Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    29/08/2024, 12:18

General

  • Target

    c8cdda1da5bba409b3033c5b71969de4_JaffaCakes118.html

  • Size

    98KB

  • MD5

    c8cdda1da5bba409b3033c5b71969de4

  • SHA1

    5b4f3af82472f7ad20649dbd994c2b4d48909749

  • SHA256

    80c4daf80b6c7f440bb0f4fe3224a76eb848af0043252ada980d3f5cf6db2c2d

  • SHA512

    0003d9a40739ba5420a56a3cbf2f1750837c5689831ba5536369c547e003e9ec670fe2f17fbdead6e5a4f2502ccc9e8a976c64a694da30603096ef4865d915e3

  • SSDEEP

    3072:cqG3sG+dgJwEKkJNxX5s2mFZJ3z67J7HJsBJ1rgA4MUTBPFdkyakValzo2Jmapst:GsG+dgJwE/PsIygA4MUTv

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c8cdda1da5bba409b3033c5b71969de4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2092
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2092 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:1740

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    20e09a0d7eae8b1295e206cab2558e6c

    SHA1

    5cf3f40512290eb303e78fb891a07f366d99657f

    SHA256

    56880350456c153de18aa44e53d17144416c9eda564f98cddd768f5ed8d451f2

    SHA512

    9221051cae7c966b0eaba8ffe7811a4b3900afdd1774ced456510698fd8843cd36d22c169029854b52d9789eca4193c39d894922c3ba10cb3d78274a5d8f819d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    87b368ed495316eb1b8740176dd52594

    SHA1

    1240bef05722b4a7532e2ad7781461dea3739196

    SHA256

    2865f9bb970b05062c64c9514a528f2bff6c34d3bac96a3822731197b3840247

    SHA512

    ff58e9ba3c3b1eab456cdf572e31287f692f1fd02e8ff4431c80d934ce74959bb9829e64f39e1e7a9adb270b3d8f9cc30698af2f024673f913fae1da423610d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7b38f6ea159b3529f1d3a2146897954e

    SHA1

    ff57df0a2890382703d26a7256f2a12b2b649502

    SHA256

    44ab7fd164ee2d64bce946ab9a5f54819df36f14eab6469e937daac6054b6d2a

    SHA512

    ed96b3ec26ead6f76dc947a1e80d3a1c662f6d5f608bc8934e95e371d5c4d92d2e5d4dea64e18f26c4a17d9dd2d64d6013bcd0096147bf647d5abce9e7be9c91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a52c2a7eea636b38f25a65cb821b4a54

    SHA1

    69af28dfeeaeedfebad68c18aa210469a6fbf6f0

    SHA256

    3ca151b23ae317d118958cf02ef4450ac52f1ab359e4a3983237303f7373e75b

    SHA512

    a6bd1f2662a0baac688a112acf860a7bac0d87f8efc6fbb50d0121051d5338f06172f6e21551c5193aca88074cc344dae35ffa96fd9faba531e71fa59226e15c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ee8dfc21b97163d3ac1555aa16f259f0

    SHA1

    209affbc27b2ca3e26fc5e1c7cdddfb7501d4ef1

    SHA256

    8e4b434c2494c75c7040e0ca98678b94715de82327ad51a4d2105220f86fa960

    SHA512

    2cd10f6046f7f0e02f7b4e7708269b2dea310ab86621860143151c7ab635cca748204711db1d95266c1fcc18496e631746e41cf3d31f6abd40659d39eed362cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    4debccfb68c8ad4341a5ad96ecd59366

    SHA1

    e37b1884adab2aa7dabe52ef32c7d85328dcc59e

    SHA256

    7646f1b802148e90bbe9fcce2bf93eecc487da00865e97df3ce1e8ae84ecbf53

    SHA512

    24da8b2f3386e78e8c729c9d888ac58bbf15f85ca521d5d9b371be2628cc61e3fec2c44d7536cb93ba953c745baa9d78acc201d4a7ec456d758acf5971516b97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    bd0cd121fb8195290c1204d561f607bc

    SHA1

    cc9a289f4d973eb345df56e72365c4648206a28b

    SHA256

    883cf37d6b7dad7baece7254aada279f81940c42dfc9a03366d2d53b5e821385

    SHA512

    cd8b047794af94fda5c071156f9212b6c5ee68ca457c99788d4d70fa245440383c2a1c6bd80d8d4bbd2de8de324b45193e4e76cb9a0f585535101326f592e0c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    0a011adb999d3d3f885318b3cf04bb6d

    SHA1

    5db3d6c0831ab641c6865b1014cf094728bb4326

    SHA256

    19098ace93e385f6eff902c1e1109f26ebbec8473366389cee9fbcb1979c9de8

    SHA512

    3e0a2b9fc90dfcb2309f0943fd2b490d29ef577b96a6978cbd5329c3360ca13c180c9ec430412c5634150ece1fc5b7cbace13f68daacd7533479f5e070827ab2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    988911056c9705bfe440cf15dc01e2bc

    SHA1

    0122df09d0f5d90a132d8ea557feef6ffd537f61

    SHA256

    85739a0d5321baaba06818a2f91254e0a622d2d389eb1fa1b3282f0e108ab7fd

    SHA512

    960d1f596c69a8d5420570f6ccaf3c9e4057f2e32bf510a40194629af4a45843298137ec780a03df3822682b7d7d5dbca5c462db2752b58a003e17afc4406f0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    50fcc2ac7a20a5c262afb1185218bbb7

    SHA1

    78388705da191541e6a9a33efff6e5bba0f8a17d

    SHA256

    a7e6550c6d6387faf15d76e29c5a905d6d97d1da4e154727bb9632e1e08d74e2

    SHA512

    6edafbd18ccd1f610d42f5a078779351442d4beb0b8d12699a33eda5d2121451b04206f1abd8a1c2391b5a4b0b127eb99e6802ae3b63297236c517530a0ffe48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    f77337aafc63432cc7b851108863274e

    SHA1

    3c6acd201ce221dfcb30a3750c294e4e47ab7a42

    SHA256

    6e33c2dc91b1a5a44ae66b98826c4bc665865c1cb42b0664d8a33312b08a124c

    SHA512

    4751935bfe64ce4db1fc8d56d5ab956af5ef6942046566f5f87967a2a885274e0f42dcd39cbbd7c1c1bbbc093f9845272ce9fd639bb07fbe73d896cfc4c24560

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e47f1ebf0036f631c575d39dc76a3e8b

    SHA1

    08636bbc62ca7db89785aa03013deb18afb6cb4b

    SHA256

    e43dc5b568ae99bb9efc148594358fb619bc4864cd7be24a520d072f0292ffe7

    SHA512

    fe484adc4d3bfe512818b2cde9725603a254fdf491388bf46b5ef4b4a0d30ad4d7c581ac87a649c76fcdb971bc8f8b147a63d7485ff123336cf406810d3eda06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    c3ed5b46bbf99e71111923c98ce36cda

    SHA1

    931c16e5e1cb341448cb1044b3a2b4990739e9bc

    SHA256

    ccb69efa336b4d05783fb3e43699948e2e174cb0ea965fe968cf8d53e9465a9d

    SHA512

    0cb12ecd9d437f3f44566331f8037c68bfa47b8a1c7c56fb26a1c934c29239a4d0167845df660c525d324288ad346b40de1f8a5ac30c9b1e0387ae06a303470b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    6ddb11ddfbbac1558b9dfe8f054a8004

    SHA1

    c8c50f130d1236b49a98dfeb919f528a94eb975b

    SHA256

    bce8ee1915fc24a569be281276a976eaf8728c5fbe2c8c861abb00d85ccaebe9

    SHA512

    7a3ad8a4a9c961bf69ba4069c11ea15f6eaf9c0f51f8316672c322c4773c9303acae5902d3804ab2ddacec57a58268761f346934d65fe9f596ff13b19bd24d22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a0abd180a46dd6a6b111f7a21a4ca1cb

    SHA1

    87409be037d4abc646f2cb031cdd5496ccc62c93

    SHA256

    c93d8f0f9544181fe1989b40fb4f5b21006086f723c58863ead55e551f5129a3

    SHA512

    2fa3f4a4b08596b997bc136906f2eafc4d972c6e7b55041dcf6659cddc902ce4f1540e2f3f4c1c3ab2680a762167b0e5f2e38eb63bc34d8a08c618ff3a0de29e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    507891f748303def44904a46d0b5d296

    SHA1

    2a5a97f3ad29666c21de68a2a2eb54cb6e911276

    SHA256

    55df8085b24a45f10886357cd0cb8ef762b6027bd201bfabba2c05f0f30822b2

    SHA512

    f61175cb9bc1a000a1d463f2e88194e6aa3e12eeee484c5bffd19fa136d37ef007e25eb03ea9faf50a7682e76c2412ab4efa2170184475cd8a53b3a528440529

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    c52c2a8638cbd878779567cbe4ea8724

    SHA1

    231c18cf084901b31ca875ec273be614a43b491b

    SHA256

    dc8b424c2648d5f0b292369614874cc8a3fb46c74df226e8a6a925c6125f483a

    SHA512

    2be85b387cade5c918c75cdad81843e3c5fe5ae9a0defe7a203141e8532d7e626d97584c48faf87f0c4d33fb029c0a11722ae51f2792ba41ae12425a3194aaee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    f6a6b0850d8788a3a65378cdf44b4052

    SHA1

    4be2024a2c8215612979998aa93c0c44971673a0

    SHA256

    866019bf66b1d235105f2d1f0d5b72726d45c373b404c65055d47ed47233cb93

    SHA512

    a038586d694611a748220e1155bd4b3234320429f9dcca664fc95c67d75c69c6389f271dd8e36ba753072cf66e9732dee6b549c1914daa18c6fdefb3fc11b71e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    0377c3fd2096a46fa848af61be95a315

    SHA1

    41d6a9c1f42dfd999e71024b965c2ec860efef4c

    SHA256

    8665ac760e83e28df9c64e9aa011bbb023d71358601356f4e616495ae3369902

    SHA512

    76eea83afce1041a13bfdb5ee397ee34b9f56c4a1d1bb8f9b13076051455f76fbbf4b0980a45e3703fcd108891566f5d18d792fb39d0304f57acf18e1c161f5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    999f9ba24d03cb4404158814cbbc905b

    SHA1

    cbd7f574341477acf489354d6c1678b42a942d73

    SHA256

    4a3196e93ee6e4868df2660d25f7152c71db39f5dfc4ee72ae6f7350d45f9990

    SHA512

    0831f6dcddb5e2ea095a1b63f2ae10a82e586a3b543ad1657ed3a05fc9cb5edba1ff67d0e4108974a3f858e7a7c0a748c26fb8d067077276887b49139fb0b137

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2c6ea48ff5d1693adf3e5f095aacaa04

    SHA1

    d1c2fc4a70c7973ffe300594a82c49afe90d8b26

    SHA256

    595e4bf9f969f5eca53202a8b2975f0575d18a77bbf825b1b96784b3528323ed

    SHA512

    7067af67a58d7111d8475a5e6de482cae2fb1948b329338130ffcdd1f800235e0cd2a0063543833a2b6823954a44b4957a6afb897e74b4f41a2986b98570fecc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5bab2cf28db653508f10c6e3d863cf82

    SHA1

    4e271c006ac1746b1b887cca34d39368e821a880

    SHA256

    2be7f588c375fb993c4cabbb5e04c4922763b943daa470de0aa7f0d2ff8092ff

    SHA512

    6014a680610969e16eefc0dab20e610eebd0eace7f9c5e74240bfff5ee1a1ebfc0288a847645c33550ab1763e561208e482c00b58441f404353abe0f95add16a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    088a4a90d064c83f6350b745c6861118

    SHA1

    655847e1b021755431ef50bc3ef34255b01a99dd

    SHA256

    44aaad836d18c6d52fbde3926cf38e7a46a6cc07d8652c4f6d4e567dbe0fc322

    SHA512

    1de7c316bead0f305b1d7e9fe618764e4c92e4ba0962ceef8bf8c07d25e8707ddfeb9d934f8587a3b7f6ae32fd00f058ac89bd15aebb2d7d3562433b42fd62d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    9ecee3fb830f7c1be014500823b2d1a0

    SHA1

    8fcc587078c0fb45bc5586f40151a47db08b1deb

    SHA256

    a399aa0a18ae0fe5a9177b22ac57e34737676ed63275cbfba9fb8ae24319ee0b

    SHA512

    5eafe49273e6a9bf1fdef6033d22e95f64d23d4b191f106553c55380e8c8f5c4a4796c8fb1c9ff747a96a9ecea21e77bdc326c534c63906381e128f37242fc7a

  • C:\Users\Admin\AppData\Local\Temp\CabD4FD.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD5DC.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b