Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    07/09/2024, 14:18

General

  • Target

    d221ce2cffb697eb942e316f5c4d2e19_JaffaCakes118.html

  • Size

    36KB

  • MD5

    d221ce2cffb697eb942e316f5c4d2e19

  • SHA1

    4bf0f56fd6230355cd479984f0ad2c2719bd0cbb

  • SHA256

    b7bbd0e146b0ef5648312c1cac8707eeb1e020691a58e3a032ea2b455548fbe1

  • SHA512

    a3b2f3f01acbbae54f345fd3ab9bf93b34026d6136dc09deee7fb3a7874c54d096b90f597c3754591875e9d7e8f7a9d2edbe945dffc9347d9484fb0802ac5539

  • SSDEEP

    768:zwx/MDTHrj88hARUZPXXE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6TtZO46lrl6lLRcT:Q/TbJxNVuu0Sx/c80K

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d221ce2cffb697eb942e316f5c4d2e19_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1608
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1608 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3036

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12

    Filesize

    1KB

    MD5

    7fb5fa1534dcf77f2125b2403b30a0ee

    SHA1

    365d96812a69ac0a4611ea4b70a3f306576cc3ea

    SHA256

    33a39e9ec2133230533a686ec43760026e014a3828c703707acbc150fe40fd6f

    SHA512

    a9279fd60505a1bfeef6fb07834cad0fd5be02fd405573fc1a5f59b991e9f88f5e81c32fe910f69bdc6585e71f02559895149eaf49c25b8ff955459fd60c0d2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

    Filesize

    1KB

    MD5

    7d91c88126c70dc9565c911978538144

    SHA1

    cf60fd2999685542b417c10f64e70def65b2a012

    SHA256

    b2ae0a833a31cac552d8077e99fdc92a9f61272d8cfe7616b26b4c2299d7bd89

    SHA512

    c00b7f92b4c4f2ced132c50d8c74d7b39b54d67d8e898fceb29dd4e4b0c798f1298aa2a02f4b23795f6dfd70a09ba1a84cfc0c2c176fc87bd34a610624ca29fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8

    Filesize

    436B

    MD5

    971c514f84bba0785f80aa1c23edfd79

    SHA1

    732acea710a87530c6b08ecdf32a110d254a54c8

    SHA256

    f157ed17fcaf8837fa82f8b69973848c9b10a02636848f995698212a08f31895

    SHA512

    43dc1425d80e170c645a3e3bb56da8c3acd31bd637329e9e37094ac346ac85434df4edcdbefc05ae00aea33a80a88e2af695997a495611217fe6706075a63c58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    979B

    MD5

    2120db7b97245e396790235dbf17f21f

    SHA1

    37d19bff7ab45fb290964eb972cd876b5a2e28cc

    SHA256

    e68621eb60b9de93c163355942461f80a120f2ac8ec73e1a74e5484e32f6ce0d

    SHA512

    63c0088b98521758d527c9211556a8602613e7623b003050fae054c2fbddc055bb411f8db3801abe82e687ce66ccddc8a02c01892f5c07f2d725d6cbd3844a9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12

    Filesize

    174B

    MD5

    1fb31180d90d566486f04880f7667068

    SHA1

    24bdd1ef570fd621a0af771789c066be9b049065

    SHA256

    e70fed9cc913b4a683439dcfff429a14cb7adc2429de1ffb891fd316d74e5f6f

    SHA512

    c19c9d28af5deee26dc7a4258845d3d0e9a600aa4475d2ee212209682085a0bd8edb680ff10f29672ac0b34d2ad1f78415143c05d2046eb0fcaa390f928cee16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e31050d7bbb338fac677d182e0592af1

    SHA1

    0c797e474b19b17fa8989c93ef30835d9efa872c

    SHA256

    8a142fae685221459cb3581779d54ad7b616e185e17596e099ddcdb052bfe3f0

    SHA512

    3423322702752521f7e90975dd280dff726d4f4dee60f39055413d2d0bf1f380f248d7c72b4749a6f3fd876c4ed5f94df74667c164a2a9ec205eb290c0a13331

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4a7ec3b8850c679f72b0bb56b7eb50f

    SHA1

    7ed2af128de9617864ebc793743d8b954cc5c327

    SHA256

    15a5dbcffefec0c1d200058c6afcf92b28205029054e378fcac505dd0d0c4365

    SHA512

    60abd80293566d413a08966b56472829de025c8b2cad5f752bee3aeb8dfc4c9225eb600a0cf203f31268c86ba37b2b960d7d56d9936f60d41b3382f4e10a5dc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    194fc5eff55064afd8bf828a61a61c15

    SHA1

    ba39c71ec6721b68ba511d67ddcbebd22bbeae2d

    SHA256

    0508d28ebfe762194b39aa99f72e1899783d3d9bc57744e9f2384591bfada85d

    SHA512

    11c11bcdbb98050362661093ba3609fce6a3d8f725e34ca83e5e6c52dcef4b8bbc616860521f8f167f91623583b8f20cd15b3db4b4fb21a211c7065736887321

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d5c187cf47872666f24fdbf3a76b2a9

    SHA1

    32a3110cd144e9d51d3bcffe1e876a4d00b8a647

    SHA256

    c705b337a943089d12163d69b1c34853036b2611c8864573f8656035c085a1dc

    SHA512

    e7ef562467077c124cdd8c1998de1c782b9f4bae067da449363ca095aa9fd8fc4b1c473a0a20f2acc6558b992d77a4bfd7c10a0934d22a982f56635ac6729c40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a5e5a6c55f09a8a2fa7b5853e086455

    SHA1

    246875b3950461977514f6b521ee076adc826998

    SHA256

    c6ff424e05a0d1171629bb9179493ac441afb0ffe0f31989a9a422be0bcbe819

    SHA512

    a33483679e7f96938f9e4fffaf2cd8b279d7f45e0e6d907173c2a222171ba84354750954ff4246b03ce43b1b7ceeee0c0b739b94b82f932f75a19d2d7bbb5a02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    868474b5e0ebd0a74510e45a8507e5f3

    SHA1

    b206b1093d81dbf9638fdd65518d1006e8aec9ab

    SHA256

    c2fdbed9de5f58e1c7c5611cf1de7a3052dd9bb7cbbdce9aa3f82b1ae914c974

    SHA512

    86692f5bec6dd9611911eac259fc810809aba5260c940357eb532cec8ed2c3f88222b905d172f81fea62aed61a8cb2ba60b0d666c88739b6f6efe5949e94f2b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1291a20d5d2ea4d92424bb38f3cde05a

    SHA1

    8ae3f4fbc6db9d70ff900644f4c87734a6ee5451

    SHA256

    af2bd597f39a32cfda5c1df9632d91183615bb75e4adebcd1655f4f70fd51a38

    SHA512

    fd7f36e4500a07adc61eb6697edfcd354dc2af5b7bc32d50ebefffa9abb4bb0439f0d2b8efefa571e764372e96de7845418e24a1ed1e2a4e54347d870b53120d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1969f35c9c83da40be6d346d00835cd0

    SHA1

    4d4723b5d4c3699f9bd573882ca862e381aa9539

    SHA256

    21d8ff2ecb858f596ed5d7843e7b30fda67b402f67ab5d2310a67b67e275fd97

    SHA512

    e3095ef3a7ae85c455c424fe5f4ee2b0d725df7c23da59eac04b563d4a3f36ea7688672730f7d927974b611401d975c179c4a685b2a1f281bf71dfc46aae691a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a86f6bdee76406776fdc2f96f3f9d68c

    SHA1

    9047491c162dc42047613c04d444a8a304f05dc3

    SHA256

    3fef9d158dc3e3d20bda6f36fed57843e466d36d16d81460f174d03d459e3033

    SHA512

    a9811d13494d750c97a52353dccf63c2d5201e880d20f76329ad337ee7102e6dd5a61dd39e92a83a3d276432f82760cda8b4c56c377579a4b934c87e9e357925

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6931adf00db31afcaa669054021cdeeb

    SHA1

    cff8fa5c43f092ad10e20d0473ead586906f5da8

    SHA256

    5ac4e0830fcf8009f6b58a5c7d64317faba3fc18a2ad0433152c26af09838b45

    SHA512

    9aaa68df0c14292c23e21f564e3d10c058100fc27999eb0f65953369a784003c11e2211921944017b33f9a38c1c5ffd13bd6638058845a727cabfeaf5936965c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ae7d9479cf9cbaeae92d3a2ef79fe20

    SHA1

    35936ec28e5c437567903ac29a94f1ea27019d04

    SHA256

    b0ef730527b05b9b9ba9ead5037289d16b234d32dad4f48e87ec1b440b6869a3

    SHA512

    285d3c5fa5a93b57b1c8ceb13f8fd0fd3fe9b73bf21c59be26bbd3436a5cde844398e2ad87380043d324bb6fe0da12f0ef758b03144eadae221686df7fb73d04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f8fdfd1a887e9bd074aedaebe520ec64

    SHA1

    a7dd8b0f3eecfbd4537b9bcea29aedb81c7896d8

    SHA256

    9180594ed5cdcded1923e8c757d250e488e18eb985fb9b4e2e4f02004d3dd9ec

    SHA512

    59aa08504af573f62b5a9279859fad67d4d4a0b958774263a23cfaafec3dc50dcafd63aaba7b7e49e15e5364048e026b10e3dd0cd7a549b3f5e2080dd526b5ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ecc25e2fbd3efecbe69735e5368f450c

    SHA1

    9e8d119064e6eb156d34f6661e50251d887817ca

    SHA256

    071406419b977b3f66ab732f45cf926d3f3560f5ef2efbdc7806e56eb4a21837

    SHA512

    e5ae58bf6f540819717fb3cbd1c4ed0939f802e65daae2c9722e44c748feda39daed1e9e7749edfefc784a2ebde7072f67ed82a2328fb185d513a7519ad4dc8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    042a84bfb7c5ddcb89a124c30895d3f5

    SHA1

    0910a3f3985d234e606fec56b563ac530bb9ddf1

    SHA256

    c0368c00b42d39aa129709b802f46c0af97efd253842586e58f9fb377ce1728e

    SHA512

    2a0e1c11963dccdbd28d68f9be2ddd0012cae5cb3a2abb2b314536a9fcbb1bdc390be18450e975410de8dadbe1e73cf3edf40db1e8b66eece9b5123e9702514d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    186feb148acbcc0ff700e2d50cc28adc

    SHA1

    0c301efe07245670ba4ff7d41577c81bdbe04e77

    SHA256

    15c5d21f488e36b5d09853edd355e054707834f1ed708a37c27e94baf6795a50

    SHA512

    d3baabd0d35fed68aa55701c2cd95a1b4c53992a6cdfe832939d3dd395e68f39d810e7b5e44b9d8a092c9cc47e9397a323a38eac568325c25c5d13aeaef37803

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    100264283d0303088432b7b2c528e2da

    SHA1

    be2fd5cefeaa13177ff5d4a711c38e6d45708d4c

    SHA256

    39a9dc0a098f773c5951d2528fd0e56db0c6ab0073263e0d6b572bbfefbd4ee6

    SHA512

    2fa567202198d006247accf756ae088b32e5dd5e3d68af450cdbc9ce24ed023eff6eb9712b9a7a31557c2ac5d40c373dc6bb9bb902cfeb2e7410b11ea4175e6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d351a5a94b6fa0c5fbc26c811aefb01

    SHA1

    ae64a4a7500b913656842f35bf0e0b6038ddc0a6

    SHA256

    de8fac6619f9a3577c5d2071d76651b5587edc833a26674f341773b6508e813c

    SHA512

    96eb9ef07abb3fb5406f7979e7bc08c74bb929912112186c64b0d427d38994439ed7774be3e91fa9ff0b9cc1e26a7b602492c18a017a08d0cef179ca63378a2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f0f304f480381c1533a5c0181d33773

    SHA1

    f674328223eee5e8f53e0a123d68082b29c4928d

    SHA256

    c3cbf1e776b1363cc20fb7b2012ba76871ff3960cb53abee68e5071fac9e9d56

    SHA512

    a039f8372ecb11b1779105d8f1a9cfdd694595f9dbe529d9304ac07919b324453320d2c459f77416a7351b2d5c76cf2e2a399de5c23d79d3a8fc29c687bc403f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9120511fe20d4d78c164ee262bdf90fd

    SHA1

    c8efacf6b2d0a162c216df3fe4bc80d7593e3171

    SHA256

    d0b08b702a1aeca6d21fed3249057711a86b166c0eac09742b3c398454f240e4

    SHA512

    c4b66e15c912eb717640bad83c804d3627936f361611c13a6541ce260ade43efebedae527136ea6dd00634821dd12e9fb2b502051b8dcca85e2c29d444382974

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f2782e78f89a0c08a1a81c43c43eae5

    SHA1

    2f7ca4151db29de7a9d0e53dd2f90ea836ba4dd1

    SHA256

    e5a7cad9f8cf1e683e21c64d0046cf87ced91ad8669d3a8ddc680abf3e24d90f

    SHA512

    6a67e3838bc566938eabf02867a74e2c315eeb3cb920a21c87e2b31e94108e4430ada5627ff14def34365b5c6f23c23b2c6658c678938e1b364f577bca505afc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

    Filesize

    482B

    MD5

    63f189bea4086e9722791698855186a8

    SHA1

    15b97d6f5eefc874b32d354bf9a707afe462fd04

    SHA256

    82a77fbae4a13ae0ae6bd019340e9d532eea883daef0f39003db345c293ae978

    SHA512

    3b1e2513123fd00bc09794a35586d7fc63fae6e83440fdefb5d2b9e4337307b0e6c9a8245676bec7801670c0246873acc51d5cfd909e76dceb5fed5745d6f560

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8

    Filesize

    170B

    MD5

    b4fc0824d1c5a1550ca1caeeba470127

    SHA1

    f431fbf7ab89849838b051f505373c46fdf3b0fb

    SHA256

    016537f2f9b163406db1d93fe98a47cf89572e06505720300cd4427698d47675

    SHA512

    2f243e66338323999ca1037c476d96f4e7dff633ff87dc4929b73ad3009ac4c9a6daa471150a0bdeb01824a228c8c5010b901c45dc056cb273b5d8c2d4868cef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    480B

    MD5

    0f7b222e81129495195403dec180a86e

    SHA1

    df2e6805e43190bd155dc72f350d12661a8df80d

    SHA256

    2d1fab872a26696b88d0fb639abfd46c9de7850d16a004ea8db367f7996fa9a7

    SHA512

    fc4fe9de20e0da2edcd8a9eba0c3078527fe93d81828cf2b9091a68c54712b64b6040df19340bcae4f42a658ceee2f4f5a82fc305c78d45a8d32dd0cb41ebe82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    480B

    MD5

    684f23d132ea4acc54144359e3672d8f

    SHA1

    245ea8669b5342ec816676b4f9a199b04db961d6

    SHA256

    865d08e9f1fe18487288348e34e5214a30c300e1db11bbe582be9bc3754f753c

    SHA512

    46f589004eefdbc35489dd69514b8f6e42bf8288ea4394e7800a65cb5ccb22c9ad92826dd41caeb8b397beedbd2fc972acd8f35f9c0be46efd84c7e495adb954

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M4TQDAHL\936f26abd759555807b0105d4e610318[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\Cab85F4.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar85F7.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b