Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    07/09/2024, 08:35

General

  • Target

    d183d2e8ae594ccad96bbc5903c81d65_JaffaCakes118.html

  • Size

    115KB

  • MD5

    d183d2e8ae594ccad96bbc5903c81d65

  • SHA1

    3bb974d48ebe7df404c16281115d4bca5daff130

  • SHA256

    2afe40ba2a66b60350afb45d0479a17ffc21f9aed6f2a83ed1ca8add44442e39

  • SHA512

    7500d16ee023ccb8dd03560673eb68f38b64d3c235e805adbeb27605281d8a642ad4dab6cc69c9afb41c899b9d9d60b94b4ed800813cdb8c9f9a29e9dce8b91b

  • SSDEEP

    3072:/bU8TcjvG8rMdcXmNRS+ttwusl/s6l3gJQaR7Khf9n1yZXRjPpjR/2:YrXmNRkGM

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d183d2e8ae594ccad96bbc5903c81d65_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2824
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2824 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2688

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    40b152e68bd06420fbcc319c5f0a87df

    SHA1

    ac88464c5cc26e3adff83a5b827d2aeea87d5a93

    SHA256

    1b87fbcbb61e7f95a71b5020568e5d8d153d9bcbd21d1a6234fbb34a4584c665

    SHA512

    331e2dd7b0ca9faf0577fb137f3f391683dcfaecea586e755ae92fc647b6add88510d338d1e646dfc2ea1ad583a7977b8fd1895709e63c1316e8b3dec1f9bc1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    a372e7c80aa45b3381a5e8897b7f8670

    SHA1

    71f926d73f92b9cda0e8ba5c3026fbfb7d5af3a0

    SHA256

    8c8d097ceacf3537e7184eeec901fd8b012a5c4a01ee432a7be5f950ffda05de

    SHA512

    cc8c7f7535378c2520e33e8f18c4fe918bef2e5be4c7d9324e3741ce66b46e9e0e3d598bc424e4eb7b79811701d4da02dc3f1e5eb3de91212e1cc3243d97defa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    0b493363221ac9a9282315158d44b1bb

    SHA1

    b6f21d4f3f3ea0c46ea2c37e23b961ac03c99f47

    SHA256

    7c14259ab8c8d994b5299d3e03bd513976546a487bd35b3c52602cf4b183ef3a

    SHA512

    ae8d7efb0b8cb5f58cbaf2660931b9a0d5eb0e8e47db681c888707da780c5e5ff6c6ca351d713e777e4d9664d54abe78336066f22a01b3ca3d081353c2782bed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    36e1a32d5479d416c7260621a9ed7d00

    SHA1

    dcbf216c6716b5efea1e5c6bce507e1975591cc0

    SHA256

    937fe84f79569302f22bb35bd073f0103c0008df1ed2a12fdd4bfc5997ad866d

    SHA512

    2420b460ecff0e5e22f9c4844903ba1237560c5e39852c9c2b916ac91c86ba1cc9e48850f2b8063fb4f76859262712790ed784b62d50d6e59ae1e5c864cd5031

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37962d4aa4ed8b2c3254ad08c1b6d97f

    SHA1

    9e01137d9a0dcd1fde39286014b014314a335a7a

    SHA256

    b03c3c86a32f79228295bbef7f3ea554c7e6d1ad31b5744f35a101b4debbfe06

    SHA512

    482c8b327c951c6cf2795ef977edef520555fe709ad8675dc0bd9415e5f654288aaa7ef933dbbf5d67a1336192eb0b8033639ef5ebfc5a2a001f5718a177986a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c8a3fbf2cb04036342164667391c596

    SHA1

    3403c47e38e05c8138079bc7e1bad9c2a3bf4edf

    SHA256

    f6ebf1f4ee6dc6886cbf16fbdbffa694b066adc26dac291208e01c82611105e4

    SHA512

    6b5927636ea71693fe7030627003258054b045d86ce72bab25887187c2c974beeea3c075e1001972ae68a7d8978c3d0690802a16def31b11dd723d046b3f8797

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    77578c3ba68c27f5e37f01b043966557

    SHA1

    92d1236ca49c5c15cf8610be23b3ac3db018b688

    SHA256

    297a0f7d518b38bdb6a2a3a2620d8b9e8a0b0193d2c6d8deff95ca68bab05cc3

    SHA512

    1a15adf2a862d1d68bc12553afe8c8710d2a2993b38263de3d6e6dfea7a82028ccbaef2f65ad7a7b5b575cc2841adf85bc72d62d259c40a60774064a86e19e0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf1207fa5e4919a9e04b85948b0d57e6

    SHA1

    057156dbeb7f8ba3b7f7887c903e6c107d7483f1

    SHA256

    26e4bfcc017188b85808847479bdf41beb7569cbad24606ed5a91352afa4c399

    SHA512

    d10e66a8469a06f60fa7dc353d2c21750af95a68f55a3a0283c593519acacfd25a4f14b5a8ba55333a91a5d0ab3348b2731e5eebad7f1fd9f5248f3c421623b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    617f586643d99969ce8f166f378029e5

    SHA1

    cd9704a0ca7a064c619a1adb991836e5d040f292

    SHA256

    df81da0eea838687d3995ab200c149e23c1ed54463a8e3b19dc9ae032aa424c9

    SHA512

    299bab01ed641eee9b8fcac738705bc1ae9627a3ea27e8b79534ca3517d4de8f342fb00f2e3ffdc0610927fff30e5451f398ad7062618579de78b35bb782e563

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d1a15f0db4729893ca193089159c079e

    SHA1

    a934673d30660c2ed786fd88ed3151cfe5bf1740

    SHA256

    2cc1dd945740dd69de70f56e31ed4b50ba00751ae0da7cd57442920e595d7bee

    SHA512

    a231972457e4fe45a7a73c3daefee7d18efc39be061876e19afe97ba1232b5e311e53f30fb41ae41140f8ed22c15903e29a1bf968f7bed241fb52f8f76c61f95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7552b675e9e6bf3a84abb1fde9cff7ef

    SHA1

    7971ae127ab730513d0ba9770bee7101aa4bbc81

    SHA256

    1b09c2ce39bd5c4ab4c0db9f64c48360ad004a7a0b6be50cb1c3411a199524d5

    SHA512

    0d02ee394dbae81a93bead34a507860e7bbd48e9c4c8f3215afb20e0e91783b755afd2af3ba42066f3e26a4f488cfeedc9313375fb69dd833fd5adbcb27d2848

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4afb4c0a53f10a1618f4755f6ee1c95c

    SHA1

    9898d71d55b4125465a452196f73081195a0f6be

    SHA256

    4fb0e2dcff44d376801f155211f7fede1a27ad3f3f9ab3cefa928f44547005d5

    SHA512

    ee8c8af2ed75a173320a4760e2bae43c297b6af8f89a422835372f532361cea256f5a0f3bacde8e7393affe5e9ba1798ecf1e8dac0c9626a4e4e8efe256f0c19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f21024ee89ae0c518932fac5ba1c0c59

    SHA1

    10958a4e28aae90e3ae0bc4774376628f1379c6c

    SHA256

    b649a54b39eb78314e83372328b920f8b21d0e8802d2b43d14c8ecc7f27dfc89

    SHA512

    f32aaa1133c78c0000dcdb3c82bb90785ef657209cc60b444a66c79bfc454edf589b2ff70be8e642c99fec7822a6a1d6a6bbd09ecba733d75e44568a1e18d331

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ad61c666ad17b643ae31d0a5b8e11ee

    SHA1

    8f9b5b3eb8d2ae4ab0ebde8ea71783081b0c6136

    SHA256

    2ffde156148721ce60192bf3236ebc0f8e93257d0a526e5aed611820c90d09e4

    SHA512

    b5868188dce58a1b55b79617775bc9e892466951cee9cdc1b2647c25ef090edc362a0d7ec951a159ccf8d3b2911b95ccab88ebdc65e9a0bbdadaeec2b76cc251

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    747d6527b0b867df6899b953aeb5eac1

    SHA1

    45ca1da15f7293899a9b05f06875ec6529ec6c06

    SHA256

    c9636625c98fd1dc045568b4f072af3a623a4af90be81225397b5718eee7381b

    SHA512

    657f24bbf6e2e9a9efc80c8ac66e8efab650fefa82e288b68be3d197f829c185161ba88f183bb21a34812ceed9841dba18e51d93b7722ef04c77b724a9dbcb79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0133488da2da16fa7fd394751453c9a7

    SHA1

    e629588b0edfbbe0533e0dc5c8eb763893bd1286

    SHA256

    06d05c2f08abfd17def90dd0e7b435b5b617f6c7f09ec23f6b86fdc16e42f720

    SHA512

    34e029f36a108b92a5e7d01079c4b43a9f146642a0ea5b766bf0305bd02918bb0f5c40f57f2ad0c29d2519a26487b0dcad69c85937cbd3e6fff2328905b26695

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e828edc98f04f2250f5f88cf175a77ed

    SHA1

    aeded410233b9a7254e1c0fa7c92a73b6efd115c

    SHA256

    4e4bcf7adc37cd97809a60a25f212d58234fb42f305c3aff3c50c60880bb1ff6

    SHA512

    38baa09264357dd69deb5ac2e83114b6912d54c36c0aaceca517ecb0c18bd2685fd15eecd126d3f2cd050601a933d1b768b2a46c8637b1eef30ecd1eb387da68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    688e3d49b4b0e52033efc274f370ea0a

    SHA1

    84a9cbd3ca869a6164f5afabc539d821e7aad868

    SHA256

    5ff1970409b4abed32a8fc07d496ed9c00cc5d7d908df82a987432c0b3efdff4

    SHA512

    1bd4406bb47973a0e904f86958598c1ee285bd2b4dae63c337f198aacc3e133e554c98eebf902ffef5ba4ba6a747eec2aace1a5e4280a6418c7a2ed4730067e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4aad0314137fb0f123c857cd6fc75818

    SHA1

    1d797c7faea66a16eaa799fdd094d2d1bcd31ac3

    SHA256

    afeeec81b99a1474b82774b9d1864387d34fc4ac2fd1545c499ebca449d89ba2

    SHA512

    5b081fa665863dfbc828769b9aaea14804dfcd962b3a6f530febb0b176eacba969964f183b23c15291c94ba9afd0ff3eea561206c209042f955592d7bc8483a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db9a50afdab37504a2b6a0de74f88a04

    SHA1

    758b9b7343731203bd08498a989d3ca06f69f5de

    SHA256

    219fd95de081741717fc2fcfdbb923c8ca95e5a7b2b9c5f6eac00a4fac96d056

    SHA512

    c4be230b590c30edccd8dfa4c6463fbe065ac8ce02006660a21a0b1ab7e535fbc1ad68f03b25e893a7c939388f986db433ab36d1d7a0475a192468d55b9cda63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    071d531d06a667c1ae6c3076edc1cc28

    SHA1

    fa6955135fe6c6bdd40e547167927de802ce3837

    SHA256

    fb49fd251144d5b9779476f797e0a8b288e4b1515f6bf0188732f949179e8197

    SHA512

    899709569d3f21a29d8d2f377af02d5c180dbc54f47aee6356753be695a8f694bfc63439674ceb9e61543811967a203a7b5ecb72532d010488d911b676e39e4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d134a11dcfd0ac81a08891cd03f4d574

    SHA1

    231aa2a22b62ceb575a629070fea801d1e3e5a2c

    SHA256

    8c81f1afbffde0d1fb74b30a542b8189882ef7934b7ebf34099f1aaf560d566b

    SHA512

    02e97cc8c3094b8216a0b10b07fef1c5364664d3edf9089ca0fa9780d158b11dc3aa8c14f337de0deeff0fe40566df925c48718751354c418417c8f491edc3b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de36b859822b56d324992c924ee99a87

    SHA1

    c623acba5a6382426e5ce05f64be7ba566eb61cd

    SHA256

    e58e7aa9de1a11cae7db25f251e1bd373932cde1efb8702d46e19ab70d0af209

    SHA512

    ca6e7076e91120a94e6f519c392b3741b6119ea3b5efcfeffc3f6730cd5563e08859ac87c1f2c16e166f285ea059bc63c438d62e6819be0f472114531b9ad3b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    20d793a9d8437a9c339c73d8e40e1a55

    SHA1

    2403beb45ab32c0cc3209ea5f8af3e4ab2f671c9

    SHA256

    fd7eb632d4ecca69f3ac7ad8569e9896eb4d1e8e0b99bb417e4d5507d6d711ad

    SHA512

    8ee16960e3973ef46249be821715a069bbfd221503d14a513ab8f5dd4b50e2d0d37ac7c3be254e86dedbe5be65edbdca3bb4bae70cadcd1571bd056ac4566fd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f33d9c1fb894d76b3b15fbb5f3c1d661

    SHA1

    6d7518df0da829f7177ccdfaaf11d5e4e37f5919

    SHA256

    e774b63a6fdc624f9ad154bee238296ca778f0341e15ac77001f60b495de9fd5

    SHA512

    b2e07f79acbb672e0a512a95ef6483dcbc10da8b22ec53baeab4ff39298f1dd56408ca7bce3c5507085568962729ab5eb8c17eda4ac03756867e7a28f785f5b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\DDE8B1B7E253A9758EC380BD648952AF_F968CA97A68F4E6D5C104EC7FE3DFDEA

    Filesize

    402B

    MD5

    9d93e3a1b3af6f49bfaa1cb92b083fbc

    SHA1

    30bcebeb0b3c187ac275ecf9df3a2f5285bc94c5

    SHA256

    90d7d0d0c8849d51772dac64896bca8e8ebf88a94e9fdcbe5135036f180cb7c5

    SHA512

    9a92d429f890e61ab05fafca0917c32f1ab7d10030e5d3b65a2e633115b6518587c8e5da21d62c22b52660751e90fe262450553b145cfcc0e13603610607ea50

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AS91FDNI\plusone[1].js

    Filesize

    63KB

    MD5

    65d165a4d38bfc0c83b38d98e488f063

    SHA1

    1c4ed17c5598a07358f88018a4872aa37ae8bc07

    SHA256

    b1320e0dda0858c87971f7baa0d53063ad2a429d232fd06b0067bda8b9eeb0ec

    SHA512

    abf4c755d88193e7e05398b6f934fc561d8e2adbee7d2170af399e145e54a4a8a93988e4af4e28d6240c0bd1bda7035ae97f67a85a471088820baae8d89f3d41

  • C:\Users\Admin\AppData\Local\Temp\Cab6154.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar6155.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b