Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    22/08/2024, 16:13

General

  • Target

    b84b8b2549d0e33057f4f793ed393fc8_JaffaCakes118.html

  • Size

    8KB

  • MD5

    b84b8b2549d0e33057f4f793ed393fc8

  • SHA1

    abc76cd44b114b3425ebc3457dd93dd5da6911cc

  • SHA256

    b9b22918a389fbf5103b005b6d7d8f4d489f3f543131d48998a6a1467be27e0f

  • SHA512

    468416bd6a545f6fadb42837ba288c929e8b6b77414981b05b11d52d3b0fdd0174803a852d72219674f776f4c4d08bc2238e259dec79b10ef2c7db5b444700d6

  • SSDEEP

    192:6psaVBRdKa2kVNvG6KpWs9lPv9NfVK4Xb5s5HOf:OsaVBRdKNk/vIWs97K4Xp

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 39 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b84b8b2549d0e33057f4f793ed393fc8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1508
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1508 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2836

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\07CEF2F654E3ED6050FFC9B6EB844250_3431D4C539FB2CFCB781821E9902850D

    Filesize

    2KB

    MD5

    5282a973df049ebef41a52cec08891ee

    SHA1

    21f6f063dc53c8b47688a932430ff507a42881b8

    SHA256

    c3e528eb22c098d5d3fc4d8be9bc46e08a3f6eb571370957ffff662f03193691

    SHA512

    498979913edd61addd5f498c627bd5e71a773dcf28795722e2a314f33cb23527e57261628c5890832abe85fdfbc20af7f6bb17ec1f1fac17c241d65305a7181a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E

    Filesize

    1KB

    MD5

    3189da0f047c9c770ff4f7c73e3214e8

    SHA1

    7af3fbb88dfb8e27e363bb83353c0a2be8383b5c

    SHA256

    c0c1845123a3bced22ae3b037e1f6173274b7801236a4cd97bf4d1cb531ab66e

    SHA512

    59ad6cae9381fc79d1a84386c9160c54bb96bf0ea3a3ea336615ed327e7f3794397ddc9cf48404c3e7bf7c698686684ebda5e27a9320a55fd92ca92c623294dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C31F77657EB32C3F91F9027B9AC1DF98

    Filesize

    471B

    MD5

    940731eb98babe207ced9814d3b2dea5

    SHA1

    bf0ef5896d6eba4d43d787dce21edc7e30bac7ac

    SHA256

    d0d468e0de2cc5ee65350d42ea39bd1c4a67fe21f656d6fac7389d573f754967

    SHA512

    f4b59ffb925cb2acd6d5f8d1320f34f2e2e654e6983fd88fc5e40fd13dcc3125aa23ede73af66256611e0770a7295ca39e764e417d4b3d1e1961e4c03340a350

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\259C6C3DE700E2EA4645C9152E9FD13B

    Filesize

    550B

    MD5

    57478cdc215ef14a9fb0e06f934ae858

    SHA1

    f832046d05fd3ab81cccf0008708c9780b463ba7

    SHA256

    b772a6c6aaebc70ca591b94f370ff05869bc03db668b388c7a47bdc859df4788

    SHA512

    cfc53c73befc9a55333bb0f353f6f681fd44199e7121d0705d65fcb40feeadebeb2c956f4bd17f691d29dd19817159fc21b0df6f8d06a1938cfa3e6691155f63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    3f5a81f7904d91b053f8b487e00da281

    SHA1

    cf61515ba273432aac8ae8bfbcc88e9aff0cdf87

    SHA256

    968ddc1a9379508850a37d7852cfbf34049ff78c5f31d412579dcbaf7cf52fce

    SHA512

    c66f14aa902ccee362fd8747c1d4bc3c4eaea4344510f08074030f2c5b7d1f0950b97ba7b578874d6758107c1272cf912bb0e2cadbb0610d8c1cf4672393ee5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ac982ececa20cfdf77af25d194e3adc

    SHA1

    88c9c08e6788b19d23613e82bd713d19f86e649a

    SHA256

    d1f9295436446a78a078c57fb4d6d83f2f679888c152b64ebadda47b05c5242d

    SHA512

    3af766fac1e653a20c50c4444f2096b782d69fdea5eb12d0344babfc741754754676859274db474c62e051409a48a31de9b9d708697f0124271e193605ee4da5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2620bd0914dd0294197a181b3a49c2e4

    SHA1

    29d06e98aa90f998908704005bbec9279bca704c

    SHA256

    67e6e9b7a16c81d8ad686f1d29f26201db1b6a867582f37ed5f25e6ced766a73

    SHA512

    f262b3490ea73588bd48a425f4700898f3a443e7971c88c734303c5ded997c5df8636e3d86fbe59af78b4d464250f28b8425918bff78097dec1c78e0f43e541b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    acdfbfe70aa23081338171535fe7e900

    SHA1

    4797a325a835878d93f3014b05d786e92bce3f18

    SHA256

    62ab0091128c57fec26899662537d9e8a3fdf47e772a0665d373c754bc8e9f78

    SHA512

    f520eca2cb776e766f59104db6f9534eb109c1845f51ca6fbb22cce6d4fa537e41ca07eae4b17f15d273e4f445f458dc610fbfbdb7863f3e8af134263c2e9ad4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bb66e58b89fb7294a1a3638a3644f0b6

    SHA1

    cb1be19b77f47f041c7ce407f05eef0f0dcb410c

    SHA256

    114224978840eb9c338818b17f021b8d8a5b5888f3ae9a8c1fb8b3aabcf0062e

    SHA512

    8903b77d898ad0dd52742cc811059dd3365ebf8109bbed6a6927af3feeed51ff4c190c9af275c410820696cf76b8d034cb657e3b65739b3f086a74d0ec74c54f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e68858957137605b3e2de999fd065d4f

    SHA1

    95dc8f7557f4a8f8ebec86f1281e1ce93e688878

    SHA256

    14863d604320a4c2bac2e60976b0b4c0b1d37856c58e55ec945d30fd8854883c

    SHA512

    e73739315f0d54823c2cf15e8ed9a037d31cbeeb3a8f333e797c4af8e796d007b12cbb3c6b7547f0cd72e4c79000af0f49f115a5a595fb489b1448899b78a88c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    384245a9ad645df32ecf44c052bb2e1f

    SHA1

    96ab3660d6c461733d111f496c5d382d0d970e69

    SHA256

    a4389e72737165b47f72e48ca09b312b737787f12421a7cd02b1adce7a493cf9

    SHA512

    bf6e397b9b9b9f47f34e46703fb916996261922ccfcec7729d187d1e97b7ec07cb6b3f9dfca590f265a02f5734251061a3ca8b9fdfa79e7359eb2a85f602c938

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d17bcd19e48f869ba7d711f74a8d9c42

    SHA1

    c342ad8eca136540c7e2ec60b3be35215c2561ae

    SHA256

    efb3010eeb18b51b6e730d6eb13bf40da450d51c1c8de7f8b79a207841a6724a

    SHA512

    af71b24de6afebd04b5a6a9d8a9ec36511a3c93c131e4fb18e2244f2f6dfd102428e0d92e9943b7a8ae7b92f729cc468cbe6b5c064c3f87d819b43232d66cba9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7faf254885f11826c3f66de390ab514

    SHA1

    64dd3a1ff181e2053cde76c0c7f6b3be36eb1479

    SHA256

    07201413cc3dc05d882b005919d6395648b937b4dbdbc65d61998a85be81415b

    SHA512

    189a0fba25c33f3e95ad6e5c2acffdba5266a9d6c1195e2834681b7d5796f5abd93f9fcd2fc3d39207537e7fa2d955b8006cdf2d0dfcb01f06870571c8186ffc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a187c309b106c883eb1a8cf99f0aac1d

    SHA1

    50b3fc8d3c3142ab3764cc0a991a820ad1c0521b

    SHA256

    bd109aaea319ba6713fc98c41c18b85ef727c2720a3d683ca6e30eb46efb7d62

    SHA512

    370ce7db56807ff6a9d4d02db88cc0bf2ad84c8692393c321695b0d0ff1a213d6bed2ebba1f999ab22e958ebdd27538ab9a70cdfd4a09a49e6acf8ec95d94af6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd0cedb5bc190d04fc467e91d7563ad7

    SHA1

    2cb998ec4d5d8d0806f57c50629fe8f9bc85bbf5

    SHA256

    703bd11ea4a4678aebec64910c424fe7a7d4cc7097d02f78fd26c4285bf90461

    SHA512

    c47c6228818c258b7c19f0347136ae9fe8ed9d549ad0c6eb64585ab55f889cf413eaea136541b70c3ff9ad57e4fc3fc3129037f5f3eee9ac895f859b29996ab9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ecc7d941ca3e00d289f7cbeafdc61c5f

    SHA1

    96cd8fcbbfba11946c4894eb5c5b7ab345911062

    SHA256

    f943c0228abd990eeda208303e07d43ab6d9b5798c6a8a6b59f099b0102403bd

    SHA512

    b3a666c1172aa8ededa1370932d79f0ab5b0b3fca7af46e8151e1216b7eaea8e54182acff4c30f91853ed61c97c8ef60ea55790538de692ae30c9325b4f74b99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c81e214da1a960335b5585cac1d1fabf

    SHA1

    0ba120d39e9150251e33e0da104caf3664f91505

    SHA256

    94e4832e9c7b59bb0094c55f8eab36ba506f7d71d0496f520148f03cc12aebf0

    SHA512

    35a98ab96bbe6007ba52813664c46cbec5d8a5fbf27c88e2893467acb08ec80310ae33df73e7d84d4f3df6f98c567c11feff2b4c4cb015eb3fdb10518fa7372e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7bbcc45d18bf03ae1401978fea7a921

    SHA1

    15066998ecd66e3c1116d6255602b03de81f6a99

    SHA256

    9865ba639326629b558c37bd7daed0cfc9dffe1f611c3b034e96b03d34344901

    SHA512

    db72fe33dca5dd828c917f02d3e50fa45175f88366177308ced90080bc2b130e9c6ad455a09e7b836770507393966b415a8ecd87035b37431c5fdfddb8e7bca5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5b1b78036a6cae76f83378ab9e88a61a

    SHA1

    98cddd8036632761f1973e0927502f9491cd5e9e

    SHA256

    8d5da202bb5c21a4ed3121f50ad34ccbe27fa898a099007e0581f9579f0891c0

    SHA512

    ad982166ba1e86284b5407e0649e3d76f42ee7ec028910aa89ca8f14102d6737837c12408d5e9594d2c94539da0ded4eb942ceecaa4c4c7e511e64cbddf22bc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d1dc10161872041786e7b6bbfaf71c9c

    SHA1

    7020a452294c8bdef9bc599543baaf160c794024

    SHA256

    20a13155646eff413f63de78e96a2f811e1bc11886b21e85f0ce32df3e54aaf0

    SHA512

    18d46e6b4dee8c7a55a4c5c8c747c567300341a0e0f055959e4218cc978b427754bcdb575ee6214a6caf7c1d8daeae2ebe55ef3331f9a28ec5a2564d2f088916

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a7485e4d5142de71a6e8d752aafaddb

    SHA1

    0383efb2b40b519d7c815508fc40f70a4d5c629d

    SHA256

    0a90d010a2ca76fa3fe3edac68e93654ba4137879d8c83ba490a5588290edc57

    SHA512

    9fbcc9bc76742a48dff59478519ac88c8d463c4a45c0b45136fb89d8bbe56d5ab21a24dc7ad98211b181e2725e669517e7657c09ae36c44bd720c70341e4ae99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    94656f8fac38ec529f3f00b788d5efdc

    SHA1

    7689b5ac382d569ffbf3a31608f12e876ec88a1c

    SHA256

    d99d90655fc30e00d3828b665c02cf6bcea00f4ff19dbddf065874c0ca0d1c69

    SHA512

    14c9d213c9f53804c32a17d75c0cba1a2ad3bb61e8b92d231bc8b691692ebbec8302bdcce6ff3488298f11ac5d881cb6e449a5f735dd99de9e58b7294328a6b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c79ec0ed36930f852d2a215c8c386aac

    SHA1

    7d7760df5967953bd4356f53706162be7142091f

    SHA256

    60b4bf7e6071e00aebfc3f6026bd3725d6322e3ff2c11d2ccc768da674fbda53

    SHA512

    08569f4957403e3fcc4501fca613ea15ae32a9a1162acb14d5b04cb8a48b110043667293da348b3c92aa4a272fe244124b343863212ef579640d7d0f8d1da614

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9d0fb2d43a46d66d71d260ceda7907fc

    SHA1

    a7f81acbfbb0227be3778a0091eada73e5c83dd1

    SHA256

    015ebc6175ad7951fe22b0340af86d8760deaaa366b5fbf7f46e12a50b27886e

    SHA512

    08f78afefd97adbe14b128086fc6555ed56811545932d02d77f175a5fa925778170e6b981263f4d49382443cb0eadbbbc597add13008f3de8b884f0d41f5bda4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7267c81337a3cedc2eee4dfa31249d4c

    SHA1

    1edabb87d1f09e975b6c1dbaba0117e419e67250

    SHA256

    5d13cc06801d10ac505908361846a966939bed2d6cf9cf63929e04440ce1b6c3

    SHA512

    691ac6cbc650a3ea2d58e8c7cce72ad5ba1ded921e41d364d5e04a20d2994d16134a56616f20bace22089eb4de839f6790f0fb2cef36471f7758ee60cc31757c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c430a26fedb6f469f891346a6a4e49c

    SHA1

    bc69526d019149f11a4c9b4922b6cbf46b46a27b

    SHA256

    708fcc860e9935ed519b6486a85f2682a5bb21e9eba5eea1c6e5dcfe0ccd6b9f

    SHA512

    08ce9efd6a4fb876e0d476a4d2f8e7951bd86915045f50865f4f27d81c8dff601622429305fc75693507d9c72dfa838b1290c1927a008ef01cdb9ccf09431f11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e28abf5dfe9947a279bafa0c97606075

    SHA1

    d3da4fbf7daf53e285fc4653cba1d417eae00264

    SHA256

    83fdd02b66e1336fbd63810de7aa58036cbfd69d1319c2140632af1f99a238d0

    SHA512

    eefade0d081d550f3816e7896ae17d040001d1052545bd8bb795f1d029cd676142d8b71190b7bd877f2e267567ee3d282dc381f5e61eb061aadf2f063d6219ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    35c0f8714ed081f06d71f23a957a210f

    SHA1

    2ad9e122a8d22094adb54b07f0acd369e3f1725b

    SHA256

    fa04ef872683128e5fc40f4a7e16bbb4b855925073e745eb402d9f29b4171089

    SHA512

    a3156d93159795a3117db962f74fa7e226f467e5133a4583b1319ec521a9136e0005df1b9336b375b1f3efafb4cbde9c0848b4a4805cab52e9f8b7c7fa28c017

  • C:\Users\Admin\AppData\Local\Temp\Cab77F1.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar77F2.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b