Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    24/08/2024, 15:39

General

  • Target

    bee91dd7a13597a95e2b67feaffb5edb_JaffaCakes118.html

  • Size

    54KB

  • MD5

    bee91dd7a13597a95e2b67feaffb5edb

  • SHA1

    959a0861783e067325e0de7dcdd39c53907e9060

  • SHA256

    586d64fdcabc78c5318aece0566134b158429e0ea9ad79e110f27f32b385acdd

  • SHA512

    0f03dcf3cf58bf0ba6f70f2a66c52d4bb7da166decf9c60b2d765e0c1c193bf368f2f9a76207247481706921700bd3b33699d2fa1c2d890da03d587f4a3a2cb4

  • SSDEEP

    1536:JjIFyMp1jTnX1h5VuFEOE7yDeSZm6jy69vy:JCRTTX1h5YFELypZ1y

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\bee91dd7a13597a95e2b67feaffb5edb_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2232
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2232 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2796

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

    Filesize

    1KB

    MD5

    d211813d3f53d4d012cb8999a971cdc6

    SHA1

    d5ff60b1a5daa022e1ce2ad4e50ab10ec6186158

    SHA256

    01135d373a3a18d0eaadbbb875fe72fbad354c1ffa158ae6868237731fcbd780

    SHA512

    3769d588c36146c8da0bcbeda02b26b2eb580f3c9c8312d88b1ab3498c0534c602588147a0ac5f943d0a3cc908fd297a79a59f7fec456907aee065d14a5d62f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    979B

    MD5

    990146393e3ca617064fe1365e67f1a0

    SHA1

    5710d1fa9e987973f0b973d847c600a8120ebb0e

    SHA256

    6957d08bda84e77bad27797ca25aabebf54059d1ef510ebf159bb0cc5b7f544c

    SHA512

    b341c496c4e633734fe19881a7ee4ea96d835036e1fad94a2833ee5497dceb5781c74ced38aa6429af96fbf1b65f70ac5d56b13637bc3884119216e0fc124977

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    bea718f78b07688ae7db40d5f5fdc892

    SHA1

    5bfa9aaad8e13cc2da605c5bc3ace88f6950fd72

    SHA256

    e6dbafc7a5f96c423fa5e491c7ab5bee6f74e277ddf8837b3eb3a8901c98319f

    SHA512

    254363f0e928e89919d81f736a2bfd3f76d2bf19dc4795c75c995ed0fb78b82b8ac841d9f6cad03d73bbd8f3db251ae149ab13ca67470643a7ef9383c50ca588

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    1518b97b6d7bc6f7b225a48e787c39ea

    SHA1

    20ed9ce283467a98ee3a980f65a545c491f97982

    SHA256

    891bb7b70d3c0cfe39e352daa229a1a42265a6274ad57a02a5b02a25182b12e4

    SHA512

    10809f06c27fc235faaf0cf8d78145519ab675006ed7066ed1b9a091fafb1368b4184068d456611592149fc2c295e2bf54c646cff90211808d6eb731cb1179f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b4c10bc1eba2dda8350d000958fb886d

    SHA1

    b64a24a128ae5f1f7d799fe24d9bb8e34d479095

    SHA256

    052497c30f198f694fd05cebf8b917efed1747929f9cd9748c013a11c0c584b6

    SHA512

    da9865a93c623fd4d2ac57d429715204a024d569bb7f1d540dc22a04a6f6acdcb144da1f3d2bb3e81351dc52058d5ab1413caabfbd2a87304362ba732e52c3d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    f00d15ac9b60895dbdf20fbd974f60cc

    SHA1

    7b680bf6f376ae392910cafa655f4f191d86e512

    SHA256

    7caaca4a57ff3549990504c4e856d72ec6479cee8b352e2ff4c9d73de9194532

    SHA512

    7d747f39bc0a848c73a5d1b774bab3a060a970d687b0320d28b26f2960ae3d7613758f792849b0cf4efe5255355bd16047b74fb9077ef6c91e017a9a0005d8e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    f3d8f826ec871982ab03ba13d33fb36b

    SHA1

    a5068cdbdf1ed165b3dbf1d57952ee97658ba317

    SHA256

    5ffb457e0fad7542de6edcea19ed4b00eb256cdaa9b54e04e0169bb9d72a631a

    SHA512

    b998aadca4aadb7a1d1162a0442d645a8dcfa8ea75c16fe395d34e9b166df8a8497c8ca20d80fce39d06e6c3f02ba777f8aded60be5b45e050fa1b0b4aa45222

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    020ddc89b9137c887643ab5dbfb05e07

    SHA1

    9886f8c9878f2b65b132d34fe86e7ede9da5f933

    SHA256

    684092a9097ac14e8e4e8aff78f3ca0f2a98c4bfc1e7c21c3252791f887a6ef2

    SHA512

    89143346f8212cb844b48f0ca3785957210ddcc733ad9c8aaa99758daaed8c1962638a1f3fdf5aef3d62b982a96a929621d2751a7d24ddbc17555328a98f2774

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    c15c63cac2c75daeec01af179e36361e

    SHA1

    caaec8f6fe3f3a94d94d15848c9feb48b8142904

    SHA256

    ab8fee61075b7c0659088298a7de9936da7806e572a2778d6b792367f8c6728d

    SHA512

    5ca90631102a6b5fef1c74fc5daa85bba279d8d528cf50b44d50082621100deb303f0a72aa6e37ba17243dc14815cf18107b88a957c37d3bede6cc6ba7cabe13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    d5d686ad6caa3a0058a329bd1a48302f

    SHA1

    bc209eceb12bfd4fb85f76b333a2cf0a0d04abe7

    SHA256

    16cc05ed9b9d42140853cb853c1d60e8ac4265ae3fe07061d25cedebbf3741e5

    SHA512

    faea54985cb644c7ffc17210b11279e7fd245239d31af34498c92b1d62d3365d4727c7b54a888cd08d141a2b31dd53e73e13c04dc461b8800346fcb0310a86af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    97177ddce6377924c2dddb736cc6ab82

    SHA1

    8cde89265d56c6d33119f43dcdcf078b77e31c77

    SHA256

    bd7b680ce0ac5d1bd1662ca8b4eb944085f2ff9c1b6da65643b60647bda9306f

    SHA512

    30cbb52907de2bac5ff1684e57d6dc74583870f27ba77088d0ccb3891e4484d02ad7dd54c72dd822b26968e09bc734c6a351328c231addb041d4bf816ca4fc0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9772c465f2427e21b57053499271a357

    SHA1

    ac616c28a7be9e22d3372bd8a20328cc9200fdac

    SHA256

    57c0225368a70b419e69cb87f917927b365b00da9d757d31a5ff3c4ea5916e27

    SHA512

    d43fc94c0e9642b6af0f3db54b200d182b57fab319db587d709e597f638b89bbadd93e3f369f2304ace54ee346c3d76d631ce4998411ff40a93bb684de55eaa1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    73ab4cfb83b6b0424be19bb91aa69c71

    SHA1

    1a5b195dcbb4997e7d45a96917ab84796973690a

    SHA256

    aff203250bf937a407b87fbafb3b14c0e5afe22d3fcf4d24e17b3f1161db2d0a

    SHA512

    b87118d9432021995a79f8b87f6f2c93b04d621ce433659aeb3e82d29a08ebef8dae1cd0267e9d2e263f8af3dfdfc2773a41e2eaaf1575390fa2e5ce25427722

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    dbc4085db81a46ddb2e38838272560aa

    SHA1

    b9551c1729bbc529c6e5899462563dc91c5b0ff3

    SHA256

    6244f6c54c5d35ba3fdc611f16711c3a07ac51259e4e659c7d546a7329cae627

    SHA512

    a1a458c308b34559bec90939b627bd081ae1baf5364da0e2e76d6391d996cefb06e8de04dcf7bad30ef9e88f872354829fcd271de5751633018157205ec5d937

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    399beabc632c46671df4fde97c959dc0

    SHA1

    75d3a48afe1f92313df2e634e996e8f3cb1264c3

    SHA256

    daefa03bce22418ee28caefc054917a635b2ea1ef5cb11b2b5507093cbc44dff

    SHA512

    e5f1b9e702b2a6e0302f6fc75699fb5f0e322bf3629a4c50af0a7aea8168c2b57345e17efdacb418eb62448c5d8856e4b92cbe5f755b9c4d603314a7bdcf48c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    049862d462869d6d2d745509017238a1

    SHA1

    cc7fc4b2439c168f1b18c6f13a8299ce7827157a

    SHA256

    528736b71d92743ad4ccbe411d07d5571918dafc6ed0d0dfc636694c4315d1b9

    SHA512

    19be04352dcdc9812cf384b95dff22eeaa83c282eb6c99437c6e207d0d33fc08723efd180a052e33f4da1c3a5ada98a3fb9c0781c9cf6e3dba0d5124394d4855

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

    Filesize

    482B

    MD5

    64032a1161c80eb0b19cf3003be3df3d

    SHA1

    cd4ce51b3ca736e80f9ce44563dd573a2c1dd383

    SHA256

    9309742f88636052cd5430293252d98ebcad32125b0391e75be96679880ddae5

    SHA512

    1791f90b54e503ad7efbf3b1f6531dd868f3c0518a53b3ac5835b7cb488ac8d7ef1e306518a95b992988522202349fae54f68e8808414dd32aff7d098a848160

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    480B

    MD5

    91e75431af4936c0865db36e3591988d

    SHA1

    b9f74581f1721acd40e8159c53f042b5b339b873

    SHA256

    b69d002a273940f5274dfc857bc74f16281cdf6afd48f587a70853eadc67463a

    SHA512

    92123b696bd1a6e1d54930e050b31bbe52777488b47d14f65712e8d76ec13783ed12d48dc1efd801cd8b97e6db4ba1a981e238229b7309bb69053a132041e127

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    687a6adf8ff321bc6274ce72b7bc4b12

    SHA1

    9247b8d1337c20038537771cb5823d3b1b7c4814

    SHA256

    2ea766be4602c982d92ea43f116d73e4900eb668ccfbfebec5beafaa43a32d34

    SHA512

    37857ce52629a1971b59366dc2e47a23eeba91bf80f9fe06c984145850efadbc3ad98bfaf7ea0cc3513d5e9f4bdb7cf0df753ebe82882fe3d7b13deecc76160e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    3d31f2ed711773493c9f212f3c766f55

    SHA1

    c8b838783c6dee78d1dce133e491f9763d5e7a07

    SHA256

    aaf47821aa8db026716a065dab07bf7e2678b994d64cd3d955d3ec505dfe26ae

    SHA512

    79dfae81c3762ca7df04879d11736559403075dfe5afdfd571a66b985ca01dd74685fd10eeab647f5f1967991d0f3ed36a08300bd43680b794b52546839de9ae

  • C:\Users\Admin\AppData\Local\Temp\CabE523.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE536.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b