Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    19/08/2024, 21:55

General

  • Target

    acbca307b2b19888022794af5836a4f6_JaffaCakes118.html

  • Size

    57KB

  • MD5

    acbca307b2b19888022794af5836a4f6

  • SHA1

    2327d0e4393b657372518ba5730ccb03bb3f47ba

  • SHA256

    905c5b0d649144c1ce803efb40a407eb3c96e19211c1afa71708432fe4bf564b

  • SHA512

    4bfc135f76deda4a79523f389a63159b50a9035e5b231c19a75b545316766bf73173c86a77f17a6cc46eab867748bdc8c2849f73017a9dac984705a82b45f481

  • SSDEEP

    1536:ijEQvK8OPHdsgDo2vgyHJv0owbd6zKD6CDK2RVrozLwpDK2RVy:ijnOPHdsL2vgyHJutDK2RVrozLwpDK2m

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\acbca307b2b19888022794af5836a4f6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:824
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:824 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2712

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    9af00a9b51bbf48cae4fe9b867629566

    SHA1

    859743abce10c2639e47bd42a247a19ba057c286

    SHA256

    731e44b35743b450138093f2ad9dd1e1be300e648a37a8bcb8c10944383440d5

    SHA512

    cad3de243168ca9618dbc9dfa56292cc6a5b8d39e44d49d0e6da1fca27f51bbbcd76a15a5802be9dfbfb8039674f098fbf7612c2966dbbcf97e095e401090c93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26c410d4f0e0c04a37bd1d9c809675c8

    SHA1

    ea51e7b9bf9ac12097a09294aa54ae2dcf38fc9b

    SHA256

    9efc756bbed3e6a7496ed14bc7ab6e69be2019c8436987f357db7199aee6215c

    SHA512

    cc03a56a8b73bbcdff016ca7059771c3214a6fcf1eac1315698dee3816ddc61184e3c670ceb63c9a6920724525c8472349be4fabd034110f05c027172f076b5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf265d0502d4820c8010fafb3dfd8012

    SHA1

    cae28db38efb473dc7445a4a11dadbcec48571d7

    SHA256

    1d1150e469a81ce451654443533419e84eb4155b378bed94787d1d142cf0d1f0

    SHA512

    676d9f58eabbcc289d01601cfd1ba90d3bac72a1abeb0d6238095d1ff691a9f9bb2a343b6e8d88dd11707f11efbdab9237f6af531734e2ccb8d1056b7a04531b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d63313736882ef5be28d178ef8012075

    SHA1

    07efdf2a4bdffc8a311ac94cac85e2ad566b90e7

    SHA256

    b1fe1244d47895003bc2f0d30e3ce6e5b053a8c3d0421b8b34784e606347eb10

    SHA512

    16f251449e377b1fe51ba6f3193de1801cf7cbdd78322372619a4758acf7b3ffab51b95bdb73127d429926c556706a8119a80e4bf4d9626dc07a4e56511b0496

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b540d246addaae1359c05b25d6cd572

    SHA1

    ddb2d6bac16e76ee2d82fa10fcfd2c567cd8ab9a

    SHA256

    c33f4d309a92d13d2da136c459277f68dda902e29cd4da3595a81827097e1e84

    SHA512

    3333dcdfb39e599c4d2beab2d32c23c83d11a2d49d30618cdaef1a592bdc45f1ed1ac36df299a9f2bc435e307043366cc7a039543fd7acbb41d72d8242c3bb65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    55a76530730b7d94cce608a1f5ac587a

    SHA1

    7d576d59a7bd5d784f5fcf9ca6032935e70b3cda

    SHA256

    a5e80c209a0955add1896e16670d56227f6e6c6a4e88ebec35c726c7d1e3e435

    SHA512

    40f4c05834698e239c250114d531b20566a054917f088879f5b3cd9a9c9d691b3f4d1715e4cdf945c04d6273c17d061d65745622b1e29a034b59b652e4f96fa8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d38f85c2b93564727967343ed81b74b8

    SHA1

    cfbb4723e864088a1bef08e6fe4823ba25e8d417

    SHA256

    5b08e08f55478dd1336e09ca57aac42089b3b4dd39dba1cb4608ce6ddccda0b8

    SHA512

    37e3ece0f01f4912ed4de6ab4194c8482890329aca9e104c2ebdb0c9fed740aee292cae6b917cf9db2dc8640359897bd7eae5fd79b1ad1a90acd7094e5929746

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b17dd591fab4a2fe968c951b83c979e2

    SHA1

    cc7da062842fb79e7176e906b1d2029fae7d8184

    SHA256

    32013296aa4b8f017ff3ab6513f96131139f0b2b74d0e1d89cf09689fada26f5

    SHA512

    4519cb84aef5da47e7bee4009b220a3046a091988ff7c4cdb704c540247d78f044919d4ce22ab779d81aff35e79c531e254cfeb102a538f3b2b5c0b0590b2881

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    060133d817465a9ea4a8975eda6df6c2

    SHA1

    c6bd30c4628d0a680e4285555a95712a18549c2a

    SHA256

    dfee327dce8d0d9bbf64a8b75deee2d76b97cb579acb75093affff32c8d8d402

    SHA512

    789f81dfed6a75c19284b30f8ef343c2c2273bfc040bcec9e52e78b7b6c217a817f1bff0a0c86ed7fe3e5d473149c6fff6b12b96e29d84ef53079a480359c888

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37e32ec66f984a2bf71735c48f81710e

    SHA1

    e37a07a365be4c95b610dbc4a40248e0558505e2

    SHA256

    014ae9cc3aa83acee00a0c12c7185e16f2a33f7d9f8e91ab24970ebb4827c62a

    SHA512

    1f585de876c2abbee31a52549261b89bf627a7a7eec28db361610e917d2a9abfb5fcd98fe7beef5a3c6d00332ad5a841ad84a20aa754b5ad9378aec7140d3ae0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac7e123ed92478bc8cf13291eac35c2e

    SHA1

    61e891f7907d080ba2bf474c8b09592e8a53ae25

    SHA256

    a09abd94eee8d7ac30c53b84e2fecd29508a595136104da3ab4437c3ce311dd2

    SHA512

    cf0d94b92499fe25313fa48c788ac224804b7a6a5a734b76a49b3dcca91094da3d32186cd7e02d3d88890ac9c976f4be0bf6b1efd0033177900131471fc49c12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75c632b4c2bec87f0137920ce1dc4b9b

    SHA1

    235df6ae9c04d2b65577c5f2e3dff97a90106a60

    SHA256

    6a25f67fa089ee9b58d246c2e9efeef472ecdd162627cfd7a0f37337eb546225

    SHA512

    a6519d4e256aeed8e695e8bc1964ad5c2d60122c3ef9f746b3d0b3e44ae144d72125da2685040b683cdaab2c76628b94c2769e5b1ee9da77f3cf15827b9b86a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4cc3747831e7f5428179cb0024f169cd

    SHA1

    c6549ebcccc2b980614b43bcfd026e2d875b3219

    SHA256

    0d440251e8b87c008b9ee3c39bff7d26501bd5a34df766e886ef4e4a889344c7

    SHA512

    b4cc2fc7e7392ea57aafbcdc3215dc3ec1cdef3f926ca7ac35fbc9e21a79e8e1408e41f1fa7336c6976f78405beae4ec2dc32b88a9b7963cf396e1bc759b4f8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0150562f8d78f5aebe8531866127976d

    SHA1

    064eec498c52940bf9402573d27a725d2dae8400

    SHA256

    990221361b1490d0b4c610dd9a87d3e2e4f6c2ddc14d9d7b15573b41832585d5

    SHA512

    23ac2a7dcabf2b8e59f667fe25e133eb6f320db0d138dc8663fc10b4d13f0014a8c21564ed238d61fee5b3ccf9c4b045356ec95d4bde20a22a3b17588b8180e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e7efaa88225931edad313a268c81ec5

    SHA1

    052225f67c952557e10907672f38b6efe51e39c3

    SHA256

    1dd41b6a5e2adbbf217c09ad95e1018fc9ea2aa603546b39671d39d97e4c8c2b

    SHA512

    436960b798a88be69bf5cc054944f7dc3ef0662112fa51251e15b9d82545c6b4bdfff51ef1e615ebdee7fb43db5625152308c5f9495ee4084bd3e99a18da20f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4219800dbcf8ba135a8b1e0b302d8a63

    SHA1

    e8358d2c4d640142b037b0ddfc7e76a70794b1c2

    SHA256

    f68ab76672cc365d8dbbe562f059bcaf089886651c49cc884c759039247685ba

    SHA512

    b85610d761155657508f038d0619cbda348d7f065ded263f19b8d01a222be6307d635d7a481360f500f6b394dfa1526540c106e1e7b077eec35ad81861a99292

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    908277a59091939d2465d9fd2d43d757

    SHA1

    cf733efd6798b76d62634e2aef967b189a077ba6

    SHA256

    47cc2eb1a182637ed6583a972d43b70212d8582aefb7d54392c342470eabcc2f

    SHA512

    1d3b8d7c4c28f7ef7881d230e026975fe06a2daaf413167eec7ad33edac04b4ac36560da7bb995d0b5b862fd8deb3f6d811fbd15cfc4e413963db2ccb5298f14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4f7a415cb981b3d8246d4e5e6b8ebea1

    SHA1

    0a9e38611e5d5a7bf535fb746d1b3f29506276ce

    SHA256

    7a8cce2049fec4b6e91ff51a289143026200fa6344881dc6750c1f2e9dfc56a2

    SHA512

    d66d264e3fef1896f9595298e2e2c091060831ce9f42359c44775bf433ec4d975a91ecb0cc9f24590801a9a41c4b233950a3a776d262e188feab95651de8d081

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d47f337dddbc549d5ae2ead39e9cccbc

    SHA1

    dfdaabd9e28b33c819c9c16903d4769b92f63ad8

    SHA256

    94f0c0f3bf73ee32accd51f249979ac0d38446d337b56ffaf6815dc921aa4ea0

    SHA512

    49ffa247fa04603d0c691e6e0044d143915ad827ae1b93cee0bbc3560a1a8be3bb7b471b1fa4343b2d87ebd97d81e8a3e4505b60b1f061f92ad8661ec8210b4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80eaac224b234255cdc56079e76e7f6e

    SHA1

    9f405ebc9b8148e8ab8ad8503fbef517361c284e

    SHA256

    9d0f0c1a44bd9865a0fb684cb6a117cc94e1523117a5c0c6b86be51bf8159d8b

    SHA512

    dfd78fa8a86c165c2d0fd1e9a11a928bc3b2d070a2992742cd76e73ec2308e35cee5358dc97201dd18ccf97e72d8183c4c706a800222af0b8cb7c071d2fbe3fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    391910c25226e592cc79e074540d70dd

    SHA1

    e03e286edd1fa5935d5db561de286613501dbb0b

    SHA256

    455b938fa6d28c459f417fc358a6ed3adb27d4d23d4f87294f4226ec46f0916c

    SHA512

    120cf31e637afa0e3606ec290c660bca870ad07d8b2c7e1276a45e6e068a116f4faaef330b9d6c086956af42eb276401659aa43e35ca4b4c318bba9d94cbc60f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ff1a2fbc1641f1e27057c244a9f2641

    SHA1

    2b76d24005189908a057dbd98f07761a56027f6e

    SHA256

    0f62028e5500c61438284f6797a31c81dba05639aabdd9d09869122a3eea3398

    SHA512

    749fbe011196316e83b83235a05710c0d6ee09878d0b2efe069a294feb1c4a6b77cb8ca0b0b8a981b2545c1a87c23c5ccdf809f4873b3820c970ae505b50245f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d01541a00642aa4ec5a7c12041afe3a2

    SHA1

    7bbb493101be736e115c6a2e88b5a0157c9dd8e8

    SHA256

    9d91aaaafb2df847092b3dd007a9ca3037a136742fded03ed76ea0fe1c7c0e7f

    SHA512

    8861431476ce9762c239ff660de04eabbd5f2602c8ecc7c4100c0a9070fb53c426b5899327347ba1f5b58f15232aea97b0cf96859ff3116bf7e84e0b3ccf976c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    93200ffbb2793928cd5f0921312526a6

    SHA1

    3dc9d1ae2f534f4b4639baae41c6539432c4aa22

    SHA256

    1c11a97e9b16f5038536f62c7651e0c9af50d792e6886fb949c4a651bff3466e

    SHA512

    9270736bbb3d027d46517360a116011be5f0062926eea8913c2f3bcf5956018ee79eeae0b81bb1b4512dac9ca9ed20ff686c273d383266ac3eb6774026d04e63

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UQFHO95Z\f[1].txt

    Filesize

    39KB

    MD5

    dcb821fda716d84011d3904363df37f9

    SHA1

    1ccf023d678ca27fe80a56a49ff45a716c703101

    SHA256

    bb76eff912d285b11f01b012864be2af0408fed7993b109aebc29a1e8e23614d

    SHA512

    279fbabc0e532182b076fac601fb0a403e04f409a71ce027c9e06c95037c7029639f8d7d9512f59cabe0d7bf483ca517156c38afb9fd36b19b53546061b23f5c

  • C:\Users\Admin\AppData\Local\Temp\CabE4C6.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE4E8.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b