Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    23/07/2024, 14:38

General

  • Target

    67f8e42bd9bc9493b21eb738c4448b5e_JaffaCakes118.html

  • Size

    78KB

  • MD5

    67f8e42bd9bc9493b21eb738c4448b5e

  • SHA1

    ec14fecf199624be042c6a30df83b094d66c886a

  • SHA256

    2f298c3ff2c5cf6610ef03f5a781bc1fa7437459301d873f742e3ce1e6f3a59a

  • SHA512

    da4944a5a9bfe7ebbf1f918cf4c492b5937053a9cf1cc7135c2c21a636f69529971e52e202766fda322f6485700dfb6234a9bfab47cadf44cf50c8bba7416c6e

  • SSDEEP

    768:AC2ius5Eyv13358Nscxf+H04sxjy8DUuvJFuXX1XiUc:uius5EybG2UR9AuvJFuH1XiUc

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\67f8e42bd9bc9493b21eb738c4448b5e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2076
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2076 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2080

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

    Filesize

    1KB

    MD5

    77affe72d09834e6f82179985a7fe9cd

    SHA1

    91e2bda86e22bad4cad3bb930f20923e82bf99b0

    SHA256

    cb77da2b4fb45016a9a1b1d373d83a29d3325e775e91e5b6593c94044936fea0

    SHA512

    be5ff9281a293132dd56f8e4cf6556a661feb54d8b921046e31c47df5d667026179dd565fb99e9b50b251433ce17ed25b09c54ef85415e3d46d26ecbc9b31bff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    979B

    MD5

    2e391c412274d1668c846b871a31fc8e

    SHA1

    6a6540b48e3e154c50957f4e579ab3e360d8b8da

    SHA256

    c6c49f6d207c73c2793cc00932f61f6f05a0dc5f79968a7b5e93a2f73feda411

    SHA512

    86d1093ade7984faaf1d7b6d5abd4e61a96411ef39f86b9774c14bead678202a615528908f2999e4aab8967be5c7a0560d6397802322f49794ac27c690a51922

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    8f6ad5f4eaab27da4056b21954f01f2b

    SHA1

    c109bc28e990114236672744fb9a6ba677ce215f

    SHA256

    2744b4cc170314bc483472085945884b97f76c87cb1809be2829ef0410de4054

    SHA512

    1cd8128328aab63128a7d75c38bae2026a261e63d11e2285d5b26102b110c15e45f3d6d0fbfc6bed5f857fed1b849edbf0440ccfd95007e0a20e16900e4c5163

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    6e4500036df83ca36c2c6b1bcdd9c4e6

    SHA1

    0975acf5c72e15981052c605c22a13c418b038da

    SHA256

    251feaaaebc274b75b06068122ff550182dba15b24f20c21aa062f97e3ad02d4

    SHA512

    82ef99b113088dda2ebca7edccddf3594fa22c8bfa18e03361b4787a8ba5f05f4700c68bbc8857b869aa5bae46cb57709bdc13a9c68a20b9fe1b8c75381a601f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    74496fd3f1f9250c1cd175bb03d24ab6

    SHA1

    030ac9c9d15aa035b21306ed1d084aef18590e33

    SHA256

    9f834ab1641ac9f48a7d143b8fec882172baa0f013b1291323f5802bbe5fab8e

    SHA512

    9bf66547ba9aa9d5cfdfda4679013b6c2954fe6dfa91fa8cfccb2a2b7bf5e074d412b575595e4a9ce46eed85fb7c24583a56d461a05407ed0e05514c745ac6cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    fa49b26b6d09ca3838a625b5b1606016

    SHA1

    1cd4ba93df79fb0e121adb76a32eb01d61a32a55

    SHA256

    83e59f9e8cf267e10ef0417a2d8604b2b1272324ff9bdbd3386d85bd9683f357

    SHA512

    f5e406712f65887af7abc30e1e93eb69d497af8282e114adb5eb4e9e55040edc09028f4d62cea05b6ffd8b0d59d5ec64054d05267f6bf062aa212e07889338b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b0f8014a4ae46f684562451c342b212e

    SHA1

    01dcb1d712e37619825aac4abb7062ea4ec29368

    SHA256

    4e257652a2e69ba7e9c3061eb5bcfc4be5bf74de07e08eba26ad7ae2cb102f6a

    SHA512

    90e7672f232d3f649f5a437683ee6e641f96518a48f01838be4f7dcba7ddeca1853efdd8b949957c1042dbbada8a4abbd7a5d992b8cb8d92f51659b9904a7da9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    45aa5a5ea3b8e827dec0f0298a8c56cc

    SHA1

    be95bfb10e52fd43aba14313dc2597b0e49d4f87

    SHA256

    f829055f758d75f270e641f4ce691b2053ea035e63fac0ae52ac9f05c89f13b4

    SHA512

    864d7b5eab26547cd2f0f191e375a65c76333f1eaccce863f769c386b2722b6e35cf28803356b798f85f564d4571beeda9991d2c835b78dffdead13ee8ac1038

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    f71f002e1ddac5b623894ef802a380cd

    SHA1

    4c8ff3c0257cf5fb305b9d03c89d17bf2ac29e6f

    SHA256

    37309641eba65ea726c12b4cc2a95963bb6cdad85cc9a646aaf52c7eb864de92

    SHA512

    9bbc553627937f441327a0d4940200a9d62bdc4186f936c0e3b184f0a401d10e21c3566621833844ca5bb196566d611b34f54596a1c482a1685c465e9694ef03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    4053d273f0eb6f79318660475712fd90

    SHA1

    2c952d705b3dacd2faed17fb946853631202167e

    SHA256

    233a91fa5d123f30092e7cd539a5e260954b2714214f47fb7712d9d31f3b0516

    SHA512

    886d30625c3b81a60368bc241301a1b67a973be480b70c38e18cf561e012dfd6e82e5e878635be03b4febc8e490d802021c97f07a13eebfe9198452ac153ee4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7d4e5064f8edbea852aaf19af0d9826a

    SHA1

    148de520e424ac2d62df126de9a063dfc8bf0a91

    SHA256

    df203a3c1bf3da7d6a080d50778bcd23d1b7654cc059fc1de87e95ee51d0b5ee

    SHA512

    9f5b96ecc00e60819988dccb7d9ff4f750661640b51a69db66fec68c03ae5074511d67fb0aada80a74a21767d3defa1c5fafe7e71e649a52b058ff93e1b2a223

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7f1b16aa8f1570f972672fc22d64d915

    SHA1

    ba0264e4cec811f4e72fcd2506fc1f4222acd4db

    SHA256

    9674cd27e725d955189200e651eb78cc4818ba1643d5b8372a5056bcacda182f

    SHA512

    e4790d07d329eb74418622e09877303b08c367809c49606652af7670cd2b8b560b695dee20f177e578a80839224776d3cbb50366581a102d4f6a8b3d8cd49622

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2fd2d42339a8b006625170ba059b1a1d

    SHA1

    4c3a112ec821d87d1bf67c36682486131e048a88

    SHA256

    73343aae4de9d5b189e9f46e5c1f56ca9786c08f4ede325abe1f95d004060d9e

    SHA512

    be23d3f7c48314454608b70483fed4427f254463845e107bb865d5d23b3919e9cf8004e5a8cc02d31453db45fdd762c75613c1c926811fa1c42640fd69fe8254

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ef8c5808b31bea87dee7825601df7c3b

    SHA1

    8f096581c6b5e312d118a8f6d0c4a95c5ed10ac9

    SHA256

    2ef2fddc2c5d504778d505a276a36d323c306eb67d0646a95a52b565971a5491

    SHA512

    1815b42d6f5d86d4a61e43a35484ae6c3331b6015fda5225951b7d33b35e670c3f1536f2d0c2fb2e67c5082f0df0753cdaa83ec54cd2524c859adb5f98585906

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b1b398d07165c43e31780f55be4ff048

    SHA1

    b55646cf8856321f89b26bbe5baa39c360c203f7

    SHA256

    6db40ded88bc7492a1ce2886f779c319fb77a5c04e72e9d1b2ba5c275a97cff5

    SHA512

    47b65df55b822addb4f9fb5ea5ccab5b40191ba08977dedf512f24bf964f49a9d629a23595f4adcc75dcb49332172ea985b9541d858936b0f2b455992f9cd8ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    16a39dd56710c6250bad9189d95af6d3

    SHA1

    26e642664999bde02e4fbb6b1b1077fb638ba4a5

    SHA256

    0174aae50517007b9b3b3062069c7b3216bdb5db04283811805bf206de2da0c7

    SHA512

    0311419f7429625b8813e09ea8bc6363e3038c8d04983b7733263d68037a990de0f5ddcf3a13e633a5ac37a66cbe679c2d1fb82c01117f70fe7921d05cedd580

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e443919a40625b89715b6befa8da317b

    SHA1

    246587fa9ae97046e497cdf6f1e4a69b0fd513f0

    SHA256

    b7835019be53fb9e56d5457a34644d265e1433c992ae10550636f089f597b77c

    SHA512

    5bc248655f1db8c20fe77f0a3574738cdc5e3888e55414d2b20d232a0e40a3caffe30894f1ba28d8624dbb630972455d798396b9200e2556f371699c17ba954d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    775aafd25f6180fb7340e0a8d35a7691

    SHA1

    2bf3f4a0d8fc555a402fa38610b5e847a12ba549

    SHA256

    7d83a1f55e784c25efbac1bc4ced5a5e6ee4a2a762c43f1249babc45614a6282

    SHA512

    e4de89deb84c4db126ab5eea688ee94c67125f20f161711e6076b7361eb83a537205f9ddb80766717aad8c48e36eaa1fa391ed12d570c191ff1787b6af99feab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    fc73198d19547fbfd92024493b2b5f73

    SHA1

    27981c521d38141f6a8ab26b8189ad478939b2a9

    SHA256

    f4362e35087bb11e243b2c92b1ee10dd5da917c5dd4348b0692006804441a8aa

    SHA512

    bac1bfeb3074f910b467ec7e40b37d7bd256acf007d84921faac4ec6434fdb07389c2a666b9b8b071da36aadba63acd50d79776e19f286f708889d766b64663d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    6236e19d7c6e18a4e6a8b373da67ac9d

    SHA1

    bf12aa5b9c002ab3d2334ab99b8a505a7da3d8c2

    SHA256

    702059d4fd2c9c0aaae0d6b2fe3585ba8820031111db90b385cd4bb0fac419a7

    SHA512

    11fcae2ca4e9d14bb6ffd8d89333ce7b6cf132d0e2b768959d14b716eea071a27bd34f0ad8232979cd196a22fecd03d2da031811081381643d4ace95f1704267

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7c003de713c3a547b46965999dfd6d08

    SHA1

    4277e61f2d8e5ca4724a80a89fc1433421f799aa

    SHA256

    46ce52d1f0ce1c0998e5f1d73694125302d7aa715de230407ad7071ec54de75b

    SHA512

    356d973d3ad5f86960e3990943cd146415185c0de81eb380c9ec2d9ee96f3235841d49416c80ced4e40b63b188e9211468d8a3124db72dfe5a4293ff86f54f15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    935894d739b9ecd9adbf300a93df612a

    SHA1

    131b1d9baee9db93b32922df8ff1182a435eb135

    SHA256

    af6621da78cbea089a0b12c2ccb6a4904cebead8e60120fbfd30545a2e441321

    SHA512

    0145510c39a07d7f8ec97adaeaa15d6ade1cef6431fdea4f83b083932d7f8442f05ab21a4cea17ae6ebe6d4734599b02b13f06973a3b03859c547bcb07f75469

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2LF9I1AK\e511c0ea7dc955b9c1f1d11ae3575dc5[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\CabCA07.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarCA0D.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b