Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    25/08/2024, 22:45

General

  • Target

    c1beac438f99f98783eda32b6ffa6a9e_JaffaCakes118.html

  • Size

    283KB

  • MD5

    c1beac438f99f98783eda32b6ffa6a9e

  • SHA1

    60375f49474a8d2deae8f4d75aaa23b45992821c

  • SHA256

    034c4e479b3343523c09c0e481ea39950e05a665eecac2c220ee0e07728a2fcb

  • SHA512

    9d735f206200949d5cd92af351b3a988ad0b2292feb7c22bb6e185d9eb7916a25db13873bbb0f78496e75929d965f445b36bd318248902cd24741f06a4549ff8

  • SSDEEP

    3072:/aibgF5chC0RqTSfhixYu0pNrhs0Q9ajZDRNzhR8Ltd06AcBr3lKdEDlhE9MK9m8:/aibgFYT/j8Z91YLEaVQnNX6

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c1beac438f99f98783eda32b6ffa6a9e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2164
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2164 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2592

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04

    Filesize

    471B

    MD5

    e80f84e38a54c0a9ac2d82078052275f

    SHA1

    6a97b99a79a6cc0954c6ab60b12a733f504598a2

    SHA256

    41b053edbd843abb363c19916641f12573f4e7ff67771cb83273c094ffa15e35

    SHA512

    886203fb4bcb3ec5e110aced426dcea787215cb9ae697d8a28a41078452f5cc80f27d4241d479e07c941ef2b74f61d719c2fd06648e2352857728beaed2a84d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    3e7f2fa64737b62c9454c204df9626f5

    SHA1

    31a46dc055286561d1146533f3926eb6cb20ba34

    SHA256

    47d2dc1284f5169a4a57f4bceab0f331713e8ea472fc6d8d3a91fe9b1ca81252

    SHA512

    a1b1f747301adaa67ae900092d32d1a5846007ac0aa98124e87d8b5d832cee6530d1997a33a8fb53680ad29ee1ab1a413dce29ee0cf3182b1766632edae2a3a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b326b72619238e99ae1eb4cd4f5d034

    SHA1

    d02954ce71cdf6fd25c19a8ab10784839b37ffb3

    SHA256

    49c416e526246f0a76510dd883958c3f538ac23b2f3736ac817dcf9b35958b3e

    SHA512

    e936e9255191f4d723c935f5fd2d96850101f41c37ae52f11336350a421ab51309887d196b09618e10f06097761c54fd7f42d106be82acd5b6d7474ebc0726f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    019fc88aed01e35688ae1fc1009f667b

    SHA1

    f418a049db3db2e17b7376eb2524166276072f65

    SHA256

    c3e9a149b308d1dfc87d8660af346e49ad58f9ce4f30010325c699c089669e94

    SHA512

    326c86127ed3c4f1b41322aea5975177928d5843b129cef0aa4e335618e83ccca9e6876b883e5bf12f9e7ad25b5e0deb5c127e5e856d29b8fd73b8466f6ae4ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cec9e11e05d788c855dd0fa9efe7e38f

    SHA1

    8881833441d7bf22de2a43756e8558372f79d007

    SHA256

    28578e06413931f7f3016f014c4b41e7e6195481b8f3f446876dfcb01a1442a4

    SHA512

    a25da9044e068a5acb2a0c55199761e846fab27b894670f8983b3a6d57bdd07b69fcc45732f5f5c25f6cc65be3a39a073a6cd7fa55967cea84a08b59a9a6fafd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78e0814a3a61329ab460f6b5594f13c9

    SHA1

    9536b90874c2d56e5208a40f876c81389b89737e

    SHA256

    99eadd3793de4db1cfed6e416a9dce21538869b3fc229055f85440f40be890ba

    SHA512

    f090cb0a3f8532cdee7d9de406ed55c00e1c23ce6d3a0d459e2ca47d040552d096ab3c46a312a12ee497e5cf8f4fe021e87a50c69cdf69bf63b6a7068b3073a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f5713605c18edc447967421967fc7574

    SHA1

    5a78c2df4f1d78f7db6d714519fd1156dc7a542b

    SHA256

    8c2494acf019f21369fdd76427ae1653604e6a574fffb7165ee17a2ab88ad51d

    SHA512

    a1f9b09467e2e93e7397e4c0e654dfaeb17669e73b60d3ce1cf572bf8112402d66d79024407176db7278200909d9faebe05c2ebb33526a365ca6ca2e5c33a5cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    520fb296830cb10e534795e01c8a0ce8

    SHA1

    502c21d62c0888b37a3ecd5e64c605b8a786170a

    SHA256

    7bc1beb0090a5fe99aa7d852cbd7a9b9de28a15370e4873d1a056861ab3a3fcd

    SHA512

    310c22559e20cbbc6ac5a9e78d488bb201f84762763b0655167f3ab62a2b3ce913c4dd6b4a665cdb9c41fdd55a1b28e08898958e2589489632822b10fe224ea5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    475079d2640e2ef1807505466a7885af

    SHA1

    fb51dea595f85fb4eeee540aca424afac1aa991d

    SHA256

    88f4a1309d764dde03075c452c697b7a1309a0d1f0cc7d5f677909aafed84726

    SHA512

    9fcbcfbf991668be45308e9ab29a19aed50dfd13ca17046c34c742e621127fda102ea18ab45cab7599d9bee268247d616f21a2d40330a0b5e1bdff6ea85f4316

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0602ed2e981342ec23a5d8138ce27975

    SHA1

    e62a5b62937b0e4bc35197e79c16e7d6c6096c7d

    SHA256

    3dc279c7a67c3c01eddfebff451b2db0e8457be25e3d8aa5cb181758c5e2bb15

    SHA512

    2a98b48081fde81bb7abe291d1f15927e2180967a3d759507275ca3d8cd807245c0198bba2db20f30335ee6628a5c1cd985c15268522e9ad7d9eaf66d401633c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cfe34382f6ccaa3c277edb64a8cda0b6

    SHA1

    2c2a692fc59bd5b78eef9cac0ee53c4e53502cad

    SHA256

    f2927402a0cb886a0a9ec3e8f9e8eac2853ba6d23bd74578bfb44905a66cd8a9

    SHA512

    2a76444272236a70c414151c495432055f615ca6abedcaaf5d9caa4d06b87e8e5de8fd27c4ff919ef57b5858b7291ddd164520d8693e379e54c45515bdab5b3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43d5178c0268503dd3f6ac620a626d7e

    SHA1

    1fd51a931202a13489adf3d251b0b79d5ac264b3

    SHA256

    4c6707997f97ab2acca9905f450699147f64250e4e545c3e6306af939cb77bfa

    SHA512

    19adda51fb5b220b021a8e601113aace66157bf73dbff3876c25e97fec1d807ad31c9c57063bb5494cf1e9f4f0d39f9bf16b2b82bbf25c9df986b23dff18c540

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    859bd7f4840c8588ffbbffbfb09dd5bd

    SHA1

    b03249baeaf4b93376c552df81308109ba8c95ef

    SHA256

    d36d7add2a5e35832b0d4c6608dd9048cd1f587aa7c91d11fed064318622658e

    SHA512

    f399ac02a62c1d037b95548a234ea71fd349ddee8ae612122e183d5992e8d383751322e0d6bf07aa1b192257d1f98cfbcac7c3dffe12c79ccb45707cfaba1ea5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df92cd3d2e0ff74705efe55ebff15ad9

    SHA1

    91ab009bc84a10371f2b7679b37773008cce9341

    SHA256

    94b3082fddad290a5e70f43ba6a8f300def5fa16753daaa95b120a050d6da6d8

    SHA512

    7bf722da90bd80c9f5c80130dc50dba953f4bfd76cf34070592106bc38ef02a862e490da9cfb1b8010f93ad7ad3b79df3a4a0f8293b2e783c11905cb8425037e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3d6c559d88428fdc05734f1f70c5840

    SHA1

    304863aa981150b141119fc4560dabb6076ee3c2

    SHA256

    d15f68944f9919297ca5ea990ff77a7bfa15ff6666d5c7a4bad43135521db13d

    SHA512

    ca916e0c8d088f34b2ab2fed1e2bbfe16baed295434486c145b9d2f48e0c9ffb34a5ec31304fe396d2dc175b8c833a525caf497d70847388350f81eb14966035

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cfe34a892083564a8637dd14d81f88af

    SHA1

    5975310ec15ffd4d7e03f45ee75f4f141945fb94

    SHA256

    7f8b1e4c1e33cfddfa3a4c1e6dc5aa30f4795112ad2c7ba30e1b4c5adb11926b

    SHA512

    15f7569bc4639cf897901af6f39f7aaaced60574ac90462c5c5af65fab13cdcf307632616ad6b3a230aa873dcc5f5bfd1253787d1bc086cf13e4e436733756ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4eaedbb0530b7e3a5d9fc64c566f7620

    SHA1

    916baad9389c68642a72d103ad8b23231a2dc71a

    SHA256

    cd6569d474d8a85d173d0e7b0ba6a3652406c12591db343ce740851e06ff9c92

    SHA512

    574cf262aa64cf86e665763095ec8fa9cbb8d48c8001fe9570de1cbf896dbda7989bee88adc417ebf2ad600b4988fcdb658e58818d7b945f011c2ee957257daa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2514c1dbb1d031bdf10d5a928b0ca559

    SHA1

    d0dacb6c9c5e841add623e133d3194d2875d6bc8

    SHA256

    1330ed165cf648cd329aad2242aff81bc47b66f69b25866b9dfc89b3f6f02f40

    SHA512

    cd908a4b0478460f5b622e4343c470ca722b43dba1608098ebd41e3ede3983353ae6abf6f51aeecf2f73a778a78a611762797a93a28b972b44e177d665cb63dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bcc167fe7b95456d6bfbf19e2ed84f98

    SHA1

    0393bf9a61316e3876b7d1b7f16801f075b71a86

    SHA256

    54cd519a8b4212a30eb68e77d73b42ce1c6a4b5bf5b1aaf5db40698a2ae7b1b6

    SHA512

    4555bccd9aa32fc4f8a6fa1250a3b1b7fef023f46113b099bd320a5610bdb71895b5fe287c5852bee918c9f97c9fd8c3c63f4245b56392adf27f92ad964775db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    07db420abfca5401f42c331bfc401222

    SHA1

    fafa5fe365e3c9970f011250a0a3ebb8ca223a62

    SHA256

    08ad49ef9af5ac6eeb4c69c434afdf66614607e9c6e96da9c6020c1d4c8dc06e

    SHA512

    cdd79e210caff184d0d78cba88c583032840a98dd20f0e7b5be2805166b5ad954e27f257e725cd06e0b3fa793778b96b8bce09a500a991a3589605b3af219461

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    641b20ce253a6a45c100e6992471249c

    SHA1

    4c666d35b296d7eef7456325d1cae7eaf305ecd8

    SHA256

    3bbeca99ea45dc648f73307810e91630244a7d8cfbc19fbb6fdda4d076db1f80

    SHA512

    78c535995b4e533a5b1096f41166596444964bcb6476a93e980ec0d0efea0378ddb4870f121df04f8a884bb499fba9c4e8986c4963c6674fb05983bdfc20f814

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fca0d2c785c50e714a3acbb7f0f9807f

    SHA1

    4bc92b3254d2f7487c48df6e42ccc571603df9a9

    SHA256

    6ef67f8ee341413315e51f47f032ccb17e5794adb2e8e816888f3aa625188305

    SHA512

    0400db03ee81d19c6c10831ecf637254964e4b116279f5cf57a5c01ed6116cdb1753a70d0483b36a9e02be5712767540c553ae0890bcafca3059ea83ad130d20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd376244ed4b292bfa97e789b1607d49

    SHA1

    bbe2347d8140cd49d8a129a78fdef3073972f05c

    SHA256

    e3654b2bbe7282b176f4da880afa1fcdd51c9bd480a7db51aa0ad0bd5ac4b274

    SHA512

    22841ce1d3a159453c722cfaba11335672f8a1c836fea8533adb257021d7a0a2857590dcc2ff44a5113fee195ea06b26369a21dafc271760502dbecb74b96bf4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e29f4953a65ceede9f68279343adb305

    SHA1

    0bcc8d0bb48b640d869faf1c9d50503d781f459e

    SHA256

    964c82713c8eba562a98852bcbee741ba84952c4336a1bfa1fae6f58464e8c00

    SHA512

    ced1938d08c4f4c2acecf2538f2d007c2bf3d22dafb55df53fb0bb15824143535456b84494303e1a2449358d078401ea737aed52af46458855f2fb7eac56b2cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04

    Filesize

    400B

    MD5

    a903511fa430d584423580449dce6059

    SHA1

    105f7aec029d4873fd3e51a37c3ef2c5a4b2b192

    SHA256

    b823db03d855b2db55607372c0129eb807f22fbb7a9c677f63d7f1b2f9c4abe9

    SHA512

    f19a17d65fd70c844af4cd75252489805ab5b3cc16447e153d7dbcf3f7b966acde2c8fb7bc57eee87753d1cf822de61f4bb8e6f2e66f485228d5ee6a15b596fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04

    Filesize

    400B

    MD5

    1ceaf2563396f66960140b3d8ce8a688

    SHA1

    c8d7ffa00ae9ea2ca1d0b2e259551fa19d43a2d6

    SHA256

    978f202d845e431b330958d859a03bee23328ccc79d9f3b0df0926846c7aa97c

    SHA512

    57f23148151a4d7b4cbd1608425c0b2bf7c6e24b4e1521c9835b4b151f5918cde3c8af377028f2b5a0936f3eda046c9a0df98254112ff5e0340ed52e2f4a06c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04

    Filesize

    400B

    MD5

    596427e2110a1d5ef310e8d1bd84b368

    SHA1

    70de7a0129264d7b4d04addf03ee70a22899db8f

    SHA256

    ecf7ee760fbafa74c900fdc40f9ffb6ddf1cda72cd8fbc4c4fd03e9c34f242f5

    SHA512

    a135a71cbbd737a038e3d413968a4f76e0979b15d8637e0f9b07ec1ca015d62c9858b3779dbdd4f983b74a4e1bed43fed1a6989c5c924701ddd62992f85ac901

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    b10d1fd6c1baec5846993f183b048672

    SHA1

    d58ae1ac5e79027acf476f0393da7555bd0dbb24

    SHA256

    c854839ceb1937f5b877ef1069b1a6cdb4603e370a5d5d75ded7eb52b3543be7

    SHA512

    93904d0f7b51e26cc77036691c3da9f483dbde2df9d9bbe779e172d6a2f341547a3f604c8b47519ca54be7e59c55933e8cc1e22c2e6205c64fce5d48841babcd

  • C:\Users\Admin\AppData\Local\Temp\Cab4992.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar4993.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b