Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    13/09/2024, 06:38

General

  • Target

    dde064e1a45d87cadebf9fa70673f28b_JaffaCakes118.html

  • Size

    67KB

  • MD5

    dde064e1a45d87cadebf9fa70673f28b

  • SHA1

    cddf5cd9a6970039bfc763d8a91a97656f3443b2

  • SHA256

    2e86d89b222879ef3cdf3f50a9c2a1db9395ef947fe056b392aaebc335d629bb

  • SHA512

    c0e1c104b0ada9e6d7dec4488906dfc57ac87b47a823d21192ea2c05b95e6e79a3a3ae4c09340b42f3aca18da3efc08d433ea6f15a36258f988023310748e912

  • SSDEEP

    1536:m/bqbbbnyrUlcge6O2o4lm2Y1chL/pxI/IL:sb2Cge68Ot

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 44 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\dde064e1a45d87cadebf9fa70673f28b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:328
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:328 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2520

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    25b861290bb0ad676d5f3a1f4c61a225

    SHA1

    7cbb16df0492039260525698027bba05ce699409

    SHA256

    1f34c4c4ae0fd4f3d5294418f579159f04176c19081fe18fad17526bf2d94dad

    SHA512

    a08dcb8b13e03435ad49976e12203510d9e268d524aac52d8a7b6216ebcfdcb23d310a48638a0746fa5f3107b339fce464734da0ee8424d9c3d08d7d3051e4de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    368fc61a514e168146ec9e1b0a8e5370

    SHA1

    ce3dedf9814e865363fdf68ff731e99b9cb43daf

    SHA256

    17705c6cb2e198dc4d2ed9e0136112dd3b35253d867188b8bcce5b3c3f226737

    SHA512

    ea4899805b3c9d897a186220279918416c5c4114c4d27e2aada8373754befd59569daaa54734160f0cfd62bbd15f8bf058933c4bf3533b78141a7ecab61ee6c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    728aa81f20930f171f0b35b6de7a8863

    SHA1

    062aaf504f51f5acb29f199e7253e526768de225

    SHA256

    8e9eab915388e2527d7a9de5ed45808880c74703b80247fe25c93bd671fbe4e1

    SHA512

    f45abe1e1863b0002b367f784bc31350baa38d90812c8322b5a56fbcbfce63522fa17e1399418715aed925f6e9f0d9ffee2ba1a4b336e101d6fdb8d6be7c8226

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e81f1c1e19fd92f72038570187691021

    SHA1

    8448af57205ee79feadfe1a62019e826a9fe445b

    SHA256

    c84f9093ed663d84e7fb0a0f552a9b7ee317b6681e830c3e47a6d394450adbc0

    SHA512

    260b421204526a11127075b8cc87edc18dc21595da77e8bb7824ee99554756729771211cf2f1cd3827e5d8afe2181381696fe792583add5791188c01a8542fc1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb73b2c17da33f659c00ba1cf83d6cb0

    SHA1

    84d74389bc4034ede9bf26df51041bc4703c9eb6

    SHA256

    357c37e5de4b679d1cef966e71993336dcff6d1427a2eae5fb9d5cb7ba4f331c

    SHA512

    7b33bcea8f4bcc4d819881ea76371092823673ed843fd8a57dcaa0d92a35c9751668b5e252dd6ac0f1d5b0a9f98d95cfcb6238f0d972de0098e8ce8a280b0e2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9eb971fc401f96f7bf3527b0ec4ebce8

    SHA1

    93ff2082af0c7f3378d5f0d0ea6d7a53475e898c

    SHA256

    906e59205469f00984e0b836c22f7a3da1de5de4454fd79c3b80442b9e52b23f

    SHA512

    7aac57bda6588d67e06f8f2337fe719424461f317c9d322b77b934c9b0dd7a505ca9a6769122e9a855eecb907b9503d11cd9492b8ed16e5af31831241972277f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d736866caae08fe58c59a7c322c914d0

    SHA1

    c7cbacdeed982816f63570595fc38f67372731f9

    SHA256

    e5a46d6359927559f28d78c40397dbeeab5d1051cb41f00a567c52165f29b822

    SHA512

    4e29c185e0911b6d12d6ec6ed39d4a0021f9ea1118f89dfbd7ee583862b2702d189025e9df4df7e00968ba5f4aa0e33ff91bedc0850c4618b52de33574e5a700

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d6f482b22a52e4d314f296deb42bf91

    SHA1

    a49b80439d888c42af7f86fe9a5e105a4440cf29

    SHA256

    e192279ea3d642f541700b943f4c3a8966496a714909ef24b33ea9d21cb8071a

    SHA512

    3353c9ab0c1db6cf22fec6d91e4276465d2a1ad99513d07fbc13ac01927b2e92a263065333a96c7f80f0ab336ddec10e49345082a2d3a6c44b8e5665baadd618

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2de09a8cfa5b93112f5ff0c8428a03db

    SHA1

    3a96386c6fa4f45bcc6b19923c6b293dc02fea37

    SHA256

    4babb813cbd938761ab325585fcc31b1719e13b9ce00bc8b48322f8488de3dfd

    SHA512

    8d048aa03aea5457cbb2b5ab750324f7cc1014ad48ae124de975f06fb2f170d0895dffb3680a1f397de2ec9df7100be55bb600bd19dd7c3c535d11e7ff41a331

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b874668fba15ef7f8373dca53465151d

    SHA1

    0031a508f964eb5541e715f6f8921795ddcff8a9

    SHA256

    9d70084905cc4cce0818163ab1668bd348b7a6885a1af1792049907203fe33dd

    SHA512

    ebb0b8022bd28a40ca151aceaa868bbdf0834591a02bf3339d32904488fbf2b6064f32c6fb57977443a84ff667a1514a8cbf36caf80c1ed9bee4ac70f6d66e21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db555a1adb49d85a4b12abc68217214b

    SHA1

    a96971eaea210ffece64a5f1065158535a65cad3

    SHA256

    0b935c368bb15e9082b5329f1a50d72325dba02711d17346b20b8473920f0840

    SHA512

    5af70e5a38fe92b4be9aef5ab642860e79fd68ac5409c43f51da63ff6410978d524aa7e1b5e6450ae42180b7b35c4164b0b31d89a68d513f2d750be65eefa541

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b23d1541773dda51c64cf1bd3d873c10

    SHA1

    4ad25c1c885785009cff8e9ba2280dd12ce971a5

    SHA256

    1adaab1b6eda44de5314fb377912340e609d54eb37c554291b84325aa649e7df

    SHA512

    25911640972fa5920b7feed19a45056bded3b1b209fd90f0256741f65e293e868a3a94ccc890d126b98bc03e612fbf5cd0b0090286277d0bf0e97d0d59081491

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c72652f2655e540353e8a349d22fdebd

    SHA1

    6563d67464b5fe850e4cddea4eff168d844b7587

    SHA256

    f223997ef57aece3ea2f8d0e43f927f40de62643d8443d1c4215950dd3cf1b19

    SHA512

    c54c6e6ab87c7dab3bbf8b7c4d67467be29391cb32b749ecb8ae2f44d8c285c948beb0ec5012cee6d378b45fafc434ca81a3413290ba0d8a8770f0af18e9752a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    020c04fae72e74602010e58957446b85

    SHA1

    e74a2706e81c5968f87e56d9dac2a435d7285f9c

    SHA256

    f151eb41bb976255a4da82b9a51a82d4f0dc587d4caede56c916d376d6eaf0e9

    SHA512

    8c08ae49c06d58a7543264d62fe9617651d7f38fddb0c2c9299e72ef4615ac725bba33de1c42c7c9ea0956ead930c52f90c0cb77a827c065ac28d78ccfc777ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eba6710e8b8a26c3ae845e6ca3c84e4b

    SHA1

    ea114a3174c592bd0306331d3da389b0c42a132c

    SHA256

    5eae88743ca4e0acc4033083c5623d165eeb951be71e0fb03e11ccf1c8c8da0f

    SHA512

    0cdcf42c05f18e636f207f2006f56bbf01832646a369589e408cbf8f75c6892134880313778f4171a33e7eca57e428c486f772784f4d5b12732e76259ab3c909

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a8a18663850a46b2020fa784fa221a18

    SHA1

    87cf017b4596f76eb96a43e71cdc407cb80608be

    SHA256

    0c72fb864ccf71ae0df332d6272e8f9972c8b121b140ded2242d5099b123f509

    SHA512

    9d6e19b1a7320acb2a939302caab1b49e998eb5dd7b4a549f3f915921eb65c1e7e6f0bd90f724b56fb1d4e115cfdf576ce2a6682c07496d9a6ae92f26ebbf2e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa1005caf1f00c90de36ef822c72c319

    SHA1

    0066432214240af8d4ac9e48c743e8411e64aca8

    SHA256

    9da70c3a69a6562e247d0965cf270898b138457093210b77217016c0a49c03a5

    SHA512

    f908cff78ff7210781bd58df59af232de6db4f6e6e4dd7575b5e945aee7f6c81dea02d967c02f9df8cd7074e89d2592d158ae2864778e37a45a4b12133916cf7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e7551b156c5421b7a41e9082d007438

    SHA1

    0e8f41c4007fbb7b135d134602e2a7013799061e

    SHA256

    a75792620c06b0ad0b382038b99aa2e144d652184c8c9b1b989f32a84315c5fd

    SHA512

    f5abc8f806cc13d5f545c2d7004f639a86a562938570b89e86dce7a30c9fdb7f7881ac9a3e14d0797a26610b34dfb71d60d254b152ae07f8954a36d794713011

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff6b1251078a5b34f9e91646fad416f3

    SHA1

    605aa78125ba51702280425207c199b2a8525184

    SHA256

    271a8d6f8928fc77fd994fe8d17b857248977b94395264a3ad7dc18aa62840e9

    SHA512

    64d6fb0b73f8d514e46ebc0ac802aaf1c17f5f21064d441edd57e7ee6510be83b13a3fe087d7eeeaac9e690d7779a2bbc8a94d948020c60bfbac5a1664496cda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    74b7ae233b134301ac9f12b3d9e9b1d3

    SHA1

    a36eb8013af524acdc8e881b36f789c93eb35660

    SHA256

    6145bf5f9e84905cb49c6fd7041a14221ad847933fc8d1ce05cc3cfc51af5432

    SHA512

    abe643d71af302831ea05e001453b5d3d5ceb2df3e0c239fc5ce7fb38a69a41bd7bba1011c4355d709d46e6eee3697f93fe6aed926a7a4824a077ae4b7fc150c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa8f0d1d756398b714cebfb21963cfcd

    SHA1

    55ae7019f8679bff0ec97a874139beb7e04f767e

    SHA256

    16923e7d6720d6fdcbbc10ce66c21f77c724a40c98244bd4755bffd3c135a359

    SHA512

    1c755eba2daa9dfa7596a7759112f25cfb58f04ed670c68f1d1f00ae52c7d37fc884109d49829a22e8d17a613fbda1a172f8e7e13d539de59fc5dd2625b48da2

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\yiu0yt6\imagestore.dat

    Filesize

    5KB

    MD5

    4a35f7ea293c51a7cddfc411e9a48e98

    SHA1

    351df3338b7c25b92017dba9738b374c2e65d3ec

    SHA256

    547aa79c08acb1a0d360ed9beb4b23b3ff75686981ba105072e22b877e155772

    SHA512

    b37995027faa4baa3c983480ef82986938ad02efda0671d231c6df0609aa5f7ecac644cbea21f8635a331582d243c1279f44cacbacebe003cbaac17b8ebde85c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DJB1KT77\styles__ltr[1].css

    Filesize

    55KB

    MD5

    4adccf70587477c74e2fcd636e4ec895

    SHA1

    af63034901c98e2d93faa7737f9c8f52e302d88b

    SHA256

    0e04cd9eec042868e190cbdabf2f8f0c7172dcc54ab87eb616eca14258307b4d

    SHA512

    d3f071c0a0aa7f2d3b8e584c67d4a1adf1a9a99595cffc204bf43b99f5b19c4b98cec8b31e65a46c01509fc7af8787bd7839299a683d028e388fdc4ded678cb3

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F91VN88R\recaptcha__en[1].js

    Filesize

    537KB

    MD5

    c7be68088b0a823f1a4c1f77c702d1b4

    SHA1

    05d42d754afd21681c0e815799b88fbe1fbabf4e

    SHA256

    4943e91f7f53318d481ca07297395abbc52541c2be55d7276ecda152cd7ad9c3

    SHA512

    cb76505845e7fc0988ade0598e6ea80636713e20209e1260ee4413423b45235f57cb0a33fca7baf223e829835cb76a52244c3197e4c0c166dad9b946b9285222

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KIYAG1MM\favicon[2].ico

    Filesize

    5KB

    MD5

    f3418a443e7d841097c714d69ec4bcb8

    SHA1

    49263695f6b0cdd72f45cf1b775e660fdc36c606

    SHA256

    6da5620880159634213e197fafca1dde0272153be3e4590818533fab8d040770

    SHA512

    82d017c4b7ec8e0c46e8b75da0ca6a52fd8bce7fcf4e556cbdf16b49fc81be9953fe7e25a05f63ecd41c7272e8bb0a9fd9aedf0ac06cb6032330b096b3702563

  • C:\Users\Admin\AppData\Local\Temp\CabD693.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD744.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b