Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    09/09/2024, 11:28

General

  • Target

    d637a7d276a50f392e874e567ec20cf5_JaffaCakes118.html

  • Size

    230KB

  • MD5

    d637a7d276a50f392e874e567ec20cf5

  • SHA1

    53ae3100663127102da0db6d227cf652d632b758

  • SHA256

    60ae07da13b66f3e544595177cc0e2ea9a163acf83e8d4ffe1d7b3a8d15d9a2e

  • SHA512

    04e34ed25dae8f1d5f8cb9c7700fe3512a724bf64d534c8dc1407bebe46fb5088f096d209020aee1c46adf5a73161d3dde9301d4c9f2515891e710d69dd2e888

  • SSDEEP

    1536:dNRaxZMFLFKsQZPccM5pVBjsNJpA4oiAxZyOi6twQZoff/N9cFRlrhDIU369:t5VFYLG4t9cFRlrhDIU3S

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d637a7d276a50f392e874e567ec20cf5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2660
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2660 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2988

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    5d2685df3ed517c4cce8f731c6485d69

    SHA1

    476463b61e3ae6dc9e793dba1763a7650b18e984

    SHA256

    edf3f48e5f2549925987c8a05aafdca8eca30a2319ec443f621734e11470347e

    SHA512

    d14817c10aab565271a6fa7ae477e6266d894fd1c8d761d66fda49b3bb56b3022cc44ca99c8a4d70cbbf35344bb30e6226cd989849de32d5135ac79d9117a043

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f31b76aecc9b1f3b5455a40fb29a640

    SHA1

    180e691a4b49a91947760863123d6daad43874f6

    SHA256

    c55c90b4103bd07d30e7b9195897107ba2744be28dfcad2939948f624cd3a4d6

    SHA512

    132941a15171afb6b7b97ef7a14c6cd25db8720b7be28f0febc269aa53c5e969ef16ea2b00af48d5184887353a276db678a4b4855bb4c01bddb42ef341a60014

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0365e84c34d97ac9fb4bf056bbf3c482

    SHA1

    9da5e800a215a9989b80bdeab6d7e667d8effdcb

    SHA256

    91ba7087b14bbd9e94ccb31a7b00c01f8842307e1a86e7ff83cca92c317b568f

    SHA512

    9f0aa1f7f647ff3e04e9dd9c6a6c017d697d139ea12da4ea0bad1c3cf0b1847c618057f712cca000a3ac79a1b5328c076dab789ca0d2b6e9ad1a58eb9f87f339

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb65738e62d40340f89739a9b24fc394

    SHA1

    411816196be1f4f0f29b171614d071dcd3d669c3

    SHA256

    313ee9a361ab209c779a1ea9f5e80fed83fef1ba24d84f3f02fdf0eec7d30d84

    SHA512

    8d4e313946994d90fab400cf5f5fc4aaa80e63f0959928aed3507cb15daf221cc4f9a6c6b64ea27caba9c5f42bee017afc514effcd9bd305b12da0bd50d6bf6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0bf3407a9dc58b5ed759b3bccb9560e9

    SHA1

    3a5dd460439f49cc11303eb3749d1ba21f19d3b4

    SHA256

    7768faf729c8adfbd7396641debbad785136a32066a85c1a4718f5be154f9ae3

    SHA512

    6d1bad1740609b822a5063e75362c3c551d16fab2394da32c68b962e7e1180b584eaaad11aa0ad05a9c34f97a513d222f73526ee5b8768f8b03faf6486c25b5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    27f76e3c1ee1152253f1ab69fba4767d

    SHA1

    a2ca189503d5c79e4087f2bd1523b53a4c8206d8

    SHA256

    0fd6d3059e64be0b213c9f14e0a493decd6436753130e779e577088d356f579d

    SHA512

    2dd3a5c27bff11d7f8e7557727cf1578a4dfeab0528cccef5f85ebc753195d7ded3967f6f13b247d4aaff7fca0fa2fc5f22bfa4a273374399cab0da4043d757b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8096e2d9ff588893867618bd1ca45b73

    SHA1

    198af78dac16b63cf332f49b8365e1473ccc33f5

    SHA256

    cb6ae6729905fb94060abfe87336b0f8883c54f37fc070a5ec17adf22f3a5344

    SHA512

    6abe99a585d2de5a4819a65d6bb0ed50563318cbf5a017edcaf22bfa9bb2f02882ba49482378586f083f4f5c8f48884e0ed7cf6d8936722bdba13c37f1d5144b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    698057c260d75bfd02a668232d944873

    SHA1

    e6f71bc6294c3bacc86497853ffcc974e23af954

    SHA256

    7d5b195c706de688bbc8a8e35bf68d300c7b08aa8eec4ea58171479ae1923d16

    SHA512

    c9ec07a87e7d2d6858724db05f5d8a72cd7eb66df348a7541d32826dce82ca7012b83d82da699cbe243ddd9b161622f1204462f9a46cec7ff71d93475d37d1ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ae780bad7fa63a483e97f13877127a0

    SHA1

    f10c1dcf34e2adca59583a6f6139724aa6bb1165

    SHA256

    386063de0d0ea47ab7707a8236bbba9d5324e4930d79aa5c87ba470d002dcb1b

    SHA512

    b6810c9f4eadf0c99909c457035d323ec07c4322be0afa100c826dc777057d0eef920ef257c2c95784767ab2a7d88797c46faa27ec1160d666d407dc539522af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d05913aaa0d5ea6434eccd70aac72a99

    SHA1

    6819495d1bbeea9474bd6635146fa8525bf7dd08

    SHA256

    b4359f74d691f4bb8b53477ac6b6e4b7d15ec55b4afbf2d32ca7ddd3cdbfd33a

    SHA512

    a29cabdd1a3afd14376492924e62cf64473681f9409cc476c63f4e95348b00046856b2a43745d874a6462b86791a4cb9983bff866d7a07bf3cd34584cc2e464c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c196ffdf76ea1dc1e677107e3076da8d

    SHA1

    191d396e8c82e6c7b3736f19fd5c14b4c52e827e

    SHA256

    cb4ddbf804f5fe4013136b9a92627d3323ccd747e674699ccedf7ae73ae30bef

    SHA512

    e01c8d0a98456f68cd50b2ec5e67ca307a00e01e2d5e3e65979bd1594b9c7055d2e37d799603f67982a806772e3925adea0a22826f9722d8c4cb34abfcf68017

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    21297a244e36725ace4bf7766d8345e9

    SHA1

    f3a02fb830f2db6347bf42b66bde54c1aa5c32e2

    SHA256

    5d95ee49a10bb22b87a06bfd384b4f00040e2ce70787dd8fb1109976ad3d8f78

    SHA512

    5bcd03a264843e83cf5f4392cc3dbde344344e242635f1a863e95aafaf6e3f9dba4d2f011eadecd5e7f2d6de5933dbc1a1b27d4e643da24a6c7cf85f09cd28c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    104b0fe45283e4978b1db2f7a5d6520d

    SHA1

    4af543ad436719597e6d545ecf2b25f2af8c200e

    SHA256

    9fdab271c4086da911231a462db163f11a45737b181e2ef5465b320a01d9741d

    SHA512

    082bdf9a976afad7793f034e1b0fb96dba81927c49a9c75c2b080c5cd81f8e4ebd7e84b8ba66b0b4cbda43fa75bd534fd7cde1e66225cb6feaf16d9a82097ca9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9531690d4f11847604dad72c5b428ea8

    SHA1

    d17af639b73687caeb0e923d1220045e28092eda

    SHA256

    d153746b9ccf64501f598574bac6ff75160944b7f7578c6c3ae03fe7a47b15f5

    SHA512

    0cf3060a95341dd6598afc63d403f97680f66b859d7e648bbc297ec1f6ac0f2ab19b8a6a9f1950c1158ff7ba1a54b19f4b16bf0059553c7f3bc6763ff8e9a968

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    77c34600491c55f580f76f819f91c08f

    SHA1

    a18a36aa03ede9529c247c0d23bd88aece22d378

    SHA256

    30cc316fa85de2a22cf4aca89b91bc6e7bdad25bb7f137216647bb6bfe0ebd3e

    SHA512

    c1e89175024dd9cd84517593de07d68baa39d1129fc7d7c14dac3b7fdbd0a7067902728c96c983a3381c5cd058a10014d2bd43b74a8ea6755ab45cbf4f897813

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45c93ac34f68b5dea8ad037a93df57d5

    SHA1

    668e9927831f471f56c050fae4f60e4149ea2aaf

    SHA256

    4141cd4bfa181b866bb6c47abd0837bf5ae14fe65ff6d4aece505ace49996476

    SHA512

    ace6b917986f32a63852eb009fdfe1790167d4372b6f62a3daec516a745566e85fb23d86332b27d092718931f1751f93658ee227923cce521bb344125f2b9ccb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f4dddb2a52a7786b267ed9f0d7baf1c

    SHA1

    a497179668abe263d2856cfb15ef63eef69bf69b

    SHA256

    98f40bac2594626b2cd1fccc8c75e316b40bfd04233f2b7ca3706ec394818af7

    SHA512

    6d04d6fb9cefe9b78d90925d604321ab18e5e40cb84323299c517f0f48a3b224d778700186219250c0cce962f0e791c5cfd7307bb1492932eaba2c75d65d19b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    12d597ce7f56697abf805b79189b5834

    SHA1

    80143a54d2ab5d72f8aa1161eb92004af6015c20

    SHA256

    98b7823f560f676be220329333dbc48a5bfef973635ccdf36d1375f951f9c4d6

    SHA512

    01f4117fb96652a5fd82a8ea5af453f7ae0d29b9a758a74ff308a0553628aacfb3e95768ba6cb5642ef9bec57c305d82d7bcb8353669b99fae55305b070dc286

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d4a25ff2947f9eed607b787065fbe67e

    SHA1

    3059ad903e8e3daf87228db3d50b660e5e8d0eb8

    SHA256

    e739954734a60b35f6f55ef9580f9e07181e2bbc216bfff424307545802edd4a

    SHA512

    b5fe4240e32001488c5f41b05f61089ffe52bdb3542b36e155d4658ae1474cb002dd5fed2b988296b2dda2127c8a750d8c48bc0946050938df117852fffafed4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ccc13e314732d6c76704b7f55e04c017

    SHA1

    3649c17c4af70125f3ffd810f584a3414358e446

    SHA256

    35ab6a7513b1e2709db766eb2be34e69e145bb8035afee709826a1083affaaff

    SHA512

    3f98743779e9490dc65007a4d397cb58bc0149d7733333501d1dbddcf13c963c8d31752cb273e4e7631f9571c96b39af6e70557735ff48b925118972d169b0af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    c156a386fced31dd6dee324cdef0c0cc

    SHA1

    bb99d81b85c524612ea899b2e066b6ce31266b9c

    SHA256

    049a9244b1ffaaff6917279995d809adb05bd2dc98878c76361659c924d90908

    SHA512

    07b13ba011ea5d121e47398d973da9cc291fb1f2f2705f22ce0397e9e6fe214f3abacc1123609c1d0260d39024ccf8a1a8d075841a04971f808e1108f356d18b

  • C:\Users\Admin\AppData\Local\Temp\Cab2E81.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar2B94.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b