Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    27/07/2024, 02:42

General

  • Target

    76c2c91e5ff1b1d01bd7eb3c4be1e7ed_JaffaCakes118.html

  • Size

    57KB

  • MD5

    76c2c91e5ff1b1d01bd7eb3c4be1e7ed

  • SHA1

    28e4f5e423bf778e03ae1a492bc76edb9ab65784

  • SHA256

    1442d8cdd4acfab3debcaf0079805bc7decfac1f8b752799dedd6db79e4cb8b5

  • SHA512

    5cba842318aa8ee80321004bb6a607b6b34876be506a14d7b4b48ed2964a370a54b57e1e4e10d502212d2d32d7f06d1b362bd2a64d5c740a1625e3f53bcb7061

  • SSDEEP

    1536:ijEQvK8OPHdVgwo2vgyHJv0owbd6zKD6CDK2RVrofjwpDK2RVy:ijnOPHdVe2vgyHJutDK2RVrofjwpDK2m

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\76c2c91e5ff1b1d01bd7eb3c4be1e7ed_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2208
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2208 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2832

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

    Filesize

    1KB

    MD5

    55540a230bdab55187a841cfe1aa1545

    SHA1

    363e4734f757bdeb89868efe94907774a327695e

    SHA256

    d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

    SHA512

    c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

    Filesize

    230B

    MD5

    3dbd27c69e359c2a3651552f56939d59

    SHA1

    764f41d1b0d5539608c70242f34e28d7448c9bb7

    SHA256

    f42e5ae360f27b8710a09c0f57fcc65e1c59fa290a88a3027fcf8732883b2324

    SHA512

    1233cc9b2c08e4fe24039d18bc5535e682c0da335a1accb4f37a4a3f4041c61fdb50b2f58b312be218e6d2f322a13b0eca03186db50bdd07f01e73abe5dfac0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3247370b99dc55e81b6342e0bde206ed

    SHA1

    f3ad10f86dfa147c64af74b97ed9ce889829af46

    SHA256

    03c08fd84945448c2fd8813eacaf36176c80dcae570aaa64daf1448f4bd95964

    SHA512

    c6a01636af11a821414b7cbbc19302296d289ed24d95262d5e0a3d74ed6da5e3bc1a4465880a465fda8aef7f863fee281a5ae4de3cabb7c9893ee95073afa9d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cbc1a3b3c05ef094d4ce4c567275a5f0

    SHA1

    8246b4477a55fb0a2fa87f7e15f348feb0372876

    SHA256

    0743387054326cc6a28e8e0759740cfa7047adc8cd08d2decbfe61cb133b92f5

    SHA512

    47b073b8203de380add2b4b1baf3031f3dd525c317e36a18136a09035938a3cffb24b5833d5ad6345699f45e455095e5dd4c0a71519e4dae778840aa39c57b93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e17261658c2624f0b5f41ab94802f14

    SHA1

    36492380ef62544616ec7c6c950608f0fe3ed66d

    SHA256

    f41539a35b3573fe12e1368b1d33b4372c396890fd4905e42299240eead31986

    SHA512

    d13d5f159a1177c6652b0070071c3ac34393110dda017db6fd79659d533caac69fcb38280a622f30a5558eadd4f4312848a0766bb474e545cc4348271f0d5b2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92404ac0b11953ff8fd139df6d3f6a68

    SHA1

    55358a5b93d39ed6cf12e6d5d6f6684fdb70788d

    SHA256

    901990ac1a6dbc2f74e2e8c69c782410a44b96c2f59dd380d6ae728da59e6b84

    SHA512

    7dccedce12e5de43463010fa82d1bfe6dd1fca8bb856ee26bb1c9930dc792a1ed5abcdcf00ed159fc6515249bc41e3a982a5c0710f960fa86b863768b7e670c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4d3bd28ef1795bf7e36225c332cace1

    SHA1

    c98faa8780c277e7911885a637de510faeb88df1

    SHA256

    6921ea03c25fc3b775e819b8425e4f2fd78bed039102145cf0fb2fc4fdae75d8

    SHA512

    348bafbcd5b2f3df63056c25e86de43e59cd33830e3cc4226fc65fb12a9ce9ab53f57effed4a31ea84e4a0fb256726222f12037f17325aa4a7f3698e1cedc985

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    958ddba2644f65c99326fef62427d201

    SHA1

    4b00ad8ea054d70f00776d77a2f39f1afb90ec52

    SHA256

    55798514221a7940c54117d03f1a4a4a5881c87c95d748cd8f281b3c029784e7

    SHA512

    37c11df431dbafceaeff0677d283a3e6faa008eb4e8124336960e6124bc3601c43e590ca7a3d926f8cbecaf5ab505be5a03761be116eaec66f937de1fc6afe06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    08c460114458f99130d92a42277abdc8

    SHA1

    04bc245abcc8fad3dcf0d5f26ea316268ec7c871

    SHA256

    c25ff89254752324a6ac7071992e148056c4401272244cfdcda18fe62687611c

    SHA512

    370167e4f6a6f25ab631e4b8cbf67ab17050c88640d4febfb5843b5ee9ccebc297e59433a35cdbc18afab7d8d84a9ffeb08cf2e832f9931d6cd71792736d1282

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bddb59a9ab138aa4acabd65c4246aefa

    SHA1

    9ee727e74dce2c76279d0a83d4e871a99dc53cc9

    SHA256

    2ee6a2eb8ab54946666cc6403473917a874303de4bb8b40e4205933454d89b41

    SHA512

    0aae20ddb00f45276704f8d69c4877ca5e24cb8a066580a6bc4e1489a7d712eb6ee446400c4d0bad9d4c7549aabb6f22ffcdb78c0046379b19cf76e52dc02bbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22bc92a055644ecc66245b25aa4c9b31

    SHA1

    f549476783daf07e37cab5bfada32fd5b8cbcab9

    SHA256

    c6ef5ec668070d874a9769857c78ca6edc92597deb55a18eb5defd2cd2d39e57

    SHA512

    8b2eb4cefdab6a5e1e334d2fcd225ffd24137c5318553c4ea178918ccf0a0fde0bfc3654765690a89b45fd85b628f2a18c1924873ebe768bec15a8a19c0bc6e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e52bd1c5211393ff60c3aff37020485

    SHA1

    902c2aee7cd46f50a4c402c657435b359ca8e237

    SHA256

    dce29f47b3b963ab047edc6002c7a890c497dfac242b59b249d0df0df2b04e52

    SHA512

    981d5066d91df6342d32a80bfe39952ccd5019ae930bc8b52294eab0e313627a838e8cfdac8b81bbf0b43bd143dc40142e131770c4fca3e56beb9f99d83e8e6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8eb260f20e75bc15adac7ea45347e41d

    SHA1

    ffd5c4728f0aa88763e16c6cd55dff32de4abb85

    SHA256

    130ebda5c4fab95a81bf9c057a5ae737dacce3ecc93edb921b97ad8690f5dbaa

    SHA512

    42a4547bb5aada91ff24d98bc2bb609807809ef3f8fa22f65be22c6985e98beed4dd7ecab3a2d8d860982a3e1c24f310048327cae30e44b3977c503e8fff7594

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ec9889aab2254e0368e15c2b8101e82

    SHA1

    13ee56be237e5581fade084082b5fdfc7ab38ab1

    SHA256

    cf7b62f62965e81176fcf9771c0bca8cfd56cc9ba68482ee4a62ad8caf222d6a

    SHA512

    eef9d0323da041f1bbf571525bea62cce6c0537f7f5899c2ff10dba83588aa3757e3d35c8b70dfd02a1aee9666fdc6277e54bfa90ada95f329b7e17de54bfe70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    daba445efefb64416a00e21fc0c591c5

    SHA1

    747dca61e8e5a5063270b3aacd03fbeb34ad150e

    SHA256

    9d5ea93385040835f832acf34a0defd11355caee76252e4780c1dac9a802c141

    SHA512

    518d0cc37eb230f835c39f392ba8b9d5c6a87ff45a8af4f0664f4fb42bbbaf11d044b56aa13ae6259eb1265c8fb51a5b05f394ab8799251efa452b3628d4abdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c1c5b1c1f547a1536bd01d9bf86baa32

    SHA1

    7d2d4027a342a87768c69157ddc8e3333abbcf62

    SHA256

    2094b71ed5d9a5e755f2f4ec5b1dd9135d1e31bc954227d41753dff692c7b096

    SHA512

    b6bd095cbe91bfe1e5fca40df50cd7655a66a9e23cb3f32e4a8375e7a843aeab842436e6c64629d3fa97816576cd53728e8ae43726ba862e1da2f311dc0a1454

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85cace876b32280d560e81bb93037730

    SHA1

    8a553a63ba2f7139e1d9c394a92f29fb83697e5f

    SHA256

    8b7ba16c09585b09e5299e13b6d789f87f273d08443a52b8eb4939182cfb1f46

    SHA512

    4c9733d6b011ed88267a64da1914ef3bce590052fc28f3fd42162b8b1b4ed56c8208972e5b90b0554c21e0ee66de57754f5153125158cb39a4a2cba38a224340

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a75b7d35a02865fb1333a3ad1d369c09

    SHA1

    f4062cf63a9c710a2674de22088d504d631d806e

    SHA256

    52682f976ea91fa4e51e88177c854b5fa09e4e53605b671babb84e26eaf3c8b8

    SHA512

    73aee8710071667858684fe690535787e17622bf17932a25a224bf4ab1c4b2532d2f6022da938b8364cb9c9da2a98b874ce51284b1ad9a592a6a4ccbfe50543a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28c333793b62bc3ffe53466d5ee4eafb

    SHA1

    a453e45d6f8a42d0785318eab334afd69c35075a

    SHA256

    df7485028eb8779b660bc23887349039de8dca3a907d294aa8cc811bc574f6cc

    SHA512

    b4d3d28e1e63165e2e30d8d43ac472618f662ceaf35bac75a7e4c7f6f64aa3cd16eea13ae4c7e4505206797487eb289611ad3a8d2fccbd292998373dfc1ad2f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cb61320a285f4aa04ffaf105034d4cad

    SHA1

    75abf4499f73197dc6f4e715675f39320ec266fd

    SHA256

    89a20901ef371eac2a326549ea9f8af3a2d34005bc9a6d3c343fc9864aa837c4

    SHA512

    44846d4e5613449dc61ed3bd278eaf45de31f199094b8686c658ca82078e6e60919601fcadad1031772796ccfbbec9623a2c688e03b94db2a0d6351c896e10af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    79f0331a8fec828f3043375a8db98bd3

    SHA1

    e95e0dc0672a2b97f9bdcbe8b300dc7471ed6bbb

    SHA256

    da52261516760853ddc27b5a74a141b89495fa1325b85bebae60e7b5f6447641

    SHA512

    ac59c823dd8ff41ad0aba61f7729c27ff71f53923838b7791b8583a11e915482e2f7186e67107ee5f4b8cf32be54e0cd81cd47f4eef337bc8fe5b8fbbfc81e02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    275b2a520ab7f90f5c24072d52c33d28

    SHA1

    681f6440ae046a622eed855d2b50eb74e0d2b7ee

    SHA256

    4d88dcb306d7726472876e7518ff82e5b0b4319554e4459764092d42ead9b58e

    SHA512

    eaf1b742a6307a16de559c2383fde7d880097c52cd7dac63cf250982e2412939732af508b8a7262a6bf2d2483d1692b06bede03a3deb387d7cb5244df2588944

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    787146da162230f602a6172d6a32e490

    SHA1

    bcdf448acad6fcabc978269733d76b290f79585d

    SHA256

    e0863c2b7ba61cf5fe4436132bb9190e6061967ccd232a6800e5a24cab5495dc

    SHA512

    80b9dc40c19f45f0bd561f32309c6aab0e9624bc734ef6ae8d293313c98724de7a70269d283f9bcddb12ff11988033f739c96d105de1327fb6a924e488131b90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    010c46e238bbb5fe9e252395676f5b89

    SHA1

    5ba9f86d504202772376a6f612be3889cb91c342

    SHA256

    3019a0a5fd967ec40fe45b32275615361d7ee7be41fc0e14c14b9efbbd2a8530

    SHA512

    4fb13143e6c04213017e3ade8d6de1117d215fa49891798d16ebe9c65f1396892110532ca618653f143e03071937aaf4f0fdb6764b2ad4b77439c1873de73032

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22f1df5456e503614953d5120a5d8193

    SHA1

    09a277d83442c4264b6b1012aa1732877116f0b6

    SHA256

    ae6b64545b7cad905f657522d3eddc5e1fe7f734fa2b98ba5a4f60c31212f679

    SHA512

    3bd7266e79326f38f0691774bb9481b2ec649700a56ec10dcc2189094cc2f8fc106e7420a5b59910924a6251ccce6597167a11b9706f21d743af6315223ad98d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4ce7ac50ee83c5a72b9e3eed898c937

    SHA1

    223f9aa89239f38568dce00884d476aa53f0e969

    SHA256

    ffb55a3347d84f230d5946b7625ea626a3f3b6c6d5c4661eee6fc68a7c4919dd

    SHA512

    b39a6c896fde5c0ac2d82ad7e8ea076e6c40dd61a7bd3e5025ce348d4d15b20b181b09f3078d42c31be3540e3d9cbd7077e5909d497277ede0ae4122ecfcb7e3

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X761FPIN\f[1].txt

    Filesize

    39KB

    MD5

    2e93c5da48a59e71c288827a16dad816

    SHA1

    e3fdb182083ebcda9351fa4b474b85fb720392ac

    SHA256

    78850e878a66e1574dbefd37609d7e07f3d95e897fc4bfb7b0f5a5aca28ce027

    SHA512

    408dd367909112d458adfc67a7ad365142cc8b2be42465f7ca1335c764d6a81aced6062c707b7d75dc3b83b66bf32685c1c197dc429cda9da524cee39646c8ab

  • C:\Users\Admin\AppData\Local\Temp\Cab7CDF.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar7CF2.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b