Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    129s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    21/09/2024, 18:53

General

  • Target

    f070a73370b925dba3a6f71c807d3347_JaffaCakes118.html

  • Size

    36KB

  • MD5

    f070a73370b925dba3a6f71c807d3347

  • SHA1

    386af423d53ad73593e46a90eb5b9f5ed08598f9

  • SHA256

    40f6b1f1b89113005a65094b3eebb7696913011c7164278ed605aee2d1758466

  • SHA512

    a672e54cb44b5bd97374a0f83c1696e34c4484c6c8b5e88e9433ab9d2c3f8602b271725e88d3f19466cf9c9df6d6016efb621280dfbdfcd6d82938534f370062

  • SSDEEP

    768:q8FUkd+k+pPZE5Rccx29D8XiBQnHpQ47b4qwprw8ccEf/V8AIHx5Y2w5Xn:uk0lPZE5Rvc9D8XiBsHpQ47b4fcVV8AP

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f070a73370b925dba3a6f71c807d3347_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:468
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:468 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2808

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    82df2edc28e6f493edca68d037e1aa94

    SHA1

    7b4f2e94f1b57e014d03235d775e4841d7afd2f7

    SHA256

    c4ede3644a7c6f7046208c2b0802fc24c838f097192bcf2cd1abbc25ff65fac0

    SHA512

    56f1de1acc3331fb59abe2a1903e7c893c57844e4ca121afc37d0fee72d406c0a528adb21b2c5b399447d392aab58856962d59c6ea9b6c89ad14c173bafadb93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    b5068b6e90d7d4cf32a41e0fbd14c128

    SHA1

    760908f3921b44e684722b512a6bc348cdee1d47

    SHA256

    1bd4705268b8a213739dfed6750ae627843b1b1e7187e2034df44e8474fad766

    SHA512

    029f2d7c0fff37d9c550f9be77736cef4af52071a0f88a1260d5d08fc6cc639f4f932030beb5d072b1ae54c5191b3bc1b874003f21e56850ab5a31824b469986

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b98e6c90a1c34274b58465fb9b1a0a4b

    SHA1

    beaba6baa1ad2ad27bfe0f155db02ccef7c373dd

    SHA256

    1b29f9638aad03ea3879c2afdfab9ce511f1540d14fa2104f71c5c02f97dd4fd

    SHA512

    feac23da8b0ac88f7f08438dd95c286bc832deb673654f136d69823473ee1be70b21f298132ed8501b019c815bbd5db494fe9ae7b1005acef1fc2749084cf778

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d6286b9b3123bea1d97d071acb940918

    SHA1

    59fa75633f9f42083f3768c63cab9179d57d12bf

    SHA256

    7565526af069719f9c3b7f74dff37336042d25be1985b82f3d63074d8f4d653d

    SHA512

    9b667202efdb1a157240ed030e8662d440d83486e2ec69c8764b60815fe26a295390e2391087d5dda796b076bb5bc82176f570a731217cd0dceb795301079a55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f3f8a98c64d41b0c330e7b8d33d0f162

    SHA1

    8e6e23f732523a4431b7111cc6cc9222403fc527

    SHA256

    c1f3b7d3c0f1585d589047f55db45ab6a3f685b61536a9491046b90f4a079841

    SHA512

    fd399efa44430a0c4d37cab038148979576c9aca60b8ce22312f2f7327686259b11edff1823e159663ce86fa30bf476a56b8486bf1fc14d4225aed8e68589aba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d338d355daeb21593b24c746e602e3c5

    SHA1

    d9a4d53d3c6ddc7c1a35a7633a3484c66ce24324

    SHA256

    25fe9a75f245a4a57ff84e59f5834600feb7db3a97d8b672209a1f1d3f7520e4

    SHA512

    685d05fe2fff2f69f00d666041d56484d91746a90910993615bf2d835600162810eaa478701073c5fb1d3519f7bfbf9b3f9ad09f139b51abfa497c143db2d3e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e64ec5864fa3f91a3eb416cb022e8d85

    SHA1

    0b0837b761e694d868519fec252b606549cae184

    SHA256

    1ef6a02b39c36ac45d1651bdc3d93bf3c82ea0e18ba6404d024a6746aaa57cbf

    SHA512

    b7ee7a444bf6651a1b35a0163ef286472080403e16062c1d8f0b93cc2e478c5984a583a6b60fc632d37cad2fe7723519e55ee5d4c194a14afba230232a6a44cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0daeb2d0ddc118390c1620f4e69260d4

    SHA1

    59db12c900e3fab5e15e49bdd1b36773cf28c7e2

    SHA256

    f839860b1fcc8ea79050537e6e307d516508ef65a9d0903a32e7f1902d48acef

    SHA512

    5efd1c2a05734db126f0640e3adca5c58864bd09d1caf2e54a1b431aa7f110f0b09fbb79911d972ad304ad3dad84226325910b09937c76bfa8cacc191db6f495

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f221f7e9994c96537dd4450c71c10aec

    SHA1

    3b45a47b57576ca0a7fbf0f1f7251572ad44d841

    SHA256

    d25416462bcfc9a0722069071adf6953fb663589318f9ce2cdf5d5cec1addeff

    SHA512

    76215241fcb7bcdcded2dae61f5bf0293428e7870322eee44e7587e32dfca49ac1f122fb623d7c79e466a76e310d0b0a469dded00a1ae5ad3a037bf9653da496

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4dff93de9485cfb0f1aa8404fd2d7127

    SHA1

    670d1e66d2eb0fac5e8424c5808bc21756f504c9

    SHA256

    9b7c4f4c28fff8500e650c47adc2dcf38e3c986c1d168b866428fc49c556e4f5

    SHA512

    10a17e6da40177c97375ffd275249df1a25a1cacd0a4d1ca085475238dc78aa6c529186aa94bfd976fe4af75d6acfb339a7ec583a1830ca838d70f6477772699

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    963ab5552cdd652a95262a5ba47e4791

    SHA1

    4ac70ce910f8edf6f9b27460b73ab9d6b3038df2

    SHA256

    6708b3ba19c0467b0e9b2a928fcb04a5edb8074f71856185ac6de48f7cae9a21

    SHA512

    0e4afce67b98f78b5b96d70fed66147e6d3df4b50e88cc65bb3fef1e830067d5bbdcce0c0d7f702267bdc009a61a87422abafe9aae1a188ac61b58e12de368c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d71238087937436e95f420b7e87b633

    SHA1

    15af6b86a63b42ce8edb07ca826a8a7a19a2f495

    SHA256

    f421e60a78aa6d59ba2ec0a52ea3a9963eefd167503c5d98ab2d027af449db19

    SHA512

    fc3c5b9c921a5c3b7da3b2834bc5fdcfde82da0b2822cf8ed487efc743815227ddfa90fdbf66f276f2215007093646753a716c19ed259a03fb143a463636c116

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19be993a786c2aaacc82bbe2ed22510a

    SHA1

    7386d84bd7390925829efc30031cdd5f00f3fe93

    SHA256

    cf4c31ea265308df72a45b53209bf69bc649ce38559083a9752305a290670a4d

    SHA512

    04ebdc8571928a07d21e31fa8d2b0ce4ad07d2e5252307b9a1a98a2d066e34de63cf13463ac400400b1640ef16c16bfc3278528606b9ecf67aaa679319aad6c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    133b8df9286ffc3565da2c3920218b8e

    SHA1

    6da04d82df4cdba555209e3fa60b281f4a2a7c7c

    SHA256

    b62b6879378a4c2ecc51a8532e283d311fc5fa6b07161167020b830392e5b163

    SHA512

    684c0c517de06939915bb1e1d87fb2b914ee277512695b2dc004ef2cda25260fd9c294dca4ddfb278b60ad521f56bdaa487b9ebd0ae693fc706b3ac0009e5d77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f08a945243cfc8b8aae0f7b0edc0ca37

    SHA1

    83250ac744e9b9c8648c2a0a4e19bfebbe8838e4

    SHA256

    efe648340f8fb54aa441f6a4724ed348fabadeb0b75302d2d07162f2183a70d1

    SHA512

    b7b275cc66d60f5218d63bb1c51ac07285ef0e4b79a521bbd1aecd917dc21dd45018f39f260f0c7145aafe24678d66da2d48a2049d5a7dbfb2cf7af4f9baa97a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2d78cb61e0b571350ccfb3d255ff8b91

    SHA1

    f35fa448bf8d67b142ecb5be6f07f68a7420cd90

    SHA256

    d7e5d2b235d8a822fcc198aef7533f404c1f8fffb8672aa2c7ef8c599268099c

    SHA512

    4eac725dcfc51c89f1ed5a080b0c010fac6dbed3e70871b3362c7d507f3b347691e28cc982ae90996d6ffa7e6151c1f5fb9c14d2a357322673ed60629d079b22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5eb85679bd81d4bc8ddaaadd17a3a57a

    SHA1

    3425037203d934e91b4c28be29ac03d4d3a469d0

    SHA256

    7846973142079f3a8d14d33135511a86bb0eda9fc40bfb72b27696232014a8c5

    SHA512

    de75da492c79c989032b89dd9db5333061361d0d3746cd59891715d058d9e4d3eb4be7591d6191370e2ffe918b066412952d69104a2d6a6b427004213ddabd38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f447c5447f92240f149f1450230305c

    SHA1

    8ba463e611f618ba28376961ec5419ebbbf89c63

    SHA256

    2056dc643ff3f0e950ca01d83bd65359d1238600aad9aa85c8ab3fdcfe9dfdb6

    SHA512

    f4c00a79e475f4740b0e1b36df4a21885a965d397b9ba00a96272a9eba0e5407851bc471a1e8d61e440b1f46ed6cda8173cb6bc2f52d3df6b9a9da8171175b41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6fe6b13601f101e8e05276e3cefa6972

    SHA1

    83131fcc2c78c2eea7a3d802e7f113c2e4c49e4f

    SHA256

    ecb70a34804fc3dcdcaeba1d2b5e9fa42726d31f3411b58b2a9affafeb7925ef

    SHA512

    f9d098eb61c275e895589fd11ab1f8cd5e3ff6e7ac56eb57b288f87b6df83e20cc4ef09f2b737b3163a618f7b1b57b58ad8c7fa955ddfe82569ddf8fec66e6f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f5e7fadf9b63e9e97404e93685b5a98d

    SHA1

    8531f1cefc0b023eb55816d63f8d0131c3be0d8a

    SHA256

    382da59b7b3dea64f16a32a1a9307b421105d1f25f3ddfa141db4c1d2be4bf86

    SHA512

    2477923f562d0d59a3bd495632b5ba2a7239190334a28a53fc03ec7982235d0b490edc9bc84819fceabd7dee81e9c046ac5ceb6aef43afb8afcf0c7f3ad71927

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    13a54e0bf2955bec8b842789b3a64d33

    SHA1

    d516b30bd347bdf16720ae3312f938f4d3977dec

    SHA256

    d5f803305098070693656ab09e1460892032b9e567468e9ba7d328402e592fac

    SHA512

    32e10546509203f525b712c0ee8bc9a2daf5cfdec00875fc802d49a0a65a06b4e052d6f949226cf544e2ffbc97543aab41f7f8c415378f274353e598baeca91c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cbb0160a5a922c43b47050892a060f2d

    SHA1

    db78b8a76ec0c9094bfada4074ad4a94d958959e

    SHA256

    1b2e3afe56b260cd752c65a209985f2b549d79667ade3b7bf2b3dfdc6f4140cb

    SHA512

    c7601e6466f7f64794ee3ae23029d380a8d37d0c884a20b6f27f637a0c17ac4631cf4a21b7a4de4a144ef74c3321d2c61f0db89f60ec273c8cc8befeb17a79bb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8H7UVK5L\2254111616-postmessagerelay[1].js

    Filesize

    10KB

    MD5

    c264799bac4a96a4cd63eb09f0476a74

    SHA1

    d8a1077bf625dac9611a37bfb4e6c0cd07978f4c

    SHA256

    17dce4003e6a3d958bb8307bffa9c195694881f549943a7bdb2769b082f9326d

    SHA512

    6acd83dfd3db93f1f999d524b8828b64c8c0731567c3c0b8a77c6ddcf03d0e74ee20d23171e6ceac0c9f099dce03f8e5d68e78c374da2c055973f6ac2db4e4f9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YTZJPBOG\analytics[1].js

    Filesize

    51KB

    MD5

    575b5480531da4d14e7453e2016fe0bc

    SHA1

    e5c5f3134fe29e60b591c87ea85951f0aea36ee1

    SHA256

    de36e50194320a7d3ef1ace9bd34a875a8bd458b253c061979dd628e9bf49afd

    SHA512

    174e48f4fb2a7e7a0be1e16564f9ed2d0bbcc8b4af18cb89ad49cf42b1c3894c8f8e29ce673bc5d9bc8552f88d1d47294ee0e216402566a3f446f04aca24857a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YTZJPBOG\cb=gapi[1].js

    Filesize

    66KB

    MD5

    aa012028297a26c039c37ab25a4bd17a

    SHA1

    25f23d01b5f580c00778e1c010225e5b8c73b66c

    SHA256

    55cd2316edf7159b623e4ec2c9e3a334027c01e2d1cc386f833ebcd35ed87b38

    SHA512

    d346eb082674fc26d562da9a12f36ad2cc7db1f1b35c891a8734284cf1bd052a967137c1281982070688b2bb2e06c7f4967d1c9397311a31a11a8560b9c45fd5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YTZJPBOG\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    e691b2e17de9ec018eca758518bf5dc8

    SHA1

    3238d543acf53b803dfbd260405fa558717daaff

    SHA256

    438d41bec769ff386a2c1555b6bf9105362f67dc3e711c81c6092ee7fbf6ad2e

    SHA512

    5589a5cb408ee8e0fd473de24224ba8fa1453eba5df6e591570810f992160d4f3e8f60f8ba74d9994861759321f5bfe0c4a608636913a8407b5184008457afc8

  • C:\Users\Admin\AppData\Local\Temp\CabAA46.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarAA45.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b