Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    129s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    29/08/2024, 16:03

General

  • Target

    c92644ee51e64dad158b683b4442b7f3_JaffaCakes118.html

  • Size

    71KB

  • MD5

    c92644ee51e64dad158b683b4442b7f3

  • SHA1

    d614ff08d21a0003223f418032116f71340914be

  • SHA256

    526ca813f00b0f0be9ccfc59d052dcd85e9cc27a250b699b84b14aed9398c5dd

  • SHA512

    45a5c01881dea854f71b0b37c4bc2e8898db7fd7cd198f36dc85612254fd11e75b19f81bafd7d343b56f552e4d3637a3f481820e47cc80cd1dde0857178d5040

  • SSDEEP

    768:4gOriWNca+oVgGz6awO4eb0D/Zmkdj7rPEXwXutDxNXff29zJ:Pyt6lO47D0M7GDvXfo

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c92644ee51e64dad158b683b4442b7f3_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2240
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2240 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2740

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    a3bdb32709251db49fdfbbbe843d295c

    SHA1

    adbfbf7cf2af52bbc13074c49db627b9969ed2d0

    SHA256

    500646807d620dd3f80559b423d09513fdb1025d5a4b27ef4be7c3096dddf807

    SHA512

    e14f2f84db249857d4dff278a973d7c26272b5d96d8a428c0ad4d74bc89f9be9b73d4cb340b8915fc6d2194f216e52e9c201acc2a319bb6fdd5f767970abedd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    3137dff2d2b26d3687ee31ca95ad191b

    SHA1

    1d4a6cb6dda2cec564dddcb85e38260a7d883218

    SHA256

    85a44eea3803ed913372e00a34ab9ac706a77acb3540baaec800e1e14b57bb34

    SHA512

    e2280b298df3847e0fbe0dc081b807a50aae3d08745980d5cf68e7cc070504aa1afbd10e5af578ece8d82f72e0a94e27a52a15941de8d40d73cd9e2ecb531429

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd8c8832902f6a628b5bae6f2b16e42f

    SHA1

    b5db52fba23ca214a0697de94f518c65c6df7b94

    SHA256

    2943ba0a5bfcb2b18a9cdd88934c139d5c806ddca0753e2c7823e40122324d0d

    SHA512

    75cf67162806204b27d6d39dfd722d375ddf62e386b4c99ad942a87cd3e292b9069132b302019ca844e1558cd13b8521116e0461aa4e5bec64fbc737cc5c0ed1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63dbcc8cfa84a80c1b3255617cffd7e9

    SHA1

    bce4f98a0eaa46c5f5e8c97cd14a784ef09f8732

    SHA256

    a75e9dbbb4822f30aa9a04dc1e9ab20abfa681f5110f47c9b3d019586270708b

    SHA512

    d7f955bfb1b793deb80fa1f3f9344cddb8dc87e4558c8044439782ca641a618485c1269465d1039dc4e2103a56ac6d1c1434f0ab9ea120106fd8d55d4282ebd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ce7c53190505933f7b2474f408614cb

    SHA1

    a29c36847756b4e0e4d0e0ea07c7060e911e6abe

    SHA256

    40ea8b2fe85595a921a2697c9e585255654a1e71d58a14641d91a33999eeb599

    SHA512

    93d08b8d1c4421d7339cdd9d6070180fd858388e545bb948fd8bd5655c6d63c6fcf7c100480e23d38bd3a190b8e8877182148a5251d0c24d13f6fb11a42d81c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89add8e56b1a0784629ade4b8e56a1a7

    SHA1

    b0e8a4f696ca75831e2fcac6b26ee947c4d1fff1

    SHA256

    ebaeed3e304ad339c767980129a35e0342d0428fb4399c2ed66dfaa0622a163a

    SHA512

    10d3d86a8d8b067d03a4c4251e766141a2c91183a3625b05917df8182020e97c6e622dd3549fbeb7f379580b4bcd8a14f0ff7eb3fae8e5188d7fbca0c9b38584

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98b9ebcfadbcf87ec369fb91a227f51c

    SHA1

    4f1be5cb0a9cc57e5691dee820d6dc19022ebfc1

    SHA256

    65c01e3d0f25746c0d79a05b8da02bbaabd1ce5cc4100ec3d5e0bc9a0879c4ea

    SHA512

    9f30b9a5430ec8bb4e5649a4730de2dec71607efa8a0987c643c5f1eb0e90d786766e23496b770b97950f3ca20966cb7b82cca5896363c85a7f1ac312586e581

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2133b2c92a63306a8b9a0ab5a3af8571

    SHA1

    0dd5f6f46419a766f68b390296fab7f4b9bb9bbb

    SHA256

    4d3376b2bf194267cf0f4bab63c492f2b3da1c07fff7e74da899738143fb2288

    SHA512

    17bc8e71b9e059f313dc13821283c614fba4005e7d7d61f81faba6ea970223835d1170f3e452da7f8098a44d49f14f8e466e225d5cdf1cd858b8a5e89d884c5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eaa86ba5ea4177d02080f528d7569000

    SHA1

    68341dfbdadcdf077b89f875b5dcfd3ce4e92c48

    SHA256

    6bfb2acdbce8f7aa0d2e6af147a3967bc43168772b62b31e5285ac6d7994b4c4

    SHA512

    d181dec18b0a8e370a72c9db2f147b71c941c08645735b79ae286a191ffa5d5503dcac25e49e4adb792653af86313e9f33632d225972b9efbff593091d08ec2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c5400dbf9f90bb914567c3d66f2e3a0

    SHA1

    f4dd8f078f75df31b87292cd8945a7ed5d922dd0

    SHA256

    82704c2a1c8e0c5d50b9feb224f890074340333c420b41f237bf90064d61da5c

    SHA512

    9558033fcf3bcdd48582aff2f894c324f7cb504bf32d4641e79d3be07f3d57fba10fec88e2e9160e21c9cfc5dfdb5ed94802beb7c0a8135ecd93ca6473fff882

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8b3449f4c83cf0d78a8d6368129b47c

    SHA1

    31c14429238a809b8b945a440fefaf438046bfe8

    SHA256

    c2a3c9365da282f0f1c109a3ca50f26450e82a6d193dbb07cc9b207beb4a4151

    SHA512

    d1a5146d3e887acf529e9ee3d449a297c349475a75ce7e3f762a04cf1ba4af414c2d3349421d9d2709d6b15f4ff8ccb11f263e2f64f0bed03dd452cb59dfd7b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    684fc9ac6e26b91ed51651f6c4e57179

    SHA1

    9953b00f268400ba9318f9fc797c523a178e5f7b

    SHA256

    856a0ddf51a9a633487116e5dd68caf241a93c75a6e5860cfa99acfa2e83ecb0

    SHA512

    318918125952f95fd78a81c303d2e878fa9a05f1f2ce3a3e2fb2774106c6a7f411af893879e074dedf9fd2cdc002a6aba9b9b222d1711bcbb5c8904cc249062c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    255a7daf17b3f88cabb5cbfbea0b823f

    SHA1

    04c1a7f14a49af6f2583ae289c46295beb4012eb

    SHA256

    8f035cfa8fe3745ae001048d89acfe7cce6b53f9a075981fa39574d2133ac7f5

    SHA512

    02e0182b5d66c9d792824c4eaf0ae9f8b080033280cbf0941a3bce143e6ebb875b069f3b5ffe2d5e2fa5ad4682dd5fbfead49933071ec3cfaa0103d521285d04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    747294a3427e3abf0dea3fd7cf1aedcd

    SHA1

    90dc9f4f162dd5a0e9ec3af158ce470672e975b8

    SHA256

    a9eb7c028db4d2e2039b47cf7d1f4fd0c410dfa398e2c88db35c25fd477a1615

    SHA512

    c264833893a447a8b11442b8bef25f84166b9635bc9c450ee98b915f2c7de8f9a8b03f29650e1d748100378a853ec32ec74668825ce79168fb81f7199c5d7903

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c8035907b329e53c817646a497345276

    SHA1

    cee5795e731581c4ba9066f7a0c2eb02f823762b

    SHA256

    bcf5be3769b2a9bd974f77509b0801fdc7f5653c03384c8e9f4000db6cb79326

    SHA512

    2ed2b48ff7e4caca423cef2adbe41d8704d0b368b3c281ea69fa47cf371582a2e868c920faba16a5b97bb0848121adb0406aeaf807541fec23e3a497d8f85303

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f5ab957e58b43f6d5e2374e24773820

    SHA1

    3183ddf38226f8d82958fb91c396a3657cdb27f9

    SHA256

    6c68d9a3c260f988722c72f5f0d70f0232d904548c6bc2eef7dcc6f16f86c118

    SHA512

    fb5f54081a04710fe43ab97b466f0a58d34cb110e4bcaa6f8e9ba90806276820c7765265ab7df717a2383575bf1ccd8ab5cba6c4389106ca2c5412965a03fe68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9eb41ccf93b8de3a120db3733282f3f7

    SHA1

    429a79ac9eb1cb355dfb9aa0c6006fe2e34ea288

    SHA256

    e90b155bec6306032a3d8d184ffda7ee2fc5dc6215d5347a4f2e07903517a536

    SHA512

    1d4ce339a6642ce1fd15f94511c74269fc19fa4296ba7ae6121b433f1efb0fe24abbed19880a518c0d45390091a23119273bf75a91239722f134c4a2314bb85f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea7ba3044dd74b314439c27e40b7b87b

    SHA1

    c6d9eae460be6564e12d9af9cd65c681242a4869

    SHA256

    618b62e359b3d02a0802af1498f8d0ae4887c2a00e00e2c915e08e5c823b6c6c

    SHA512

    500d1e16e90f7d80beb1595005c32560fd02dc0f42a3144d3253348cec2c7708ea9ccd01d3687510636dca8b2e7f7b010226e98dbdf3aa1a0ba22e92626b371e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    137d4ed67a61cfe310d334942eb2b190

    SHA1

    7d4cac400b1d6f603caaa05f4969970534f99858

    SHA256

    68f038d98dd4144ba186331f5a897d0afb3948287f4e47840f96ff579797e2fd

    SHA512

    4dc09fc356130586a476a4247cfb2c5d2ee4165eaa34c0f317c75d9bc9a4783fabb0c1466d66c6a4dff1ea483e77deb153dcb17f9f53888c10ee238d722cc1b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ea9e567a814a9d03019b51bc12e99b1

    SHA1

    344cd6e8a475dcd08bbba94938511455f43409b5

    SHA256

    ec86021865d787cfa50de5e9603f5555868b8f2b3278c7a15e1615d2b8fbab34

    SHA512

    f59d4a67e5df39b46082aa761ca041b23ef38624e221b1b70da2fa27e8ca6f150546b1e51b84386efa4fa8a82ec3d7f4f3f5dc686bf167cd5eda06c5f42af84f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    95e1599b1dbba5b5be6366fd8b98a72f

    SHA1

    016c21909ee2d47cb1f5ab2b1a91b321ee6c0d8e

    SHA256

    771acb254443a2754e4b5171316d9a242029539bf5561f2328f553fc77cff432

    SHA512

    3d8189f5a4d1d5e3ebd4f7b9ffaac5b8310bc467e0bea6b82e732589cd2847760fdc5768bfe53dc00c1f65d920e1a7f674e9455e844068185780cd58c327ae5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d833098db1deec36b3773c84ff023c08

    SHA1

    69d375b59fe82a355fb5cedf5769ec9f006254ff

    SHA256

    8e312df598108e018c806b751d10be1caed8384c48a61195c855df9767af5594

    SHA512

    e3f5476e7f469dcef29d98b7d602e2393a763d4136c11e5c4f712926774729960be6ba340b181591af085891ea23edd1d8d72beade84c82071c87decd8bc13bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    35cb838ec75fc7223c09230d0a0b5ac5

    SHA1

    8f216d6c872b885c04fb69eea2201e621095d6d4

    SHA256

    3cb67a5c7a4f841afc5b3a4e3f3674234b82ab13b3d5fb5640f9de80a6f8fe72

    SHA512

    bca9a4508ed287d494ef923d259a6956e8b75b08164eb938aa4f7cd2744b8b033c83fccb57bb925a7812491aa879632ac43cb0e3111e2ab1b48966f93c6e623f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XWMUP5AI\cb=gapi[1].js

    Filesize

    67KB

    MD5

    ed72d618fe48f6fc42c19a4b58511e72

    SHA1

    80a2da4af91d56ec81c7b672afaaaa72c83a4414

    SHA256

    5bfd37a756bc7772aa6c520102870dafe2d3b808c562412e30f122a7908f8ad0

    SHA512

    5378b71a33f67309f788b9fce32daea44051e7e9a6aa326bdd783456ee9eb2f4817aec2ad1e837afc1853acba59080b0114d32c040ea731ebd703f0a84dd7ae1

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XWMUP5AI\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    9e5f0b21584389dc1c7b5da4a900879f

    SHA1

    191b84e0f5644398ba99e0aa141a6778c14b83bf

    SHA256

    3e21bdafa913fa25276358db1269238db3012ffd8748626cdad442f838e890e3

    SHA512

    c1720a420df680bcc46625355ed6d5c35ae280a813692a0fa293f3ba113a023808a781f1b8c9dfeb3ffba29606e1f4bb4be4233983089602e2d2c20786fb0427

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z7V06J7Q\1380534674-postmessagerelay[1].js

    Filesize

    10KB

    MD5

    c1d4d816ecb8889abf691542c9c69f6a

    SHA1

    27907b46be6f9fe5886a75ee3c97f020f8365e20

    SHA256

    01a956fa0b3ea8cb90d7032608512bc289c4170bf92759352e40062d5be2946f

    SHA512

    f534f057e46998bd1ff2c423ad2cf04a880c4a5259e95aee5c6ae34ce7121ccd07ad1bce5d4c3a51ad04f7411b0625da78808326b13d2aeefec502988e113113

  • C:\Users\Admin\AppData\Local\Temp\Cab35C2.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar35C3.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b