Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    25/09/2024, 13:51

General

  • Target

    f6266718947301a28fc7fff12cae6ed4_JaffaCakes118.html

  • Size

    211KB

  • MD5

    f6266718947301a28fc7fff12cae6ed4

  • SHA1

    65506decc222ba160d4488026ea69b6dd79332f8

  • SHA256

    a328f637c0623d853b00a09dc970d8c7b3f894d443ba282a166516d2a96bdd52

  • SHA512

    809135e58b59355625850f760fdca22a640649847d031b4415121a60836812cf721e7340144921e0c7128ff225da8d53d4db4bfaead887fc3546078790e24d0d

  • SSDEEP

    6144:/RtNs2z27eAaSUlyU8Yz53PuYFxymizzQr0l:JtNs28eAX1U8Yz53PuYFxymizzQr0l

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f6266718947301a28fc7fff12cae6ed4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2248
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2248 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2768

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\07CEF2F654E3ED6050FFC9B6EB844250_BACC6CD2B29F18349081C9FD2343833B

    Filesize

    2KB

    MD5

    17229cbcaf23e0a6f1443641aa4d17c3

    SHA1

    bee4ddd49fd9441994674b77af9694805a835923

    SHA256

    ec499058ecf754100cdbfec27e19545a986857ae0e74e23081119efad9a3cdf8

    SHA512

    880a722d8fa10ee041c4c206d291229b7ed353bd9c84a555985f2cf1270e15cc55755396309394a7f19ff55b268e65c7191effd68ec1d7934fef835ce6cac33b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E

    Filesize

    1KB

    MD5

    8e0b49756a2db554a1059d02d7a5b6b5

    SHA1

    329fb747ee97d72a71b3052afe9dea764288155e

    SHA256

    70edc72ca5f1eacb8476e7c85140810c69eaac00217bec25c33e18eab9e82a9a

    SHA512

    9f2aff49b560ee7df5737e68fae9dbc9092887927464168007c35da8e2c7c4aa34ff01444a3634648b47d41d36c1a79153d3267822dba6275cc8e1bad364cb8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0968A1E3A40D2582E7FD463BAEB59CD

    Filesize

    1KB

    MD5

    285ec909c4ab0d2d57f5086b225799aa

    SHA1

    d89e3bd43d5d909b47a18977aa9d5ce36cee184c

    SHA256

    68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b

    SHA512

    4cf305b95f94c7a9504c53c7f2dc8068e647a326d95976b7f4d80433b2284506fc5e3bb9a80a4e9a9889540bbf92908dd39ee4eb25f2566fe9ab37b4dc9a7c09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\07CEF2F654E3ED6050FFC9B6EB844250_BACC6CD2B29F18349081C9FD2343833B

    Filesize

    488B

    MD5

    e3ff31c143cd07329d6537dc1c1d1a17

    SHA1

    5f00b0478d5056b62fe2f8b16a77971c7a0cb4c7

    SHA256

    7315cbec61cb442f6d48be22fecaa774f99193f6d7feb3081fbc2fe52fae3841

    SHA512

    d3ca9e14f355bc51989c8f5919559da1c9af103613770ce6e6b03314ff366e6fe1f153e4068f9d1e0b4f929bec0e62265de235b39cbe2481f362ec368ec8b4a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf626655c4e31d8c150f2d187c716bb2

    SHA1

    4b8d15da0c4c9c09c1aaf97ebc3cb3adf7feb62e

    SHA256

    818cefe776b1786a267b4e700a9a7b818cd6997197c04de2da14af5dc5df4091

    SHA512

    16300d479b449a8f80a83fc3f4a7d9841cdae6a798a457ac7b4c9b391f79ebe538218ba30178d75c9c10c77c38fb424423f2c2e8c899556956143242dfdb301e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e06d209dbb1f7376a9534804e11824f4

    SHA1

    1e9e21de08b2e9d34917cf9ad33483b9f0a90871

    SHA256

    a0e94a17d6897e156b520b39b68008a0be2c0a675ada07cacbd4ee2884754e4b

    SHA512

    c8ebaaee5d911b1e5b5b1e763e268d50175d1be2c63090a3be7334fd4dd0beeeb9207a0066c1246391f9034d9cdb10711c0c3b8efea74f85dff063183efe95e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6dc1081714b5f8705fb0edb75927cc5a

    SHA1

    2af7ff65ec3d1f01ec3ef9c920ffc542889d8059

    SHA256

    1b32342e860b24332a1ba7dca88b9caef1825a479f5c50c74f07b4d32fd43b53

    SHA512

    c6acd2a00497c30987cb62fa56b5c74ac16d62254a75cc7a5eb1b10a478457eab67d75baccccaf1f457972dd811acf46c07b69c7aa97ca60803395bd1e35ecdf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1432b9bdc624bc2ccc5a3b03095694dc

    SHA1

    aa5c42596cc4237cffae7d87a9505eb0eef8ac63

    SHA256

    06d8821becc2c0ba20723b3acb46412cf50342549d7075a3468bccec6a73025e

    SHA512

    49c7d27321dca4a5c3719c582b48682eaa9fc6c0287ffee3b319adea06445324f2a44762dbd1756c659f63f0e8a23229bfbd0084b050f60e1d6c25541aa8cc31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    497a6282419ec124c94e61d34e4443e8

    SHA1

    3bbf97aff18d2dd085787a83b62209079158a072

    SHA256

    d97a83308b9c25913cbebaaea2c6c930abf13d6893972e77de868b1139cf6423

    SHA512

    b7fb51a7528b5599f4acd88813e0f4d00506834c70206e29d546f31a49490f7ae2a7a945f6f4d748023c98a02f7fe7731ff74e8832316972f1134587ca9272cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bbf6291d0dfa3a5ff0ae468e65b88507

    SHA1

    7f5e8f6ded7da4a78805c4534a2f5387d6973465

    SHA256

    2ddbe6d1763ebda673458cfe18d1adc8591563786f0da7bebfd2498104c16be4

    SHA512

    99c6b9821e5ee47c66acef70e34857f7a173c1d884c558e611015e8f5150af93f7c4d0234077fe945d4df59e0c24f7e7964b83bedf5dcedf6691e42724713ca6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7eeff69c95cb5991a60249a56072754d

    SHA1

    463091597347bb4c26069d8616b275536415bc0c

    SHA256

    daefd5415a8eafc35e3397f825830c0ba50da821e70236f399166dcdf7a87cec

    SHA512

    ea8e90a2fc3143f1527d4918459f69613601495dd3e417c624eb27b7a00f01f27b3f6e6e5727803e4eea31b561feca3ead6ad4e4462ef0453908e37b7290bcf1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b408c5b83b603dda8ca09def4ad27a6

    SHA1

    3eb5fbdc1c9cb73f9bd52bae172e54c203cde06f

    SHA256

    221216807f183815dab518b21743560d74793d3a5db8f75cc5d146889930c853

    SHA512

    8a1a6f3a1c4db037ee0080c62d9d06fed2a8d95d93354165f0d98d5d490cedac26b54cd6859a8494d4e01aa1592a3d07bbf9a0721ef655563ed8c68210f08084

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a5874e2c31f2c941a0454c6d38ea57a

    SHA1

    1b3231b180c47d0fa3f907cee7c0f38a523b44af

    SHA256

    bb5b70cbec037a05cac88e19381a670b80af18db1f14479836d78c6b8b15a0a3

    SHA512

    614f7f98f2a7651a6a0a6e80bd01db7100b116d605afc6e73172936937276ed801fa5391adee618b0c628b721613ea4d5f3e1b271fdb06283c77b0d070fe9a64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8f13e757f85d740c602a6775c0976c55

    SHA1

    684a4e72d6f52e804576def53f7f9d8fcddd32b4

    SHA256

    bc6edc767a39e70b637366a83523de87aca0573beabca51d7f8563ea559b9960

    SHA512

    1d1ce49f390715dcecd6cd4cc54ee30dd73ab6483bb439e86d26aade094d8b53d9acb273e4a92488546811eb8cbc0802a6e0ceba0093bac22d6746b5465df507

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a6502e0efe53d90d11d625f97f062f5c

    SHA1

    2b4e2577687c92c0b347cc96d38c06d727582ea0

    SHA256

    ceaf1de4b25bcdcd7c650f7f143c69bf3230608af69750232535b8145f013ef0

    SHA512

    85d796aff020cb737bf4120e84deda30c1cd39c6d9193a27cbbe64d35ce1aabdf3f90dced2c8708fc8b6f8ba1ecc21013e367b61de589ac58a1bd1d5e6281202

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f489b086b58840f93010bcc792edd06

    SHA1

    587f7bc858657fc95071ebd52257d90deb3ca80e

    SHA256

    6f430aa7e0f279a60ada99077114704858f9876ce9f689655d6a9e24b0349812

    SHA512

    2374ff71fa2b3b6752891b69bb4550e48bd9e10360ad4e5e2f37878cc253bd2fa4f79e00269d9f0dbf0ec01da5fc1df29c6b255f8af0ffaacd7e3499709bba7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    681dbf039fe19f28b82aa6d3ebf08c37

    SHA1

    43565882f35a60680aee28e976e37f757cce1e18

    SHA256

    a830fbcfbced557f7f97e0794081c6c14f0d16a4f9e516217a715e3c88d98c99

    SHA512

    bb7a480831b2b21fadf2bd4cf9e86969e412005d20fc8e61ae8e9526e6f94ea8796b1b93f8a8b790d35ac06f90d7d6ab7241ea0dd15e2475dbfa5e0d7a2337f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ebab57bc755f11af2abaeeed951c882

    SHA1

    ab0e27cdcd5963a1e941cbd9f98508f363b8ac6e

    SHA256

    cce6764da7d668358aeb8e1f54dc12c72a22eb662b66b9ef889b6eb58b100000

    SHA512

    725221b214be6f4d43c9da07dbd2db0c3f2defe7bf58871a83e92af97970672838480220cee6bbbea0b5a43bc9caa30b9592686d23936aa179f4cd5f73b8ceb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b54090dd3971f439dda99117ddaccae0

    SHA1

    398e17bc477f96b5049ff32a0de9538239a960b1

    SHA256

    9f9e7d04335fa8278c19f2c42c77e990267a2d9a5fa711168975e9fa4d25811b

    SHA512

    bb29b3ac1113b4af4469e1b519d617d6bd911d46f682a7e3f0c1d3024861b4ab3567a3177c9e3c0a97fac72287eeb275c828559d6e7ba9a0bd0e31a1ee2cba14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    62a5a6c39fa39fc04c18d3963b9e1729

    SHA1

    64b457677c69fd16e552ac867d17389022f5d567

    SHA256

    dfad8b0eb55dc909f33d324cea0812ae0935bbca380e87e5c13ede1dce8afd57

    SHA512

    eedc3b1a42466efdb9b9b5340f9973931f926174b8297220c6a5a0e73ce0af0eb1f9d04d3f8918e651e5b6eb149181241e2f9558f22fe6d28932b2a0d99149bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28a632fe14842fcda37d10642b6f4fb9

    SHA1

    9f0b6642884cb2869e5102fbc6d6607a4318a710

    SHA256

    4a3594bcf960cc7293e83a2c5f1d543c4f23dd0918b452eb2d14bc3d0523053c

    SHA512

    132fdbbd3ddeb417a44a5a231fb79ee4b09a51ea7b40651b49089f0cb79beb9b43efff6085d27a2ae3434b62461c68a9fa7c18890041c2dbf00a6dadd11d7c35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    56b23736d5b3a2560229ff24842b609b

    SHA1

    419036951143fff75b4ade92d3e43731a2d3dffc

    SHA256

    85ed49462ea4f33b994ecab7d31c03c5d122e71867a8fc72663ffb321815b4a8

    SHA512

    14ac22424e37172bfc7434dfbb06633b2ad4e3922d5820e0e5f40b9349b4508b16e254ccd078ddd717ead85be8bfc9aee5942a1afbeaf58cc7ca98de7f9e2c93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    663a6fae48125fc60b566c8651b61835

    SHA1

    6068809c694704e2ee2b9d3145b1ddf92acbec59

    SHA256

    2b3376f62c1bc46b7adbf65930a98facd5ddfce31814e73b9c01549984948757

    SHA512

    b2b184311f9739713072fd344e543d0eb921d67598b892df513953d0ca59b9d59373f3c4fcfbaa28804417821e845db3cfd7b197ff9bde5d94e4e458765f3841

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed00a14fb3126f4bac3f2b48c11c5ee4

    SHA1

    abaa0a16deeff9950b23755a0c9641688b59660e

    SHA256

    f70040190641e35cd057d161e338d07c1ba2536eb1e7bc7fc9d653cdcb847e59

    SHA512

    3a661b3e480db790b66cdea4ffbc52907a8a44636e533f6acde543de3d2911a4e413ce12fe84efd19b81d3904bb6b3dacdf3adc8833b621c96c2fa6f64d86a37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd8c2ddd346f8683ed8b84ad2b30f138

    SHA1

    6ff4191833059892e1e54bc5c1babcde37b6e400

    SHA256

    d10c929e877b6a877d351c97dce006a1ea99e264e07325eee800f90217686170

    SHA512

    a90e79e2037224a063e12d8876c0509da75e278d76dd93c1c59a8ff1c2157a063a7b9e3d9e1c9485d73a9718656cc19fc52242c8c64458c1a41f4b75e7cf43b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E

    Filesize

    482B

    MD5

    cc26d0592b9d9ad80dc20f1ed9912700

    SHA1

    d769ce7c683220f025782a9b47c1d6b1b44013d2

    SHA256

    38489c2109d54b85ab4290ad20f85d7374662ee5f885b376a97b580d103d2a36

    SHA512

    3373e5c3540972a5951c9f04f5a6d59cc7a63fa6f08f3ae8c8e520e8d5eed6b2038fa713e62645d514e9a8548bccba5d2c77eef7ef25469ce0725de112573b4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0968A1E3A40D2582E7FD463BAEB59CD

    Filesize

    306B

    MD5

    efc0f15bb40ffadd2d6857989586aa63

    SHA1

    4087ea84fb797115983c8d7b3f2d0ec755491256

    SHA256

    f477c7bb1ce92f2a3d26de317e0c67108d71ec0deb36b98b7f2a05703fc92914

    SHA512

    fc1cc632ed17b511ecdbb645c8d32aff615663c7c8d95bc11e4dd55d93a94dbe68f36a8fbd48642cc12d5e03aadafde25b492b7b2f700c2b0a0d050806cfd0e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0968A1E3A40D2582E7FD463BAEB59CD

    Filesize

    306B

    MD5

    268c66964a23c0f92bff034a2b8c24b5

    SHA1

    0648882b5b15bd46ae2ff2784615c231afa57574

    SHA256

    c2ff0c022d10a6f0cdb58ca3633be55d952a18e90cd86029482cb7c9d20d311e

    SHA512

    b2de8e16968569d9909ed50a1e198722f839fd62ad01c0ab17156bad198c9cbf74b30fbc70fcd1ddcacbd9b9ba337c5b621d83fa852a20428b16e68170f95629

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\56KJ964X\0[1].gif

    Filesize

    42B

    MD5

    b4682377ddfbe4e7dabfddb2e543e842

    SHA1

    328e472721a93345801ed5533240eac2d1f8498c

    SHA256

    6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93

    SHA512

    202612457d9042fe853daab3ddcc1f0f960c5ffdbe8462fa435713e4d1d85ff0c3f197daf8dba15bda9f5266d7e1f9ecaeee045cbc156a4892d2f931fe6fa1bb

  • C:\Users\Admin\AppData\Local\Temp\Cab4655.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar46B6.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b