Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2024, 13:17

General

  • Target

    eb6960c4b05964f4aca27ce033e2c982_JaffaCakes118.html

  • Size

    122KB

  • MD5

    eb6960c4b05964f4aca27ce033e2c982

  • SHA1

    51f331ec36eb0daf98d303d18c5f445d48bba0b7

  • SHA256

    604d90f1da1fac46339a1492d7cf6172c155d6e4bade08a10a0e8f5ad9eb1c32

  • SHA512

    dccf76f2f427d49e9e1f567336768ccb967d316debe3010375db0f0f7240dc9d8a6026cec39f65cd228a622b17ea796696930c6104687d4cb9c544843844401c

  • SSDEEP

    1536:e/EsntkCJO3w+cI8uPIMKnxuV7TrQ5zRlFW3Ee:jsm33RcBsJTre8n

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\eb6960c4b05964f4aca27ce033e2c982_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2072
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2072 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2736

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a85e208460fb6cd21d7aadc70b74e5b

    SHA1

    552124048f9f01043aea566aae2cb5801858cf7b

    SHA256

    21c4260939bf93a58ec63e39dff8ac36eddb0dd6df470bbd5aa66262fcdf3e84

    SHA512

    2625d92a0cf5f711d7dad2e35c50ba63dc1225c544960ea0c46e6e52f6057ead60c05422b2af9b0a0364ca0cf2d96a9a84249b480324bbe37109fd5fafdbc62d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7879d6d926ffe671aa6f731981e4153d

    SHA1

    3cf11431d9c1620a6400de1fae512b7020e8177f

    SHA256

    0ed6925b0fd4a51e0ebd2d1a01e6538062bd1d6d95d64d79a64286a1506e8236

    SHA512

    b24ad818597ad955955b40654173306c4c815bf294b6db5b5e859e1b73faeb56be4a22f7edcb488d58bf60192863f5486f55f244d28ee3c033c99d1126b8b1b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    281fc2c0bedde01ae6b03a748308ffb2

    SHA1

    b72c0f24c03ea9d4a16fe187e863659a57c92cb6

    SHA256

    f15f14283a47e1a4476b2e2ff4fa297b2a193cc78a6faf66fa5bed1a1ed98f6b

    SHA512

    47424741d5c4d67381d5bbe28c12d3510fdb625cd318e2fe74348cd15be19d6f192f17a39b4a70d0067a9834d6c2f67dd3bd0d627696081b444bbffdc9863fd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e5193dbf87c4f4d6619a86fa628cec6

    SHA1

    7008a39f16a9e1d15b19813f49a13d4cb8e6fd37

    SHA256

    3298f4996f1a1d2efd8664d712e14f7e64064b48258fba9b4c00ea210ce18faa

    SHA512

    f293356afff7a5840f0cfe093e21f69f7502225e3f3f1d980d9509530e14ad0e3888b1391dd3576bc762201953b3dd0074929e4d1e26d8e22b4be2d8513f8bcd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad006cc1b03204fb295cbe2cd6ca5ee3

    SHA1

    5d9a2dcf72ba58a3044b23781081098a9d23fc9d

    SHA256

    3d2e87e403541ffa13a1eb1ba583376972cbc959ac9ac7d0f7b9f5174d37f153

    SHA512

    5dad5ca756dbda45d8a916fa4b2eecdba40fab0149fdd6354a7036bb994130e37d99f572a82a5c4c8f4aa6e20c8669d58bc66cd530bc2145c828a3df81ff5756

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    10804258659125824494ebc2abfa86da

    SHA1

    29f34fbaac00b5eef126c03ebd14f936f9920b19

    SHA256

    12dc20f1f4d4fd436ad8c8ff6371705a6a7d3d69fbe87fb687796eac9a9593dd

    SHA512

    7f6ceefe4f0bfbc91edb1a451717f6b3d93af94e4313db505904641cd6d1c970d1824abf4202854d7fde0ac6c09305430a907a1bdc4cbb0bc66a166d0e364d82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    12dcfa1aa15155c64b53cc202a2f88aa

    SHA1

    e6924ba354d6e6bde53427f6850d550e051353c5

    SHA256

    6c79804348fdfb64251530411e4639efa2ca2ddc509d09983881e5456f56237a

    SHA512

    aaa42770e13b7fad1daabb6b39155e37c74e22dfdbb2d6e1b1d9e12b0c7b8782a03b1cd3ef65dafbce8ea4e619de1574d5ec46327ce2e1b50f069c975af56620

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8fef5829b85a485864acf9003130c4d6

    SHA1

    949d16b5805976a3337d22d641201673c6f2d9b2

    SHA256

    5770ada22cf646ece9ef093fcab64e7b48b175587a0a781bb70a8fd698448107

    SHA512

    a611994068675ebbc24c130d3af71aa4146d4132fdd586455311ff6e67b88d62c31eb25e1d25b9ed89e043cb7764004a75396d3c5cacf5369c622af34762bc4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ffc71c389c88e3981a67d85eebe8ad97

    SHA1

    3a222e3b7ffdbe33dac3a2ae4d7340c179a8ee32

    SHA256

    c01053f012a4abb6599b8c3ef9fd0a42cc19962017d02e5022df579a654e71c3

    SHA512

    2a60cf98868d97789cce5bfcabf1f31a4a70da09dbcc79a0e2f66616e4100879008637b75c7edc95fc832f77bd66a9c9c2fa57c849b1073372564d05ffd4dfe0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ca4570fb7388fb9d8a4c738ea9c6cc2

    SHA1

    9a293de535f7074c8457e88b1f1f1ba9481af71d

    SHA256

    a0406b23c7ad415a39c8d87084194929027ff233fd57bf08ae5c5adb738d39f4

    SHA512

    439c28d3bfc14bca94639fd5565aee5b6807b5eb2b0e9f16e2fa132481120d841716f128857499ec5f428c4882d2d55a400db052e5976988f06acc0cace5e3bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e2d7c76ecf4faf18ba8d3ddd7215d00

    SHA1

    d111ce07c5634c95e442e9084d253c6b0f375803

    SHA256

    117adf5b69aa957461e8353373c92fdf41ef45f93fc0f51c970f71f11fea45f8

    SHA512

    e6d2b15268f726012a832d03668e61721eeb600d9ecb512510ca626dec660f3c91355cad018ac9f5b582efa3e86579599c3b9076f694abdabe380898fdc72dfe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63775633a9c9b6271b0b6e4e3232f8c9

    SHA1

    0757cbaf57d54858bffba1274ffd8ccf7660bb74

    SHA256

    73358b1132cdf9e006dab9328813e7522583dfd476733bbdb30609588ff005b8

    SHA512

    d4091e45111796ccf23756658b2b5eae24dcfddeeebc403790eb5ee6f1e4cc02f925946b34ce2a43b334980eaa2d349c32e5b7ce827fc75f040127f48c9f4af1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    88b12baf18d802381cdcb33913efd9d5

    SHA1

    849b0d9a8e55e0201d0ee3ea678b74a72f4af11b

    SHA256

    b60795f1749e3732d9d32a1d229cd4a94929c6bbf889eac0a93d54a990455a52

    SHA512

    681e7e2094a53d482febc15ce44a64dfcc221a5e97ef18b47b23801bb270b28b50c1f15fb75b1ab9b608661d26f133f4de7e41cdae53f21d70539c28aeae23b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a9291a2151ec1ca01bb0bd95473b880

    SHA1

    ab421ca74c72f253b73f570ae6683b2d15d23fec

    SHA256

    74309ca8e9e99396cdd8c9c8a7b0e6441d4b5017a50b20e67ec54af50a8f6666

    SHA512

    d90b4bdb61e5fef26d79fc03a887972707a2755cab6e3d5a2da6e08a88a05a43bd45e4a82961295220aeb33f7282113c957f4f331a1b070e5d4d85d98b6617e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    50fd3429fa0996f33e66a152c32403e8

    SHA1

    9717712758b3c11a7d1c5ff718c0286f40720329

    SHA256

    62ab44403a6e44d2b64fe8a25f6b4d45c7f7599ad8887d90b309920246855d04

    SHA512

    64d483fc017945f7a89081926fa75d311a26b4cd0f7a3addb1c7303c4673b33fd61916055000573bbc4099bb7ab7044c79c43f358ca897a868e5edf396197ee2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    665f9f5e7dd26182eb8b5d57268869f8

    SHA1

    a89bbd92b1f620336c8bc1ae719f8c6806b80279

    SHA256

    fb2fef684ff616eb9061d6f8c19e8217cf74edf92aba3d506c9625ed5a25621c

    SHA512

    b289f16a0cd65e96800b4d7568e549945d7e055f89c4c1ddb1f7e9c2de49dcd162e2bbdf12386055937ff4cbbf213e1879c6287b7fbca73dd1868e3038309cb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d946277ac779a684762bb5568244e434

    SHA1

    d5860401d2b674cf09ae62ea962093d6473a0fda

    SHA256

    6578f615ba1bb60c613202a503fe9fa5b52b997027fea6b47ae4e2c7ca3d1b5d

    SHA512

    c7a2d79c8a1d0713ed8364a38c910ea66e590613bd09f6f78942dd1423b06d145d93bb0e7390748de33bf86be664fa913395c7bddc25906e37155a509f16a2f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    150158e25997f0b00fedd5ed5bfc569b

    SHA1

    b48a018acb64056f7acf7df04b8fd6cc531c472a

    SHA256

    60bc80d45a05cc928d9fad6279136f3dc64095d68822caed420b8d84ae692aa2

    SHA512

    8dd0e4344281b534bd7e45f313243bf7af55e75bca4be610c5c9289c6c33fd5c2b476ec10a36e9b8866e1ebb60a60ec38cb070bf35ecadd0c1be6d9ee0bbd3d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e15f90d13518226ff135d6f2bff164a

    SHA1

    1bf0568796e10de34dbd01fbc2f4673fd44af7cc

    SHA256

    a642c83cdacf2cee28721a929f515daaef614e9bb6d48da4e1333265da44a688

    SHA512

    4754656a29c13908e589858a3f6b206a7cbc31ab4c34b2db2895819dbe8976ac09a4fae2b96a6907d1372b1260ab08be0155c486d8973b23021c31386e45fe7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d9e378bbc592ec704e7a959b24dbdbc9

    SHA1

    ed87b057133241fe75baaae38905012498b609e3

    SHA256

    b5de127191a6bb2b653c204b3940530a459fe38ab23ad9ddadd368075ad8a9a7

    SHA512

    5e3aabd5d65edd25b49e607bc7f92f0cf8e94d3e0ddd429af1d0362d4f08c49b00b1049189156cfefd6db2b4bf11eaa28c267e15ec0ef2c365afbb35630ed4c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    54328b0d6d66417baa58829905998ddd

    SHA1

    6d3e3000d9b2ad7d34e72dc6346c41f20903481d

    SHA256

    c3a3e15b3f62a86abf461bb3c877cbdb5c28bcd1343907f55fd20f171a398d77

    SHA512

    c692caf4de3ec6e700fe93dcafefac3508ce1057e7f691abdb0d60daa8af05708981e750b044f7c6bb6717397956701c5a3cb7d772895ad2edb334dd3e306e0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    686a70093dac37f00a8958695a1842f0

    SHA1

    6ad5ee769e8ba3c079b240af6569abb80b1c30b7

    SHA256

    0ac2d774d3f8d08ed63046e10921e31c621d368ad6647e4a726acaec8df16dca

    SHA512

    a0c291a01f6ab70b1d5d4cfb9658755ddff3c7ea96d8b57d2c053e9042cf45abdb8fd378d31eb40996990e08a8240d51031a12b97efea70763487b3b933669d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b301405c3817d31d98d67f2c382352f4

    SHA1

    3f2042de65982aec49ea445ca4302cd058ed47ce

    SHA256

    2b70f3a0f389c70453e19115e0094d02d805ba8082fa5a5196fc0ad780d8a7c3

    SHA512

    d86dc71d23c25e599279bd16306a2a18556418ba1f8228025eca0fb6289569a68a2b1ade44d2b28de47e4099d8d4e8fb9035a255cde605608986500f657bb72e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    059d17e80ae1b86d8ae1fa71c656876f

    SHA1

    c36f76cd14119c98825d31a940d48d8add06e005

    SHA256

    d2fe5c0b86ab7f2fb215ca63a3cc573bc2da570ef2244c6ee331c192f76451e7

    SHA512

    69600d5401b38f93418346202e2f1f615214da7b3abfe8954f36b8bb349cc186351c4a08163a2a66d412b09d8202b3b0f2772622de6ce6eeade754c3ec5f06e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26f2fb26f5ba008bd703dcedec6a9827

    SHA1

    cb1a24de206155fa79433025a2ccf6859eea0c1a

    SHA256

    666b5e1f4ffc5acc291405ccc05c2318f217d6f26dd1f1eea7c2d372a4e80922

    SHA512

    b028d4782d347be15bdcf97ab070fac93f8ec943654c57f4f752bab7346d97f3b47e4eb0030b9cec4399744d8aed86b46bb8eeb92505de6aa8c7c0c6b5d0487c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    daf63693ddbed1a7151808f29220e8ad

    SHA1

    a6836c79a85ec9ac2d9c436283a79dc0be435608

    SHA256

    218074e4a7b3c95a3814f1bef072d355f9d2fee01939085c0f4a6aec25be8aab

    SHA512

    d15860a310f85769a79aa2e3b9f39f760e30a63ae7884e6a35f7268c61a09898eabc8c775eab570a4e2db3cbbfbb39ed01eee08fd5ed6afece4daf9238ad89ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    58c1adffc814d4b473335691f8e33ac6

    SHA1

    7eeed980a59f3c447ff1edeb9cdf74dc4f8e99db

    SHA256

    51c5f3d0f2611540f52472faef7b2cf519ccc38cd438e862e338b0c1d8c564f8

    SHA512

    a13db059d4253b0b5e19c106fdcafc99ea77f9f740301db6cdaa78b29934b2cf4910e3fa60f9a5c7a97b22b8ac392be8044d6ae61f9ae98c795ed8dbffaac1dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d80bdbba4ac3988cf8702543aa0ec909

    SHA1

    3effba32d2112110ce70cdb1aa9f5d69a1d96fd2

    SHA256

    566a0f862e2d0c5a01d7c4476f3149b72bd502bcc04701999e2205c6f814ae3f

    SHA512

    fef94488bce28649ee9d1c8611488953d9c66ead5701b7855adb4783f95ae86d8921e943fcfabbd1a211c74441ee2325d3eebbbecff79a56d96941e88c5459f6

  • C:\Users\Admin\AppData\Local\Temp\Cab85B5.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar89AE.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b