Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    25/08/2024, 18:07

General

  • Target

    c1487c78d67ce8bb17b61c0fc49dbefe_JaffaCakes118.html

  • Size

    85KB

  • MD5

    c1487c78d67ce8bb17b61c0fc49dbefe

  • SHA1

    f84c18c71561b4c02869640fcbb5b7883f0d10e3

  • SHA256

    55b3d4e58d034cbec82dc67436a1a74ee07d8cb9bbf595088543643c49c2ea1f

  • SHA512

    759bfbb17419266eb3a47a877d8201ab119bd21c8548e3e80184872ad0514665214b48362c3b840805a976f1e012d21ad26d000e5cce9d9f5de6a98deff0d3c7

  • SSDEEP

    1536:0KsG9mPCVjh1GslNJwv9km9E+2yKQG26I1wtM28WF5D1mnsp:0KnmPCVj/Gme9kNCCf5Dl

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c1487c78d67ce8bb17b61c0fc49dbefe_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2756
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2756 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2928

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1540FC718855BBAEE858DDCC41A71E13

    Filesize

    939B

    MD5

    981d87ef1e708d9387ac4bec8326ce7b

    SHA1

    ff4786a174de3e8d6d0082656d02925430ddce7c

    SHA256

    e6ecc5aae71ce24b4d4696dd357e73a26ba75a19956df7ec1d661bead7583f16

    SHA512

    3162045c6930b5401832c270ab04d0bc36dbf07a56d0963d009fe378154c1b1cf9a914b98c52c27b1df9cf3b981c695e4d316b39237cfca3cbd91be2317f4632

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    042a6ca39706de2e8ce6a83cb636b885

    SHA1

    ca92b006173bfb66867568d2d06e5d7cd6f76f17

    SHA256

    983345009eab5171bbcf2e493e9e926726ad68175b821c533e5c858b59446582

    SHA512

    a3a24cb26af77338851f02d44cd73d3ac2f3e60a7f895075fd95211ac9fe87cac5812c5ad401e48bfdc315da3d224de80c90201e48dd78e967e276feb3aefe4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    541acdc1b34b1958a47e456d19821249

    SHA1

    76ebcc3c2f8771349de52eb35e07fd4ca271db6b

    SHA256

    108d2647c3fa6e58fd833618beef57af4ec69d99489a2f7ca1c7eaee5f65af5f

    SHA512

    263f0995799447aff5e156f56eb21e3f36d9c822bbe6899a5f596de529dff84525d943663d3fa544e66ca38eb10f62344a2c5e13ad9513d3f5441f630e512442

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    485df0a5f4aea1642adc81b60e106c42

    SHA1

    33eb28c3a9d166a0d37b864d2d0290d56fab040f

    SHA256

    7373ffdccf283e63d1fb4c68c1037bf4e5c4b4f38b9735b3e993071bba23ec5f

    SHA512

    2abb789727d39fbe85d2e9b6adc8de00ac1045a82eeac071c7abcd9d068057473374a0a32e019610aa83198f24493d9e342215b10d4bc363330329b4e6fe0bf7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f9067d54cdfbe8b39907244ea8eb0500

    SHA1

    5c3ca9dae465e1d68ce48f742ecb63c21fdf4e66

    SHA256

    12f5ed2dd5b7e48bda19e3ca38ce127c141ae269ac13a0a50eef3127aecd9bb1

    SHA512

    71e99995cc8fe50088c884240ed9e9d65a19c69e98ae6b496eb466a99fa49451abafead14cfb8ddebe1355ec0450e53148b5f22c2d948edbb2ee553bc835c1ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2bebba3f476602b0452778e330b1997d

    SHA1

    76b331b42faf41fe5ba892f6d77e098ba04e1e20

    SHA256

    e677260a1240dc6bbd9a6d1943a5df2496dabd97b135a21c2d52c979c2206fa3

    SHA512

    ab2824e1b0734592278260ed24f12f0b6b94282a86da93771c4187b44ca5014966a2846dda51645cb70aef1ad1f0e1806f72216a24cd63a90814eaeea6e291a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f52b761b1acaa8c02ebdfebbfb3dfe26

    SHA1

    d01dc20220d13e12586557204116e90c11fcedb0

    SHA256

    3fe22e79c92ec63529e9feea25543bd2616045d74ed50a73343ef46d54b1a7d2

    SHA512

    a4b62b94fcab79385f536f61fa60770caa9935f258eea05efc142ec78cc2e7f4709edee70fa21ac299f68c12df6bb15d8404656d427cd02cfa1eccba71c6bc5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e3f02bd7c07b07e11d61b3b61596a475

    SHA1

    b9f8ddf5d33b250064fad1863ec713a510b1a8cc

    SHA256

    a9dd0963efee1532f141dcdb3c1c72630295a960fa65b4c943f2ead026f79b00

    SHA512

    1961ecacfa332ef4a56195781b32069f08b37064e870a8958221407b8056f2ab68bbefc607172bb0a1ab94b4cc1286c163a0a4e92d96703cd8cb3bcd3110bd2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d0e4959d9386c69d1803e73a16cdc81

    SHA1

    2d863257d762110cab1f03c0bdea4a5456de0b63

    SHA256

    0fe11b762c5be2f7dd1cd974e461fb85647d7965c9e8194c4ba4960400e1a63d

    SHA512

    c198a2127f6ad0d4d4cdbc89e61387e92b1715e5e0c7553dab463033eccaebc28ce8756d7873df64275cc2dd649888509ca2a9166045919b94aa4f2e72a5f69d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    933220d5e70a9a4d83282b17d64935e2

    SHA1

    d84271f8813930cc7d40f6f361828617fe69560b

    SHA256

    ab51a47fbbca6785531fb76474a8c910f00928ce5a5cadc89cf97d825bc6bc97

    SHA512

    cbbe0d1f46a525697f3e7cede79507b5f16597d5ed7c35f2ddc4d393a37a4675483ea569b92611251432253eea42c3429608f721c525bf4bf0ea0e2b7d08673a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a86efcc9cec3b2391221b0fa3aa239cc

    SHA1

    0f9e7d61800749f7d80804a88c62aaa62eca4820

    SHA256

    7f7c1fb54c7d0ae460ad34bdbc709c367c0a7da291e1b909f9b1832275909a3f

    SHA512

    21100d1b46420da3678df8465f7af66aaf654f8dd26bb4deaa2121f3a52736b0ba2d02b7956a097126b09862af042cb1bd515459e488237c67be95c94dd599cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2b8cb69b3e4be15fad579b7d8a77320

    SHA1

    0c8e417e05e3cf44f594f14f1992f7502c56e851

    SHA256

    41e1682df15901f8190194874d11f665f3b9dfb6d1b8b3785ef7d99a57f3c0a9

    SHA512

    7d04319b529f481ea20784c42f078316a58730844d2926cdde6a4629ed879579f7e4bff9d6a5400d40e7a27fb237020d04f63fb9ba6a333940da5d7c913c5ca9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bac4d12045390696a5797f82805547be

    SHA1

    20949748d09b2e1d52e381af492f60147769112d

    SHA256

    999e5c6ad48dc905a92ac38b1e89d50507e4d03174bf5a91426c14f346ed0411

    SHA512

    8ea61e0301debb03c80fea2fe033f71f9b41e3706b9fe9063fe92bbdf2b9c54c849a68b8137fb84f84ce663889f60051f86f184ca862dacc8445855dd939fbbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b02493c9784fc39096b8cc74ef0d4fa1

    SHA1

    010e188b6200afde6f1af0ef2ecc66f9f8d1819e

    SHA256

    941881e2a5262cd88540ebbae8ccc79ffd1b49eafc43a47f95358858642f2fa0

    SHA512

    a6d8ae737c7984b36814231bb0e98a3a64ce0557b505fbc1b61a7abf3262c7307d4c85e0dcd7352218631a9d9a5e569e54b4e916b126640ec363fe2a29a7aa72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d2aef3d1268a9c98ad60dbd6752e68d

    SHA1

    794b96b4ba6cdcaa21b75598ba864e579ded3126

    SHA256

    156391666d10663717a9607a73f8d0726fc6bc6bb04d7c1585978aae8b1c5d34

    SHA512

    918468d004d1c84ad2ae16970a3fe5d373dd8d30dcf97f41429937ac2d5553788514dc30c691561e6ca9126f2750bb6168603c5c7057a7fb0753b3a0f848b234

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    62c4a4bdedb0a05d9df6c030f967f58a

    SHA1

    9e0f9eb2d36081c489cd31586d58b91f67aff6c4

    SHA256

    95b8e6fbfc59e9854d2b8508e83b4d77dc7c5ab07d7f751b8d18de920d1fd4a0

    SHA512

    8e8f6ef3df270545c4ace278c4eaf0815d1860f9e4391d86a6f864a5cb86a53dda144edd53a939f4d41c763d966e28090082165c18d3ada58bca6663fdca5a77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7f1e110156183d081570b929a8eaa5d

    SHA1

    2bcb25a815619668766bd0f7d0bd4219de1f0961

    SHA256

    9ee25b8758248ac460dbfd67e14380910a1cebc730dfbd7bd99369d5dac53fb5

    SHA512

    b30c45a61c44eb996f10cdbcf6ca8bd3ec5f36c4eddd87637f6c9a7cf9ce16904908ab987fe42086589a1f72fe0ea4a5ed17c3165db3b8095089e7857bd3a009

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4f868f9609cea9b7d80423d2b65df62c

    SHA1

    796d923089050fab17b7939e0b79e182593353ab

    SHA256

    74c805676b49133ae3b454f183b7ddaa9f4aa6a33017af55d9edaf9e54910787

    SHA512

    2364597cc430741a15780ba4cff478e5b27a92d49526bd9fc18886a8f58d71987ffa962dd9b61643dd1e471c6910172bc7221e86d8fd9bf6506a5aebcd7fb4ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a09e48c0846fe41d5e39531d1c759b9

    SHA1

    9d237974604bf552a31c90565d2c36ef20290a0c

    SHA256

    1ffae84e3e80892d1290d299da83b94713bb03e32691324cad34b5fc0840d707

    SHA512

    3136d69670559e9209f8ffbb194dc81170d70124d2d76c025340c6fca86b15ae279bc2446a1eacee80be035ac2354ba8870b65877ba7f95b4b399143a3ef7b7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee27f9151a7a6b1df011692b9cce37bd

    SHA1

    191d0521dc558ace35ec745c0fbedff7b8887b1e

    SHA256

    06de5713b277471f98edd88edf204c1b53b96019c3a230a56b08ce4607500e50

    SHA512

    b65cb9396fadcd7a7285d838e98e9ebe5b88d50f7f4107e196060ce7512b48ff22e475a9d1545843cece4133771a27d419ceee1becda2af798788c3d2b064806

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ccb0eb2590e56ab3dbd32c0361ae935

    SHA1

    630e098fbd3ba21f27e1402050718e993f66f0ac

    SHA256

    96e1ee033863c15cbfa0f6bed8382bcd1d2d4f59c8f52bb00e3fc663753482b5

    SHA512

    82c254e8ef924357820efcd367002c44513ecdee080b6367dee48acb3224d7b9fd264aec2f15a6561fa2c09ba7dc819470cfbc450290e320018484ec4fa42346

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5a028fc29faf589a30bae40cd3676fb

    SHA1

    ccc72c24f4a7736093c0af5fb8aa04974cd3709a

    SHA256

    789f174d8e1612a66279a73dd74bfed70d9890d3accb209e9c982f87403d7550

    SHA512

    519a12c79be8704b758e6e9d0ec5b7103b16ae1e89d8a2d4f2c9e6234283529ddeb2c822742c6c5837702f72cde339070cb984f6831a28b0693da7799a027bb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e8f2eeb94d70b50ab1dd684ef19439f

    SHA1

    19c42c8cdf432bb0bf618fcd5c54f3d093298e01

    SHA256

    bf03c62a3ab500fdf1552d2e23e56599ac17a3692cb11b4096e57da818fd813e

    SHA512

    141a458ffff579f9b40f7d4ff87fa9eccdb3ea1e06eb1e242196c0a7cc9e15c6fc088f4de320dbf461e2d20895b3f84d8626c4b79d322dc580ad891b92c0320a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2d32ba8bda01875ed348a14c76c3e0c1

    SHA1

    a99c992ca8d04f20dbc56f6bf1701d938e084423

    SHA256

    4699586f75fa4ad8f8aac3c609e1d0596bbd358ed678ccde0c9e6af740eb410b

    SHA512

    28121fd028ca8ebdc03c7342a20d2e2828c7821926fc68f12b1bd355eeeb1f9dcf61dd7dea0aecb6210d8b1410cb86e5358c65d6707fb654f04615de1c394562

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    4e692969d97d45907a51c6cc621ab73c

    SHA1

    b27ac0ccb7340bd9a93de418a49947d33c6135b8

    SHA256

    efe8dc4620a52fe2c9c7c4f769fa224dd45140f68c525b93ce69e35491f5d3fb

    SHA512

    eda1fbc3ae675662cb259e42bee24eee82f5296db179096207ad6dae2bf2869988840c7a5470445db1725f05595955cbd7b58a9f80e3adf157ba4c57b2842cc7

  • C:\Users\Admin\AppData\Local\Temp\Cab762D.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar763E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b