Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    15/09/2024, 00:49

General

  • Target

    e160314582b019cda1d520bd9f8c20ff_JaffaCakes118.html

  • Size

    161KB

  • MD5

    e160314582b019cda1d520bd9f8c20ff

  • SHA1

    9def8e3f8a446b3fa659dc4698242288b9732aa2

  • SHA256

    175aa1deeeb2ef9a74243440b17f5593998be5c238daa9997ba2ad62dee37e08

  • SHA512

    ae27ec4cbf39dba6dce5eeaf383a8a3330523b8c1197244710e64909288914d7f6febcedc7113d6fd7a906acd24e8a095aa4c688d09a9b4d6f99b68c9d0827c3

  • SSDEEP

    3072:lqfCVfU5Khe35iha/ykDaKo7Sru+qrz22uNyVqRlh7b5PtW4:ICVfU5Kh0iha/yiFS+cVqn

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\e160314582b019cda1d520bd9f8c20ff_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3000
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3000 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2308

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    062c16b259550a3fac345ef5dc459d9c

    SHA1

    00573881e02d59029ea1f30d98de5975b93deb64

    SHA256

    94654b1c80bec70e6f4156f55b3d3993e2fdb9a1c0aa925e63f9737f1ae089f2

    SHA512

    f0fd606d449aa26e6e11b1620a6a79dca7eb5989887425e2c0e87b53fd1d9b51ed5f2524f3bf2cbb4cfc1f4ba90d6602e35c3ca577c5843e12d61a3d826ac66e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    5c73c1b7471ebc70695c6d725ffe6971

    SHA1

    e8e5bbe1ee072b51e66973dfe6177384a3a7cbd0

    SHA256

    f042c7c6e8ab82751a73e73ded5926deab35fbcbf29bacaf15698c50df6cef88

    SHA512

    f4faf5bbc49acffae6a5e451044f0763aa4097d93b74afe95604b2153614439ccb2613f9406a788da5f6ef2bcbbb52d78672cb15024b7d22380743bec70a2a35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    59cb8af720055256f555a76f71145032

    SHA1

    03e6534efeeb8e981853f6fb20ebad48e9e05178

    SHA256

    952e979049ba2a34bf7ea45601c7eddbcfe092d3bddf7f1b51a8692a716848a5

    SHA512

    979f3f1a6a20aa506de02c76d36dfe574eb1b81fda28971dd72339e9f063e2eaa4e6fe85b9c9bca537d1790ecc360b1fea4ebbc5814438e235b8cf599755b241

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    14c67d7adf38e48088f0ac30685326ef

    SHA1

    d6379f1e575f1dd6669737258e6d435d9b33b350

    SHA256

    e578c013eabd9005e88b1b2657d59413f39ec2f62f067a0505b95eb8f205e258

    SHA512

    5ec800878106f24e8170e163f83481e96b7830c005f29144dd3007b2aa04e54f90c35e0731e1e0189ec28fcd6f46286d93e17312f386d5cce7d20611d8d177ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db41defa98413ebeca5e31e548e37914

    SHA1

    640473526158b72483489564eec90a3f260dd06c

    SHA256

    fce0221696528e52ea5e468d4e6d0ffa5930d180e53e996615d204649eabb920

    SHA512

    36372d357d09f7325eb885cdd40cc824d668a69f6453d3a1ce5252c7353f459cf9b1830684c72c3b3256c2f4dbf82a8813ed1b72d9c5839cb6d331342ff66031

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17f67624df401580a946ae35eff6bfda

    SHA1

    02044770da8f6270ac3f660c1e47947eb937a66c

    SHA256

    c5d7b5dd1576bf357b5b31cb8240e2d553f17af8f12f7e273348bb918155efe3

    SHA512

    76a645652027deec39692f523a059c779db6bddcce2f3f52c7a0d9eb1124d383b8c489804e8d08677c44babfd46a28d38605125eebefabe9bfaa8115808569c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f323edb16813e31a291fbdba80975577

    SHA1

    cd741b209c04cf790e817e07440b69b26d8a7f1e

    SHA256

    5f26827f9c231714774f551f582bbae9665ce4f3ee265c6135326d16ebde87df

    SHA512

    2c66ecee62cedaf26b81d84ed10050229833030bb4b1fef36dbf6c2078b915f9544e26b8a345928fbce70bd855532d2b170b5ca0aa3f42d9aa884ecd66303b9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3184eb85befb69d3a7cbfc59ed6505ce

    SHA1

    bf22a4efb9947287bfb1604fa506a6d838679552

    SHA256

    be56d53ced312743de072603eea93b38e02707c169929f707b89b0bd8b6f513d

    SHA512

    61efae9ade148c91ac1fd346b812b9dc8ddb3301ae8fdc1f1e3ee5ff6f356abfa8c2220505d58382e6f977cb897fd8eb278a154d57db78ee495d7744ebaa2dea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    99ea1c6cc127c120d56a1df830361506

    SHA1

    ea69aad65e667501673a9628a0ec1c709a03f7d4

    SHA256

    ef7fe4eec5dc33a810617e4f0b92d8880314a35f8e4957c68a6976f6653d82ae

    SHA512

    481e4beef1097f049366cc993f8a29012ffdcfe572db502c082b3c5b9c21cb825187693d8f853cfedd3d444a6d8ed1766d4fa6c5e431fa9ec2e4eb279340f315

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f8fc3c72c8738ecbcb8f296e3bda0643

    SHA1

    698bc838ddeb3e20eb21c72d8dde85f8e41db577

    SHA256

    a2d2292fa1b9ea0bb5ddd269b8200cd6ae8bf57e35e728b292a62fce991ad239

    SHA512

    027e89e1816f8e00fe1c009fb1d4cfa688e9f6b3e78778a02de0cfad860897778bf3c4ff7248f941f98f240b3cb6d4ba79b6c0f13e46d4692e597dfa03c2799c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    854c0ef8682ff1486ad0ebaa4bd7592e

    SHA1

    7b8d51e12087059eb41655dd9eda80510a2ae037

    SHA256

    c8d9c815de1f4866d769407fb656da31694d7315c49424d0d6aaa2c61c5ec639

    SHA512

    f5211d4f5e0234906b3638c677d1873512ebfbe0236004c41eb59aef1d1f3839a0383dbac2267e1180c065035a6c14bf506bff8b46b08f99ad0b02c8ce2ac4db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce0c9564e1c6e562e21535b013256084

    SHA1

    40027bb03cf8163b1cb778201cbd4ebb58d9e75b

    SHA256

    47f50cce76670dba49a7d7e1ce31006f3fa8ed739cfefe4215f1e92ab1cd010a

    SHA512

    bec54bedb5fe750f2052ddafec832935227d92360e70b838d00cc19118330414136c0b54ac42f71d0d9404705c2124aa4c4f7476e0f6423093a46ff1a03154ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52266f59b226b16fb7b2ea4b3cf082f6

    SHA1

    4adcc40aa22f237af6c3300b0cbdc5a777d2c91d

    SHA256

    14701d13a2ba3c358016c5706e4b17ef5e38801047b647d292f4eb70c448a95d

    SHA512

    a7ec2474b3fb0aff133cc348885f1659269f4689ca9f07ce7a2f3dba27bc15ef4274c37e5504709951c51ac9e53ec66e11486a98bc6c347949a3ff5885a2ef96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1e462cf85eaf140f26736dff8b2a7d7

    SHA1

    8970092a88c1005cd9c4d142302d5df4338815db

    SHA256

    c92b21fcee8e4b152198d699890ec3788fb418b9cbe8e5f535a85d2c974e3e3d

    SHA512

    cd6cfc77217f8124cbb8439027e4f8c248165c7d27bb865b178a16b2d10261159a7d189b2d1670992ba183886af80e41bdc8200202ce4b8f3f639c74ac2e3701

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98422b97066fe601567c01ba7c0f3b52

    SHA1

    809b93b23ccde30e2b3e2bffd250cfe0344ed715

    SHA256

    87752d3a3c6b27b16482aa3a51d7df7dc422b26d6bc3f040adc0a1ae3bc5ce0f

    SHA512

    3e8e6b26a62c0e953a51a102e5e9749c6c9f4853a5f420687f417d50365227f788d6bf280610e8092bcbaecf4acab5ffaba3fcff352a638b5fbf1a8ba46c67cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1cdabb50e098146464db5f887685870

    SHA1

    1e1245b733c767a5252a0122cd0547e41c5c9bbf

    SHA256

    9f17767e0c1fda0c28241fdbecba5476db73875f2c0f58dd7cf64d251e178d29

    SHA512

    440d8a3560c8e35502f0ac65e489b440965fb25313eb69be938bde137150a4fd7cfe2791c5c7072b826f14a6aeb1a93b28915360afbaef0f623078017c78935b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a6bf3662796012233ae59b4bc0ddbadf

    SHA1

    2c567e3cfa140efe3afd055d21b73954e7517683

    SHA256

    8e24e306fac55b7b8a631b8676a379a8d5bdc5ce5cd34f4e3543bae9c138bc5e

    SHA512

    2816ce1f90b003ab9fba611b1e3f063443593fc08fc2c83a6f8a135eb70ae8ac8a328c146b1993b713b078cbff60e51d10a66c3e6d14b8c23c54d4f9f15dfe26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2102ba8b12dc74b387bce589769ba87

    SHA1

    974e5a0ba026dc2d654c13bb5e4cc21b30695c3c

    SHA256

    fe538ff117ee0f84ca2b0742a347b5d35c5e786c891758de14902f2cf352292b

    SHA512

    16a008b8dffc9569280f4df1f5e40807e6963baae7840783a384262e7b5946d5ce946a15ebf063615479d0b46f3062c20e7ea25e5461a3bf1783a1e7266a85b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd6c4434feee5530b162a037a209a55b

    SHA1

    7bf0c6cd827373b4d2245b3a01b5338b569b385f

    SHA256

    abd440b3a252314484e6a943d5b4bb2e129fa12773d02f2ab3c32c83c092bfcc

    SHA512

    dea594c11d950df4a4dc55ca2b37b101412ab9cb172e8a9c35f3083f6064ce0e8b2d88e4b34a5cd4a5b6acb197902d06aa0c091d40e96039b9cbfb94f97218ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87516d2c29158ab2f8963c560d1a15fc

    SHA1

    a05e7350931f282b51edd3225abfcbb05866a0dc

    SHA256

    3537899cff5d79ea126ce65ae76a91d881ff22a904e9d142f17c22ed30f8f4d9

    SHA512

    9c0661ebf2456d562b28150b05d09a09ea0813cabc2a537e77791c18a4ecd66ce5b0522e5720be4968d1ee94470a0f09187f84a163f6fd96cf793851fc12f7e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06b8abd904ea9e8f1761141f231113be

    SHA1

    a8a4613778414a4ec45d2237b1a16285d08d0626

    SHA256

    339981b2019673bf25b6201e26a94fb7d6bdbc4a771f61d4f8f716b6f9959865

    SHA512

    834a7223917cc6a1bb0a6b4f18e1ca3fdb0ce76876012a5c52840f54ed18ef66c27c5ad9c4f1caa1c50e1d3685f8cd40407a50aaae9118bbaad4195550a64ed1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd2664c509d7766c45f6f440c8049e95

    SHA1

    851effa3ed9399ac24804abae946cad91f240a2f

    SHA256

    b271edbcf87e29f130fd33c9caf90b32963e17e5f903391ad5faf10a212130df

    SHA512

    14a2bc7f464d58fd94fdd6fb38f0f4b290dcf04cd895e4a729720d341e0911c0a674f70fcdfa8a5cfc379b2b2d3502061ed841845d172da2e0b13f68d6acdb75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f93e432af164d2b9c057026e40a4bfb8

    SHA1

    e4e1c8567d0d0e0896a40ecde800d226e6f11af1

    SHA256

    e2af411f2e1432c27d88cf6367a7c1dc9b108d0170c90183a79c707d543f401f

    SHA512

    32eb673f47966bb1e39b2bb2ab3533b64f34e7ef15bc8d78e612fd5681bebe7895d0450d054840ee7689ed0240a9434ca04f58a9415894d7cfe39bd00e44468f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    103f1fd676b946fc2df50189a11bed05

    SHA1

    4371383ca95c00b873e30b00f85f94888f4151a0

    SHA256

    84ef80aeaccac21128267e2902cbdcf19c1dc3e33e2cbfdcf7b264772402f249

    SHA512

    39f74c276be69392a64eb1d7b2986d80bfba0f32619f605fe30a770211dae61e753afebcac15ff609a205ff0bbe370cb6d005469211f0fc67f65e0bb958db889

  • C:\Users\Admin\AppData\Local\Temp\CabBB55.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarBC14.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b