Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    24/08/2024, 06:23

General

  • Target

    be0cdbc5d69cb8cbfbfb35b8b6fcab94_JaffaCakes118.html

  • Size

    18KB

  • MD5

    be0cdbc5d69cb8cbfbfb35b8b6fcab94

  • SHA1

    b67f9f00e43fb975d50d7f31c703d5da5798dcdf

  • SHA256

    c37436157857316774d210b0d039e94e66a873081992ce8d7202b98edd320a40

  • SHA512

    69522d5e43f2c913e46b280441e3c72458511737613031e7943bb3b76fda7b5d85ee0c7ac20f435692c0f7ffe1f20a6b5660e9e1092622685bc617a95f1294eb

  • SSDEEP

    384:JRu3gLLsMfmfagKFCiWU7+ORLZ3tjAD4d29wz0dllc5LxfAN5fd:bAXfagKFCit7+4j29XOdY

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\be0cdbc5d69cb8cbfbfb35b8b6fcab94_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2596
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2596 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2440

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    22eeeef4212d595a23a0a98f3575c706

    SHA1

    e31497f4b593fff89295b8add5fff7dbc3f1f970

    SHA256

    37560413ea556e2b10bdfa32340a3fac3bb2f48732d8e66a38f6c71456f5fbf1

    SHA512

    36db4281d02020e587c0fd7b188c392ff6e5e3759aa9eff6148ea7449f0cec8711aa846200c17bb7de5b01bcb6ff805fbbac1f79e8b8feb011762eb262de94e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    318665482d00ef53f3116afc9ce8a88c

    SHA1

    dc9c5d0c6529b8134cd0b68d06623f84e3b2ed00

    SHA256

    a3ee64805b600e0dcd49af973637f6000552cbfa8a7986bcb9ac775702fa0197

    SHA512

    2b4bbbff08a098a89d08bc99b8da276cafe57c7541da9c6ae9d722638be354ba043dbba9e7f814980249eb132c4eb8c83c388b3c1a751953cd215e86d872d748

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce82ea405f68ae5975498a16710129d7

    SHA1

    8aecef2efb58c6ecc31978f2c020d2d8f514cf68

    SHA256

    97ce3c8fec7fc484107255f48da79fcc5ef43b619485fa1ebf10f831740dec0a

    SHA512

    b036eef5d813d51badc1557ec8b3fdd344fa12339f0fdf6bea11b0a69f682ec100315841344e933d7ea4a9308629b38cc13e83e1db2d56b54203db34dc7d6e80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1cb8f45517ea0f173729f04e52857d45

    SHA1

    b7955ebfa494dc217d94c5f24f8c12aaa738c238

    SHA256

    0a3d3ee2aa4c938683cba4fd826c0be7841f4b2e0267a7c03e89f2674ef01bcf

    SHA512

    7aa0d713e9a5aa9647b8400e1cf6317e345a182e0e1e5e09fc6a48450736f5286b07ec51ba81a585daaeb80a91b899bcd41d9c31aa272d8f76bccd9738eafdaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    97174315661e068460e9c4a0a7d6a4f5

    SHA1

    a60ed340cd1b7e6ea898a1d3972735c7b20f3a26

    SHA256

    9751819825911498f85698e5c3803cd7ecee832ca9c3833f66cfe3fdf5d464af

    SHA512

    707facde08b7b91a4a26e4dbd5b5e5316ad39a6e18f6c42dc759385240e88b8446f611c5a74ee49bfc2ac64ea0ffa2e5dd8b1f558ba87fa3591db43b0e90479a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d2eca4b2125f513a3efafb55229b538b

    SHA1

    a7485f123b84de0ff52756ae417fc5223fe2d9b7

    SHA256

    9baae40dc9c7a0216388ff599b283b64a874c3ceac0c156ad70d76fe13466c42

    SHA512

    a1f16ceedcdf412ab30c75acc1ac411424b8eae2bec8bf7d8625fa9b04b43e78435d1a37089702e9cea7e6a518fa918cc1c0738332a42f48d5db6ee270e91c1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd600e0bfb6fee0244b682b23a7dd03d

    SHA1

    704e7625d352e297b5f4e2c7009fb71d4d90fe4b

    SHA256

    e0388c59db9aeb3c5b1c7eb2d0d89c4c5ead2b55f97d20ace0bc01b251133edd

    SHA512

    c5973e1cb3a77fa2ed3bfc88dcb9a660e94854f2124a785a42b83402b60be63da36f9ad2497dea88998f3878095eae7a8185e277a85d1774cf33916d1c89b752

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3035d15df6e72365a2ecbc5a26e1cea

    SHA1

    5132beaa989355b99f46d202c6797c68cf76e7a3

    SHA256

    fc4f124c4e07b0c9044ae8e1364bc73c26154eee60767b77696a669e3edfb352

    SHA512

    379385044b90a7d00a55fa0cf088004ba813f34925e0936bba2abc57f78e0978998f44856456fdab0f9903b3adfdcab047b0dcf505bc21ae3f981d1f645a6d9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f0310c74aa1da453a7e1dd70150f71a

    SHA1

    8990fcab2d31ff6b399111c40f6208db01e85b8d

    SHA256

    4898b4aa1b3d1c666f2eb288c4eb0a63a4eba4402f8359fbf206a96e68f5cf76

    SHA512

    0f348f667b064ffbfd8ab0556e987e799eb4b22002e3692102bfc2e66d51b7f3b0a3587d3a481ad31f81facf3bfa9c22d3e9d7a6575772b17e33e14fd622356a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d46ce515e1b5add3517b3a96ce6cf958

    SHA1

    246d7337f58180ef00c386ca9e95774ae6c61f0e

    SHA256

    9980c652c46bd7ae751f5148647a2f5989c5a6de4280639f771392c61cbf1992

    SHA512

    318d455b19643c07cae192c5958e2be897d7822d7f50c63af9822113c6ad7b1cf21a1c2067a2c8a60b35fd3d95b3cd018a7e9c0632b4c446121264d94a592668

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    adcc53dbb94389f0505a9707419cc96c

    SHA1

    480cc5aad47790ad0299713a13e4770e1b3414c4

    SHA256

    7365d018b90dbaa3a9a9eaf56c4e3874c48317fabe7576f0f9ca5c819b5269ec

    SHA512

    fc2742a2eebc18f73c04b0d2b7a74934795b3d181169dbf242b87fd1114f3b35a34d0bd26965810541ce902c7cc1e111b3cde17195402fae62143bd119e602be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    519f33436530b0167f6408f25f4314e6

    SHA1

    1f76272205d427d068b80abcfff2e57bb07a355f

    SHA256

    9567cd95c5bcecdeaa237c21ecfa3c59d0d4a1e3644acc2a7f9c7b73ff3b223e

    SHA512

    2eb03b4f2ede38e07e0192ef8b86b07cd59ffc4f3a3dd9502c6ac0a3aa62ef86f2308ce42489d85e9e6b7faf4d3b199f0c42d2474ed5ed969cc5a5249c510c69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ba62f707b7e9391168706b5f4fe12f2

    SHA1

    77cbfd608cf21fad918868e8bef17f6fbd9e04de

    SHA256

    e380f787ebb75357b2d41931a5a809fd8d271585382e55cb217c15ad3401be30

    SHA512

    8d7188e48bee9f0c5156a79abb10498c71e16d356df2f293b42a9b8659c5a3a0cd2abca922fc7e0fcb43cba882b0fbd9024347869a5147402a0dea30bf13eb6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    04c53253193c4d8df2b2d7dbbbeef93b

    SHA1

    c98c0f4b79ffa8a989f14115bb57afa4fb5eccf8

    SHA256

    dc6a6415a5f2a5763c0595594659a97930171b0b9b2d5e6781760392b96f973a

    SHA512

    6aca3d12a44804b039d00652dc3d0489de2d8ee248cd4c9992416d324925717ed8ac038147b1d090db9fdd14c54c367fb8704132ded6e6ae878d7d6cab537470

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd1959ca53d485051e518cf193afaf3f

    SHA1

    c52e5713586be36e8e85fff53f36e5c6423868d3

    SHA256

    a3dd03b7d43d6e44e5d74f0549a3c6cfc93e9a0a3a1be66ac8be917056da954c

    SHA512

    f84b7634fbec787cb65d1a1913d63a94087a0f16b7b7719ed2e95ae99d2deac7008fc97df0a6027f530b44f9c45a002db928d40d8d6e38703e5c2c5e1f8ed90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    15ceaaa72c2c783ddf9d59ca27066736

    SHA1

    059f963edf666378350a40e4eee973444485cbae

    SHA256

    f09a03edc5b6dfa6f50bffb9b11de735d70d506a1b98d8ead71de9e81eb1af77

    SHA512

    4450858836f0033438c183f489d02505127b0ffa04743d6e8e8c7e78597363162ea5419da75999c2ca7415313c124e9d306fd6c9de3a1ce39704b718bd1fb554

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3674cfadfe08e98eb447765c3f8a67de

    SHA1

    2142859b402f0c8449fa5b28651aa5be09612839

    SHA256

    d344784f9074d1e194e61ec3c48487c1b0a0e3e8431f8bc57e40036e44509ad2

    SHA512

    a4c49a5d9e05c2f4041bef6e2aad71d8a455f64453210cc50e0716aaa1ae95e1e58b293a065f718943648a9b2f7a3e8883b28be56ec6e87cee090a1e700e245d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22817f07fe56dda108d460882b18c407

    SHA1

    d6305a51d50f5790a15542d416c54123ca74aed8

    SHA256

    904d1f80e48a88815867a30bababc33df3cf9930cc9b787735699670b9d3d06d

    SHA512

    4fd604f4de69c5f1eec7d63515eb5f056e94441db3eebbe0acee938c940aa6901695bce312b1eb90ab46355215b7553947fa435d167671d5673760170b5bb8f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8de4c56e9e3e1380f1e2954843d280e3

    SHA1

    5f989adf582d0ce7e6c4133ac79ba14271be5718

    SHA256

    07600342d8fd223f0c533d119bcd96c066b5ac7ed0c811c5b78c001ae1732284

    SHA512

    74a1f4c58d7754b8f3320c27ca174cf5133dff42fbfd0f944eadbe20bf1de73598f684503f547ee3d8e50fda364cf2663ef825bcd3a4ae239452d74eb4b617b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b16078e6c047cc8d060851b113542349

    SHA1

    d51b3f42e2669f0b7ff2b83c948b8c94191d541c

    SHA256

    5170d6ffa7feb81cb6d563234f906214b819d81d64e16ec808069729f21d2148

    SHA512

    a773948e7ab3253c99d1f0ab77402a0d12afd048cdce29e8899cd2c788cee9f243fd2378551e937f35930ad769941a38c83a030297f27b5ed40fba36335ca098

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0c7e9f350c2aa45c222ee3c2b85781f0

    SHA1

    25d4e11adde75cbeec33b723b09f72bc5e26cb4f

    SHA256

    e1338b9895ce0f3d2e948e719c97af797dbaf253d2654b214521eb64dcb88b17

    SHA512

    8f4f8db0fb96b1af0fb35773b0cadcba8fa7d691359f0ebaff58fc5b859a09312767f9e7b8b0a4165ed41d4c0bb2b97edb00c38b6611563b067fcb4f23fef5f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    d0785317bf4f033af27f988ae60a4ccd

    SHA1

    7f2d2e93d2b62bd2b775d03fd6f6b6a439f2cb65

    SHA256

    3737483522471cc7bf2c9027ceaadfb3066d5f651ed91831244e87c948574fa8

    SHA512

    ca6373723efd4d1f498143d56d8b7972b50e69bee128c678c9486e71966927c3375481713ad9c538025b9acdb9f89c5a67d0be93d3a5f8a42ec20bf07614c73a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\84EXSCRK\config[1].htm

    Filesize

    114B

    MD5

    e89f75f918dbdcee28604d4e09dd71d7

    SHA1

    f9d9055e9878723a12063b47d4a1a5f58c3eb1e9

    SHA256

    6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023

    SHA512

    8df0ab2e3679b64a6174deff4259ae5680f88e3ae307e0ea2dfff88ec4ba14f3477c9fe3a5aa5da3a8e857601170a5108ed75f6d6975958ac7a314e4a336aed0

  • C:\Users\Admin\AppData\Local\Temp\Cab8D24.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar8D27.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b