Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    29/08/2024, 14:25

General

  • Target

    c900b724da3c8ddbc6a810b3c012661e_JaffaCakes118.html

  • Size

    75KB

  • MD5

    c900b724da3c8ddbc6a810b3c012661e

  • SHA1

    c64f92aeabc04426f663ba31b8ee1a522fb3a2d9

  • SHA256

    f9c39e8df004cde4b5dc174437b76aefbf577d4d80e5c0d20b7af31ea74d52af

  • SHA512

    f7f913afb214a89cb464bb69f6629f1057ffc9094bd1422b78ba2b0a01c40f1e0fe2148e050ac51def5df26f3f704a0742cf00b88da66acea63eb7dedd998c4e

  • SSDEEP

    768:h9+uuuLs9OG/J8mxZhcRCzA7iLrIb0BgB+enXki:h9+uuuLskWnxZhcRCzWWNBgB+enXki

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer Phishing Filter 1 TTPs 2 IoCs
  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c900b724da3c8ddbc6a810b3c012661e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer Phishing Filter
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1644
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1644 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1888

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\07CEF2F654E3ED6050FFC9B6EB844250_3F26ED5DE6B4E859CCCA6035ECB8D9CB

    Filesize

    2KB

    MD5

    16fd32cd45173aa030c40957568e96e0

    SHA1

    291b9a20f02ea7f0c4040421a6e56ca5fa80220b

    SHA256

    225f186746b5ebf51561be99426fb4e8ed49358e2dc695f09e6bd0cd94b6ff14

    SHA512

    0363b6c7d322088258c84506934bc67d97456c289937b51b49385d0e8751c965571a894a49fb11abbf29bae789a7ff3fb308d5796d289db633b589fca0f5a47b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E

    Filesize

    1KB

    MD5

    d9b552becd265f680e226411884f5a91

    SHA1

    b0751eb26df82809f5f1ff3fbe2d091df39ac910

    SHA256

    60a5a8b1aad109f01db7b21f3347aeebc69cc65140d0b5be53378f7eb556e01d

    SHA512

    19352cf5e213ead10a0b69ffb780e190c7525c82dbcff25258a0e5172212afb22cf17148dff864866a3a2e5413c1e479bc1a3fb8ee6fffdf9513130c1f15abd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    6af148e1128fc7e2aa9465493116658f

    SHA1

    d7505105f388c38d5d79ca2f1c5a3fa7a651645f

    SHA256

    5f65deb4e1c0562599b3d4f185c1732b776219e38903475f66fe276b150a9c4f

    SHA512

    8a0260cf4f74f02c6294e04def9f6c4dff194cd72204dceb2a3ea7c69bda115b4d80d2835463d94d3bed20420c06222a2315dd99b931d73c9d720f8411e4c159

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd3e6cd7990374e6672d2480b5f715e2

    SHA1

    f04ba09d9f11b82e0b35374817f379081559904b

    SHA256

    2fce81f5c0b601602afdd53627ee641135f2563ce2b428966913b0d5db072ad0

    SHA512

    7526c3dcfcb5103d4a56bef5292cf3b93470b5416bee93210926d6133699d575bc09c16749f17643f856ee3eeae79bbc819f9f429e290ba288720d9865d2b92a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    65d371f868967e38975c3dd2747eb0de

    SHA1

    8a1e03426d2b364e794382e9548668ab62b3a68e

    SHA256

    7ff02b31aa5bbc1c2598496579990cecb1bd00f2ef89745baae5d07390f07832

    SHA512

    6671730e1258864d86a7e6b3f587dae4b7acb2d100374d2cf6c1343ae50cd5bc1fcec16412313526385d94c5616b89be269ad2749a1d4654abad21adbc975622

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87ffe7ef96ac895444a408648179718e

    SHA1

    603b5eab6ea342fbb5cb148f4f69178e4874f838

    SHA256

    e5090d1ca3e1ac08e27ffebe4c70aa084776f3bed36c52bfc58244a26807ed79

    SHA512

    d782b26fc3ff05e5bd8e8d516082259b12f6d3425ff1358882dc1c44f000955e76fea47e041876faaa03db68c2e940c2bd13c7f7a3a4422e7f6b0876bdd90265

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0a0cf89dd496412d6551fb46ebca226

    SHA1

    6d5b8f40c4450c5492ee718331f8cb172f986b86

    SHA256

    0e0f3bae657b6f8237e782da965624694617bb8a198059f8bbd1ebdc0e54ae80

    SHA512

    71c09267473d39213731e8f24a658b17fcffbbf0f9adb7408b109a708ecd9fcdce1adc658e338c1c28e680e75051c7e777b9d862abd51f80e1a7e4c389e5af10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4df296a0d330ef250b92b1dda906842

    SHA1

    44b5c3e14d9d9fa27f60b3025e31469dfc75c6a5

    SHA256

    4687ba9e36c850b6f1629176e738a34049213369ac3bebaa08b7a7fd81184964

    SHA512

    fdf7311af1f1d1977e14ea71a835d3424a528872ed47e7a24477b42a88674f41a40b62af40f8801bc16ffdefd13016901ee46fc03e93ea55f54e0e156b4bbaf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c669d22f98d6dcc84ca819f73944faa5

    SHA1

    a868a37ca69a990cb26489dd16cad0e253422b68

    SHA256

    fed7f2d33d7eb555f5134015bc8b1d7f23a9fdae8e22f4239b22fd3cb514870c

    SHA512

    0d6db9c37952d805ebd8c17efb736b5bd8fc12dd00e876b658f2e19dded08407e3664d3a31db1b1cccc15b4f98dbd6e86bd436cf8ef988902a58a8eaa815e907

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5e21faa002f82f90bea74f82a527447

    SHA1

    fa29f1d9954235f577dbd6907820b9eba71ad1d9

    SHA256

    db89f604a3df441d36e426d281006021515b21561cc8a0c3086ee34d90312ed2

    SHA512

    690f22c26b1638db4b4ddf3b4406110b765b60b642f0ee025e6d6f2ce9c2bb094be093dac1e02bd76a51b3ef974dca1b8125cf487857bc9313fbd427d2934612

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cb12b17535ed734a884d0ed6a55a659c

    SHA1

    7694c6070d630650df14a34672fd1704f1cad37f

    SHA256

    9ce527bad641b406725a8498088c692397ba91403cb8c6573fa200b516454a87

    SHA512

    8e989063c21edabb7cc1c314c71b70b42b2d94c751cc2a16cff7a7f5d8f764a5b14cb91aa3d03eaa3f732c1b127ef9b36792670908372b5682d9569eee8661db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    145c4df38eb655af4ac35fab19103fba

    SHA1

    5d856d97a7e0cafaa01932b0bfb505823ad405a4

    SHA256

    66a6ac581cb1a1073fbf13d73f67df17a1f295a5485e7231d95fb1c8929a0306

    SHA512

    44bdec533e5bcd493366e892575061f65579632d68d59f1d453d78141e4913037a71e8f5eeb94b58a034bbd51daa85415fee9b98e3edf30f364569a59c8f1e81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    359e5a03c58ded5bc39cc7dc4e460645

    SHA1

    d111258cb6b5654e7361fdcda83572b98a78f800

    SHA256

    1ad47c204127255510cbc417fefa424626414f4271be69aa3040f091542fa570

    SHA512

    d3add16d78d78bbe8f8843be30ed0d1da6c39fd20ae72f3bb04a6e21dfd02df03d55803e213d002d44176109912abf7f63842ceb1a327a3c47c6e2b582949108

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ffcbd9353a3531938c8b8e6745b3e4b

    SHA1

    7e7bd038e3014996dc35b73d3e43a2062fe5e0d2

    SHA256

    d71eaa22248d670a21e49901f1062c92a8ddb922c31d7e2eac50b3d138806463

    SHA512

    1a92b27d3360e27631b163580254aa619677fe59ad9e3fa9ba41fca5ecc5506a2d46f41f2b96af45898c525df7975836c1fe27470b6ea71100d92d7df2070637

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    632fe9a39080d66dfd7022e7a7754780

    SHA1

    eccb2818ac3058dda2755fb68ab7d5f642117fde

    SHA256

    2c07fe491ee7eff144be5cdb8304f6f2f041b9e1c07b211df7c79b7278675a31

    SHA512

    d91162244c50140f49b8c4a3841b121f25733abc7e2b730bab2250d8d9139bee5acb2e28b4fe6b1915be8336a029242f283775be50ae699dafa70425c36c98e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b08042a5f6d7cb8d6de40f66a9b2827c

    SHA1

    ca45e842b8b453f0075dce33188bf131c1873dc4

    SHA256

    f6fbd87c7c591de7c209ea85d649f1e3dde2bce9b73130eb333e83daf735e236

    SHA512

    f74d66e5da509c30ce7dca89c4b04e7cde25cfd82d2f444ce79350bf99e45bc22239d2b17b9d06a28b124810a86a82e5cb174ed05184b680b183dba44ee814a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ed7e719de52e1e532c94c81299cb7a7

    SHA1

    5fb53466695f783fad4952543b9f84dc4e3939a6

    SHA256

    50f16f7bf4f13e2eda9770eeac7f24018a091d535d46f93a5fd87c45a2cbae12

    SHA512

    5d2dd9d3bdcfaf7579cce2e85204a2966665ed38efac798ac1d8a722d644e85c711c50d2fab54807cf78a44010fe8358adab4f898abef6c7a9e65b87740cc583

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ebb6b89186cad1c882ad4d12a9931b5

    SHA1

    4f4cd42fd74866d37f2da137e91ca44f9f9e250a

    SHA256

    e4809005b8172c243b033707d5e25ec025cd72decd13d9fdae504ff18c8b9408

    SHA512

    50c81d49919d963d56f53f741dca24ffee3063a2a610ab2b4836f1b6f93cbe9889892c520c42b7f872e8691c87665b21e381703a0515a9042620ff3d84e8ac28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ef2d88ccad3cc7bb94ee9ba4a3c8f76

    SHA1

    e52629699023272a61be63fbbc685dd53772bfe5

    SHA256

    e9e29daef2474ce012a2f48c703049b6e9ca1bae2777ceeacbd68b865eca36a9

    SHA512

    b95475c7caad983251b8cfbc66345c8458dc08151d34ad29e6741b0055f967bb9874901f94b38b11f36328aa6b412fd5af8cc23749d8eabc9030e4a4f7084dad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cbbca138610152926ad0e6e5a5469810

    SHA1

    36bbf187dcd2602ad88f630f3472ae7e20153a19

    SHA256

    09c54a89f791e7de5d0df5d3c51ceff6c65c3c176ba2c8660d9274c572c2b979

    SHA512

    e6c53af664a6358b089781f2d5fc1544da6bcd7134090dceb70278e55cd7f828826879e02a23a7aac1aa90f747971c938a35c3d5349651cd56cf84b7c1f31b6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba638d510948453197d551eb5abdc92c

    SHA1

    03c6bff12e9e72960e8a5e0f757ec90b91a666d1

    SHA256

    4d686bad3c9771a354837b67b2ac4b8fdd746080c7534d6fc5edc605f97b5cbc

    SHA512

    3fbcad9d5c5927273bb5a5e33a9c5e539df8400ee6ca183ae46bfba6e67fa917203db07baf694d851d7e35721826266c873a52600a502c4a67f751c0cc46d01f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ee04c6319bdeba49278703793fcdd19

    SHA1

    048ae2f5cae11f16aa46116fcfee9efbf1951f38

    SHA256

    4fe44febc9bf300d925e57589048d085eb40772e7b6b47e086b1e5552fbf450a

    SHA512

    b4061c1a50f30297e0b58bd6252f0c67020f31323683861fd2014e78a22e891cf46521e76efd4e8e87c1a5b3ae85fee865119db99993f3a2110d63c751332771

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3760e228aa81b238e9356f3758272ed0

    SHA1

    1ecaa6d0b425b4fb9441104e11787ec4adfc1199

    SHA256

    c94461aa7a8c8ac44ba7d2695c06ce4edc02d0a22284b3fdf121a5bd53213e57

    SHA512

    3cc265bd00df7b06bf55bac9a9f0b57b40b1f8f999faac861db367a696e3826aa5b93a253747e6482fd8c5f605ee406bd566461d27286179fb3e7a4d3eea51a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    50b019b5e78e80f16c1d7c6701c4fdb5

    SHA1

    92414a550d6d4164deebe47b1ce6af0b0fcf6463

    SHA256

    bb58afa9315bf25270a87b01c3271da00dec1690aa28f59934c7a2ddaf6c29f0

    SHA512

    14abc95a91d937194ccb7556375b3b3c4042bfe64bae0fe72170db3b4929356efe4cb5670bb3af7d05804b81a82cb5c86a273ecbe429fddf9151a5971905432a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    39ae7a1f9f7dcf32d652e58c3ad11b15

    SHA1

    5950f765cc37f90c1f9adb223112c3ab10e2d865

    SHA256

    502b85724394c1380c9716a48938ba4b68f98b70a76974fc1a4092d9d21d6c5e

    SHA512

    580555e718651aae5ff742f1fe49575a18ef2948870161d97e1ab062abdb59e6ca84640c5b32350026e825e0553005307e2108fe8188a26f8349e09de123d589

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E

    Filesize

    482B

    MD5

    63c28b20c5df8746555cffdaaaf9cbc3

    SHA1

    e11a5accab664fdd933d74e565b89db4f4ba5109

    SHA256

    5984f66108b781b5ea3e8f413ad1afc69d72e03a85bc3b7a5c74358a69c80c75

    SHA512

    26020799e6438360de1f89515d9b32b57a84cb2553673edec592c821617f55ce24cc1306f96f0206e0dcd7077fb664e59a3b48d3e97741767f51f79ae1b2baa4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    3ce8ba1b5ab7cf604f3182dfceb93a0e

    SHA1

    ecaf7416d055777b6d264fdf896a9079a4d23843

    SHA256

    f54e9c4fc504199b4daaa9f3caf48db046d517b4631c9080b342da109a79d071

    SHA512

    e83039e3c3f481650f63b8673ea17212edc1868d07de9e3e317b78051234c96cb53aea3c1f96fc0af0662e38721fc674df590d7c6bdcce5abe4dadf45237a67c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6GL24G53\no_image[1].jpg

    Filesize

    14KB

    MD5

    b8ee09340ef155d8ebc1bbd7c84e7d14

    SHA1

    5af0b5eac2f726754f7423d280c271b6980ae042

    SHA256

    26ca188934156537fc2819ab82a583a32bb8867e9a8bba7d5a83fdad704bc7fe

    SHA512

    720ec5d0261bc30076c947761fa2d2809438f35f4e7cb8884c6049fd48729d9de9148a1e0066ff9a25d33c9ad46c333ae5a797e06b0727816015f6b063b8c17e

  • C:\Users\Admin\AppData\Local\Temp\CabB7EC.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarB7EF.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b