Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    11/09/2024, 22:47

General

  • Target

    db5b9b4852a14bc7fcf315343cea03d8_JaffaCakes118.html

  • Size

    67KB

  • MD5

    db5b9b4852a14bc7fcf315343cea03d8

  • SHA1

    71ce592346e2765fe6de2d5814822f89e677bfd0

  • SHA256

    b118694156913ae02a3f262d1788e642f58ee9ac8cb192d6804b66b497db1db6

  • SHA512

    ccf5e200dc63eb0e9ccad7f0fa35d76097a0eb3fe66c68e0a5d27f26016dbb28e0e758d2f1ebdc134f4aee1ec87efc4e27e34a107572da3fbe8f17aad7c6cf60

  • SSDEEP

    1536:FglJTYrUkTFvVO/RUEB/4fS6/f0l8ZlqVUDDkytx9jjWvEZxTly:wGLLfSAf0l8rx9jjIETly

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\db5b9b4852a14bc7fcf315343cea03d8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2920
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2920 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2832

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    8579b27bdb7731782fd23b00cb6554b1

    SHA1

    0e5a6490298eee4813d08f5fc0721997e426ba09

    SHA256

    8a2eb5de58d26033dc2b25077f75d7ea65211cd5e22036c34947f201f15fea5a

    SHA512

    60021ed1b4fbf216ce5efb62dbb773a8d8c68a14ddd4214b0712f95a39937bdf96a189c1e9c81cf126ca500624848ab9d750da6f0ad025772f19687aa20cff38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\DDE8B1B7E253A9758EC380BD648952AF_F968CA97A68F4E6D5C104EC7FE3DFDEA

    Filesize

    471B

    MD5

    6cdf768605e07f67b096369383625eeb

    SHA1

    35063292683b2ec622e15b1ee229edc5d5f24de0

    SHA256

    27827dff8f84b6776f429434ba4217ef087d08cc15ed33dc9d90d5f7e406e4c9

    SHA512

    8c890cbb24c2414c5b9f9f0bb9b0c984ea2973c6169bcbc3a7877bba152aa0d7988348ed0c630bb04df30a8cdc6b29fd551e08bf38e31c06429cf7a8a0e68877

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    6653f639c2a4930a7cf79669787d1ab5

    SHA1

    ca3b431c1ab7ad93104b33925926a23bfd0ef791

    SHA256

    acfc5a8def4395ca3036e2e289f413e364bebfdbc76ca6a02d83dd66ed730bdb

    SHA512

    302598e4242d1653db2a4b594405190a8613115a1d7986d04d3a7a4e0fb8ee1e047cd4a1cdb6d95eca56c70efed70526e54915feb23597d2b2f89784d8d331d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    17687ebf3405a96c55d0b18e87969c29

    SHA1

    1aa78872e152a19c222dea4fc5178a68ae44a454

    SHA256

    0bf1d511ebd7312ea5387b9db99d0d4e1b7be465af89c99f69e570b16a5c9c81

    SHA512

    e9c3d388f48da4be0cbddb78a7bb30139611b5ef0a9f63809827f9ef430be071f58f1a37062ce4ccef057112575b65bfb38d13999fd87f5cdc40ab3675e65d85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f1199d13c3050f43a2c1f234ac64237d

    SHA1

    643202cbd4b1473adc148106d881beaca3791f79

    SHA256

    19ed59732ad60eb3821989887e02af46d892510dce930dd2d558bf59a95fb823

    SHA512

    c1872ebd21e8b6f66491a16283de9433dd85ead106e1d5d7468eb065e75a57a0857e46a849838540be63af342f329577d10c9d1487c240e6d2c7d4f283ccad20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca48fc18dea4d68d6164b9144e8f2d74

    SHA1

    6fbf2d641f85e1e0de1e34c14cbf0ab2bfbc7bec

    SHA256

    f9d30b6ade7274a488bc302bca4a56e1cd409d4347b5fccd6b00192c97bd7f53

    SHA512

    85283efdd17012f549165fb643d399b48c7b4450629109ace7b3842d21695f6c725868dbc7481ffe2a6040466457cb29fc0f743ae7fa68a26f0bcd18684d203c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a9a6593bb75292def8479544bd068cf0

    SHA1

    9a75c14b3704f60b73dbf3b21a3e7e1fa510553a

    SHA256

    f28522a1d234fd072f972dfa6f59b1bf36d3bce45feed9a841d9be0092cc9b78

    SHA512

    24a5ef927eb6363bc5e4b0a985c8bed52d95531b40c7a2bdf6cb27d7e4bfb76079c04fe90b96aec3a9ef3cb743846907525260d1bb461448284ba347ed8efc12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    09c59f2b2c002915107038a28f17039d

    SHA1

    b23cb989fc206c4c133f7bec684522a98ce3fd95

    SHA256

    acbaa57467dec8535868740010865135e9eaa5bbe8a0f63964dd26513c05eac6

    SHA512

    a96d13e366378e5645cbadfd155231880f2e6633c3fd45ae20502935d7f6eceaccfd9d0b260b7721a241037f695e3810ccdd52a283a796036afa8e52892c549c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa51aafed2d075badb06e08b6e71f4b3

    SHA1

    2bd41fe55fb6008265bc61721d1a0948e28e7914

    SHA256

    771dd67c06eddec51bda820777d274ce7d023e366319ef9b1f10b8c068e82633

    SHA512

    f113600fc816c0bac86dcab4a24a8a90b0322649c14e2dd34d4d538aee57ec664ffd7404231201807df84f399907544bfd38b4579019c6d7d932e96c680e30dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70b26c4bc660b32838c76191f37ed6fb

    SHA1

    a52a441bf4906ee9b9789582997184aae4daa5a0

    SHA256

    a206e3d460bae2ff6e6947d7a04f0dbd8bb7bb6df025b3ba3f3ee5e3982255bb

    SHA512

    35d97debccbfbf765b33b422dd429b873a14ce5ba53cda8b7b488e9a5d4afc3d1d2ff1902b48c2ada184b516dcfe9475eb34d16993a4671046b645d6d3b39056

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b070ea6e5f2bcd44a8bb1823f3ce6057

    SHA1

    0ca32ebe24002c8612ddbbeae2d187447ad15cbc

    SHA256

    14f0764c13acc8fbb656863cf089e5c7f124e1d6e22465ce2adb933c0b94d121

    SHA512

    8681b939f90bef22e7ff6f38291c2fc859871502f6393cf3f36633067e0813cf5c080d52c4646ee2364e7cecf8ab3a0e88ff76a8e74e96a3af27f7ff0dd5671e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    756060a3689d87bb04c7dbe21897ad70

    SHA1

    feaa7409cd9b01f6d5c1ae0ef4e6bfe7d14a1e72

    SHA256

    d70fd30bb0078ede72d10aea613196a3c9c86b959d013c56fb9b7f76871aa810

    SHA512

    ee6845adf6b7f4d31c0939119b0b19cad693a337cb59d8672f9c3c69a701d2337608c6c01a632a51352be6d6a9e0e8f8af5f3f9800f9c79e325557dccb0fa0f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78b142b0bdba4302aae3e62d8ce2e259

    SHA1

    1232e183ea9bb603c8c4b8ef30ae87069e09e846

    SHA256

    2cb91ba8166ead12887aca9fe5aea7db57bd05a62acd040e6151698d07c43518

    SHA512

    a55949877ae71cb41cbe75c32202fa1d61035c33a1313bb03a879dbfc4883e9bf221b5d5030d8d4b94f4b530bedeeaa2adf6f250a547ad7db0e1c14fc51244ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    799a8924dc0010a24e7a835d3c155f40

    SHA1

    96ccfb072386c4940ff737c5d21d1831750a24ee

    SHA256

    adb0a3c34f73face768b6fa02f15814eff3b62c7b633a1b57bc620be24c7dcad

    SHA512

    518f647ff4961aa60bb11399638c82f51a63d22b4516db58d851efee56c6f98fb4c91128c3cb68fc2df3c21d3c2a81e6c4ad5286e2fcb47fa3b4d1dddc7a1d9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5b8f82c414d39daf80a0d48da1c77e32

    SHA1

    dbc8fc6d0ff3596638c457e18a521123acded6e1

    SHA256

    d117a40e566b8ba5365cdd4a75d22a5292411e119108cac680a4d582a7ef1d32

    SHA512

    20c7b033c078a936362265ea53f790d14a7c12b03b25d50519a6a1ffc7a4f35fe63da971e7a3c931f3930cf157c564f587e7888057abe88f3aaa7e3135764127

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a246b01116cca7c3a14681aa37cbfdc

    SHA1

    f6760dc1f1dc81f5f4b349136fe090e669536b30

    SHA256

    06832724cb4353f24d22a57591e0905cdd634ccd35a41c00608434169a130d26

    SHA512

    1d99d0e97e14b8369eeb1181b6271496a0652bdb5cb69c2dc3650167b85b5f942c819a9f0e603c847d945e34895864b1e09a5bbd93b7e87260184baf66b26c29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e2e06efe2ffcccf8836612683c814c1

    SHA1

    feb99d7fbcffc34231bdb8ffc3fbacdac58ef354

    SHA256

    2f2defefdb10f2341bb00a12f0c98b0b66c173d1ee9675a03f158fd1354e6d45

    SHA512

    f1c1667d0f9ed95428c1c5808ee09d22b9866876f8a13c8062bacd5bc534f711f66414b170a80547a689f09dbcdd014914a00e52903683bbd4adc4c2416141df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b2d81520904985831ab8e39ebff8f16

    SHA1

    fe0e39f5e76ebfb8745d7531b17a178e533a1035

    SHA256

    ad3782b622252bc74854828b24dda238d6a1212140f575491ce46a0d07daede8

    SHA512

    c8959bc816291856d2e7e2c6b8949dc6abcfc7166d3fc26d529bf108e7315022562ccd3b6974810d2f218373f06aa05119075d60d76e6c3b88859931e6552693

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf930719a387c036b6110e4babc4559b

    SHA1

    a2b24e79b7761adf09ac3af98913e4b1cb3d185e

    SHA256

    5c3d1d6c3c3844e9370ea3accd1fe98a8e77ebdfe60ea9682ac743f3b09ff7ab

    SHA512

    96531da9f5dc2f3a5e4216256de8293cffd2514ed74e1ee27c66d0eed83ac9f55dc69b4b91a8fb6c9dd8929f5e6b9c7e9fdcdb5492d516acf23d475ad38569c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    955322d3da9b13a714ce7b04897cb408

    SHA1

    ebee5ea5b0152b8479e2aa0e7677fbc529eb89c7

    SHA256

    3691e8ac694cbfcf187fb16f2330c467652ec325cc8effedf745594daf872dd1

    SHA512

    dda314b80f1597cc954ed047001596bba3e4c8e90b65113343d6c2ae70c633fb147ff482426f5778377de02261af90f97b7202301c1e0c3f54fc5a684b5ebd31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a58a635d3935d55516db6239b2046c60

    SHA1

    c91f126ad984b44809138dd34c0ed35b316b1606

    SHA256

    a98f780c1e069339b9a4aeefd68a0da0cf73a28e6314adcffec98eda6b4eaf74

    SHA512

    3d2fcca646369aaf4bfb2be412e88af0b9662a1a6fa3fe3cd35d7ffc4661c783b11d32cd4309c16366e7d811af4c19197e7c282793cd763d2e19b2f9601e8c34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d83b1bafbb6ff8b7029b8a2752c3ae0c

    SHA1

    d2906e855fb1c7ddfb50525f53d90998521b58f3

    SHA256

    f1cc6c67e44c020d2576ac4b3b4371e99cbad3004649f79bc1cfa0cb510def90

    SHA512

    bb649261f6532cef51a4a088c382b3d9b669bff1f3fcf8ebfa47dd04c1a1b7569141421ca68d94328084954b02f5bc8e1be92fa3abec1f2aa7b5abdafeb349d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da7d997e821d8a19ba949a538024130e

    SHA1

    1a458a802dda9caee1e506ceca46e26bdeefc917

    SHA256

    702d0ff87239c188768537c05263e261d217786dabb499fb3bf7643e9d3a5e01

    SHA512

    4f915118d1c313cc5836e567f426d4491ce144e3ff84ce2dba159276eb3bd76a712cdc6c6d554654d27511abe2b3b5a7fb976604f7cacf056d4c173a71c07f15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2bcacba7b0b5c6ef85487725eb80f781

    SHA1

    af5020f8aa4c98723c6df867af8b5598e80a20dd

    SHA256

    e979f00a1f90198d3eebe37aa1360450e0454e7fbe832a72dae4eab857d2817e

    SHA512

    ea0a4a34285bbff080899ee5c705bf8b635aaf55f26a3fd4e53c2cca4ec74ee01ead7316459746c4fb57feaf8e904d41cab20158145fb43f126ad2f814a4421e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\DDE8B1B7E253A9758EC380BD648952AF_F968CA97A68F4E6D5C104EC7FE3DFDEA

    Filesize

    402B

    MD5

    58e5022e859f9a7deab7b79c9ae1ed21

    SHA1

    7b2565d764792a4fb79460b07db78b928041f738

    SHA256

    2dc74905a072844d6e8d9b5c80745fa9926c72a8cc8a647f3d4ec6ba45e5e26f

    SHA512

    d24b3639912f9e30c7a1fc84e635092f5eadeeff49cdd04a6f04572acdb2d666003f99e5d1e82396c757fbcc31fdcab7333ab43b738dfe2312746354e1058613

  • C:\Users\Admin\AppData\Local\Temp\CabA42D.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarA42E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b