Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    08/09/2024, 17:26

General

  • Target

    d4e28261e1a397ff643deb23ce3bdd19_JaffaCakes118.html

  • Size

    52KB

  • MD5

    d4e28261e1a397ff643deb23ce3bdd19

  • SHA1

    71e0e97d2061cfbd5e1c62dcc1c363f24bee5508

  • SHA256

    be70e2eae24cfd186aab9ef16f1ffafd27f55759595bb9b9f94f3d9abfe2b5ee

  • SHA512

    3cac1fe0783bde80d82858a772e0631ad57b4cbb502cf48abac63619c4da46242c2f5fea0a2586c14403a8006be89e854febbdcb108b72d902b4debd905d120b

  • SSDEEP

    1536:4BaS6+jImq5RRppqqddiiHH95OFH3LhsotbDdXbLM:iaS6+i4FH3lsotbDdXbLM

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d4e28261e1a397ff643deb23ce3bdd19_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2796
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2796 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2692

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12

    Filesize

    1KB

    MD5

    7fb5fa1534dcf77f2125b2403b30a0ee

    SHA1

    365d96812a69ac0a4611ea4b70a3f306576cc3ea

    SHA256

    33a39e9ec2133230533a686ec43760026e014a3828c703707acbc150fe40fd6f

    SHA512

    a9279fd60505a1bfeef6fb07834cad0fd5be02fd405573fc1a5f59b991e9f88f5e81c32fe910f69bdc6585e71f02559895149eaf49c25b8ff955459fd60c0d2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8

    Filesize

    436B

    MD5

    971c514f84bba0785f80aa1c23edfd79

    SHA1

    732acea710a87530c6b08ecdf32a110d254a54c8

    SHA256

    f157ed17fcaf8837fa82f8b69973848c9b10a02636848f995698212a08f31895

    SHA512

    43dc1425d80e170c645a3e3bb56da8c3acd31bd637329e9e37094ac346ac85434df4edcdbefc05ae00aea33a80a88e2af695997a495611217fe6706075a63c58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12

    Filesize

    174B

    MD5

    67b70bc06db7b63563644d2abced049a

    SHA1

    c12a7648a5330c2e56db8933f4c9d27dfbab0305

    SHA256

    9559f250bb76d8aeddbb385c0e9457f1bf20aa59ae3077974bed353ccab7ac37

    SHA512

    0bdb8d8828a9fcf3b40f2635ec3bfbfe469e70ac54087410ad4a439398127d74c466a2076435b2da53e75fdd70dca06f9c5e6fe8e9b26852cc5aade2c829d4bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0119027874b7b8309b804e638bc3e52

    SHA1

    17bb00dd5038236a8132e7e7b58c0094ac48e2ab

    SHA256

    dba96dd4acfbba67c5efc214d2d0edbb35518d3943fe55351e8a193a7c5bb43b

    SHA512

    ac612824cc000a8c5a752e548ca12fc6df80aa59319ad812c2156acce420c37d30133582dacea24b82e0f824bbd36a4efe21a5e284ccb5d001d355770fb10f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8748e8b17aa1dbce2b0c4c8874fe9825

    SHA1

    d8777c1d63ca725d80ce09f6c07c7560ad5df22d

    SHA256

    d2655478ddb4143dc1f4f00f9cb89e7152307c9748e72fa28ee1ceceeb4d438d

    SHA512

    9a5bbc803a61c7f6760663c76527324491f8dbbd520bbb5a2faff3189499adcdbfc0d259f66e2171ec64094d7f132dce1bbd399c09d48deaa1249960ded5bc69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5fa40f1b9e8e841a8c83d97f9329a9d0

    SHA1

    fecc457f769fd7940458b4f1887f7bb535bb5ab7

    SHA256

    382540765cb75a2f81c686c875006035f273a33c75fc576a6eac075e88b362b7

    SHA512

    e1d10a2ac5f16b446d88d045d0b96bb47dd2f519b5aff9c94fc2d3cd04044764ba2348690d36d0bee1882b0a57c978c6133a4e5f139ea208c7f9202fdb4c9529

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5929111ea5c574a6c1e117a1063f065

    SHA1

    167ed67d8aa91b6529183c48bb5f60d6f8124764

    SHA256

    22adef1b1d4c39274dbd7d7c6e060be8a799953dfbb0554d361102fa083cdb9d

    SHA512

    2d5c92cc3e9a93fb8af212f9ccd71d79526a27f41e929daf727d0ff5c6baaed3c5f84b7012e396e244489d395fdc57053a94f7aa3c21503204ef731020f66aa2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19080205619a5aa18a4f5be25efeef56

    SHA1

    cd342c60630d1528dd2ceb817a33b4a1f10c9c07

    SHA256

    842bc6f77e325a6c7c5825234cc2f8ee9208487b9f7f86b2e9c2da27d49d21f5

    SHA512

    5069e18bf7f484f570be4e637a79b4e3be0d28b1b555333eeecbbe22bb0e2eae31a2aea077d512cd159f246674e72d8cb448ad793269a06e0866520171c3515a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d9ba9eb0c352aa6589221f15a821a7c

    SHA1

    102d71c2473a46ea8c4d09ee0a2a53add1a65eeb

    SHA256

    9d850b6f0cc2d9203c084ac03a78fb1a98051994434b945c146003bfa60a7c47

    SHA512

    69e3cf1df3c14983c6afd37bf8f3a8157df34e3b5aac9def415abe40595af9d909c5091defcd7b887e471de84f2f7a0f6ed1aadb9125d2769ead64f8b72d9173

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e88315e54751e10652fdf377be73292e

    SHA1

    331f38e6d416bfe6e5076f6025acdfdeb88a5cc7

    SHA256

    f8f4649ddd7d7e8aa5e49a7340b7733d52cffebd9aec3c1e14729959ca24ce6d

    SHA512

    bbcc30970d515bb57783972dc4f47fcb9376e8a9280f0ab660e68de929d90c4f56a3919fbe7531989e37e514416b4e2189e378a464ad34a695617508ea2959e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ecb4c8a0a8baf3ae294ad5757317c786

    SHA1

    255954fc5ddc5fbc954c2aef237eadf5574e0dd5

    SHA256

    62d3d065d45408ce991b7642b64a4d9c478ab53c6dbe03ccdf8bf4fdd5ceeae9

    SHA512

    f119dee3a5e929c396f63b424ca4e691130ccd9803974cda0a2ead44e21f48adf8dc66323e77b0caf6886269682b5041c9f98df3cee8c1750e325af5e39faeb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    262f41f1eca23653ec637ff65fc7f8f9

    SHA1

    6ba7eef4acac0db0bdad48a3c07fc8da37f72ce2

    SHA256

    1dab1a316658500d9ddbbd1ae94d05a1cfcc609aae5f8120af359f4d787a1d14

    SHA512

    a40a64ff5c408486f2a19af486b4d1f7d0ea1533a1e09207536b08d5177afde7d0d2653e70aa20edcd0d6b1b10c8300937bb673e2f0f5994403f5d3fd318ab77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    96a5c2ef621db7eb204fcaf7d09d1391

    SHA1

    5e44db8adaf4f76688a34e22d232fcfcb98527bd

    SHA256

    d475ff3a0fa51671185196d7bcf04b4caeeb96e98ca4c73f369593cf5fe3d773

    SHA512

    76a013f8fb8f72bfe49d1f17562e20887b68103c71841c94488bf9d32ce1567176ac58ad70c114244b3cbd7b23e1829f2b58755edb24609e2ae8944bf2743811

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a6d8896157678a87457f0fe7270f79aa

    SHA1

    9d9cec127347d5dc344a227d1a20bb6195dca258

    SHA256

    c8aa32a108dfabf3d29a88489d6ebb3687742e14ecd2cf90d08946574d862fbd

    SHA512

    f1cf0060d8041637c49987d36d40376507f5be5314dcba6ffb9566798d54f0637dbfad62e4066d083b66296cd1a929805169eae3c44c203fffdc3941dc520a23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a58632054cd939a13a28862f1ef9e992

    SHA1

    c9fd7b46b8f5fae42d7c215fff6b793d852b7519

    SHA256

    fb294f1e845a72c3bc838b82bd740a34a80f80dfd92b4e7aa0707005ca2833ec

    SHA512

    670911b2b14440762c4791f31ee7571b9bb420df98ce04113e2e9bcd8320d4ba44254ecfff0b963b4b80485e12477dc36dc4274cb6e07c180dedab8931919b83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d1b2f44489f24c8f51858184bf1b750

    SHA1

    6f1588ad99391e49eba77095769c802a98d6b93a

    SHA256

    98d1d4ced2b3ece66a2b1c0859710182be0e34553ed5f94e0814b2177d896595

    SHA512

    1d5f23239e5a7bbe62b55d3d91577701016c49d116244600dead27f4ebdd17dd5c264b12b74bf490cf2b9b6614cb0e8f7f0ba53677d084200d21e724c0648563

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c710ac0e672b76ef24272f48dbba2d3c

    SHA1

    151097e8a6543b98f09f786d0b675580b80e3b8b

    SHA256

    4c792ecf8a7acbd19ebcb4eabb560537e8789602e12c7ecc891515971053ab27

    SHA512

    ad149ff7df3bee9a8e6629c1d562b7792c3107389a2e046a6932d1f0175debc127664de556901c448594d004f961f0cd61a7134a3d9cfe5cd9d27be1483f2210

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc8a6d15c5bd5eaee5dd56829d19c463

    SHA1

    90d841a46a2393a11a34960bb53fd6ccd6e2e1d0

    SHA256

    08883b0db08d8943de612e57571156496d332ba29e288f404c86e99e91201a62

    SHA512

    cc99189477a266b6313f5126f2b1d1ae4172e8faf29eb50cbf0ca722a99c0ba924ddc5fc3e130ecc74b1f4c3d11d3b4e59aedff09144f047104a756289b4c46a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9222f3412dcee4cb8939e9d8a7632144

    SHA1

    371e748b7b7ba230b223615f243f30bd134f9145

    SHA256

    371f5d2b4afef23f4840b814b3627286e0b7d70b0e6066f196366e4b905d967c

    SHA512

    513371d9f350cddd494f4331d251a50f9b21e3229e7182719ac4e51c91ae3868cff3fae1f70537c090fb200faf0170e5f63929004514af490ac83434bfe4130b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fab6d8f934c3ad77f0f199f0ff794706

    SHA1

    ede1b3e5f2d652f39705e700716087868be319bd

    SHA256

    7d61cbdf40eb4bf76d0033982b325ae62f744bb6eba60922e7e7ae7e9110785f

    SHA512

    77aec7e526458828e095ac8a3a3776cae4ffd3fa734d4f778e1306cf16d06b2ed53da596c57b3540d6657314e6065c1661beabd7173dc041dea5587f28ff7f46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05b286ffdfdd6711d6bbdf5ca397e0da

    SHA1

    81988cbe35dd87439072983020d0665a2e469245

    SHA256

    b2356e55aecc00517df4fa9c728f941ce57b0a7a3921da0709d0a56db52cd822

    SHA512

    357f44b397872a5a369d56492a0d0879db2a4583a8ade533b027081bdab6f8bb3d2f16f73361f3f1b177a8071e3e27b5fcf29ecf9383f96e9cd6d5851027f092

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8

    Filesize

    170B

    MD5

    5ca1a20e45625d55a6fc554444c3bc67

    SHA1

    2f8609a3ebefd11a8b747d813411a4e341115277

    SHA256

    fc47ddb34cce4b88ed35f121a95d57911323d033ae71602988b3689df349222b

    SHA512

    066eca2bfbeeaf6082ade27d40a90d021b46df0f23b19fede908e5c655f60548b11979e21ed63d18b7854b5422e445e722eaf5e9a79fea4eaebac8780e2252ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8

    Filesize

    170B

    MD5

    8f93161b98e09994207cd51dd72c0814

    SHA1

    7057261d2c106b265c45738e4f21dca2642b6315

    SHA256

    37825a2a80a08ea9a7ecf4e6af76160210eff54f4971aabfc42a6197553d9925

    SHA512

    927ed8f0ed5ae72dee9b8f4b01f704b64a0356ab574e3e7ad26ece3e586c90a094db6252af06fd6a10520f177326783a919d6210d02ed6e03268e7edeb2cce68

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\56KJ964X\skip-link-focus-fix[1].htm

    Filesize

    134B

    MD5

    4aa7a432bb447f094408f1bd6229c605

    SHA1

    1965c4952cc8c082a6307ed67061a57aab6632fa

    SHA256

    34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a

    SHA512

    497ba6d8ec6bf2267fe6133a432f0e9ab12b982c06bb23e3de6e5a94d036509d2556ba822e3989d8cd7e240d9bae8096fc5be8a948e3e29fe29cab1fea1fe31c

  • C:\Users\Admin\AppData\Local\Temp\Cab44B0.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar44C3.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b