Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    08/09/2024, 07:51

General

  • Target

    d3e2b9c84c50ee6bb8ec27a9b44afbdf_JaffaCakes118.html

  • Size

    30KB

  • MD5

    d3e2b9c84c50ee6bb8ec27a9b44afbdf

  • SHA1

    0061c439bc134506f8b887853fc70c55440893b3

  • SHA256

    a40ca31aaef75b95bfb0cf6a08a22108a1c64d425621515511e70a0f9d861b31

  • SHA512

    15230988bd71274da16fe64f3549ae92babb7b220cca33e94122bac48d218e3d888ad9c2096bafdd7fb253fc3e1613006a4e1ca481d163d49e61e540a971f2e4

  • SSDEEP

    384:bNE6ibeh5hkTYZ5uUnJx9gk4sUXrKXQN+LnRYyN+w1MFIgM0+ctMHqboMAlJKDoq:X6owAnJAkZU7KXvLRYMysnCuMp8d+B

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d3e2b9c84c50ee6bb8ec27a9b44afbdf_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2060
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2060 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2820

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751

    Filesize

    717B

    MD5

    822467b728b7a66b081c91795373789a

    SHA1

    d8f2f02e1eef62485a9feffd59ce837511749865

    SHA256

    af2343382b88335eea72251ad84949e244ff54b6995063e24459a7216e9576b9

    SHA512

    bacea07d92c32078ca6a0161549b4e18edab745dd44947e5f181d28cc24468e07769d6835816cdfb944fd3d0099bde5e21b48f4966824c5c16c1801712303eb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F68473E44D1A4A6FC2AA79CE8D95F4AB

    Filesize

    504B

    MD5

    bd576f239e32c5a3664eb33162d54595

    SHA1

    f7907a1f2f822ae48c3bb51d8b78f7ebb49d527d

    SHA256

    4725719ab004726f8d089a944b28ba8751d81e4a48edf51d40eacd203f8d7a90

    SHA512

    6afff1be24400b920778f5d5a1342810cda0dc28826e519db3e0af26f8c5e8627b1d251cdf40c98de6f1a68984c06a04cfd821cd44ccc163dc587accb742c829

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751

    Filesize

    192B

    MD5

    7d06ffb21117c99c2a0e92ca66f55c5b

    SHA1

    3d7d674d052786eadf3b0dfd0aa4a91a1d4f11a9

    SHA256

    5d2492ef42a9346347b668e33f604713ba71ed252d596d9bd6fc0bd87d29ce6d

    SHA512

    6329cb254e684fb249612bc39fc8fa5fbec4660aa08da8f13ee4fc835585d13aea7b833d1a39f98b159db4e1edb4b9fe5a2728936c7ad66c2ea7962e1bbe5df0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    73a00b02ebea2883722e1789ef119db0

    SHA1

    fa90d73635a3f832c6df948a726893b025a12ddf

    SHA256

    9a3e981ed9830aa4a3110bbbd48547e7d37af37972d38bd761ef4fbc7d3772cb

    SHA512

    137ed8b859ae57f2a2a2697eb3f44e7d16c6aeda800dc1b82f8baf687ac7fadce8c3d6ac5b1fa4e51607b1c2df955ff47bcba4419a4b0526f8b0501398401dc2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    36098f02ea48f925ed6e0c9b3905b6cd

    SHA1

    c97f14d91b5be1ce6e2a9e271c4246ffba3ffec9

    SHA256

    71544a44dd8ad4523b9d00d4f74046955d23cc8127f40df13262d2cf22b69901

    SHA512

    0b9193387c9646aff183906b9f28e00602b26e3bd432bddef85de21f6346d3fdbae786b2f4b46fdccd6c705805c6d3677a48102b81dcaf3a7249c903f5e66b86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db4b9c4f6520c496efd37eb62cba7439

    SHA1

    077bd32f39a06376fb5556f261fa2a5df13de67d

    SHA256

    f46afc148898075fc3f15453afda555beeff037cacd5ee5aabe024ea2be3d226

    SHA512

    bb1b41ce8854930883f2193a32f7a59ed2a806468b26dae0f934b9b0d0ee21b278de959237e45639ff6a8c87b9810087a276d10de9a1f18afe6bee42525d4389

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    613c4e17dddfbe920712e1294c53dfb8

    SHA1

    9d9fa0d173bb5472c04877133df03b394655879f

    SHA256

    ec35c38bc24ed71fd23abae816b19bbb319a92148dda1cb849bb39dd96acab59

    SHA512

    1070a791716067117b367a594fc6054de881001e4621fbfab03c31bf51c130db93e2011024d25abd4c7e6a5c913b8f15677056340f8eb5c7b58207aaefa528ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5d2f6c0d57b4e17f9c1c04db2424fdc

    SHA1

    57196f725372153bd16166aa3db3104fb0c235b4

    SHA256

    d9cd2cc51e2804b87bea7d4157ce4ab78839c0ef808a8b19b992386474efd3f3

    SHA512

    af9b121a4d2f3abec7e7efda047b0cee298140bc92791108b94b99432363122372af7aa87494abbff8ffe15260330c27a3e7bd42875cdf0898adaceb11fc4030

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d5544b8d5061b49e8296cc03009ffe8

    SHA1

    b0f1c6a618fc0a01d37fdd27c86c83ef7b283a64

    SHA256

    e23855727be715fbc4e0ac0415313ba7f5d566c777f52050158eba1556a9a1b0

    SHA512

    d89afc9667550a675d7d34ec9d96d1f71f2e92ad39102923f1e4c7d001d745e108b598bec99734fb9ae6589e1ec071b4a3e192f6e1efe0c365bd733129674c5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c7410fb02aadc5205eb9692e15be7b0d

    SHA1

    9f8bd43bda5f21c3efe86fc290d8b3b735023425

    SHA256

    bec90538f577cc1023d85289c43a58740a9894c9c849d65e9f85d2871a00d8e9

    SHA512

    734da7f1df9b2d5ba78b1f932df7ca11119e8e1114a93f70e8000c95db63c6fa7a28903221e01c786b157277cb961f21188a8e61f5d0db04a44c8ef42b5a294a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f78e69154ef1f8fe4e364818c60e0230

    SHA1

    a340cdcd24ed006f72d8032b8c685fca8f8f1a39

    SHA256

    8b6954bcba8aec6631cc92f9fa651e373e0f57f3ff0e3a20af2f8875a8268035

    SHA512

    9ca78702c4fbc8b5a237b992a0d5bc58ed11ada72cecebdaf162c8cba2789a929eed93f99ce50cd711825ca3b6ce15edfb2b433c8d77aed81b870255a3de93a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d9a4fd26d047c91b523f93f26d9c013

    SHA1

    a9530a5f7f92441ecfc562691cc75299796d2159

    SHA256

    5971bc187ce1afbbcc302ea1eaa9e2f5b58868c7dc48fd09e6280d4385e5303c

    SHA512

    24b85afcd5b8cf77df74db75ea2dec97bd821346535517432ec3d7701f0305f37de9d41f6d193c5b471abae86ae32c4b1eabc344da7532852dc3b6d2d27e505d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6f0b194da0185ba85959bcb0e10f786

    SHA1

    f03bfd1aadcd3b828f04f296e29147f0ae3a2d11

    SHA256

    1a22b2318e839e1fa2d8afeedd0cb352549883b8b58455a169b244e54ecf37d3

    SHA512

    7b459825fb7dbb97617d482a4f86f62cb5406243cdb38155065293c6d890077f1a6372d19a6892214d34471353a48821655a7ba9f0d01ebe98c71291c5f3300a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b72c31f32228c6ab159bab921a88224

    SHA1

    c3132f1c1d9d3d9ef2dc1a86c5600f909f2be02c

    SHA256

    0647260b0757d16563849e0bd6559959a97dfa960d00d22b698222b65cb713fb

    SHA512

    b386b932d7a30481a2a45dab97869cb0aa3a7ccb0c9b32282d0e7ed49910adaaf74f5676de622e6e8bb76432844b25b495ea601c7ca775d14cc5f84bdcb135d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a24c8e0529d7e87077c82bd94d92884e

    SHA1

    8f2f88064ff21181dd6d0317891955b19577262a

    SHA256

    905bbcbe7a8f30a23f417966b20691d526d6649c57f01df15d40849b3bfb588d

    SHA512

    d551b69897a77beef6fafb859cda9c48683bddb414f589419bf2b2132627048500dd6025eb0776348c6761ac0e89b0db34ffe1b6427ee314d9b73a40e76de123

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    23e7ce58460d3117d86746312f5542bd

    SHA1

    89e03283f7d7688b3e045b6cfba51ed46b5d9552

    SHA256

    485d236bcc13fa32a065b4979eb7e57419a0fb44ca6a8800d2f82eb57ee3f67c

    SHA512

    213f15b42c7336cfc23c470fbdba15e47d108fe9ecc455a3733c61cc8c0e1ab106f88af9dce188025549f7fc89b3898ac5f04b31b37c66bcf3b8be6ae28a7097

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f892baaf2f3f981c86bfb1694dd7e517

    SHA1

    372aa8ff8a625c1955d62fdb263fedd88b68d5ed

    SHA256

    b64a2e8573a11fe1927e377917be639a367aceb49ca3b5f00d9b525b6a786af7

    SHA512

    07a89ad570bac350e531362a8e7b5e739f36036ff3f51909dbe79f5814ad536a776f3477b221a1c2b9f7c71dd77f185bbf97038877425374a45e35b8d41ab16c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aaa5f05f73d9f3c60ea16f2483fe335e

    SHA1

    aa8db7e77ac19d054983f78ee828b6ec51e79bc8

    SHA256

    80ea2edbbd72ed727ed47a4ffdc64d3d788edd36813f13656b28eea165e07ccc

    SHA512

    29f3b8088283e93f1c86abfe107a440e36dbacb5cbfed81fd623f0c5b6678e7637e5c233d7155851ed52874e8fcc79d233ff285cb237d3394f8924a1b9727f12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac117bc26a3462012f4266bdece1a946

    SHA1

    a1181a6fc4c48a9ff1269513f511aee80c5d0356

    SHA256

    7d5c6a3c2627f0e06a2d4194d08895983c18dbd6edd36eaba47964e37ed20ea5

    SHA512

    71feaefe4b4d1016ac66afff96dd7c549049ac0e7f157e1e55206eb7aacb961d7018727c775a5278eecc9eaf1918c2782a2fd32b0c6e0d1d1da1d5f3ef892058

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    39e387cd394d9435386cef6c3ec75637

    SHA1

    411a9a348c4acc5fda08182329fd661ccc9c44c6

    SHA256

    25bc28f9d31f3a943ba75d6f52dfc914710a191e27aeb8e09150d5727a2f88ff

    SHA512

    6ad507796d89ef3f1a6e61289b51ebcbdd785c691869c1b775df86a5d59a7cc3b8a6d2d3fd9f6d9c2a89bcbd6c6ccac741f138c9f58d40e8e7a506afd157adf2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0175a775c3a1d3605416d34e8fd4d108

    SHA1

    2e0fc4e3bed9b4e311e5ca152b76edf162aae914

    SHA256

    df7eee8eef4c03a658cdbb24a8774f4ea955f36b8323d9e6eda892ac1b5e73cf

    SHA512

    6e6414b1f681e07f09bf011f32ba008114145fd80fd26c3fd32fb842ce8f40b3aa4299c248948e1c7d74e51d331b574c519f9e87e5bae374cb6d922e43a46b00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    39a176c3d3ec6e1cb145343123ab7a45

    SHA1

    bb30cdb946157331d545580f71273065036d9d72

    SHA256

    05eb7ce41219e8b03f8b9349b0f3ad0e36e1fe90041334fb193e9b2d13e186c9

    SHA512

    8e2bf5e51d9fb358265cc97a990230a0a79d41924947f7e2e47e258f3101414099753791b13f93e72ab545225101086f115de4c023a7d1560e45c647a0635c68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a4aa5aa4c9aac3db17d1a67533a90b5

    SHA1

    a175b36c2a47669940433dc79e7557136cd3639b

    SHA256

    b3d1877ca61c8ee38b2ce861c65a3ab484ea4ae15b48482c9672af8e9aaee35a

    SHA512

    7498571299a07845910dc39cb341331ac4209ac8120a9d780ba33eba5a29dd0fb9aeeed035b810dfb12e3de30c02b25a089908538c215e096660de2a21dd3c6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7901475f37c60e979b5ad73b3113d7b

    SHA1

    b2cc086c6b8095c84ad40a2ac727c6a3c6815b24

    SHA256

    f7dbf2e707e1241244b478ed1b7fc352794bee95066807fe856a8b9d3098b120

    SHA512

    ed0b397de37700497862aa8113f1780bd702a0051bd3ad5b9b8ac5c760667e198029232337d3eed96a1be2fcf42a9973dca15e11e8cd0de1f02aa71bd5688660

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    38a15de852847d76eed483a5d3ff335a

    SHA1

    c3d1d716ad1c3fcfd695ca786d5559a9ff9aa92e

    SHA256

    ddcc6098bd67fa008aa551d4e4eca21701f42b663642d2156b664d42bb412378

    SHA512

    1350bf5b730a86fc8c539c87485ee6efeff32ac4d5ae4d335906f860bca92a5acc0678c8531d04dd4fbb9330de10502a06ec0a619ea46ff3f71e5d1453116f24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    51aff09da027b1adf3dab42b7a299787

    SHA1

    7865e71f49f4f35ac2dbef2d9827905786aa43f9

    SHA256

    87b259a05ce2ee59a8c6410d9f41c58afbb18b7e58cee0da2a5e7ab84e7cd062

    SHA512

    bef14fbc2b4eb3f4eefe8e2572c82333cc30c2ceeac8b7e3202d003af02256bddba1e4673cca085b3dd01b921fd510bc243cb2d923ed60faf834d6cc78d6a92d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    89b5c0e399a50cd940bd80f2960f77ca

    SHA1

    3dc3a39af0495642ee15d7014312d04e074e3d98

    SHA256

    ade9e7a7335969251cb73c27afebedc3f05f16a0f6026ac2e903350742aa31cc

    SHA512

    2b382eca6387579cded7c9bf2b6d43a9d13f2b605627ba7ef48453955c976177b270717339d87e4698e5304771c35228e39a05f2ffeb1afd9a1641ce29fed18a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OX8Z8GR5\wpp[1].htm

    Filesize

    169B

    MD5

    04c45b0b04c9715948c7acc3ecb561e3

    SHA1

    de7db4cf99c6472aed414089ebc773df48a5240a

    SHA256

    5799fdb905d066f27dbbb19fefc9296e08f3c6bd74432ef3ba2aa0727a0e2d5f

    SHA512

    74980e409f64c9179e1bed063ba0d231fc09d6c3b0d2cefa5369441239c4080f27a23c44b11f5306e26c7f1ed74120cc47b07d2860a806af33d43ba2e2ce465a

  • C:\Users\Admin\AppData\Local\Temp\CabFD45.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1D15.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b