Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    21/09/2024, 03:33

General

  • Target

    eefe07c546cb3b0445e7e1c160513cd5_JaffaCakes118.html

  • Size

    149KB

  • MD5

    eefe07c546cb3b0445e7e1c160513cd5

  • SHA1

    f3027cbe33edb863d4b628c70fe4f7e1a721b913

  • SHA256

    2b2044cabf462da1e89bf08ea010bb91be6c995329f2419dda459b9e4eff907e

  • SHA512

    84a4ff15c720879e45c8d6d758b625fa37b89313dfc864fdf1110bbeb097f6127a713f41757b66dc407d10d4bfc32427ebe63d9543b326ffff466516a6717089

  • SSDEEP

    3072:XDRcVhIVs2LQegU0Dzvj40MZEPjLpUxAfYxslxNcl8CL/U55DrHSpG+34FW5PZ+n:lcjJ/lSntvRxR8v

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\eefe07c546cb3b0445e7e1c160513cd5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2172
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2172 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2352

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    8bfa8f53e24ea057cdfc7119a8a1e7f4

    SHA1

    2f8eed4f0c301bc9b2ca3e0297ac93b2792db57c

    SHA256

    16eb51b53bf814699a1d669d8b63bf7f6dc99ba2c08772c64dc03058c3b08709

    SHA512

    dceba2e0dfc8948da7856090b23d75594584b08210310a877c72dc275ec39a73f81de0cedfa68f8fc963959ec338930fe75a768af8e9dd7c31eb4d292177e0c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C02877841121CC45139CB51404116B25_0BE30C8E6128C0BC8455FF6A9904D7CF

    Filesize

    471B

    MD5

    6b7380045e6bc9047b11ec996d72bd86

    SHA1

    2decc0caa8d57938af893b75c54ce89ce3d49273

    SHA256

    5c78f0c98613c9b4ba1c9b3f68c1be4428fdf113cc33bacde8eca0b4850c924d

    SHA512

    26432777fd2986bd893ccd18cd2462135f891ae204a7acb427e042c49e2e999b79e7dc6eac8f43bcfa00e3e7f2efbca2c8345c463fdcaf3f72e434d392bcfe8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    ffd6c774d388ab12138034efb288d223

    SHA1

    db3b90ffb19c48c88165b4d279f92fccdde01cfe

    SHA256

    28f961dbfe464200aed0524c9398364ca0cd5e3bcd2dae47c7b8bc17858c18d4

    SHA512

    c6388284ad7a9eae6c1dc39fc496e499bd8a055d4e7a7fa4b60bb7535df1adbeb8387d5387609caa596f5b07b962637e2ffd97d1a7273504d7ea8166768cc9eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    a091e42d90a5b0b513b8464c9fc1b4c4

    SHA1

    c12cd20ca8f916e0775e456d705e5fc743797dd9

    SHA256

    a3639f6cd86380837cc24db2cded024227667a71ec577f097da31b4a903e83e4

    SHA512

    ac8996acc9a56a278505bc043caf70713d2e1f08f7eb0838b412d5b2423a2053106d7a6b5d684b2f28df55924ff193348dfe6d781cdab2e8bdce83a8dfac7854

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    5ec4ceb2421bb384fadb24bdefc4132a

    SHA1

    e0b32bdc37146175b7973e12f7546d9b7025d0ae

    SHA256

    0587c1ed78f3ab0a8af744e4f7499fed65f88c59550b7f6700facd1a63af65e4

    SHA512

    6cedeb5bbd74315f16b2365d1f182010eb4658da1dc090c8e12f16ded734658d492a3a0e24b63d400ed57d393930da00e5ca341f52c8d2287d27b6c346ed4158

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    46076d50da06cf190343f47d0b85235c

    SHA1

    edbb8f6ac95dab210c84b13eb74f1f681bdf4651

    SHA256

    6e602916bd41200033af413bf7449e25eadee976699a31107d87983865af5b81

    SHA512

    00c5fb7dc1cadcc463896361df6505cc6436805f143ec71c5604f7c9472010d2cb592d9dd108dc6bcbab4426254c0b5b64a1955897055e9f89113131535980d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    18916c489e4b857249b1dbef84b71982

    SHA1

    a0a74565e80015f495fcabd80071bbb72598ebaa

    SHA256

    c7714bcaf9b8dd4a2fb64002dba44d2fde90825a89406c282e45ef3d43f7d542

    SHA512

    2a1f7396fddf80b16f540608e1d025f0aa2b55e490a34c2083e063b8b969604d302a76a8a2ca046935f8894d75abcea5321e40ef5bae65e6af9f4e3153064e04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    60eea27bfdcc80a03c8d6c9033e46810

    SHA1

    f0d156b810b1162b7c95c832a0194abaca9d3b5a

    SHA256

    529e728458dade0c3495327bc2a39a310ce1b2bff84c2b5913d5be77299a50a2

    SHA512

    61a2050e534efe7ef0cc4824022216249847c8a0c99957d69c270d8c167a05cb42926b4d4d9117b6d089c46992ae5dc4c917905d8a27a37fa51225e4e59f8def

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0037bb1951432ced798b0ddba4865806

    SHA1

    07341baf356b6e5f8827a01343225276062c05ea

    SHA256

    49f86083899290c398c1d279af079fa6aef39ba8405b768c860db1a72abab6c2

    SHA512

    3390cd059ad8daa24a1c6b42d821a071595f763326139cdc30a1f76eb7c6914ee6d7b3fb8cceaff4cfacccb8bcf4a0abc698d4c05c99a787f18f6d14dcc52dd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    843c11d28215f248ba68f0278b080750

    SHA1

    1128ffb670cbf0e6b1c977f6d61f9266a057860c

    SHA256

    7fa703d6d05a8807b56f61b3df09fab3b94eeeb2c1f2239cff4033634ac765b4

    SHA512

    3e17c387eef1f78418a227664f3d3f5b8def17b66e59ea55145abc50e6630eb348db1282277ea9a7fdd387ca276bd9885dadc6773f06d7881ab36fd48e8911fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a7a039efd476030ee97835ba2c2f45b8

    SHA1

    2479d89160ad3725ff350b59c11859495b96f471

    SHA256

    a2cbdb1d96517622aab68a03e19bcc24d8eef1664d19f85130803e13f9f8b4aa

    SHA512

    62f0a9c54fdb8886b73905da49a81a1f48d26aa231db1314745c3666e75622aa9a29d362e64bd02913e42f1d690dae0e3d183b3923962c0a63c6ab99f35afa93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0541e1e8ef73f6cba4f1d3f40c4e04a7

    SHA1

    33167e2fe5cd5979d90b9d10a8bcf260f158eb51

    SHA256

    368ffe42013dbad848f82040cafd6566085303c3f432d0913edde932a10089df

    SHA512

    b0c4e69e358fb5259e3931f360f0e66435976e36c08874923f44e1e8e285c700df569cc454efcb6fe02f5d2b8b6bcc066aac67201a08b8067dbb389d86c0cc2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb2cc9b2d5195f81ff4fd3157d3b31cf

    SHA1

    21333d97d64dede252483232662ed674c94aac81

    SHA256

    a04905f674fa43f7be229b4ec88d640b2e5140f958c2abc58aaf25dbf69bf79d

    SHA512

    5ec7e9ed1a3bcea09bfc150db5f567bd71156c39edab2a69ae205489ca141684d690f61f632c12c10ba7443a2129f7a8c347fa31487c69e7e4d70f5505336215

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6be2c22b9fae84239555df6c132ff65b

    SHA1

    2fd3707527e5f6a67fa1a26c4dfe087b90d7f8ff

    SHA256

    b23dec8ba1e444f0ec7c49fa0ed44c656fe9a0ca9fa786ecdff88bd699504429

    SHA512

    e8ee31a5a49c3ed2562dcdf8ba23cac3936fabc6fc8aa7815388ed41fd90f1962f3268c7da9f8bcad611e69a8f7bee28563e879a733cf2fda7056a4c11b3c07a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    213d04987b28674e6da979416441bc24

    SHA1

    63d9cb9541c66cbfbc81bac0d70e1d0a80f8a0f6

    SHA256

    145506eecdd107b5168f2adff4b1c7e45a0587ad8f5e9519ec8349c735b7d2b1

    SHA512

    0fd2529fb576586ce06810185316278375199db2be12ad8b255d6e1c6cf1166c09fa87c870372e06cda9d704ea9188827cd40533e938398dc503f57218dcd3d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e75405e10953ff95d195075e3a5eeac

    SHA1

    71c5c38d4ee4ca80881b61318fd485db719a12f7

    SHA256

    34c2ccea763bd1edb41655d52cf7e72284b1364e18cdeeee1e27018945011680

    SHA512

    3948b74d08f5f38a5974ae3a0231462c443cb6d52c9f5f658c421964f05d48dc17783b982ea30bda11f179cb69901cce6a50cf1533be55b879e6885e3d8020de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3deb3173b5fcdafda8167047d66c049

    SHA1

    c092266dde09d9a7c7794a163ab632ff45bf1f03

    SHA256

    f2dea2431a9e152411f7fb2313118c98151c147ecc58d6850f5de0ccaa220b52

    SHA512

    f3078424d4a04c1e7652f91e8ffd566db6c62564a935e6c75f7ab5a9fbb8cbe34fbb1ccb30d7f0a4370218d237204b9e25199f6ecab7564c768dc3ffcdbbe667

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11015930e0fce83171845c93ad5eb606

    SHA1

    12036ccf5f3d5e49aeb5490a0dcb232d49095067

    SHA256

    7f7b95faee4f2414a88f2484bb105302653e431fd0d6517c3fda1e41e98e59ba

    SHA512

    c01bd86a06e4ee1c46621fc980133d005ad4827a25dbfc3e64794e26cfd475c9c10d1a163b5bcd7888caf8bedc12c6791f9b797cc689246329294eadc670cf60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db2720a5cd17dec2defb8e56721d4dbe

    SHA1

    ea6367e91ccb5d10db3973426830523d7ed7eef8

    SHA256

    c2d4010292d22c32cbbdb579c84f12dc694c80910955a59893591b8386c0003d

    SHA512

    4ecdafc57abcf8afded0eb9388476dad5e8ab6d6756f470719d1ab0411c81524bd47dfd4a8b93bdacb012dd3f8e8c471cf87caa0493f1dd17711d9f7a722222c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C02877841121CC45139CB51404116B25_0BE30C8E6128C0BC8455FF6A9904D7CF

    Filesize

    406B

    MD5

    e9a104e33954c8a5d41af1f8e4d5e8ed

    SHA1

    d8f8b13f8bf8bfad92fb5c790c192c4a5d6e5d93

    SHA256

    d4ee8f58d950c61f422a9d6bc0becdc400d2d34499a2c1cd6feb897e3cb1787a

    SHA512

    595afab8289754da8536b20bbbd74b95c1173b4adf64124844ec0ea452f35e5108e63cf2b47313a7a896b4afbdb98c3228ec1a13cd83a9683856253b62eaeff8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    c6a33fbeb0fac0db5e494ef79991a59f

    SHA1

    2b51fd824b10290066c07b8aa0c64e55975f5e81

    SHA256

    159841a5b2bcab72e8b80c1c10046a7ad9cbb801e6e1edc135340afe1442a3e2

    SHA512

    1522283f8691f95fdaf3f3a22103e173b3475d4800d40893340f4c841baa2e5bfe17615d549a7a6461a3ba6fa4c411e8623909cf035e2f60c4101afe5add4d57

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4RXRX1VH\2254111616-postmessagerelay[1].js

    Filesize

    10KB

    MD5

    c264799bac4a96a4cd63eb09f0476a74

    SHA1

    d8a1077bf625dac9611a37bfb4e6c0cd07978f4c

    SHA256

    17dce4003e6a3d958bb8307bffa9c195694881f549943a7bdb2769b082f9326d

    SHA512

    6acd83dfd3db93f1f999d524b8828b64c8c0731567c3c0b8a77c6ddcf03d0e74ee20d23171e6ceac0c9f099dce03f8e5d68e78c374da2c055973f6ac2db4e4f9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J7FHNNOW\cb=gapi[1].js

    Filesize

    66KB

    MD5

    aa012028297a26c039c37ab25a4bd17a

    SHA1

    25f23d01b5f580c00778e1c010225e5b8c73b66c

    SHA256

    55cd2316edf7159b623e4ec2c9e3a334027c01e2d1cc386f833ebcd35ed87b38

    SHA512

    d346eb082674fc26d562da9a12f36ad2cc7db1f1b35c891a8734284cf1bd052a967137c1281982070688b2bb2e06c7f4967d1c9397311a31a11a8560b9c45fd5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J7FHNNOW\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    e691b2e17de9ec018eca758518bf5dc8

    SHA1

    3238d543acf53b803dfbd260405fa558717daaff

    SHA256

    438d41bec769ff386a2c1555b6bf9105362f67dc3e711c81c6092ee7fbf6ad2e

    SHA512

    5589a5cb408ee8e0fd473de24224ba8fa1453eba5df6e591570810f992160d4f3e8f60f8ba74d9994861759321f5bfe0c4a608636913a8407b5184008457afc8

  • C:\Users\Admin\AppData\Local\Temp\CabC728.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarC7D6.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b