Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    11/09/2024, 22:54

General

  • Target

    db5ee9814ce9e441cfc16b39d73871a2_JaffaCakes118.html

  • Size

    117KB

  • MD5

    db5ee9814ce9e441cfc16b39d73871a2

  • SHA1

    8aa162da725e66b93bb0226be26d59875666ccae

  • SHA256

    b63cb6e9049c7de5457b3de269129a588ac1a6a3b0df814d62380f597dfa27a2

  • SHA512

    034b1ff6ed05d7aa02390e1ad6ef1580544efe5e2eb75fb8127aac9853abf599789212847b66f14284d3a5ad9cd4ee48c2bc08f9fab941c1f2789e28f7781580

  • SSDEEP

    1536:lgvC3odcl+ZG+hP4SUdB5ZcZQPJussChxcW3UcwfBeAicvJdvBI/w8ArF6sMMXZQ:lWWBUZQPJussCfwfo9cRLLVF6sMMXZQ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\db5ee9814ce9e441cfc16b39d73871a2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2648
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2648 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2784

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    8579b27bdb7731782fd23b00cb6554b1

    SHA1

    0e5a6490298eee4813d08f5fc0721997e426ba09

    SHA256

    8a2eb5de58d26033dc2b25077f75d7ea65211cd5e22036c34947f201f15fea5a

    SHA512

    60021ed1b4fbf216ce5efb62dbb773a8d8c68a14ddd4214b0712f95a39937bdf96a189c1e9c81cf126ca500624848ab9d750da6f0ad025772f19687aa20cff38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\DDE8B1B7E253A9758EC380BD648952AF_F968CA97A68F4E6D5C104EC7FE3DFDEA

    Filesize

    471B

    MD5

    6cdf768605e07f67b096369383625eeb

    SHA1

    35063292683b2ec622e15b1ee229edc5d5f24de0

    SHA256

    27827dff8f84b6776f429434ba4217ef087d08cc15ed33dc9d90d5f7e406e4c9

    SHA512

    8c890cbb24c2414c5b9f9f0bb9b0c984ea2973c6169bcbc3a7877bba152aa0d7988348ed0c630bb04df30a8cdc6b29fd551e08bf38e31c06429cf7a8a0e68877

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    1de4b16a6bdb29f74bd36f20c1459560

    SHA1

    822491b308ed768d0825af24d95027d282d0f9de

    SHA256

    72753ce789e13fbb887560937fb31af4b10a9e623bbd227cb7a501c7d0e97057

    SHA512

    e36f0eeef58a02a544c618eb38da271296e1e837ffc6e2e4480831c384ddddebd37ab86b508e12a2d6c9e35c5b3947f6dc1cbd1661d1f182b751afa725f8bc31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    392f604f00f572c7bdce7cce8f6f2f78

    SHA1

    58b9da3ea06e68e0ef85c8dc3dced088587370df

    SHA256

    2f14eb7a49448112e4594306808e8d56c67173c42b42cbb628d7bd72275f6b05

    SHA512

    edd932f3dc5bca5806f775e596af48ef7b631531bd465ec65b5b1f42b0be91e164017d7132e26661361c0f31df8b0694f525b31604286a409dba93629ab9a29b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    9e10476c18a8f08fe99c822e710ee9b3

    SHA1

    1e041291fb46f51da78c5f5a03704ac6c2a7fd30

    SHA256

    8980634eab7535738a17d0492795866c7cf2b1ed1440278cc34803cf1696743a

    SHA512

    9ab2c87ce54b44bfbb3e1ebed9776794e583099615880d3ca666e4dac7c559b8758829032e9d5f507729e14774428e851c175f763e1c9955c64f0355f76b981e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    10bf8f0bc5720808d402247d10ab3c10

    SHA1

    5dd16fa20f73daa1bc7bf770733be523bf32b6b0

    SHA256

    ef2edde6d30d362f965608959e2c2110a049c13ed4cbd15d158aa46705389329

    SHA512

    8a3a8202f53564e6abd5ad0944951b778c4b9dc2be6e2fee89e721ed83a10ad779f2e9fd6bcb6d6d9ad82efa145d23ded82ad940578e7055f33650d6d6c9c6c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2897609231f271383962585ef1d07457

    SHA1

    673974bb7504dfdd182c8e83a89f65ef872f4866

    SHA256

    8f3914310de95e98bb33875b6581e1f6f607b6e5916590fa3d9f65611b228c24

    SHA512

    5f55f4ff4d49e89c1b9fdd544697bca7527bdcfba503a8dd2748380678e3ab8bae319579fee3d7bead209d31d662ef9d581925c7775f9e63a6fdcd4cfed79b8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d35886ec09fca20bd49ddf4357332e09

    SHA1

    b0cd6f1b8491c3640793b8f19bdcc38177bf8d37

    SHA256

    e3f4149f5999b4af4c323cd4c6085da3ae03a01ef756a4c14e7c83de64d85c64

    SHA512

    69d159a8282e607279eb94f102f1dc7bf6132b7f6137bfd611fd7f4637050496d111769d63dc8c4456396285d819d2349db3283ef2228d9fbf85e88977898c46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    32cadaef02eebc8c0c29bdd610080108

    SHA1

    2805954fdebf5fd63cb66ae35fe57bc6c347eb38

    SHA256

    ae3a85aa90ef49697c87319bc11ac6a7e138eb0065ddc65f298c001faf66077a

    SHA512

    b94489291f74c4cc1882ca30972856c5584fd9df94aa1c13b6dfb7c9c57748fe91b2da7e1beb18cf72c36f5fcbbdb0246bd2a8d9ff8e842af3c6c3bbafb5bd1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e5cbe581a074d1fd02112a063b10fc57

    SHA1

    df8aa39d8d4dc3f5029f9f51124cb5681162a4c1

    SHA256

    fc26a82b4987eec50198ec9c0c292ca148eb9f67c109b15572f9f0b79de6d17c

    SHA512

    acb2daeefa3a1766af46651302ba81f6721afc714df7158682f10c3ec878ee1a1b0e9616a260d21de5b4c38d34f4c7e81902e028ef248b4f182eb7cc49382d1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45ff24eab177999fe16867b1ec09f2e7

    SHA1

    0c0e6eef26d650b37f402b4420f9df95fccf679a

    SHA256

    933d51e317f282d3c2986ae5410308557b78a74a5dfbfd4588fbb6c3b852a377

    SHA512

    2b6115b655f84f960dfdf658eb66c0cc599fa47dc68ac381677b733e3244ae8bac19f4fd3c4d86d6dde5c657f05c6279befba84cc274ff88a1d9d0f49dc6ed1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1a346437a4357539d59f328a51f7c5d6

    SHA1

    31b9cf9251e44bfdee38b77731cc0312cf9e4893

    SHA256

    6c01f625544cf5ce6340e16d9f279d6f2e995214559293deb4e7b00d7b21f52f

    SHA512

    cf7b766e7bd66d5d98398c7c43a963dea093e5d8fa0f85b662aedd2ad0029f27d9e19e8005beefd0c3ae422d70ce8fb683fe03a17cdd9c2b6237356dc92586af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c96cede45e6707d58d8ba4247739978

    SHA1

    2da99a2cd6963ff1a72596d0b9e8288ea9a7814e

    SHA256

    2f4043896f67aee80d87d3c95cb4e310ca22396a8f3d03106048bea8b7ccb33e

    SHA512

    090f90ab3edbe5b393bbbd18c2ca7d80cdf2478d1e19d1426337aec0c6030ec20ec419b43b242cd595c724e73765719a54ef573ec28d096be2864fdfaf0b8a49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2fca176c6922257ed9fa61dc66e79313

    SHA1

    9dca248e2268ddf0bb84333fac22176b3cdb085c

    SHA256

    3d1f6c30b441eb84d00edf6e19393d5f38ee79252b78785524e8e7872d25f485

    SHA512

    7f6ea639e8b84d383f463a6e0ea57cc206180a0ddceaa17f415143a414c623af6d1b6c9eddd1a9d90ea30ceb63a25fe770d00dedbc4cce0ce5128c15b5cfd660

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    32a1f584ea4d06b1eee81e33a748866a

    SHA1

    94a0c3c1ed42716bbeedd011aaf50e72e99bddee

    SHA256

    41e7ac1ea20c634895f06b39aa1fd864dd67e6fc20cbc30284aa34b9e4e748ab

    SHA512

    9ce3194cdfcdbfc5b59723cbe9c540cf1fcc7ac31453afbfae292190fec9bf90fb6ef3c4564e632d2d3664f1845b1564c5d6cc7800d3d15ce22b172c425201ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2850fe0b758c6fe9d5440abf895d801

    SHA1

    8921f66994d0c128b3edce36732f2cbba32f1c59

    SHA256

    cac5529901aa2a7415343f5b044360f38df50bae73e9614b482f8d536f78e934

    SHA512

    680ba5d398230930c60307f0845b118ad38221e3e2ac09e3a0e28fc0e4c00c99b3326ee95ba37e4ab559f232a8357a15aefcbb75a864e50af3c45793b6a977bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a3ba2d51bf3a0e876bd0a50d0e8f89f7

    SHA1

    cb20ad166ee8287826c4e75a3f4153f920e0d67f

    SHA256

    4dbd852aa427a911beede88d385b0d438b7e16ef49c4a7828ccea56857d9b32c

    SHA512

    c1668675bc45de2218900fc8b92318dc7894fb43b3ae6e195604e91bcc22c4e398b275fc997c8e82ff73d6ce141afcc19cb9cef29a402cde8a5bd429c5286c60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    805c5d7bf6518f7c1a07cc6ed4ef48d2

    SHA1

    70daeb1ff703cf91abc5931385dc28f87d74b36a

    SHA256

    781881cb4044e33a2ecb994d62721493cf67758e4ea7e6fd8fd1357e8dc4baf4

    SHA512

    a751d6a9a9bedd97249ba70584ec0573a529b5ed0bac331486e81688b6d973a3c6e182219027b63aad1fde50973f8ece3754cf1635486c72c55e1a1395a37e77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c26bb6f7e3f45a4f2f86886c054c45ff

    SHA1

    b236f8eea356bedd5a33c2997c28e0df647153d8

    SHA256

    95a3e86b12c437f8902aebb1aa260f5ae1047d2f6fdb0da81998520af278b9e1

    SHA512

    0640968a949cd71ee72129b6cbe2e97042075d8bf3b0d1c06f54f60f3e69855206b67ac5fe801582c04ef585b3ad998818218ef08a27a27a8dc052b1d11dea1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a76a9beac05f740d8c5a4e25a99854bb

    SHA1

    d366f446c163c37c74eff4d64f1b1048c4f4157b

    SHA256

    df06dc4b92f01fc3a90b991fb88e2160d98f73efd46893a5ff3164b4ac9e0bc5

    SHA512

    79c7dd70dccd514859bf769e084dfba8f13053f58e02a99b3ea26449de39b61ee856756f832398accd1422c00ce544920cb114270998e5bc107db778b34cfe09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    622a8d36510945b1da73d14756a953a9

    SHA1

    368d3efa8e2b5c519fafb4b75272bc1a7611cdeb

    SHA256

    6a8361025ccb1f204bcacca2c58d0df898ea42e06c55299e47bff8416aca455d

    SHA512

    d334129febb8d7e69026aba6dce38ac4819adaf899791717cbdf4d912fee23dee54ee89296fa6a84e07da6b344a3495827872d03891e6e2e009b9b68a4f4ffc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d1aa94fb4a351760089fe24fdcc8e6bc

    SHA1

    c692b003c78b7a596454d12d4826f64d147230a4

    SHA256

    e2e4523f9e4495fd5ea33a8343b0b0faba84d16e9f254a64379b6b3357872d40

    SHA512

    358249ba587231fb1a18119b499ce78dacd52307b88d3de96df3414ba1d4b70f6e3c1f9d82827d42be09038165762313bcaf8b9fa99654d732c8c06e6a603620

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    219cb56c29876e4fc4d00d8cc93ef560

    SHA1

    9e5d2b1f331b448caa722f5d298e2b9bb4bb2301

    SHA256

    953556d36e965d3075b2780599ecc2b75eb66bae02879f06d6846109a062886e

    SHA512

    4e90d2b0caac3e14f328e1194dd75de7fbea45d8ed7a587ff8508b087db1e3a6e374469e0d2370847f259f0b1644af07acdb38737c39877d347c227a93a4ea5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17443a73a757f7cb7d58c6d6caecbe04

    SHA1

    8e303a1396451d7662d164c1d58de6e6aa2d0ba9

    SHA256

    b493c4234bdd2f0e48c70fcda8c1caf62d36fb670105f6711a2ca2b04e653bb0

    SHA512

    4f3c5cf029ec9b63bb4aa2681c664cdef1fb24eca8ba477717a7092844776964e458c3977c88333ac7e37bea9e25edde3ec5df591c254e67077a95c97c3d2494

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    785ada7789488d22b49b3ab1b8579666

    SHA1

    3985f4804b257514a1be88ca0d9110c2958b9ec0

    SHA256

    c2f0f9d51102365b1284c351ec327eeb423738edda3a0defe840d283dbcbe434

    SHA512

    7af3411f5cf8ea912052c88b7cdef0ca3fff0679a9a906845611fdc94098f0802f327a9aef39d0da0f38097c1ba1c80f562725327b372b5f76f6b94e3ad0ebc4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\DDE8B1B7E253A9758EC380BD648952AF_F968CA97A68F4E6D5C104EC7FE3DFDEA

    Filesize

    402B

    MD5

    eb51d17caef4840361690b915afd527c

    SHA1

    b9bd820807453c5bbe19a62ed97bdefe7b10d18a

    SHA256

    98364dc5389d4b5bace4c5d45807dd0fca3c9a1e471965067729cd317055692a

    SHA512

    7a15da2374ffdc2b6c4b7a13e08b5452e6815d847d77d257eacb7fff3819c1c0ee573ad92633413887eec0f672854eedf7606efdbc36234f92bd9b8161f2d503

  • C:\Users\Admin\AppData\Local\Temp\Cab8601.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar9EC1.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b