Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    24/08/2024, 17:23

General

  • Target

    bf18500bd36546b6201fc5ee5237ee3a_JaffaCakes118.html

  • Size

    43KB

  • MD5

    bf18500bd36546b6201fc5ee5237ee3a

  • SHA1

    8da975cd19b3e76ac767374411e93b70cad59c79

  • SHA256

    0d419de0e188a75b5a73dd84db21d9dd92a20c57f43f009dd2b57297787f8f5a

  • SHA512

    2ce87399bcd3efcea6514abe128102b0ccb5d469c581612466825e1afaacc611fd0a5255f7acce09a58f71693dbab1bb60f74df1c34a0eecae43931187d47c78

  • SSDEEP

    768:O6QRhkt02egtArRJnX7mgbOViBdzaT6TITefLCUWkTlt7W80rhFIDZxFNfVKZl+k:O6oha0eAPXtbgSR6iyQ2UWk5t7WhrEZQ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\bf18500bd36546b6201fc5ee5237ee3a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3020
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3020 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1440

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    9dfe32bedb2bc062d9b46a7af594fa56

    SHA1

    fd721e84cc79d31caf3cd24c832d1fc6a5b72b0f

    SHA256

    fa9ce24a65ab41cbc76aa0a273244e8dcdd903de27a8e616fd442f78db285ed7

    SHA512

    44a4f991995b3d42660c90e49c9e9922c106f1e2257b6cfe53a57f813ae74b04b2a31693fdf80fbe1733809b5a82af138c4189e474f2b9047ebf60a8cc7550a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8637b9c9785f986c2d1bc8a0d9f7afa4

    SHA1

    a36283fcc01450c9fb22e98fa1b90c1954ea82f0

    SHA256

    e0288fee4f5ce5720760a5aa34a991c884c8d0557e96a4692f202ac3947a46dd

    SHA512

    f8c1437bd04e72b9935c128d6e38c55fe9345e398d6c9594a7ecc5e3fa60f596eacbf53e0e54e6b72e1c1f3408d3fc09a88c96b9c82edcbec3348902871097a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06dd7d0ad5bfc10e5ecbf531113656c8

    SHA1

    77ea1d47aedc7578a4188266d51bddd6366e08ef

    SHA256

    b30a0994ce607722b3ece4939783c025c4e76f70718ab401f1517c49695c135b

    SHA512

    4022fc0d69c02d11f92b54c89369a9a110275b132bfa74e7c83b6ff443a09af355b588bd19e9d47399f9b56cd3e0a04d28e75ccfdf9ee793fd59581c6e7c8cde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    120a4ab9deae25137c8b23814db7cb4b

    SHA1

    c3695dd20a3f795e819611781abf16e21c3cef4e

    SHA256

    1ad248dcbf0720be3c97eb6e7d71e5f42f7b324f5d72245a8cf033f5a3127a0f

    SHA512

    b320c8de4dd57d73036586e75bd4c7f1e91870d9af120e8a321115885c031272808001827e5ae5454d8235e57d9249baada8e90eda4a0effa815640bc69c8cac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    434125dadae1291564bed9d4274e510f

    SHA1

    0cafe68f5a79b277c6f1786f624c6de1b9d0e69a

    SHA256

    ca5414bb0b5c4c38dfe7854145a383e7d9236c029ed0ae1d451235865c15adc7

    SHA512

    318c1273aef0e71fb3d03de0eb3f25105e7ed40d1c964393f4cf89db9d746a35120154141459d076d6bb81f459610ca68da7e224ce20ca15ab950917e04dc36a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1272fb5545d6a56912502239fb2eca84

    SHA1

    a652f81d52f1c408e101d035f9c43be855b967b3

    SHA256

    cf4218b2f8ea3fff5195f46b7b0d09f530bd6f64a25d2ce6881c82450e5a3789

    SHA512

    22cd61eaec2b6252603e2bb51900bfc5ce09b9458e093c2067adb93664d5d27d8dd0f510b7b2367c3902c01229e41fab78e7765b17d5862b2d80f1d8febeb2ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    295c5888e5ce078ffe92fbdc4da37577

    SHA1

    1f41af2cb53ce1747f4cefd4f8487a150a800e71

    SHA256

    6ec8e20150b30c88a61cd2c0f6982d83b3b48aa3daf23d7b8d7b23dce0debf28

    SHA512

    3308005965e91d86a31482105773cfb751ad9ab3e5d44b4119fcaadee5e6a7ef9929c186cf40e3a09f602c772c45912677dffa01c02dc3e06b93075c8234d635

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2da92620e11c7bec5cc4739ad2a771a7

    SHA1

    3fa43d1ab37407ace97e93770416fdc41367b0e9

    SHA256

    96b7e232d976b5b99b06962045f144bae4c194627291f538399a3e59e0d4b42a

    SHA512

    3e4533db8d76fcb994efac767060456f674ee02360935349981dcd96753170ec6e40b00ec4fa065b68bfcfd310a5a18e3f61bd2ae2637d3fdce2584bf364dc00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2df6f2a7ff980f9f3a4929a7b48c3778

    SHA1

    d12800b21f56b147f33ebddcffa16694e2dfcf88

    SHA256

    02cdfa622f325313c17ee674bb78f918f0328c5965b133957530a8bfed0c8c75

    SHA512

    274bcd6d40367399e97048d57525b4471d8f6a558ada9ada435d4075d5f9aa1f44bfad7339141274268e621f1071fa67241c07e0b23840c9b5b84d27fe008b48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dbf9ceddfb0f9a609d688e1024dbc7d8

    SHA1

    94c4e08dbfc383b2d68ef167544c3fe689da3c37

    SHA256

    df69ba4273ee63ed872cc4339213a7d0b30409e1afeb73de00cf5cacd3dc5e5b

    SHA512

    386c9116d0cdba8dc85c306ba2515c0f9e407032007f61ce828a180a098b267340563aad7adddacd62acf45625e90c928d726295632318fa77659f30d1267158

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    141ecbe8fbea2cc1d33e7828b6b8b47d

    SHA1

    9f0822938be76c648f2544d519b1737925160ea5

    SHA256

    ab72b8723accb8f13d48b3eace5a97a001b78f00493677d0f9dc9ddbccf63988

    SHA512

    9652912412d94dc81ddd512ad4cc47efebaf7240ed55d25db039060299d610e78c32eb5ee4adcfd501273c02c86ab6ef739a7a869694d43c1911e357c443946c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35e5e97882e5ce9459da01e5b0adcb47

    SHA1

    d109e82fec46e7bfc11a79ed1f3def08f25ba61b

    SHA256

    d41a677505a423cc89b0a67e24b2409ce8ff25a43ba9afc4cfbd36aaed92fe6c

    SHA512

    113d9517368f0a48626e46a2ec63ec324fbe592ef5732b88a3cb603262c74e502e0c095dcefc41fc4a00996c427d847cd7a58090e2d8bfc54f880e2c05205d19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e86a212d6433015e099a37a510bf4ce1

    SHA1

    96772e230227906ffd326de9eaf26922bd54529f

    SHA256

    207054a04ffdc994ef9377fe21f5e1b0422d1b75fc56891ff570651e5918f0ab

    SHA512

    6ad70f47ce5a5762dcaad425f85a827db3b1db7ce4c4ee1c3fe4c4016cda421ad1cdc83fe30828894afacd55420aa058a96c67bd6e4cd5bde61486de22e57aa1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d14c0c6d83bf5e63d85e605cf38d7a41

    SHA1

    a760822f004b700c5c15c0354e398ddb2c23352a

    SHA256

    2d21aa5c9a8b56752a46701c4114e692eaf9b622cf3e64dd9fee9c86ea60c109

    SHA512

    7973a6e6d7d76c127256fa291b75e4b3c7e8024ece46f66aba9a6b947702f7cc20580ada3c7691858a5bc9e012a647c8b4f512660ddf5356316d54745ee6afc4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    20ab80cd21e0c7ede44ff60e8a3a5400

    SHA1

    55a5de37c9a14b55a240aa8c0c2fed6bafdd56e1

    SHA256

    5d50da0eef57109470482be2c4fce3ee42c4d5f3916356b754ef6dd42ef908af

    SHA512

    f62f213a399acf6fd23f7ebb2702d41828e61532d270c917d1d255773a62022abd39cf99986c5ac821a0946e4e3268065ee5f2ebbb35f26d9d107318f56a0a41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5db4b08b08a290eee068d8c9fe5fc2b8

    SHA1

    12d2c5d7c6dc8070a9acda30d9569c0fc97392dd

    SHA256

    9af3467cee9ce62c229446b3aed66446af1b3edc3b1e533845b286cd9d388b49

    SHA512

    7be4191c9301b1162175d06b4e10cb3204227839c94f5d89f7fbebfc9ef03c87b73225d922921bf2519a081f4de0e4cd4b30b1e240a3faec01737335d968951d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2dbfdc60786f4babff7ddff5ea777a6

    SHA1

    71e73814d59038fbf77b3f316042771995911508

    SHA256

    dcb42d6533e65caf07158975a5982f2f54317e1b2a5c453103c5e1b8da87cd5a

    SHA512

    81995fe9df36cb31c77da69f246ab7d0d48753b44059b1a03bfe04f1db51267585ed58d77d7e32c55041db2c1acaadd816b49e4a3f391154ea168f0efb3d1a24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ddbacfea4b3f30aa775bde644b6ea6d

    SHA1

    5f94afe50797ed896cbbe523a5cc9c220327f7d6

    SHA256

    e55c23db11960c45b96006b0242cacb3f66fb0236f85197c27241b984d3d4627

    SHA512

    56eac574391bed20cd06d3aafc2a7bd00dd248e8329aec6839f99a7c35d49ebcefe4d91811645db575a4e04dc5f0a8ea58b9bc60406fcf635fe77fee3afeb1e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5c41bd308a526a2f338b2e57b5cc36e

    SHA1

    baa521a3f7a3b937ea2665121fe9e94e5fcc28a7

    SHA256

    d8d4d401dce9d82d1536cd6f14c58e892d0711045f87f75ca7c86dad3e57ec3f

    SHA512

    bea6d4bc7d168ba8d6c1709a49696a95ff4188b8da43eff1c6ffeeda426ead3232aa4fb0f8416a2b0d46cad907055845f5ae3e06b2421052d29e256f6e670578

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d13ddc5d7721063742745401faecd2a0

    SHA1

    0c9e4f497213c946fc3d6f741b7f2161f0da205f

    SHA256

    2d7801d139ebd088bc5890637493d2be12d8896dfce8e5b9a2d1732af7d31f1e

    SHA512

    bdfacd3429ac3a41d6ae01637b4ed0bcade8ebb32df151b79aeee50a4f60c674028e78ab25d5794cbf8b1eb3996f1a74968f5159f98a07ab1d7d8af0167ff3c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    01e1286550dc1f4f3edef3db3c166e12

    SHA1

    552dc0bd038ade11ecb45f84308d15531af8a4ee

    SHA256

    6a1968597aae2a529f6401559631a067f4ba9094e8c94759bfd3a932da0392c6

    SHA512

    12d731e08fd14efa1da67e6e3647217ba64965f495efd5516d199d46273732fe3994aa7606f295520ff23603bf5478e617acbf6bd7d086721f748c48b9132430

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f262f083d16584f13ed2d2750a183b8

    SHA1

    5ab0b71699c11e5f45504a12b74c3e335b7789a9

    SHA256

    696c88a71e198f3a438f73563e1624eddba26ee57dd2d895604b8c72618fc9e6

    SHA512

    c30864694a55964190d57158b433716b0758f52044fce17e8e686502b90a33bbcb37dad5677a667d7eb621f4d7d9115326ee7162a3f0f79f9a602a9aa48a7348

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c1b7224b53b9a05e72fff767ac630800

    SHA1

    72ba57c8fbc5c4b794b557cad03f8c2d6a8ca496

    SHA256

    591ffff16190b3b90093fcc881c1c5c2cd52d083707a51d17a962c3151f6f438

    SHA512

    9f79448be6ce5e933a39babc7d9cf9e1745982f7fe2964484213b187e0e4e5910c44b44f3504351a1c4edf2d4292d3d622a7b6639d5eccdfa14a91607d3647cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    db297bf2234998345ef6dcd4e30fe06a

    SHA1

    a40152a909119eb12146c128dc03c1cfbadb9c79

    SHA256

    2c4ddaaba3ef7e8038b6da2488e0c8d02c75d493643e31a5dec0e564eef49f09

    SHA512

    4ace074fb9ad45c03386e7dcad5bcf6f192bfdb31160d3249ef6b6414043ed2ec82a9f282e9ec02cfe83560862867f0936842bb733941e0c576c064a61b3da4a

  • C:\Users\Admin\AppData\Local\Temp\CabC1DB.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarC1FD.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b