Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    10/08/2024, 06:06

General

  • Target

    850be4a4763e365e983c6d3eb53a5e98_JaffaCakes118.html

  • Size

    92KB

  • MD5

    850be4a4763e365e983c6d3eb53a5e98

  • SHA1

    08970597ebb8b54964810f6165bfd7d5bcd3c6b5

  • SHA256

    c80a8f9fe76cbf4f934ef53e19291b17cf2a04b12fbaaa1d82e3d6dfd8073e1a

  • SHA512

    b206d5be7a599b73b459d39389687a89e151fe11773ab74feec7031f0c23595707542bdf422195b90fda1855ed31586f6653450a5ca9240d1a41367aaddbb731

  • SSDEEP

    1536:f2OrV46BuBZFuNGZ4OeWIlLPccaw6E6ukJ+lHQLQBkrJgo6KaOPMTD19DfbAkHXg:M1uNGreW+pI45Us5IHdHRusqBMAm4KC+

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\850be4a4763e365e983c6d3eb53a5e98_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2404
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2404 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3048

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    b51a54f9c56c73d7ad16843e42d9e2ef

    SHA1

    9336d63b78daf40c2db59e8943ff17b0fa32648a

    SHA256

    0bdc7091fff27ece10af8d7b82787492f49e48438a2a68325ffef9c30bcd93af

    SHA512

    e28267d402c701c02b5fae64b7a2f5b0ffe52cb16f954735cb1620f8aa1a583b601ec5e8f3d6d78dd9aadeada2b44ced0fcad7b6692fe5be7ac19492348c5f29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c03c6d1935974ed0da9549a9a9bc3b78

    SHA1

    b4a7ade54943af33fd4b1c7302f9524733526a24

    SHA256

    a793b4b8554f5e9f67f7ed55cd2c4ceee3438d2eb3670788383ae99218567019

    SHA512

    6414535de39cc24f6cfaa209ef25c8fe8ae02623f84057d9580534478850068e5bce2c7fa18cb8d963d333720264468b2d6e12c53accd96f38e60dcc1db4c7b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    48aef4adb1f6fafeefc45add20e92e48

    SHA1

    ee152654de5867285e80df011e4d7d0545481e0b

    SHA256

    bd266e17c86d11b0ac626f4b627bd58b3380c0d2a37efb34ceda49d9dd457201

    SHA512

    537c4e1cdab4ffad2f43734cd82bca91b9d46b5252e612c5209ffdbee0dac5ebf7c0a04ca8bd21102feb2558283bbd4651a4034c82fdcf8e9a033b3e9763a2f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    56775178be91c4ac8122fb2a30195402

    SHA1

    43cd46c314c7b32c1dadbb3bfd55b2e86659703f

    SHA256

    27e2417a29914031eeda2c9c15455b37264b2bfd57c6f91f4cfed7044dbedacc

    SHA512

    28fb5965ad7fca00c310543e164d17786b0915c248ecb35c6eb67e9adbcc3eed7f9abb1b0cab89f4f3551cc6e585e84a8433c05476a72a2076e8de3cf0a4e947

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    56858e6c699e842123566de35c543c15

    SHA1

    07bf6c62de0087298b359ee003a855f2e34a375b

    SHA256

    dec2815cbb4204b3c5a19828c1d7d00b6a677ac33a44d6c3b22e7d2a5fc7b3b0

    SHA512

    b0c82d0b079d22a0d1f7ec6246a296c83555ec12dde531566d3e6af3e3d1984f1bb794eee6c77f4b3edc25504b020c7fdedf24954b3ed49435c94d11d4d58cb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0cff543f00c374f630dba9304e61ea32

    SHA1

    769e11c3ba1f1fffd8b0e9e508202b8d64ea2103

    SHA256

    6d1473a519f5554a089fa5405213b31acaa8861323afc9063fb67dd99a86259f

    SHA512

    bf726aaffd3a74927fba86212a85224f6546074eae0ea2ab0d353411feb499922470ac05970459005f98639d6037f6c4949115f3a7947a569e2d7fdc8a3277de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    602a112edb3d8d9a0d0dded47592379a

    SHA1

    010daf3d4d4d947e36cc4ab04b1523c9468686b8

    SHA256

    9b35be02e3e32368a81a37db1e656eb96d0aad0b757c6dea33f6e914c0820850

    SHA512

    f369f1037962cfa49589d17d567256f052f8782f4bf872a693d7fec556936c151ca560db14d80351f7f4eb99d19d48d30c12df63d4d0f8b7c46b9d252346ff13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ebffb8f3b1830c2ce5b10c0ddb5d0e8

    SHA1

    6aa775c9ce41fcd9fe13f54722bc7bc213a3c4f9

    SHA256

    e866d75c5dfaff303b7786512256dcf25b6097af4c5d3820a05b150c91b69d44

    SHA512

    ff56233f8d51173a8789c462f22d428423c1b7e7bd074e3033fe6711bbf8d3c7f7e224e9e79a270ea2e7e95de99bf80207665bc5def587ab8914311eaea1b8ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7230408dad5cb48a702fb7c5a5bbfa40

    SHA1

    44a6d4e91b925ad532afebea712eee87d2193526

    SHA256

    75ccffe97755d354043d3e4347e7a36dbee31d5d53fa24856fc0ef8d90541935

    SHA512

    b60092eafd2ad46dc00128d5bbf65414961396328f074316eeb68360b9a695ff99c7fd9160533ff54f0b46807170126f4be834a1dbded4979fca51529b72a7ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b98eca3f36035d2d2b58a2ee4ea7e9a6

    SHA1

    4991cd3f3e96e9202e86a488f5260f79a10f291b

    SHA256

    1b931e0d9dc6180dd5bb172793e4de7486bfd405f3fea0bbc727a3a2726fd20a

    SHA512

    8c6c0647546d4b7816f442c30b5b0fa03fbc333b5a89d8eae0fd95502c78d2e4d777b95abc9004fd9b63c8209b09c9d6d37496cf738936a82ac16c6f87e3c495

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89a1a50d8fd8674c4db52f43748e6eb1

    SHA1

    e99d3984496422b096c0e55c1cddb303abfd84ca

    SHA256

    3a052c8bbc9de54518dcf60048aab47de8bfaeb7ec0429c2faf5b655ca2091a3

    SHA512

    4834354628a0bc50a6eba5532953341b4c4b65acc5c6f8e8e244e9283a2b1acf5061f8904b6b15edfe6abcb1082f28922e13f4ae2112099d7d62288f6428cf09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d98f4f61481c51e2003bc8310c632291

    SHA1

    ec5d69fee9452133110d794081a51b8906cbc7aa

    SHA256

    5883ebf53994c59f682485c2b62328832164f1b72fbc987a94e26cc2747982ed

    SHA512

    dc6f768f1590821f29cabb00567e45e18e0ed96b4e6d76085603c81ecb7cc10c7ef480c170f9a7114565cdc25bdfa1d5c5143b38d0a0d7baf5c03c75ae0a4924

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    95f403c780a268461f9365965aed5209

    SHA1

    06c18d429b75210b241fd7c4ebbe777911c49fb9

    SHA256

    7d6bd9eb0fdf8a5e4fc0574d4a5f47cd49a9f4c6bd24b77312897094dfe99757

    SHA512

    c4f3c1cb37034d5ba7236f2492a779cb5d1ab13ab0d806b7a6f0211e9c95a719fddcb7dce1920b3663a4f2784a3504847bce6732dbe0b8eb42ed96f7330c88a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    854e02b555cf15421120c68207645dae

    SHA1

    d78cec739b08521028078546c49bcce92499890e

    SHA256

    73da37324af39b4d200c309d03eb7f007c71bd3a0f64f58f9ef858b25218592e

    SHA512

    7afd7029058bd99eaba11a3c0633f5e48ea8248df0eb2e77896494651620b15693d171e8b2759046f5b2d032a67cb2abf5cade1883ed9348b8ad191767362a6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b259fbf34e497d3d77fe75901d3058b

    SHA1

    78a4d437435730cf57eb98531cb88fe789c2f67d

    SHA256

    0e50bc87899cca344a310e71948a9e413e5fae2dae6a4474e98738e0d50c0f89

    SHA512

    9f8fe84edbb8c7aa542eeba5281f0895f0d1a3bbb95ec16483f34062d598939be02cdf9f73c565bb4a98935f718750e3657b6530e00e711560fb5c5f940e8ab1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b1e87e00d30164464d5ff5cdc260228

    SHA1

    f8eabe692e0555098536985b3ac89c3f948296de

    SHA256

    05e8a58403bb2f156155f1d34088fe60c0aa98aaab2ea2498207b3428b297aa6

    SHA512

    22ebb82e43d088f70fb5254f18a6ccf67e9e97a0ab37eaa0a248f1e7bb7dd74828daa56118209d1c77831d462e6f365097b10d1b77a5dc12d01bb7134b4233c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3008e6df8c6fc4d8cb92728d190e0ed5

    SHA1

    858c6b4726181158a41e4d7df9ab6af5d493a494

    SHA256

    71256205650ae01e7079238f8433ed7fa6a3959bd54c4809417a8fd7819390a1

    SHA512

    c62ab329c153e03d288c7f90d59f2bb992eef468596aeab2dc38906ad7f50b58b79e2422aa67e2f18dfc6f56ea2740751c1c1dd90dd6860c0f595d92ffaf5afe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    54767ad3508d893a7ecea780f00d513f

    SHA1

    6a589a2a75046a6bf105ef56e57f84c1468b601e

    SHA256

    1fee30a05076df842b4de0e6aa8292ec093b82f176278818aa50499437c5bafd

    SHA512

    e2409463170cdd29ce6b62ba6d14de2496e8c0bab59b14cc72f445d9e555ff88b992c937e03f778a03bd390cd7897792c573dee46b6ecd138c8ed747e10fd875

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05344565d6f8018e015a04f97e547e3c

    SHA1

    6f398ff0d208b0d92ea4ffa9b4d74cb2c3fac39f

    SHA256

    1b75bae8990de76a57715c6e48ed2e2aed0ddba872eb0c45cdb7179c9dc55833

    SHA512

    58465a1f858adcebc3e395bb47e0defc232275376183416bed18c418a396875eb82ed9237fb8aca10f3d1043a4d24b8215c11e9e3949d84b16457f544a6074c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bb0ccb404c47ed720961b8c532f66fee

    SHA1

    ce371d5b9f9ad7b9b64b0585ca530fe18c881ca2

    SHA256

    2879e6711b1cbfa6fff364646a109ce72c5c1e749eff220056b1525475f57a1b

    SHA512

    961d68c17a316a91ff26f031cdc75274c6bb1636dee52f49891ae3e23e105485bd2064d87308a3219868e28a652d19c71e9ec8cf2f8e4a24111410387ba40817

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    2bcc753527a76937b105dd128fd0aeca

    SHA1

    482ebd96ba919bfbc5a2c10c0fb12fb6091a3777

    SHA256

    798ee16762da20c0e4cba36b3c68090aac80ed2ca16585acd9ed922c78b3615e

    SHA512

    cbae476ae0df834de5d11c7e5bf370505e0cc40b3c86ca8abe9e42d7c1c2c359ed078f752d57132c051518c6304b9a23bc49acac2a73eeaa051b6dc619e91557

  • C:\Users\Admin\AppData\Local\Temp\CabFA69.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarFA68.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b