Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    130s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2024, 05:35

General

  • Target

    eaae703b30684999e41d4ae80a8e465f_JaffaCakes118.html

  • Size

    92KB

  • MD5

    eaae703b30684999e41d4ae80a8e465f

  • SHA1

    69626a0531be3ea95ba6001d947e7d318bc09272

  • SHA256

    ffb2e059505c8b6dcfe58ee1fb09033c9d018252b6c9a64c59e296221dfe7235

  • SHA512

    9d2e98f611aa1e2264812200f7fbb642d9c5631403a440624a8cdbcc55a7569257456d16f983824d6a57dc7e305a2088271511e229cea9d1fe83ff743c3ce1f1

  • SSDEEP

    1536:CKWV/bbZ0P1YVjMnjxgJZRDvLzeB+yiLgX:gF0P1YxMdgMkyiLgX

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 26 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\eaae703b30684999e41d4ae80a8e465f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1976
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1976 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2348

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

    Filesize

    1KB

    MD5

    55540a230bdab55187a841cfe1aa1545

    SHA1

    363e4734f757bdeb89868efe94907774a327695e

    SHA256

    d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

    SHA512

    c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    ba9164eb7fff24bb8b02834a1ebe84ab

    SHA1

    d96530a6510fbf8da500a0b5edb4fa5366931460

    SHA256

    23aaaaf54e62dddcca4a36855a83dc28a070c814f87e251ae0b68e36f1a555c1

    SHA512

    ecbce18b9d029f6595165bbc1825c2709e689bc96e73a8fe2d20bcdf85813259ac138737679f17c3df67b8f155106c5c0655c0ed7daeb12030081c133cae2096

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\DDE8B1B7E253A9758EC380BD648952AF_5F8ABD199E1CF2EB9B30F8FD50D3DB0D

    Filesize

    472B

    MD5

    7afb1896ed24b625dd12ea2f58692cb5

    SHA1

    1c3fa254ec1e3c5f3daab12be4f6e62cc9a740e0

    SHA256

    4788a0f8308154bff0615f45a1ebb2f2ff2e3f7e1ca6eb3a15271f99fa4687ad

    SHA512

    9563cde26fbc6c48241e3a103f2641e5327564763c3eb088dc3882494a18507bb8eb18469c2050e280d1a889ce1fc79b51f7c5faf2df62caedc11398206c6aa8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\DDE8B1B7E253A9758EC380BD648952AF_F968CA97A68F4E6D5C104EC7FE3DFDEA

    Filesize

    471B

    MD5

    a8b199d725e204fa9db45cf198e23b91

    SHA1

    cfdb28ca6c3d4bf5873016fdc265d4d54ddbd086

    SHA256

    f1eddef6988eb7ef72df5c71df7e57aaf2e9097a8db30479c97c0417cde415e2

    SHA512

    b6edffbb3b072034f804845e9c373ade96b8ec6c42ac9ef819c68dbd2840f2a8728dda9710c98d56a4b59f9736342c46edcf1c646525bee6eb400a545d8224ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    9a7f332dbc93725b71ebff5827ed2311

    SHA1

    c1a0c089e685016220a44e7f86a77cc8a9cc6de6

    SHA256

    e5232abc79f5d8cdff5bde2c8cb8b0752a4ca8ebd288b6f829a7a8aa1826206d

    SHA512

    8a7a7fb24634c4021112ed507f710694632563b8755da10a428befc6bccdd383f96d35a48c96a2b0cb3de65e4ab4b6da37ff0ccbae618eb05f66013ea0f9644b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

    Filesize

    230B

    MD5

    b3ca8c941a87899a3fe24b59e9d68298

    SHA1

    ad01328f0db2d88d8283dd141ab9926721af6df9

    SHA256

    6f39bfd7e6d06669187cad5ed76132fbcbcb16bfb2ee2ba8c397997f8b98914e

    SHA512

    c8ba54fdb294c4907310be12a7c221fd0857a3b85d427cadc7793d1068e012001e7b5ac8153b9137cee7695ba3b3537b24d6c7b95f95daf93b0a8b32d6cb7dc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    dc7cdafd80da9ee4c617f2eecc775c33

    SHA1

    bf2adc6dbecdbe841ca6709a664feaa91d112da6

    SHA256

    72fdb4fe02a4fd45679c094175269d11405c14efb60e5af2b893ce4d058f185b

    SHA512

    41ec65c2b676b16487903aeaf9be7956a1b8a5408f3ce67aeac565588a0e78af18bccf54fe4f717054c48a1df656c7deaf67ad1d9b32dea7fd4534ca087e81b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d83569531c7a749f98d068d98764181

    SHA1

    35adc3f82112175e39e661358022605b3560fa7d

    SHA256

    e2b89a0854b406f802dc7adce69c40f1279ad1bd07a492f81512dc4903ff63ee

    SHA512

    255be8b6c92a0ee5a268374f44b901ceb05762013dc306f8b9bba1b4c9341c26a7cdbcd9e31c686be2bf5742a931365d4c30df2d8f3e24fc9c4ee9d8cc21c9b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    18552527407dc053a3783a3679b5fbff

    SHA1

    b2a8a39d2f8caa4b61f6bed2d7247bc6ed7253bf

    SHA256

    3adceeef77a83a882a53c3f6960dfd27bbde6bc94daf281bea1616f09ccb9bc1

    SHA512

    97456596d16543782347ba059bcfc1f3e3999d01b66342d55d9e209a6f142338aefefb2081786de98379884b61accdf3830a2321d06449259ef986fd2143d8b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2d9466d7f89a70a84f8e45bff86c43a

    SHA1

    a2bdd42f4b8b5b47028e24821b6750981485f49d

    SHA256

    b515692093af177a43ec9faff6c0f9f7eb3f3b7c950b231076595fce6853a21e

    SHA512

    f39be386d7c24d0a6c409a92b07a2006a9b882bb1610ebb8827887377918d92cac2af918af4a3583d16a8a3fd9cf82df6405d66fa887103645b8f6449899cde8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c320e69c90825704160eacbb7c44d99d

    SHA1

    b7ca250a7790aa877483c0f5335780d498f3f0ec

    SHA256

    65a0e0298e7128f3cca4c6ce1f5c596eb5bd7df5ca12f80305ef70a5c1f62d64

    SHA512

    f404c55ccdaae69f42f7c647dbab9674389f92b676af23403e6eb040d56c25f43ad8df9d09b30b2496d073fdb9607c545ddc1b3b06aa74edcfb97eed72c0d4cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aaeb65b443e7298e80e23a6a41ea298a

    SHA1

    2c18c53af67992dc420ac7807e48f25116d95c49

    SHA256

    55e6d2978da742874fac605d6c0053968856fc722a14f9c308bce41ebe241a71

    SHA512

    51f5d2396995346a21afee6e6bf15941e3707f6f5bda792d9af76028dbe16c122684eef01b718e7a89258cbc5d61f120181264823862a25430fbbd9b0312cd08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b89eabbaf237712557e48216d2aa31a8

    SHA1

    671b4da1bca36cab96d0ef9c4b55f0c8ae46a964

    SHA256

    b0dc9559e00a572fdb53ce73f6da4ec9e4d20cad3819fd259b59daf83ad77c41

    SHA512

    fbaea8d061056fa9cf0162207ebb18f555a348b748b17467d99b10f48b647a6ef5ac8eb7ffd9246cb19ced14d3646c03dc6d591f85b4202b0272175e754e79fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    53d15ccc5a3a9534b29a208a0c12bb12

    SHA1

    92aa73045449497517fc8b40adc66ae9b1efd7a0

    SHA256

    f5a58bed6d53efacc77534f61b2fb6f47c6e50c4d0d7bc0e5c3625230f5535fc

    SHA512

    319da43f06bdb070339e02473b208fdc6d6759fc088de554c5140247c3ff1938675b9774e50abd74e420d759473192ab3d3682de6b9e11574386d069296ed707

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ee1b2a5a44f29b54a3cb2498c22daef

    SHA1

    ff6653987513a36cc7d7202323482aeb98674698

    SHA256

    139100597b97ed2ef36880595407f40b4c6bd5ca4c9b05aeb5d0c59869e7d95a

    SHA512

    58808ba024b792b5469bae080f3b5566f50fb3def2a7b22c52fc050b6dc5ffd6bb160b8597fb7be80fc28a5af0f53c4b5f025bfa66dfd6ea75ee54fbaf2b3315

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c47574a372a3b06f4360c4bf5b98516

    SHA1

    70ed7f78880377812573b7d60b62c4b9618fb408

    SHA256

    3e908c3e4c6b254a2b939f1ed6e19e077010eceb615b7d2f4383579129addfeb

    SHA512

    bafd6461139a56b6c105fb439c0e0d2541468b4e73da27d0597a7acf201e402f767c5c7c97cf79ad618229c94c84c4f8ac89a1d632c26d8eb5a887fae8baca87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43e89237cd358450e611c4b99a6da2ca

    SHA1

    4af67baf5164ab61152d08e3b626e155b43941bd

    SHA256

    6113654fff79dd1d8ae6d2c3a45136b0e993861a8f692b301e07cb229e9ae84e

    SHA512

    dc753d60406c38e1845bc543a4c2593436d8320b5b64ca7f6555b46a5b79df0575aa1ef1ae556c3dca0fa5fe29c5b9f27ddbb48cd173eb5ac1d9571f639c8168

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    07803af740fc2ec1f865dea21738108f

    SHA1

    f39e9a98f9f44b4fa695da2c08921b70add72f27

    SHA256

    2fbfef785aa53050ef489de062d3d07ddd433059ce8d5cdece03feee06e46124

    SHA512

    4b565fb7340016126657d3e6b9750a2714aaf58bca322e55179ed5df9d2a30328b0235f367adca975773c7084f1cd4101b89c605d434c7d9639d5545acb4e08c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    93a8971704d8c6bac4886f823b005b34

    SHA1

    1a590a3a17a0be1c74d6ed41943c7bb4ba6d2850

    SHA256

    5519dd48fbc5bb6f34af2379e9691091f5104baaf2b96c26e95b8696b8122f9b

    SHA512

    20c736e964ae3f735258025ca21eeb82c2e6afb664fe0c1fdf0aaf484ca6f169377e3b4d69c94d562ec22c60ef60013347d1c78f047f188c3bbc994f32606b4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    629990a1842d38bd10cf785b06f5a3e6

    SHA1

    fe8da3151f6106cf9d11491b75030e5c98d20ffc

    SHA256

    7969c777fa317f20823a6e5ba4635a139504bc7898aa2f6dfadbb541d83f02b7

    SHA512

    517d38ff86f072ca09f1c947cb26d792b147c1249531770e5ad9a94f72eb7b0aa56f6e071b858ad68ef9dd74bd3e48788b210214eaf2bdee2cd4a911daa98756

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    97b12b754b56dbc5fe9aa43a2b91baf5

    SHA1

    5b7e9857f16277f3d70853211af9b0a1726c99f7

    SHA256

    066baaad68e34007b40ea67ff0e689251c971d90933e63a5707a0d60fe015684

    SHA512

    13c0136fc78f9d510be22f749a58c281008ae253c1503e0fed8bdcc175f6104e3d1452a0762ed3e970102ca1cb9882411da455144bdb998c6c166081b83126c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    800c93f4c6cb762de404c044b17c00bc

    SHA1

    45e46ea9b72992f1e50e57f2a111b509fb32b5be

    SHA256

    834e21be7d402b732aefbc39da581a04db9c5cdfdb0015335ab9678a70c9fd03

    SHA512

    472f934e7132643f530e38ff5c62facce9d64924af3bb23bb1c9aa5ea4af29824a95a158fbe55c108793dc4f09eccacd7ec7fb58cf29b7ae66c2e339d57279bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dcdd3af50b6911c08f69274ebd803c72

    SHA1

    535f1afcdd3cdc646e85143dd3d29b895f0fceb6

    SHA256

    df0e472943bcd22b15dc37ad25be30fce3720709017c9f0fc6cf4c7fc038d1fc

    SHA512

    1410a1d86474635753f4e33a304f6756d6224871c8649216840690d4cf1431f8322a1bfe661db3924b7774eb606d608ddc05dffe6c230b1a80ffd9753ef13fe1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e6dc156a2caad3242de9fe3536284e72

    SHA1

    21d3311aaf94d033c88e061a6651abb0b62d55f2

    SHA256

    089bdcd51688f40e1344b96dea12a628900d25b75d9599506633cfef96f6b5c3

    SHA512

    805367e6497f94062b8b9babfb64a948ccb883317c879783fd1f1744b4b58b3c6dd001771e9826ca43cda6902e73b99d5f1ba00d8f44a986824bbfd57ea8832e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\DDE8B1B7E253A9758EC380BD648952AF_5F8ABD199E1CF2EB9B30F8FD50D3DB0D

    Filesize

    402B

    MD5

    cd08366240ffe770529e20c295b3a503

    SHA1

    8f6e828ef36cf40b102f231d718a17ca49eb2e45

    SHA256

    2a51c9469314f3ed21d63fd28a9b92b6652dfe667d5731ccd3780b68fa8e25ea

    SHA512

    9fb7c9ec3581a2ab8a9fb650cc6aafd1a5bb0e06aa2584ff112b8c71b8773f53f153988b6bf31eba77cccd183031f101ec3ca443c63edfe3e9dbd6cf5f05991a

  • C:\Users\Admin\AppData\Local\Temp\CabB35A.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarB418.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b