Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    25/09/2024, 10:44

General

  • Target

    f5d4ba9f58f0a919e821ece850525686_JaffaCakes118.html

  • Size

    57KB

  • MD5

    f5d4ba9f58f0a919e821ece850525686

  • SHA1

    8c5ad7d634770a6082322d4f014820d5db83fcb7

  • SHA256

    d013ab97afc73dd2f80fc95fe268a80e991c4363a44cf57711f4d63fd81facdc

  • SHA512

    ecea71cb3dadf4f78dbe5cd60c09610876f0688b95070bf727d4e88446c5f36121226a5b4aba16352f30a914acedacf885f1f3e8179f5af79bd905bfcfdcf5cf

  • SSDEEP

    1536:ijEQvK8OPHdsA3o2vgyHJv0owbd6zKD6CDK2RVro/XwpDK2RVy:ijnOPHdsL2vgyHJutDK2RVro/XwpDK2m

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f5d4ba9f58f0a919e821ece850525686_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2232
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2232 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1652

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

    Filesize

    1KB

    MD5

    55540a230bdab55187a841cfe1aa1545

    SHA1

    363e4734f757bdeb89868efe94907774a327695e

    SHA256

    d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

    SHA512

    c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

    Filesize

    230B

    MD5

    d3d895ea5e43fc3936173ab235603692

    SHA1

    129c132e73edcaf0b778ce4c01a34ef0cddfb0ee

    SHA256

    a8d755cd10fb9273a7a014501ea4cab9b091da25ac7ffbda37a71b126afd40e3

    SHA512

    eea92b3c23ec67c11494efc205858714a618997da47d809e3d0ec06d387ab3dc667b2b850e66c2336d743d0de2aa037feb8ca04efab4eb5128b3e65769234d8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    d3b522cd9db30990069807421e1f8b96

    SHA1

    278c3f5350046f7112cd50b4624d38994eda6234

    SHA256

    011e6f71b24fba9c16cf9d39adb65d1da9fa5b088f6d86b2442db72ada8b568c

    SHA512

    70c23acd22aa21eda9d85c7eaa04e1a74d2a6059e519ced17447b1c871c658554dc2ced0d8547d9f0c21ea037fb1bb48349f3f2c1d358468dd64a00aace2ab8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    610cd090522bb4ab725af12dee08dc31

    SHA1

    ff8e252494034110002043f1f509842cbeaac4d5

    SHA256

    a86d74de33be6e397e0f89aee1d5609d074d1e8d3199da67403252b3843c9ee7

    SHA512

    09013742796f65410aee54b0cb65e03e0faf489d7d82a054269e297114164849a2e0faa64b90bfbc0f48a8dff8f35472c46d28960737a76f1ea9fbc083d3effb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c04058025754a15cde56554aba515e1

    SHA1

    4bd3d4ff9adf8b35d8b07067fc7e94eefb121423

    SHA256

    b6fc73cacc122760573056453da1f2beb1d895302c1e6ff38b40a013f80eb529

    SHA512

    b4e40686f5e17dcb422e42a9ebf19183a97792d5c92461e2e1e2d0ad5298e0d706812f87fd295559ad6a9ccc1e97dc95d85adb20ac7fb4845610492800240327

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c64f953f6d5990ad1eda0912af098ae

    SHA1

    fc4aa9144a5fcb2897eeb4d359a740f0c73bc951

    SHA256

    1cb0a2ef31e44753541cd2132b3823e6867e2a058007b6aa7b8dcbf10d5b4423

    SHA512

    92462e476bfa9341c3455ede3a92765faa7b02dea264ac2102b9d51288cd38f3c638864bf9daeca51554bc0319677cf0a79143f29a083b0c4e982eb2fd94eec8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c8ef20e6fb99f9aa78d884674d1bae01

    SHA1

    5585ac339fd80727304aa6f597c0a4c8882b4c05

    SHA256

    6d3a68312637f1459b9498b86429b6873ed1fc7f841259595feba9ebae3ef0c2

    SHA512

    1e4bf1990c0963587591f682fde8faf04d2b845fb6cd3c997f35ceeb0de768f95930c6d999316840a51b5a7c88beef6ab9e83bd0657c98af5b80525fe9e878c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6aeca0c290bec7ac9e81b270ee4d024d

    SHA1

    dfb0e4b422bd428e1c5c8b997f03fc2de164f337

    SHA256

    bf3773ad5d8beeae5fe6ed365d430a776636608433e98550cb262d9cc0cb47f6

    SHA512

    2d2a9c52ae4563e49b49fd96c8c267db9dd2e1ebef29db4476f6304638e51bc4b799c321d0da783f757b03f743a67672dda17b66838eafca6f0557715d8da406

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2bb40a06cbdf3013b15ceede82f00ce5

    SHA1

    22753a8f253f0bcdff69aff55528609096709b64

    SHA256

    1fdfd0f0791ece54666a65299c82b2c787d4dc08d24fc9110d33e6c9d812cebf

    SHA512

    660600440b3e9764151345187d6ff8468753e14d910bf3710a2dbdc7ad4224f2d9d3f2e38eb25acd89bd146e8f979717552f0cd5c9e09aebfdad6f44e8bc5032

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c42d59a9ca4e73cba579ae10affa51f

    SHA1

    a59981dd731f55b8dbe03f9f745cd9b25d192e11

    SHA256

    f40b127a6e0978f26a8d2ccbf8cb1dc7a65311ba195c9433107682c30e6ff552

    SHA512

    b59fed02cc2031a70da51daa41d30bdbb3c43c0388ed9e43e8bc9ced9aefbce05c5b2290b76a06c976ee59dc2456f7fc14f4246a84440cfa2a39b507895557eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    026fae26d9c56a032ed1754d79394483

    SHA1

    ff5e859e11112a31a9ed0ddcc929bdc7f58458bc

    SHA256

    59af4650246907cd0764a8a15deed5a052e0672c770468aa66a6ecebe7a357ee

    SHA512

    513971f86546e86397de3e5c61f9d03432b8c22e3cd22c38d4878b673f1dc1c2f4e3bc7b34c70bac9785b08040a9447ab6b18123ee5fc58bff471f33352af01b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1bf963e87a3e12174547df2fcb70922c

    SHA1

    be67ee35632619b981c8546351dbdc22d35e2333

    SHA256

    361b146a0ef3f14095c96b5c5e44a6e50c9fc83a578936ced4ec18fea0791826

    SHA512

    746f10a0e2b521bcae6b736485395666746bf9b6f94bc896530b417e60e0627eb5f182ec1d22d138e3cfaf6c87a735c22e8e8ec25407d3a7781a611a2dcb54fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e282a1c8b73744d2c508c131570d2652

    SHA1

    e6e31c62a9449248b024806329358b316d86dfd2

    SHA256

    1523cce7e722a72ed05261df082a0eb539951934fb8394aaedd46b3acc858334

    SHA512

    656406c8f040dc01ed97a8609724d1b84dc8b76086555634e9f9af5ef8510b476f614bda50b9c2d0bcc19978298fcfd22e6a0a71f5cd67011a51ff22d68928b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f8025fc194688991815df06d041d9a33

    SHA1

    cefc4864daeea07d59766973f6b1713ab45c39e1

    SHA256

    e46daeea1927ab7bd52cdc50f4c87e8069cba27462b19154cd50d1a6c177a7fe

    SHA512

    0086858668cad98fb74c4b433a17d156801b10bef973c7690805bfa0349f0335fedf325c601a47a470983f1424ae692dbb2207a43b378f638e0912dde9772f72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8fe34027baab1e8d9a5e821a1835766e

    SHA1

    69df8fb087e4e6421c42a662d6c819977f898a7f

    SHA256

    c111cff00142cee194261c1099de0c73db163fdb4bcd737744cb8cef47491e79

    SHA512

    bce95dab0aa3790b698e5731239777df7e76a697b9d475cd36f1a4bcc9ada6c7804e8a7f647e4ff9fd1de4738a72c1b088a051860bd10c72becf3e57e2bf479d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1cbdc1b88753d1db6bb262d168d83fa8

    SHA1

    f801a5724a218a73470148e8a47b9ac6a69d2a0b

    SHA256

    d96ed51dc7b106e20be05fe067320bc375a6ecaaac942c8723d03c7377dd2708

    SHA512

    f658e6cc3a8d0af0d771457d25f05394e9fed207e469f31d00d8c25bab057caa136c002f056349a2363cc41a6dd5564089dda2525a6adea5bc8c76ca252be06b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c86f878dab8b42f52c763dd21db28674

    SHA1

    fdef1a6e531d3a4412f566f20c253ae0ebbfc9c4

    SHA256

    5d063eec99513c57d4cf604badd4d3e8e9ba40ad564058a1a9e2aa07dd5e17a2

    SHA512

    3107b1372f4e05eb0548f1542b563bb200ce6f97bd26f960d8ec32f26c0e6053a9b0e9a867ae4af36a679da95d8e4c4249dc6a955ae03980755bd58b128cee77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3581f4f83dc7946488e67d0925cea63f

    SHA1

    c0b19ecfc6a11d56a11373695db5c169063fbe21

    SHA256

    779b5a223be6b108a36c10d510a87abe7ee03056b39f1c7ff151017df78a9898

    SHA512

    b9b2652b30bbad19a50329e39550f252c9a178ab86084ed2eb66d6abf5ee4f0f11b1312d65c2a715c901a509e5f53220f460c814fc7434555f6827e22531d518

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6212538616dc31b029c694be4863d6b5

    SHA1

    590ef475bffb2a26c1899246075bb68316645f91

    SHA256

    cc74ca8339e0ed64819606457734b9af4f4b782e6252d65050b0542b2539ee49

    SHA512

    d3ed5cb5370bebf93aeb8f91616c77f8bb80630d0546a88590bd173fd4776122fb16b147c95a4eea4307a3b126058b5dc9d04a0cc5c15b5c7065a44631a93182

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    571bd90f7d58e55ba627857d1589e4fb

    SHA1

    c6f81d535586d829472d831a1bb784db9e6cd3e0

    SHA256

    d05b7ce210e2a80b7eece16dee2a9fb50b5a7b805dd51953157a35c0c16e24c2

    SHA512

    290ef3f385d994d11b0be242c3f740352d03835d41be5e3aa04bb1351d74cce1d627dba36b9894de38d286641f2b384140b8b5c4aafceb45847892f0923156a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    545a919935d06952cfb589b05b8c8f71

    SHA1

    40fb2983efa9a19bb17c2f8729ba2ccade08ef37

    SHA256

    a86cc744cb3966052098025fa6676972691e4327d4550a9d67ea16a5ab5c6dae

    SHA512

    35470e3a5f8df22bae2ecd2c3924266a7c259a3b44caad6b19cb89e09d4b377b4d974eaa7dce2b0e9794317a587547e005f46b9313c6b2671271fc439aa7982b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f119defd11959d6dde60e05ede6ac7cc

    SHA1

    65350cc1ed24ae24df09313f7303eaf76886fae2

    SHA256

    cc20d3c87b441f6a4dffcc7eec0747e94118628c6d6c076faf636859b983da0b

    SHA512

    d8879057a594d4a063d1ea0ab13065f73199450c85e4c4a9612af1233df6b3d6a5eccb883364cfc4ece7f5d291a71b62dc2f25a8feaca2f508b22b81594a4df4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    96bf161e9b88115604247d4825d3d825

    SHA1

    0d8c63e86a766e4a0fb8ce086eea5cc8f24eb473

    SHA256

    30f1e1201487ddf5c50a91246a3d92199f69f704e1a28fb33b9303e2955cd8f9

    SHA512

    82006c388634a807998502bad11156690c8037c6bc3e2e43c966578692d356dcb219d577bd86b87929e750feac6b224b17958cc09d0d26e66cf3f7ad6db50def

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5aed8b7562ef7b41f8c12024d257353

    SHA1

    3c6fbbad295a812d9dbff30b564175988f4986cf

    SHA256

    d780da8e57626eea6b56c622ab1bbc3ab22b4b0b86b4d9bf2ff5c33820465778

    SHA512

    a3d8e23fdc87ecc3dcf4109518e546cd4a3bc40a349f16665e36f164ce7367b16b9ad8ffe1f10a02c83a2337e7a158197906e65895648037678a76816f03e8e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dbe40fba1ae569b1314fae763e64df20

    SHA1

    8114a7c7599bb3d669f6eb90279365ac20a89f88

    SHA256

    e4572e468982be6237da26b07c96e36e4aa32c6755f6bb19e2a64d2416c23a31

    SHA512

    9447a7a887510493a4b76541c88d3856c4d33fd1c6f680ad1aa1d5a18e87ae460c7d5f7e87aa298cf84a41932d528f3476d3951d6dac6e97d15ecac4c5f3a156

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a960945e0280931fb46965af72ec4263

    SHA1

    4ed4a37fbf0dc781de22d610e5c9ce7cdfb56175

    SHA256

    828e673396fccbbd20bd3d691bf1bb50719528859543eb1d2876a8fd8e9e75f6

    SHA512

    c3466d7132d23fb982c07e5074c3d3b6c19dae61d8477bb3d9cab5e7d99f8c3d21f23744eed32d3b5ac120be858e9afe6afa3d3fd60c26f1d6e674018a3cd35e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    d65e38c90140c143b8e50c238924ec38

    SHA1

    8d7c911483414041eaa9b0434b560b5090eb9d42

    SHA256

    81223ad43e6a881d735194f71f08d3a3fc8b36e3e10955fe258bf091f4979f16

    SHA512

    c7935b2a075454166f75bd12a531a64f2fef42e094fa585ca52823d87088fd2a44a1bdf1aec16038ddf77447ef2924b3bb71dc2152fef459edee401018e0f3e2

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\84EXSCRK\f[1].txt

    Filesize

    41KB

    MD5

    51a73b2a343ef602090eecd2e1438afe

    SHA1

    e392ef0eab4c0dd4aa1d7dc5553b07f6cb9df86e

    SHA256

    9c972a72b28c94f534755ded003417ea8781551fd9ee69f6aa0b227353f8277c

    SHA512

    2db62a616aee982e3c1d5e7976d0930ec3a0caff252057d7a94db98da761d7629d733d44fb2cb28141fbc39222c1085ce067180afb183fba70a4016b668677c5

  • C:\Users\Admin\AppData\Local\Temp\CabBAAA.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarBABC.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b