Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    26/08/2024, 01:48

General

  • Target

    c20aefc67871cf0084d86fdb8ca92112_JaffaCakes118.html

  • Size

    15KB

  • MD5

    c20aefc67871cf0084d86fdb8ca92112

  • SHA1

    3ef15305fb95c02b33a3648ca37fd1cd1cfba84d

  • SHA256

    8c326c0b47b12701948999ac84253e50d671cba726ddd7ce5398da5e1ebabaaa

  • SHA512

    79bf9d0725de3fcf1691dc7475dbccad21bd8ef04afc78660b08d37efac817c3933827a4db5e87d23069ec88c145b3e651c8dda2ec03610e4c4088601dfc4243

  • SSDEEP

    384:kQwiu7Ob6/KrqlmskqYtFYMEMOa89DWQoUc8uAxsG8aZCuIf2V2OM7ZIak6hwI6m:XwihmSWlm6ue2ySAxsG8aZ22Vf6KRjf2

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c20aefc67871cf0084d86fdb8ca92112_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2252
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2252 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2764

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    1afb1edecb40ae7c1d774a8c8a071d58

    SHA1

    eaeda192367b00d29a45d466cf2c3fe70b75b6ca

    SHA256

    6f3477e5ce7f15cf6b06f7aafa88fa0533472755b37ea3ef658cedf0dd0454af

    SHA512

    f1d6bf29055e7b5f7526d8e211374617127ca4d543a975e37a10cb80b64870a08ba28eeb6a994bb5a4db70def521f32fd6713ddfa81ccdc0346463bca752f579

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28d27f65fb6afecf04b3aaca3a5d7a2c

    SHA1

    c7f2242c268fa2f74c486718ba3d4e6494c103e7

    SHA256

    1011a76c3033fbe4cf4bf05b3f32ecb580e2d8f0a04c2c6b4d75a32e5acefcc4

    SHA512

    b589c01a3fb0d18bc0ab4f93c572ab95314376fa941a425d2dca4fe4f962b9b864338d5c861951a5bec963b4b457d23721b20d262b1081cc7e936211f3d604e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e6cfab9660dc2ba99ac96bc8298b6963

    SHA1

    bed8e7e60b7faf0c4d38ab2b9808fb89997dd72a

    SHA256

    215957b2db116bc8ea814859fcbec445e54989b21e91ea5643f2b4739cfb3be8

    SHA512

    159b86037998562dffa9880967eafd15acd44f9fa35a751aa1a96583c3e2bd49b40f054d49a4e4d7f50021aa6760d16de9f6590625b1280f79960c104fbbde2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4054f8a3eec420b86d4e10ee840531eb

    SHA1

    5e7ba37b86af63f454baced208c22bd3c0fd14aa

    SHA256

    7dc950653cbc058d619f47d670a08b22c34bf882a5dfa7192507ee3292f47f78

    SHA512

    b86bcfc6b4f2b40c22a5a7a7d3e90780ae3920087b926700b2345b767c30dc2e2561caf2ef4795997f0ac66a8af9dc386a29d945a377d264ecf045149d6aa642

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    66df517cff65c838ba1cc9637b1fa2de

    SHA1

    7f198e50519f5bc50127757d1e50829f6dc9aeed

    SHA256

    37161b06c785ef504439a4c2985ad6116dadfe46d70c481a845edf74b6b59507

    SHA512

    0648e5de7285231041260a8326c60e70a61faeee24813ad7588ab4262c9571b0e43aad6c3bdcddc1b83929a46a16c6d45e39e782bc96374e1b6238ec46567e5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a3b48171c9cad5e65cdb84edcde3a400

    SHA1

    3ecb803f6bdf5b3fcddd12240740bbb39544176a

    SHA256

    4ad55505bf04c17ec1a9c321bbae1a3f2e928344e744b05ae18605f6ba3a7b33

    SHA512

    432773d1543ef8fe0ed2e547b737cae1443b02adb1a4346f38b3c66bc92c56bd8a885b10c0c18a73b5745d5ae369292ced3c2d1b9b317502cfbf8b46df8b69ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d34fac9f2a66563c440173a3ffec7e88

    SHA1

    744f5f20504dadb14c1ab1ac83b977b2e955c6f1

    SHA256

    480ce14f16f3c91eff14864f83c6ab5b64002cba2a4d9cc482a7bee536ef4a26

    SHA512

    e840434459ef0b466aff2e589b6ded135edc30bcbd462eee2300eef02a2d81375ad9bfb126e5bd974b0dc1c4010e43c137e77fe0fc7c1e5ef6473687b50eefac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3413a7a9b8c15549119657b8bf7b059a

    SHA1

    60736017efa011ac62800d45fdfcfd198b04fdec

    SHA256

    27c106a6c7907e83dd1a52098a3f06efeac8cbb0bb704dc80787ac9f4128c4aa

    SHA512

    c479b6c607b49bbcfeba440ce4b4951be1658e0b98552dadb946f235c3693d9f0c25f85c6aa9ee9e1fd9c0437109332cdd8449e42d5a7f72b6cac72a59a4ea5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e9bc15904afef4b59967d6c7ffe8ea78

    SHA1

    6caf25f732b7856516e1a20ac11d803ecae4cabd

    SHA256

    92f06c612f11f44d2abf6aea974f45d32796ad8803ad206033077ab5468a3949

    SHA512

    0581fc4b597de07e135bfaa42f5b07ca26cc8260ccac0e82ab7c6ec1d43f3c4ee9b71168e4134af2b8829986206d94d65bd621a56fd62069b0dca2a380e79592

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    037685eb4db1b45d51dad7e78c9eea4f

    SHA1

    f3960b1bfb9405553bd952eb92154d0a0cb6f170

    SHA256

    8228f9625017c227f9f89a7546f94d9f0cc264929394b7a2f2a3db723b8376ae

    SHA512

    5d3e15fc255d143dd9f13feb8d72ebd5efe870ef75718a6f278437f3557225d6f962ee1e711f6a5c4a6013c79a21fd0b4ae1ea5fb7cbac668318617c74d32d8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f59561e17938d0ad016a427ef749226

    SHA1

    2a5708d745b6c523bb5cb08aff6293fca0f39029

    SHA256

    c836af61ecf1d5c7762dc940d47bf82dd80166d40ca773f75a0828a6cbebb257

    SHA512

    5827e2f04f6829479c1c46c4eb97dfe2a3216bf83b70e8969099177ec4d5db5b5343151b6d659dbde0db7b6642184e82339456e3289ed2c9579b518f83e089c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    066c96c4a5cee0846dc55cb6160e0de4

    SHA1

    6603831366173ea786f7c5dc09d8b7c9e3cfa472

    SHA256

    0a9afb4fe0296d0d151f202c9eba97335067eb7aab75043eeb178a0ff2d22ced

    SHA512

    9eda4b7ecd31b5cd249b12cacd04ff16243dd83125a54e43ea536492c5695c1987419720a5fb9a69373c9e92a6deeeefc324e7a5511fcc865b0141b6e5900ec3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b425b4dbc68a1351ef35eba1bf8b605

    SHA1

    2ab408e2d2d1f8a13f4677fb240d34408e51493a

    SHA256

    cefba34b1be482ca5bce4dd9885c425423e21b68d6657f4a24d8250d211efee8

    SHA512

    a07a55ab4a0157a6d123721944b54b7e10ee7dfa575c29e7d9fc8459d0cf49b20ab619c08143b52ff28c597cefa9a26560ac25e344750b07b258ee68f50fddd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    83d664f4a26ddc0336d8dbe2ca935bd5

    SHA1

    7de2e05d6cc24f4a38a7ca9bced1ff1ca9210129

    SHA256

    b38bd06190acc7d907916fa490411f1ef76cb2a1af8d65f51fa7f78f5b4c11ee

    SHA512

    eddd7a56f9284eba794267441c5578635367085d2b48b71f0ebce79680ec0bed4d9427eb5c9fa7c7ac1fe25664ad9a80dbfd7759c44aade8c63bdf57e2cdf520

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f40860bb52c6de07ba2f6a6d768c331e

    SHA1

    76c61eb92f71e0994893d4839c4109072ce80226

    SHA256

    c0821c2829e2e3a8a9aed05b8217ce1f44035bdbed0622a06f1fe8f4ddb5aacd

    SHA512

    fcaa87c3f72dc398404c1bdf32a44b5fa1b1cf629c4175da62edf84eff66f1e66f5f4ce57a9da395cd2bdc491f830bbac9ffd4649d0d270a63cd49dc41babbe7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    acfb8592a24637e8af31a1177695bdd6

    SHA1

    df9ad760147d0f110b4ad14f8e7e29011f3becb6

    SHA256

    8575abaa9987220dad2158c3bb1a449beebd806f8b5771bc71f20f2b6c074d81

    SHA512

    4100f1d321755b9d8262ee6cf40029c3b658e23b9180ef640b287bb3389f9e21c28a03495752f0c4a338e03da0a6c0551ecfef5457668c9c62eb3837a747ca85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    12dae4a2827018c0b4f4f224b45279bb

    SHA1

    a987cffbe8ee71940af625892ab89491c0054c10

    SHA256

    723c5c7ede9a90b1c86b1beffdf5d4d227ab1e5c7be83ec61c8e99b448feca07

    SHA512

    4e21a20d310a071dacd1e6bb61a1395ee925518dffdac8363d222a2f0991e25e48048e8be472797569d6864fe77100096e86d556a00b3d93381f56ca1fe33e62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    774799f37ad8949464d851b5c824bac1

    SHA1

    b268072799757a62ee9a0f8d1e463ae920c84b33

    SHA256

    988494e808e2617fc5f49805aca80a345d7ff027ad415114f28c3c1cc33fe259

    SHA512

    21748b1d40a3f27c3659dd365c18326a4aebbeb50bc4ce0324259d9ebd860aef61199bed7db9d278820ff1a941144e216e114cc042e149f006d98f6634b7adfb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b95aaef7ea835df535e55adf98747b98

    SHA1

    c3a214384b437978aa92818dc7d5bd0183947f8c

    SHA256

    02161027f5985360cfcbf62b00cb733f08da22391ebd63faef6aad9bcc0c24d9

    SHA512

    ca382bac51cc7ae5acfefdcf297dbee928bc955ecb2d994e105020764b8c245e59cc1090600ed9d7b9afc774be9b0ed732be1e6062b2ce9c26eb39bc8e236a53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d4c1c3c17559eecae6e11826df3471f

    SHA1

    6b1337e0cb8cfe8d3fd3ae6e157b2c92afa20eaf

    SHA256

    fc0f8508ceab7a824b76f5ee69e7008b65e19456b64e545aec058bf33f7086d8

    SHA512

    171ad870cdfb3db93978335def30d5c06e8a335f7754a6752d242ee294c3ec0117ac1008edb0f9d2969a15aa679da7bdc4a65fa4aec198669882cb683174de05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    088b4cb536d077469e871c97955658db

    SHA1

    bb3c83ba8dc6629981f0d0075a471f6dece753e7

    SHA256

    d1872433ec1fd0cad5eac9b50bed19b80488622a8124d538464ce015cabefd37

    SHA512

    6af27f0c23a95d32fb5b0339c34e5bf537cc00edb617bef692da77359688696fd49b011755c71947e759de8ad358736c3290ea0f8d72fe5acc0862562f45c34d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e99ab10e2dab73d221076766e6d6d18d

    SHA1

    9a01eb7f711ba873ab52ee6987fec79dc0f9d2aa

    SHA256

    9020e69b9dc5121e0cbb65c87a68e806e4c57aa73508ff182ce65190696c9133

    SHA512

    310acceaf8c4804bcfa87bf70abde610767e13287cfd1d9eab3841eb58f9b7543fd7a7a451876d8b773ced290d91e151399727a387818b940f0ebcbef2780f1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    192cfaed572bbcdfc7605b47220dfd89

    SHA1

    6ca5f2405a2f2caefee6f0bd94397ea5f41d0aa5

    SHA256

    6b00380194d65cc3b639dab1fa46bbd4c1492f14b24de147fa6838fcf2fb7490

    SHA512

    cf5d0b0a7c7627877045a45b0f199fa09f538ffd6ea5d68e8892fe419304d8ba982d9e3b785027e9e24bdba8e5db4527f5de494c825a5435f1578ed7c9a79f8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    9540b134ba7a456427066c25c93418fc

    SHA1

    9e0d5d53e9da5dceeb0093a1af0114c2317b9a71

    SHA256

    fadf753a1b646c2730364f81a8af338d39705060681c657c4b76fbe2a2134924

    SHA512

    8958ac9058a97dfc1e325c6d218b4bb5477970c2140b443fe45e245bac95f82d64ee1676ca90c33bc4eef856f575703a07603ad165d82f9396d51c282a0f2e17

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HHT5LGG0\jquery[1].htm

    Filesize

    988B

    MD5

    431da47a6b8e30bd7d01fd28fae83cbc

    SHA1

    b111ededcf379236bb7e88500e6c3577500cf465

    SHA256

    8fb876fd7e52699fe2c6f1bbc8e70552e06eddd813e9e5ce165fea3d6c354c9f

    SHA512

    19b54aa7ee9943ba2e33b3f275d294d882c76f7e44115e45de7d5d5d860e992e297755512436e9e28ad9be201de5d45f8ae498c675d8f413dc2de21127ec6498

  • C:\Users\Admin\AppData\Local\Temp\Cab4EEC.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar4FBC.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b