Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    23/08/2024, 09:58

General

  • Target

    bb445d8127d3c445b89949ec76bbf61b_JaffaCakes118.html

  • Size

    918B

  • MD5

    bb445d8127d3c445b89949ec76bbf61b

  • SHA1

    69dc49fce4fdd8f8a9aca99b277b18e5db2d4457

  • SHA256

    d10a07fb955c4fb2fef369cab46c9fb18e35abde4a1567f8c0f9c2f6f7f50da1

  • SHA512

    b24df012bea34baad5504fba68c08f117cea72755f9b558171ae2f5f3a2e907143f8c485b1c32726e9584c7da7840d6116856f1cb65b6f78155497fd6cd25bc7

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\bb445d8127d3c445b89949ec76bbf61b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2260
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2260 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2540

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4FA45AE1010E09657982D8D28B3BD38E_BE32D9F1882B93E37445F58E05C44495

    Filesize

    472B

    MD5

    cf2494f3acbc540611cc1db5ff399bd8

    SHA1

    9c8d0d49436be710e0408f15cc4641c515301bcf

    SHA256

    b9392ea37b3c34790e335c949c1fb3aaace1d1828aca7b61237cd15103639d33

    SHA512

    c4223a69dde8614cd92f05fb653507bd7d59f032adc99daff59a6e93b36fb5a53c99964e99e8915b4b48390b78f767680a9e045f224d03ab6e9c82e503adf745

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    b6a841385aea1e946af4954029fa17a8

    SHA1

    445b6fc2fa1824389c35e47d31940f24c0ee1906

    SHA256

    11e7bc142788adf0eefd9384db46fc6c8ad7ed527939ae8a74a14a9d886f92eb

    SHA512

    a6fc62b14d9ba4b6b937af9d3611861ec8156e2acdedd60d87ec390b711807d75954ec3eebe0ea71814c76c87955e9efe8e286ea84bd90aa4f4dae22d62ac4c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4FA45AE1010E09657982D8D28B3BD38E_BE32D9F1882B93E37445F58E05C44495

    Filesize

    398B

    MD5

    c32649b676a70274e52e39c748632658

    SHA1

    11193a4419636abdbbd4a261fd37a013d5eff41c

    SHA256

    20bd1d059139e804b891972ed8e5b32f657e88fc5f342cf38ef2001dd82e54b8

    SHA512

    06b8c5f65674cfb3270db8a7a9115bf848876a3643f4671bb3f92b9141d729387ec4bafa645db7c0845ec9c6f6bac309c092c4d30d9943d5b8417be26b3a8556

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    54fd7e1bddcd1af6d60d3f692b80a039

    SHA1

    60c8d2b830e415ad3a3a5628d84ed205a5912238

    SHA256

    02eb883d4bf6782016237bff905ddc3a8919096ab25829094bd4e0b2f806f52f

    SHA512

    e99dfc531110a897595e8e1c030e6b06d514c3b11df3c56c1d479a0ccb93d1693577a0632de147863b6ba835b14f7480932f742416a76fc9f634febce6148a28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d4f7843e3600d2cd0f205d5a61fa518d

    SHA1

    8d9dfade9ee7ee33241c933eebb5d7a690a14a62

    SHA256

    697f4981278ab5cf3d1743873a28fe5d9c7ee58642977a1c5ab3b58fff9161a8

    SHA512

    2d447770d62fa57a482859ae28bae880486b0f00ee285f2544a10a972dc40c5140da7e9610128857418b3f7f735b03c054dae556f4aa6945771d604cd58e56c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c6abbf188bbde24f30ba4f17585b91bd

    SHA1

    e4a7e20c04c5a1ead32086230613494b3d8bfa61

    SHA256

    06712b621fd82a8587f144d639c84841a2211ddf8a2af608d274125945951f82

    SHA512

    8183ae37b4099bb3b088b8991784d7692cf038a5f9f35a9e0131da3ca7cc6f37708223ec1e04ff2ebe620f7adb3eccfcb0b39a40aa3802baa72871751faed17d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52a2d4473c58cdf5a91e5e95e83774f1

    SHA1

    1e8276baeea1fe29d4c107c4e03ebae4962fb13c

    SHA256

    8aa4f3dadeed934ac0264548ab5c2c832d8f98d822e3a928dd95171f53c68284

    SHA512

    301d0bc7162ee549d8aee5f08a6a3b8316d6e3846b635f95b3dd9e32a07c1c5a3a79ae64eca21c24f35c654a8f934b20c4dfa048d45cf024fb8b17d9662718eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    62b63df420f8d6dd66f64e28c7949e93

    SHA1

    445284d439629682ef2cb787fb40704df0630f62

    SHA256

    71a0af404e7c29a33d8106645355b4febefc218915f2f91aca6926ba2b28f673

    SHA512

    b5ec2fb599c2d8ec7de312d80f0a86aaecd82a1037858c9a1aa7caa1c841d116d0129f16ffd48d5e463168e54bbfbd00da180bb40c98a32f196030c029ec8c71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    01deb0dae68e34961f2af5aee5109a18

    SHA1

    722a4e942ca373830ab04d80cc373aefbc4e3148

    SHA256

    4176eca92e46015439de6b5cbfc008a85b45d29a964452d7567575000bedd62c

    SHA512

    efd8509c6a5bdeb2ee8d119b3773cc9c589c749327a577a638da0c1f3e8f91dbeb1c6c4778dcdff90025b66600404b7c77d0bb57e519dcbcb008373e1132306b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57cb7d9b87181a41b1028d9f16891fef

    SHA1

    ee7a484cb21894df517f3c58cd8ce7a708114084

    SHA256

    bfb60878c1866715cbd73fece115dbc3eea0e1c96f5a30c571938b4d342edbe3

    SHA512

    b86191031905f673299eb21add9606872b32fcf7222eda0613bba1163732995eae528a4e006f057dc0db29e00203e15a8b4b431c6047c0af43b32e22256d1d44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd1beaaee3649f188cfd520a83aa6c94

    SHA1

    14b701fe6372aa410aa37bc5e8f4517702a3c5b6

    SHA256

    e1f97daa6f8f086980271184a1a108ab356e306716c9337af7a17c97e242256c

    SHA512

    cbe9f43a1d25145c3d8a6da3e652a1a5dfba8297557c7ab6f72e536c5c8c84c904ddb63711b1fc55257c094a5f11ec8dec3b36b451018455000feaf655198b03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1a49bc413b8af2c7b5d06abf37506502

    SHA1

    dbcd3675bbd6924fbf17b66e63a6b7d6f3935ea9

    SHA256

    db8f000018d54313acb5c26e42bcf16f1e5f6c256d2ec9566a59396de813c3db

    SHA512

    754209d3ccb6feaea3a32d4e6fd42e2b5012aa83cc0bca9fc02c22d8f26e537e51d3dded9dbde7981e424ba0785f57c8ded3b2458b5ff1bc58bc92c2300b5853

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    01f8e84481856dca7bf7970404b3cd48

    SHA1

    a9dd3960a715bcbd516ee98c5d65c9802d843928

    SHA256

    4ff2c2355645690e0ab66ddaa4c7f9495e12af00a4aa2d4192341a5a76181952

    SHA512

    363eba7ff677d9f514c4f92c784639030497b1febdf060381089d427cb12d7d7a6f224ab9549192764775e718b246334da6b6f953e21d736d0f4b22fc9983888

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76f8070da602e7e32cda8ddf6a61abb7

    SHA1

    4a6adfbc2af152cc6ff3d7670377b2d6e69e7c2a

    SHA256

    e488c47f87e0170f84b4afd0361dac3a4ac4b10df5b1ba2fca91fd473f815be1

    SHA512

    4a8175547095f7dfd1357aa75bdd94cdb3419d5d14216665b88a29fdb4980045c007a7760092c2a0a3b89dc0d9aec32ba5dc2f136177f7f2cc551ee6baa6fdbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fda8f8e0a4694b1f88e567e953ee5633

    SHA1

    b8c131242335b2cd9fc80ecb04ae8b6ec5ebe3e6

    SHA256

    f79f1d1f0132506cbdd7b30c19ef95ed5d95ab4acb45788fa361c75146465ad3

    SHA512

    22ab9cee2afb82802aa8d21cf4e484a3286b62bb9a4124dee36963cb4b3d188b6c6eba9c1aa53694477742bda12f58ff6522ed23c7431dd4696491eaeba21777

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89f1495814dff6229f0f2c06e6026a18

    SHA1

    4c1a2ecc51608ed2c84ee471f6171b1d0c79026e

    SHA256

    f3e9d276ff1862d13dc80cf03442aaaf10686522f3cd8589ff23bf9939c02f39

    SHA512

    30297e131f6edc95b8659631cc4f7824e8dff2132819e058c7dcb985ae4c363c86dbc2ae203cdba7533757fa479c2bccf5ede93dd71b12232c3e2d69d16cddbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    50646d5c52a1f0f8385855550d6062c8

    SHA1

    82b0d61e8d0284c23a939d3771c6f63014c3d31b

    SHA256

    0b7b9c29edc201c8ba7553b6b77ba4ad06155444f422cc7562215f4541d89131

    SHA512

    0c62d0856a2b18c693b24cb238809f68939dbcf2b4f414dbc07e312cc5a813d2ba633acf2a664169e807b82d7c69a79cfdb6c1a9c93336ae74a884b4c68d15ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ded8b5422412fde1fc568e86f4b44ff

    SHA1

    4d41b9ddd8f6c408295069a7bcfbed58211f95fa

    SHA256

    12e0f4f3a64a015d0315d84956d5039be07c36ae593ff937aeeed8637e87ec46

    SHA512

    7b4ed9937b674aab716557b017b80342f2d1ff8da5c6c891f2ca82694fa36976cf950ee327ce74271b0a92e61fffa933098ddecebba48619b21874a3e2d9156b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf779fa6037155ecb99b0e7c2889ae1a

    SHA1

    0228bc709454e8096df8c62015906331c0cf1286

    SHA256

    0d654d71e9ec024af4a1a7030eaa176651fb2b91435c2519d30aa03d8b8e9cbf

    SHA512

    7b6a6cc009c519959bc70c728f7ac857d3d1bbcf31f09ba5d7a5188d09764da5382b04ad0dd764763fb354e98ff352ee18fbd234c868ce88d88ec7e246e06ad3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2bc224c6fd96ef5ff3867327f9ec8146

    SHA1

    23f52be25f65412cde570b93a3e4e24747a7c47e

    SHA256

    77e6b86f0d62d8413bf76e7c4f050c8edda6cc4b50fc53f066ae4bd84f460e93

    SHA512

    1a30041ee4d626acb4bcb225df9e322bad3d126fbbec594fe85a8145f72ea1f21a6bc2bf3782f37acb19060ef4c9251d369d7389edd904701b98f0305b627bb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fbacff13a065428f9e015674666d83bb

    SHA1

    4e0a515ee490cc88f2de005e669b9cbe068814b8

    SHA256

    502ce2e82fc634e7f4e9cc86b0fd07aa7616e3bc49b82f73ef2540a78aa4f8b7

    SHA512

    0888e5b4c0ea76d4d014f1fc7337cb347ac155876ce6a761884405e4b0bfdb10f3931562858d3e191e7b441fc389a4e4b2c16ca0aced1f4ee5f3462dc8201fa6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea7b1d37c8fcfa96c8f0c8ca25b4b12e

    SHA1

    7c9b5276327d5070bb90407b65bfc5c8d221df81

    SHA256

    0a3722d2681e49694bde83d02b54ee29ab396921804edd2f49ae6f6ee6725adf

    SHA512

    e12e4e5820c77d660876660e8dc3a526051ae487f63abaa94c5686166b03411f2c04c49ed20ecc570697674dffc01e82ab55f5f620c04fa150d6abd6f359b256

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    50b896927e9e370f2ebfdffa806a9b76

    SHA1

    9ba95573714f6d9c0ab83ddf7b46b0b2f09dd076

    SHA256

    6b3f135c5aaa6200b9b4949d52bda1e96ea7957a68256247f9fee95d2f7b9175

    SHA512

    8f0efc30af4099868c8a3a0ada69d17ea6c51e5ed4c3ef5cbba552a209df71c61ee3a2a52bf013e5ed540856577b1d8a65b33c621af9cb85a8b4f645ac7af02d

  • C:\Users\Admin\AppData\Local\Temp\CabF5F5.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF5F6.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b