Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    29/08/2024, 02:35

General

  • Target

    c81549b7c7d61ac399825988198a6b0b_JaffaCakes118.html

  • Size

    9KB

  • MD5

    c81549b7c7d61ac399825988198a6b0b

  • SHA1

    1cb1b56a211ff9a6c5311d1dd744b3dc174065e8

  • SHA256

    35b60c4f3245b036e62c4fbf3c1935ed6364e9b70e32e5b9553e1c3d3715a0b7

  • SHA512

    96a0166c59ce54951c64fea4d4b3d1ebc4aa0b5a56b5f68e7e005034ae1a722c6cf1deb63d761217d62b3e6a126bff99ded75eb7d5e906617b5fabf100ea5bc7

  • SSDEEP

    192:TiL4VXHf5ziim+ue6yMNr5ZXhfF4Vjjb0iJ3X+ZoQq9iP2L1OMKjY7D:TikVRC+ue6yMN9PCVjjb0LeROMAYX

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c81549b7c7d61ac399825988198a6b0b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1776
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1776 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2332

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    3552914eccfaa77e52cf84f52f92a5a0

    SHA1

    ba34946428dface3701ce5f60c9592c6edba998f

    SHA256

    ec4c99b6323478c907302aa472ad54bde6036adcb5489a319fc5653aea4ac266

    SHA512

    0b30e678156759327640965a88ad411560a39fa7f5e2da0d52c266505d72d704287394d7c23b0359523ecfe4105e27b5f821f7403ad2fb45e096deced2620cc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec0151a17282e7c3d3ae68279027a274

    SHA1

    dfc0a0eabd19dd5fa3122902879b6458b38b858f

    SHA256

    5d2574602a113959c0c96accb2a96b08235b9d79c9ef00d36fbc5fea52110241

    SHA512

    1a865f21ffe00f9ec508a52934edcfee3210a02f9df259b31032052eff5a134afe17300f529f82a6a577e2d107c8a49b2bb799ec7fbd6564c26c50976c22ae11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6d554a1bfc7acc4563c8885188f9659

    SHA1

    ab1038cb39a36d2cc841a58bd4f6ecf7a2ff43b5

    SHA256

    904acb0c053fd0144e9be82d0519d109ff48dea5f0d028d949908cbff2e8bc65

    SHA512

    a890419a7e7ab9df06b2f457ac9c4d3ffcc0fc67e564f5c5ca47495c5989095bbf7415b395df05d8ccb802afa820919351e23916a992c02db17ef155284f7eee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1bf2a3f27a77c37b5c8acb3ca9f0164

    SHA1

    b45064729b2e5fd329bad1e3af770bff46ac6a35

    SHA256

    2545f4b50f92e8d487c9df7d3c9564771f449610f0251c7de10d8f28ef81aa35

    SHA512

    5ba5884cfe1856e47e1d9042e929bbdc4117993449d79078c0f97ecd89e9e483eca331abfe44e6c107fade4425817c5d4f8009ec7e40e9cea466788cd4d91daf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fcf5ee3212ef8bc5a081e8ff43c18eb0

    SHA1

    5c5aa768a41ba28e4e0030f2b61982ba1ae7f345

    SHA256

    8b3f8e12948e75aece1b69c6e56754ca0b139cf3bb3b38f1e8848d6c70d5241a

    SHA512

    910952ec1d08bd07dfb03bc9197a9645f3262876e88414e16bc5a96ff9c9be8dad2967ab9307f679398378eaf58f954597db76805b5efda7db1663e835d5823b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    365600cb6a7130f00f758a6fae5f7242

    SHA1

    5147e86258fc5075878d43493997c6490eb5fa3e

    SHA256

    888902db40bc4ea5041a780476c595dd4dbe8f282ba2515a437c5e958fd63248

    SHA512

    fb304edd120409f7ec93ac1e73fb248dff30e479910032ee7486f3afdea4f99feb6eb8cf2cdaaf41306bac371d5d55e198b848dfd23236825237e2788b8ba274

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b92cd52eeb38d84d688e380e59ecf7e8

    SHA1

    046205e422f27422ca1de1404523b17af90bf1e9

    SHA256

    1490b52c18727f6413107c62348360af55f8d1fa8ed7b32fe1159aa8ee075e5c

    SHA512

    9e668f96d368d3207158e943876f688697e99f3fc816eaea73739d03ad0aeb86a820eee66682ee8d790f36862bbee4038228cd629c41e7e19c62e2cb4c594d12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4f426a49dda0849d472e088720171cb4

    SHA1

    5f1a7a1362b2c1119cbacb829cca7da8ed3b4835

    SHA256

    e159b4ba3d70a2e7e5ea3b6ba093f26bc4ff0b602c5bd66ab9a764756ff1012d

    SHA512

    dd4ee51acfffef30dd1ee5927d0e93f526c98f1966c324a2191a64bee622f6881783ccc35224c2f51374b7c6b690a51d3ed8d8dd7251fe29c61e63213e373e1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cbb029e8f90a6dcf72793b526cce5254

    SHA1

    903e995a9ef9063332500db3e6dd6782cb1c0b59

    SHA256

    5b6245f32babe16d18d672d61fc8a23b2e840fd36c7663288cfed1e673ba20d2

    SHA512

    c8c5704cd2271838b117596d0b0f2ff2fbb4707a8b89d2c583264be27bd53d9fb01c417081120a17d2d7bced90a2e9ebc5ee32f16a06d3d7feaf32d948266d23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8f8f8f4ca86d1c3a3e4f2c42d8513539

    SHA1

    ff73e2d83cf2d4c2b6ce9cdbf8f3341813d0bbb2

    SHA256

    39e632fb2833ba17f0035936378898fd1903d871f137e3bbc8747aa67d283c08

    SHA512

    862067238520c94eff7cdcf920e3437f14e734cfa2e3fd861eea541ca5249d364163ffc71c116b25c6c45e6997920582ea135e84f5ec91d951d480b989bc762b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c893297bf73ab9c11f5ceef6b00e6d52

    SHA1

    4f90a24a0ea783fd0885c4157e7d5b024f294106

    SHA256

    d6c23af5ede03b265206ef2120aed5fb1015d5bce91a6d6eba49f3553f5c9a7d

    SHA512

    02d179efa4cfedeac840d3ca7e413166d7a909c33763099dd1f6c899df43fc3523bececc9694def3412a9a8f60a1fdcba1d6721c7744456b603c4cf7c9532e15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    39e6f03e2ae50b969c9c14468adc0e07

    SHA1

    711a2298d2be96a3984eab87da439bfa3d8ef132

    SHA256

    d0e5ccfe2420169ce5816f9525fa083e137a10dd1827a969c0a5d2987c97056b

    SHA512

    3d6de16fa4cf4069fc68f4e63da405566e263e15eae56c1272d535b9b27dd82f077c61b483408c4ef69e5c58afea1004d121de3b4c91d8cf33124e4cb8545ab5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be1b919d716ceccb519cfcdca4216544

    SHA1

    7e87e37f31990c63bca4400f28920348682807d6

    SHA256

    3815b3640c08e1c6859abc4143ec24ec47acaad15dcf0eb4d88c6bf8bfb7c051

    SHA512

    38a3c0fd1c372acc847131c561236fda7ba4fabf9236d85bbc380ac89f559d2bb95d702eda9fb5e301cc05a34f0689abc4731d9178b5907d164ea888bbff80cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    184603156d4348d374e0b41629b88e48

    SHA1

    a28c64b1eb3e47f3430f40a00c2c2bc6c1ed95a2

    SHA256

    11b6183fb4ffe9ca587df184f2784f0216ecb9a0e395f36ee7eb44b8b8701aac

    SHA512

    3ad3443b2da4a8cfc64599159c693c05e7b903686a493971d8470b8d99a9c9c158e6e1829151f298ca0aabb76c24920897ec9d82a013acc95df64d180be98ca7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f3c0c89cc3f3a35d8f193d5ed85521b

    SHA1

    df20d457238c5a34b6e2497f0561a2b2c1507a1c

    SHA256

    115a706eec5da69b6f8732ff1b27f8145792b45fe47fd2ceda85d0ab8e1f2c61

    SHA512

    01539b93b1b0a5ca8b52551100dc312f7f55f707b6e2f558542b5d7aab1c1513bdb55adfe1ddbdec4dbe5234f79247868630e92bc11cff9fe401cf522565f770

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9864671502b253f20859173a1ba37e51

    SHA1

    f164659921809cd05a67a1afa7d9679471bc903d

    SHA256

    ce5ce0f427a35851a233ec85e4582bf0f20e6346e080febee99da763ebeae13f

    SHA512

    98751021df2f5fed4908e1a57e16732740d7fb16004949c6a707ba6d16df1de32aa78fd125810368d4ea2f62b2b32e09c0fbeba432cd8268318cdfee8526c675

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d6cbd9a775a92dede8d9dbf06cff5e1

    SHA1

    1539ccb77f1e55ae88d12c211be18b69141d7bf5

    SHA256

    bdd933edabb30a436bb452b64f13131d0574a06425d86f0b19e43e471100456b

    SHA512

    d31cd74b91285b9f345eaddac5207f0b66b55fd5ab2d46ec58fdea1c9e59c40e32d96eb65238f1d5de942ef11c56e188a0e6e312a6ca133183929c435bfec007

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6259fade4ae5c12600929bfeb9c635ff

    SHA1

    dbd96d16efb9547e8a4b7a0bbbeeb9c7c4f15528

    SHA256

    72539315f3f8bec3aca9bd20d49f4e69b4fca88711584f24af5899b61a2e87ca

    SHA512

    97a0727b4d66eb8763f750d18425d816f4db57d5cbf270d240bdb2832da97725dbc75d64a11e6dab12b88033a5268069291b4ef00a80a10c87f7166cdb105598

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a8766a48de6bde963ae3fedc47e8ca9b

    SHA1

    03ef73dcd48bae0035d9837c8dd1272c1562cc59

    SHA256

    224da208e0bb939854260eb00be87b7baeec366cd3a5ed5177280dd79812eb1e

    SHA512

    05a7748a06ee89cc713f7c28200177ab482a5b6fb0471554a72a75a8dfdc6bc601ec0fd21d3e62e72f92e0b35f98d2692fbbac56f46d9a0e600bfee8450b15c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b970eb611babccd725b1c9d06dbf9922

    SHA1

    89e371703edec8747564c8b40f82974fe9212272

    SHA256

    879fd1d041e7372455c77beaaa414a900126ae642dfcc67ebc8e49daa07741d3

    SHA512

    6b908e431eaec47ad163c90555e26edec6c21656c1acfb40ca408247a5ec91d16d335859e2e8daef981f0a5564311cd06bade908ca8dbd798a1ac38e9e986fe2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    891a90c19079fbcbedd2edd1d6c2d915

    SHA1

    723cf438434df0686e55d0f6382faa064d8b1f71

    SHA256

    44663901175d13893f742216610eb691235573ab550f3cf70a656c85a7d934e0

    SHA512

    b4b5cb97f488e1959c8c8e9aca1b6b6fbdbe7d8ece879eac60248c8c6061171d0fb510d9243d787f4192c619a6d2a02bc5cc9fb53b3f73c67ae1ca65a28897f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d3290946510619ff0a4bf0bc353e05c

    SHA1

    cce92e4d4bc4fdb6f04645b270df3ef1b5002469

    SHA256

    78feeb0d0abd7d0e613f4ddd77e744f988f359309b8b42f9452fd6afa9ef1474

    SHA512

    f8ee0d6c05a411409a8c7669cf900526012aa0423aa444fe821beb9af3bf4513d9bcd873412bad2a6dc2c323c76f5df50f0d4d7ffb50a9df4b3f015808fd946b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    8e8e595ca1c39fcec5e75906a67788ff

    SHA1

    ff458f3c38b38f7a86f84689d0b82b3b0b60830e

    SHA256

    99459f4a5c6518a3977410881ab82b2aab1b625b1de69b301fa0a8ee2185460a

    SHA512

    1f918ff9eaab1f259b3394160012bc9739f6aa980c8b016832a270d216343ffa8285071469116cc3125a9cd909d7ea7747b877daaaeb657d9bf399f42719b084

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z2D3H3V6\css[1].css

    Filesize

    183B

    MD5

    1328216cd70f3c45c9fb30472f0ef75e

    SHA1

    b21e74af0cf032ff739dd09071ee89b304a01c99

    SHA256

    730b78bbac71742a930c5209a99ccaf0426d2a0efe14ddf556f4a37632237508

    SHA512

    de6c11de26a2674f49bf5465fa2ff06e263b72c01498e29e66b9cc5e7a2a5c9fbb8a2e126d2006b1a92dfe210cf169274ee9ba8afcbb516c1f669911d625edbd

  • C:\Users\Admin\AppData\Local\Temp\CabD693.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD695.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b