Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    17/08/2024, 17:11

General

  • Target

    a36969343bd544a9fa6503ef31268377_JaffaCakes118.html

  • Size

    270KB

  • MD5

    a36969343bd544a9fa6503ef31268377

  • SHA1

    3588550651fb485678170d2d3b347b2a4d43cfb8

  • SHA256

    7ceab68a26c40bda06c5a49b5179a0b5ec915a1efb558cdfddc295f28934509a

  • SHA512

    875889d894e5f6d802190469cbd2cd8ab15e07dc4b6df0ffb107757aa5b4090a1a604cc8a87aecc896ee2b312d085b0b1fb02d5f5af5ad3c796175b890641114

  • SSDEEP

    6144:/IKfYeE+y630styzBzSzmPtocC20IusntfO8/3KHjtcI:gKw3630st4Pt9C20Iusntm8/3KHjtx

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 30 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a36969343bd544a9fa6503ef31268377_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1848
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1848 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:1836

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    cb821ac52963a25a4139b20c223d3c39

    SHA1

    da86ef64aac81e2cf65b1e0f98b606cce2529917

    SHA256

    e11377b271fc92674334942daa06aa3bd525b6144fc6ce96dddc42f082cb0211

    SHA512

    b95999a4297e095e6ae5228c2f0c368177fe71349c71d0d7f4ffee08da2bc76a71af4af8410b88b9ed5ca1fa5880f457968ee5edad8ec575c8144e8134a9caee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9541cedf66dc534f2669c5a6eb9a4df9

    SHA1

    ebf95da2784f05628fcb68b585404712226a4bb3

    SHA256

    045a9c67754f0734221fa6d9230d8f36c03f20afaccae0c0cb9652776990f4ac

    SHA512

    b7915742e2d1fc9b2ee44b22c845c134f04865f2ba1c47e7f716c50f12bd11045be303d865f011cc983b2a8c6b68f1215787503fad8c6e088423d08c50ebf12b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cb68f518ef69aaa7563cc2462987d981

    SHA1

    1d0ca56bc974e72b97c3a0f0d21a46a6dfc351ba

    SHA256

    af44beb91a71d7d7def9ef7c764a0252d3ce01a5f1961a03bb37d6286d052d22

    SHA512

    5a86cc92e82180db33c873a94af26bcebb5c8ebb924555491c57fac07c865e7761c1ca51294fe75b0d555cc3fa0dbc44f32e23716f5b706d6aa786056396ef7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bcd487ff33d9b4267f23fe559d8898f0

    SHA1

    7d39de7948ba4f0b12fb1d741b2161951b6cefe9

    SHA256

    cadb889b40a837839e9d709078da6db34014f32ae379695d38e2d9a67283eaa0

    SHA512

    5d0b63bfeebab28edcdbdb23b3157902d760284eae6daa70ec8c059151308d02dcef30cfad859b38ffdcc4ce97a395a90d81b6c2dbda3189d99ca16728549fc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e64576fd40abd7eefad747c4eb26598f

    SHA1

    54ec694a47cb11dff7dc2b0fdaf5459353fdc16e

    SHA256

    f470e25bfa185e676269440b63698f40adc672bbabb97bbdcd90890ec59d63d3

    SHA512

    ddc5e7cc2a4dcfffb1f492732003366c6f8240348afcb4cc73f45eb12cae0adc4c61546575b1e2ad7892a4e14000017fd4924e595aaca0e0dc7bfe0d7c6d9a92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c698d95362c17ec5a5b04ebd3d1f939f

    SHA1

    38e011144b71f5c52b68c57782b48943a3cd5ff4

    SHA256

    00921931b4f7baba8c662d4eebd1033f9840eb132671879315ad4d19fc9cfbd0

    SHA512

    8abbac802aff998a4f1f68dae16245e20a303171d366264774b9da05370068dd30dac36282a4294f42efc64eb07ac0c265a59e8a1551feb2166e9ef27618823d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af7905163785e189da558b373ab5bc72

    SHA1

    8d29634ae908f11c18fb258f4735d726fcf63040

    SHA256

    12349be14ce8efb7a2d6c0fa4cfd3c5eeac10cc283457d2c9666e66917b48157

    SHA512

    fe74ee5daf42cf81ab0afb4d019135166ee712004baf81468ee0e31ce470daeac2a7695e40a949ea2cfef242a3b0634a13d94bc3d02caef8ad9e1facbc1e22fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b693b12f1f4a554e28b1e11584c1587

    SHA1

    05962e5a6fac2e158c20186855efc72f3acf5718

    SHA256

    f39bbf9936e849361c394305ee76e43f35a3f0f1646589648eba0c2ee8b20dba

    SHA512

    48ae7ab4c0877964855986a42468bf492c07f91c1537811d88bb882b9424721780ccf45887e66d99871b8ecc519e0fe1dfe0bc0afd36c534bdd0927006f45061

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    34323f7c55057316e5341d50e65c4597

    SHA1

    2fca26156ff9a09f0d5bffbead6fec69d5f67d09

    SHA256

    5d90dde07b65c09afbe400868b770cf5c3e71fad09471ea1d8b5938e30f526b2

    SHA512

    da856949a3c2c1bfdb74dc0b017b6cdca9c50020f77a54ec0451af7da74c18cfd47558ae6694f6f3f620e73b25d7d114eca7dfb69af95f692399129f24ec56e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    908f4ad2f0ee8945695834a984287c6d

    SHA1

    d8e12acfb81223dba6715460239b8da35775dfef

    SHA256

    945a33d2a309841b0ba2960c0e4879daa430a408b209473172c75d6260e2543a

    SHA512

    dcea6939fb744412d18f21307ddfc64acddfd4a77b76c50decd0107bc4038985159e7668dadb842af58cb005ef63e0b75d53977e752b5d42350f79d7f6444a22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7aa761060b9f0a006dbaa21e806fb1f

    SHA1

    1ba34c3e527119829562c58860f0c3afce5d5453

    SHA256

    c6d251887f7d773beda34c59f0f414da584d8ee0db8aa4a4008fd183439115ad

    SHA512

    0e923c7229b6f381e91ea2b655cdff42fe431f30432c34bf1b95636930f346f5c00811f0942e3bd0ffbc32dab7846b05b4944130b5f200441c5ecdca09f46c2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7428ad97a5352f5f3264d4fc01ebec7e

    SHA1

    875a8c580a79515cb1301bdafdd8450cb2692d95

    SHA256

    e81eca1ca3b7013fbe6ef8667f7233b335f37550beeb00bb9bd71d70b66c20ae

    SHA512

    8e930c90cea2f761ae49ed27ce35d174c006b34bb5c3cc0a6a33bb6e4ec1b5e7556b01eab83ce5b0188ebf15af7a09bb94b55f6a5344dac3d6cc91e53e6418e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9175b659ac3bd6ad8336373b7b685525

    SHA1

    7d78ba76850ed36395a622f81141fc145c83495f

    SHA256

    ed3375cb31c97be942c5f9bcdf12e059ce6555754e32bdb50da0ba118f54b27d

    SHA512

    3758e83e7fa13c0cd2ca508f7df9b9708fe1ed33ace0771a841f98995866a1b30dfad967e9de35aaf4f0f99d34b6bbbf061e69ff5bd3531b0a5443b86d1d36d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6567c22e844d7be30e2f8b2a490487f8

    SHA1

    deb1f9f9f0f70457dbcd9fb16b6051bb656ab46b

    SHA256

    60111cad653e985b2e561cec481062e24c826580c38eeb48aaa90c72bacc397c

    SHA512

    0e8739ae56e5f23f6eabe868dd5078dec376596cdf400181fab08be2bc3e053ad5eba5b9e562c7d41710262d0baa52ca4dbf2116025b98676c37f10d74475c13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ebdeab5a9857a537c3de5d8a2a2d369

    SHA1

    6c2f3d0f33408d8141e2762468496fc9af1124fe

    SHA256

    4fccf53b3361ce54b91e4f855e73488b8cea796b2abcabb10026f82b4dbc16d3

    SHA512

    74f64f4e16ff6fb80b3b0184864050e4ad6ec0e62f9bba09d1e701577c3944e688ceef780c0874cbd144d98659b22ab4f2be89418a07f7ece053400ca25564d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8de3a401792372572f891be541508cf

    SHA1

    2bc388814c95112c402196a6dbf1764d663c9b5d

    SHA256

    fe40cf2dbf17e3711166ecb2fc26eb1e09a1e4cb8c6d443463174506bfce487d

    SHA512

    b41319a367eeab96189b4b38c282d40b8d868de53d40071ab4ac8cb9e78c94a216bd424761cdec2ea65b7f5912cf004992692226971d0b8bb1dd892e7c70c61b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc18b08d8a5af40d49de8d3979565ab7

    SHA1

    8d6b74fa1a919a8e358041d72a895454937def54

    SHA256

    a623f2693265f003664f5797317ebaea98b8ebeb72d986129e760be08b0aa347

    SHA512

    6e723b20bd7926e741824484f4a8157f5e97e0b3e7fc214b14accb5b983ed549bc524b64737c6e02a8e743af9e9466f921317f766705844c4ebcf22758ac2612

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c37cbde020849a622a37dd8f178ed7a

    SHA1

    c82b94a171f3f897117525f12b3459200db869f3

    SHA256

    9c6f966a6bd807dc95a6b6ed4d9095f2c4ff397d17bb3fd0e6f2cfb6a3cb239a

    SHA512

    9e11156acce748af27b275681e73b1dc8148e8dab425d7f64ef884786326ace09f950a850a6e67256ce38cf39fc262ade82d0fec3dd0f6952b5c13013007acff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d547d523293fb7a677faf6bfe2151a3f

    SHA1

    4a4f5826d339e6118e44bda8320ce431cc882594

    SHA256

    a73d9a3afb11549760c71461370d17ae47f94eea9ee874e056caf85a6de0033e

    SHA512

    8fd05da6c7851f67d745144d6e526926181ff4dce47d263d995b65ef6ca713f3eb7a790a7edfeac16b5d9e7f24fc379d38e1cb12c7022e222e0c8c40885e74b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9cd68ad1706d5e6377de4a2090dd1ede

    SHA1

    45afa531b18162e2204071a208c0ae94a1977adb

    SHA256

    a4bfc261f8fb7b33a36d4feeb36435545b956e6edce376e04f71e5f976f3bfa3

    SHA512

    6fae9ba5e1062a37e22139f293264528da47bb2701c841cb59b96efb7c54d114c34ee02974caef8388d91cdb97dcc65d560ea5e2c74ac573528aa4bc8ca2fafb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76373b7209a7ea6963c74c8f126046b4

    SHA1

    386d9c60e142665b508ff907a601c1ba67818e02

    SHA256

    92976467c1c837d19ee0f4907111c1c98b06cd0547bf65bddd8d1f5d4c41b7b7

    SHA512

    4fe0eaf8c5337bdf7e4c35fb9b5a96e998e575fa9dd02e0b1b6c85744b2b387280074c3f811c36d09792681fc5c36678fd4e1bc602df51a9e0402a6d59a37a2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    cf100c325a47a2b277b9869ee16ae969

    SHA1

    66ba773b8a9d11514734e632a1ee80ad4255c061

    SHA256

    3fdb0ffecfe74c066979bd7590a97261a4220f88c162cdbd257fa303f4d7fd87

    SHA512

    6d517b1c15d566509b5ec74e981758286a3bbbbba60aefaee95d3bfe7b2327e7911358c20c6d564210d94ed3c183bc0dd719c3d7e1e4259afb4409ff61732dc8

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NFAY0EOS\cb=gapi[2].js

    Filesize

    135KB

    MD5

    cb98a2420cd89f7b7b25807f75543061

    SHA1

    b9bc2a7430debbe52bce03aa3c7916bedfd12e44

    SHA256

    bea369fc5bdd5b9b473441583c46b9939232bf1f98c1cedf6bc2241c4f5068d4

    SHA512

    49ccede4596d1e5640a9c8e8be333f9c18812d58f02b2b15adb54172df1387439e9dc5afc4ccd9d8f0f75f092318bed68d3cd577338e88ef4f9373de8a07c44e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XWMUP5AI\platform_gapi.iframes.style.common[1].js

    Filesize

    55KB

    MD5

    aada98a5b22ec7188655c2c17a083c57

    SHA1

    7c3c2fb8744e7412d8097e28f588788d91b9cd9b

    SHA256

    f2f09baa213dd3dd95edb5a30c7764e4a44d9a79c0831f90b1ad8ebedec9dab8

    SHA512

    a780aa3b9e36f61be8240487e75c19a96fe26d54abf9006680a00af9d1d394e81e517f0bbbc13edff3a7190679260ecd56fd5cdd7c2d2f416ab8982c3277b953

  • C:\Users\Admin\AppData\Local\Temp\CabAB9B.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarB03F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b