Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    28/08/2024, 18:37

General

  • Target

    c76bd261db9273bd96e4ae5c1cc99dff_JaffaCakes118.html

  • Size

    189KB

  • MD5

    c76bd261db9273bd96e4ae5c1cc99dff

  • SHA1

    95052c4c663add0384a0bf0b370243250f197cc3

  • SHA256

    4d23cb1f7cf7732c7c8b2de2a363962e5375352ed43a701804de24fe46582d79

  • SHA512

    95e5f4691cf30585d3c935192e37210c810e56cb9f9a4796a1380674951b84302e19017da4389cbad584c24473c8ac256c850e278caab6e6360ab9af2f63f27f

  • SSDEEP

    1536:pbMjw2fMk1D3O9Pj2fcXv3HA/tD58L93j4zNFMuQ0cZehV5fp:sEagLCPb

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c76bd261db9273bd96e4ae5c1cc99dff_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2780
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2780 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1944

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    d5e2ae55c7a48936118769590a106cf5

    SHA1

    3bd6f2323306dcc80d46f15a648e281a99b177d1

    SHA256

    5ea40829dc408741ee6ab80b96cf79c99470ac37bc89cf67b0acc12a013ce18c

    SHA512

    ad46b8af5af6196f52e3e0e62cc33101ef0161463a29c075536ee1dcbb91143a970ffad32056bdb9419f78002469c66c2b5d0bc8e3b309dd3921bc4cc0d9a0ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f998426463310715f8959bcc5a9e4c3

    SHA1

    8347b7e9710183cb5500104cd6a5fd86f06208df

    SHA256

    35a81b2bfd036d5cd68dc106533257add72416acafaed118b40757f56368282a

    SHA512

    220fd895b7138b548f813af5213a5d114176d07a6395302be239bc20ae6ff3468e8159b3e8bd3a71a87c815c258957ef394d96a4ff3c7a113e3590eda62f1fe3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f4909e9e400332335e6fb9acc09954e4

    SHA1

    49e59aa60c3e1bcdf1c17a07059bebb0545dad6c

    SHA256

    f72f3f4f19a11b3336d0b58dc618c03c2a2cc736ad67de1a5eaf0a55fa6d56fd

    SHA512

    15b4cb4df85fa91ef6225dbe97154401ae6082684350da2121e09d85ee17d70b14e6c760c3bd37af1626fd105722ba3ec2f80a24a86e0742268a219448e69343

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    125c456529a90c506c22b3c2a7d4e161

    SHA1

    43eb9a44aee2cb6997ea1d26d7981056e7c55b3b

    SHA256

    abcb1d03cf82216bdf7a2bff5fc3dea1461671f4be96a9d23c29d51db611e2ac

    SHA512

    28526219b543664921a415d88a6cd37569ac2fc53e218e27dd1bd0317c21592795e39df372a2f79876389fc87c748f25c2079267b0845177b04e8796b6891e8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f1a2f0ee5643e453b130bbb5facb039d

    SHA1

    efad08df90dc797e903cd48f8feddea5b5fa12c4

    SHA256

    c04a8dce7036071f400782bdce63b151842fca3d57236c0cc2f27ff6f5aebf09

    SHA512

    d0744d7d82530a22954e14cce1f415410854af2a22911445baf565fc194480b2d5857d5fae0eae7a28edb64366c17c71a882f48fd881dedcabc588e5eac5cbc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6952b7417c0e89aff3e8d24c4e57c1fb

    SHA1

    07ce759a6ad740494f1ecb1b9098d2b5e1b54fc3

    SHA256

    9bd6d5522cf7b89864ef2dbaad882273526c460cf0ee7f259205059953c7392a

    SHA512

    c7eddbb6a4357434d8464a19edc4ba20f1b483dfcf50c5d3c0dfd06a8b0d8f93b4746424974a2b3c94158a044420df4a68c39fa097ced2bd189e7869b1f300d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a0ee2c2405a99bd549b5511e4eeae8b

    SHA1

    b3a0f93cdeec0471b521527b7b33e4d567a58812

    SHA256

    92a15431abb9dfbfd6343e67bbe367393a1c67aa57e9f85fc736089faf6c4623

    SHA512

    b1dd4c9fa6d72d3881b71e102273c3e802654e19b94f21e042afb3601f7b497880acb2c36dec1e8a28d6c4e8cc1a59d3a582a0731f529c92cc36807e8f54a2ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52bb94623ddc38fd6bd9935800e48af8

    SHA1

    cf2d8786c378ff7378e7f78b9c84d030579b0732

    SHA256

    8007ae7d709095955dc5fca404505c2e395900af7b57a66a40eb38ef413d4d48

    SHA512

    8e020a64ed9e277afa4cea64c7b293e9bf697305b607c9fefad21d4b36d995b49a3ad44b9e1060738850636a95adf0cd3f611a1fa1d494deeacae148de212fca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea37310ea70935856794b6306b31e020

    SHA1

    026927475739dde1b88ae5802f884fb626b2426a

    SHA256

    57515532264fbb27956b889969299b6dd58659c92dbf0d26194f512f18d0f4bd

    SHA512

    dbd8bb3d4525ca1534c16c444046c7c475caa8949471204bb33554f80639ba53ed672390f72c7626307781ec38197645297fd915caa9bcc2df76ca7e6ad13a5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea65556e09fd59f7c9662c9793847800

    SHA1

    1f7d7ab45cc1b116df9af326a7e3e554c09ed16b

    SHA256

    25f45bf0dae8a0a606ae668af11fec9ac4560c29fad325c2d318b719a1e969ae

    SHA512

    c999c5d29a62a67cd79c26f39c07f8b2965a0b91e487b4f5d633aa2bd4412b535d70fadb11f42a4f82b78c1a779076a92c43e2950f6136efb2edaa1dcea229b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f7ebbeb2958ac9112193821a2c54637

    SHA1

    0a7232a4d599d91b2ec066d86140c40cdd72de91

    SHA256

    60250d9db947dc3f4fdfb4ebc3f098dcc23a621ab5298bafac7944a2c8c572d2

    SHA512

    bd267e632b60f10a9f325ad32974a5e2103839333ae2d58144c1249f160d3e274213c7e0feda8eccacb9267ca274c0213197a60a50ba56ca1f51654b65e64984

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47d1e8c23ffe162097aa4b24984ed4eb

    SHA1

    15fa06e529f9cfafec8957989b9d9399f2949b1c

    SHA256

    2a9b9c0055dcde855dbf4b8a6ce84b9f34d48a8edd5270f46fdc6d9f841d5218

    SHA512

    1bd14ad99ac6d6ef05945104a1213e73a4c0f63a60b3d44a0057064465662f818b660faeaa6ceb450ef291ea5200311db2322cc6a7ee26e5d47b6816e8b5cd98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    79189ab02d482d6cb75006a75674826b

    SHA1

    c1d2216d3aa7c5a0ef577287de7ddfb39cb31a1f

    SHA256

    f9879d3084e407ccbba3ab3e4c0505c5b764a584f90b76f644bf564f503773bf

    SHA512

    77f074e1fc882a880fb0a5045125bfad48838c92c6f22121b28d9c759adeaea28b36d694951b4c95beb1951dda3eec24230bfdad6f015762b5a21a17e9de2f3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bfe46b1d0248fcffdcdd35b43bd81d8c

    SHA1

    11c1c291b18cc83825b2ba7264d75d216ad97cbd

    SHA256

    2943a4a626b803c52692749a057a8f238c9b5408a5bc492fdb3d8ebedb4009ff

    SHA512

    e45cf06e78c8e48b1ce1f1bfdc14b0960e437a2b09784e7b4b798bb1607ed4b23dbc793a0943a980d57ee195acdf4753436498e53387be471047464b22765686

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f09d85ffd0a7dd314b78edc658631a33

    SHA1

    647b69cf5244506e81fc301880b95099e085cf14

    SHA256

    185508356a9da40a7297b129c04354d04e3c03ef69a211be63e07fb493d4bc7a

    SHA512

    05343f64054a0d67ba731bbfa19349d1378424d0e70a5a62c5b4e2a097686a54a6a6a583c69a8d83730d44fdcedb1f2d128f3ce883176af8af9ca83b5f64fa00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    106a9b88440e9cf74a0a307f99383184

    SHA1

    f1350680f6243b91ef08dea77315eb73f03c5eb6

    SHA256

    a7485adc37b900174fc32b30f004fb12c816ed51f739be7c928245a517899835

    SHA512

    2c24f9d544d88465b8380341943a5861b185758c320e6aa36c314cbdcf97aa690c4b0a964a6b96185500c710bc8cbc3bc95df1cf89bd4e6d0d50c32ccfb049c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    041485c7cce635d924fcf4792b0dcb7d

    SHA1

    3e068b57b77a82ede67d0e4c6d1f8346afb111d3

    SHA256

    5b01629d3f51e1681268787f6ba34d2a11afb55f6cddd28030823bc9b4dcbf18

    SHA512

    d242970958a29d0cffe2741782c9057ac54620e5ab7066b9b6c819ef4e48243364996e8e74f4598d0d6dd278ec84086b95051cfff77bab166b8c985bc38f402c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1226f2a16853677173b7b8351122e044

    SHA1

    cf69c61650cee1306ec79ac62715c4f4d1f34668

    SHA256

    92ed87996561977affff45a9eec975ea63073c804fcc1b75cf35da153da95991

    SHA512

    f3851164b46670058d5bf4e6f24693e51fbf3ee0268b48e94dcdf0ea8cefd6c9aa129213766e0b9420d97224a9b99acdcf5aa46cbd7309ef651c252d714ca142

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e568211fe909d13aec94d6ce3f92b77c

    SHA1

    5799a59d730d414739a51d3f3f4861d233028604

    SHA256

    6f82c169db2b79989b4db3e7814b7f9b4d801c5ec6faca33fbc3d50fa221988b

    SHA512

    297ee69e4ec0b178a4abb1617fabec7b88fb82d3d563baebffa349dccd67172414ddf6cfe9c5ae8b04b26ff72b3504de13c05c80ec35016fa74df5da01885ee6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    227ebfc99249ffc1085c110cc7f471d7

    SHA1

    71c978142fb8382045db7b45f6af22b3f3d58cfc

    SHA256

    6729c69034caf396bea8ff1eb7cfb12ade0b66ae58f42c5dff79eb1f53ec382a

    SHA512

    385111b1befe90ddc2bd940342df7315962c4c719f1537dae4891c4d057775fce501d52b7e00b7e2f6b9003e7a1340620be555de61075271a7cd622c3dcffbaa

  • C:\Users\Admin\AppData\Local\Temp\CabC8CD.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD58D.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b