Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    25/09/2024, 22:10

General

  • Target

    f6f3f5a6635b3d69ccbef31ff953c58e_JaffaCakes118.html

  • Size

    10KB

  • MD5

    f6f3f5a6635b3d69ccbef31ff953c58e

  • SHA1

    0918b6286db43eabf543a492482279679904f591

  • SHA256

    5ee8d18b309c0e37ad7169b4944fc1afc09a7bf10ae619c04430f7ad991baaac

  • SHA512

    6974bda7ac9b04653fe6705c629626701926aad0d15b9131978843639a56f1c6681ceb51c5b036cb83db6c7c305da4dff7ac67b4c16f4c05971519496e2cd710

  • SSDEEP

    192:ln8uqnGDSSW0nqZmz84kTXxPGYKEiIm8GYgBsHcI5G0Ed06JeBDi2lk4+FJaFfle:ln8uqnGDnW0qZmz84kThO7Ei3Y6sHc7d

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f6f3f5a6635b3d69ccbef31ff953c58e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2700
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2700 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2104

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    05757d0fae6c7216d24e9c9204f59691

    SHA1

    e889ae00b0b294e710f6dda79897f9dbeebb21f7

    SHA256

    000e1d4f40a43cea8b8d63dd459262d95d828857ea11470b569e6345f910f666

    SHA512

    eb5ba25a432f27f8d42bf789fddc7a74869064ac643cc7318412cf3508488a0aee18d2718556e4402804c64c6fcfc3c149470e73a7d0334bcd80c751692dc76f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    369f1dc413072e8d710dd3d4c8354599

    SHA1

    1ccf00d57dd5db8005b99da3004ddfb0f04b61ee

    SHA256

    1aa233442100adafef2aad31fefc432c3e0236a96fc4d432583c6ebfa9299600

    SHA512

    a83d4d9a9c159ebf2f01684818fbcd647b92ad80aee71b6ece8a8feb3bb9338d8f9cca138a3cab2d2e76f0f84ccd95364fa3aff31b8537be8a63ddae78bf00ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    09193bbf207d22731904cb56f8a9095f

    SHA1

    c7896375583901e68fdbb5eaaf87d775db003263

    SHA256

    17e8891ea7f8fe8d8f3c808d87aad24d21198cae7ece43d6f990b738875f1c77

    SHA512

    c03f720f80b64da3c08af65d606ac5e134d7382fbe28d2bbe8ed2eeec8d41cf8a854dead52d33819801b16ce84bd96cd8fe4aca14c5685a325f9cff3f6790201

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4788a0381deb81a4d03dea76c1bcdc47

    SHA1

    39985424a6796d3181087bcbe598e7810b7463a5

    SHA256

    4621cfb706c95918c82c6301f6df81c32ada18f49518cbcc254e0bebdbd1f596

    SHA512

    0456b086f927c28c7106508ec31b8921e7aafd5276ee1fb457b6a7e2dd932511579ac9a5c293492e4f4e43885f6c7fd755aff5b5ce3ddbf61823a6df052a743d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f740d58199bd5f0bd2150bc80a71309

    SHA1

    4a5a852526e8ba18155f095e8db32dc74993c9b8

    SHA256

    82b58c25f3bdf8a99844f32311a3b503d184f264f7dc07ffe387e85d5a74f209

    SHA512

    d09747f536733efd2f165349b7ec2fb53df05839053b4adc7f389a82c0ee47d1650e7284599592325764bb42be54b56ae19f5e99aa6770e80caaca55df567d03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f1b0a4f89e4c84ab84c34f7e00e2409d

    SHA1

    df12fe60ab86d32f71e0f50fd3a64fc7ac10c6e9

    SHA256

    0cf9beb62e24e9b0d290e47883821ea43ceaf542b4475dbab86b6e5e4f692a7f

    SHA512

    9d6506c396c6cff2dba786ec671132d13c475381d1907b4baa0cf736e6ad8f3f2b717f43e9b7eb6a422f93f3749303f42bef11c251858e40b56b2de06fee6bec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c07c960c188a5d7d739ba43cdb6d745f

    SHA1

    e982220744c24358ae49f71c97f35149de16ba7a

    SHA256

    6e1b46ef24d329d422bd663ee0f208ed45e8ae732a49592e479cc43afb7a8c63

    SHA512

    bcb661225d8fb835b11dc64d260f4d8639e5d8b3c2c1156c8e5a2b690e49d38dcc336db3ecad78619f76f72f336f341db2d2acf88623714bd4142ed00d44d6c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d735190341d3a0dbb107c9623f17980

    SHA1

    d87edbb46b67b9db84086820b698d4ed9e87f221

    SHA256

    cf5cda8d95ed036190d0f67e65c42bf1b942ec7f36d138f4b5edd1cec6856009

    SHA512

    66d4394d71f88bd76a5275792d40871035ccc2bb37e94e8c30f7f1e5fc2211a4229590ab63bc837ce5084a1ce48582af3c5ca3cfb55ff4450bfdb862973b0919

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0fd817a98f8a4a9696b040124c2683f2

    SHA1

    bfd9ec530feb0e3f24d748ca71b594254f36d52e

    SHA256

    563a8844d56f6468ea384321bb240ca74dc17974c3b4dab043541744b3e0a1d5

    SHA512

    5767033dca2d83ab093e028b2891e1f76e46c1b60cde0be209eb0b8d7778e23cd90f74e81c6e5e748033f06c915cacd4d61d3c3dda8619c3b60fea5d3f88fc72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    730e92f529003a4d49bacb0e89a6f843

    SHA1

    d45178c530c87275d33871f32784efe4418fee18

    SHA256

    98b0bc8b876b7822d4aa5e14717c532265b0218e513f3f620519cc6ed4daa2b6

    SHA512

    22230bda2bfda0c2ddcc7bc14a02ef020bc92cc23a05795a004eb9610ea42d91ee10d12a56fc3608d9377045a0a1185456a6a445398920a5efdd419bad6c4339

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b4b40ab9481acd11c51ab1446025ad9

    SHA1

    1277027077ed2fec67f3c04771b3c45020ab57cc

    SHA256

    be3a7f801b64d53b94cc486e282389b3210c4b8e7e3066c9c738be45e760396c

    SHA512

    9353a9943c547dda5b9b3ec322aa15a373be45d3c5e56670a8b4138ebad8f5a459f329b3ec0b9a5e9e1a55666edffaa8eb7f8cb64873e3fc8c884125e8e86ac5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    23cea01cb3744badd98de65af0534489

    SHA1

    6b8caeec16400fc85a278109b2bd285cdc80de11

    SHA256

    dbcd6fdd3377deeea7b36015ea10af145254def44230bf043c86595174ad6206

    SHA512

    7792be5503cc63d27a32aa34004654aafaf204e17825314f7a052ded6ee0be5b86e6de87880b9b8c2d09fda7989d8295b90c4a48fe2e8b45c5943779b7e42428

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dddabd658b1a1e90586b327b55e085b5

    SHA1

    ac58f29bd559e7c7616f849b02cf84b1ba215644

    SHA256

    ccb3b94d798136cb26ce0278c4eb56e7e1f2e0cf75b190212ef6bc0ab5f5a5c5

    SHA512

    74c9d45abffc74811fa6f4656ef785e27a8e75ac3a193e66985b70269d5f546aac47daabb7cf7ad80fde2decfbb6ebdc3b87c9b48871e68f4fdc6b3356aee837

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5291c7f66e2b04ae3eef68c63dd4f55a

    SHA1

    d7d4dc8950b962f90a922034adfcc42ad20e752d

    SHA256

    dba329b7c6c606670e66eafb1c01297281e847dd934c3ea302c00664dba420e8

    SHA512

    6fc43b1b2961e4c689cde0c845fb238e6d8af51501c4a4c5034cfeb66e373d38067549537db6ea99836f5dbb129bb53b6fb12d2b3271aabf07b58960ceb3368a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c1696d1418db1e46c2a482e7f8a7583a

    SHA1

    ce9f12eaa7e33f1ba23184e27304269133937280

    SHA256

    f3be912154b85ae4746546429f9101a08f4f3b2f5b5564fc16bf8e89786ff855

    SHA512

    7988fde549fe5f8bf2d7f016939993a19f9cae06d1a8272e797efe8dd79612788e92f8561c6cad9feda0570e64ce2540251f1e65fbd835a625b63c0ac2abd77a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f32d11b42a7704d1086aaf7ab82a6350

    SHA1

    a01dc28af75a17edbb47acc73daaf4b876b76106

    SHA256

    c4749da5e3873b6a66e87146c00683625f08ee3c6db76441297c64d360b78b5a

    SHA512

    1ee19b63bdad16670aff74146ac19ca57e45e8938e7cadd2a3ca7569e54a926b2a92170d71652f11309ec34429655a184d4e91bd044c330618a5a4bf4e79f176

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    81299d453e552406f800dc0c91c69266

    SHA1

    5b4c5c1c2ff84c1a967e42c6f4d99fd989d475fb

    SHA256

    8b622730cc911b2943a5e25d54d7eb34974515f478f3b03b29823956ac1454a6

    SHA512

    8c35c8606da5cfe2a2b3a7499b0ed7f7832eede0a2058af1fdd31ee30a77ea96046d41c6a0de7fa21cc10c64f765f0fc36e9c4f4e4de6832d9b0a34de707ad98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b62e1a75b1d7a66512fa826b92434a2d

    SHA1

    abbfa2633033495c0551a4ad6f505ca56bd42941

    SHA256

    cd2a406cb4afe47ed4f3c4e6861298ae9232774e642712590bd69daf540f1f0d

    SHA512

    9b10637e53850bccedba53bcb0a1dff749f38d0957ecf75d936f3644bdc7d57a50eb468be9a85e2ca8fabfa5bc11d4c1641222db166c54b34b38b952851b7f74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85b3706d2f47f5accad62477ba93c133

    SHA1

    c014f2b330d4a165e01c69b549dd34409417a5e1

    SHA256

    285f74edbc44675aabe4b8663ee76d5902aee9100c28ada41d30336c25d38950

    SHA512

    552458dff875c963b3ced11eac50cffa3041023d96ac99c39dd940a67decff4f944f43166a0c10da3c350decfd1f96a4088a52a79227fafdb8985afd3579d2c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4f6121af981276a9e5227e9798f4157f

    SHA1

    a038a51f10d3c7ba2fc8dbda831247e42b33fb43

    SHA256

    8f669a835f63f8f11bdb144d49b1da4fd84eb5ac6366e61d4730c95c736c2d1c

    SHA512

    b93a4d74ae3461ce4ce57ba2f38d6989b228aa0f62281a761288f8aa771969ad787dae3b85d935c814bd0a33db70911366773c8abe0739f9c7adfbe229c3fc63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    a4bbaad04a6e7427e00cf2727439c5a1

    SHA1

    01298504261a8f34e6e74ee658fa76487f273888

    SHA256

    018677676aeb9c497dd3fbe9db2e7e82035dc7136bccf61cccdb6326a3c351a9

    SHA512

    5db209dbab8d8a7a42dfedfb76eba5c5f88c79f70b1376774994fd41e3da5b90b9708cf5e35285d059658931bd01b8dc5c3973fcb2d38c8ec110a31790730df9

  • C:\Users\Admin\AppData\Local\Temp\CabB37A.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarB37B.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b