Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    05/09/2024, 21:24

General

  • Target

    cdfc5e206f736e395d9cd9660cd20bf1_JaffaCakes118.html

  • Size

    9KB

  • MD5

    cdfc5e206f736e395d9cd9660cd20bf1

  • SHA1

    c45ef801659f8049cda6797de2fe9212693a016a

  • SHA256

    d3ae4e47a969c5f36a23d16f6c85fd7946981e7ac2c6ada990270bad7e1877cc

  • SHA512

    1c807c759d34cfb597f250864782120076f7e98812e447f2396833be9bbd6f742b094e2fd5d06daf4769ae048cbbd548cd1d10477543534859ce6728d88b09c5

  • SSDEEP

    192:+0+VmkikDuuSw6FQ2XQIucQTQ2X3VX3aKiXISKiX3ZKiX/6/jKiXwPKiXBvKxEQB:n+VmkfDuuS9z3mp3aKEISKE3ZKE/6/jB

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\cdfc5e206f736e395d9cd9660cd20bf1_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2704
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2704 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2888

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12

    Filesize

    1KB

    MD5

    7fb5fa1534dcf77f2125b2403b30a0ee

    SHA1

    365d96812a69ac0a4611ea4b70a3f306576cc3ea

    SHA256

    33a39e9ec2133230533a686ec43760026e014a3828c703707acbc150fe40fd6f

    SHA512

    a9279fd60505a1bfeef6fb07834cad0fd5be02fd405573fc1a5f59b991e9f88f5e81c32fe910f69bdc6585e71f02559895149eaf49c25b8ff955459fd60c0d2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8

    Filesize

    436B

    MD5

    971c514f84bba0785f80aa1c23edfd79

    SHA1

    732acea710a87530c6b08ecdf32a110d254a54c8

    SHA256

    f157ed17fcaf8837fa82f8b69973848c9b10a02636848f995698212a08f31895

    SHA512

    43dc1425d80e170c645a3e3bb56da8c3acd31bd637329e9e37094ac346ac85434df4edcdbefc05ae00aea33a80a88e2af695997a495611217fe6706075a63c58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12

    Filesize

    174B

    MD5

    ad5a93a61245fbd584ee8ced7f3bccdd

    SHA1

    9e12bf75d44ca32f6d7f73bf0c6ffb2b3aabe941

    SHA256

    9937272d8a1337e28a5ef9359ff711206e53acfa2131aabb83bcc082eedec6a8

    SHA512

    c18f76d29caa23d2285445307735a1191995eeb7060801f3850d946c906a442f161e0b3822264f158091e6bceedaa7535c1c39e57e93ee2e6d23c1887a2d0847

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12

    Filesize

    174B

    MD5

    438cf829cfe267e394ab72720b54531e

    SHA1

    9c974d2e696a087066d5584ec9d2c422d643fe59

    SHA256

    0bfc52ad7091979244bf59825b2f9cbd36b553abc6c6a70946e4ec7f65bbceb0

    SHA512

    1109e9f5d0a234ea6e307cb502e19b66e9010686b59bd2e5de212c8fac88138184322d8816597868649f440d1abf43713b034a5fd82267cedeaae67909a21138

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00bcefc853fd7fad5f8a39b3523bc9a8

    SHA1

    c74565f947042e87acc3b64edec0cc6aae958c99

    SHA256

    4b6d8fa4a76c12e1292c5297fb731c029e9b11e1ff36b4a03612adda1a210014

    SHA512

    9472fcf3e6644b833875f48473fbd55e57206e24fbfd9852e373727ab3c5d401397204703c94d27d96888766f882cb0c9dc0749db6e10c818704e1b247ba59fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a75ae5722e9e872e0a3dbac439ebadc9

    SHA1

    05ffb58b881f309132e531c8c5df5f664084c6c8

    SHA256

    7c4a2725c008076809db160f8eb597d17f375c32f04b18db9ba0bf5e76669178

    SHA512

    22dddbb21eba7cf35652fd038c59ac3b8c1c9a56ca06fbb2af22521a00d6f7d70275ef52e8613359e37dd551c448a779a984190f51706d83afeee78ea0a15184

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85cf87304901ecb7d159a2cc234847d6

    SHA1

    f2a02f07b45eee455f6f6f2eb81bd1df3108a2ed

    SHA256

    045a2cce32c38e8dc52b0d8c7020ad78f85a8070f28885a9933eda62d220995d

    SHA512

    ba214b20b0cac54174564585b9ce9c216362c7901d2095f6e42e0f705e519eacece7192b6e45ef3923ee93e0da51f2ded9747f566f4d40f8ab6a7180ab471e9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    187a8b7fb7b0f7368f1cf5f4e79ba3b3

    SHA1

    077c0993da47c7e9f36cdf59ba28d8ff0920c7fb

    SHA256

    411b2d94a309ed5035bdf5a0379d5b024ad9870f0e4d26d8e803acd1bd6e9900

    SHA512

    c88b68ee9398b7baa99df33b148398f73ccb9ae462c47fa784339e49ee6e02c75dc5b2a16ceaecd885f1a6630613166ecf17af6b87d3b323ca455403782f5486

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    96b3e90e3d2914cb6fd0c98b6af4cc1d

    SHA1

    fd1acb40a4b20cc86313f40e27c17a873137c86e

    SHA256

    9245650c6febdf894fca52bca663cb0a2dfd43127ef9e24f6f40e3f98c4a68c5

    SHA512

    cb458866b24df211eaa69ec7092d1792c83c597a1fcf7d360eaae2a93d620a61bd947e011853c150c40266a34c34bd71388ab22d4f550d7f6e06b64cbdbbcf34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4fee4a70de9e69cb264705c95ea113dd

    SHA1

    99414b50d78beee90a27916bad09a6ec9c2ed932

    SHA256

    321498956cb9063015ac4cee267852a097b370c720090acd7c48f138f8d977c0

    SHA512

    aa18e1f37bec4dfd133c8c477d157c9cdefc2a921be1862db256cfbd373ce358ef7fb3d94b0820f3304aea2a5315dcac6462d027fbd235e8daecc4cb8842eee3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fbc29337d531c7bd9f5acbea754d7ab1

    SHA1

    3eaba9d29296bedf7472219d0456b4cdedb393bb

    SHA256

    4e025c12f1419772ef599e47b178e0943b2b85c30898b028c02e27beef2d3bd7

    SHA512

    060cca190c8c7a68a9b67a86336d0b61e721717372a339f608c72714dbddf504b133e0592c5b8a83948975621229f7769b6477bfe1e265a11e6e181df12bab9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b70997696143bebf22e8bc2e8253a1d1

    SHA1

    f4013bed0aec663011b4c76922f004cd117832a7

    SHA256

    a6657252ddc18e3c70274767a211347f433cc3d45ae2e0ade397f0f20e057171

    SHA512

    798569d89c03e90b197aad8af93339113665594f6f582ef29db1c76f92a40b21f07af887152699a2cfbc93774736959afe6e24e10d306ea9a62ce8255498649d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2017b7f73d3f27f978457a30e3475c24

    SHA1

    fca7e7b3c34c63856c7c52d2132a1ffda9b53d5b

    SHA256

    2020326284dc4d01dd7b4ad21a5a4e258c11cc129c3448507b2b0f1e57f87fbd

    SHA512

    09c73a08cce032b16fe4b0bd5472af6c3cd755c6c3cd1acdc75ad3564d4a4728ec0defef7c362b6df6ecae96476daf32b2e6c2aec99ac857326b622589cfb2bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6dfe171ba6881c4f6dd06461e1d0847c

    SHA1

    a1f0ed3b7772878e011eec41ec83a21fcf8ebb9a

    SHA256

    d33c7bd42fa5da0eba4a3c7ee9d3c0724a30d41550aa42a286d8fbf236151e06

    SHA512

    f627af688c98b1effb4e84a6562740a26f849bdc1b6e2b1938d54d56f9604b4c319d3f43c831f3bcff0281ffe7d1577db24385ce327991b52b29eaf885e37f52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    398bf9078245660bdf37e6586d66f4b3

    SHA1

    9b30071450863b516a54a6882e6ddbaaa02f8ff5

    SHA256

    d7c8514d116ac620ac7d86a954c6962be25e97fd71de06982141666008d36c8a

    SHA512

    239408a626497e5cfcee2bad52e522aebc7032afd86850d7b36cad61d8d9a7d5c18febeef1d532717f4e4fce384600bac6d57a03576f8d228f708d196c562119

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e4ac28fe19a815b9ce00f703e3620ee2

    SHA1

    dedd9602e161dc8927093f9fb910c879fc7e008b

    SHA256

    30b826341c10af80a27ce7e63e7a414925011b38925dd6d65053088c829af24b

    SHA512

    7c4a4d68a31caff3fcf81c31e07aa04bd3a6ee6dd4eb8b484f84a93df6c2bcfc26368b84d606f590094d04b57d6ee1dc0e541f547542d146994585bdb1cd2be9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    744aae7eccf5da4115b17d644073a693

    SHA1

    3f6c553510be3377e10b9bcb167844d3c28e3bd0

    SHA256

    ef2a6b336bc3b8f2d06e6a820db1bbebc7fccfd0642cc2383c18ee92e8f1a3fe

    SHA512

    98e3dab2358d5da37b0a92f04ca6b1659da26a3934e00ee29c8ba9b3abbe8f599acfe14ebea59ff85cb1da0e079b400a69f9af95bbb199e6c6cb00880665939a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df73c88548e72453ba48d2713f5d84a2

    SHA1

    6026c2bead7460ac186e2a3a3f44a2d731203a6e

    SHA256

    f831caa31172287193ad6e2d462091ef1ad66dd682cf920ea8c6b127df126434

    SHA512

    b3554f39be812ae48d60e9f798aa4950e23450f031851a955fe35ba9254f8ef283f77956fef1ac0c46907745ba2472974b7212abd6165bc180acb514d9faef0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e6e160c1212c1f9ec4de48a4b0f59fd

    SHA1

    a46c8c49db4394e44742936187497738f7ad2ed5

    SHA256

    8c503bfe376461e688af03ce5a6a745866b70aaadcc3770c3fbf3737e8ccd8a4

    SHA512

    b64399c0d1fab5dfb633cef9fce5b1801f3d5541bba98c6e3d7edd9acf48b67d69760bc4000de8669862854e5a520edf4bccc033914ddaf02666a8f2b5de85bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e58ff1f12d495b240596c255c77983cb

    SHA1

    4152d3974fc32576dd984cbf0b990fbbc5559cba

    SHA256

    8ac4c623e70078b0ad8557b0c7b23cc2e3e9df6267e6a879f784ce786a51f898

    SHA512

    af5cfc88fd122f5044d367e728807882f8847f1bddbcca67d76df7626b5e257913a40ea9b4c452674b90c37dbd8ab1bf1c4531ebf52824a590829af30d07682a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5781c7de4fb8d43793596822524a015

    SHA1

    96b02ea2f6a491f3bd9e8a87060e8ad521acf9f6

    SHA256

    1c393d98db2f08fd7d09e0aff04bad291c9c78571ab1d3272a8f8654ed088f79

    SHA512

    1fe38bb5f610b0d45dc036c6df34f932c71cc049117221869d59058874ed508ffc0b0d65168caa81b233f44a932f3a6480b5d6a1b1cde3e3f713b957407539db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2101808614be65f0b34dec3085d8e67

    SHA1

    df373876ef43fc4813ec09746463b88f76e4abdd

    SHA256

    a35ca11ab5f0162a2eb3b365093153928a55b34a55b83a507bb24799c51976db

    SHA512

    efa680dc0438416d5a149f75f4339e2feae56f8337e3104d7b8a0c0c4bd2fcc9ff63cda8fecc78803469ca243f0ba57e12f7d6a597a9a4466acab3e439283f4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae3f9eab3510e5a9dc1e5a554f8ce448

    SHA1

    9d8cca2a9974de32b75b9bc09cbcdcd43a378d5d

    SHA256

    36f0d7ed0658c92fba9b8828c1ce09ac11c7150c5eeb4694835515391a7bf8f7

    SHA512

    b871908df2a10a5f9f4799d474f5f9c0b9f5d87c7ad2e28045c4272b91e828c26e517dff0fc6d21e50e7293a5b3061ed1d742473e21cb286dc1d3b029d239f50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7c4d4c13efd31184a083122b061e2b8b

    SHA1

    e6466b987d354ad536a4b19d5d6a1f14b8f667b5

    SHA256

    aa8b502a403281ee3a16715c2d1ce78e7c4b4da23e1fe097ead41b9070db77d7

    SHA512

    2bf82cc2e686e3c20095bd6b98467c5b0ceedf6553c300e45a59da8c2542f98be41ff98ad1844a05a9088d40b932acf6535b7e8adcdce7f4783e301d188734be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8

    Filesize

    170B

    MD5

    8a0c752c628ea456bfecd0df0ba85a9c

    SHA1

    e89848d10d3b68adbdfb8826e3939be28b7f225e

    SHA256

    c2eaefb54c4b1c7f6703444860147f58a565046e56f38956ff80022f22c5acce

    SHA512

    6a74626ba1f56a405e6b0475e4d661c38a1fbe6c972515a6995456621f9f017d80b3feee57feb2afaf5dc474aa3e3ccf0444dd6f50d58f2dd3d4729b1cbf0a67

  • C:\Users\Admin\AppData\Local\Temp\Cab4A4.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar4A6.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b