Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09/09/2024, 20:07

General

  • Target

    d703ccba1165c6af39e93e478d4092b7_JaffaCakes118.html

  • Size

    86KB

  • MD5

    d703ccba1165c6af39e93e478d4092b7

  • SHA1

    9c8d6586e9782583691f0d3f13bab33e19cc89de

  • SHA256

    c42bf50df249051324e76895f7ad3f2da9dc6ebfdd90b3e0f49c6f4a2c2b6346

  • SHA512

    cab784c6f548481b29a5c2288bdcea4f103eb554e0bdcc7c1aa3572e8ddd8a5ac0205507096d29793f757c9ee01cfc335109903b3b07c8018470c9964e20b3b5

  • SSDEEP

    1536:zbuWo2duEowKwOvWwpWpg5pCOTOkdOfOfOrQRiJaFwWdkUzZg84UWDp7QTVq:zbPzIjwKwOvLpEgPZa5WWrQRioDkUtgn

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d703ccba1165c6af39e93e478d4092b7_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2772
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2772 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2860

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae610b1f9ac63c5ba22d064ef7024baf

    SHA1

    5a77a941ac4e4e83903fc825fe8fac84a5301c27

    SHA256

    f658f5931864603a793f61c3ad356c1c22dc1cb009127b051bf8888a26fd2c62

    SHA512

    7554b47aa841ed98c0c4a930ae70261acdc336f2581d3511a1ea08ec556b145afa912b5ace11e65a5e276c9b9cfe56af9da5048bc42bf08084309ea95ba89c38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d2dcd602f4e2122c98eab6bd18eb2b2b

    SHA1

    9c5ca16ca50990585b5e6936e31d4ef846ea9b45

    SHA256

    2a67542b0edf5aea09bbc1d18cfc9927720efdd38eefdd3258c3754f1285f0bd

    SHA512

    6bc959a797298492e996f276a4f2d656e6840ac8dd61252a446c32e9710103137c756d54e5121ddfaa0c138817f3cbc03050618435a86de3c72405794dc39fed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    74d3ed686e7567a317d64273aaea5e0e

    SHA1

    b6c584d09137b881506b9df57544109ad14da3c8

    SHA256

    85c90024bce163928bc9416344dd05aa7a2a330f946e548b5acc72b477595c24

    SHA512

    078d71831f5e15d2471a6bf33f595bce12a328832510df6734dcc9bfbbf97e7e8c5d141a0f777ca1160fcb23e9c94b88e53cd9d83859cd42f262ba1491e6178d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eddd3ddec03f83007dc38bfeec693f9b

    SHA1

    fec3e55a57b1063f9c24137090eef407b4207b33

    SHA256

    542e892bc4c93403ae13a591fa7a8de0ed9b27925971e4d0db217959056a9d10

    SHA512

    173ca879e0888ef6b4424d4a26e08c797d5ed15774826402b0de913c4b39756a8a8c7a4ef1d5718bdf61ff4e06aa5939945a7e44d4682a17bcf09a3f74b4d9dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    13b84a9aa6a100c02306d77a9f828882

    SHA1

    f743fbe47645d687d1e8235f4c57e42446042305

    SHA256

    5e7000108888b9819ff4160582a4d0a4807e19e985128a9e15cfb875eef9e4af

    SHA512

    8cb610bb786bdb9df172c4691d42dbf2a228bc9bd769b3da84d84a170a1628c4268ef5b461d781c92f34dd318e9588dad2dd0219276b18343378890e61b66fbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    565799a50a3864895752c66106b2a6b5

    SHA1

    6ae5f3c941a8fc2021243143fd0308a3f72581fe

    SHA256

    592efec00740c72dd593f331a08b28b8e7c0ee341ee725948535eae9ac902104

    SHA512

    582c3a505639164c7da170124313e266012f089e94f8d4ec8d4af8bbdeaf12e00fc0ccb17a47b19986ce4fc38ec29439c445d0518ac30632a76839f4cdea127f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5547a7ae6f44ed5f62ddd897bec93e2

    SHA1

    912ef227d856cc0932db239aabd9b6c5d0e447a8

    SHA256

    c05e0e529a0b7cae8c5542b752ceda45a6baee20803e9974dd73bba9a5224ccf

    SHA512

    d11fc79cede0e36f4e0f1340f06f3e61caac333f4752e13c87b294c7043e9dcf60cee867496f96fc686ffec32521894abbfd69a5ddc3ced8e5553684cf3c670c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    188e2aa80fbcc1ae66acea24394841ca

    SHA1

    48d662effa706c361c0b9af321732ffe64f96c00

    SHA256

    74594f8acea91682d35d8f2a7040417be499b0d63515ae4bdfe58084bfc65cee

    SHA512

    786b474786cc3848ca5ba816dc071736e2c73a142f88c23618cfc787d753041f009cdf0f0ec1ef9e0680824c22915e66cbb41c990aceb940e67d09e087efb75b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    555f2eb304f0475ec8ca485207389e44

    SHA1

    f112b207e737230b94fa6c0c99346e4cbf1ee1ab

    SHA256

    1ec510c37029a35e8f4769ce37400cc58c9bd1a9e82d97071b82bbf6b8783bfb

    SHA512

    a411c5e05a47b0002746a1c4e4ab00dba7bcefc4807b2f44e5e47518be9152dd58ffe9d9acaf8f74255b674f146c3f97e8b4104f0fe2f7939fee99d70866cd37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be90f27b606747ca3d7207e2104d57d1

    SHA1

    fa4570f992875a0e81890c34e3775466a0b0b1f8

    SHA256

    27cf97fd1ba7bb4e4983e8d4ce4b68fe3193b1af7461b5b61742aabc91571390

    SHA512

    941b3a721b2de5e7e90a86c5a54e90cf4717fb9dce815ad0b26edcf92235e9ef6a88395f05831064affc44dc6e5a3ff0ee74cf826714dae597fecf8e9b383053

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9fd97f1d402df563a1e8b4e0a48d59c1

    SHA1

    f2cd4618c8297e894419dc81c9fdb21c60c588cc

    SHA256

    8a54feb6342b015a797231db5182c481ca8945f743d9c140b2eefbe930f7ca0a

    SHA512

    241c6dbb9c3b7b15015d02f78a5f126273bd82927c4d17bd277ebd481b1e42cc9155a86cea9484bb747205d4aa4af2a5b94f4ac52a5d78bb3d66600dbc6ef348

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1553aee39f2ab4c867c6b7ea6ca70b50

    SHA1

    83feacc27ae2e9e887b966e0b8fffe029c2e5987

    SHA256

    06581830e74573f89aa75046ebe6fe47d2f9139aab5fea7c2eff7c73dda26032

    SHA512

    29517782e822301a1759038349993a5d670e8d452a7444e857da4f0279d1c36a89c4fa6ca4952ad7d55048ea2be86af938dbdd2bf8c12194af15b3f803f4a9cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f72691c818ec7bb7dae854610e491bc

    SHA1

    81c14fc037a9bb1930d6bfdbdbf13f9f84d1b85b

    SHA256

    a452d4e28914868bc929f443d656b1308fc3ed1d7e181542b5ecedf326a1c7b9

    SHA512

    5fe49dbea936576e0604c6eda6b485ce3095288447697959cc03adcc143f94d61fbbb0be74cfecd24dc9cfbb7a71b863deb978cf894f9d22d23430faf23d1a2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    531e24f174dd58d4939982acedb9f176

    SHA1

    d65c904b05be3027c6c378a200fb49985f83bdd0

    SHA256

    d95d1283fc291bb230e61c05bd1fd838ffd4253dc83519eba6239c6a57a64c7a

    SHA512

    791a9ce5412b1c8f9243f364a30163d69eeb59c3a023ef874ce0c5cd6a8ed59d25130958ddcdbac4f84f7461952edd8f9539ce9e22517b4801ebd7cfafd59140

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ac288643c8c069c67b8c2b73b6cad39

    SHA1

    42fc767ce932bcfbba32c4e8f39f37360ab2a5fd

    SHA256

    f673f5f78f7d37b78378f293a2929fc98342fa0d4a73215f433629a8884734dd

    SHA512

    296e873fefd6df57ee29e666247128588572026f48d580de84be410482daefac575195423b92bb74b4acfb98a9fcaa1dae5289364fc6f590ed824f3361e0c338

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6be19e9952e67ea745919bd9b56707bb

    SHA1

    09d26f772f0b036a2456e9b58fc63e901a015bfb

    SHA256

    dae08fda8b56046b735ee5219c1ad9510076aae15dee64afa1f45cbf071226f1

    SHA512

    a26adb3b6257158c2c5ccb703ecf55f5b5fd66704c6f070cbc689ea82c03ec1d030277149d1023162ae391e51aa94a15d174c9c73d1912fb561e95039ab5c97b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cb437cfa32004b43345a753cbedc6f49

    SHA1

    6298d847cbd1d57ac639555df116956a6810cf55

    SHA256

    5737a536c7fd7da8143907e0b68664905bc52a9500fa5f51d1d0f679f34fa006

    SHA512

    9463708122e5a43daa10bc3b5d6339666c66653d8fd90ffccba47b660cc5d26c84269e8c88399d568e19c1f9c9b7f75012db556b5e3c32c4cbc62dc44c02dc3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c64012ae2dfa38599b8dce14b51296cb

    SHA1

    16453fb42ff19609e74841a19eb1636691922f8f

    SHA256

    a3a90d6ea874831c9aeb916d1c43a33e0357b7c424faf315fc9b429d59811826

    SHA512

    194a913e5bd9a2839e01fed41381543bccc83ddbc029d480e67489511c046de96d902155c38fdc0fd532a69435d192f4563199508964e2630a913ee2996ec401

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2bbbd2324ba9d5b68dd81eb2499572b1

    SHA1

    2771c0fa957b03a6b3d69cb2aa48b6354f234034

    SHA256

    768ab94a868846d0bf2692be1df5bd97880d748b3bbcd94b35c2d777b5553e42

    SHA512

    0086326cfa4ec619946ffca6bd21b1d0e51a2c4077d06a76c24587be754d883b0b8fe2e1082b3ed0154538d7454e0d3adca14251d2de16fe8200f22c1a848640

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    051ce32521ecce0b302b0c5cd838ad06

    SHA1

    49dffb70bac8d1935124fe56b6a10ab92e86963c

    SHA256

    ded8ad8a52a60b9d936d9851420a21a4e6cd411137cf927d58d5a02c1eaa3f30

    SHA512

    0cd957038116e3d50ebe676ce82dc1e09dace1995ce0a2d6e5d065d405ac683de6129faaee8ebf22c1a62efcd0a8ae354dfeeb6e1c978bc89e7623ec8e0720aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    60478c5a18e717bee7c81670c3833160

    SHA1

    669b4bb6dacdc16c61220941799fdfc9fa4cfbbe

    SHA256

    3f277d8d5cd5a17dc67b95ead5ffd354754dc3f49e4caa5a9a36c2c20c353042

    SHA512

    2b22fde9c20e18129bda680dd8ddd4f745e99786dad144848ac3990e757560c9278ea49608410f53f39436548d3d43f86bae2526b59d387223a89597e0877b64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    65a90818a87dc1cc439ff7fbb2020b02

    SHA1

    38d24f78543c5817f2cf7c20ac382c8b74506a67

    SHA256

    6f0fd535f7417094ddef23a00dd1ce6b5396053389e522754f0f3b7960eabd8a

    SHA512

    a7dcaf9ec7f7415d1d9431e36309bb3e62f5021c699a6ea2a7e840f2ab14b9bc8e4b778df823e41f70e50639a9135922dc66c948153928b4266d4134e1dc45ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    486d7ea23a3ade0f8214d82539364807

    SHA1

    dc6146e763ea22f50f8d8ab0c9676fcdd3683c85

    SHA256

    9da4e91184294660f342140a622e4b494b9a0c631c4af167375d43ec4351dc45

    SHA512

    f4dfcac3c2d86d18e1812e3920a039506ec3e5e82619ced1a9d1fd260ce6dee23eac592adde41d134a49c454972e33c2678d0e0a6a5a63858f6f7da513317978

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4f27d036d80e470c77849cfe3691950f

    SHA1

    b088a9065a23fd59e2a037d312df69aa546897bb

    SHA256

    a4ab27673b0ebcc4a935a8f633f2486a8e0c793a8231add77b240fa9dd0f14ed

    SHA512

    65a8b703ce5e46a4863a066770d75429796c334874d9725fb73ba9d10a369d07d2c3f33c9183978ec5245ddd8a7f020a73eb6b8bc80ae0e2eb6109b0b9c4e3c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bbddb0900b1db6aca9c5b36ad221fc42

    SHA1

    24aee3ad06f58b623bd6aeff205ed038768809d6

    SHA256

    0d0b7f0ffafae8c51e993fc9c8b4c43bc9cc4ce9f280e8fb99eaa5bb107b3c98

    SHA512

    6013fa32bcd7e307bb5a81469e1799f4f98ef40d235f348aca3c021c45cb451e1b486c3f20e6c16e3a93a7398537f4234e830d2649737231688294440f3c5f15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    570e88db018893e2c1f37cc74f1bafe8

    SHA1

    7305ebb0ac155a98f4667ed8f7434ec6ecdd4470

    SHA256

    bf2527cc515e877af3c6c3df6063e935391c3e4917dcbd0e3e404450e8c31408

    SHA512

    2721782f518dd7b6796a1af1dd75751aef080ee1e0d7d2b28f34af5a53898c3880d33d2c809c487fe0b8e26c4125bd3f518066b35eb1d8f1f522e11960fa9150

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f46a2d5be4a398027ed3e9f3274d33d

    SHA1

    d817ffa719338e974ee78d9f35f4ebfcf6cb6988

    SHA256

    5d6c93b96d7cd5cd41ec66addd9ada586079a790fc020e7729a1e5fe8206ac10

    SHA512

    f016f93ec9dbd038241d7a779dd0e24aba96b3d32d920f989c1e8898fbf04845cef5cb0cdb621cd7c11add245ab7b91592045cbf2fa7cb2bd57bd6b98e60a544

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7918d8fa43ac32f13dfd429861e285f

    SHA1

    0c7c4f87e74bdc43c53655b7b469912eb6b6de06

    SHA256

    dd8e86021fd8bca1dafd5b2e5f22cfafa973ca037e6497c4d3478518b6ebaf12

    SHA512

    da020c1b11775c2c025fe8c7fefdb7efbd9f7ea553fe8cd78f9a81a275ea25bc9b74030fdc53852ebe4fa28c4fcc3ccfcee0c7d62cf3cd83a3037b465ea2bcbb

  • C:\Users\Admin\AppData\Local\Temp\Cab42AF.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar42B0.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b