Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    11/09/2024, 07:58

General

  • Target

    d9ead240297f679d8ee7cd4d076cd26a_JaffaCakes118.html

  • Size

    66KB

  • MD5

    d9ead240297f679d8ee7cd4d076cd26a

  • SHA1

    2cb1d389efd1ebd807bfad2aed4ad74587714b63

  • SHA256

    071cf4e5731ea64cefc38c4985e9885afd1719fa14118f534c35c1fa826deb83

  • SHA512

    e56779ec2d2e6697fd89132903005c67d1d1cdee776031ccdb80627103e57e3072ec6aac890076aa6d1972e284331a34f9370ff60383103af21615f04c10a6d4

  • SSDEEP

    1536:mPM9m+hQGo/z3MCun+EeG2cAlXI9QTQzJ7TrUmdv1gY/SS6/teL/LuC4P/FBMxHn:u+hQGo/gL+EeG2caXI9bTrUmotS6/teR

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d9ead240297f679d8ee7cd4d076cd26a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1196
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1196 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1928

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    d09447f829dc3e2ede2b4405da65a375

    SHA1

    6248dfbc851e45b6245bb802283c8eac96aedb24

    SHA256

    3af944a7e966f3c5d56b17f5f15f1915cbf356299f000cb22bea7f9cc8511325

    SHA512

    f9556c3bf02d1abff57a8c33e644204d94075a931600c4256f4e25918b1b72e28e9eb89c9a7cc2434be26d1ebd68d5666507c59c6782274c4f3ec69c29bfaddc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e85af4cc65ff670ac51e2a9b43e2c5f2

    SHA1

    657864af92791caf49f98e1d0f889746663ec766

    SHA256

    588b1a999a734ff801fe0ed8440f869d507b4ec8f8f63af134b8bb5e9314bc69

    SHA512

    1dbef10cd65b793be6be17e94fe1b91e8691251e873e4274c5819e6775018301d857ed6ead6ba1d7b2074f0abb5d633530ca84bd18d1b70d78a489dacc954100

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db1e9f1f0de06c0467555818ac4df9ae

    SHA1

    26b3faadbe392d8990ac155b636f16d4fd74ab0c

    SHA256

    e0b341ec9a4a0734ed040803d5302002de2a9b25124498869c3c783fe2e66a73

    SHA512

    4a8407829045fe65043ac4daf34535dbb083f63bef3111b09562657eb77618166a11df294ab921cf959a198338857469681a1ca45c44f016c802251b6a240ea8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be9204f686d5f41f6af5ad9c69cbfdb1

    SHA1

    e8a457295d430eb3d09800d4491434efa63837d5

    SHA256

    90c6bcf86775286c5dcb8f35150b362dcb6bccc527b1c60d2232980faa2ed2c9

    SHA512

    d628fd7a079b7f53bb2cd678a0591fa5dd34a720dfbc1c42d84e609ece1d67dd255915dcf47b78c60499d416b4097db3cc2e4c7daebc70d355e9312af10d67a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab6920106ae12b8ca37a1a2f30273e28

    SHA1

    038dda89f827d6208fbbbfd22658e6bf64dfc24e

    SHA256

    4dc57d1ab2fd35a2051241077f807bbfba458c1d65b8a1eba04eac037c5713d6

    SHA512

    574fd4e169397531477b160effe53578085f3262ad018e93104d7bf49d42cd138600f29e4f957c6bb4d9adf574f7ef59f5d0fd57f4ce59f2faa109d1ebf4db14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7e7dbde15c25db2d6a597fde5a55fd9

    SHA1

    72c494c574280d8380228731a15fdadad691453f

    SHA256

    388650772434210652c25e2d713d030c1e43034da7dad104965c6de1704765b8

    SHA512

    7644e0e3ed54a22898fca83495a362ea779c9c12508d2b63caffbdba64a8325b644db2d106b83413954790411f3285585501590b949c8400c57ba0ad8b1f8469

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    840c70a44f7835cbb2dfa50538bcbe1d

    SHA1

    4d0c50e79939634c84fffa798b3464438d2979b1

    SHA256

    d3370a48cdeb9eec516272804f6f6de9fdff24347b7d035aae8709f95909ef61

    SHA512

    c3c3aa172105865b5181458f32af0332e0bb4a3ec37fde3b1746879e8823edf886129d88a6e4399fd4f1e335c2d35f77dd3aafcfb1e221df851c181648ea8f63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ecbede6c68d1813aa27ce63ad220d6f9

    SHA1

    0032700472957ad2b90da5bace57385adac38c0c

    SHA256

    22588b452f5d1a22d486540f47f8211dfb55d42a19c49ab3dc5343a588e50458

    SHA512

    c50d7b1ddbe82e4223a5eb1adfe043e3727f8058f3ac0b743052a3977d822b8addc4056e0558dc5f6686e7ac1635ee7315fd853bccb8b3a58ec3c7926bfca243

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d7f616d18dadc3a8812629e28dd13ef3

    SHA1

    fe9b4b204cbf0159af02be49b6b71c482c69c577

    SHA256

    cd2a25d92dfad513eda80c6908af1eba69789685692e328a726b82226e7baa6e

    SHA512

    94a994efb61fdb75ec8bb0d33bbff81956ea2aadb2d2ceb3d4867679d382865bbc6f6c05f7ede01affcb7668463fb2f43c8a98063cad3d8416bee015d08d52c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b2d6c465ff729bae47e829458659d24

    SHA1

    f7b951651596eba8f4b3171da6eb8e3ba933d15e

    SHA256

    512b79657534b64ff859e95c18f600dcbd1291a25c44955f2196a3efe8d8b7c5

    SHA512

    0496da83884cc400bfc34112fc2b0c683e0e8ae1a7452cc7978a74d03cec272922e6c7e1e5fee80173cc6c6bc4fd185722d744584dee36900db0b2e2e734e946

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e9825ba6d67aa8e9be8cbe6f1a7eb383

    SHA1

    8a624c3c5a84ab7f3ccced254e10c50be6e06694

    SHA256

    60eb04dc62846e5b3cf7bfe570442f01c80214d0ce66cfa8f5f564957f8987b8

    SHA512

    ea507fff91acd62daff384d7668c87510a68c83367ca1cac15cd82ee924a7cdfef8b51a5000904b5667df40f8ab2a260a565e797d5331bc7c42e529148ff7594

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    77b7d9c65ddaf5034a7a761df9b429d7

    SHA1

    78f3f67e559a665a9eba66e0736bf3a841aa936a

    SHA256

    3f908af1b8c34009af780c2aa7986d83dbfb1cc4de3c59ccc9dfa8ae51251a13

    SHA512

    1588f8f1589a08c26168f88ec0da3765c3e8d7ce569e49c5501c0f5c7feae764699db20becc1661fddb83e8d4e1e3a8a9791eb2dc60fa93859e7058cc0fadf04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    46436a86be9551df8ae0fc3b2f5818e4

    SHA1

    0f75e8fe2cfff16a963dd05583c1d9dcf9a1be6e

    SHA256

    1c5a0c0b38279f191120e9b2fe0e72a2401da5a88a568734d72b71a925cd0b4a

    SHA512

    67180b74c11f32ebeac4c309ccb602379d1613448bb110e6550eb63dc1b93e7ca3acc7783c845c705d51dde23671b9cfd0dbe63e59673a5f8d8febe4636c8ec3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e151bf4b79d10d29922882eb81c7770

    SHA1

    b3fe354b3be3a81e13e9af5aacf30385e562b327

    SHA256

    c92daff1daa1e051522e65fb717626ab4d75b1b10e775adad0a372c206198363

    SHA512

    9658d554cebd6e8dc6f704e7ae0f21d139b964fc089a0e7898bd91e92ab8349a61fc7e20132b187969fd7f38aef4baa3ac530e1c9d798a9265cb969a92c04a9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7eaab6ae12916fa954fea5242749e5e

    SHA1

    5c0758ab6a945aa3d648624f2ba28fcc09b51f15

    SHA256

    28f93067056c612628da67a413b9b137cb4e57b91ecd1f9cf007c3e644a44519

    SHA512

    bd10c121a3b67d9605e17a4800e057cea28e07c02a58e36d5bcf37f44e31207da938d89bb34e5e1f5c95d212f932acdbadd4a9eb253c02603e3e49f995d96955

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    27c21f51b125b7cc44c8056a8d84cbda

    SHA1

    6c85667a503a041a4a4d8888ebbf846e862489d1

    SHA256

    abab179cce912c16a8312a7b2756065be46ea5f2585ee69a188070f48b34bc3b

    SHA512

    bb18267bca5ca2e4abc44514397050da9644b6a2a462235b2fb149fdcaa8fddf79b74ca81b36d028abefa162a262230359d8cd6b2135d471bef6e94ac0158a46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    530fb74714439aea923996d738c9ed99

    SHA1

    f8af90dcb63f08109689598bb8216f92634cccc2

    SHA256

    55e2adf23a7b5adcf695f93f79fa3a6eeab215a35ee81da4f3148fef50ca3185

    SHA512

    76d618fec08a82ed51ea07c9a86a0e525061c732ac5ce91cb72f4eb36a0ef4250e6e7d8972390ea936985feca7b034de6a0e23753dbc750b56c0c03b6a551750

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    25b92b4f31113c3d87ba4ef01d426252

    SHA1

    9e12b0e7a9fb0c985596fede64bc0138d9856389

    SHA256

    53ec9d0a4869e5d80166d3e723fd8c2de5db04643e779dfeddee4400c103e728

    SHA512

    d85a0ddcc1a5202b54f43cbc82eb8ce3c1d03a00c9641aed1bff18643f9d68cf4b52bf2bc03e666c699adbbacdb465cfc5afaaf5368334952faa572e5d32c13c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7387daf3ae86f9a63f42bea38558fdb3

    SHA1

    a7e755f23e8c8344be8bde8f5fc420f7d04d9c75

    SHA256

    30327c52e17559bb5663ecd6e62fe3f3f1aaf75ec6fb8fa507d1408cd6eef9c5

    SHA512

    cef95f34203f6698e0e577d60a699f5c988a83d717a8446f4b13b525dd999686ea0d22e5fa17835706de14aa34a574aa352b0e5cefe5280179305200b84c7581

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    e4547e26176ee662446af207242c2a69

    SHA1

    68c083ce794ef897937ccf09bf9de0183c068b26

    SHA256

    718a871cbd27d2f2c5525663cfa3db496b554501fefee4a73054f463fa783337

    SHA512

    d8c97fc0abf268fc5c069eae286e86b7f195ba9729723b93208a54c0f85b922b31ec452e755afcdefff1735d32d1b6247b5eeb3eedd13a32ba3e4da32691f18c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OX8Z8GR5\scripts[1].htm

    Filesize

    166B

    MD5

    3ea1c8d079b38532a6e01a96216ba5e2

    SHA1

    598d3ff91d3e252f1e13df8cf0348b270ff2da3f

    SHA256

    87a9323ac85ce28867d5d7ce590c8f29b8d1a999961fca71bb33adef48683691

    SHA512

    cb4f800a735d5ec435844ac114a81ee6c4a429138119b97f2266edb87cf729f1a64662190d04917ce955b0bd3681610d49be42cd6782989ecd4b0d87ddf8a03a

  • C:\Users\Admin\AppData\Local\Temp\CabD462.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD463.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b