Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    28/08/2024, 21:54

General

  • Target

    c7b680d885662344bbec92a7c6375fbc_JaffaCakes118.html

  • Size

    19KB

  • MD5

    c7b680d885662344bbec92a7c6375fbc

  • SHA1

    3fccc2066bfb966c5f4e660d3ae3e43366538349

  • SHA256

    5508aa0481e98ce38376e6b5e2f0e604b2dd9eb023fb1aad92df4e585b7d5ab5

  • SHA512

    3fcf5e44becc26e737604319d2b10476ed26104150de3386591bba398d82f9087b388c5fc4f580c99a2fbda0f9dcd1105ee20ff83ba71d914fe73a8129737d15

  • SSDEEP

    384:zieKhgESCVBD8ccQ3Rfh9B/0mLxXucfBk99heMazVc9ogS:zi7SCgc/3lqmQOBk9SM8qogS

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c7b680d885662344bbec92a7c6375fbc_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2416
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2416 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2820

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    4cdf6751a99724dcf61e4c39b02a4d25

    SHA1

    304be7b34ac5cb5c72d6affc188ab772b88d5569

    SHA256

    d46f2100b9b2fa0c518ec214bc4b4216f149321c9d4ea20f3d6c4982756a7637

    SHA512

    e3a7bd6a90dc229b55f9803b0a50c2e62f9c9c22e908415452b94752f73762ccd4a1fa946178aa037e4d993b7fbb13fe88dece068a73222acfd71d184c039986

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37bdf7a011aad76bcf461815fbb3e550

    SHA1

    994de0c069b6e517610e6a831e342d4de0deb049

    SHA256

    c644744478b27dfc0a65ded899b27c398bc730b7f6ea161ebfc89bd99e35dca6

    SHA512

    85e1f225ffbadf9d345699509f71933503bcf1af2d21a4166044a706c39436c2a72ee3e95d14a35964cbb59e81e72fadf7d8c9c840f7d76bc543cf593e63fe69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab36e795ca8e750c22a619926f379902

    SHA1

    55d5a71d188a5ea88ececbc952623ef4da3277bf

    SHA256

    d458295b6d4d6b7ca1d26de2569bf9f340f424ebdfab91cea344536bbdf6a045

    SHA512

    456d02b0267be78b73cbf44ad62cf5089f9f87c5444f94c01509af6fb1d2f6c17f61cabfcf4010a7cf8df6b0d5f1828b4f90635538c27f42169b068db44c4d36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b83d8584fc6801176d63c07f2ee146d

    SHA1

    1e56a22582171ab42b3fcff0b640a9f0d1ec1a2c

    SHA256

    7031b4676d1aa7629ecdfc559ad4d072a70cf236aa9307c757fab32a5dc5ebce

    SHA512

    33b9b9067a275ba46256d7a43209b22c0b29dbbf12e09ac2459bb432c7e230811712669de52c0b0d3fac0578c18cdcbbb2227edbf26567c2a5c7bc3d086bf272

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0534cd322103dd82a1bacb0655401150

    SHA1

    891afe79a0e8825240e00f123bb7d8f058c27ce3

    SHA256

    7ce7910e45932d31ea2ec18d345478887870fdc8258afad98a5a4fce40e92e3d

    SHA512

    5b60e4bcb53c32f08dda3e0d6b68410f289b58e3e0d642d151e65157b4e8b84aad0b01c7c4fd2956e13ca7a9ddc921715ead26efc4f712de06e29c839bdaf9c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    10758e8bd46c78715d409edaad3174bb

    SHA1

    18d1fb97fce1f3aa9616e46246a803e13300c0e9

    SHA256

    68f08ca8935502346454633bf3045ffab7f6fdf35fd14dc243d4f81fe22a98a3

    SHA512

    4850e640f01096c5c44199192a11ec88cf9cab440aac056a74191f029574f5847daf7b1568135dfb02e7772bcbc8dc0a61f00ec51a428a740053e23058c06844

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    86919f340db0ee1af99292b160b6b831

    SHA1

    dbb673e68459f1bf14af609fa10616df1551ae74

    SHA256

    3b4451a2afc60905312431dfc5bb2cd00dfa88dd7adef042d62599eca02b58dc

    SHA512

    865d90ace81493fc989ae63fef85e606fe37450c389eb3afbbf43f7270564b7a41d24375cf25259587f407975f8764f9c09d254acd82ece4257942aaaee17784

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b66b00ad7c961e2ae6c6527601cdfcdd

    SHA1

    63bc39537d4a9e75f6da940f110448e094e7cd11

    SHA256

    5f6aa8edd93c4309bcba932cf45d91b7c825646795205b6fccccf8ff0956e3c3

    SHA512

    19cf463bf8c759fcd27d713915f96fdd0e3fb4702f79ee941e0664415e83686ee2acb7036a16c6f368ac27df59bc69e32489218dca2ecee50690dcf1234c0545

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fcc7f4f101dbc69c236aefc2ba3e9a93

    SHA1

    acfdbd036b9866c3ffa4ab6cde7ec45f7fed1019

    SHA256

    426501cd8bae338e309f9e38c2353d4c2d87c69f7d8070ca69587f8f84180477

    SHA512

    9e9d0af3a94768528d434078774a8fb09df32bbd893b8ef2e4219c34e513b8db56debffb7559fadbc526af602c2f9d609e8e94165454105045060ff602e13cec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d67cff748888d7552a7c84d690501953

    SHA1

    90d32a2530e6cd041fba6c768e510dad8b180613

    SHA256

    5983527ae4d0264f340521607f4a5b43f5fb7bb01db918307ad2128fc7ca346d

    SHA512

    c7a0a3d7297889a1299652afde4b9f5d697452680252056e1eb8e5505881dc2e333b4e6d26e0c356ae9e8c09b7e9a96de5585d009327f8933ac7fd9b6c59f29b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7919ce882d66f2019ede8fbfa64c38aa

    SHA1

    38d4f138a7196efd2a3d766f44ea0677beea2eac

    SHA256

    de506fe540a009d9b449561db46013ce5ca7f76fe585bde0080b60316c5d7d5d

    SHA512

    9b02f5a1ab5a907f665f274c7ec8c8ccb255e9b7ffbbc212e2284497bfa6e1bc5f5f7bc7b659ba856f0369a547bef4f4cacc1bc370ddc5545917591cf647450d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1bc2c43c1bddbac1b467913e40aa3b6

    SHA1

    4751a53cb121eea1b42a044d796c2b9b1cdd5609

    SHA256

    b98a65a23b115e74efe97a8d25d797cb7fefb465f288dace1f0ea26755900744

    SHA512

    2d0f3d0e98197d2eb5736e4a88d21211f98d95022c6a93de507913394851237601e36fb29fbaad2311bb7c070f1ab391566772c7ce7140320ba170fb1d7f6521

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f6549bbeb8ab1de43e574c9f89a6b8ec

    SHA1

    2b8b4434b29720907d4d685f292788c1ddf2e1c9

    SHA256

    8f769051ad012742f26519adc89609ac8699e620fe040c05c8218fb6e3690195

    SHA512

    9a2c81f1f34269cee3cda7d278156e146bf54b84f3e77afdebe3bf678c505c66e2ff5d80695baab06246d690c6ce9f60c24be4cc9e3feab4c630bee301cb9c80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8055df596b8c805359e42b39b0cb390a

    SHA1

    7518c8e840dc7feaafedf8396893b8924a764003

    SHA256

    a7e5bcbf228f6149f62a83fb70b46205cbc1c5b6bf1c8c7f216e5a449c30ece5

    SHA512

    6ecd314dea1aae2f4b05090113806e315916daa8bcc975e15a14888a66b7b63cb23a9bd9a8db0b2267a5fe88c9c5c53af468251c58b2d953efcff2e9165be933

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d6ecd45a8e68e880b5460afe6c378d0

    SHA1

    0752912cb6a08caf2053c3b6c5225c920da117f0

    SHA256

    ff120f8cd58a258141961ebb1859b4e263572956c6f4fd0ad750ec2620cb9632

    SHA512

    55b8baa823e09c39bfd03c114f5106353b9f08b329fadb57ad6592b3054e5d6c97d784473437ac05daf57f7a5d3674d398bbab2a2830703c77104c3986c28c17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c13de10bdde12692230340a45f2e5044

    SHA1

    6f85975216d63caf2332fdf676f99a6bcc06481c

    SHA256

    3733dcf366574ea83e10e8c48ccf0cf89ef42549bc3219a1450de7c1d1330ea0

    SHA512

    1663b2c3673e6cff12f5ffd006c8f27f0e65df382921d010f4f098ad324867dfe322f0a2758510ceee15c6b5fc67ff06668be19a0d369efcfd19bf7178d384bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1bedd76f3505d97604c421df2e0d617d

    SHA1

    a414a343a48e295117c46eca79db36be5c30c430

    SHA256

    97021fecd44af6844a4b16d37e9b5a8ad41a1e2e3bdaad313c0d3cdbdcbff393

    SHA512

    36e5ac2ebc8f92dec647f24ff80a3eb1ebf7accdc89d565df126cd27d5c37ee94402a67fee397582dd7f237da25a566901ff93dd75aa119652c38eb7d0c052f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    30e3a1fd962d53d717ea3d3284dc2dc2

    SHA1

    6cf898cb48c8ec7527bbd73bc008f9e11f9422bd

    SHA256

    ff89a0f5fcb3363177664d1080cf3b989045145876607203d6e25a3f708c83e8

    SHA512

    5e7497c22e6e99fb0c8b6974588c0d9ea512419609b4be92a4e4ad2e3222b80013d6899679f7c5cfa880024341e1c90e6b3c506b716c7ecfd470c8252fe88f1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    f71f661b18b2a57040699d03680ca602

    SHA1

    a374d35fa08e0af8e3d43b2520d2eeaa7f808e9f

    SHA256

    36e06e5bad6b0b8f39a5f730913f9b9a60fe943985837f378c00178ec09ca162

    SHA512

    6ef0d0c4dfa74a1257c74cb4b965a8ba5d6ee09dae34f2e97f30aebc05a52c39653832e0ea28a016c818eace7adb92224c810053c8a691279a229d390b197ada

  • C:\Users\Admin\AppData\Local\Temp\Cab1150.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1153.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b