Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2024, 06:05

General

  • Target

    eab999a4c208bcf35befe43863a928ee_JaffaCakes118.html

  • Size

    109KB

  • MD5

    eab999a4c208bcf35befe43863a928ee

  • SHA1

    a7d498025823de3d56e6ef60d175a8d93781a872

  • SHA256

    3cb62de2cd1b2e1c4b09e1d8418ade3e75ea834676ee5c681ec69c244b2838e1

  • SHA512

    66038159b79d23913aba36856f2509306f6385c74393960817eed6c6dbebb24bb04d67a9fd1177fb8f6a68c50659a8c1d16fc35ef73680b38cf97cb5dc574f6c

  • SSDEEP

    1536:/WtSW9k9IlgvfUHsJhVjls7ZIiBNbvwTPnnHx9tJWgThPXHX2OwJ:/WAWdA1jlCZIiPvUnHxXQgThfGOwJ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\eab999a4c208bcf35befe43863a928ee_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1860
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1860 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2692

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    ba9164eb7fff24bb8b02834a1ebe84ab

    SHA1

    d96530a6510fbf8da500a0b5edb4fa5366931460

    SHA256

    23aaaaf54e62dddcca4a36855a83dc28a070c814f87e251ae0b68e36f1a555c1

    SHA512

    ecbce18b9d029f6595165bbc1825c2709e689bc96e73a8fe2d20bcdf85813259ac138737679f17c3df67b8f155106c5c0655c0ed7daeb12030081c133cae2096

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\DDE8B1B7E253A9758EC380BD648952AF_5F8ABD199E1CF2EB9B30F8FD50D3DB0D

    Filesize

    472B

    MD5

    7afb1896ed24b625dd12ea2f58692cb5

    SHA1

    1c3fa254ec1e3c5f3daab12be4f6e62cc9a740e0

    SHA256

    4788a0f8308154bff0615f45a1ebb2f2ff2e3f7e1ca6eb3a15271f99fa4687ad

    SHA512

    9563cde26fbc6c48241e3a103f2641e5327564763c3eb088dc3882494a18507bb8eb18469c2050e280d1a889ce1fc79b51f7c5faf2df62caedc11398206c6aa8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\DDE8B1B7E253A9758EC380BD648952AF_F968CA97A68F4E6D5C104EC7FE3DFDEA

    Filesize

    471B

    MD5

    a8b199d725e204fa9db45cf198e23b91

    SHA1

    cfdb28ca6c3d4bf5873016fdc265d4d54ddbd086

    SHA256

    f1eddef6988eb7ef72df5c71df7e57aaf2e9097a8db30479c97c0417cde415e2

    SHA512

    b6edffbb3b072034f804845e9c373ade96b8ec6c42ac9ef819c68dbd2840f2a8728dda9710c98d56a4b59f9736342c46edcf1c646525bee6eb400a545d8224ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    ba3962272c742395433e16ba4649c8a6

    SHA1

    e5b336b69b94b1677477a8df6b5fc4ba74979e3b

    SHA256

    2e480a6fdc290a69d46aa1c1dc75b8dcd61e7c4f885ac38af9d71fb4a6eaf22c

    SHA512

    eea367cc2c90e859bf3d105cb01a6e5495bf2b9829c5fe4f903517fd8063add188c603b64c301c0fb7ea2062848ead0abfa87c28857bfd8985fe3e8d1df92236

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    399ca98d23cf2f4de353e40c49201ef3

    SHA1

    b3fabfc1db176061ce4d62fb5b0d4a40fc961463

    SHA256

    2f005c914e7a90806ff7345b0ae0dd0385c3502086878cdef865c199e974a447

    SHA512

    3be5364aa217c1451dfe8d5d72659152d6ea9753e9aa7b9c6a83d8a12628797b38670ffc99f316b8e955fb63c1e73cb4c4e30222b5c09c65ea30e5d1edd5116c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    ad9b4c8a14da21184945048c64f0e4cc

    SHA1

    12d042d0e0baad1ab65f0a2e826624cf8cd89b6e

    SHA256

    305d1d301020609c6e86f872ec5e37555b051d6b926d1dfb5da7443ffe274e6e

    SHA512

    34e1777703eb72de3e5f44404bc4657455cf8feedc38e969803fca58fabdf40e723916647e85ebb27f6a4e50fb78e14c6365cc671a21bbb103a35dd80bb5bcc1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    0c87829a4a125c599410d0db97cbe0a6

    SHA1

    d66bd2f849de8e93d3b3626257c2cd5241f22a19

    SHA256

    a3ac84d2fd7bbc4bcc7d5f2c8169f81eac5dabd1ddb1c9bbbfc9d789f2be5735

    SHA512

    c0334f22a57d82e2856aa34f187ed2a9b30b4dd033bffff3fc4e56a437c4c4deb283c46b7692acedeac83465245081301b7dedebd832aeb3a9b8385d4daa5ce2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    655c7f9e4ccd0058c9211130232e4c8b

    SHA1

    e6b4ae4d09875c89152305443351f0bef88c5a68

    SHA256

    f7746accc9bd7bffcbe1a74118018f2b35b07eb3dd7d2f7aa90542a4327f46eb

    SHA512

    1b7d55dbe04451da0aea1981dcb46dbe38629866dde7d4965d84a11ceb169d56529597a3b505f358c1c8256ebcfdca9375e7246a2de2de767e4aa5ab2b064e0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    2d3bf2a4449b2e2502c1f33870c6b528

    SHA1

    4cbd81867645d0421d45f5f36da72027d8273c08

    SHA256

    e30424daa286e05efbb004209fe81fe1b76d45085bd38b827857962505a4e8fd

    SHA512

    0d5d60804d08db0c17c8204392b88e10bf6a30d36cf54b215942c9c5346a8be6653217c3d4b71e99bfc9ad0d091160b7ae1da8006a30a150e139fbb54d1a83f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c0b69d8e60e9a117a505087973104d2

    SHA1

    bcfd5f965722232ef840408da3c99d5c0634e250

    SHA256

    484e938855ac191a89f8acf899c83acb4a7d2471086e03207e2a0755ff7ad0f5

    SHA512

    5eafa1ce9cf41b8ddd4d9cfe030007087b9ff6b224d64d514c3fec3c280f42b61d2d9d70bb7750c8c19fdb2d53884e3f265d336d1d09eb74a01d482dbf956dff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf99aaf4e99525fbb3f5ef73150457c5

    SHA1

    92511ca2736f6acb9d08ff771b67ed0797851f9c

    SHA256

    875ea0a3d2ed24b9031e701c16874b14e29b2b858ac972651df4a78b0e4e1c0f

    SHA512

    a2c0913fc0273b599c4a9b0608a883c3e0ee706c81a84926d5cb50aed1b4677b6656ce8c526f815300872f6b90b0a0d658aab2e66ad972d6c56f3fb02ccb4ecc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    949702aa13aacc83643718e4cfb3c7ac

    SHA1

    50caf6af69d2ce68d259e20bd4ddaf229cf45165

    SHA256

    17822238872eba271bb308955dee9424c6a9935465adec62872da4a7b4587aa5

    SHA512

    70d8eea3930462aefa3b049de6477d61ec1e4695e1b7167ac63139b6a958824c9a480efc64b820f599f57f40a5b9e42265a770d3cc927ab90c3b8c26a91f873c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4472f6396517a8593427faad5f5438b4

    SHA1

    e0b5416cd04037c52e1201744cdfebebc6a4aab8

    SHA256

    436914995bd00a2ae277afe0783a4ec9a89b448ea667022aae53ddcd028be7cd

    SHA512

    af81b791f18b7dd9a13a0929ea0fafad0101c000586e4e5e74f90508c8080e1cede18d4f310a7b2f7ce6d7b6fab3314b49f9689208d8cedb4100f0f2694bce55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc27400c9a9848028825aba7f7bee287

    SHA1

    0d609d708039a437f168e2d9bb583a1c27c45549

    SHA256

    ccb5c996698de694531b59da3350a63a3f6eedca3c69b113e39d3e38f3b54bad

    SHA512

    ab66c4d06d20ba1b90ac97e453c38209b608e4777d85f575f66ec19df249a51da810294bca1abf43d973aec1bc24b25efe37cce28493cca9272a852e162b2134

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    36358678d78c88eeee5efd33beafa447

    SHA1

    f1ef6a990dc0a2fd3caad419ebd0d706ddaa017a

    SHA256

    04be26ef810e64790b50f9f76e5b635a5b177de0bc710e1ea0cc3a00f112dcca

    SHA512

    c6e96f6e39c76094903c00d92499d2b45848a3cbbec0881d07317c322879c3d57fd224c6bfbe6476cd250b81d3e60c1ba53f085f669712cf4df758aa681e4e1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    88f2c21f72739d030d71337e0e11b25f

    SHA1

    ae510aba72d2da2ca3ce9d35b3d7fd300e8b9256

    SHA256

    48ecddcf0e0a45805ba81661a079150152ace09cb5f2f5f6d1f52a258a53c26c

    SHA512

    95dba62a017561fad2210bd13ea75cc35bc7f7af36b618f618a23d61602e7aa86a92be917db2ccae302a68365f2744ceeadc131455830b2caf48237940d1f957

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c75db06fe6b85948c8447352d35f473d

    SHA1

    e536d91d6055874563bb41e7ca2f1fc469052ead

    SHA256

    13eb03fdc446254d85fef67069122f5063801320009f2f612b494a5782d20072

    SHA512

    2d803c89c400661dc9cac63c4f51b5630fa6011b194c8613495e23c8f02c9cb605778e04bfa058dc390b357d797cf04762693330481566f00f23860c7a7ec5c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f006e143fbea731975f0a4b9f685ec78

    SHA1

    1b84dc7228c02c0955d8808ebc9299c4880f133b

    SHA256

    41c4534739393bb5c0daf79089e5bff2a077a0d1b24f0b4d02f6af8eccab2e5d

    SHA512

    5f6eb1638eae1f4cbb3e19f9275d4c11eacaf2a8eaacce8c1ec7caa5efff3878205ff10b3d6feef5d71d9956b9c3eecea4ef13695c83fb6346ebce736961108c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c814a83da61789d664eb86c73646ca15

    SHA1

    0d08011fef5f7003cbdbc5e19abb4d3a02fe7c05

    SHA256

    c332f7f962bbaadb7952626ccc8bceaac9a8467e8dfe08abfed61a5c7d84728f

    SHA512

    d4c7eae8a26ea85df433ccb88d0249bd4232e2b596bc8d52e1d95c69b30565b3608f64914a831e6c74406c0366bc78486f586e1638cff9cdc89a236d55ef7062

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e5885a26b8511d6c6cbabb9715882bc

    SHA1

    dae156c01eec4bb8635e2dea79a899dcfa055e92

    SHA256

    8dff82710917abe66d7701825d278d6efafab79306c2b100f472ff1da4046e36

    SHA512

    d1e08a91ced63b4d3be823a1fd65b1d0e5244d3b0e0b42c35a5f1fce23b73b8915a2f21ad47c09faa6f439010f5fd0efc30df3a36c267884041b79f8ec41b9cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    545072c72498af81d3b4d370c1af4ef9

    SHA1

    3e748d0b4673dae767f20db52e1929931e31291d

    SHA256

    55d12488f853f5751367fec3f923e6a94e790b21f787fc0eeed03f7206b04531

    SHA512

    1299ccc554d0934d4420afef0338ed45b30578b34de31b626f44673fd05a6ae112ca8d883eef0f1deebbe5aa7d6e15f03c638a073fea831f09dd920263b23456

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8f8d6f697c180c1e5f3145030ea95d1a

    SHA1

    d734f053d641acd36fef06ccd2faa95169f3bab7

    SHA256

    7d97048818bae1c8b9daac0a3bbdc21ce9db059870d970b8f3db5b71f6039ca5

    SHA512

    570a11cc322c8b148328696ef487b84210486dfdd46cc0a3ce6a96dd6f0988316e5cd6511c0f5135e22099cc584291011f127d19ec06e722dfd03fd2b607d898

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b37fe47e3e77b2b50e2a78cb7b3571df

    SHA1

    69bf3300d93e22fa140a7e428d22ff1e9f08b715

    SHA256

    f712efc4d47a1765bf9a1ceb199d7882593932c79aa24a8e50a254becfc1d661

    SHA512

    5f85948938274e8d41ff80779478f1292fc0ff4a7e406b2f8d46d639f8b37511f34ec04632e90b0a6a5f2d837767489884884a1efefc64c2f34ed4a1f0bdd58c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    059671abadf83c46a79c59cb02be176b

    SHA1

    2ba3a736874fb5ca193a32597adb6c377bf5b42e

    SHA256

    e0fed67f4a3c81e977a5370358d4125f4069c613fce0b6464b613220b6af20c5

    SHA512

    f553a3935cd7e84d0d3cd1ddc60644274225b6cb4ffa439b8d593393a0882a65367334d466ebe037ff5b5be225db6c751674180c8799a6cf4cb1d15d5894f3b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    36edb1a23ac6fdb2f4aa73049419f72f

    SHA1

    dab46afa03c979c11e8a1547196ea2117254eeb2

    SHA256

    33cda25c7d9f38f2fefcb8db3d4d3a56d9a4db0208f6beb1d626d994f4d3c641

    SHA512

    f9786bb7304e02fec221b54f5b506dd6592257bff65c84904134f252171409462662f057d8a01570e6c437882d737b4508499166f1cc5f26355bbfe4ce94c2f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce65f96026676f176dde453bad55abbc

    SHA1

    1bcb830f599dc12380422aa21838147601f3aa6b

    SHA256

    5fdcf9d4b3b91ef3db5e838694a8c726b55f4e56fc6b40faf6a2fd10f48a6d49

    SHA512

    74c0d48a820528c64f88afc4a107c2d293e8534e525e80460c9c00b3fab29eefc8eefa8296b7d9d9fcda0b7cd92921216416c55ca5cdb0d939ce33b40fce6244

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f1ebbf8e953a496ad423d5e4c992b1e4

    SHA1

    d90fcfebdf98f42858223e8b6551324d6ce73384

    SHA256

    f9133d59683258b1fb460893d97f5000682c96cab85f15e10ecad75d1c51dfd3

    SHA512

    ff3344ba7340489a0e133d3dff0cf2b9eadd21df453fc3df9ca2f61bfa1acf8677f7ac45c75de3f9955a11597c5a7ca77d5e5fd0c98779a4f859867f04dc1b2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2422a8406882f5c5e5e7f822c92055b

    SHA1

    a1b05df012f61172ff254f2f2900d2650e280ead

    SHA256

    f5cfd40d2e585c548e361de572197d506775c4001dafb1ac151f66ef769fb71b

    SHA512

    bd241eb37649490eaf961a1322e4028aa5899a3936e6ca69ed4fefbed8075325f474464ee500fed37cf83b4cc51447625803f768f1846c752eeb0d7000b2f9c7

  • C:\Users\Admin\AppData\Local\Temp\Cab73CB.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar73CD.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b