Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    127s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    29/08/2024, 03:57

General

  • Target

    c830f879c0cfe0d5b102c337f5fbe407_JaffaCakes118.html

  • Size

    27KB

  • MD5

    c830f879c0cfe0d5b102c337f5fbe407

  • SHA1

    26d5b6b0e2a72290826c7086544bef600a7cb0bf

  • SHA256

    1966385ca640beb6508f4d406c9d584fdf152ff8f368da26482bb7b43baf86aa

  • SHA512

    56de6cb4813a32777ad41f60d5008bc12f0e58b50db6070c792bdcc3647cabfa97bd8c649663703b5d5bd35fd5dd5f8fc1c0af41c51cb272f5028f8a68d980cb

  • SSDEEP

    384:eyYonxuG4xM3+3veujhx4LTN60cQQuIfcSOFeWoB0mJNBKKX:lY3veikLs0cQQff6mJNfX

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c830f879c0cfe0d5b102c337f5fbe407_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:480
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:480 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2596

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    4358ba61115d459a395d14137b610eab

    SHA1

    9ddb66c93fe1ac975e54e20c65b83c75b5cd3fb2

    SHA256

    253e0a0e5fad22c5ffbc14f7fc819f2b8b08c0a27bebf19eaaf00a611ad44469

    SHA512

    97605a0a295f62123ac6c9a9f6023b3b0ab12daab14c9504115577b1fee7d43fb15662c84a7c85dbd42bb2edc52856008eac653ec01749c32b0284c5173dbc43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f4e28f12468bc49db8a5ea510ea94d12

    SHA1

    94cafcb1a0b98393fc98100ee58ded16b5586a0e

    SHA256

    6b98ff36d332e65879296191e4ce205d8a06291ee3f870d99d8f69d8331e26eb

    SHA512

    1e0ac152e29d7618e307b038c51c7ec4bfbe10464ede1589923a13b182b8c975e7f81d82172570124f50d7de2aa9ec9bb91c37dfabd14d435e000dfc80369615

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a8825dbe9459da3b111cac8a83ebc563

    SHA1

    6e89a674c8676733bab18b690266fe0b035858cc

    SHA256

    fd17d2004c699d7c9818fcabc37b140ef981a6130943a8df95bad7d5095afed3

    SHA512

    9f2d0525fabb004f44d2c7ebfc4f5f58cf4b43c6e6d0e8f5f0d903ae514be06281e48068ebff9aac0c5c73660eb5b3db18ed0c92af4cc0195009e795b2bbbc39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c40b9b2ef34c1f5867f628f7235858f4

    SHA1

    ec0d031bf18d4a9b787253ad5f3ce5cdbc15e6fb

    SHA256

    401fec6e9c79a7e42703ded6bf771ce02379324726a9930c945fd604280e5eae

    SHA512

    2f3dfeabf539d1b821447073be2beb7362331ef484245bd11e0fbef91d2028aaee0d98d27ee07c8ca05752ada874b4f7f249e620d423568171bc49bf23e0a573

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f0a5c9be8b334b15fcd6bca17420008

    SHA1

    a948281b9d5169091c9de4a037799a63706985bc

    SHA256

    5a35f3f2f64394138e99c590ec301ce3f3e8349df3be19ece1793c6dd400005b

    SHA512

    5aa6d05144f3c50325b67fc5718ce57e0adf1259c61f24c531008a0ce87bfaf3374ff6a82365e2f562a57cf35612eed7bff5ebec1dc96cb9fd8d213fe23eed33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    16e019f0286a2afc2561038415e50466

    SHA1

    32e8e48b4d4461e9df839052b1c8ea9a63840029

    SHA256

    fb073c84b1bc726bd66097afa8babe20294a199334f3e75253df164486ca7f9c

    SHA512

    bde2962ceca8f982345a030e92f6cbec7d5ba9e50b2c701dfb847cd12790fa870f9d9139f6889bbe5d74a7449c6e49f08f0e5034e2034959daa3bba3c3e6ff47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b17fae354791834ead6a88ab753130cf

    SHA1

    d8ab3a16c2c1395ae467274961b816ff1f7500e1

    SHA256

    c548270862bf6295839db303b9b825638d7fce0a424ac7d9a0a9c745b3443994

    SHA512

    a9276084ed7d5c8dbef8e799d36383843506c530a2d8516f2371bd048802cfeef4a24b27ed12731b47060328d3483e6d4e3a10eedc21715824c21b8015fa100e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a20fcc0b141a98822c65019c6a1246a3

    SHA1

    4188c63cdb1142b53baefff3dcf7315fbfb16f05

    SHA256

    53cfdfdb9062aeaceb9e9b0498d8b5ecdaa0d5b1df48ddb3e840627f12d47722

    SHA512

    130011a1028a95bc3089a3bab37a46d3315d4467735d314bd13585c1fb21aa137655918674b9fd26d42491faed5e89e95e73447b1fcacc13f3765a781f1b79eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    486b3af5b53136afd15c963bca377ff2

    SHA1

    e67df705a8b1a03cedec54357b28493232e14105

    SHA256

    79e151a0d84211451f2dd8ca739924a09ea1467388aa50deb8ea627463f225a5

    SHA512

    63821b389d202fc06ee5ca0290cb12cc3ca336e0991313292320bd4987586f8fc640961cecf63586264325b32b1d7a294fc998b867c5ab761cffaccd59e7d82c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df9a022485feccf4a231660a851aa252

    SHA1

    eb3fdd2f59d38c3cd5f9bd8655684c3ceb042a7f

    SHA256

    796c6b3b48226eedc4215f6ef0b9c9665d74d98ea50a0e30ba1ee3ce01f6ecc1

    SHA512

    c0cf6ca72d70730b60ce81dcfaf723b6aad17fcd902e4624afd1bf02ea405114e4869734d3a39a30b64896c879f529729715c3a360f5fd3b45e3ef9361741f09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6377b1f6c53961e6aa2505dca28516dc

    SHA1

    65f107190a72ae9f07a05958eaf2c36fd16dceb2

    SHA256

    ac81bc75d2218a4e63e02b68bdf032a9963737b91ba175a99dc03fe8fd954d77

    SHA512

    09abe13af22dabf36063a55c412ca0d9cccdd05d1115e50ea28d36cd2672acdabbef50743b47fb89fefd79b7aa57640b3d8328a230a907c1478a8f2e9a3e9812

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6282fad7546289bc081bdd9d8c04dd21

    SHA1

    bd136ce633fb9cb85bca6b8b4c3830634ffd292b

    SHA256

    764fe8a672261240729059b59b20d0e2f27384b3152f891155fc32f35b757026

    SHA512

    e8d987194e6c5b3f534a29abe785a5344ee8e9404dba0be2e07530c666fb51552319ed278505e5e7fb007d6d98520cae880f76a0ab29c136f638f678ca9eb63c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ccd1946e97c7ec510bee865aa6a94f7c

    SHA1

    6be87c073a3749e2c503f4a5292ca1dbc77381ff

    SHA256

    ea3f8bfd1f46a7d3f3db46ca3ae5a44e4f410c824c9293bcf177f54c5ff9e672

    SHA512

    ca771bbfdf13677f7e19d8de625ca40122bc2c76c939fbd7bd80f4f4bbbde883e6a3dbf010c16c2031a1c9a4d877d898a7778c26d8f09efced43c90b9f4990fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a003dbb1f873a13d9cfbbcb05439700

    SHA1

    fafffa866a96f260dc34b5067d44cc736ad70cee

    SHA256

    f3df20c6f706a361d81fc0c747f1ac50da18c454bbfe25101207f6eb6d6a7927

    SHA512

    4d2d9bf14994886d6c851d0dae5531af8af198e4eda93075aa75f1dc759887d92fa5aa7763856d08450735b4b5ad6c3adbe59099c4985cd205f56e13b74b4a67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0bcf2e3b888edf9665b08c2077bd6e3a

    SHA1

    7c7378579c2a6b066419c2b697e3789920df9323

    SHA256

    8570e80359c2639137d5ff6329ac4878ded113447f2603450457b42b63f0e155

    SHA512

    2ba3aed1baae8e30157aad7f75c231d473ccdc6c7f9694c723cf896262639a94e6a81da82b067e93ff8a042533a1722e8d0c0e76dd8a90e952e1f1e53afe4d04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d49938067bc4a180eb7604a8f74fa8f3

    SHA1

    78ccfefc568c88e6f7a97c88324c856785dac112

    SHA256

    aefc63c6c58b2a4393b83ce068d17b2bdde940895b0aa8fc67baac7b5ee00744

    SHA512

    530960b6d244b6d2be0e9662180e842d53a2a70c84c97d674daa3d4b8ae51ec7833d7d38f205a5dc47d755d8c9897579719a06a9aea54a50e847a3557eaaf171

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad9a675e57207e66d3b7f5b5bf42d29f

    SHA1

    4b0492a857da138c3202ba0fdfaa2ac1041a1f82

    SHA256

    e04c2e781b3d5247ec4834ce03ab4bba7b6bb0da2daec0827a9916303e4cbe95

    SHA512

    cf1330c1c330b3e69cd954ad8665d660ab2cb322d809843d1b9017b68edd520096fe256fe68dbe83d5e91013b9e0165113539e4533e95c7baf6d6b144e27be01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c8cfc6a10b50f26168bcaf03d5f981e2

    SHA1

    ff39dc4a2f867a3e0594636033d7fc2a20db651b

    SHA256

    d5b25db85ed61ec98a1db78c1fd7fb95384f4c131ad101e66c469e79039aa63a

    SHA512

    98278675020f10d01a3eac1a8d55913c839d03c447a881d91033324fbbea0d587aa39c6741d778d9c42be4f5bd39f29590f228859b18d08eebd2ffe727301e0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d06dc19ae7ca26de4b4ed5d41050172a

    SHA1

    9e3b11941ef98d0ab2d076e34f09da763ad6f051

    SHA256

    296c3cdce226b27b008e27aef799689298a17dbb076dd435bc740d671157a639

    SHA512

    07d273e78cd262cf7b9b8c7240d4212cf701d405449e42086612eab12198e27c9d77a15bd244f4bb652c515396f554a63270ee797583bfef31bb386a6704c9a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f026e6fe7ab34a95e9a74a1dfd90b5c

    SHA1

    6e72b99971865335ef80af0d6648dccabcd7c313

    SHA256

    855632601c357fef4b57860278f38ab509af2badba8e468fae791a87f0355ecb

    SHA512

    b0bc931a88eb23c42fb6d064fd43040c2729af274b9936a885fe49f864678d3dde4205e364896bd98fa92263af7cae6106eb0dc2656382474a2317a3ef67fc52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fec0e6df4164b19cd85b2042091ca588

    SHA1

    a090064fd1593bab12ff8a21697ff004577462a8

    SHA256

    51512d101812ef0edfe006da75e66b12c29754496b87a6be70dc9c5afda8ddaf

    SHA512

    bcead7db6910e1fbe67a383ec930314478aa36d3433319b3a8daee613a8ae08a0b15c2e5fdee94f95fc803180ab29ff71e22ac183bdd26dda6dea1942343888a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    948b49baf8b02c82bb2ee57889e9b270

    SHA1

    585277bf0ef869bcccdcbcef012cff4674862203

    SHA256

    b21b6b7d904b54dcd999eb9d823855b4815d66674d971dffaea73790796fca4f

    SHA512

    f8d4eac7975bffc640f87dd41b55e44c4c7f1a3427263562faa590500c192d922e6e0ba7cee2e065650245f2906ced9788e34a8d7cc0ef1343ef205f106fd6ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8d808d964a780ebe679bb5c0f09faa4

    SHA1

    58ea8eec355241917ed7d2a34d94d7afa663de3a

    SHA256

    8323612decf89fc5d5238fd20a99ca36dacd799cb240cd410ba1718d513eb7c2

    SHA512

    78048211fbeb7bf6ad7cedadb481f22cd4d28752ec829d1b8c32cb454fc424d32127b3e93971be2bae5b38e0945d99a56a46ccb9d0a4314f0c2fa5ed865ad409

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c9ffb42757a1e11902eebe2dcda6b8f0

    SHA1

    540baa50c5f4524edc1b94e09433f0d1275ff90c

    SHA256

    5f21a956e6265adb8831be41f966cb699666d1e0fe471de77f7afe50112e7b48

    SHA512

    46f109ffdd32414392550eeb4c19927536444b5de3fca22d788551fa3d0bfdee30b2ecc29c122f7fdd7318fa491e59145460d088a14163764c53312f51f9ecad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    538f67bde76fa54882c0c27b6ea36394

    SHA1

    4d6f758ea03b0f6870265e9fc87db39f8e0639f9

    SHA256

    b59a601884211e500947cac65ee047ed3d01a4320beed2a5864ec4a64c427973

    SHA512

    8f758c9ab9a22106c7c1f7584dd0fc22bf7c4f40302d94f91d2659cbda7b297bfc19ae9572a3b24e636a9f2feb15dfa88a5e04ddae20ac1a5026c32882453dc4

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GA43GQEJ\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    9e5f0b21584389dc1c7b5da4a900879f

    SHA1

    191b84e0f5644398ba99e0aa141a6778c14b83bf

    SHA256

    3e21bdafa913fa25276358db1269238db3012ffd8748626cdad442f838e890e3

    SHA512

    c1720a420df680bcc46625355ed6d5c35ae280a813692a0fa293f3ba113a023808a781f1b8c9dfeb3ffba29606e1f4bb4be4233983089602e2d2c20786fb0427

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M7H6XY0V\1380534674-postmessagerelay[1].js

    Filesize

    10KB

    MD5

    c1d4d816ecb8889abf691542c9c69f6a

    SHA1

    27907b46be6f9fe5886a75ee3c97f020f8365e20

    SHA256

    01a956fa0b3ea8cb90d7032608512bc289c4170bf92759352e40062d5be2946f

    SHA512

    f534f057e46998bd1ff2c423ad2cf04a880c4a5259e95aee5c6ae34ce7121ccd07ad1bce5d4c3a51ad04f7411b0625da78808326b13d2aeefec502988e113113

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VCY0HBA7\cb=gapi[3].js

    Filesize

    67KB

    MD5

    ed72d618fe48f6fc42c19a4b58511e72

    SHA1

    80a2da4af91d56ec81c7b672afaaaa72c83a4414

    SHA256

    5bfd37a756bc7772aa6c520102870dafe2d3b808c562412e30f122a7908f8ad0

    SHA512

    5378b71a33f67309f788b9fce32daea44051e7e9a6aa326bdd783456ee9eb2f4817aec2ad1e837afc1853acba59080b0114d32c040ea731ebd703f0a84dd7ae1

  • C:\Users\Admin\AppData\Local\Temp\CabD2AC.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD31C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b