Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    14/08/2024, 19:22

General

  • Target

    975a92e5c7bf49e5e9fc2ceb32eb1d87_JaffaCakes118.html

  • Size

    57KB

  • MD5

    975a92e5c7bf49e5e9fc2ceb32eb1d87

  • SHA1

    2455567add613fe18f3ab8ca3ff6a540b5af65f8

  • SHA256

    49968dc45af434e7a924fb08570abaafc0c936e314677c532ce2c1f4e062e480

  • SHA512

    cb445affe49a46b80f4e1aff46903cd8bb3ae6a17f29677597d40c057d03c0a30b9d8f3fdb06c070698e07063ec8f0adbcc4cddd59005108bb4d1f2b1fe8325a

  • SSDEEP

    1536:ijEQvK8OPHdsA1o2vgyHJv0owbd6zKD6CDK2RVrobBwpDK2RVy:ijnOPHdsR2vgyHJutDK2RVrobBwpDK2m

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\975a92e5c7bf49e5e9fc2ceb32eb1d87_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1940
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1940 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2724

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    f3856297cdda4a6a1f4aba98704c9e56

    SHA1

    15c441d3323827deca2c5de520ad57b04c643e15

    SHA256

    208a8b187f3343272ae89e28165a4ff7e56e2f726b5faa7254fc216e36fbf150

    SHA512

    de0abdd2e2c418049038108229643eb6c9220def8263e74e1d9921c36d6930f19823269d21d906fc9e1a6634ff800e76855f0d5b83928d9db3b2ff2897747e0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    efe314c3c8e5505a5e0d841130639d13

    SHA1

    f3bf4bdd67d665d2097b76144b2278d178075921

    SHA256

    d429e0f85b4dc820cdd820d856bfddd09db7ec6cbd623641f77b88146e9cee44

    SHA512

    0e90db97ed20d8e95f99406f4d090d7231a9849fbe6c92e65c1f36dabfa9dd95cfae1469a946d8497dcf2983f269fbf3c3abb05b36daab57488eab37dd336fd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4425b9759aea2a2bc247a1ef87d7b402

    SHA1

    e3aa37425ed163a10bd30d731d7cbf4c88e724cc

    SHA256

    7899f47031248797a2e9e412dc973101b023ebfc30f00afc5dd856cd0cea82a6

    SHA512

    1f7d27d2d1d05a861aa0cac45f9b6ca6d270f8ccf1cc5a462d5b5a3f6ec49f8950169387b84d773d008f2528dcb77e4298f0985d96b19a64cc6b17d09749a4f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a188abcf3e8b9c1ebed41ebaa296f12

    SHA1

    c94eb2f8f99f3f2362c2a9a3f12f99c2d895d4b2

    SHA256

    c332c006daee112f0eefea883882d810992e449ece677561059bffde903348ab

    SHA512

    8459b9f542d132c7aa95aeb98c73d797dd04e5139b03b1e3924598f66a9c781e0b3b6b56af6eb785fe055bdb92444859eef9bf470d19a5df8a385981f71fdba1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa5ab0fa18a6f8360bf9f702c3e18d6e

    SHA1

    dd0743fc675926d5ecd26d616fa60d44dddfff5f

    SHA256

    12a7d3bcf578d6145cedc29589c5854672e051941a813afb18cf577cc01468b7

    SHA512

    925f516d603b2b3112f718db1e05d1b409f72f35623537be8078360019160e3843035e03f750633f98a27d63cef006d8f33406bb17473cbab0298bac822fbcba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c0953fdca421f60a57f32c7b88c6cf4

    SHA1

    85ebd79828bad5bc840a741ad818e959d71230e1

    SHA256

    998199cca27a98cb9ee49618bbc5e7bb9c6f6900a89989e1a65f07de801676b2

    SHA512

    797c9248da890d172a921a4da802df13b67609e1ae2436cfbdf7a0526c70f43b26a15bde801fb1ed56572b7d43b11733f6f8a7fe43276f72d21401838bd57214

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0f8d30db85cc70c0ca8c82db32f8bc5

    SHA1

    6d5ddd9ea488f2d93755e52ee24c949043a9f576

    SHA256

    e53beed476130dba83240bf01413a4cc21803d36e9f0f75b5bd0d034fdd85105

    SHA512

    14033c4ea883d56b4aa404333c2253d3a7a53cc475f726a3da2dbd862304cbc00ff138f211728fb85b9c501a5b0a5f562c03c055ddae031e796c533d19ab388c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    77980360dfc94cde05ed1f0b1d39e60b

    SHA1

    2b0ea6a84402af14e64de046dfe927cad47efa68

    SHA256

    4d701e64d891b64a65cf43098f7be5382d2f3116fdc77741c60d48386c28b752

    SHA512

    72b0a5390168ff2ea3500a3c2aa818a9d37b6fddef2224dc6aedb8b3c26e9925e737d4ef52d66797d99e755e07213492303b3b415fc2a5a4ececc34fdba5f229

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7341e0ca12630043c8dd12ace56942ee

    SHA1

    75cec05287b0c8e8493b7b1897a37d8ecddce68b

    SHA256

    599738327b43ae8a8cd17d388b23e562fe3af55941887339d3690459c34a81c4

    SHA512

    9fc4957617a7deb29b20e93c02fd9e2638763cb24f18cd20828b008242e6ac50fd628580c538038a4ba2b8e4c6f423b62c92e4bc61904f86a33f0db11909c9b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    456a21e12d99fcf7ffd147cc6b321710

    SHA1

    65e5c86537b38beda9e9df6c19e44cac0ada780f

    SHA256

    da710907072ada7d361616f7aa85555dc47f41bb46eea9f5b728ecafd742f791

    SHA512

    56309e744c6de0ca16cb7b54132a0825b1a6957eb5cb745ec1d688fdb6b42f8fe4f9193f1521a8d40767de13ab74c26a7546da106520286c76910537a6d04320

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d22eff69ce2398f279f2aef538e33117

    SHA1

    e0e3544424c1e70a6693bf8b02235c5d34055fdf

    SHA256

    8ac60e7071e1a009ade1cc350c0ad5dad8c15c5b39719c2eb2751d78b03750b0

    SHA512

    928e815204e050629938916a371d63a3198a595c9c6baf9fb0e7c89c2c64d27d28f019a9bb0471c383a218a13dc67847249e2e148e1e00a1d07b810555c73d3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d3a36e6f0d7f84255b80582d81bedf66

    SHA1

    c25e1697a6cad54cad450e2fca3ebb09c3510982

    SHA256

    f1d2707a74719bf13699f2d2d44beadf4e26c41ab9b54b1aa843d5338f7a3263

    SHA512

    78d53b7d1b2af24ec967ed13dc422cedf6056fd540714fd6677ec4873b48dfb211c03d762338bc6f0d1bb6e94a7821ed2af0c92e6c52bf5fb488bc16c2140aee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5c0a364558fffd68bbe79ee7d6c38fb3

    SHA1

    e159166b5f7056c3bdecee1eccd89a67e6b47c66

    SHA256

    4b06f1d29324b6d681455d27d8a21a64154bb1fb64963f30a1c0d2b5dc395950

    SHA512

    42105fa302ee57ffcd29264e63af4aca327a5dc2e50a42fe9100bfdcf45729fe522289fbe2d0d3ad8ec5622a1d56e12797c22b12d95e7c655818c582c6a5d5af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cdc48014137fbaded1e6bf5cf02d6c3b

    SHA1

    a92eb7fc44626567e055ce4a0405a9333b9fe89f

    SHA256

    89d6e6dcd9757200975a4c0ea8609e337251812e750cc83fcc3a72c2e368107b

    SHA512

    887173813f8de2abaef818985632815a5f3e535807b5a42721f9c5a99d4a95c1f108a195bc0665daded5694793d90e98dd84230f6f0efc05a4b82c0d7f2822d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    044949ea3f810fe3743570bda8206210

    SHA1

    e43d28e4f30cb4db98451d03e9fb809d9e38cd0f

    SHA256

    869a81c9431bec3dd04a6b5dda5f752e19714987ce57b18be4d7ceb0961cd770

    SHA512

    d168895c5561e32d2fea0ecea15a680b7285abe3e246dcf3e1ed2fc160a5a8846da4233d83ea2fb5a7bfbbceb5c13a40156dc0fc9d6c5e8066f8e29deb5402e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d29bc01a1247139bb47c287a697719a4

    SHA1

    9f8f6a99b0ddb4e2b2d7450824e358eb950c2e4c

    SHA256

    45c555183522b7de00f1934a0ad5d26ef1edde7c2a2ca5f5f35d39d7ab4b3b93

    SHA512

    495c09dcc7341dad7e784f2e28061b3ad25a0239bfc2bb531656e6d42b37dcd6acdf7b34a99232ed77f6e924d1820b4e8476b5d5b045ecf10cccfd8e3c47b412

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dbc6a11098727216f7fa6003e5857cd8

    SHA1

    94d6d04716d3d76bb553961f67b86c79afe85eb4

    SHA256

    0681cae844e2cbfa260bd4b30bf31e7b259f74092d16a64592819fe76abeb4f5

    SHA512

    49ace9b64f338d53b7a3ead2e99d3627d6923cd3d845307bd29476e32b6125c806c45877229ab41f02915d1e0fb2041373afb2d64b21060f3ba6ed45b7d7f076

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fec495c94a639c7bc6b99c8b992f9a48

    SHA1

    538d63082d14f4a2ef46f0623b9908fa83a108cb

    SHA256

    3b2e1dfd599e3f3b21dc2cc875d00406fa2f64a6a6725aff5c4ccfbf42ac3b4a

    SHA512

    002ad16c9dea1272ac96ef26d14a308c1379a48336cb8a905b2025d27cff925b7e94833be7e75feece7a407f5ac510c46b03e31c074f3320d1496c1fdcfebb02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2eb55dd73af9ec3536f82e4d03837bfd

    SHA1

    b276f2ad9928cab270c1152a7356d52dc28145a6

    SHA256

    d28032a4f28f57eaf10dc92fea17d6c59832af7a4ad406f3ff985acb481c81ff

    SHA512

    c49d0461c9ce98b9fdd62ef253b55dff02720ffad368484697dfa3f694ec2909e0387cb6db0f8fbfb171b649dc4cdd7cd41c290da3dcfd13b4a107bb15499eab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5366c9979ad0ee2074f21ce7c1d4b473

    SHA1

    6392b96f5604417974e66dd11ed837512f81a505

    SHA256

    59e324b8737f9d9e473e9bf02b885e77c80c69c7dd13dd7d0866613e6c419dbd

    SHA512

    ec70667760688c0cc7a6163dd9af2e59b6a520daadd67612e6d2efee007f67f31c12ddbd57b300ee9ff486edfc18c4842ed5553e3bc8c2d3fcd009b11b07a1dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a7295fc60fb9b6c2393bd9675127d19

    SHA1

    94b4533d2b62a2548dc483f0db140df5373b0a6a

    SHA256

    87523651406b3dc5436c82d837bbd5ff5b349dc1f9870f809dfdd33f3dbce763

    SHA512

    32632b3b8c897acac18472648973d822c793ed8467f24641c73a0b99085d57877be4de682b1f23251b6c4949449483f25cd85c06ad38897b6f996d84e0ec450a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    1bed1fbd81d7044f20e31553d2dca6f6

    SHA1

    cd8d5dbceec0b2f33899727293c4e4f58f531fe5

    SHA256

    0f04462b0cf4f5cce4a03d3a4560f215134ad118009cfd6ff006fed230105e8e

    SHA512

    d5a73d5c03c0e46477b761741238cbe12116567476cee863487e639cccbdc32520a30b18f5629084c38a40161782ee186a6fd94e8e6709d4595d7d22b210c4f4

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YUF3ZB4A\f[1].txt

    Filesize

    40KB

    MD5

    84f21ef9f3bcda273bea241586d976bb

    SHA1

    67674c79e8cf5d04a753ad604e05c80995df301d

    SHA256

    9d548532b334e9611e66e94d873cd891fa6ed23e9d70bf5e9e87631e9916e25c

    SHA512

    ab07fe17562b6141bc36133d5f284618f10bcd733df8af3a27ee36b03fbb1d34c51a7b89ef9d594815ba49b0f9868a78786c5eba1b42719a8dd531dca34b6c65

  • C:\Users\Admin\AppData\Local\Temp\Cab7C72.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar7C75.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b