Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    06/09/2024, 11:51

General

  • Target

    cf768abf08475bf5beb5c661f181a6f6_JaffaCakes118.html

  • Size

    133KB

  • MD5

    cf768abf08475bf5beb5c661f181a6f6

  • SHA1

    a97368ebe69c2289d141a789c53f24e89b8785c4

  • SHA256

    97d7f9404fda80eae4993f3d61aa9ee12cf75613521a7caa56c0930103d0f95f

  • SHA512

    3e0d08b4818076223b9c892ea4ee1f862f8db2cd536ec6f8c2f7826698c3ba792512f96f771078ac03628a2b4c7fb795dd2cbbed2cc38fa8256e5b72e3378286

  • SSDEEP

    3072:cPipoSL+QK7aoPu874Oqh3CpmFEesMwdhYtCu:dyCh3F

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\cf768abf08475bf5beb5c661f181a6f6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2440
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2440 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2320

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    64e47e4bf56f64e00c539279327f67f8

    SHA1

    01d2db066993d900c688ffc73ecb87e3827b3c8b

    SHA256

    df1cfa6466e3b5fb3a335bc4b6af8ad7c131b2b3896fc1ee02f291670463b66d

    SHA512

    17a9a9baae4b2d19afca161dc067c47196e562ef58e3ede8d0c39868d1fe5636e1db57a37c761fa25f7a56a14a893feb71ebeef3abb1939e337ce70e1d920803

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\DDE8B1B7E253A9758EC380BD648952AF_F968CA97A68F4E6D5C104EC7FE3DFDEA

    Filesize

    471B

    MD5

    0833b6439bb9eaa839a5f7ae01a9494d

    SHA1

    5e88401b1df31dd2c70b00e4c1cfc9f3d3886244

    SHA256

    8237a475d5665559237bbb3e0d705330c0659b30e15f0d63f78d314be8e29eea

    SHA512

    1952c3c3497ae91a6713e3d92e9c256e0d3f8a41290dd8d913600d4b406518558e00c35ee1211b75c16ae0094e02ca198769bdd6d66db2e2abea2e085ff5d0b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    4d171d79a85ee787765c03efdef544cc

    SHA1

    04b4d92fa45e9f7e433de35e3817917085e29e2b

    SHA256

    fcca87d0d371fab45af72a0c6ab3730481b29973fc70b1f63809b6c8b39f2a98

    SHA512

    0224620b1570b5cd42055f7b7662c70479f3925839f27562ae73016a1cee5f962351c8c7482893328050183226b8d81f14042e97909143267b6ce00adb4926ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    3cd72cf6f364c55f11921bd53d6ea896

    SHA1

    1e49d4af60881614475a1635b7f8a63545ff92aa

    SHA256

    9b562087cafa6be455b0ed03c7ca3798b2f4ab4ac28ab65a3c4ce59639f2884d

    SHA512

    faf9af0de5e729be1f4aae56260a2a67991c9d12084f1fc01c6edc6efcf8689a2a46315e6121f750c81321d0e6fd03b6d6b9a28d0be00c32d425fd2ff0bbd4ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    40c28d05424c720b774b28e80552a285

    SHA1

    e3ec837e9799e25c61bb449603c5ecaeac567b2e

    SHA256

    cd6553a0a9624002434e3503bb108020c83e6e7a25363edfa6d50c396e634ab8

    SHA512

    9d8bee8250501f17fda72aeedc8fe8b660ebacb2dbbb9683efddca23e913a45af8cc1e3fab1d3c30e5386fc18e7a16962104128e2986900f511aeaee5c1025a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    513471be79ae8759698b4f814ecfb33b

    SHA1

    091db3ce720c678329bc0bfca69fa95aca64a500

    SHA256

    85a194f4b2d67e150db86c08c835433ae0ddab8cf9355869ee5ab0632555db66

    SHA512

    3368afb4e39ab4adfe1525ce4f552b30f97c7a3b5fc604b654165ef7c7362c827ac6291967253d34ed7067b17cc2b6465959666addd743a6c7fb7564ef4e6cfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b012552d9f440e49b96fdf415a916e8b

    SHA1

    0bb37530eb5360b73048345e899df90bd83739ca

    SHA256

    1a26888da712b3aa0d0dcaa9f4e963687e7b79f346fbddf7d691ccd2353e8b26

    SHA512

    14bbdf463840192ce2e91b858abd4645742854763515f9159b6806a283c09c941292298ee2201e45b33456a4371363732cb8cc7d56c0bfe908cedcdb57c57854

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d2fcbce022c2a853826a742de2c98a58

    SHA1

    7d3c55d6452afe117c7846c7905636bb24b16c93

    SHA256

    2896ef0e27d8a64d2f6d90c75a5fea7918d8235f3ff5ee9b4a50915e71d7f7e3

    SHA512

    9c83486651edc0c3a4fe9308b0b86bbb148511df2938cb90ad653a0dfe723923d8bb085fbbc9d999aca7914ab1cff1d2088220058f95afe62b5fad299462362e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    58f63f1ea481b02c1b05cad5b04f746f

    SHA1

    7604654b11b0d61190cc4f0cbe95dc0a6245f6fe

    SHA256

    4524044791ceea014ad3c17a937116b9465ba50ad1e10d9efb257c70b00d15a3

    SHA512

    130d2525b2119e960893d76a98e10a8d209a0ecaf3cf8f92c0432fa0dd506618d33aa5476d8d373627baa037ef9190fb7d10898d4b9908b29322d63974095b70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78203b6134c668aec6d48602e17d15aa

    SHA1

    72aae81156b29beee492909a54e8d4d3765b03a2

    SHA256

    d1deaffb70be92c4d79b3ddef314f40f2e228cf8367d54880e7938c6de637a0b

    SHA512

    17a1236fc2b84a0acd992964d8f3f13aebe23fa287edc7fc0e664002802ebde616e56a8e65c40d3507c8169605979822e76709b37370d0d41039e1f0d6dc8d0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a3eef787d523952e8d24ae351e9499cb

    SHA1

    623fcfab827253ae851ffc36bb9602f77b524692

    SHA256

    728d46f4a893b11485a1172b477ace8dabf5e80c4c3b0b07fb47a75c15cd374e

    SHA512

    3f75b19de28a41be0ddbfab56ebb06336225c6e162616a56271c84783b9f6b4a86c6cf48573fe7ca6afe512c10b868fcac43e30df12ad9ced240c794d11bb617

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6cea79d629dbfd711bf183cf2e36356

    SHA1

    57cf31877c9bf610840bb7e956d2dbf9b5142012

    SHA256

    8aa7837740338dac81000c0d51408070274e7661885c8452bcf136ea9a2a0b57

    SHA512

    f7da4ef60b411e4a5e93dce67de95750bb43951f019b8030603ae3e86f3084ff76c39aa04dd52eac13baa13cc7aa7aafe81a5de7f43dacd37e2ec683f49b5a29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4da80e5a591058bcdadc1c51e89b627a

    SHA1

    5acbb6c0badf1e589e28e631f8b9f35e728d025a

    SHA256

    fd554a2059ae42ea17aa743a8393168f6bb694be9112e5901cb26b7310205deb

    SHA512

    04f321d0af6055d0da6f87982c7f15c42733b3b22d771d2594c794d4e8e89482cc2146c38221977331917daedd3fab703b12dab93378974b2519e8ca937db5c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    779f2027e0509a999666413ebec00f7d

    SHA1

    df048333c5730c362a4b46ac2bc9759b868536e0

    SHA256

    f0f0204ebe270e835cedc78489a73bfe6f35477d2f6f5f06aac855fc6daea98e

    SHA512

    e8cadb49d50016037ae7be2b400d1b80fe174f2f0d648e4376324d06ffaefa8e5ac5678f0f414e8bfb015d2e40ca3d8461b098e2a510bcccdfadb1bddf9ad410

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    38df5b381e18fde9c6095996180e68e7

    SHA1

    278e529fb1f509304a631112819dbcf1fad73147

    SHA256

    41a2d70868150abcb5c0d3e9df6ba0a264c59c6f8ff48f79cc205c8420e8e15f

    SHA512

    f0f52d738c7f003932994111a9a9c9dbe004d399aab2935c85e2064e4915aa2a10acf92b84554c1bfd45fb03b6b27aa0905436537c3ab901c130551d3a83d7f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee3595dd6fe4753bd307c48b6cbdea75

    SHA1

    f2b8bf65aebc2c469d55e3e8100821ef6f8f1903

    SHA256

    2403a7880e34198695b7a963a9162a86ca58d97047ae5289b4d3912a1944e9cb

    SHA512

    5eb4ced79c38e43c602264df53fa35ba7d03ac9af8b24bf08a5bb7397b80346d00ecfd898583fdb7a6ca3702bfd394d740e42eb6dddf7799a622096caecf0266

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5063f6328b6cbc19130fd3fc89e00880

    SHA1

    039692e88cd731815723efe41444b637fdd38ec4

    SHA256

    9e134e5659c52130364508636c5295d5e290c4f18a54049dfe33435adcf38841

    SHA512

    41b7a5514cb138a90961f079524ccd64c4286ba71b9c8b03de3fce78f0e94e7699c4f5cc0e11cda8020112675646afcbc5bb404a6dd706831cd3183bb15de510

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1475d434c8476a25bb74c2ec9de6e413

    SHA1

    8ab0dcef4bea5b569649ea099ad2a1da4c432513

    SHA256

    b443cdfd8a4b00cdf5b98411bc80b102fe349f4657d21c31f0bcc8f8d26e2e8a

    SHA512

    348d1c3c121c2af5967ea268578c16814f558150a5e297ac00b04d9729846e7191e736b22804a98488ad24d42e94d0099f30070501e5d5b0cc5d145346de86d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1a6818f3e15548aa9040688915155653

    SHA1

    aaeca3384f9ad924223a26dffffe7a49cce17fa6

    SHA256

    2860ba0ecf18c2dca9cb80035c5553aee0578f7d0bd0fdb508d67cb72cd14d06

    SHA512

    8d47499fdcf0b3d1f47024538e5a70b5fefaa2a24b801f7dc2306970425702ead6e7955d0bc6ed96fd9e9c2622e11778c165c8e68bc02a469bacec842c6793ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a59ba4880b403c59dff6203bc786b563

    SHA1

    7c5529791d1f4c97cda9bd028b41ad9920ab8d13

    SHA256

    b9d1cdd8dad6265295eceb1eed1061d1fd87b0857d7585b814420cf515b1a7e7

    SHA512

    5281fdc06bf5f79241976799b92ac57e73163340edd469920cbac8d24f30c36a7eac4da2bea1ce6d94165cb8170eb680da1a91009cc43b6c72b18cc57c3b9893

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5922d17855a17e7de9e10b9239c91ac4

    SHA1

    01e768178848c1fbaaa2acae7128f8b51330533e

    SHA256

    aad8c7fed08d931d723c025e253e07b232221fc374d69edeee3761cbd74e19e7

    SHA512

    55c26318aafdc3ec8a180fc9b41d0e8ef29dda1cce86ca730b029bd6a0afeaa0ac3c6147175dcda8d6471fbc845c93981a033062324c4f924c380aafc1514587

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d6b8ede8be9329120c0666b40236e31

    SHA1

    d34c3ff9c8c13d1e837a22ca9934d2218368eb62

    SHA256

    cecb82ca7e39c4c8fbb91f5e53008c7263a6de64f590af8548a0b2c8d28a2884

    SHA512

    45b6ff751524e9295c5c7ec20bc3e04c7e4849213da94ba338b6f81481afa37d465b3c2966bc8821739e4415454dc06b6e4a989c22fceaccb5c0091dda9d318b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cfc578b1e47f5463012637ab58d73380

    SHA1

    d9cb9fc00dcdc7d9c975b2e5dd09c7556f50cb80

    SHA256

    d9fa92f3236e5267abd9ccfdbe9c7fd125e03e02ad98d082cad36ce347809dce

    SHA512

    d1d265178b487309a9bd4eca156a0c574dd8d768e2670cfc1baae32762cce07940c9edd2cf1fa0b044d004acd9d437024203bfb7384572a2e0e433d7c9e24678

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3636301a07ef0922efcaa47d93bea3a3

    SHA1

    589325df1d3cc844b3c12c61d3f8ece457988da2

    SHA256

    f5f98a39df9dc4a13276092c900040dd2e3ede971eb0ca547844f08c2efe6560

    SHA512

    0915b6c34772262837d6f638cd31592bc5093b00f39cf8d7367ac4315710709c55050ce382d97a95e91983105ba65b623fe494ffd5d53c355d3ab022e8126915

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4776f85a371534f1cd5e47480483b419

    SHA1

    47033042034b72989f5af2b5d934dc12e6bbcadc

    SHA256

    e98d2ab94201b065fb8363bf1808f7c0bfd8c10e11c7ba1b3bd603f3900b40c6

    SHA512

    48ee2dfe14ba3ccd1e7abd2b83e8e11762ccd7d1f0e1351c17cfcf164ab0cca1f3839d2025488c24295e6b208d1f9a2af4135ceec19b38b262011bb1bc5c7bb9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9UR26M8S\1380534674-postmessagerelay[1].js

    Filesize

    10KB

    MD5

    c1d4d816ecb8889abf691542c9c69f6a

    SHA1

    27907b46be6f9fe5886a75ee3c97f020f8365e20

    SHA256

    01a956fa0b3ea8cb90d7032608512bc289c4170bf92759352e40062d5be2946f

    SHA512

    f534f057e46998bd1ff2c423ad2cf04a880c4a5259e95aee5c6ae34ce7121ccd07ad1bce5d4c3a51ad04f7411b0625da78808326b13d2aeefec502988e113113

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S8GI6B9B\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    9e5f0b21584389dc1c7b5da4a900879f

    SHA1

    191b84e0f5644398ba99e0aa141a6778c14b83bf

    SHA256

    3e21bdafa913fa25276358db1269238db3012ffd8748626cdad442f838e890e3

    SHA512

    c1720a420df680bcc46625355ed6d5c35ae280a813692a0fa293f3ba113a023808a781f1b8c9dfeb3ffba29606e1f4bb4be4233983089602e2d2c20786fb0427

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZKZ95V4R\cb=gapi[2].js

    Filesize

    67KB

    MD5

    ed72d618fe48f6fc42c19a4b58511e72

    SHA1

    80a2da4af91d56ec81c7b672afaaaa72c83a4414

    SHA256

    5bfd37a756bc7772aa6c520102870dafe2d3b808c562412e30f122a7908f8ad0

    SHA512

    5378b71a33f67309f788b9fce32daea44051e7e9a6aa326bdd783456ee9eb2f4817aec2ad1e837afc1853acba59080b0114d32c040ea731ebd703f0a84dd7ae1

  • C:\Users\Admin\AppData\Local\Temp\CabC6F9.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarC70C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b