Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    24/08/2024, 11:41

General

  • Target

    be844278ee4bffa6b3beade6c9df13e8_JaffaCakes118.html

  • Size

    35KB

  • MD5

    be844278ee4bffa6b3beade6c9df13e8

  • SHA1

    8f6384e2a9024dcbbf44a7bffbe163739b2c3205

  • SHA256

    dc00062a644d99a22c5a4cf5da54703ee1d85440ad627306bd34dea9f268dc93

  • SHA512

    174b39b0b75a3334e32fe3bd61ba9a570ab33cd42f19f7ca5f353373d289c1b24f9c5bcc1963c15b92795b43987c18190845b01d55e2f24429491a9174894fd8

  • SSDEEP

    768:zwx/MDTHK888hAR4ZPX/E1XnXrFLxNLlDNoPqkPTHlnkM3Gr6TIZOf6sggf6lLRH:Q/fbJxNVNu0Sx/P8MK

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\be844278ee4bffa6b3beade6c9df13e8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2292
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2292 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2768

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    166500d1cdbac0d2aa07e4e84d2b9a0e

    SHA1

    04b7fc4dc514b9edf3ae7afacf17bbe4dcd93e4c

    SHA256

    725d07c6da605b1e6ff4d37f6f1abd79fd5407df232228acd7455a3befd2344e

    SHA512

    29e3735c73f5d72f99b4c8451c39f655ba715b47438cf80a9f9f42f5715f0854263d1efe15a0065be4bea9ef4dbe95a07d5ae528d9410c4760e5628fe0fdc481

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cdbb3b60080d5362a1a9a61c8eee370f

    SHA1

    4772e8b324c5d1d4ed5ae8836d3ef4836b59f3f6

    SHA256

    9fb65fe11fd00fd13441e75c750f44639448d2df198087e56276b7344074ebf4

    SHA512

    e0ed4fb216a6e91902c7414eb39ae97ee2aadd9de73f6066be7c9515dd5fd1ca2385ee1d165c997b2d0e84642e02d846671335a9ae93df83b811755aa85a4ef5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f9f2265701108d9779e3d9550eb51db

    SHA1

    38d1cce225f32002c42d8f13bd30f0414d7528a1

    SHA256

    3e08fd702e2f11e80511ccb9c18335145454987acba374d8c6ba078fbd4be37b

    SHA512

    6e4fb458e19ba950ab774c461dd7157559b2c81b118ac1629225c326433accce2118dec4970084d7da53c42ce038d376568bccf9bb0e20c85ec80c68ac2cc3b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    925723a715f040c0a8a17bd4778df03b

    SHA1

    e1725c1a8deb0d0fd396aca08d859049e47d4694

    SHA256

    1e9f68f6bc1eab5a163de34f09ccc66d1043d6413177c9a4bae6818458861bb3

    SHA512

    93274f2fa73db1d85812c08574e87ed3318c72abadde85958ad489dd2d706da9e27564308295c1711e5e4adfc89e688d3334b64a63c24fd5d649114637c047fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a4925456cfd28aac90afeb7895d421a5

    SHA1

    2d7d9fce5a082ad6e5b0bb93d9ad7e3b3b8e0e72

    SHA256

    2c7d7a6f6625a3455a5f22d650cd2603ec684aca76289430d7a6d291301c7f4d

    SHA512

    22fdb79f844e4464371c644f34c9f106a3ba338460631e9097c9313d7a164d26aa86a1ea040785f30cbd994cebfb0282c51d25c93645e2fed65b318fdaa95715

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a91f7875f923712ba6e664a5ced60e8

    SHA1

    56d62731ddaa1e8f7a31e4df0111cd9e30a422b8

    SHA256

    4227b54069417b2b802189e485d14ec874f37cddb4de8d37c3afd2581e651b3c

    SHA512

    e68da0ee18dd13f79091c5f8217112e30b3a54a45ce8edff2e1d8c71111aa5fe292be4a6492bb9acd43d9c822d747838472075e0ed612cda6d64230c8d8813d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    969fb628c9909e154d338e5285526e2e

    SHA1

    d39b59deadb5e4d4e00c5e76a278bda1dfddf354

    SHA256

    aee6731ab2ea9058a6c6ff64ea887e6d19cd72d71bf9cc607cac3fad0988b26b

    SHA512

    5b43095c19e7314d85415cb1156b00a542c9a6187c2d73fc7451a82b4015338135ba2bdd8e43214805c99c5229ec5d8c0fc2a26a7cb15d8b2dab60bf23c7c4c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee75adbccb2e8c95d6165724f785ccc2

    SHA1

    9b4a284c4757a258a4db64d0d2cd4051d264c486

    SHA256

    f69b0bbde454c9b83882c4626f83d522d0efcd709aa19b6b1435efc8b3620ca3

    SHA512

    27aca7251fd59b731660b0fe083d6884a07789c5b46e9706636019ec09d4b073b55487b25179418675a0b319c9cc9ac3eb32afb7c845e79c4a4b29fc303315db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    53826e0eb2e4a803c8463fe0b26b13d8

    SHA1

    c1191e03253aa75e0ade9fa1e293b4ec0f8b6f1e

    SHA256

    955d5db32f86598eb9e15f32725afe951aafedcf59bc4d297f0d7e88cacd760d

    SHA512

    441de2dc160282fdd736c0a7182b703fface94a941022f60e032c409fcf60ae6e28eb1fc64dc52d1b3f7dfe890d00d81c33a8fde61c6d874a20206c9824b3a5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2d99417c73268cec5d55e2c0202b06b8

    SHA1

    885ff5dbd9cf47143125e3204c7d8b58d001b7a4

    SHA256

    e7b0e15543a8265702831c59dae2cba563902eebc716c37c5ed1dc2d2ff0166a

    SHA512

    cbd6bbd62a4d0c0a1d5f85cba2d656d08cb1768098a7665da3364b977cfc2804223d8534db12d92c2dd25e0d4bf06c5abeb7ed408f4df14bb3844ce37d232a1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6435f31e63ecec117a518b2ad85b0fcc

    SHA1

    33fb86c64f0c5afbfeae37dc9934f56b3061ae73

    SHA256

    faf401f79efcae0c4700c71845bb694a4750e128f1cf32496653e1f4d732768f

    SHA512

    21c619222d206806fd8258c8cee9c288c000176c5d8de6edc10f3b8c84ec6d98468a050630f08a79c2aad6d0f8f9b246a351f07476ae0d01451a5c57497cb80c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    60e995b0fa85e80fefd12f6ee4a611f7

    SHA1

    dd4930402c6da2bb3a3f3a9e93ec0d3d49c3a855

    SHA256

    02aac7a3b2b330d4988bd04ff606e522f8c77a17a5dbce98dd3df30a9dac5d79

    SHA512

    978823d90ecbc09ea0bef5fa7430de50e7ac5f9d57b7f69db1be1479882898a043f9ef3a1fd2b51524eeca5445b2386d0d1e67655b9cc250b573b2ebd799838d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    875e4a4e7ef8c7174c7fff8e75634930

    SHA1

    b3e36df89689b9a5b904f8cdddad86554d2370aa

    SHA256

    e9d5efff34c634e7bcd32c55b5234523e57e1f64968560b233cb83f4ca65e644

    SHA512

    2401bbbc72ff3f2da9557a8abcc44ae31eb36c385d56e53ada2eccf30dc483d8771cf9b5851bebeb5f9f2e821c5d55f668c389ff3122a9b043e4adab09c1e153

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce75f6085406b35f91f3bf5885030e71

    SHA1

    9da12d3f5cfce7c3d73116f7a11ef4e0fa4175ca

    SHA256

    38822f8fb0921c0e46165acdbe2b736cb6cd24a408f705769d78c50051a0de3f

    SHA512

    5f07a40e67991e5e3c7ac254f05087420a914378758b8bcabec34f68b740a16b1fe330757dca0c5ce5a159836ede9dda538b829ef5cbb0502b51d4e9e7a7d69e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7d56e78c4a6e1b3bd2c7908abc51b14

    SHA1

    353ab63f9ee6a72ae3211a7a1db589f69e337f52

    SHA256

    9cecc2fa3812ed2ee13421851c8157f8361d6c6eb753b2f2a18e9633c6203e33

    SHA512

    a3364a74463ccb4db490462197d77f8459dfb84b915755581db76f7c420b3baf60e5b2c7f9e32142c272c7aebfa9e5bfd7df48dfb57eab245646fa2dab768537

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eba22b50e9fdbebf621617e4b88d47f4

    SHA1

    2edc0aa5c139e730af822152f078e902aea86779

    SHA256

    1305dcb5fef739c0ac658770e2d9c8da13cf6033a2f45fab69398f4bf729406f

    SHA512

    76301583de9c3cdb0e6311df969ed1898dc0d856710a12baa67d28832c97c2e48d3e1318feffb19fa490d274945ae21b432a1e2d704de20f98e41698cef3a2fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    117f8f51c1d231e83c356fb0ba63680e

    SHA1

    4adfa95b1175a91b63e55d558f7bc5c18d9cb637

    SHA256

    e859b29d23581ef7011f631b9195dc35b8658342e03ae217f20535e8aa2bde01

    SHA512

    a2b5cef394fbe51c443db611290269cf827852b949d028b39801340fc3fb7236a81c912f9442125dbad1a241243179179c92964a6613f8a7b44ed0baae5e9a03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d189c702cf1f45052bbe7a011b2d819

    SHA1

    61e56fb4f42a22ca1e725a79ef1d115abd0d304e

    SHA256

    383a214482ef97d6520999b103042d6be9d0007c54e1d999d1b0bd30506e1cdd

    SHA512

    051011432a93b161ae49b578a5e68e5611e8c9a1b3c4c1d9b043790a22e893c4e4ed8029ff2e2c5ca5b282c64d8570d2fc8dfa956c830df9f124fe512007c39c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6aa632bf920f93a4c344194a055d8878

    SHA1

    5e0f5768c98bae1d8330479064884b38df4d8038

    SHA256

    6b2938d86c390528c2543666d808cef2d815983382bee3f93cae4851a30f700c

    SHA512

    5e826f4d48cde89208b99ae300d96dbc57c1eade0a1162f90184aef9f1c0a7e0902782aa9065e392d35ea1b56a9928bc59853667f7b8386b5c08645db8973b51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa114111a9e3920aae5f8e40b7968092

    SHA1

    8c0622a4cd037ad3578a58a349b061449ac32fa3

    SHA256

    92a4c1e6ccfe140bc5574ad8bf08a137dafdf66f18f61273f5eac0d6a43509aa

    SHA512

    54a458c0c94275dd65e1c5cdc8113aa513ebab73f03215ac134b866645502b100c38679fd1a4eb2a300fecdd33751d1fd913c9318d6a6ff000c65d7bd5cf2aa9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2fc76fe1d92e5f517acca46a4ebefcb

    SHA1

    c14a73e78996aa7a93cf0555c34579a70729ce7a

    SHA256

    84796c183d1ff8fa12a9f39a76e5813980a3ebeef4d94b720e0fdb3ee64d072b

    SHA512

    7f5b5034290c722a050eb831a13de9ecfa2bba731ddf35f79a48f21ecba748884c07d316cc3026ab8eaf0be7f61347b247241a98600739c566b49e977e53e468

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85340e52eed9bbfe166d8fc3f4fe0376

    SHA1

    59d4ccef2bf40ff724ffad9085793fb38c028a83

    SHA256

    ee3814f6953d9d9e6fa465cc3aa7838e7efb132b6e8045ea649d029c742c96a4

    SHA512

    20d90f2f218327bc813e8cee7611915a050463dc40ada4f3fa7e0d867e4ce269a1e5d11600dde0310b4092ce97994b59d1a5ec957b27830a88e704a5baedc65c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    29d6767240d214276aa58c8634d420b0

    SHA1

    ca10c8eb23ccba71b39aacdca5b4ce4c3f579cb0

    SHA256

    c1cdf605e91dbd062938ba09ebbe5278713760dfffab9d9141fec310bc671f73

    SHA512

    8e8c6c418b91f7ee2c25ccda86f162e0bdccc9c3676cfc7f7f19a5eaec9d1ea792ceefc618d73bbf328341b668e8535dae9126c32973d689622beb792742d384

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    43cf9dae6e811e389981bd2ee7f2208c

    SHA1

    0ebc80c2eced6661aed7b6cd01e4ac1ecae8ca64

    SHA256

    f54db32e81029789f5f6408c0a127fb31aeaef2f530e407f0cc384052fea7ba2

    SHA512

    209f1c4a7f25901343e99356a535d1f1a3e746eb975a8d000e003a1390880285866802b7367ec4a07f13d85922eef35dc616a1bc277af1fea64dc8f2382dd059

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z2D3H3V6\ae111d25cbb9b2d7293e8bdb2fcfe8b3[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\Cab4637.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar4636.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b