b55f846040f5da2aad62

    SHA256

    b96c37cde9758a2c6f28e76dc36a2623a942e67e208ab9e5375d54b3ee9768e7

    SHA512

    c93644ddd7b571efc7736c64c7909ab1f4fe19e9fad518da8fe0021d45231095dc98f865f7d1c85b1f12b57e2913c77fba8a780c1fac711b2f12cfde38bbac13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75e133894426fe908fea61f53f03f19c

    SHA1

    962ed924cb22eb2ddb90337287e47ca9239ecacf

    SHA256

    28e8443fe2d5d3dc65f810eba606c879f37cd6451c1cc21d42a0081e2fdf1939

    SHA512

    4d61ce09c2501fdcf29547b649fb6722ca76b8950547dd0720924f5093d8df9c47e9146930776985e71779266347a562e5c512c8e871b8156006bcfeeedca9ce

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NFAY0EOS\post[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\CabBDA4.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarBDB8.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b