Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    15/09/2024, 03:07

General

  • Target

    e196123ee4f3939b8521d11e07ad65e7_JaffaCakes118.html

  • Size

    15KB

  • MD5

    e196123ee4f3939b8521d11e07ad65e7

  • SHA1

    819c1d45a92a3cc7fcc30be9774af7bdf1abff1d

  • SHA256

    c91037ad0bdcffe4802023da1f4572268959c6e2145442e61ca9ca89001586a4

  • SHA512

    a716335daed2969817858b77ef0b4c1e6683108fe82d74e974d220bc00ff1b7cc47c840ea42d14a3d3fe81e4b1c995ee96af4e7370b03d68c00e031ca40f132b

  • SSDEEP

    384:T48Id4kW4nfniCTWggdnr2fEud6EJ/W/ogZ:gdTnqCT0nNalJ/W/r

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\e196123ee4f3939b8521d11e07ad65e7_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2624
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2624 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2776

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    3ec0379087370c9c8f6f7c23b6475146

    SHA1

    a33828dcfd36d4d70b3a0e39c3de4e0b69d41bc6

    SHA256

    ee25cd9a6759bc94292ef9d4ad902470a2b256a90b4cdc75273eee3268345242

    SHA512

    0d799a2953c86ec64008729a0d3b53ab70072231fee459667d5ade3dc56c3180c26b6aba775cc63fcd0cbf0dfcc13b517e174c629953bc7abed3add287ca94f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    c37447a1e04a693f17e646891cc28384

    SHA1

    acae0a2cb83534fd4983169e02d0b6c6852f5b06

    SHA256

    d7aa6de0a0f8275df48af6f08eacf1d2779d04a0d3f044f660be9c120487c9b3

    SHA512

    75f311436b7f78e56902b285cd5ff43528bc9054cf698d8fd4646b19d041f6a243f83b278dd334db4eb483d3e86e428ecb19cb1bf5ebac2b081a503ed00b3dab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5b2689dc0139c855d73419419575be44

    SHA1

    d6df5ee982842d2431f2adf7542f6c27f6e4308c

    SHA256

    243360dcddc0f6787df3b00bbfa2022948ee2094bdc573e9a42bb067b5d5824a

    SHA512

    8bb48f161320c4f3bb57436ae6ee64a2fd4d8b5829e82a1c89f02df48f8a43470ee10f2514d42d6613db260cedf7d1f74682c6d3fd5de5720d85153a8ceee7d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28080ff315fb73d734e51b4e421984ef

    SHA1

    26f09e5973f50b41e2fdcc5f372facbfbd654502

    SHA256

    57bc03730f3a47aa3a450c40ca3cb022bb31a3da56dad8a9dede353944d6ff8e

    SHA512

    2dc5306a73f3ac09f27b0fd3e16dea96817be59cb7bf455fd6283f41b7d240a11024a49d806b91b4c84e3bee676955b574ee06c7b8688d50061eb02a5293badb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b2940c02832a0dd209d3f578a739911

    SHA1

    9af8ef79231632f049238b275dcc41a5df8ed678

    SHA256

    7a9e367e7bbe673eefcae509e3ef2ebb648eb17ccb304b50cad4f631bef68254

    SHA512

    0b0922f4b975ae876f2235c606231faac537c10954aac9e19bca1c05d30a93bb930d0fe55205d36b39715c7ef9b4d3c36892a7dc820eddb563f8eb274d11e218

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e56238f6d989709ad5c06e68aca2eeab

    SHA1

    4c01ea61e19f10f831e26baf0755c8fdf4804bcf

    SHA256

    6d5cf8ac8325c33e556b8ce34415e95d10fc9868b08c885fc1d03d40f3f61c30

    SHA512

    5d6073f86228d7c0c1a9a32bc87b552e443101bdd9cc9a730800eb47dfe8fb236e46ef72ac450aafa33b9ae57deb160cdf0cd8ed2ba0dcc66bc9eb6d8b3b49ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b91bbba6cf6a10b1505fa1d0b361d42

    SHA1

    8bc54c2736220a41d7f689d2880811e9fb0d719d

    SHA256

    42cfd14abc7fb65c5f39b501d955d21325447f70942cb5eb5a7aa0a95e88e9e9

    SHA512

    13ee4da0772739db6ef2fc47883d0968f8295cb7b5260abc1351530c1b07293a0764cc396acf315f3f02720d540646a024ed0cd0c230c3b09648ea24f2381848

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    21fbde1fa49fe9e6143675fbd499efe7

    SHA1

    b57fdfc73f81c19196b20cffe502852de99b76a6

    SHA256

    08715722333e5c150002326fb949554080d844fd1387df1da56079ec41bf6dca

    SHA512

    41872781bb86093682b62d095db9f74f0236eac5f8a627068d5697936bbf93bbc19f1e88d263e424d94cd8309631c096fdff2185c08679296e42cbc21b62ec9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2224e904863682749d9abd398d633cf

    SHA1

    50009978fa3f141d3a44dfdac6875979587185a5

    SHA256

    23c650cbb1b853bef40f4bde48db4d253ea0c09b5376c4807cb0523870a297a9

    SHA512

    c253a30b2d91d6125dbeb8650a01639ac135c3a3f4df497842c49342eebcb85ccf93586edb3df9792de3cf8cca8cef1057c360969afcf95ab0cbda795caa080f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ee84bb9f41c1270cc230ac1d730d64e

    SHA1

    276f1003ef6a87b4e7b152cf9d4ec3492377f877

    SHA256

    ced5ca021a8c52a36ea266e6e3819acf4d6e527c768fda59fa28b0a55421e142

    SHA512

    4827382008f133aac4bb7664e04b0f39b65c1de4c6815f446831af463919819f28af59c8406ea34f5937edd2646bac273d8fd336f68909f44caa0024ca346ae2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    07833d4a6d7154a41c0040fdc43682db

    SHA1

    e4d1b5be5064243e0483bf5bc3c578bb8bcfbf74

    SHA256

    23c5245da4012c3660f615917f5f1fdd70092688fa72eb05b133e7c5012f1370

    SHA512

    809baeda8215c5fdb15bca28bfb85b3df9f963445bc032c8c96cbfc5f0f97d5b4374b2e1c58fe5519c758774d1bb0750d3589c5864e179de660489bf2d8e7388

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0145643e46ec0139695eb072a660ed5

    SHA1

    b4a5436e27e7eeb824c121859330f2848ad68b67

    SHA256

    f0e761190617010c687345bf7e2fc17077665550a1047e74e94092452b4dd4f7

    SHA512

    e6284f1b06ac2febe1c703aa96b4a845472eebaac27806cbf04c0add0d1f50d6f43fe2cae6d333f6a075da4cdcd30fb73df0f33de176475836e47fd771e52edf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1780b4349e652928433e0791d36d5bd4

    SHA1

    09291339ee71dd7389b0c5e80355dadd18ccb324

    SHA256

    e5a09da3be3f3b9b742c7bd547e1c4d1b6ba520857c1d8ea3fa5d629bb815165

    SHA512

    1833df88a0a1dd27a6f506c03bff154d09d776f050085bded86eb4bbf24143775641d8d38dca0ddd219a01c675e14863f01e33d6b7c5e565d74ca6bb8652afde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ea5c3d02e1f7377cfcfd702ec03e235

    SHA1

    683dd235f6b5c39af06edc7377e7eea2da5d78c4

    SHA256

    34667ab73ccd74ce91518815d2d95f7836b5d17126a4e0bc90d249ce42ad9583

    SHA512

    419bb306b282a79970a1abc0ea10497b3208208bd8b000f760792b281642ac8a887f2aec57b68639518e753798d9039fc26f0509a6c4ed81b3105797ed37650a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    818d993c221a8b013d9c5dc826ecbc4c

    SHA1

    ae60e105a8560cbdda68f097106b1c6ad9e80f93

    SHA256

    4ac033d8d2ad2e03bfeae703fce24442f02e6f0eeb801880f02491647319d932

    SHA512

    c63aa67b84e9a3af17d39c4a41de64575a7277b3ac241075bec958143f2738cdf5e51d91ff73d407667a7ec84f4f837c3ea86a31700dfd08f9cd75549e5b9f65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d89930beb20415e84ca3369f66c68495

    SHA1

    6d3df8a4f77213ebf258221cb05a556ed8031ed4

    SHA256

    72f4071bbb2d0bf6c64a0d5f6b612cf8d9323d792cd43e510d42ff841808c106

    SHA512

    8da74bfa451c29378ca70ef42202f581e1ba6079de0d6c2c50dbcf5823752e50769fc44accc9d900fcdc156afb0fa436f899145148d79d10eed31b24424d9506

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c394670bf0b3f858c6b4248773bff89

    SHA1

    96b6650c0d6f74b1bd1a382b900d39dd2dfaff93

    SHA256

    c4f43806e790a9b915bce9e52ee942730f4bbb9ce05b3612b79b491ab947a522

    SHA512

    f2aaff6428b75b2e6a64336ca82248f6347c965bcc942ff315a5506c050a76f967139148c006cdb2bb24d08366c66f723f52bec3cd25d377dc5597f4806b7498

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    effe50aa9dd2d34f96f970cb7fad8fd3

    SHA1

    c991cda7f3ce482a50118b86575f0f11ae8f94dd

    SHA256

    20451b08d9d8e3959d9ee25ac2cc74dbd0197e0b87e3e7d319ec0b94cce9620f

    SHA512

    9ab515f574490e8c23a34be40335b0625f102d09ca10fb10b1d0254c855cce1d0317c978ecf4918ca86b2aa83e378d4253ebdf1d604e81294efdadd960548221

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db5b2070582610e271ea0b3f76058ebc

    SHA1

    9e12f7ee524b3647801c0f2c11902853c6286d39

    SHA256

    ab4f43d36c5b513ab13133a074c9ae149b4dcef4b137599c3e85bfcf25344431

    SHA512

    4c315bd31d1bae00619b5b09c6bc992e031c97afe62806dc63349f03ea748abfa9505d9272fdaac27d896ca2f9138f30bfd2d50774a4f3dc6fe5c32206611c01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    749385481a21dcdfd797991454a74e50

    SHA1

    e655de373d48523338d0149fd58b86f668ad9698

    SHA256

    6f707ddb857acdc68a5b454f010fd9eb00c7f995c4908a9392faef67a83e934c

    SHA512

    8734c9846e2d611d9e63ab3f7930e48ef28e710bb6b488964423d396226914b5a866b1a46df5adcc8fdc460c5f57de7928c0133cf8346b4255e279b51633733e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11efea3caaf7eff6dbd9276907dfee0a

    SHA1

    22c4e8f59efed9815359d1275727e41d402809ee

    SHA256

    4c0b5d8b1dc802be562b111642ef6695543b5d4425bf69ed3384064e865b0a34

    SHA512

    d7072167d481aeb9f2e47adcde49ae0ee18f25147b155e0834315bcf8be55443eac000fb181c7865722a9e7e7c7a5fceee8a42bc4541fbf40d8beda145fa5257

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    85693c287efe575a0bbf18d40dd25bde

    SHA1

    0fced8d6fdaf84b1f885fa2003bb612cfc310214

    SHA256

    ac4c9f873ae22a80ed23973cb046540f407adb23f9f77cdc5762e76ae9b5ffd1

    SHA512

    0e0929d9ae968b0642d47b5411db1c1ff50a4019e301da658610babc9f4040a0493b3cc7aa0e1257315b6554ace00207da8a32bf70b1263b7b1e584ed48dfaf7

  • C:\Users\Admin\AppData\Local\Temp\CabFA67.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarFA79.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b