Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    25/08/2024, 12:35

General

  • Target

    c0c20b540a05a7517d3f0aff580aa29d_JaffaCakes118.html

  • Size

    35KB

  • MD5

    c0c20b540a05a7517d3f0aff580aa29d

  • SHA1

    7e78e3ce43a9d2dc8b65b00b34db9ad37e7948e9

  • SHA256

    3389c99a9065937c12196d9085a055cd6578ba3e3e599b7a841f11b29c54d189

  • SHA512

    b4125612a1a5e40309c516cb27b9088bd748b6e9d12f048fbd8ba986db634cbc7b37fa4beb13bd84d5bebb37ab828668636bfca03ed4fd473bb5cedc898ced19

  • SSDEEP

    768:zwx/MDTHNl88hAR1ZPX8E1XnXrFLxNLlDNoPqkPTHlnkM3Gr6T5Sd6zBy6OxJy65:Q/zbJxNVOu6St/+8+K

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c0c20b540a05a7517d3f0aff580aa29d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2452
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2452 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2588

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12

    Filesize

    1KB

    MD5

    7fb5fa1534dcf77f2125b2403b30a0ee

    SHA1

    365d96812a69ac0a4611ea4b70a3f306576cc3ea

    SHA256

    33a39e9ec2133230533a686ec43760026e014a3828c703707acbc150fe40fd6f

    SHA512

    a9279fd60505a1bfeef6fb07834cad0fd5be02fd405573fc1a5f59b991e9f88f5e81c32fe910f69bdc6585e71f02559895149eaf49c25b8ff955459fd60c0d2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8

    Filesize

    436B

    MD5

    971c514f84bba0785f80aa1c23edfd79

    SHA1

    732acea710a87530c6b08ecdf32a110d254a54c8

    SHA256

    f157ed17fcaf8837fa82f8b69973848c9b10a02636848f995698212a08f31895

    SHA512

    43dc1425d80e170c645a3e3bb56da8c3acd31bd637329e9e37094ac346ac85434df4edcdbefc05ae00aea33a80a88e2af695997a495611217fe6706075a63c58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    bb19554b6fa0307cdbbe3f9c1f955631

    SHA1

    6fcaa78fea7e321327145019569e83b4848896f6

    SHA256

    ebc3251c41321965a0f668a2bb2de12c6360769001730fc35b2f114ce97dfb0c

    SHA512

    6a0c34108e2caa9b1b5f27e1e0236ed9d5e4835483b227dafafbf2934033eaaa98f865665ce897e020fb05699b7150560bef5d00b796fadddb01337f784c2fd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12

    Filesize

    174B

    MD5

    ee45b69035f23680f3aaaea490af649a

    SHA1

    0ae207af52945f08e7cf42615c370ba15cfa2572

    SHA256

    0214cf10ea1120f956363768bf0f511e17c818715017fd0429b6843a8b98ec5b

    SHA512

    807fdacabb6f3913b40563ba4db56e7fd3514cb76a22751581f37283e9967b0c6695f85035c9eec38f509d34d380496b7bea0d234a8805ecbc54bac8103cb9fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c0409d76ebd75a835525e0e9f2d80398

    SHA1

    ad8e6ce213d5b068b6238d70ecf56f39f96b5514

    SHA256

    a03922e07ab3c2aa0397e594a4f8c90b996940a604748c6d26d699a0b71f842c

    SHA512

    53dccc082c18a4e622d7320b33e622c0da6768f66a88f1a0dd58497e9dd88909d289487fc67343296dbc39212e1a955fe2874afc77a101143d83eedb8593cf80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc55c43b67e2ba15c9026b9244496b25

    SHA1

    dc654fa107945ca36804e0332fabf7458f48038d

    SHA256

    6ed4fe11fc8158a5e64874a43dba942b0e850a2676c673b64f3b3f24997fd55b

    SHA512

    e933acbb1c7b465813e60d73ffa1a8eb8c19d7d34ae4a6be171902e9fe5bdc88c36a1292488d2315ae902eb7cb928704f679146cea29b125c84207b7566c6db0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    def3d3ac9c442243ea25358c7586bcf9

    SHA1

    29f9af5e68b376af564051023eaf3cfaed1f8a25

    SHA256

    a5c5885e40d919dd9f838f5d1c7feff857a2c4d011304962390d659dce8defcb

    SHA512

    2f7a4ab7269e40df655772dd5fd5129661d7b15edeadffea145b4d01fc71852a6dcb8bb6ee58f5d397e1079466f640fbebb0ca0ba3829d4651f9fc3d87dab52b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e4e41b8f932fc9e3aec062c02659846

    SHA1

    81d87aa0aa8693e0360b601117406378ec65d41e

    SHA256

    9863905161e7fae93ce8b3e9c014c79cca32ab3032e3be3146287f8f43e92c20

    SHA512

    da2575ba06e16f47a78c5b758ef29ede097c8cf73db8faa5ae2092f22bb925fe0d1854d59c6f987edf5c38553a1f7c8dcc853e708c90aacf477fa007328bdd15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b87f31ac429ad1d83eae3a1b4aaf8a9e

    SHA1

    73420e41cafd1a8210d0782bf3ff31711c3a4e8d

    SHA256

    ca97a3618d6c8150cb35075b4e230d47a270c3a5726645456b02e083cee3b887

    SHA512

    ccbbe0a965b387093f0993c4c21f221586e2808f4ca9d056b6ed09605c1321cd43404bd22bcc9fd79bb63fccc347783431157ca3d971c268539ae0fa7a75e0ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57267371ca8432ee77a6c97b68502418

    SHA1

    9dd97d7640e22fba85dd3102032812af8aa4df29

    SHA256

    1378a5603e242f10d1d402a17f5d7d10ec954cdce9f09160eae50a140f437e71

    SHA512

    154136ef47808ac5d5300e69951106b221146094982e74706bd510db1810894ed61e042e5cbfa2ee025363205be3f1911695234175b925bb5193f6008dccfab7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb338d430d50548fb8feead7a630990c

    SHA1

    9c06589bbd53983492667c018145ba225f96775a

    SHA256

    64549626887faca9957185f8cb14bbf515a0aab9971d6b5f61c7c4cddaebeca9

    SHA512

    0c6b2c792a7c49728c1ac31cfcdd8468b0e5f89db479fc2b0a8f2497dfdc95ea1a8df308546b57fbc9015f5f90f7ba6aa7717340ae3acc5a215a3f2b83e6e34a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1cfe5ed38299e245a6e1e341f6bdc187

    SHA1

    f4b889248ac05e52489736f4e29ba8863bf21bcc

    SHA256

    a551512ef256328447b5fce79612908cbdfbe4af549133b119342c3aedb55b1b

    SHA512

    c4ef940fb17989ca0c6020e3ff73cf4a934dbfd3961278ecf794b089ecc4e7fb4896a96e02259c691e038f19000f2408faae71d5d8179ecc64b3a0827caac4f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a259cda43c76fcfb15a93da119e5b5e9

    SHA1

    33b6de6dbc0c821b9fcd870a8af90e4b71603fd8

    SHA256

    d601be3c3ac8de1ae5d5c898482f77b778140bade023c151dbbcdf54890a91db

    SHA512

    6b582392d880e9396bdedb5c8c07b35ed7ebd359cbcb279748dbf699d62e6161265a4654ede224ab38e821c112f10369ce499609886a675775600e32214e6840

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e0ea562fe076d58b21615136f32ab92

    SHA1

    f24c3b2d21ccb3a3f9d9e5309e598474437c24ad

    SHA256

    3a0c678c0204e953f02f88de86931f8e65e7514def028945fa05fc2ee67fb8c8

    SHA512

    5bbef3f8b62bbb14f6657e424d555a3538084d53adebdd73496471da4ab22e894709e1bd8030b88eef03b758a428c7549f1a73adc3fd457d04c255356073c892

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ccc14075286ecc76e5390bf242008814

    SHA1

    1363785b3a498c792e0da3390e4affedeae90dda

    SHA256

    1290afb83aa9b9b36433ca1aa0180e9628d9c1462278a65b60001519a7c59850

    SHA512

    77972933fc06cd337db3eb82d1b2dbf06bf862455def5a59fffa66b202606e8a740a27fc913cf73a5bf105dba7f2a0e45d747ac4a16f2b149a646a337f184549

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3087d72b32c5dc32bcd3250ee137155d

    SHA1

    adefb7bf45709d366db785c51196ebbca80a7799

    SHA256

    400b3e907b81da302a96cd51e128d1c066e960d5b2e57c3371f425e08624cbb4

    SHA512

    1dc86cdaf2c413b117d9fdedfee415685bb107ed0aa25ef333ed03759c51466245546b8e95e161749298157a50762f781d5b4c2c955f1df267ceb3abd6d5da60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    58d98d3e4b3a22ae17f0ad752ddadab0

    SHA1

    3998a035e86be0a6e2c5e011c78afba484cb5e69

    SHA256

    36118b1abd9d9688b5e882b5f79ed55be4fc75a0ca9833b4c73108eb4280b106

    SHA512

    36bd9e9f435a2b39f36ad28f34544d05eda8520d540380c4eefcb29cd1796f22dfe38ed80e0ffad2c707c31ee9be443a63e171fb19b6d4827a5d0ad3b14b6a4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2e8aae9649201bd0c95e9eba8b48124

    SHA1

    e81a5a663af61adbd00d9a58a6d1eeda81a034d6

    SHA256

    5e368e71fbfeedf49355b71b7c7e7cfa73f9b4391374cc767b678563c8ea18de

    SHA512

    cc6ab340c77af0f01fa214b9e47078b47b65da31efa873468dacef5a36350c3f13d0c2198c0880a1211631f1d7da965391e5fe764d2c57c5e19cdd1aff37d6a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    31ba0cbc24912e2bbb44f1ade90f51b4

    SHA1

    a5bcc4f460f0e5a58519762fca83b9780b39ca14

    SHA256

    940c1b18fd72109e54b5d3f8d02c0d03f6b4d2ef2b9d43eca0cdc837951cd157

    SHA512

    ea8d871620e76923b32f4f223d2bff60b0cf7c45a3885b9e6dc09d48b4b31df99ae127af3081d7bf6686655e446200552505b536d3698de9414f10f73f7bd580

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6aff652098de5a46c4caec1483b2d939

    SHA1

    528662c69503ec55c348df6a3a1073205556bc79

    SHA256

    e47dd260b29d6eee97ee2e17e1000d4b5057f70af20749b2559a7cff1f6a75ad

    SHA512

    25cf457884a376260fc7e91392344750cff26af3a5c8fae4bac244745fc75ca376aeb6774cc7442a69965f18c976c07e3b2e01f67b746daf5c4de84d7a590e4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de63fc09cb5f74a7d0da885397909970

    SHA1

    7954c9cee1699498efc134a239ff8d415f5465e7

    SHA256

    3d79e18f848644d12f1afeedbac29f03d289382e732b2e0daf28cb184c3c58c0

    SHA512

    49b4656609533ce5117bac14cd34dffbb075e4fcd6e0a2ac1bc9d3658d22844c751f9301b389449b317d4a2ce5d433c0ed5e0bf6ed58f3e0ab694411828cf4f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    627a2ace260becb602050b35cb2fd1d3

    SHA1

    17cdac134608856b5c46e2c2e1da95d0d9060450

    SHA256

    6b1ec052eecc84832ca61f7f219cf5b330061068f3bfb4d47f7ff321547304b5

    SHA512

    008fc56333a0b6f5c30312f760ff93b600297e2ba64de83ad157b0d401e31e8fe17307452d0c9071f797ddd0cb08c8eb31d24009b4c132fe5888a921ea2e5d57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a6661daf0e31eecb46a078cb065af30

    SHA1

    0bc6cd182b740858b09fa2d13e622b58be39775e

    SHA256

    3e362bae84d2187d7a6903870a519cb7e8231b7cfa7b64edfd8bb3853b3e0a6c

    SHA512

    728618f46636e0a4bcf7d3b40df510dd2857316f429abbea7046268bd6baf0f61229d4a74b63362fbc2fcf0721660db5938a034870455116001b83530edcd36b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a2079986957fc4e535b38c0fb41231a

    SHA1

    40aa221f5a03a5dd9720af0cc1cbdce60019e3aa

    SHA256

    8ed7e9d66c3a3738cd25958c3e079461c9da56ef95e4e70814cd684a4e9c00f5

    SHA512

    58a6925126c58c8a3eec7d4f10a167678dabec2e60b01408ac54229d53490f1e95d93e8d0f00ee3cb977105753aa15b84edb37f10d6e152d46bb09c985dc3841

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e6d8744e9da3bd6e1ef3e567a5887c2

    SHA1

    b002159b5a91c750e5d5b1d9bef51b09841d7b76

    SHA256

    048d5e5d1b4a1cc8a664e9006db0a0b7ebc06e96b89fcc7226d0901f770fad9d

    SHA512

    4e6eb6d7c05e8e83f94bcbf92cf8e657f948847d930000c380600a6fe195cacba72e497cd4589e00e5df7d6b057415fd5d180ae8b7ccd3323a21efe39c508cd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8

    Filesize

    170B

    MD5

    37a894cc9f387d8c301ef83a8ac6cf10

    SHA1

    528ab85dca1915dbf47b01afa56ee8a7936a2b9a

    SHA256

    a9e663ad9bd7745cf230711533384f1988a4a94a66ce216b0951aa8bb6c96449

    SHA512

    f6114d8c94d2c3beafc2f7665c180fc0d769035274df4afb447a96b3ed103d35aa1a3083834d7f377982d6d4ec968896af0535fe676718243aeb9a58c8f5016a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    612cd1376724352f6f1c7028befab88f

    SHA1

    4beb9fa310b9dcb90091ee3ad93d1ea37f00039a

    SHA256

    c9acf00d4df1dcaae9c9449c84298bf8ee9f1ee3a8f64063a2c860c3f587c9f2

    SHA512

    b6da5244e7e42fe16d80fe82f6a9f5c96746af20acb213e729b15fa45c430e520f3922f184e02f0dee68e60f71016fa5264cc01ace1b0e37f1aff94829a6cf90

  • C:\Users\Admin\AppData\Local\Temp\CabD652.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD667.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b