Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    13/09/2024, 02:55

General

  • Target

    dd8720ddea389a6598114b5c0f97aacf_JaffaCakes118.html

  • Size

    201KB

  • MD5

    dd8720ddea389a6598114b5c0f97aacf

  • SHA1

    6e3dee352277f8c0056d7b051a43ae00a9e8d677

  • SHA256

    aec08ad36ea2d735008a403561ce786ff2c007abff742e1180a2734f0f3f23ef

  • SHA512

    d6efd02dd5856002b75838e2b758552956241732af0061dc25f2998c2bd0eae84ed637a3e39fefcdc7a80fec83f05c076ce4bc0273c75a7fc1bedc5e1ed14cd2

  • SSDEEP

    1536:kayYeE7qlJjPdnWtVWjOwJIO4SHagCQlPupSnEv9GvM:dy/BM

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\dd8720ddea389a6598114b5c0f97aacf_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2592
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2592 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1988

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    b950b082f314c310798ace47c5cb933f

    SHA1

    a80d9d9d3b30901fcd345cca14a2fbe321b3c55f

    SHA256

    17c2fbf7437696150ca42ad96c2dfae0ee5e2bf2c0fec5c45a9939f758a36b19

    SHA512

    25675008a6582d2adc9dcddb4ea821fcfcdc6a89be6823f3087d02a023c4a5b3de1c6d8f79ebca7f3b28387298c794e12cff787d20e0265413bfae1b7a42b140

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    09ab5300066adb60acf1d754710ca8ae

    SHA1

    5ba9ec88eb9c8d7a603f83e3cc6cd64fedc03fa0

    SHA256

    a888afec2f13ca205e3fc4c55af92ad99d32c6020f5d4b6570aae146e890ddf5

    SHA512

    708f138bad37a53faaa330484c2fcaa7e68de8bc05300f31de149f27d55d7329ca4aabcf4aeaad7741e7a85ffcd2c65a28208103a112a2663a8fc5df94f514e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    77798528998579842068a5bf8163df92

    SHA1

    68e9dcdfe0c05060303b1c01ff32f498be3f6adb

    SHA256

    82aa23a350677a0a7d49a83984b0b9d0cf58f26b61851a4de6a02536ac78e7ec

    SHA512

    ad2ec236b79ad03df5131d1291765a4e913263844410ae69734709e3404f1c61745f77fa5f8e4558d3d7391448f87619d5ca360f7be3455df2438ba141d9b59e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e469b7157bf51b73063756a47d5e9342

    SHA1

    ff51eab9746e278e497561b90f6daba259932bc3

    SHA256

    951200e23c31cbc6262e27f2091e7f6b7af228b65c7a6cf12cebaa3c4b43fe97

    SHA512

    46d985f8577fad647fa3a055e1338c45511c3b1cbaf43984689f0f2d1a7c180f5ae777236b3246c7df79a8e066e0ace0c260353148bd795bb9dc0474978b369a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19f71703923b1a67c97ae7a0f87726e8

    SHA1

    253518aa9cb3296420bea2af8c1fa24e0b0ec89b

    SHA256

    f6d5f021c9aa6a80afd44362af7e39ce0bf108192ba29bb0ca54a0ac8d42900d

    SHA512

    1045041b62cd09b66f506cedac63618af75eea973dd79e7bdb9509f4fe8c097ba834c117a55d37c894ef458d344f7266b4ecf1046eaad68571e7b3f48bfb0544

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    25ff2b6ee7802571d8389b80bf78f824

    SHA1

    4a8b98cc6eb847bd146795ebc87180aae36e6d82

    SHA256

    d61a7ad00f98f2fa1df298630b900143cdace7e468729ec2907181934b82b062

    SHA512

    37b8651040dccdede73497832e6ca7db771031dd9bae07ddc4201d28470a1b36f8a2d2708a9d72178c9641d871e9e6bc6cefc30bd26fc56c8ddab293d627d84b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed385dcccfb41916073e7580708186e7

    SHA1

    8136b700a627ee755727cb35017786f1d0ee6ae2

    SHA256

    15c87a47495566a487317454a4bd8f54cb09937e7d2bbcd591378cde5880f3be

    SHA512

    ae2b57d153be512c633a88932b00e82075fd5683b3a731e33e5ed69728c1d48084941cb34efcdca9e4975e657650b90c87096b11ad3633af5597a268831c9685

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4417fe23f717e7afa1e34063344866d0

    SHA1

    2a47a90798d9c0d88de899a00662fc742652740a

    SHA256

    353e04f0f202287c55afb6c31db892c9eaa71843d14f0d3b3d0cb548064faa8c

    SHA512

    1e1ab2ab07f13f363cdf2fccece8df1b4dc98d1ecee1b9d6e3cb84c5a9c6501b62d6dd7da5ca9d56e8decdca1ad5ff2b50abed224eac0da48109d37ab62671b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e5ae822375d3d43b904379560895e449

    SHA1

    f6f8f9688638805048a2866ace9680c0047a5e12

    SHA256

    0b31faa6787bd9fd85339df5b99e59e127e6f94f72aadaceb59969416f577968

    SHA512

    ed3208e317c57f7355f139367a56169f0e98ab208e7cf60e9e732c9ee1d84999104c3b0edb6541269c4aab083ec46098123a5ff908ba1f93473f5ae042b34da7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c87914f84f64561cbcaa9274ce728025

    SHA1

    599931451dbc18103b199713d5ea7e04682f9399

    SHA256

    9fffa4b6f02a952300fba28788e0e02066c962cd9c304199e3ab667b4bec2288

    SHA512

    643631ec387a98eb306e3dc85672dd434c0c00ee4a44240ac0dddf7754a82d1ee4edb3d70862ace4e43e2278edd0acf2b35f7a0a1f6e2f784336cfac8bededda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    294f4e8329cf088246a59870c39cccfc

    SHA1

    a83462938656674c5ee030829a8428992d8b77b7

    SHA256

    d3d1a9be415c3d2c78567c21777a9c37e965d88a6118573dbb1f08126e14ac81

    SHA512

    31cf52d59bfabe8b981f631ef44c28074e15ce0c553de6e9ea24d81ddcc04229c4243b6e94cb28f27269fc0cc564991da100d954dcdf32733a8905c9447abbb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5b8d3e59c3bec1e68b6d5119f2530415

    SHA1

    46023dc3fec7eee5b8500abb45305785de434d17

    SHA256

    849d6762c355a8b130ec11c387b49c433987ed2cf18e99cefd8aa7d1faf77157

    SHA512

    0deefe0282a38ed5b7d00a5a3eb77d55d424fde1cc07f0aa4d46e4f281179bf313921d4a508be380e688bca3277ba3630052f1b73cf6bfd03f92ef083bb9a2a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89a614a7d5a598c6db3f20e9eea8f8c3

    SHA1

    fce88d35f00d1ff93673818c469c60508d5f7d92

    SHA256

    c09d47859616e86fa0c0abee3c2fe21a45922f95e2931e269648f4585830cf2f

    SHA512

    90b9cf63a64dc574bf71ae5125a2b3eadaf028447f8026903037d120f64ecf27253787fdd606922cea2f23038cb09bc37f2c068d3c4172405cc4a61f169d14e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bdb85c591e484ac63b851417436516f5

    SHA1

    e5f25b3110e280ed3e2c5311e4bc228a366a9edb

    SHA256

    7a1baf1993a88ecb4c91f96161c880f46ec3574f5d2c74c9f1f6153c15add034

    SHA512

    5cf1b697525832d20792da3b07fb1e50cbeec037ceb81b647adccdb73b71259ada167f6d27ae612552fdcee183a012fcc0d7936307acb6d6fe7d1132377ae53a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7d401948548e3af38d339d003e1bbab

    SHA1

    a44ad8ba0385a929d6bb841cf3ab409c43e2fc3e

    SHA256

    7e8c9797c26f0bb8e012bb6e0b90541a5ffd2fea93487f67f74a5f39d269d554

    SHA512

    895eed05baf96ab382408e8ef4afeb05b91b609a873e9376703715dea8e56ab4670fc68ea99719c513a4e9d4a7e70b5ce07d0961b7fbb822bf56a6aa4f60f145

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c778b3a67658021979e2988ffc804a1

    SHA1

    e659fcc788dc2c9d3c9035db37f3001a95969ac7

    SHA256

    875fa9a9df4160568d761947921303d9329875aa7ad8c7a9142fb9597b8c518c

    SHA512

    c3c499cb06e491eba27fa1516fabc55caf0e172d554afca43599ec245c84e0760d6e19db8f378d8de271d086f996e64b01c9c938942d3cbb425ce71a3b2a8e50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    467be247e154663d3fa05c0e80f94a3b

    SHA1

    a8564e3e1b21adfb0dcc057ce091fab7c7485c80

    SHA256

    2535c4f13bf9cf2bb7aeb44da2a71cdc299893cf2f4b03082bc973db5a9aa4f6

    SHA512

    3ee716ebd54affa43fb9ec3a8def312a1ceed8f9abb3682bf437cb0e8e7186f62d4a44811f970988d50e989a11f0d2e65ae4611680e76164c582314ce8fa8ba2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    770c33d065fcba36c35ab367981bc49d

    SHA1

    ac3943f1bd55a59fa35b6a386c953942b24a5eb0

    SHA256

    783b4934ddf659a3a852f447c4ef2d91fc12514daf47fedae947d92c6818cce8

    SHA512

    27b552560c4629182adabbe06a6bc22e161ebf93c18124c28bd32fbf0a9394d57ba13ed5a20fafc8fcbc1dfad0d1b3e83a801f1fc71dbb3c9fb993c6e84ba2f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80d74ae78e3db386be7d2ffb714003f6

    SHA1

    36716fdeab612689e4c23733eaed16c5dcd42af2

    SHA256

    02d63dd71c37ba09c6853e78385782173d68895c2bed1b4719c75b944db18167

    SHA512

    bcb54bca4632ee39deac45a08f0dac3642ebe648e15334bdab0affdd4293ebd3e85ffab454281f9958630a69c85b1be351d524843eaa18ce8345068b397664e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41d295486c2b83683df448977e3c0ad7

    SHA1

    4d5e7d1e6cfa2944834dabf875e25813ec2def93

    SHA256

    4a4bd38d63597b0d7052ad55297d4fd380100b992ba7142844a8353750bf4659

    SHA512

    dd602a48c3290f83506767b221c961f8a894ceed1a2a42c00c0c0bb02c7f6eed73612f508ece3504738cf12e05db09a674e13b64b5bb578162b09e0d64ca1c27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f1f84ce594b23acdfda255d5c2094d92

    SHA1

    3b3a71295b01189e0199083f7ac8bbcd3b5ded69

    SHA256

    a5571ad96c4d1049a3c3c836efdca7979fd3a94dc25035e94b57dd495019e650

    SHA512

    2cb09294230d7468a5682df2d4374b48e0b652bdcaff2d6554eee9410a1e95d79abc4a1b4d271d0a5e4cd1c0297aa6e10fbfb467de7b904396b73ed6d4ec9ca4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    329acb1366dcab5721264af68884bc37

    SHA1

    6e3c5a921381bae75d5847460b7a1ad5eeded1bd

    SHA256

    2638a98ea410cb0e12791a8e5c96f10dea6c3c1960578059bf557f3dce486b1a

    SHA512

    cd05d5bb38b78e0b46b0f7fb8ee80f0dfefb34c9a279f60323e99897d54d3b651825ca105d508ed2364512cea9428abe83f1751146097c67c4a3e1e65899e366

  • C:\Users\Admin\AppData\Local\Temp\CabD193.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD1D5.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b