Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    17/08/2024, 22:32

General

  • Target

    a466d3041a277111842f0f23c01aecd0_JaffaCakes118.html

  • Size

    53KB

  • MD5

    a466d3041a277111842f0f23c01aecd0

  • SHA1

    0a0973640dd5b841967a0615c4df3f53f23117fe

  • SHA256

    66fbe3fc1e1d765f99749b3b94c8606fa84deb6d7bda91ec2cab9a2820092e6d

  • SHA512

    9a6ace8ff7a91a585081cb8265e01014fe60ed79c00cdbe0b2a6b12ea2abbc9279766e8eed9721e0a0dfd5a439769566762a0cb459e51db931fedacb4825d670

  • SSDEEP

    1536:SPR7hotdc60tKldhFR1DY/Y//vBJy/1/1/1/1/P/1/1/1/1/AEXT2v:SPR7hVy/vIppppnpppp/Xm

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a466d3041a277111842f0f23c01aecd0_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2080
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2080 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2540

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A

    Filesize

    893B

    MD5

    d4ae187b4574036c2d76b6df8a8c1a30

    SHA1

    b06f409fa14bab33cbaf4a37811b8740b624d9e5

    SHA256

    a2ce3a0fa7d2a833d1801e01ec48e35b70d84f3467cc9f8fab370386e13879c7

    SHA512

    1f44a360e8bb8ada22bc5bfe001f1babb4e72005a46bc2a94c33c4bd149ff256cce6f35d65ca4f7fc2a5b9e15494155449830d2809c8cf218d0b9196ec646b0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    0fc11476645182fb0f4ced6ace9de655

    SHA1

    79e44007311c5bf626e7d5b498daa51c1e376a89

    SHA256

    9591912ec5a8a5ee506a3f96f9c75e6f462e2d5bb78f3e51aefcf1b107f4f136

    SHA512

    57e6c8349ea948f21f5363f1d8f92600e0b8f69a214923f857cee51741afd50561ddcc0b7c0d290e84b78721cc92ddd77a91a82275edebab8a106dde87fc0afe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bed9698c5c414cc2514c8ee991ab76ac

    SHA1

    5756f6b132f0ac096ea07887e5fbc6292dda659e

    SHA256

    e77d7f545ee5ec2a9476c5a1df20ce93e8533e38677395d245f0a96dcc35dd74

    SHA512

    7b9c3083c5ef3462564d3ab9dd472a863c8d633e6ef9350f85124d97a2236c0fb04841ee40cbe69dccb0c257e63c9ca0b88357664317dcb86cc31c36ee492226

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    420ff00f5c10580d093b795b5221008f

    SHA1

    6c58700ccf9c1fbd19e9163e3a0018f8347debd0

    SHA256

    630e6dd5d9158d49eb5ed1b631b8bf5fda703d82c1c10925a08fbe5d0f8caf78

    SHA512

    9e42fae1f62dd6cdf2ecb49fc672dd6d2b9b6d722ca79925f67815f64943eecf2d17d7e1bc21c3f1d0501edb24e40671b83c17dd98038991842d527034e3f2cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d3708345cabc078e54cbe3dcc4de2e4

    SHA1

    e55d3885957c696529b92efe0e70dd2bd7b1f58e

    SHA256

    8dc60de658b7899d89576c613aebd86da159fc779725afd7fe7144a74229c924

    SHA512

    7847e3d3afe89d3078aa6d2e21c09f52e613a039ac0686a96e4673358d551497fbff61f66063e2441e1693acfa0111f9cacaf4b44d20be6d212b58763b8f8774

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0bcca1c3613e2cbade452e84cad9b1e

    SHA1

    ea5f648fe38f1bbdc841b90bc0f27f059cd863ea

    SHA256

    875fc70766ffeba7e69e387a264e034179f1e01c46b12838eb9960d0a6cf25d5

    SHA512

    0d3cd348f3406f396b3663634b00b553d715e87c00988c60b88587b75505c99c6d91f302ced8b363c8a051ff89dc0dc0dca08c88c4aba7f5783ae1266474385d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cdaf0c202ae12486b31715673e7deac7

    SHA1

    bda83cee4f44e2d5ab9d2f125936561e531b9bd2

    SHA256

    a08d51b1e68812c415bbd563b6dfb56686f0a1bf20362ba5675a0347b8e0374f

    SHA512

    6e48c4dace9f0b2f64a3cf02c4e19a69077b0061f709e76a336319e46517af742a03876b7fa70d85ce1367c6478af249a0e5a8916a7249043aaf044cede1097d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b0ef81bf8ec38967107e868a54c4ab6

    SHA1

    6cb987329257c920515c9c892580c6d33d9aea0a

    SHA256

    6295cd9d4e8447944e127b424c8aa3cf39ed13ef8dad7f8737d7b95b706e7396

    SHA512

    10f5d577dd60573f3542ff8e6674ecbdcef79105f19ed14919d124e3aa1674b666bff91ca6b0899e8a4a20d192ec2b42902cbddf12fbdb57411c0cce4c1f3b1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2b5b458e1f6d4b0852f59bfaf608ba0

    SHA1

    2d1c62c508df7cc4f594d7a63eb4f477f9328d86

    SHA256

    9edae19b0a5bad6a1c4f685a9ead2d5b78730f003ebb9e5f6306a38892e01ac7

    SHA512

    b3baea35650fb1a67799d9116248798a54caf04d54bed2ad076e6e6f02c4472c5181b619c431ac64cbbd6c25944bdf96278c1e7a838c22037888b24528a72c88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1502f05cd4ca03d04e348aef82e270a4

    SHA1

    32916cdad31d6d317e23f7114921d971677c694d

    SHA256

    c323824f4fb4cc3f47534e1e55203e05e1508ecc16d21adc26d7af4e2ec2c21f

    SHA512

    fdc555094f99d38939da8a8febc6c99d70ae5c40db3cdecdef12c59d43253d2af7776506a944e5a3676e92e12fc9156169caf51be615f2e489a7f546f2af8e75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    682aa433d308a264eb332b15a662a360

    SHA1

    3f385e4ffadc471e9cc94302ffc2a6459f276483

    SHA256

    bbc54345bfc3bb65856026444afe8f5fcb3b36765179deb105af6edb8a439e6c

    SHA512

    6dcf19804fb6b6fa483711cb0ba3ca16ed92fde00141b9c0b74a58e0945e405585dac8893a9aa47341ba32d444da252d77e7ee3d8814773a18b8dfecf6b50b21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1dd0aaf0490e2c4072d98288a403d064

    SHA1

    75cd871d4ea9a2a6366a02ec04e83de7da9c3d9b

    SHA256

    16157acaf67097aceae51863f6cb48e0e8e9edfdf898ac937fe72b5e49538b15

    SHA512

    f0b6e11ac0e0cea415247aca002b5282e52c1a836f2f47f231e8319193349852dd914fe0e84f15e2eec9aaf91b153fb536df333792b6b9384ac953ca80f96ed5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    903d1781bf651ae15345115b1f87a345

    SHA1

    d64b4be7331695ff51e8b4c268589f42d340fea3

    SHA256

    42a03cf3043b43b3d51526796b05d8f335e667b6e0d73deaa03579a02e5eaadc

    SHA512

    d7b55d3a71079ab63d8edaddc6b7ac19275fa5fd95b9fe5a226152b6f09bde51d00d0a9fd2b110872b09c1b64ef38c06fdba32cb607e1bc0e8a684a7552125e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e28aaaac3ca9a52d69ac470992f3f037

    SHA1

    13ce47c9f6bcf63fc614b5d9ef57c26cdd0d4053

    SHA256

    85d43a70f4b1a3ef5b570cb0a60dd776156e66970a0a3c9af669dd1cc7154609

    SHA512

    e6001da674ea0d9a619b9f52e77415e59092dc0f7aa2d5780e4d35e77e6020db8e5c32400a9d213847cca8cc41322d04eed1315c462c39acb8183a00d35f26e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0451401f2a8f305b1016288d422eb348

    SHA1

    deea4ca4efbdbab0e0d1c6940e0cd2e667da9fb2

    SHA256

    954f4a1f9cc355cfa81cd14ecc93ce5dca63f662d0d1e273d3ac3db87074ae39

    SHA512

    4e82e14b4678e55ca5e2c0157376ae0fea3270fd70462ca93ae11212fd223a0698fa787de6f4a0d670fce59800c4ecf977a61183dc5415bb06db1fb0446e2704

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    549f19a49d50cfedf1ae5b0b766718f5

    SHA1

    4b6d109a6075ea67a10c2b100aadde6fc2e3ebaa

    SHA256

    f6ab27e599bf35ecc3409f363c8b3601ae2a19272ea09d2cba71fd432fc87f3a

    SHA512

    52f5f43551cd42d9ed9212e029089073bbb1796bd57b2b79345cb39ec197c12943cd546bd5fd34d99cd4747f659981bd2e0baae1a866a036259acc1c7b5fa84f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    483598b3a6fb8c58349687be70076e03

    SHA1

    ea23cebd3b26d7337a23d0596151f1c07d7bdb64

    SHA256

    e6c09c5b23a60ba6dcc0324ff452ce5b559563ac30ebdcc90ea9ff2a388590f7

    SHA512

    fa46a9e2853dbf6f8aaec4631b702fe2d5b8b49957e24ad52641b21b3ae58413ef151c8d1b43e450e60f67d0c4c1922764346c8f4f5ef503ec0f8b178d7804c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    baa55da6dc225b061790db19866c02d2

    SHA1

    81278e3bf04d5a482cee70dd6e2c31da372c470f

    SHA256

    a5049a256db531964d81efb8db78468e0bd95d6242bb327206fa7fa77b68f018

    SHA512

    ac529c181d3e7a764c34412fb1f6c695985337c76c4a0e2f69d24af6d394c5bdd9bb7a009528c615de849995c0abfc5474a332d61dd33f20dd9f41ac2cba221a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7312b20872adfc53570384845308beb

    SHA1

    9dc68ee8bf236c00a95e1639f9b36944ce3256d9

    SHA256

    3bab273948e3642c17517f978863efcc3bb61ebfbae46e52a37b965dd1ab3791

    SHA512

    89f9459d52beba49096efc4555ebe9142d2a5e54c15cc836daf6f0522c12d33ef911d3e3080d6ab722838a6590ee9361308ddb55d992ac5eb5639fa39db72892

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf3b64e6eaa3ee70ee9bce11a91c6f3c

    SHA1

    6451e104abdac4bf727c832f72db76b5b4156dac

    SHA256

    b62970933a664b2a2415381045530813ac1264f4e7a37950de489a68e9bf5a4c

    SHA512

    35eb746bd087b8fb5f1db425558da1d627cdb55d167232b32bf6487b65c94506da132e3f90327793e8607810f4b6b8f09a27872af97228095f54c74b6ffb4a49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d0420062ce386cb748a4ee32c819dda

    SHA1

    9916a77180f3f574e21629eb1983bde256f6aa60

    SHA256

    7b5a1ed6c2467f58a4c4e03d84620d45d7067d6b2716426abf33cde46268e220

    SHA512

    7bb6d4aa7727817307f952f965cf701a879cb1a1135f32f498b74a69b4b451c4ae2207775c24b9b98bcde6683db19c17570afd6d66956a37978639f2a340da24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e3f9773e2e74d42e5774fbb7e9232ae0

    SHA1

    eaab7e304a927784c09d54c3a436687dbea078ce

    SHA256

    4f50017ef196fc150d10fb1e25481d237fb146c51a0c06a31c393c3482ce3c2e

    SHA512

    3045da11ef84ff22b65c070068501ed14c46d5243a2e1bb11942137ae2b51d6bbe1347d25a5344600cf0b658cc9ebf2afd21ae4983ba9189eba58de6597da1f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    503a66ef70ea47df0eefa1cc86760c6c

    SHA1

    cfd4b058752cd800a7d1380459e496cfb212b6f6

    SHA256

    0373402bece80d6998ccf62a2d90d6284fb4b56364571fbdeb1d8b4120a7899e

    SHA512

    40086393a7ab72f6a7cc19072cff5a04bbf62d9b0c5595498f412a6933b1573bf78832bdf0a24b2c475f2dbff69bde14af1b8f4a09ea6e7c62a587019b31820c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0e146ecf15b3307fcb3d4708546fada

    SHA1

    cab67299fe8b4cdb898d4d08604e84b68052624e

    SHA256

    fdb3b5ba868dc39b1d8fcc0b44ae95638505e05ae33ba1cbcfdd8313cc6fd9a7

    SHA512

    9f57936ee84b3004a108588d354c3deae27e91382a5bdc93f2133b0797fa16e78138f0d44215079641fdad0626274975ffdfe711b9b040fca1827fe5c551c6a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d075dfb1c470d0b9049549cd4f35120

    SHA1

    2c5c2e0f153c3d5bcade8bf5d4caddba83843776

    SHA256

    49c7536a0894e37ffc9a9098b7c90bffe87de57f8054cf9ab063ce070d179943

    SHA512

    e94ed66077c6158fe39967725bb64c03cd31ea6b0cd414db7cdfccec23c2388b1dbd3be10ca1086440df23e70d121cd72e56396582be218f79a875dca38e2a68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3419e810c5460b3e5af04a50097b7592

    SHA1

    6bdc8bf81869d5904ea1d823c566f65c068a40d5

    SHA256

    d743b1f5ccf869cc23c04582b746a409f2ab9a3cfd1fad04647d63b2e75df88b

    SHA512

    0afb3097ce2fc24652531d6ae26f9138f8e722406062ac036a437f873251062c98829fbffdc24ad3a3174b0af234b170c75031463ff3ab7909b2c3f48147c139

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    98de6c73df8ad193e5160a490e948137

    SHA1

    90b5822c3d22d722b9097f057923765d0367ccd0

    SHA256

    06496d53ece615b95ab9486bd5571a85453e58755b414c64dfeaba47d6cb78f9

    SHA512

    20e25b6852c0b62d66bdbc02bc2a1e135c1b2cc534b659c21a7ec3a9037253e42500f8f9e38c97032045be7ad162c53c936d81894ba9e6e71d0114d0ffc4d6ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    d1557a9e4c726d923534cd0981c7ef71

    SHA1

    f0e3bda9d653d77125a527c3239b319988050825

    SHA256

    dbb70aeebfe5ae07388e625431be1c41e33b6d9bf252a5253e1d883edf730e20

    SHA512

    070a5556041aa12966d4d9dbe446215ca306b6678e65bec89261b1e45170be8bc8f093eda4cf38f105b824a2814a04bb396866e65ee89a15b0d93ce62973474e

  • C:\Users\Admin\AppData\Local\Temp\CabD4DE.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD4E1.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b