Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    24/08/2024, 10:21

General

  • Target

    be64159e69e9ef0fa6d54f5ae360f374_JaffaCakes118.html

  • Size

    36KB

  • MD5

    be64159e69e9ef0fa6d54f5ae360f374

  • SHA1

    2d0977d696ad8f8c6c61ebeee0f80b39703df81c

  • SHA256

    0d2a6122983d79253d6c9d8c4bb03083b8e17552595e2889ff43816e2ea3659e

  • SHA512

    81a56a886315754af12cab7f47d8f8f5bc48b26bbe7551b94618fd967b8d984e0dd2c4d199f5004b6b1dc44f99ec2c127dd4cc56cf7a76366b26812fcab439ad

  • SSDEEP

    768:zwx/MDTHk+88hARsZPXzE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6ThZOg6f9U56lLRt:Q/vbJxNVNufSM/P8UK

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\be64159e69e9ef0fa6d54f5ae360f374_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1960
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1960 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2096

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12

    Filesize

    1KB

    MD5

    7fb5fa1534dcf77f2125b2403b30a0ee

    SHA1

    365d96812a69ac0a4611ea4b70a3f306576cc3ea

    SHA256

    33a39e9ec2133230533a686ec43760026e014a3828c703707acbc150fe40fd6f

    SHA512

    a9279fd60505a1bfeef6fb07834cad0fd5be02fd405573fc1a5f59b991e9f88f5e81c32fe910f69bdc6585e71f02559895149eaf49c25b8ff955459fd60c0d2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    59ebb6a7c9bbb85262fbb9896544babe

    SHA1

    83581177b005fd5844bea507ebf5d852315aef03

    SHA256

    183032ca8bef07d60b19a563cc35b50eaedd313d06f02128e5f95acc66c9c2d5

    SHA512

    7a10f5b16f7694ccc7ec5443971dfa4b16cc0c024ce2128dca2d01b9fcdad470ec4aa5ad0a10be4b74306ef8ca7881f3f549cd743e5a7a1d2559adacf2551fb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    78c20b86a348508a845c8c92c4a57b26

    SHA1

    f6f5df91d353711df0e011a3aae0cf6a0086f523

    SHA256

    32ebeca5a82a9225434a20900e776d1b6f441dc1029dbb31415ab5abc4adcb6f

    SHA512

    6bab4e85b7126c05e9dce42f2e21a81856e8e3c120a00accfd70157424c60ac19f080235eab7d3d871aae34009544721633252300e0312ea3df82431125ab310

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2ab09be244cdc3ff4929f568dd2216b6

    SHA1

    3befbd5ce751f320969234d78c960ce3c7bf36f7

    SHA256

    ee1fccc42ef68fc9f2e1a12c7bc7ef75561ac11751e92b3d344a4d6c46669afd

    SHA512

    71980150c839a62811b99eecb34e71260e383552303bd1defef096967c7c828903281ffff1cbdb972e7e25a70c1a2fab5e9b80160407588e9936045971468bf4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2c7566a0404c99b9a68d699a1d541947

    SHA1

    2067a1b7331d84a5f0f1192969bf5e3193bb4428

    SHA256

    01651655c61c41e99656c64b22f7f63ac09091091c0b871c3b68c57bdd9180be

    SHA512

    7deab312767ae19bbb9b3a6f55068f88d44f4888608e4854cea26ac7aedc946f90c2f7902d63f9cee3d6b58d72ba73d118012c024ba6baf3892ee47883059fc2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    df898a4ade646c894487b698a82d2757

    SHA1

    10784f3b1ab788b2a1c4bdf2bb9b31dc9ad215e1

    SHA256

    97af386b5e0b83063efd2b0e0d830e791104262f848d27ea61c50cf56e8b3198

    SHA512

    1176797be924532d205844a9b837a537fec0444c6fe883ab71dc3ec82f7a79dc9cad446351732ece008f4c7b59794020949e0be2a2d2a12d2d8de5cabc23c09d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    911e541f5384fd777cf3a03657e89992

    SHA1

    fce09e862859a83a767ec890167366475304173e

    SHA256

    49203d433869ca156252cad264b83f63e0d9d177005f24adfd1a93d6ce396a30

    SHA512

    c8afc3f656ae2ab7ebab43200170d68083a642af53a1a4b2abd5c92eb3c048d517efc45a8b53b705e4994a4a083b60f03f4f2596945113a194cea9b73c82810c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3611fb12ab9af92542e36ef47fc905ec

    SHA1

    5aecda8a0c5385fa8e6303a7c4413a94f0281c23

    SHA256

    dc1c52f72443842c5d4187fb22b24b3455eeaacf0674c85cf3047fcdb65ed5f7

    SHA512

    4b35764179ba63ff3746fff0376dd570b6cf6addd6392207f5dc84e1175322c709fc54fa2808eca58fca54540183fae9be103c4673ca07f8faacdb6d99caf13c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    50bd9b1bb226445de39fbc6bf9189a92

    SHA1

    1753ae5e1d42a77171785412983bd13e1a0a7294

    SHA256

    47eb8219ce59a5d7bfc9a007cefd44ede6ec6ae04dd6ec775b259a1cac064802

    SHA512

    9db81a9d1f71bc2b2c8e49ffc7e53b4945af4bcedeff5dbc36231189ea051c25062ae745f4809c27b21c4f890ff0f83a39a807d75fc50713cb6ee08240718dec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    65afaa3e8818c4866774757296fea50b

    SHA1

    f0330245eae932d2c9f29a77318588a6b93af783

    SHA256

    ec5ba4fc2e9d4faabe0b5e51bb154ca1f5d7becb6284815f2fcfa40b75fd99ed

    SHA512

    81000df95e6b9b30c9a2f14958c11f76185f1896a1d1fd90f92ba636d999e3b3ad523b5e4b3e7172545d2c2cc3514df09a9546c45b6d8be83fffc045133efaeb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a01cbd1b3464b9045217d93601bd19da

    SHA1

    f27e8e05b694ca5cb03332455490cf6a14684396

    SHA256

    f1255b61034d834d813b702fae9f258f323e842a4f8e70b72bdab03085b6ab44

    SHA512

    d75c3674fd8115f4ad88623aa311b6c3a496c841ae0b7179298d6e14939a49a6c54690b827abd6b7a7ee5bef60f2405b8f2772f3715249e3ee637f436813d372

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    99c0f39f9591baf15ed201d80a7c5e48

    SHA1

    b501af88d230f8ccb458eb309a37aa9182647411

    SHA256

    66d740a1e2da1cf09cd7d06aa19eec0ec7657766f24967cd637acd3c2296165c

    SHA512

    9bc21892c1f76fdce9e28fb196e4d4b8a0b82b32166cad141cc4121cf93f4335177fc3512c3b324ff53360da69cc61f1b3a27e0569d6163bdf917c2b41843b03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    32dd1249415a07933c7ecea8c04ca0ea

    SHA1

    6805e1aaf2e30c30d7c574c398db962d335ca7cb

    SHA256

    3d0015315ed99b478c4cb149df67606345770ad76985fd7511e59493f39fa4ff

    SHA512

    9d00694a35f3c20ac700727717e7b75daaf400bc96060e8c0c4673dce5a85c18f6c8ea8370380bb015407a1e5c44ef3fc88c33cb57d1a4713fabb8d9848815a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    6b11dfa0575af5411026cc06a9b1289c

    SHA1

    7d38db59607270dbd67505e9433189078130dcfd

    SHA256

    a517add554307c444bc640cab9545b117bc59168e953b8a20e00ce36d51a218f

    SHA512

    67e3101cf1333ea8a2860c649d63ffa06904ab03112ef2ed647ef8c600fc9c87f0c1e9a050569323f77e76638a61c46120f4fba890056310e1b572010afb399a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    aa7e476457be1959ff0ecb7be7af1530

    SHA1

    bb3eb5ad9a18d4bc9689c70120a1d3486066cb0a

    SHA256

    d6d94400dbf01c15a74dbd47886b70037d68602d1e36954c532cd1b7298c9f60

    SHA512

    90b8493cf679f9d41a007e0a81c5f68ce856d9ac28ae0c195f3e1c40b70706e2d9bee095624a8cc53c8f2f8e12106a1ba3a27aecfb36ea98918269e5ef117ca3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3ce82f2615b89c4723dedaab5de533f8

    SHA1

    7ea503eba2ac538ef1ef2d41c9f956cf41538e32

    SHA256

    07cd34d40815799e2c9779ced8589856a49d03a7ab3cc51cfcc59ce25763ab84

    SHA512

    a533d30c94bee2555413ddd5dfaa5814a3afbc9dabc24d545b1e209fa7faf5ca0b0f1487b157e008e92e3fca75e8ef958230c9afa830b6ab61b7c2ff159885ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    53dcfcd802cf44271f08c2154df86661

    SHA1

    87b5e14a73b22b72d64e5b945e63f8406254ed2b

    SHA256

    6e865a53f0118ccfc69abc8c90a151f59ca6c3479bd132974900a54f93d24506

    SHA512

    87d1dd474158a94ff1ba3709abcd2b01691303fbdaa518004e9ce856785b9f320e5d17b3bef43c63827e5816331f277b85a73c2b219f441db6658e22fff3e7e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7f544681e794b6b43e8f94b972c78ad8

    SHA1

    026f023761b8de26184482eac31013fb5f9e9036

    SHA256

    a71ef621ac02ce13da4c33215515ea9d8929c5742afe8f34e0fb8adab8a5fcba

    SHA512

    fe2ce86ee85b6f6a41d6253b1ff5e664a6b1272df7d475fa56223b2868f65ece1b96dbe9d60454792870fcc50fa30164ba8fb40e2b343e6c85f1b1cea95ab846

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    521fd7bb2cec22b1c5290dcea6be8ced

    SHA1

    807bb4e3587271c681a5d143e2fda5fb8e7bea6e

    SHA256

    fd9fe101ba41f1c1b227a85c447b854e6c4a3236b717996587e29f8c40b44734

    SHA512

    e4c61c569ffb0fb92b67103c48a92f68559a233032335adf36bc4104a5b1e3f310070cea7f09b983cb956a0b125678a9239fd1de46fa1b93e1d4049a6065f1dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    18f0796183dfd0b532bd803d132b274e

    SHA1

    894c197a991c0890e98b4c6133207cfe75a7b18b

    SHA256

    3679d810620d409e66b26ba32bac0bf2bb2b83637a25fd142b09dd6123ef0141

    SHA512

    21bd03beff252926fd2a7df2750f0a34d733ef5c085c936c9aaef15d2f5a4190cce5eb2626cdc5b0708448699dddd6f31ba0b95dd340614d8d0f6474e1975d4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    241d00910b23811e2c0c5602e5d5b840

    SHA1

    591b4c804ade1f6e51b77f0e0a14c0f26e261bdd

    SHA256

    a7860f01afb5ebeeb93a116d202c838cacac38b5f2162e9175fd27cc10da8b6f

    SHA512

    7cdf0f5fa25cf90fee57be7a76cc37fc7b1cf4c93291e1e8d54da402dc4c523cfae7a70e1c9a5039e1234baca4674720ed2de92a4cb042823beeebd3d9c0347b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    1cc5a47e094a2351a4326cde23ce2857

    SHA1

    2a4bf2337a4dc09356c2bd743fae4f4d61dff8f5

    SHA256

    c73b62a2c75e572af9bdccd4094fcb96678bb9dfdffa4bf1d677be003b81387e

    SHA512

    1b503d6164845d12be2a16653c9f8832072f678289556cb87d89c43f7194f37cebffe6ab9310e7b0810872f44cc75f3a972e2db6236e07a692581e70d250db47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    2b2929788e26c44ddc1407e6ad37720f

    SHA1

    9a5473ef996243d2d68104fbd0e8ad1a290d18d6

    SHA256

    ca50d202b6d3b42be10d1d7665e0e4c30650da0b5c3d88dae6d529f1b344b2d1

    SHA512

    be9d2c37d8c0787baa05c63368c77fb77e79b5b6d66c88c38b164aa39ff7b18d2a06c0f9096b2860f7cc5acd9c59048c3744a9a1bce7e34fc5086ade853f75c5

  • C:\Users\Admin\AppData\Local\Temp\CabA4AA.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarA568.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b