Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2024, 15:21

General

  • Target

    eb9e399a29285d967146aa5f0db061fa_JaffaCakes118.html

  • Size

    57KB

  • MD5

    eb9e399a29285d967146aa5f0db061fa

  • SHA1

    6c0a15b3dc1fe5e1639ba114aac30c4f8e592b46

  • SHA256

    16ddfeb1bf9d226d1712fb094fef81fee99256792b013d7c83db3ac288a8c6c0

  • SHA512

    28f10f64c546d0bbfaa21b69f388bd9320543cf7c6fb0e607db32878a2383860f2fe9857673b80f17650359c4269b0e1b6bd3acf33bba72fdc4417016fb4df6f

  • SSDEEP

    1536:ijEQvK8OPHdVgco2vgyHJv0owbd6zKD6CDK2RVroV/wpDK2RVy:ijnOPHdVC2vgyHJutDK2RVroV/wpDK2m

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\eb9e399a29285d967146aa5f0db061fa_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1848
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1848 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2332

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\DABA17F5E36CBE65640DD2FE24F104E7

    Filesize

    1KB

    MD5

    c6150925cfea5941ddc7ff2a0a506692

    SHA1

    9e99a48a9960b14926bb7f3b02e22da2b0ab7280

    SHA256

    28689b30e4c306aab53b027b29e36ad6dd1dcf4b953994482ca84bdc1ecac996

    SHA512

    b3bd41385d72148e03f453e76a45fcd2111a22eff3c7f1e78e41f6744735444e058144ed68af88654ee62b0f117949f35739daad6ad765b8cde1cff92ed2d00c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    804c75ce0132a5e36480373c81206339

    SHA1

    f6d4b952aa4b51e50dfa11271ef20a69e18be423

    SHA256

    2b8b04b47410a259b6b754853830efde8e905b26be968ba83d8c2e48469fc9ae

    SHA512

    268f768d9b98ad4cf60644582fc6214166198db3837ff6f3150c9f18de1ac72cd01838e977883aed426412139bd41c3fd11792257c2dfaedca46f27b70a6a422

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49ec08b3e6c7c4ea6abcc435c7492372

    SHA1

    809eadc4ae18f4b5e9048ea2aed0bd87fcb5a6ab

    SHA256

    8d1fb20217760e200748c7150b0f1d77142da68d367e59aa58aa886ca8da572f

    SHA512

    6632513feb22e0028ebfb91b4457ce3f324862639f0aba9fe862325ccc16329edde194fcdc108a672ebb7abe47bc8b4be77c6e295cbc7b0b53dd4b9b39f9ce3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    021ef79b51d93fd948a1e348ecc96dee

    SHA1

    fe2f10354b9ad87ddc7eec2bd3a0c017ee7a6a4b

    SHA256

    a7662c1b9842504156db628460a888073abbbb3608a485f483486d8ac080e9fd

    SHA512

    1e99582369f548e4112d6c2229c5fa548eaef0de0ff114948597ec9adc934e71297e4638f922892fb7032d53e28283f73cb5063595a388435b179dd3124b7c7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63323cba65ccecc6ba3070d048022ad0

    SHA1

    fcd30d3b7861f470c6fdcfd8a3dfc5e5a61694ca

    SHA256

    1f101a5010c279b8e232fdf60b8b67798f398a9a73839885e0eae83da87c9351

    SHA512

    8f2bd3e2fbfee64344d357470c2425e56e88f6900c5c503ffe0d2ca0547d22b375803c9e6213c45671f9b8a6b271fb77746d767b0bccfa36437f744ba20a99e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa602c9045406ac13617a2b149f6b012

    SHA1

    86273ff9d19aa607aeecef4f954671329c404e91

    SHA256

    0275277ff50c86357a1d8b36af85d94cea1352cac2411139321ffdd72f865a55

    SHA512

    14ac1bcad532b69e0241e81e2a4a77ca933e23173c041d321e8c7fa4ed08da02b727e90a2b45a6e43dadeb3e4f74e7d5fac2ac532dae8a104bc9b5a27c4c6bbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e9303ec06bf4dafb0e7e09ed3af0a022

    SHA1

    31de0c7f1be07ba763e0611cac371fab3c82faf8

    SHA256

    99908e4c5ee0118330b39c8d721cf25c1dcd0e7c5f5ab189529d6c3d42f6ad03

    SHA512

    6852c77b3fdbb0bf3876ffae188340c3f934830a78b8e27b3a9e91e89c46977d7ab34d940ea8a04edb2a99bb5e21a4ebec0ca74882e16f7bbdc5824c61e52e4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    91add62650e3b7c4201cbd607f4034e8

    SHA1

    3a89f918396070f60738de6399c632ed0a1a7449

    SHA256

    2e8cb3a1c9f2a0ab7a48f46378a2c45fbc7a94e3b94095edbd1f959bc553cc1d

    SHA512

    06493fd1e47e7c420155a78a022f9e189542326437c7d1f9ea85585ac237a5f79aba4bb7578924dcfaba0b56196ed67fbe2019b8cee2c696a8014e512f05ccb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f9b8747285680df2262fd84993e85d4

    SHA1

    7c51859d2508780a02b451f9687d2b98048008e8

    SHA256

    cac067d4e8744b53925a7934b7110c67dd447536a8b1429131019421fcdbb42a

    SHA512

    f2a8f862558eca74ff7f8aa4e3f8d33e9053bbe995ce0e8e982878b8c0575ee183a0bd1e9214327a50d004e9b7c1c4b250667b551ffd678ce2dfe9152b4d4686

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    218d7371bb5696f3802d4be4d145b047

    SHA1

    99a1e4980fb92f8792c57608ea82b15b98f96f77

    SHA256

    c97752fe5e665b19d7c83554b45959ab1401a0de6153a988c3e8cc4978cef136

    SHA512

    fd14b57ee29cd41519933fe243192477a95e241dc7b325677c57306d5df20c406fa7885a7e32a75bd6d61ab2d0cbe9290b974ea4931c0a716d856996f7cd6fe7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c0dec949e859be737a104c47d7fa8ca

    SHA1

    14bd91df31b70f3ef7b8ee4766ac72d8e6424cdc

    SHA256

    c19400980ed449028c7af6a60ea26524e34519f2e07cb11581f87698f749dbe8

    SHA512

    cb24222d0c2676b98c0e0797e1f732ea096ea8eccf8413eecb0aafaa697ed94ab3b5792c64710771127ec37b917b8cdac9fc63446cf8fcd8e7b54887558771fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e221f2130d457dad49d33051eaf6c8d2

    SHA1

    0aa81dbe84fc395a375288c0b3bd82ea8d762721

    SHA256

    389e84a9a4a3b74cefce5d45dc3aee74b9afe22093fee0274f4ba59a6eefbb03

    SHA512

    2e893dc3049c2d79bcec3e95ba63d3cb087a4103313bd62add7bcb7dd3543e6a0496d19e1f9bb4df5498b822b5b63599184607f112938eea9a65ec2158a0b30e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ec12448aaaad5b1d971e945446e3792

    SHA1

    2e99c64c2fe24ef2a13385ba06d6d65bb4e40ba7

    SHA256

    2825685e770ffb0c20c458c822ad06dd5a0fadab24697de382c5fa8d026c1f4a

    SHA512

    36b622978e0e21053d767deb1ebfd02720d012bb683e498d449ac1847084657f1a00c3832630c810f707c2045e9c22d8e5c9cfb9f360c4a57906f670432c905c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a24ef9cdaac3ce10774688f5a53966cc

    SHA1

    dde43ad1713cabcd6d05337fb36eeb20296f51a4

    SHA256

    0b66dffb16a7356ded733bc4b957c3879ab502a9c9b1cb4c56b17561753248bc

    SHA512

    3eed3ab070802ea8318e6b465e7407de9e13cf1de268757642c6e0f03c64f0787670b367ed9c01a74c49f2ccaa080f0db50470c5cc6016fd3afa50b263af0004

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e92733012230f064bff49d18999f6d9e

    SHA1

    28e391e0b24a06694c725a462f8df3014ca3c6f0

    SHA256

    48647ad30c24d4da1eda967236a5d9f1c14ced5a305e13b7f89126b71c67d4ce

    SHA512

    1acf3a8645f3c7fe3dd562c78652963ce5abcaafb5e4176f3a7d29214b913c1861b937a1069df548688b9de8f074bf77367cc03a353e031d6bd122c08655e718

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8eb2a477d2eb074e1cc1cd82160156c2

    SHA1

    abe4b0e8af4b35c31232473cb56fe84007a68232

    SHA256

    b120eefea662ea6f4fbd565ceb7205f747666b678d4dd6247cb2e45fd65ead68

    SHA512

    602eb0c898ea37c08aa55adfba91842c9f72f7eba9af2ae9d7f54ab7a92659f4a5104ae725a73a3eed8263df49254a6fafce8bbe4bd25c3fcd9f0d957711765c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9bb1250bc9a461d46707a678196a7a22

    SHA1

    9a9d2c45e93aec9d91e3236fbe316543b0b217a3

    SHA256

    1f5b7516d5a9c8c7629f8e654aec4a47539e99710ff918cd021f9f5acae8054d

    SHA512

    8c184e6ed9be17aa3422179545e4dd2f1b9c786c83a4cb5e6155e65ed3e8143a7cb069ecd90b9a190779831669e32a4e25822a22ba7ab443da69592669458795

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1be2fda2ade3f16d40c4ddba75382b92

    SHA1

    eb5420c42c6036257e494cf68817b9402f0a2123

    SHA256

    8dc7492957887cb00dd0b5e4b799f0e82c7f80aad35effa7949560184217d893

    SHA512

    b9d76546a4837023749c8207b0d410bb062f702729d0a4aa2c8b2145b35ea469c98fbb6e1e752e65253e5696ecedac3efcd07b996933f52396086179b55f8115

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bfa42bd5b86d9593b9dc25685fb36dc1

    SHA1

    b5732baa10d7b566c336a7eacd3f9d1c49091031

    SHA256

    3c6e44497e1320217a2d3175e04d19ed40ac06b1dd39004d51bd98ab9f74e33b

    SHA512

    e9b620632f5a7e372fdcba8e92366d26033ca11c4b00c0d0ac38755aa90bb40d4d59e8f0430dacedf9aa7c939562f749b6121cfc372c24ac39adcf229125c2f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    83de390afeb599ee98b8076248ab074e

    SHA1

    3f53dc95e780e43f22a68f23463afcb6483dbafd

    SHA256

    cebf93d4fbf5472ecbd8b1cb4014ba1e60fe568f103103b1f6c3e2c1d2e85743

    SHA512

    14ba6fea51542eea6fe2f874689b553ffb23a5c8072950fcc74fdaace2a914d348766bc77b3d5dcb80d78c5d8a6cb5bb99ef10b6086153ea31b434bb65883750

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf51e25182fd5b882917d18b8b3f3f04

    SHA1

    faacfa47e141619f4d27d6bedea13ea5f3e48b09

    SHA256

    b95ad9218709f8dfe31e52394357e07f5991c90e447d5b74de1470d69b5d7c22

    SHA512

    880683c2147f583eaa78b61f7225570e133773141af02a8306b22db0a886feff44c91300304265797f5827738153bf3c9355011c90e18bba1bb421f1c6630214

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c47bd5779fbc7239207b8746100f3fbe

    SHA1

    64e4c92ae9aa17a3115116d543780b1bbc92540e

    SHA256

    034b53839a4159f0fd609007cf014e8279faa6fa7d09012f3da998d30c9a1398

    SHA512

    2087b4d35d0f73e69d65ff54f61e07b40ecebd000322eb75a8bbe6dd16e00fe09b5be2f245f4a5127adb0c4877f01dce491e1d2c0eab51bb7298e0fcc54e55c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f3e83fafeed6b1c81b8f3b99c5d775d

    SHA1

    23210dbcd3f2c3de64eda1d48914435001d86df0

    SHA256

    b9a142f13da5dfb6df02946dcb0dac8cc05c7553ee7e88de28d92e3f1361bd4b

    SHA512

    3b091a4fcc3b80aebb4d87d8b369c7d64edaed36faba0dcd03cb92cf2eaec1c6418980cca6f0563a189bcdf4c30b9057bb20ba572dac5b79c689f021d086579c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    240c13fc79b68c556435720b561acf18

    SHA1

    57ba55978f99c275d989ea2eeea16e81356a1fdb

    SHA256

    a466503a8bc29be9513e55a5206e6fa40105ccbcbd49d4821462024206a03ccd

    SHA512

    a8686050b434eb87abd10490953332c0f0802a4e00e875d4668b6f98979b18d5d3aadd5f036a00a6c9a14244239ecc25cd0e2dd385fb1adfab13c27d56121dd4

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\56KJ964X\f[1].txt

    Filesize

    41KB

    MD5

    e17a3e1df63bde48187069f2afe38dc4

    SHA1

    094a1e311b795e96c159a3be2ced1b55c903c23b

    SHA256

    917f9f66275b72cb2e78cbc2b2ead3eee0f456835ce5283759c8723c68234ce4

    SHA512

    d1e3120bfc3c37aaf06ef46551d676c86e225765a158e92fb44b548790abae512fdcfd1b0dd6555d265c3ee4399a46d1b36235be26ad9f44a530c726bf5a523c

  • C:\Users\Admin\AppData\Local\Temp\CabC035.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarC058.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b