Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    21/09/2024, 21:14

General

  • Target

    f0a06c4ffb67e1e3dd4d6da1509d7644_JaffaCakes118.html

  • Size

    36KB

  • MD5

    f0a06c4ffb67e1e3dd4d6da1509d7644

  • SHA1

    6fdddecdb84e0dd2461a75e576ef25dd43ec04d8

  • SHA256

    6177ff69c7eb5eb706c80b22854d9086052189dc99953b96b84ae31f4c10e250

  • SHA512

    20bd6d0a5576630aa650e622b3a3ac14cb31e04311775cd3fb7eb333f4e5d628af54c963a943ae7507612ee3ada90c82146ffeb25dc8a143e593998cff33149e

  • SSDEEP

    768:zwx/MDTHNl88hARzZPXmE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6T0ZOT6u3l56lLRF:Q/vbJxNVTuhSi/p8eK

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f0a06c4ffb67e1e3dd4d6da1509d7644_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2548
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2548 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2400

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12

    Filesize

    1KB

    MD5

    7fb5fa1534dcf77f2125b2403b30a0ee

    SHA1

    365d96812a69ac0a4611ea4b70a3f306576cc3ea

    SHA256

    33a39e9ec2133230533a686ec43760026e014a3828c703707acbc150fe40fd6f

    SHA512

    a9279fd60505a1bfeef6fb07834cad0fd5be02fd405573fc1a5f59b991e9f88f5e81c32fe910f69bdc6585e71f02559895149eaf49c25b8ff955459fd60c0d2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8

    Filesize

    436B

    MD5

    971c514f84bba0785f80aa1c23edfd79

    SHA1

    732acea710a87530c6b08ecdf32a110d254a54c8

    SHA256

    f157ed17fcaf8837fa82f8b69973848c9b10a02636848f995698212a08f31895

    SHA512

    43dc1425d80e170c645a3e3bb56da8c3acd31bd637329e9e37094ac346ac85434df4edcdbefc05ae00aea33a80a88e2af695997a495611217fe6706075a63c58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    18b4720669c097f6179af41584311b65

    SHA1

    ac8176ddb289b8937d16d8bb372e2d4d54e66e98

    SHA256

    f9c248ab24889f17eaec3050a02ca730923643fc73ce75dfac5cb5e98e71cd28

    SHA512

    a5048c3ae62d9fa5a3df71a0393e16aefb2f9c42cf9225939047c6eb78f7a675ad0993f40917c2e2f9d36e8ba20da0746e0ab43e019eab295f8311fb03e4a5d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1a201ddd944bcc5c58512fbcc0ca81e0

    SHA1

    5a9d072b985253b06d5158a0a4a1b1ab2f262329

    SHA256

    e6f09e6f818093dd7c80afa040dcbf35cebe6741a1fa87fd3d2aacd43b8e822d

    SHA512

    070120cac93faf5c5484dc66cd9fd6d608378c85f18a202ce16c689a566bd2f8ca2b07ea2f91227c64f5cdcbb2aee3f98f85cb3b107432259a162b1237befa7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    59626d805d672b3e33fe341e9b588c92

    SHA1

    4da4b04771b8c1289a3905bdf544c81a0d36a6c1

    SHA256

    e85217e6939bebcd058c9662fd4116c8358eae244ef7226f21062461bf828dd0

    SHA512

    f6fd023242d09e9e63b6dbbf4338a29622ee3e9fef498c5c71403b57fdb3cbb2037f744eb15b7ce48285516cc493bf85b016330e28f808e4f5c0efe5e43cff42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c336dd351ba16c9ca15ae749b072944

    SHA1

    304cb0d3e283c3d690351a1a718d47b260d3c714

    SHA256

    5e9c212d02fce787f4b684963abe3bec34e09245f745df2daf6be615295aa350

    SHA512

    792c6ab82a74d953ca18352fe792639462dbf04dac910268911be2d528102aa6e20161a2504b881acfb3f9015857acdea2c364deca0ed49964d298445f1616df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4cc99e05aeb07a8eb99bb57e3754e4d1

    SHA1

    1c6c73eaa5d1850ec4d7b6eeddec9c183ea48914

    SHA256

    4b348404534abe4c43ae68f6b72f4758424699f64e1594f8d6c672bc741720ea

    SHA512

    779510c0c39d9fb7d00b906ae4dc9dbac3f43fee785dfc5b633a42207e6e3bd22321d3334b14f6250c4ce1cefe52b6ebd4c02a206cec6b6749ef0e12525ef580

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89b138bdb8640a7db2c76f34149107c8

    SHA1

    ae6b7ed222a9e2bed9423250f42684df975d353f

    SHA256

    a26f8702762d944c16f0e94190462b523d6e307497141489329886104c8d2b89

    SHA512

    bb14f7bce2b0ba41fe68c6d7dbf596e9a85de0b00f62c26ba6d394efc919698baa193c3f444902e08a1bc7e9501a556999076ea3def4ca18eb04b116272e0c73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b63b612b7eb6e16a97f25a31c7089c6

    SHA1

    f05266f5835bcd355dc17e9fe20826e497d83049

    SHA256

    a874eb3d8bb0bde1aab9e283a18ce90819fa07d01b53328e2f4bd60971fef9e5

    SHA512

    f3a5f9e9c06ef02a5350baa1e120dbf1b5a09193d1973e1b546087ae00200f381949233eafd54edcc1b1f69fb2c51301e5d19dd34957af1be356f454ad82d13a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b75de0b61f5ef395801ba562c01b8ad

    SHA1

    c1aa20de3b77d1863b5e0d5665d44a587c0b5d21

    SHA256

    889f2c5f4a6ce255eeb6c637da6916f33dfaf020902d32ad1e881e1c710535ff

    SHA512

    868666338e774022f54c48025b705680fbe0f1988fa550910545e818a7d38ed15e12998d6c034364b8366690659e96ebb88903426eb424c53cf3d036f765b502

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ffff3fce5a703669c410a9688d42f798

    SHA1

    6ccece52284f9728d8fefbb69b2a2713f0436f63

    SHA256

    06ef644ac4360201e33ea2ee05399a5f208a494b57fad2b542a9626eeddcdc2a

    SHA512

    d7a05a3e17b23d2b9b06b71074dab34c499bbf85c20a506bd7a59f540ed5b52330a21c7f1a95a0febbeab4514da173f94efa48d9c781ad33fb491c877280db71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0eb5e49483260c84d677ccaf39a14c6c

    SHA1

    254e0863e2a3be3a8f7acc85e291fb68a0f63552

    SHA256

    f4eef15538c870dca78f8280aacb6941d7b30de065f938133b7565935f4e8c74

    SHA512

    0c19254b61de7900db6b20daac09f557bd547beac54ba440815fe57ec27d838cb181cef6405142c098812d5dd6cde2d981f5db699839658bd754d8f1c03d2745

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad316e8db08f993b220913b9fdf3a8b3

    SHA1

    0c64cf5106c552587c78424fdef22bfc4c431ff8

    SHA256

    5ac7d36edda9c045b5bc9fad4ac7e49a9ba953b95f7a4257aafe6973f0f89a90

    SHA512

    047e6a43ba3fb9161d6fcb06f1066e88e41a3f9647ebb7b77c111f3e1aba6203237b731ddf6772abf3e30b4c905c0902ab32b1a53e130435e857a4d1d241e704

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    200ced6ee1b2ee19d04338aaa735a129

    SHA1

    ee2dba5d8060daf9362b9fadc3edfe4b8857e4b6

    SHA256

    48e436012979924e6031a92d94a23c54bde02879ca85799370336d174aecee77

    SHA512

    89e75e80ff7aa4273191e6c7f8e58f96c8d3ef778cedaa9774a9d06bf32ca69bdbb1b1d5bcd0fd55ae4ff53ef228154b7420b4a7879423d311107d945b1c7d38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b5e482f042711632a19bacc6b30f2e1

    SHA1

    4599e260d3ccc2413dc73df99b3198dd06c2e85d

    SHA256

    24f2d9cfb356c19770df7ad8f1c019a7dfba97afe34f3a7bb15b75179d8ce297

    SHA512

    b3ba63858fe35729c6be8266730d2b859b9ed84960fa2a85e332935e4ee22d704c54130f02bf8f05c3e02a228a5441edd10470cee53f472a627e2566747bcdc1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c7006b12c41d918b11d8d19a3ed52ba1

    SHA1

    02dd7f22811711a87e3ddef3179df65f52f61f41

    SHA256

    78e187c2f3123d60f4980c1cfb203b2e2fb2c08dede6940b461a0ce4a4e2848e

    SHA512

    a2c856f64ad295404422adc4c670b3f017f8d8ee4921fdff61b046184d4c0373e9b096349fcd54b23f9fa6d7c6b591612051ed135f00da02deb505379de3f97d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    878505d8b06c32fe6b0b8b9a6c0d3b05

    SHA1

    4353ab80469aebc42bc85c39034d908c282e5d5a

    SHA256

    50a52c4b3fa545608bcb77c476265c0360c67c369cc6a7eda749fefe1314af4d

    SHA512

    2a24f4ea110a322050ddeb1adfe649f0c582ef19c1ac5648bfb457383c3154bd2563c154900808f54a8c8b765b1a3b3ab4d4dff2f146e56bb78ad19221fec1b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a83bd71c4971e0ce99d3241583c35321

    SHA1

    14cbe56a69f7bf37c0800c32bffbd733ad67af8a

    SHA256

    b2381f7e7a3f2fbda2bb19dd585c147816db24546b279882021a042d2ca17c63

    SHA512

    0fe3efc3524ee5902fd48b3ddab6bfa1bdc78d2033a9f219c2375191e1e0bd3265761f23e8b1c58fd45938e752add24941e195f83bbac98e95f565220d4aced6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    07397e95b3d38b6fa601fa4fbd63b636

    SHA1

    aaf80242f65589f3e07b168b6e94a927361fe5b0

    SHA256

    13077ac865aa648c5b5e3c8dee7127f74aa61fed8ab262654021fb8259e35551

    SHA512

    b784aee06c50d9d2a69a3505f71215c282fc60e9a3673275cff648c9e410c694054265b6a9b40260b885fdc2f15b31466e64b4c5e510561ab53a4486daa96052

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f4af7d2a30d2d61b7f98c50ecf84d6d

    SHA1

    798e2ba019961bacec845436c7dfefc731c2be64

    SHA256

    9681a430cbd48b96c2328dec9ea1fe4b4850357fb89c3fd8f2b2266d6969b715

    SHA512

    afa3869a915d39978e20401e1df478c19db72c27de514360e6d29ccf070dcc63df9f1b2b9a2a7a97dc4952a6173ce8532bcad0ed9cefcfcaaa20e54c11083ba1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8460bda3c318bfc56c24f0042cde744c

    SHA1

    0fbaaa0517a545fc7a0edbd762cfcbf124472891

    SHA256

    942f2f49ff289eb460a3a2bbc7027ad64340b417053695388906ccdf41c6987d

    SHA512

    3b309bd3fbff7fada13c88336c350b559fa5b4af8fd4869f41fc56592dd44382d29b589d4cd915ed61f02eaef92209bf94341028bcdaf2fad9985dd7fc42b405

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a15955705f1338fa5b830083fd1951f

    SHA1

    c15a6ceaeaf836d7d816ecff0e00d9275acdc2db

    SHA256

    61e93c2714666e79cad5063a20509091bcb3ff36c4114284e898bd11a7f029b3

    SHA512

    affd4102a083b2403861daec24a096feabc28e4a1b5c673c5175cc73ad018a84254b1c7db59ec51203242d0ad37f4ac16418d96948eec7a79981b58b62e4080c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f2f3ef06d1f7fa88d9cc6d66ef79e732

    SHA1

    65a8c9a634005c3f72d55abc4076130fe0ff55c5

    SHA256

    9a2457f6073812fbec0f37b8726b477aac2f12533cffab6fd6eeeab801012789

    SHA512

    0ffd5a51b6f6e8ee81e758a06ab8d21327283c6671bb76a9f7b73a2bfd852d44bb2b679232c2b5031e90d8160da18d9dcf21ee4138d49b4582684ab929bf60eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8

    Filesize

    170B

    MD5

    b698d5ce4c8897a8938be7a088d26a6d

    SHA1

    9110385c8067fde4b4315129a12bc4c782a9a173

    SHA256

    3decfc96bd3e242cb6f7c5cd50dc7d441a04b74dd4085659777fb90f0800568b

    SHA512

    addd2a25b30f9236a85dd8a90fa3d774df9b3644ecd212a5eddf493cdfdf2a7f45742cc207c439a9ca585fed93f812988e24b284fadaf32f987c2586f86936cf

  • C:\Users\Admin\AppData\Local\Temp\CabC037.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarC027.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b