Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    25/09/2024, 05:23

General

  • Target

    f5479310141556798dfa4ee4205379c2_JaffaCakes118.html

  • Size

    31KB

  • MD5

    f5479310141556798dfa4ee4205379c2

  • SHA1

    ff728b35954f8236f340f6dc59b37befd0c13103

  • SHA256

    63506ee6ab8b34adcecdb1965b47616770fa0d0711298706d6067b5696a0011a

  • SHA512

    81878b5c07121864a84d66157018df1a054bd9d74c31a4684615b403a9aaae0afaa20c8054517dd63fa1b80f304293190c0225e45b8c0614ac0ed19ebe81660d

  • SSDEEP

    768:SkoKHCw9jn3KSabPaVoOdtYOZEdTbC5BmD7/Cd7:SkoKHCK3KPbqBj

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f5479310141556798dfa4ee4205379c2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1852
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1852 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1052

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    76017b147f9b35acaf264f28c287facc

    SHA1

    497e41ea47a003dae053825e497a907cf426e850

    SHA256

    937d3ea46533ea8203e1c954e809ad3cfee4fad40bd78eebdd525ff03bb28972

    SHA512

    2460499ae0b1d7e15a0f189f7d993a4188d611eec71c83d1823aa81b2488ed298d082471c9d575746291f3f62f17acf52b3c3bed5aca7c2becac01652761daa5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C02877841121CC45139CB51404116B25_0BE30C8E6128C0BC8455FF6A9904D7CF

    Filesize

    471B

    MD5

    eaf63c07313fac947c1cf0542c0119cb

    SHA1

    de960238447bb7651f347ebde4a8944bf5dc56e4

    SHA256

    147778df5d770661b50e95be061fb3b1b7544d098fcd39b15b99244f7d8cfe26

    SHA512

    ba5a14bc872ab493e9780cb398ea2cf663ae2f477c3fe9a1ffe739351cefd4c374000f3ebd976abdb86ccf865fb6505d58196bd9bfd7c8164f8e5a4749441894

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    0690cbe2f62318d18dd7e79243a71701

    SHA1

    3fe4f386d4f0d97b58e9a31302799db9b4f1a891

    SHA256

    2e9d75197ea3c17e8ae549f0ef3a70e08d820ab24053ebf76c8a4983d4864263

    SHA512

    1e2ec152737e26b3347e9596526e8c5be9f078bc5115b1ae60aa5f9632ba30eb699a81b8061e6eb96ea5f82ba960cde52f8a301c706edee359dea1983bcf8556

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    ab7a2f15b654bd9273c807015d60b3ad

    SHA1

    01c324a649f8b698f858576eeacb133d782d3f83

    SHA256

    d74772b1577073ee6201366e4f32ca33fe3069958b29e7bfef52fc87476bcb8d

    SHA512

    d3168988164e35adf9e8c842809d3e722eb25fca6f10b8df44952f109582540f1f6b92a319e0e9170d313f436529600f29fc5f0f6e02fca9accc271698257e17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b63e83bae99f550bdb9f9ce4f9d2bcdd

    SHA1

    07cbab8c563a3f0efe12cd176e7ccdd495ef4030

    SHA256

    3697f2ef9f932d154c3cf5556dc8bc5d5bbec54290f2ba827ad15ee2158d65eb

    SHA512

    79bed06cf9eb3190f3399fb74c5a8e09183855b0e46051f4990e297fcf0f35d2a51b1d2e956777396c95530e0f15371c45895fd92687b34b0b0b36c350f8ec73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4816e5025e3d8245f558dc8feaf86777

    SHA1

    e074d73d0bf4553c46b56e95b7ff05c4542b9f65

    SHA256

    0330198e5c9f700fc68ed50e17315b58908a9a98012b3fa3a05e3184a100049e

    SHA512

    971531b0ac0ff355bb29fb16ce13c033126a70e580c317f101da1cd2d5044b3f710c6a14506132e75e1efb85d6112089d9e4f763ae76e84ad38c31c7c214dc0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc1a68e6bb61d174c7ecdec7564b375c

    SHA1

    54cfd3740051ceefcf4ca03bfd47a32dd9bd7ae6

    SHA256

    98ca146b156eab12684a208d1c49b4f2ae10d1ac54ce661c3c0b7fc70248939b

    SHA512

    ed0e488a8614bb3e43b6c3610f7ba0f2623037803882e0557c9ab0c5cea45c76e116a3305de134165a4c334d77789572ef35e09ce6c3485d0c0ac87a4403e280

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d01f959fdb5532f936c93e40b08274b

    SHA1

    2fd5ad8befe22da3e5bb278c9715a18336295ebb

    SHA256

    a6168a2e8be24d6c3a5a6211b5daa575e12e5960e84d44f09588e21cfd1753d4

    SHA512

    9144afffdd739a8c06a55ba2cd7037ef4d6aa6230de6058b30ae0c802a21168f5849343e3fd0799b4be3c7574f2421bd47999e24aa6eb2bdc969f570eb4a4647

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d35242355080c51596f36721ee17bea

    SHA1

    10df41676796bc60f02255bd680fa1daba9157eb

    SHA256

    d47d59eaca3bdc298dbef1cb8ffa9bd0eededabae6e54aa2cb47204f8a1fea40

    SHA512

    237a563c11ef74ea816fb599ff0ddf8af2105c84303c706e010b033d0fbb92d9c90200782764cdb3a5556cbb60843beb0f46781953bf94ff4a96c43a9ca6cc7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5af63927cbd5f7a0a53d9090486b4aa9

    SHA1

    d388aefc7959e38e48d79a6f2010932fd929e0c9

    SHA256

    ba8419b99eb3a461dabe8f4b085659fe41f5a5a0dd53160d5f418f6b85ad66c9

    SHA512

    f94eb32a332baadc788188885e23e4e4a26ccabe1725fa4187068a3a4db49d071ce5e624069bca7f560beaeef292bcc9c980a69a57d568a8887934a42c6103a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc1940ea7048027f0467fcbf1b1495a0

    SHA1

    83d3020e9d158ade26a267868ceb98a5ffe13a3f

    SHA256

    3865b50ab74dea882c6dc9a3c575389f42e69d7b7f9a2caa977015034ecdae1f

    SHA512

    ab706e64eb61aaffa99fc99c673463c6bf3c0adfaafb2d4f8d9dd31c80073b481bfaaf4ab787069bcdd1241cab63db5e0a13c32abc946565338e0414c02b4e86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c5490760cbae5b78dd984daeea53b06

    SHA1

    15719e901c7147eb7128cb6fcf6132fb39448d88

    SHA256

    60ef5d3fc7b3373035e14f2b8b03b36600afd60cad1bbac57c9568a7356ef560

    SHA512

    2f02c0713f2daa8a528bc870e4df14b8bbf3730430d46d1fc310267467be9f9963bca310a71950fc4d84a73e6a2a825d41f452ddd2cb6c286f53498188e165ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    105267a5dc0aa77a0e74799ea72da358

    SHA1

    fcf71a94385915c9b4acf9c8b7229baa05f639f8

    SHA256

    23d96d53e4217215e212935c12626ea59cee70aa84c6632c9547046028597a7a

    SHA512

    67989dcbbc0d60b221656d335c144f2a9897d222229ab510b8dd3604c0384f2fe4238a44dab0f908a796600918059876a0b1e0a3b43fbb132d5e823a7802a6c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b48a1e2f11ecb0467ba3315a47eeb26

    SHA1

    43e116649617648bcec98dc6de65fc8be89e42f8

    SHA256

    634a9bb8aa3fed9b508d174f342b837207ac8eeebb00ba9057f2cb2a1182b636

    SHA512

    2aec7e612ef50beff7d4b25aeeaa187ede468534be6ac8c5b7d1eb30da28a9c95a5b4aa58a7bd5c13dae85fd5ce7db1d13d0d91df110e856a94419dc0cd59605

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2cc923f7d83e5960be67e9541079512

    SHA1

    bf5cb288546971fba38c06d3916df4607a348d3d

    SHA256

    a4fb8a7f6e080ed22e5257647c809347ecba8b54252a4b93241a28d5b4375417

    SHA512

    a03d8f3d03d181c79c3eaa75b39abda60d37ae6d99d43b58a74cce81ab78337334a66685d004ce21a766d0eed355a1f5f681b65eb60ac86d7ed5949a04fb7505

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70bb13af88030e98ca508569edd1195f

    SHA1

    b6099b9bef44d54c0bae8ad0735d1a8c7634ddad

    SHA256

    ec78dd8b36b7f5e1c7088ade6785df039a85a1627684e0f11b06f68dc8830072

    SHA512

    d8acc735c477b87ad655d0f9ee0a79430a5f59e69bec2bd61d026104337e42b27c7183cb9f29efe4d5a50775efc624a63d325e7fbeac0519fad5fb7cb1fab83f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2393eda1c381ef3d6127e616b285407

    SHA1

    a7b79bc1af59e245077bf2379b12881a6cccabc7

    SHA256

    9d29bab6cff7818ba2bb2e46d0c9f111eef3b6eaf03aefb1d17b505d6ea63409

    SHA512

    9b807e2cde36e4c3e9604fa85cac9725f3c0da75f388dcff0ba03c11a988f695b44db6de7ab91673b120350e71d7a7912e6d7e8ab09dc8779fa6ef94c82fbc8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61130f37cb630a2181198532d1268c8a

    SHA1

    775a09fb62e394cde801f97b87dd73c16bae0985

    SHA256

    d9840ac0d8997b2752fb44ab5e2d5f021ae55073ea7d8ad8101b578a17c45c57

    SHA512

    7ad913818fe8e3c6e91161f0d193bc7f2237159adf448694940e189c8b3a42702dcde86246e6ed0b6da229e6fcf8174479554cee9259631e3354b922f989be4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b512fd3be189be5397269dbc8770a46f

    SHA1

    bc484672a34d35ab4bc11cbde9e3521f6c5b1cbd

    SHA256

    5d98b1c699d30828e4f0aed4337f52cf456c36bc6e66c2254de69e25c7a57179

    SHA512

    ddcc5037bacd2c2ee8771ace4cea10fcb1e306ef8df251e9834a221de7de9c3f10ee0c4404d3ec8d253de820ce7999cedcabd9a43869d874432e600d71cca302

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    275741c776b3bea800a943515f5bdff6

    SHA1

    76aba61419dcf179d7917e861e7bda59f2a6fe51

    SHA256

    d97c4ca61694d240bebbbcb0c8370c3209c94de1ced75918fb75dd5d3f762e07

    SHA512

    f7017d489f2ab274c66a2a82f2cc8f4b298efe7b78e73f23ed7433c1f49069d37ed286ae334428931b0affe4e496d17e0f7413ec0d6025715ffa0e08ac886f9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    194c0bf40d8b851d7a43f03838626ff8

    SHA1

    6ad23ef49b83f674fe219eccc7e75be0ea487b2f

    SHA256

    535a728ae5d3be1ca9e18c0eb4fd67692f8580bbe47f6f590b22e55a4e759c7b

    SHA512

    79eee4655023537daa77f11a1b7b0268108f0769f72243e52223c155454cae8fd15ac4dd31cb9ed61f8b44765ecaaedf09edab027d73ebdf8d08536492df9c14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0f6fb9daaf17ec010cdb07b7779f66c

    SHA1

    d539879dbb5a63100b945f30cab97027665a2fc0

    SHA256

    20680d9f8470fdb64fe1958c23fea4fc1be985c314e1b924aff30ecd488fb7d0

    SHA512

    26ede74376e208149667154aabba251dbe18b8623102a06a133bdd2a8d665a71f4a2d75addb6a6991ddcacd7be536c03b42f66d8555c95269cd4f438d2a0867c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    065eeec37e514120d656b02401c9e8c2

    SHA1

    755ebf85f69283d42879718cbc160ddb3646efb1

    SHA256

    3dfab430d66e7a83c546085ec4c024d2ab4a184b41577a86058197ed69a4a6f6

    SHA512

    1d33e687a6d769eae5bf21a3cdda99aa6b6942135741b00f7c6e32259a46ad18a5b98663ee3c116cb42f3f193c31f2fb3f0ec23fc8c7d443c38ea81411c805a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    257d45992fe63d5dac3c148eb0e72dce

    SHA1

    5369ebe7d1d5081dde840a1f50a1b30e29b5f22c

    SHA256

    defb3995aaa36f7a814080668c9b043fda14c503a4f0737ad239d6333877d46b

    SHA512

    8e7ea501b54c3f1a335c740c7c95f506259b1ed44e3664ddb16e3f76a58ce77b1d8d1ee30776cf47e897ad869f8cf42c868e04722f2cee76244854ca90f0d65e

  • C:\Users\Admin\AppData\Local\Temp\Cab710D.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar710F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b