Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    06/09/2024, 12:22

General

  • Target

    cf8621c8a4b062be3d702c159da11825_JaffaCakes118.html

  • Size

    36KB

  • MD5

    cf8621c8a4b062be3d702c159da11825

  • SHA1

    120aa71972024d51af52427167676346b7036011

  • SHA256

    5bd2c56d86b4aa240277082c95c6bb9efb17b3ef9dfbf861d18b38cd1a81ba0e

  • SHA512

    9bc20fc89ac54c0a795671c0f9d9c4c70312accd95e9c038eb469a00a771a44081aa4269881f95bf6898fe22702c970ac40d2b4a3c1f0370cb35a3017b78f00a

  • SSDEEP

    768:zwx/MDTHQK88hARdZPX8E1XnXrFLxNLlDNoPqkPTHlnkM3Gr6TsZOv6DJtxo6qLA:Q/rbJxNVMuxSs/l8nK

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\cf8621c8a4b062be3d702c159da11825_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1728
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1728 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2492

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    225fb1cc9e5d1871ef538cec288cbd09

    SHA1

    972fa45897af42a40d237c69a99b04e4e53566a1

    SHA256

    276f9ed6c7d06a616d14f9b39e80754e8c971de571fabe67ad8a702e8d4d0e67

    SHA512

    d8220e52c3aa2768b49cd73a7f2bcb4c72ec08892899b7d2d713b352dfbe3c2bb0d9ba95ef25ec4e764e100beb9119d1e226ed9f8cc9059d39cacd77942bb9c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    13027ee7dc99db0edcfc0613ad7550e6

    SHA1

    e5192dbea411cfd982f4f1ca4ccb58ad4f90366a

    SHA256

    d77d54ce204f1da934594a4373a967fe2b43d63f3efdb5f8ebd910d5c08a24e5

    SHA512

    f1c61afa847ebbeddf56789c05e7c30fc11098acd7f5005355c5bad0feaa8eff69c1757304cf2708348f39f0988b15d25e6537e134b7cd8bb21020a0737ccddf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf27910683e190ac9f0d55eeb96244fb

    SHA1

    1e4f1c050750d470ba203ecc679cbcf3803c2377

    SHA256

    fc822a7ee1d9d90ad5e15bfd1047ea81df78ad9f008b06cb88d517c1b2088628

    SHA512

    5baec89690db573622c2e8210f1a2e7629bc04ecebfa4fd6a81045cdb06e49b3624cfaab5c65dd48c943e9ed0afad2e02257db080398f178bca68fe18c00b470

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    72acdc81419e51bb6fae7e5a6cbc559d

    SHA1

    d593926c182a41069f3c44e81b9bdf7cdedacf47

    SHA256

    227690c28909cd83f29f099f7e1abfb3f78e12941f8f5659dfa9b890db1bce15

    SHA512

    27827ec03e08425fac0601ce1a4445f5a309d0a9137501cd056333c85c9bb4b59a53cfbbcae8196b11b472db03d8d6dff46f22a6a7ffa348997ec231eefa9a4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0584ba4efdd14820bede1293312e6412

    SHA1

    26bb3e3f5a8d05c8a9f3e72f3561f394501299ac

    SHA256

    362eb82d31963eede052c0f9ae767139250b84bda4032eccd23346741f5f20cd

    SHA512

    36a896ee6fdd9b894f02799c03142b0c82819274cc1a9a0fcc41683be194ef72e357e485297a3c6838fa1ba7c24a5108ad0a5fd81ffba659b0ec9796120e0bc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    728e53c5213c2d2165b5b70b3077e6fb

    SHA1

    674795eeb76e8f68f4819e3e0c1fa16db70abb36

    SHA256

    253a30a1dbdc616b83e147658b7487bd77f49787038ea621a3c02c7ebc1b6f99

    SHA512

    6ed870d385591bd39f502d5254bffa73222dd0545bb475b2abb587f2b4d48eacab38bcfa0dcc9ce9204df4f5ea57b5b6fd78efc132b124a8c3bd1c830da8f663

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e4ce17c1add6ae4fee85466e48b4283

    SHA1

    05a87bc58c752a09b8b46b232d18800ba3079b57

    SHA256

    9790dff028b7cc1607b843135915c8a3b005b977efed887a7837273549f9a92c

    SHA512

    5cdeaab816d70dd3c59f74d6ae6e4ce000467fba482655738ac269edf007ac5d334911f3160794004daa6e310f26812f67500c9051fb5c0bf1be2dd79bb1b9d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ef1678ba9dbc276ab943d9355a511ea

    SHA1

    76b98036883d7e1c1b443f74d76e8cf0e60ffae6

    SHA256

    c88c59bc975d7f37e94e09b175e2c9e7d021dced2916ef7d98928046825fa803

    SHA512

    5849c927638023b262f0c7b30669c833ff51b0c9f206b95dc5056330dd588e3fecbf77232ab356417c63c658bc4f0675aa9290aa38e20f60dc315fc875749082

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3dc8419725d2edd2eccb0039583e74a

    SHA1

    23fdc02c661d69e144ff98cce35608e3e7828178

    SHA256

    50c73687d17b1206fa8a22b8b3d0fe0e396c97af994dedf282e1bcd5d761ffcd

    SHA512

    99eaa2c22cd4139efcf063c85330fc5babed15b83608bdd3692272ac4842dea5406a8eab07948a64439204b93891fac09a5708dc07c0204ef96ed5eac447ca56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9419c075848c3de480dd9765c2a8afb0

    SHA1

    90b48a3a499d12ad3cbe2993f50a8e116108536b

    SHA256

    f8ba7c0bcd5b5b4cd15474e8827242407b1de5638acd62cb5aa04ba91a73aac9

    SHA512

    d0cdc28a68efa2af3dd9f61f44351e83a7d01b93907840bb9f5af2a964bc7fe2f7f1b127170bc1f1d8a34147145a6e1fdc6a5f9ec73017037aa1b509482e2703

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eded24131dfb6bb39775fdbe8e170217

    SHA1

    23102c0603d0da0ab2349f2cb1972fc6e922d678

    SHA256

    c7bc233a451ceb27ad2afab049c64a693ac46bfc7402003239bd93c2c67a0211

    SHA512

    99900cd2051fef51b58a76b09dac336a383057a28bec804ec32063becd229942fc4f3fa879107b297331a63beb5ac328264cd5cc979139b8c35d1fe0eb124fbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4cdb4ce543876714088c2264128bfa1b

    SHA1

    2d575ae7498aee6f14b06360a546153071a40cbd

    SHA256

    266a21e0272c6ff782161870a3de1c113c68ae32febcd724faf6ca1b4e770be5

    SHA512

    4a52810d941e7b31ace9f393ee4d875e7cc657afa094153e2ab19a9879704520acc8aede8a263bf20330be047b64bc94e8cabe3a81f1d7758005101091da24eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cb9ef05643f9deeced9b44569819a90a

    SHA1

    fc1b090fa67566788ad2d98caab7f299501b54c7

    SHA256

    9df67be63ce355d550245f79d86f136f255568b2888dc433d47ff52272c07bf7

    SHA512

    df41ddda5a65037f7ce6c6d1766e7314a59d3609c4b739ab28009d4818040fb587027515dc393381905bea1f102082ad4fea968a2e4960b0256990cb5807ad56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    31d2f42ad1d94d441c7f483a3e2605a4

    SHA1

    adba7eac94d621d701d5d893348dd76b2cf695ce

    SHA256

    3fe55470f8b814460af8e2f1a8acd27a99f72de949a1af49fbb1a0e99fde14f4

    SHA512

    3cf4d2779383bd5ea6d3d679bc769790075c94cfd4de95430b16316d6aa525b991baa85f1bef7d5a9ee446c6770dff567011c110691e682dc68dd969bc9a5837

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22ead33b38d8bf0a6b184299d1637ab7

    SHA1

    57cf2a9c17028e00083547d387ae1802428bdad4

    SHA256

    ce88c9d7c6cc5c1bac2af5f5a162fdd0e6cf8fb1746e3db10453f606769fdf2d

    SHA512

    1bc09795b282deff09499a5dc30c8adda5e07c704ca08db5302b42e55618ae48548e76b978004a58a78f1a873bf4f21496f518ff3748036def33f7b0690d16b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f943fe55e8c272e1dd670ecef58eb9d

    SHA1

    84a055f82511cbbedcb5742e2e3b7e55866f27b1

    SHA256

    80c168f7ef61c229379e93e814ae5a63631658432b39aa21b2e88ebd68270593

    SHA512

    e345e77835103fa685994ffa52965ed494038aa1822c46c8dc87893337cc98ee2f5ea0b599300eede8c819e14efb3379a508d687c6e4734dcaf942273aefecd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f664c84cc39693d85a080997e2d995fa

    SHA1

    3095b902d4b60a24c13fd3f396d2864e9b4b3c5c

    SHA256

    167317d0e17165a6a56bb97c8b93d1a7d3e9f8ec959bf046260c84a806506a99

    SHA512

    2f1706210db4a380494e044999c69ea2e631b509a317f81de4e8b710126414d7ef1ccb1bf7aa9faff5287c920022ddc95da9deb068e66b040e98b86675022c5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    72a128ae3c3ff7f5dda64a7d48985da1

    SHA1

    1669233427e40acac1e9e4681646d2cdc331c605

    SHA256

    361d4453467d678651598ae6c9c030a31868fb04c4a6b37cbe93f45f9b32d5da

    SHA512

    d3309e91256071309c3b061157d7dddb4c2eda8491f7e507be21d4976d38db2cadd793549684cc2394fe6d49803f93c50897a1c79e15e4de88a3b4b44e44af7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    116421e424f5a924c571fc919a2b0475

    SHA1

    70a0ddc1767c022d2902d3839c9115cb82fc9eb3

    SHA256

    a20f941078c0a9c846b30891403ff9804027bf8cc8dd4aa40a2988186101cd0f

    SHA512

    000f42f4d99ed58fb392a153c796e1c8f512a4d3957ac1ebbe9e1f8474c6dc9ebbfccae7ef72b7fa9e8816e8a14307ec9028be944fbd9c054eced43c319e71df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5aa4b2a9d55ddbafc10a1e3f3f389836

    SHA1

    f561ffcd8a37d5c420acda0c0f9457e3060004cc

    SHA256

    35458d57192532554558ed00bcfa2258d744a50676ee27f364dcab6745ea8683

    SHA512

    77ed3f047370f6009feca18e236e4d85d44f1bdd8b4d6014fe772284e97c83dff88a59c4cf61573a7495e40964ac4e64bd94350d35d62225f8bb2a0dd4649bcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    176c0cfcc2c8bdb7d2546fcaf916b1a7

    SHA1

    507b7a05b50a0bbbde352b088ae989e8ed9c4c64

    SHA256

    6113a824d37cc5756a9a74d9b325a4be2631c2ac4d7d25e30653fe4fac729713

    SHA512

    a601f75a498dc323890a79cf17ee63d6de330c1779312b78db4f2966fb8b13f688cb7a5504870735ca1356a4bbd931f34ce9844fcd6c4155bcb0af33374998bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e216de140504a11c802bc26d341502db

    SHA1

    325ffbda04adca94c6c04e74ad9f2a8f03384b32

    SHA256

    130497acfa678ad9cb41c0aea549e36c5ba805596821d3d04fe724bb5acfc6a9

    SHA512

    20fe95a6045cfcddaf3a738349b5c8dc6edbc5bb19c9a7c0e8e16ec5a1662710c37564ff5b4d7f4993e3bd4662d465f5e937b9e33467247003b9b4ece20e3fa7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5b901a6a7a0d3eabbb90377e63080f2

    SHA1

    111939e206049f715e8701ca246261ab9053fc50

    SHA256

    f51915ab76d3194a7972bf35f474680b2078f5489f48dbeaae0d3cb89161060e

    SHA512

    40bd032576b30d8933f30515327a557be20bb22687511178aa20f49b97a56f0af4bc2f7fe95db5402b6e0f4086aea810a28a96a14f3104e036deeaef408fedb3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    607da504295c2b970e4054155dd0b28e

    SHA1

    83d095523f634987fd071e618f4f178bb7405a14

    SHA256

    d1e2d3e9c720218af1f213cd0f05b05659b03a08b662edfdfa6206c3af4d5987

    SHA512

    ab4c810338b9ee5fc6996f65795b59ffadb75633ddeefbf519c9a056e234ac0ff52b6b4a4b8889d5f5752d63a6e469da1c6470b014bcf40a4618de2176c273c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b27ee0972d256e7e8245c60a9dae7d52

    SHA1

    27c07a0aaf85df66357e5deb4d08f409b4866e39

    SHA256

    c0100065b0153c6b4811c2a3d45339bc2f01720b9a1c364308c90286fb07ba6f

    SHA512

    735461f92487d50857720834482c15e3006a967417c9b052185540ce10e866e48758077cfdbb9b6794147dec029ffbd98d607ce1b2834040da995f829e4fa107

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a73b7e7aef960d12c013cad7d708fa4

    SHA1

    9d7ed3a70a9add87e859373a10d14c405de71709

    SHA256

    a027827cc4ecc1144cc8d254c78148873102c1c03f9cd6ef677c923adcdb50df

    SHA512

    ece41b78368817ee391ac100d9c518c5804c6e3b2a1fd8cff66cc47839dc450c659bf0ee3f0d4130ec1c1c2c473f600f49c06ab9a634affce58064faaa151847

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8

    Filesize

    170B

    MD5

    657d4a75db50dd8353d80d3b6ffc7110

    SHA1

    d8252b93eafd4b64e92cfe0b7dfa59caffece9e7

    SHA256

    8e771fc6e372768745d56f0d8494f1207e10d75369cb3fb6c799081ce4f1054e

    SHA512

    122ea4f91a662e70f0eba10afde7e92dd251fdab94983455f69b1d437b0912c24362be25c3f3aebcca32afa022a6cb774e4a9c595542f1c85e5a04a1b672003c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    480B

    MD5

    d917655df4a8bb71722f68132ab1b08b

    SHA1

    7d8f1b6075215a29acce002ce25fe84c2b64204f

    SHA256

    d88216633e4b535148bcdcc8aba666a17346475042857931566091c0caaaaa56

    SHA512

    0a04d47da31b119bbe3aaccccb56bc570d0b95275666464f23df46770b89be667415986e6333ea40402ce98c11f82099c1788c8a3979d22a7b6422c2dc15846c

  • C:\Users\Admin\AppData\Local\Temp\CabA121.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarA144.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b