Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    15/09/2024, 03:16

General

  • Target

    e1998b8c3bb524c527d58fbdddfbc0cc_JaffaCakes118.html

  • Size

    10KB

  • MD5

    e1998b8c3bb524c527d58fbdddfbc0cc

  • SHA1

    42cdc4121eea678357336785b69e99c01547e497

  • SHA256

    4e8b39bb6416eda3a36692d7bd9dfa596f68ad698cb8669844dc428ee79e1663

  • SHA512

    e4c61d608e4468f249881458542cdc37481b04ea73501a6d2b69afd78f577c76f74ee2a4e20030d783385876976aba072580254a179172bb658db46ad4e68529

  • SSDEEP

    192:bdoQx5ZCvrtFw3FwU7t5h6/13hLUUB6ARkUVUlTxSIluf9cNgz:bd95ZCvrtFw3FwU7t5h+/RkiUlTx7q

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\e1998b8c3bb524c527d58fbdddfbc0cc_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2420
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2420 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1188

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a136a9d3bb764a2c0ee21db2c8bf9fa

    SHA1

    6241b0725dab6a51e8345b11a55ef44b45b5c828

    SHA256

    811ca3fe6f3b51ec42717409294ecd44e9f9fa7a4ffa36ffa6183efaecc1e1f6

    SHA512

    12a7462cd2bc45a326f8bb70e235518ed3df8d91e385eff80b41c371f178cf2de56bed7a189826698cee984765255da6c1c7c2ae35cfc5ca2414e86043f8b262

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    23ca0e2e371683be60b9dcf06bfbe1c4

    SHA1

    61dff5d9ebc4e47746a98060fca4998eb8987d61

    SHA256

    3e8c3d376494d14e509a9607adee0ccb2ac01225c4cb57591a646a42762a2316

    SHA512

    5ca85e6f2a0fc5e4e36db519f97ad1ebb89137857580e5a767fbd7744f83d7e5004dabed9db8e2ebeb129acb47231838c543aea823f09c214d8f49c9cf38f0f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89759123676d1f69fd6bc323e60202b1

    SHA1

    3b0e9c8120c7366d4e0cec047c2ba9bf0b5500c4

    SHA256

    43d68b3e878c47f9eeec5c00965db2d61fd41cb7b0ee0a53538b695b6ec43825

    SHA512

    b4e041f8e4b21f76abad97a82b18368bebfadf525b4e89ebdb2b05378d4133e233b846dfa65c62e86f80d24c12eddb0e1e8392a6fbf75bd4ea1ac165a9cf9f35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    982bc1d575e9c4f428ba2d2c5fb0f195

    SHA1

    a1d95a34af70f1676f766f798744506699b883e7

    SHA256

    85bb1337bdf76d419516f7a4871acd5d0ccd1acf6c47bfb495752fa07ec79be2

    SHA512

    d21574df8a0c3d84fad6d7bbf056efc287d8c364415f2deb4435457dfa3a15c27015d11e803df99beceb3d9236008c763cb065c790350dc3f41f34a0db00b88b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a02ebf246c6d6e7a84eee8e03ba7f546

    SHA1

    c81ab7c7bd240e227e09a87d0a20279ee47bba29

    SHA256

    b9d85f0ddc05952739a863d8d2540cd622a24e6858c0017436fca0b5ce8a8c24

    SHA512

    bf0fb6c75155ed607f69e80984f2aae36cb9f6ef0cd64b23a617aa6cf8bb662ed90d0b6f5ecee6fd473aa0f477b41e2aa8ecf7cd12c5f545cabd30deb6f78658

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae97ad53272b2d2e8e89da40dcebb012

    SHA1

    a614a7becfbe2dfbb01aca1e10b6535be4e52f9c

    SHA256

    e803b601c62979ef2ec7cb7e419291590553ea2668aae1dc442d270af7a150cb

    SHA512

    3bd665f442eb892ae7d07b560ddf6208e224db4d7f94163fa0a847c690014a010cf351c7031f243d37e9c1bd54393700b489c3078f52d364d070c6bd714da07a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba8a2728eecebfc364c255783e2fd32e

    SHA1

    1cbcdc47b3acfadf68cadf8201e4605315164f87

    SHA256

    0d209b13a8d42c487ac636fdb7a401197e2f076e6dcca072af15a403054cc99d

    SHA512

    c1656909e2f6ba94c5cf55ba5fad8951fb509c19863668582cfaa7c8a3043eaa6f4e62dd81c779cbdc58e4f60685899b3783655ac474a8342bfc9d086b5691b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8e451e2b9087574966bb19b73a3d815

    SHA1

    1360d6e6f5422d57ef4440029491253fef02a047

    SHA256

    37510a2e1d4d829c255f581e9f81039f127dc9b5dfa3451b4a48eb5298f4f02a

    SHA512

    ad6f348c50de3e09e21b4145d8106a001dee892e2be6495833dc8f96a6ed164846f5de8b1f4d5708dbe897a8b048d6bfae010e0e53f71e9cae3bae9f96f67121

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    55ba0282bb33d53d6bcc273d817bd2cb

    SHA1

    18da1a94832a4b46d1774de8e020e0b9fa382dae

    SHA256

    db6fa7de37f7c4d76ca8d3dcf8112aa5958e4ef736028d5ef63f4dc235f9d1a1

    SHA512

    7102cb11974de14da06f10a3a470c5f93b5b4358ce7a6d47eaf31ca28b9c3e52ecfe816b0eaf0703777d0222f68f7539abd7d02e6553bd6516a5a1b415086fa4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3106c0775db99052f75353a08e99824f

    SHA1

    821693904e25a7b12dcc893f117bc62b6461cf58

    SHA256

    4dc29eddd652242574772f6e7fb8656ffe33fb03d8416908fb1f645e93305605

    SHA512

    229c8c67541deb4b77489dc4210f5767c041140c73a20c91088dc9f1db8e12321ba54d536d390d244163414fe920bf6ddddac686adf9dc7a8a5813b21acb66a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c37b83988b38b6e118383346b8a384f

    SHA1

    48ec8cd797165224e89d24f392dc20f15d28c3c4

    SHA256

    8695b551dfc3ba08696459ded4e4d345d0ab538525b533250795b40b867becd9

    SHA512

    ee9449cd4207f67e3c6b03add0c5a21facb6750acf36912595e60c1b99d18205e13c1e0511a38e50361428df231bef291b2c9700afbcb259a056d703564110e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d966e4afb23e05eaaef67a6c56a2108

    SHA1

    469f4106d21f6aac72bcbc6c4394349bf9853453

    SHA256

    67adb5c7e85baa925ba15528e00ab9f800c5d241f835357e0793257a1493268f

    SHA512

    93cbcd07807dd95303386330397dd633ed44ef5165ea5f97bebfc7b1d42759b51b9a4ff89ca7a9e9425c163c3da424c4efbeccee7f3c834b5da46dc8a33f47e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    456c431e1dbe2a592e979b2b0412dac0

    SHA1

    e65f24b88739bae1324fa901d9e6874604c84e66

    SHA256

    0a0bc2d4e7eac34c4c48983afac3fde0cb6abfc9c12f3cb4464a07385564085b

    SHA512

    3849d1ceeebe435846e5b876cc839340b288bbec4ba95bf45ad4c62e9aef8789a55f635488f40193d43b74b1bcf4a4f6c8287edef181ab5afc2f1a13fce12d67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    90e7b03cfcae1cd7224975fd5468a6cc

    SHA1

    d341113e2cb08df8d1877a570c2f99a3cd30b816

    SHA256

    4aea7b78315135fb4649e8f9fe3c3e68c72495ef208041662aaba8674537b03c

    SHA512

    41e011bfdeba0bf7b3c2f3e50b6d86d4186cb4d611525ef6f70d18463d3af230dce56edbfaa86efc2d7f5f49217153ad236edbbb52c2478c28c86d6c3cbb0704

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7fbe4d5892c637173a5f81e42f8c4f82

    SHA1

    bbf2341150428ebc90a6d1ad4350f0c4c31e81f8

    SHA256

    ecd846cb97dd1e5f121ffabb0f15bafb13f9393d320838338a086ed41ea0d8fd

    SHA512

    eba4250f84912ac4a510e6dcbb72a3c34fe97329fa0429dffe4e556186694615f2bb69adc85cbe1c9256daa2981683d129313efea58f9bc1de6403e29ba0b421

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2bd6350f8277fabfe53331ba2505458c

    SHA1

    0af0f0027690a7450424923de458d28e7050cb42

    SHA256

    a58f5d350f4570ae0a0a4486a98946c0d17760ce168c9c98c6b1800d7d1500b1

    SHA512

    170f680058e1c2fd2d397c95ec65ef605d8d3de97ce5b78339485eb649fdf46261110c8e0fb3d87c9b3032875f3232218841d66872ec6c1624fec8447d75323a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b14b1f7a3f9d283ffcfc1bb068d788dc

    SHA1

    9984575815f3d4c347948bdbd1e131b9113a4667

    SHA256

    a30737ab884e333f13d4418c94893c015f75ef8cc13f97e3afcd0bf60350b4e4

    SHA512

    7ba6b82ed034f1e67da7baf79ada7383800733bc2c9c059a3f353d41ba1fd971a3363aa7c755919b2e11e7dfebd050cb9626b92cbaf020372db1e9170d88a14d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f97f2238d3fce38116f8865b441e4e32

    SHA1

    d1385bbd9a6fa985d436aa9df5d889661f7e287c

    SHA256

    3224b05bac3e7cab5318a92eb1ff27d2c7ce8da8b1a825594886ea52c5e3aca3

    SHA512

    58c8e4ebfd29eca9a5fd9602dbd41c1c75f2eab4d9bd19c2df57561e84e35f333bfa83c01f62fc2ccf610afd7805be333269be02595f44e18c2a703f455477d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    71877bd76efa0f396a1b512ba5bd09b5

    SHA1

    f7b643daf53a097789388df09c155f66c68a2f73

    SHA256

    8d4a13a7d8d3434f94dbec84e77d99b16cc8106aba2b4dbe0b9e4316aab7b5a7

    SHA512

    9354f659dbe26c7ba4d4eb9863e2161c5cae6a189c8d6f62f003994584389086f9efe1fbfb39714117e875a82273eeb73ebdb244fbd4c97e06b9bef8b189a27d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc318e0ead4c5b38611033de83e4faf8

    SHA1

    8d1979b213b8910c7476dac5dbd4862a1708c6bd

    SHA256

    3315f85c221f2664d3151c6018a03c83490c044ee64ff1be6fab19c79bdc2f0f

    SHA512

    9ae9cfc07ce8c9f254f7eba868ed640d60d94051152d2cf6e82730931a3d13c7a98e3ce1293b2f34f7f3cf13d40897e662cc1d4263786f025d5f321c9fd10060

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    644b7e6913877d77c72396637eeff5d6

    SHA1

    15182f9713d52123838bb2c01e14bc125f400a34

    SHA256

    a1b44a8dbc0d83aa7c87d5f1a7322111b63894b8f5df97f3d3dc47d954fbd396

    SHA512

    bd64fdd2e885135d6c163baa0a65551a68ef158ac91186d46ca26a952e301ae6fa0c1e3e7371354f3716140cd9c7d231863c820563673a52f912e5fccc844ee4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5a64bbcb5cfdc13cc0c0fee8d054d94

    SHA1

    18b9c292e8c9d65e2a485ccc44ceb669e34234cb

    SHA256

    823a4eac4cb8270b204d793d280fcc5f594d06228b4181f1874c81b74c12f80c

    SHA512

    08d22a1f00651f0f78cc302aa47c90167ea0c6e2137ed9b8d422a398e82c950c2fd03b2bb41be2108855b5d82e04ab9fe9f7ef0660f83c709bc069137be5de0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e35f2cc8fed47b158bc717851ac3219

    SHA1

    f146e3bb47d99748b9841257c83485f92a0a2136

    SHA256

    86d6404a1911753c62b39778815cca13280fb53d079eb0078016ae1f49f0a93e

    SHA512

    f5a2f54e8bc01f450cceafcb510c925654b73bc7216e5fbc55ab5d9d8602cda4028ab28c626e025ebf0c08023e917813f713062fb5e3308f5f464e4e00437e95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    284c7f5e3049256229f3dd47068993be

    SHA1

    7140f618a75698a9c7396fc4228ad4bf3d204797

    SHA256

    4928bbab68e034686f90a18674b15da58070cda90b731702fdd6d7818a29ab9f

    SHA512

    5e2d07b308fea0a5d9140b9916dec667aa15d5826688834805c858c2717a1d3fcdec9bbeffb3d23587a8ea06fa532b0e16f53d5c77aaf3d2f9fb9792dbfe4a42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    82d1ddc6d95b397399c7de4efb9bfc1e

    SHA1

    17e34de812393b30261e8039a1e29be08d759465

    SHA256

    062386f0747aeb93bf057ce8a37172fccec1923b698b4274c133f0af55bb4697

    SHA512

    fcdf6091852cf56e5d0ce759df8d09ba48cec6f4cce589ef936c4568bafbd115b81463ed4853234b705de90f5f5e50cbf9c1a93f14542089b0344dfdcac8cf12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c89601a4232f7101d4b02c8932005e27

    SHA1

    f01a5dede427bcb4e78c24f4defd983953f25dc7

    SHA256

    0470a1dafcc008322cd060a93a1276b8cbbb5a94a2682e730c5808faaaceebfe

    SHA512

    71b2d992800bcabb2d0cf58f7f6ac70f88ed45a439d259c7a90004a9bd9cb58796f34425fe6f4f0df65750f6c174712657d593e86396b7d83c1397601ec263ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb98a545727e3e7da3ea3fc4610d57c7

    SHA1

    7dd3e89031942b1571969d93208ddaa349e926a2

    SHA256

    866fca5f6fb3ddfc1f5704c5889af8b9b5b4ae167c1c00d6492ff7e75f3db2df

    SHA512

    95f934d46b4698b389160ec4039d61a946f277b8ac64831ae97403f46f30760a0c143d8f10fc630635a02c7b8a93bdf3ad6d7a466525876d83cf357dee1c8007

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e6ecb240766298fd76ce188e7c82e147

    SHA1

    01ac4023f32b2e1894ed0c4f39f2935c804a68f9

    SHA256

    d1f8ee13674c9441cfb8c2b72fc59660cdbe0a4693b77ba0e7d4b15685a02666

    SHA512

    553dcb17ff508ca2a54b211cb4f9a69eb47390b68675cebac7de8cc3b0753b71e8812ea2a456b0b95b08927e638f9f949a4549362763eaa4c36358f9690f2f5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b5a9d3d33486d249a5fcaf7046e3c4f8

    SHA1

    a14c5713abf40a081efbfbf8db39260cd944abeb

    SHA256

    4be8f3be09d4458fa842aa19069db001d846488f4173ad6becc9fe0b904f6f2e

    SHA512

    72b97f99fefb6bbb9d1d9b26c35512f0bfa7e6819636d35b94b27d617fb1bbb73ae31d6736d1bcfa0e397131e67515dad9bd9bc26e56964c0c82ec053caf3b8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aed1172950188c70a9a81342ec91c339

    SHA1

    6dc86f9040877a36e046e00e311461f2854ef266

    SHA256

    d61ebe5d043e133a47bac3b277f43690f77e2a41a157fad103bfa396b2f4a6f3

    SHA512

    deb7da94e52f1c67d31da685f017ec1043bc8a186bf5f1167934b07500c10af2c8883eee30f2d42a3d7d34094d9a157fb6fdffdaaea23c92b4e677ba9796ba9f

  • C:\Users\Admin\AppData\Local\Temp\Cab82C7.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar83F5.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b