Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    12/09/2024, 07:25

General

  • Target

    dc10fcac0183cdcfc8c5c1ae8ae27c89_JaffaCakes118.html

  • Size

    91KB

  • MD5

    dc10fcac0183cdcfc8c5c1ae8ae27c89

  • SHA1

    047422b6f8515a39d215da2a1c6a32ee892e152f

  • SHA256

    e83f2ab8c1f1aad8478f8af37805026b10a315f171a9a30980ebc0d364183830

  • SHA512

    a5c1ed67c64ea695428429374a2da84d80a8e5a9b739cd394899ea761c5b6d7091db8078e1ffa2d9409bf01b41eac12db9ae32f51d32838a59b4daaceb89e648

  • SSDEEP

    1536:vMaVJRwAdQRRZh03C1/6cmjXOuZGi/alvQfTcZ59N9eHFsitG:HwAdF3C1yCulGvQbcZ5iFsx

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 44 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\dc10fcac0183cdcfc8c5c1ae8ae27c89_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1732
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1732 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2268

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3c976b23bba94a9fd37171998deae0e

    SHA1

    f1b1536d3466e09a9809a0d5656f83f2aab396c4

    SHA256

    8e8543aa9af1681fe66623389e8616de9428c47c1fbfbd9d69c34d4d05af4ecc

    SHA512

    142fd30f3014e2a8a3cbb7d57638a9f53681ef4510cd4bf08cdd943441318b2a0559f43c7fbe27b148036b85993f6475dfa1194b1ef05a27c1a8ae2cdbead22b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb53985a031be906366c44514c518cf9

    SHA1

    654cbb401677ab4b7950947208a6fe00b7476eae

    SHA256

    35e9dbeb23ee9f6d7794c6940c7eaa5123563d83bd069126a7794e7db1e65134

    SHA512

    bae0c2a293f5ac113fe5b14e0e4c2d68f184b8554e8620ec1e9dfb4618b3fb20600dc5e075a5c547a8c18f271ee0b6f984eebc6bc16e8d8be094293f6482513d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad65900fcf2bb2a5b84a667aa4c21c2b

    SHA1

    6e5b88a570e5972df67a50f035bace0d1df9d631

    SHA256

    46da5120eb22fa2102c8bd9718525e846f885b260aaba7ff04e75be93be77fa7

    SHA512

    db17c4a9228597c4227fd7efdee9007357be3c59d228157cf8615f8745c0397b3aa711e403dbc5fa8b0a78589e5264bffe9da91518ecfc6aebcfc79d5a8ee167

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc18ea8b2392f981fec80a44dda7d9d3

    SHA1

    78401fce4cfebae9944e50cf6f4f5ed2ff30f939

    SHA256

    3eb84938efd50969f1c54685fae9734b7363e1b373b82e9f639463243de30a55

    SHA512

    e5ac03e7cfb4658de0cddde289f860d0502b834db309fc7252b8fb5420971e8868e3463e22940bcb01c3f031e46914cf56b600da99234ae168108e9498684c03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5b21838f75b9520f641257ebc3fa7ba5

    SHA1

    0140663b6eeab866e3e14abab199f18592ffa03d

    SHA256

    0a12a5d7d7d66a3ac05c15b197e33715f4d4625433079388a8f7f003da2dfa1b

    SHA512

    0460747956250443b6d20fb01a1da335b1ba8d4ba072b0a6ba3e29eb585aabb460a352d2c3f89da72de1eef3ce22de74b13ddc1412d557750fd0ad1c4b0150ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    27c49392aae62a743730b8179eae881a

    SHA1

    96d07d01cb2eaf77800e503b194925f66672bd0d

    SHA256

    be569b104d3c4acf9e21d50f873caa76810e4a16b6587a0cbee4a755a0fda3c4

    SHA512

    aaaaebe3e2ddd8f2d83937aa114707f12ef3583c163ab4b716882961cd23f44e156f047712668b90d889f7f2bc8c7442cdbbe4e0c9f1388041ffefc71a3b5011

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    264795306ff79ae0c233d99373221f39

    SHA1

    71787163f09fa29bf91f6476809c5e4b7cde1798

    SHA256

    04ef620084dc9d54d34d41bcf382d19c78511645eb98e0b4d6664387a9a1b8eb

    SHA512

    42be7a19a9bda2bed994cf5455f8299d369276f922bfc3d3de3a49b3509be5f40b555821e881d2e086efdb8cdaad7821a394805b698313f4d1586c0fce983bbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1ab1471821558b7872564abed520de4

    SHA1

    6845b322016f83e8e754ac1e1198993d7ddd1283

    SHA256

    b37e0ab8f8657ff5ecbdc11243d3a37c9fdd6021dfc3912ab31af7c5be5d6156

    SHA512

    4291be2667358acd210205c69b6597adaf01dc73dc74e752a895e7a49b10e2f2beddf1ebcba29e944371b5d2a9d91bd0ebd2bc441144f6c20dc80dddddd874a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f3f67eaa63514f20c709b0710eb1dac2

    SHA1

    a0f6c662d07c3b779634d53d7fbc28c776bb82cb

    SHA256

    38927c90b2fa66f03e4bd1072f1cc3aa2f5a86729f0bd04a4f6b30b173af1464

    SHA512

    d3e78fe0982486a71865f04b462350cce1c5c8fdc7115de7625acbadad46f2cdd61d65de035c83471a57e3c79ae5f644e499259c494133ad66d5e3ca88c287b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    34b1b67a44276f53e5c50ce16cb7634a

    SHA1

    f77857d6369dabc39a75d49d71fafc93fd330171

    SHA256

    ede65ec79d053d208ea6d5dd7340921e5e58f648f1adaab264e65cf37eb26cd6

    SHA512

    1403fc4cba2ad9b1c41264ca91643768864ab575965cd57cf04fd89864e55e8b7e0dabd50528c194a1a8d3b21ca69cb56041f3cbd23efed4e53eb88f22c9f1f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c6455c627419c5a256b022cec337d440

    SHA1

    2cdd66a5e2e53a87b3682c40cb21097b8b9abe08

    SHA256

    3644f5250456b41ab37dda4b3211435657d2b150442e81444cf79340853390f6

    SHA512

    71b132bda04730fff605d0173a50fc853ab1ff28b0600d01d4831c64fbfd58c07fadf45a5eeddfbcaa537a7763f5f9a9aadd980ccbfe625cd7ca0f8fa1b3ce75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e9429a0aca4fb2e7675ea782ccb3218d

    SHA1

    c490157e7355df023eb5059045867b97b449481e

    SHA256

    53faab288f98288c50c1ad13a9585021f8c190619293e13417132b09b628251d

    SHA512

    1e251e477c9c58d6034e6db368a898a4e97b1121631b370ad94cc95e0c331d99688b131be253c5f1b8a234af8ed959c37f6e258b3b8349694175a2cbeee419a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3aeaa56f9b668f30abfd677760a3219f

    SHA1

    5f283948f3f3b45c33ba282d35ea1d8e6904423c

    SHA256

    3508dcd0f3181af96ed9e42910c3dcc455f4c14c05da50fc8f2b6b920ee3caf6

    SHA512

    af1099947049c9327f5858d9f823aa09c5656335467bd4bbc5e0ef094297f8e9271c9fee8c2ecdba3113a5c741d7f8cbe579ce3762d0825c668cb6f7163dfe28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    adf906384c433f1bebdfa7a0ca644d7e

    SHA1

    4d185823ea7653f6812c837f91502de39653e6de

    SHA256

    42723d71f038172965e24cff661adc6a21c54922c1ce77e9329ba357f5af119a

    SHA512

    1821b1d2e717d3e332dc0c1ab3090574d29ea183c1c2adbe3197260b2d7fea82e0f50396a60c47e5be7cc10824424ef97761c82375baf1c35dc004235760fbc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    340bcc39009b00866f7708308c11d546

    SHA1

    79d66d4b153ce85dbdb48dbcf0da8225968004ab

    SHA256

    387a68ff18ddac9c526112fc507465127ca11ba641e6c9fb5c591de9de88365a

    SHA512

    25b410619c86e7cca9ae07c2bcff42ab1c9266a6aa717d960926cc32f0743542444cd70c243c3b1c91748f76639f1ad6d84579b83532ca4193bdaf0d2286f5cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    680b59455e36597d5c899dccb12dcd26

    SHA1

    6890241785e191d6c194655e873eac98155e2be0

    SHA256

    79218f1e9a5dfbfa6ccae8d5f3cadbec49574c15c0eecac655a99984b388f486

    SHA512

    38d891054322ef09fcda2e8956048b95266058105d4a4ffc67fb93a33f02a2ffc09df0794b340638294460693abbc28cc23a19aac288916b38321df62914c63c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eec31bbe4c389c24326cf07bd6ad8244

    SHA1

    2449563e1b5863c31325048ef3a4b603e1f23732

    SHA256

    a505a11798272cf28169241621e14326627400a31b08e04182b0b378edd7ae53

    SHA512

    9aad8ea351bd3ef5bc77710b2143dbd85c24964cc1e9d35502d1bfaf9dd966b1a3da4c16621958b13e31545bc7dfc432681d90abb92e1aac070c5bf3f2daf38a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e90cb502ef9e0509a4ff63c7f8626c3b

    SHA1

    199c3637f16cc6953e16c74635ad8bab9200883c

    SHA256

    b5267808881001f4db38ce23c085338351df006be813192bfa21d2f25063900f

    SHA512

    9209529a9755ef099014f4c7139bf948d299026a9260b3893b5cd73200b45977b9f2e911030739671d809bac372e3f098caf7affb4681657196dc3b60e626774

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    931d4aec6f3ddcb2c43d575597d5fb96

    SHA1

    8c9fe2781861f715a552c55f36af50442678b481

    SHA256

    d620e3539563763bdee3032a3ccb2e8ee19f6c3d74807b2b47a11e91cb83b592

    SHA512

    71ff3e5f5447ebbd838ad4eca74643b556f9889480ddb32d363933f547014c1538ef4cd40f31b56f1e4373afaa2768ab9cb53c817238697047862afa91c8cd39

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\guoemn1\imagestore.dat

    Filesize

    5KB

    MD5

    a9000c4c8f2da244063c8315bd5ba433

    SHA1

    c67d0a01868607ca55eb52121d08b4be44534b3b

    SHA256

    c020c2fd70e13dbdc01c406a7e8c2b2a93cbaa5fcb3f4ca686586e50ec3f5d31

    SHA512

    07cb9d1b7aa4e68a5540a2ad16bb4c6e64614c1065f212c32a5dc4750cc374ccd6343a2509f2593940886f32931e1af038d2a665082ea19e206955a10d80ffed

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EB0KZ1Y4\recaptcha__en[1].js

    Filesize

    537KB

    MD5

    c7be68088b0a823f1a4c1f77c702d1b4

    SHA1

    05d42d754afd21681c0e815799b88fbe1fbabf4e

    SHA256

    4943e91f7f53318d481ca07297395abbc52541c2be55d7276ecda152cd7ad9c3

    SHA512

    cb76505845e7fc0988ade0598e6ea80636713e20209e1260ee4413423b45235f57cb0a33fca7baf223e829835cb76a52244c3197e4c0c166dad9b946b9285222

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WCATT3E5\favicon[1].ico

    Filesize

    5KB

    MD5

    f3418a443e7d841097c714d69ec4bcb8

    SHA1

    49263695f6b0cdd72f45cf1b775e660fdc36c606

    SHA256

    6da5620880159634213e197fafca1dde0272153be3e4590818533fab8d040770

    SHA512

    82d017c4b7ec8e0c46e8b75da0ca6a52fd8bce7fcf4e556cbdf16b49fc81be9953fe7e25a05f63ecd41c7272e8bb0a9fd9aedf0ac06cb6032330b096b3702563

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WUBCGJ0A\styles__ltr[1].css

    Filesize

    55KB

    MD5

    4adccf70587477c74e2fcd636e4ec895

    SHA1

    af63034901c98e2d93faa7737f9c8f52e302d88b

    SHA256

    0e04cd9eec042868e190cbdabf2f8f0c7172dcc54ab87eb616eca14258307b4d

    SHA512

    d3f071c0a0aa7f2d3b8e584c67d4a1adf1a9a99595cffc204bf43b99f5b19c4b98cec8b31e65a46c01509fc7af8787bd7839299a683d028e388fdc4ded678cb3

  • C:\Users\Admin\AppData\Local\Temp\CabE3FB.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE46C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b