Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    25/08/2024, 20:47

General

  • Target

    c18cc65306749190647bef3b39a8cd0b_JaffaCakes118.html

  • Size

    49KB

  • MD5

    c18cc65306749190647bef3b39a8cd0b

  • SHA1

    7f4d4d04e9a84bfb6e30549396e50e2bee11b0fe

  • SHA256

    d9f660a84cae8b16307b0c152d4f7b112f746c311ed1a693ed37eed8657abf41

  • SHA512

    686af1e9876c1c7d90c2b39f4b2876a0e5db21017f66d8674a90b85a474e1f9175bb312d87b676113175c743bf3a6953b986bfa0f891f19699ee495170b4277d

  • SSDEEP

    768:xP6zqplgmlRqf7GMF+ordFSw/W42tQua9HqiJA2SvUn:56OplgsRqqMF+ordFSw/1zKiJ1n

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c18cc65306749190647bef3b39a8cd0b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2772
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2772 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2688

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    2a381905c63a6b1fad304d628be7d487

    SHA1

    858cfc0a5cbd598280d705eb07a599469619b296

    SHA256

    76c8c927d286ee2f7f93b810dcf282cedd5de4fd393c3676f6cf4f36c2a60672

    SHA512

    bd12dc097d549ff5ecdccf9be1e0838bdf1695a71f085fe2f6cfe4c9f7bc6716d271d9e7a18a8efbc4c5747afd194ad36c7c2eb0e5b84b93b3c8c98e05b51f42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    dc7760f9d9b1e9bc15c7978cb73279d8

    SHA1

    d02c1207c3bd449220e11e4b183e7ea37f471d6c

    SHA256

    842eb8c2dfed14308e0f78ed2978a5eed922264e3fae9292c0c3fbae7ab39aba

    SHA512

    5c83af07abf4cd7cbc61e024687f67373a28020a27c7c8054083aae7864de407c213a3329b571c9cd800bb03159edb35b6da6988f4e2c568dc717688311dcf19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    83853a02cbadfe22991edb6dcea3586e

    SHA1

    a173dccac462946aa0ecf092e7c4071e3db25177

    SHA256

    83a6ac2722bceb84e5507b92de7c289e563939aa3b4dfcdd7ed46c3ca4ad7f83

    SHA512

    3eee748761c843089acaa715ff1632b1bade6d08faa602847353c97e6d5d6dd10557ef9982a1c08154dd9a0c27d68eef123009ec55821c6a46f41ab9ed51a083

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    37d4b39068e613dda702652c82925492

    SHA1

    8b4c997395739d199ba6bdc82366ee4eb6082e26

    SHA256

    60647b463d1a46facfc40d2c66fef85f38903cdce0134daff5c085c684d1b56e

    SHA512

    ba9ba0b52456d36515796b2d858c0a317511819c034a34509711bdbe5f9af17c1dd7008f4847076e69e73e0d95938b4ce0e7c40fa7cede512e23a7906a2b1fe6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fe764702087f9c5fd61cd5a856f3655b

    SHA1

    9021f76c4dfabb9e7b558bb10bdab84636b759ec

    SHA256

    c22cb43a255d256b6c9e72124a9333e3ba205902c23d23e25fcc2ce2bf4b246f

    SHA512

    c64652ed28f90c8c0c49003fae9f98d369755fad0cbb40c4bb0e3b0c10b0aeb5048681456575d602463dd730099466793c266baa807e5c4a0dccd294d2b255a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3df10ae5cc640ee9924db7a985627cab

    SHA1

    ac22fec7bf3aa94454355af9d6ce9f161d0f30ab

    SHA256

    29117e9702cd215d1d9f65422bad3de16b7ab9a94a25981f609975d99c336ddf

    SHA512

    1f1835d7a6955e0b4fda3370637b198a852445cd921db86312420d30139a9b9636a4c38aff1f14960bea814ae170c8d160ec58fdd801807df5c072efcc34ee8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b531a6d233d43c6445900c3bf33abf3d

    SHA1

    1882e0df7e877dea415af8aaef57a45b58e9cc4f

    SHA256

    ba39054e100d559ec481d71f47f80822abceb3732a826637a952576c35cda400

    SHA512

    927d91faa1b18cc8293afb07b141a6032b7ed7e4ae52705a30996cfb564054b50292ab13b4b939d3bc0b7a2bb8ab8a6f932ff4a8c52f17ff495207bf2cc2cc5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5194219c8d2a207fafc31aeffd06a3d7

    SHA1

    516c2cb3d598190d3a79d12eebb1376cd0cf7538

    SHA256

    68f344f7a2c02ffddf424e4dda41e7c40e41448045ccf7d0528f09281689079c

    SHA512

    1c1287f741fd1f9b6c3e8c26f99fd06f4c2486766a529d18b96976085fc6edc3e37036fef5470b131517855901681cec9889f96e5ff99d116411cd53b6c3d062

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a883edf82ead3b168e5fb8b4b6a7fc9

    SHA1

    ad10cb14ebcd3eabb1b294aa1e6bd4f98b2391d3

    SHA256

    5678278b3cc3c1b181d08122c4da8e6c87c7a5ab02231dc25618827f86bc18ba

    SHA512

    51973a9646bdd59e843a83c9c5186ab1a2bc775203146d784b30c5d8ae3fdefe0f1e1068d883f8e29c2427287b850d02f86ca1fe310d38b7bbcaeb1e242bc189

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e42cf346e5e8ffcdc28af83a43217ff9

    SHA1

    598df4526edbf7f74ca7a8ac1ad1542b676457d1

    SHA256

    c05275e8694ec19358cb9fe2796a7af685eef4f132532dd5bd3f6950aa6d6c18

    SHA512

    141d4b4469241633ba41bee92f2fa104d5f3d7cb03e34ada9bf4b9d8f42b5a8b25d288611561671f7f12e5bcbbe24e21bb9677ed4374483001b07e0d28891d1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be13f90235d5b3111143a459fbd71819

    SHA1

    adb0e58f285ee56a56cf4dfbcbc5da6c55b8df17

    SHA256

    401045ecc6f87a912fd67d290d604e05a12ebe2720bacab2684619e29dff9b0b

    SHA512

    d75025e1787ce618bf21474a96a47d5fc4cd911b6ce7569d5fa625988a67d185ac05ebb969b018577f42d1067ae5271c80c11ae8b19663b02678f359b51be860

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca9cab73b478ead11e3d84fc83d6bd0c

    SHA1

    552734e067dd326e0d62fe3d538073fbe6e34c31

    SHA256

    73d6acde533646c6b4fcf5732ac88c953822261d18314f1bce6eb5ca0d50123d

    SHA512

    b055d142bcd0fef9461273020b7bf2b4ee8d64830b8890f87bfc262ca6968d233c5ad7ed08273324c0b81ca639edae791bfdc5873cb00503f9478d407a8c04e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c94ce17712684fe13ebc660e664f6785

    SHA1

    832241673ecd810ac7b2382bd24b85cef4029182

    SHA256

    d07a809d10188aadd0e065aa57936f622c5729ccd3c139d4b1443529e1e449c2

    SHA512

    66e6ef9409631c829d06f17c594d4c7160e0028a478e7eff57981bcef5a87056594ea70e76d75b5d2ae8cbaa78d1895a81e5aefd0dd6baa89f94184efbe289d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce1f24959d17b26e054bffe077503f21

    SHA1

    510d13644c7ac933b05bf09be6774bd9b73fb329

    SHA256

    7f07f6d9da301c44bb3d7a9502df6b6f2b152c08374baeadd78fa01a3f22d717

    SHA512

    cf8cce0810f981db4168d37a5686a2bc38274bc1a907fd094f4bf51c17a796652912053244e7d74e8cca3d5691d4397069333658689671ccef4ea2a9a69f6ba3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e5d9cc6b5d324e07eff6013646bd092

    SHA1

    0c790d8e5efede19e4c37cc2a06f574805752cfb

    SHA256

    039708c369d603590e3bbeee16a396067d952836c4028d3989d72515ce9f2048

    SHA512

    4b8586f2b7be8862e3f603ac91786281a43e0cc204883ac31d425313e673a544aec0bf67e7850cae7964597410a13b8766850994417d97946d01666bfe6b048f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f2ef5a63d3877ee7c73f5d9c44544872

    SHA1

    b7cf6c4ec3d45f3cf22c35d7552a67c85b265be7

    SHA256

    dd21bc43d3999e4ac926d09e96b8623d1bfb04d6b87d91694506eafac3e91283

    SHA512

    986bd0a0284498a507b8e9ce4c9e4a09ad224b7783c154a57a17e81075105ed467e6cfca7af629cb1ee73c14fdcae0eb4d370f2c646fc4efb98cbc419149d518

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8492957f7ef1d544a702b307e117d721

    SHA1

    ce3022371eb6029479fce7ebafe415fe57428e59

    SHA256

    0cb69ccf81be4d8b80914243e2f113a24867d4de632af903c7cae1936a68e527

    SHA512

    5d24951350ec33362f379de60000a880392efc4aadefc2209b6301bdf106a401f1986cf16c891d86de747ec7d5c2d24bbdd42f464d5d60b818803efcdd6a2267

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e9e106a09d8938f850d10606428b0f5

    SHA1

    9c25bba58929e343cdbf04bf5978ec8bd3a072eb

    SHA256

    6209af5f41afeceffee944dfcc3ede0a3c09a52f1a896ce839f134aef8005f4e

    SHA512

    752fd7b43aeb1c900fe2d95fceaa6f89947f07e4fed1d1abc716dee0554ef5ac2a53303b8c93d39f0cac680ad68ae6cb6da0d97e99cf84073ae4626c31c4f779

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be797cb9c5f70f01897e9058445c9d88

    SHA1

    9a18ca57cce68264a1e122c809ec451195465321

    SHA256

    e1e42915862d53910dd87593ff0681158f1fbef4b93317000979ca2b8b04beb4

    SHA512

    814aacdd83b33603e04258113a9d531cb792f4a380a3ae2accabae80be182b47142258a1db814b61062a219ae1ef75683d259c8146c486d86819c5c8ebaa4ad2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6c39f65d29fc754f116d6a6d108f02a

    SHA1

    5cbe2b29aa2d0c1ae03aad8f44861051edfaceb9

    SHA256

    980468584b9efb38b518859a0b44331ad9cff821c791a8577988b98924bfa041

    SHA512

    b10a0dec343807f909caae52520d7d630e30b96f47d9386d7508fbf178c58af1d886be02d2b91fecaad9b6554745a4c6ffa41b8508528dfbe5b10ffb3c7f39c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9381c58e868dcd3fd07118c3234d9460

    SHA1

    21f95715e4828a117bbb00d4007fa32282f91e41

    SHA256

    ca085e1118249f6c1558c1fcf081f9b86f1a004b15cdad041c0f944fd92393a3

    SHA512

    6013eee194a66541fd7f4c54d73417536f16f55d6c68478cc7f750b89fd3710133b1d781d7eaf7489d3ac8cd022a24b1009e39e15a2c39fe158865ceb4715ccc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3541f0276c8f2e4db6a384460119ff32

    SHA1

    f6f0a4423a5ad98e2988b0c158c8398230606203

    SHA256

    ae19df1522822bcaac8c9c1ac3f2d11fc40f5d36cadbdb37801cb3713722c6cd

    SHA512

    cd61951cf7a754dae0b62f0a66c4518291110943e06547a9db79e67d44fe4c0a3023fe0f5a916c2404ca2929da5b02fe7463f318149104b37b3fc948e7e7e7d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a8ac0aa2fab530af60b53ba6ef988a0

    SHA1

    0cd8cae4188cd5308b3edc56de32b903b77ef12d

    SHA256

    9334bd1da8f662bb57dc5aafe65696985d37ba4553527fe9668fadfa7fafbce0

    SHA512

    76896ece6c680d5960e726e5b9e897ee8ee4c046f3dc18223725c926a16ab9b6a20d640e9d73d814322b19781ae42b218bd06bc420bb4fec14eea9e9af4332db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63a93b0f78bd9deca06a4d04a12cc494

    SHA1

    ff82eb72cfd834a082087ad32eac84dfc74138bd

    SHA256

    8cfc8345d7886f0ef8babcc61160a23c6d039e6c8cd2920adb1ef19fc6a3d241

    SHA512

    ed1066c61295ffd7f683adf31bd24b60d8c8d42538e43fd7bf20dc7189aff0e4a6b16e5be53a9129bb25174f37cfbb1ec9cd45789717398cea6befca3e6d5ad5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    3f96c72ec1585c0b87ba5fb0f16b9fa0

    SHA1

    fd58c5303fac44aa7d00be7aa6b27b3fb2291883

    SHA256

    5194cd83d7885546f8ffd039e8c0295e89a2e4ea73346d2806b680e196e7419e

    SHA512

    e9a85eac08bccc82b7e62b3a01b8848f083ccd27a68709f432e648dc06d926426b80b0a07383b53f45daccd936c9508a3b407878e6d20f386c834bd640d075cb

  • C:\Users\Admin\AppData\Local\Temp\Cab4424.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar44A3.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b