Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    94s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    06/09/2024, 09:33

General

  • Target

    cf3bc57e7a27f07e249b590b0957f423_JaffaCakes118.html

  • Size

    36KB

  • MD5

    cf3bc57e7a27f07e249b590b0957f423

  • SHA1

    fdb4c976b9b8b0c5425f312b1ce4a726a6e3afcd

  • SHA256

    338e1daa5c8c546a18dbb70b9b85c1aa57c81b991ea6585cb692c956f59a327d

  • SHA512

    b6083d3d5eee300416930da28efb070e4b74cbc78b83a77b01718b2fc7e19faacd1cfc51fe34a66994c7b263ec5cb6cb48132751368823738b01bd03b23ef1ee

  • SSDEEP

    768:zwx/MDTHbz88hARoZPXDE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6ThZOg6f9U56lLRm:Q/LbJxNVNufSM/P8HK

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\cf3bc57e7a27f07e249b590b0957f423_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:568
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:568 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2320

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12

    Filesize

    1KB

    MD5

    7fb5fa1534dcf77f2125b2403b30a0ee

    SHA1

    365d96812a69ac0a4611ea4b70a3f306576cc3ea

    SHA256

    33a39e9ec2133230533a686ec43760026e014a3828c703707acbc150fe40fd6f

    SHA512

    a9279fd60505a1bfeef6fb07834cad0fd5be02fd405573fc1a5f59b991e9f88f5e81c32fe910f69bdc6585e71f02559895149eaf49c25b8ff955459fd60c0d2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8

    Filesize

    436B

    MD5

    971c514f84bba0785f80aa1c23edfd79

    SHA1

    732acea710a87530c6b08ecdf32a110d254a54c8

    SHA256

    f157ed17fcaf8837fa82f8b69973848c9b10a02636848f995698212a08f31895

    SHA512

    43dc1425d80e170c645a3e3bb56da8c3acd31bd637329e9e37094ac346ac85434df4edcdbefc05ae00aea33a80a88e2af695997a495611217fe6706075a63c58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    f6b0eda6daeadb2342b89d0a6bed0e4a

    SHA1

    8a955579211ddedf5b2d4bae89cd14a7bd3bfc30

    SHA256

    2c4a3d548c683b44c65132f23f1ac1b24e0bcf00bac19f3ffd34a1d85bc7dce6

    SHA512

    12356d14c64e0486aecb1806276f11e80dcf52f8165d01206ac515c7482a71eddce05521cf090192fa615c13bb9c48537e6b590ce52856731a14ffeaf32c01b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12

    Filesize

    174B

    MD5

    71aa766bb454f8497bd2461beff6751e

    SHA1

    4e58ef71d874a666417bde228d66cc3bdc62aebd

    SHA256

    6d8bbd29a74543b341d007ade813e9c28e07545ddba1e229e3de3446625eb313

    SHA512

    4458d54f2d1b2cda6594ca0cc1e528765f0e696d5cff32a01260357b3933a001b0c7e33b42673e971e1020277a84761376c0a9bb90a70266832652144eff8616

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0c13a7760c162068858228906f9706e4

    SHA1

    5377de94466d68393e8e39a384eae96810747f73

    SHA256

    f439922d5c26f540ecb776237382651f901cab7b864523d35be8dcc7bacca6e3

    SHA512

    d55e8e9b6df9b7b690b3bb0e27c2662fdc60ac225326a0c6c816fe1702d1c69c0de1dfc5e0478351c80469d728cd874d04b45f6606da1aa579032f130b2ab5a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d96c0f276972a6365f374b2826667b0

    SHA1

    90f68eb2443b766f437a37320fd2b547d17c1282

    SHA256

    9c4ebdf331f70a42b18e46fb88672a26a12d64b89e932cf64fac1182181f6f23

    SHA512

    c7de83816e91f17fc78c37a34dbcfc742e151ee6c3248488bef577b900ca16c2954670808c709774c9a7373befd50fd6ca3a1b85c5f2508bd4883d8abf8cd068

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d9e9d52ae8149e83be6d6ef40f41a7d6

    SHA1

    200d82b7b0bf5f5da005689e2c22da096ec46461

    SHA256

    56f48b68a0d410c4c8c4229bc4867e979a82a58e6f0897b4762defbd2c11dc41

    SHA512

    0a1edb18faceaf16fdd210245db32b6cdef30a7b613a3fba09e978d4f72bd72a3f69ebe48ec1977f0ba6f24455fd64201866e2085271112f587e00c126415225

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0c696bfb745408b455daf78ac6c3dd6e

    SHA1

    f9fe958ed9d439604a25aaba4681a65636627807

    SHA256

    c7858ee182f6a70885b09d1ffe04d682659c02d78f42dfec17818a88189a2ea2

    SHA512

    9e2386837e9e26ea73075374dcee7b8252133e876456e8eebbc603326874bf20e03cc8d07e1664e3bb7967b1b41487de407a951808eec6103539a5e37ad2330e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a945226fbf7a209cbbd555ef6f3ea46a

    SHA1

    3fafc2c50efe09ff49ca6bbb8f9ba838348fd5ce

    SHA256

    5bc4d4a0a34635aa2dfe1ad29ec8231946728416604ffa50313258357b9c1668

    SHA512

    b0522cf5d77023bb07a9d1ea341d9bcecaf82652d416a64ebbd0a77348f432f19906f25ebe44be3bd693dd3f6c2a3f49c29fd12f4730b5bd6f6ef6f9d4df2af5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    779cc8445bb30d03c4a2ec6279f0fbd1

    SHA1

    6ae75b9a24315bc3104cf5fb7cb5e385a1913f3a

    SHA256

    42816ceeaa138367d2bba6dbb2b280bbdd52f37e1f1c26aa8eb5f93b86c65d84

    SHA512

    8ce8d632675eeed85000c48da8f586e28b06fd294d0079c656ffe3c538ca2372c3346948aa2785f62e0faae75ed98f1a733e111b9e24ce81f6a109aaec894f8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7427b56fb37c980fce4d25fad3658007

    SHA1

    14042a47cb3df82c4276bc636d6aebf8b5522120

    SHA256

    a0f2fb79b89aeb28ad8118765cd37b6c992b8d0ba6268172bf3a40e16ccec67f

    SHA512

    3cc1d3f1f550f81c90884fc302c7f1fc0590e0717740f8cc1e485618d5b0fe23266da56d97955ec2cfd77c6b7fec14214b235050a49ecf4398cef9206ee26fa8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad46ab19e056598c8f1de2ed0acaf3a0

    SHA1

    34eb1dc11068fe2e162c54526fdca76f99b38d46

    SHA256

    f3c560259e0f5116d57d47846a241030b8c76cba67d2aa26ec7730ef85fe7855

    SHA512

    839f76fbbd11602be4a449b8d5615c5f826efa02d49f8aa1e610a6942e8a625e4c26119fab9e9578a84b32e19875530c7cd8ab278298d76141308049e7ba3e62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    84ae78d010736f86e51cd0f5edc13ffd

    SHA1

    61c15f05bc901fb512fce45076e005d36df6fce1

    SHA256

    674b98990fd9f73171ce3e5d238124922f43eb6ddf3544d7bfbc7da18979ea67

    SHA512

    68d4357173b66d8d44b3a3bf2b2e8022a52029e8647700344c32c0fb076317ab942ca854b58984aa285724292bc7db13728ce07f20021c8212edc592f80f4e68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    86592d640c976720e3e97a034a7ee4d4

    SHA1

    649a7136005212c2164367e46da67d3ed2b1478a

    SHA256

    e3a6a46b117570d2926c5adfdcc4454c680a531bb855dfe12f542ea20c71a9c0

    SHA512

    40b06edd1b2d06a6ad0ac9142981f88f5a0b705446d6f480548938f4c3eec3d02060bcba3cc140b6649f3d066052f0523f10b02d53a5f848752fcfdc0f99123c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f390425b50cdd1ef0fd696206a104377

    SHA1

    59a4d15b871068f99a8a190afd5dcf0972fe7ad0

    SHA256

    91ee9f335ceb86e9c1bb274fc9a77400de44db310bc23d42d70f23404e216c4b

    SHA512

    4ec9519eab016d61fabdac4cb046c95ac6b1e8543d3b61b3b5ce653e8ae560166cd27fd5ffeb97ce75da463a187c5c4a50215c489cdf54025fe88333438faa5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    32316a09b8a5fb4825391db29f38aef3

    SHA1

    163ca09994bbcf79a3ff5feeb7f2e7826e003896

    SHA256

    846c5ca306e96be2984543fbd65230378f715c8ed9eb1679cb92477d527a15e8

    SHA512

    1c0fb6149cea16e441487d45978a648d57d3878b085234888f0b0d789170b3ee3394ea05da07e08cfedf237299135b0b54984afb7c9f876cad36e0df424eceb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d77db47eb4bedc7077b49185cdc7c70

    SHA1

    7cfe38dfbeb50ec813b1d9068c138b19c8d49ced

    SHA256

    6a60113b024f04744b3b4d01133f6a818ee539f4f6ae0280d351de4647b4070d

    SHA512

    984e13059c53a692fefabff6829ebd3f6a9187bee563ebdb1e67e47ffd0b25dcba0a7bd9a12a7ab9e7450132818882c4065a6cefb9c8a94af58028221faa0847

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5242a03d768101bd4018a2b84df85d0

    SHA1

    0afe1a1cf8a91a43304937dd5fcf3de3cbe1117d

    SHA256

    4cca0043f7fb8d857fb8b9a744b27774a3ef031b41041b74123c71e50ed0ac8e

    SHA512

    1948c82f95f29c072600bf98b4779d40e01a8054786b462f7e9a3207fbfa1dfd630c7fbd04a6fec6f3c09773de4abe508b1b1fd9667665e11eb76db8d3ebf66a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    21c380de83b9997dccfaa8a059dc578f

    SHA1

    ac398035ac44b17a931084f8b788ae6a82e25da1

    SHA256

    44b8fe44b70b612e2dcf7afb08471210465e5653fefc0f5087b1268178c9ada1

    SHA512

    e1d33c74f63c65017975f6a924dc1077f90e80fdf3676c3cb62e37ef78fde7139f10edc910672612ab9fe161cf7461bda3c0636874263c5bc27bd5ac4183d934

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df93bd476ba02e12030e02f4ad0de716

    SHA1

    da6162fd89513e4e92386fded8a11f3cf6aa625e

    SHA256

    03126129e238a75b327951c5d3cd94970ca4f3e59a3c134b2ce1ca5d1ad9abeb

    SHA512

    4568578601175e243e19406926fc099256332ab32d20e018060c7c6f23a6ed5d0fa0b8475e77efd98e31977e19cfb812c9ca10ff89fc7ab62f1d5ffa84ed40ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d63fe640e58a534c6f3a4d3855c5120

    SHA1

    be78bc6b5db383aa93ab5236426e55f39c413322

    SHA256

    84c11ddff61e5ca73256aec910994d9c2655926d6ab0143a3a123478f09ff446

    SHA512

    705cbcfa71e0ddccd541299d9b70a302f67dac6879c405689d6e5e31d0201b89845cba5542cb8e57c305ac335446090431005ab7d7375fc5d4e112a6df766bee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f5339f50d36a0aa85ae2d873aae2c8b7

    SHA1

    9d58f2ff2919c1261eec6e65f3327705631f4ff8

    SHA256

    88f8d73b701473844995803cc6b547b22b158147941a014401e7b6d056282476

    SHA512

    dae69aae4f41bb4e007651894e7ba4afe1d71d5c06980bae009a0564ace1101780ac2e8c285e97fb7b968618d94155b5ba71f4289418f1137fbbedfbaf67d7a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    81b23de7f12f00fa71c6a715d7c78f3d

    SHA1

    93447ced00713859e7767bb3640b57c304b48c16

    SHA256

    f7495614a3a57f1cd51ea17962978dc3463253f7049ed175d0d4cbf6ee7d11c7

    SHA512

    b447d8e4ae55099755f917ad848d8779ba9edbea17c4b785d981be8a5621c962727099abdb134505beae6971b21da6b4b30a5b998d763cd5ae33cb9716fc0b1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e4b0f483e6b904f4fd1567f02a0216da

    SHA1

    7411819c6185297f4518a7e650e689311ff3d8f9

    SHA256

    a84da1552b5001fc34058732369c8fcd9440c0f79bc35bdae918447481d668a9

    SHA512

    9cd76b088f1d8103dc565014ae634ae2efd4c6c120e4f3cae2a58ada6a88632d8a0eeeb308e4bcb158237f4833d228c6ba3b8fca8973e63348940c59a64f49e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8

    Filesize

    170B

    MD5

    e5a27a2c52338f15d6edaf6c097dfc38

    SHA1

    bcc2a28f04bbc74be95833231a79bb44f87e35be

    SHA256

    6349b0fe507d0a94c6eb96b91267d41bc7398b0856e61432e7c9f8d8b80016d9

    SHA512

    958d76c92ce0a8b5a677e063baf95ab3cc757e18cf52ea86083da7a278cc948ca3d43bfbcd7f6d5a34ec9bf1ddafe72c9b3244c5759bae309d27cfa41a099b29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8

    Filesize

    170B

    MD5

    dce6a9e3788cb0723439733951ef3971

    SHA1

    1add3a38bfa682017993def7079d4ffc84f6403e

    SHA256

    ca19757f842048ee0cf2e043a38924a2bee290b714d3f992630c2b67bebbb961

    SHA512

    d963d342d1c376e641024c3cc54dfec3fc04d2af2e297e5054e86f448a9f40e5ea4bd5b3377d6fd4ac26e3c2081c75e74a4c6171c44367e988e6a14bf5ee77e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    480B

    MD5

    cf1b7a24c36fb2ec04d5d6dbdb916437

    SHA1

    9e62cef19a9c69b875d57812cbfa92c8f138bad6

    SHA256

    81aa4406d4b523008cccd5035845cf944826fd275c1a995f701bb2546c2adc7c

    SHA512

    3ef9fe0cb50098312c45dee15dac7af4e2b55927000840f4c1fc4553eec201fd3df161b0700cb68f9ebdcac0f7cb1d9ca2acf6ea3011fb433a59a54c813dddf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    73b3d48f4a6fcb89909508243f010a5a

    SHA1

    8ed404a5b246bd4904259999d94853949855116b

    SHA256

    755c1b66cdf78eae8551716e555f7cc021e05f2e4ae53369c1dc88a479ae5ce8

    SHA512

    f6f7daffc3088b0cb39c2d3999eb168f15d9832d7ca083178568ce0efc1c68dd4cecf1577f65cf100f08fba677cc83eb892a89555c82c7a918b602627f334a6b

  • C:\Users\Admin\AppData\Local\Temp\Cab61C1.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar61D4.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b