Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    05/09/2024, 21:51

General

  • Target

    ce04ceb134bfb713233a2c139a411772_JaffaCakes118.html

  • Size

    111KB

  • MD5

    ce04ceb134bfb713233a2c139a411772

  • SHA1

    e4f6395481967295eb0865d4c3bf164faeb0d78a

  • SHA256

    aa7eb4ce3c9864188b372a3cce1a9cfc5ecd852c5a687616df6f5ecdea35ff63

  • SHA512

    4856aa2250fb1e4f4a43ff332ae68687ec652c33b0600aed8a30819c0a3be419db9ad76e7848d8a4d98b6452409c7f3e5449c42d571f8c87805fd8ecb0c0cec4

  • SSDEEP

    1536:9IimAKWbg389eC6Nc+ap5eOqYmKtYkIROXi0wu+nAX/l7M8sAfLkYucwiGghNic:fbBGQeOAUssXzD+AXdouucwCN5

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ce04ceb134bfb713233a2c139a411772_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2200
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2200 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1740

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d3627a4b43704238ebf2039417f3133

    SHA1

    081f3cd817069985fe05912fd60332b0bdb07c07

    SHA256

    c8c01c01b37b8161f4a407077e330be0547f876a4100d6146d73b62276ff6041

    SHA512

    87e46d532fc9577c93dc4127d98d2f519012f9930fa6be7db539412c9f769c8e359ff8ae1f3731e62239783c846d9da7d9f45caea7d168be34f8d109df5849c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f171bea65ac10e0a6e5db7cc01cd913a

    SHA1

    623d7e3da5661827ff4501f559f1a46ba6a2796b

    SHA256

    2f0d1a2f61c42368c4a7f45c3136b77fc3bad3b6e1b9ced6577c48a8e34c8097

    SHA512

    19cb45b28c049e9857eb957ffb45db4bb875db3c0ce472f5d0a1f15b042204c0fa6ebc3e7aac2ddc275c93e25d969c8d1266914020dd9822423e51170fbd7c2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7119799f53a42277f68d0e21e8218be3

    SHA1

    811980944ba111ebf6089d5af7a936f34b234fa0

    SHA256

    8138ae103013685d567b127c90b685e41edcb98b7a176be4c4f03fe56e6d122e

    SHA512

    3b214e16332760da86912709ef2dac7366db522647ebd29275aa375ceac737db1519f53096fdf125bdf78778b579fecb04f672a5bc77d569a1d17abb0e38e480

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47a606f11eae9ed1e1b2b7414ed03d5f

    SHA1

    2fac291b8e342ad334c47f24f77702d0ecbd4b62

    SHA256

    340e62128d9f7e3f950d2b9ff8a523d4134a699a423471b45a9f1ba1664d741d

    SHA512

    7268a947d1a6835439e881780119625dd2d376dd37acb1a1ce6c19737f703eee30b99d4fd3269964a022473f86796df64ac8431a4fc2e7bb741177bc2e7b0663

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc6b47a520a798e21bbf7435afbfa060

    SHA1

    129993c1d80efb48635ddd354b3075ecfbf3f77d

    SHA256

    734a1df2112e8c7ea4b2a57b7cd40c9592d5926c873acdafed9746ebf1c9d14f

    SHA512

    84f4b2b7bd1f806960a334e3c46e5185bd0ade4cd74955e6e5bd6db9f377fe678f63879879006fca85f5e44d2b9ff58e0a6fdda3f7d0b220b2842f3b47cc5505

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    574a213d0a913cca7112799e19bb5520

    SHA1

    968e2d176c239e0c2ffd459225202638644d43ed

    SHA256

    401631e68bd1ce89a5f236dfe50a8442e2afab788d6b7519a54f6ae38dc008af

    SHA512

    522cb39cb0ffa28100b453ba2cedb2c444bbb1bf6768c1e576f1ece5f0ea7a5b635212df020a0522da0e354bbabadb5bd80b5a5c981af16d3f583b416d7719b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70606d3a4fbf357c3aaf3548229a25a5

    SHA1

    621ae3977514ff066b6b585550341e5f563dca12

    SHA256

    e78d844f6cc6cc3ebd4b2ec4d3c0b5db28bb9d43d78ca0030ea20598332f4bac

    SHA512

    5e9c92a8ac61a4e9b3c0f05480886a129a546de0ec317233498bd4a1f5175ad3f6f80192a418c8aa0fbc8022da68e95c7bedc549b1f6613c718bf039d7aebb38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5a81061a6bff67dff06afac5f066792

    SHA1

    64cd3e0b0ff6c1f040582be7d491c868f8cd77f9

    SHA256

    f3ac31594d37e751ee28a356e06d743973091ea73404f429ce6e045acdb976d0

    SHA512

    a5cb45158a0ac579aeafd7e1c4aac29256c143565788cc0e5ea4442ef096437e8d478f685e4c6e8ca44a822ef6b31f1f41182884b2e5ec4bc43dda93db05d5d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ade7d52a0c2f9b8647803df8041f7ba3

    SHA1

    7311c8724ed93fd6676e7331c6c1b7d07fae72b7

    SHA256

    00e579993d245f125c0d5d0856a2875bfcd224afc66e49776706ec1af9b7d45d

    SHA512

    761da1404370a1ab6e241263558d4e7f73f923f1a4a220f82683542c8ee07cd9c4c7ed06074e075d3e1d7ec00bac86ca58687de1d3409d290cb0f22ce3136305

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0be7aca594b1000043ec6fbebf750ef3

    SHA1

    2867ec82b0bef1b101469a6e51d5731c2948a18d

    SHA256

    5403cc10ae54f879b23c2183e7bbeb5bd90a2cabc293601be35fc5dd114cfeff

    SHA512

    af5050542a7fc68bd2966a74ced4987915d9a8cd7871f3b64b418a3c1cfafaf1a80c839a7b294b6b1b99eca7e6b5ec489503946b1d0353db6f6213f81352a969

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    399e64b226efb90a5ff326dcf0d458d9

    SHA1

    d0a92c2f7e469fa8051ec8d22a5f534fbb19dd57

    SHA256

    a5a081c6ab9f1d361118773695fa8d3c8f23220424011c7c38ccf1f8cf3eb0de

    SHA512

    4efdc46636ced605f148e4e806af36214059b5002662203d6fe1ef1b0a5ff06f1a48197b01a1623b9da6b3befa19c0d00ff4f13ae7275a4295682b3c31f4a116

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a40847c5c403fc85078644c4985c4ed5

    SHA1

    dd608e00730a6521674c2e321ab7c15273dbabb0

    SHA256

    91789b2fc3d4e81a2657e1e62e5c02aacd16cbe82e0af9637c5511ff7dd2ef45

    SHA512

    645deaedbf26c28400bdf6a37e63bf4efeacaf3e7df2e2daa1262c978f154294442f04f10bcdb8579c91e35a7342906a106df3481eb3c7d248119f14f160e826

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    979251a56a70bcc32b724f6634841f90

    SHA1

    3003d1bc8acee8c51342600f1476502347b9ff61

    SHA256

    155a366dfd5f959b439413ce0f93bc5703c4f528b47b5cc511891b03ef159e68

    SHA512

    2e8b36e717fd029484336b280a042477670c63dc7823ccb3aa58a4ba4b2c3e67f08421c47d1150e68867fb26a48f0e6c8b0d72728a6fd8a61b586a8abda792a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    55c7983093ed756f06fe035d2fb79040

    SHA1

    f4dbaa0efd491182927d446d4a5a3b3579bcc944

    SHA256

    f419b90ed091bdf7996aef7389307ac61b2dc9e20bf02bafca951a86d3570a82

    SHA512

    aecfbd72f9fe79fdea555ef9b7037a246558cb0e1f6d8718bef812d9a594b322d9bbdd4c9b56586f4a2650cb83734e031e9350772e774d53b03aaf873bdead9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d4056544ff698ef5f8c3d9a746742fdb

    SHA1

    5997a356a2982c2939e39ac45bade1764cfb8dfe

    SHA256

    94e38b3e1e4dade2992620b22e097728beda16d5faeb005cc206183c313b8f82

    SHA512

    703550422ed034c7eb11140d8cea34c7b40859d17df18fd9895342d2867adf601b953956f0cecdbe769847687fd20a159d54a5940f74db1ae3db3397052f8fb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cebcccf72d65b97d0653fa7ee577b7d5

    SHA1

    ab7d8dcedb36d8fb52bb948ad0e589da3f0896e5

    SHA256

    921650c1683f16a91bad04148d9be6503148163e7a323fe72d37bc5b25e161d0

    SHA512

    1c97979467eacdba94176a05006e19c959c3455e9181c3e8d23f09ff43d4ed2ded869f096ac41018a249fb5c211056f59af66d98d12240f1667927928fc1c104

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78869df7f4041202f00977425e64bce8

    SHA1

    e1097009a5c2fc1ebb8d90a1c497684a0e830e42

    SHA256

    629b716cdb18f7a43a013dc25886190e65076a27a6dc44b0ae5dd43352a7c8a5

    SHA512

    48becc09aededbd1cf962dee4c3e53a9e600e72daee048afe0c2a80629daf33dceccb7aeb7562dc2f739efc3789a317a9463e283bd9e23018f4769e849f67422

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bca4806ef9c8c4526e4348b036600921

    SHA1

    4ae6637f5dbb717776377468e006fbacb3a2942b

    SHA256

    b9e18f6f79f5fd2358ee3cecd0a564e03688211c1e91bc94c39afc86a559d232

    SHA512

    646995a6f05d8a20d689932d8a82ed6566879754cb5b6b0d35d460372ddb6b5484d6dcdaf3d38e4d8cfaadfac5e6348780c23195cd0b20f9880ad6f62a74a4be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cba39a47312ea26fdd8010863da7286d

    SHA1

    6643ced0ce83e42fefb1014bc9d595d1b15a2471

    SHA256

    fda68bde560c9702ef3d4a09d43b1c76fed569d474003b5b477471b859030849

    SHA512

    871844e0008e9ce32f11baef44bd67fd2bdf81bdfcf8b28aca579fd0c5a010fb5171b306ced3dec0e327e01440f0367a502166496e0a7c36e454a1bc1d80ff01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    59ec80a455f6921d667bde4e8f7e466c

    SHA1

    d133c3d1c68a83d1aee35ffb817fe61f689f1bac

    SHA256

    4ef4bef1a0ddca482c6e4142b96bc2a449bf89cbd60c281bae4d9c2d566ba413

    SHA512

    aedb87ddb4203ba633135ca93f8c09c147f7042135ecf55835fb84c6c33b6a563c090af85b44e9755f47d78183083d7cd82c5c66344f41dc8c251bffc67d5eab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c911fcc44caac45d8b020f09d25f7ee2

    SHA1

    d33a38560e54d3d1ee6884605bc9608617cd2929

    SHA256

    7babea30a848581a8cad74e5881d297ef1a34c19b31f44a958f2dd79e15aa019

    SHA512

    77a8b9f383e1b993456c8ad303b27c9b6ab76ccb40640b791041b0c1e1ac8ae51a1e6175d41d5a753aeb629b713629b33e45c760e007fade6addbca75d06aea5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ccde8e730e028f6754b46739853969c

    SHA1

    5f4b5505af7f7bbf2136310b75589cdfd067d6df

    SHA256

    7748cab6b6d5f6d50391fe19ad2fcebb9ad0e6e60c60e63421b00a95e4f54cae

    SHA512

    d789643d1babab5ed450f4ea75d1400505ad4fb4a40464ce9303ee89f4398bd705c186c60d2b2a0f30ff333536be29a81f4d3b8d99032552031f1502fdda6723

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2fe53fe5cf37c532edd59996880963e6

    SHA1

    162bd76c74a099c3f19507bb7fadd698d4a06d56

    SHA256

    83f352c1f7bfe39b07bbdd764c468a7ef3aae4d7d48d1cd186f31934ea0d4ad6

    SHA512

    8683c5010ffb576feff1cf489af51fc6ebcedaccd3d78c48775a33cad50899744d98932fd5235c50e0eb6005a3e4aa45a3456e1a257c2f1007a68b5b7243e3c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1468aa2bbfceb0a5d6d607e2bd382688

    SHA1

    7d662790c0cc96b541ae2cffa6239ac8953caa41

    SHA256

    ba76b3989f1caa60a664814b7ff3b53b13ae9f49daeaec8403286948582b210a

    SHA512

    eff38cb53422dbbeba272a030c3c7cf07c882f79aaaa4368637f5e4ca74bd1e0c2f8dfffa517a668c07da7189f9ddfed94f94cee3af47e7be97a66ab5da48a1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b88da8bc677b623dae39cdca65dd8886

    SHA1

    ce7cd6258bdcdfe3cc99e1b78b00c412cab68854

    SHA256

    42e73f0387e4739a14f59a652d4c5c05f4e447ae5495ddd0b384405e377dad2a

    SHA512

    95f9ea31f85696fcceebab6acc50223e9e195aa77545d669e9254938c12935e13fde2c022eb19a8999476fbd48bc14c67596b4bce00d6d30ebe753dca18ed334

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7CNUR30T\plusone[1].js

    Filesize

    63KB

    MD5

    65d165a4d38bfc0c83b38d98e488f063

    SHA1

    1c4ed17c5598a07358f88018a4872aa37ae8bc07

    SHA256

    b1320e0dda0858c87971f7baa0d53063ad2a429d232fd06b0067bda8b9eeb0ec

    SHA512

    abf4c755d88193e7e05398b6f934fc561d8e2adbee7d2170af399e145e54a4a8a93988e4af4e28d6240c0bd1bda7035ae97f67a85a471088820baae8d89f3d41

  • C:\Users\Admin\AppData\Local\Temp\CabB463.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarB466.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b