Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    25/09/2024, 13:55

General

  • Target

    f6280ef2a2513e0c0a376710dfcc63a4_JaffaCakes118.html

  • Size

    137KB

  • MD5

    f6280ef2a2513e0c0a376710dfcc63a4

  • SHA1

    2bd712d7b4c33cf1807ecd919c1e512d728ca342

  • SHA256

    5486a9e9bbe3781c5f13be9178c1315a2d56c2c2541b3adf24e7b668e1d1e63a

  • SHA512

    b5676a920d73eae2dc46ebafc6223d77a522d7dec6d396cba85f1b60090c934de96c38abc4b37b4abbfc1c7916b3d3de6d82475b69bdd586b2d8f594775efda4

  • SSDEEP

    3072:f+ZIw1fPuQj4x+6W2QU88zuHHWay6DW4K3bG2:WZIwVPuQNH2aO

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 26 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f6280ef2a2513e0c0a376710dfcc63a4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1984
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1984 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2324

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    f4f2db54d9a61a3996353e4dc781c7ab

    SHA1

    695c6a5f5b12827756f3cf3f87742c989f875ff2

    SHA256

    29bb22e77d832d5fd2589fb61cdb505d2578fa9b78d8e4cee366055a97c84037

    SHA512

    de1b3e6d11448c0c4e9ae0b9e1c6a7615e2ff9af0e0e514d88496b09b5fe099c1c3e807c2f2cff8d90095d268e4f9c98838772ba2123920491bf92c2b6345218

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C02877841121CC45139CB51404116B25_436A12A0FAEB3EB0641FAEC097954DBE

    Filesize

    472B

    MD5

    be6f729c56ea412f99af66897e4f50e9

    SHA1

    c5e80e0439a8d5780be71ef79f3e0872684c9e6f

    SHA256

    570e7ca53736140db3f45444d876de24f0abbdf70c98f470347f4dbe158c137a

    SHA512

    9a63bbbbfe58943b5cd84acb8b8ed6ce67cad6f9263ff5f51d88c10e456d66a2d3ea76ae35642135a2cb04527e9f0e7643ddb9f976745ae3e4b79eb5705dc84b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F59A01A8B782D93EA6991BC172CEFFB1

    Filesize

    867B

    MD5

    c5dfb849ca051355ee2dba1ac33eb028

    SHA1

    d69b561148f01c77c54578c10926df5b856976ad

    SHA256

    cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b

    SHA512

    88289cdd2c2dd1f5f4c13ab2cf9bc601fc634b5945309bedf9fc5b96bf21697b4cd6da2f383497825e02272816befbac4f44955282ffbbd4dd0ddc52281082da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    61028fd6a674a3083e6117a450221f64

    SHA1

    8c487a86aeb40d0677e0cc8a0300fcb604ec4b50

    SHA256

    378d51a5fc93e35b0fae57461406799c9b32c9fd748beeb98578d2c6ff677b05

    SHA512

    4d9a151ce761a1ed28387c1be4a5cc4b65d5870d65f563635e79c39ef4e18401ecccd05ce5544815378929ebc7b2a1b3bca6878ddfb09464e3b0e7241466ea85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c8a76647bcaf8bf1b040c5991ebea38

    SHA1

    72544f70c9d15affb44f0c71378a0a11be4a979a

    SHA256

    c101a066c41b43a2589b4edf51a09dfd67859ed4f88ce0dd202e611e89f34808

    SHA512

    d1d2f99e448874ba69d07786f73831218365b3c81b1d2074639c9fa5b82fd45d266b1c781757258c3b8fb66c2cc6bcc416178f5d6f6b26df2d62f8fb17539e93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    842ef02d1864eb28acb0ee366b9669ff

    SHA1

    304c8df29c12b69d0484432c4ed7c269bb0edde7

    SHA256

    7416a6be0ae77de5b4c602475d2de43d740f62c0ab4c116a415e0dbaa0ba3509

    SHA512

    c7cee4cec515929647b813b76845b654838c9bab71bc445a389d812dfed8e50c4cc5388b4cd15e29c6e1e6dccbdec6cb85bfb4ccf817e14dc89534f3a185c800

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    906665f6dc2033dd6251f39fca40bbed

    SHA1

    8925f5af2cfd4f82bbb8b37b494b928998c40099

    SHA256

    abb370f52fe2744d2f76b9c9d013cb1c292606f8c14031ee716f2c89708a4ecd

    SHA512

    1ef97a85724cb44318286a40eb7fa98fc945cd17899fe00cf620f97ddd5a22b03bb9f572519e83ffae8bfdaa9c9a7baa805ae06e1240dc157836199e422a0acb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    061883de36c5c2be21e19ee7371e456f

    SHA1

    b9af68dd00b067989dab9c9b02934fd54764d716

    SHA256

    280a4708be70331c65f3349c5ed5633f143729e858fa9161aa8c5c8d51361b86

    SHA512

    beec65108162c0182aee45a750c185e9f3fecc02e357682e400ec4bef272bd14ea9ce5d0d5bb0decbd714f896266714ad36ba39cde67b3261d3a37e199ea8678

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    90537cce8eab24e6bc0d9d2079a97c75

    SHA1

    8e5c2c70bd638410558dbb73f282afcdaca89f82

    SHA256

    49a3a22de91b98e7d72799be8d361bedd03018bfd7474bb9b49d07c7fdac61c3

    SHA512

    bfc2586e1cf714e8bfd48712fea6a273df06c9eb59d58ce18482ab8e7fbd924ac668319f8dfb1606ecb5261518579deabb392c613ce77ead40af796c11d89cbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c9380aafe50d37513199394f3f47f19

    SHA1

    480572086144a4f3cde8b41e4585683c9fba85b5

    SHA256

    88964fecef16ec9cf1d815de96ee486089b6d36c87932d64eb4c9697173269af

    SHA512

    97845ec719980a2607468fa8cef30e6222fe56f18472c7744654d61571342f522ed7d5df908beda89de1fc8d530815697748cfbed9db772e99ae898d1a9890d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ceef107ab1d2e98712fc3b109d53148

    SHA1

    dd1ba65c608c714b8a33d0be2bc325598fbd5138

    SHA256

    57d98989905d7fdaa0cfa07146e7d33fb9d74a9a79ca44628334fde64ada1656

    SHA512

    a01e380177cead4a6515d27d5397afaa82d3703a01a93b1772f16b306173d8ab8e54223adf018602c2093bcb5fe3e7e31da07193b5adf94f9366349ab6e60843

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    627a7d66d01eefeffe904fc6be55f955

    SHA1

    c49413af4e7371f4570ef31c0f533094dd90900f

    SHA256

    f9ee3701df96cad28089253af25c6c581c6d7ac88dde17aae71bea8797593e41

    SHA512

    3fb9a681c602d81f47c5cddcc1d4c49a48954de6c4e47343a3a24bcb9636e41d59628303b2038316950b7fb66249e0eea0813ed93c80f8dc91c97ba6e13ab42d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8e9d549197464be1072ccabf4f6272f7

    SHA1

    cb75a095bc48e41bea4675b0dda0aea4c75d676a

    SHA256

    3995f0f9e838843f0ed401b0e9b23c93a7f45668e298006e858691ee1d007a4a

    SHA512

    fbaf4e16dd9594f80b18e08b1617c7e444248ede24baeb624faf3331b50082a5c95da5e1a7596d81b702c83670b8f7511cbab24f464d8eb68ff1d24d09ce0811

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eaa6cba51d8aed0c48bcfdc464023f8a

    SHA1

    7aa14183311acd4cd9e796925c986eb744958f15

    SHA256

    010a0eb74fd267f7e54587ccc38330b5c1b5002ad855608ade4b4a7bf2aedc0a

    SHA512

    4d5b8b7946703c1b365394f12c6f2678d814a588568c0632e7377a89d60c50436b538f9e9aad622229f8eb38b75937f7b5d2f644ecb47e57e48449c2d4a08fab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d808875f362c2bf7d12f1d36a7648e5

    SHA1

    6e225eab3fdf99830fb4c35f9c57acf00e0f20c1

    SHA256

    4a8769840e68a07aad4fbee5e643d270f4444f7f46ca8a39bd06f751dff5e033

    SHA512

    648b5cff377eabfa644b1d6e39b9c616b809c6098c15fa70e318c9e1bf024448d737697547b338fee34e481b9e1d747e0eb0615e7d70c52d3b21581004f67653

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    225ae714edd9e07a46b78a409fa5d600

    SHA1

    9a478beecd8f6c3daf9a6b34fbde40182c5f006c

    SHA256

    07055fbb70a3649456e94eb2c3799fed2e8d4a9f9a1fc40fa02e46e3f116216c

    SHA512

    951db8be26ba3b6d7010a09790796254cbfdf132bbb5dba3e3f34c4ce64df0ebf021bc12f9d5f5113ce8b239fac98c2da24f18a978ebe4b450ca2c60d332b7cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    18a475e058ecdd934a8a740c33218640

    SHA1

    63cf28b79067f51b6f445e6f5db82c614346fb71

    SHA256

    2f4e45fbeb4934c88578141ea9b41eb8a4a77d0855e72239740cf0ddf4c68fd9

    SHA512

    94760354de9f689c78b1e3e98c769034600f8b9c3383d122f845000840152bf6b312873d1df2ca99c4c4c7603d6a45862f48173a0f6c0838bc46818e7a869777

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4747b18901e919a376c38fe206cea788

    SHA1

    ba6c4eccb21dfaf63829fb547e612b0da2b285a7

    SHA256

    5cbd661276cbaad690de684f81d72b504a8f16df2fb03c0cce2e56abec89a8e3

    SHA512

    cd2520d2ec022725758274f6a3c3f6ef906e84981652c89dbbf68eef8cf5db34a5b8030110f39bfc00c623c1eab5c75907beb3b5316c4a0e10c9067c98efc4b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c8c1211b2b5b5d5fee7e105a3872089e

    SHA1

    27a9efd22a26e50047efdab26333278e0fddbee6

    SHA256

    6c53793d5997eaf006b382fc2610b85f5ef0185489b3285511c3bdcff17f2c5c

    SHA512

    e0262441399c05b4be87e4890d808cf4b84de93cfc73fb4d351e8d145823ebe2608a651e4bd183eb9132360eaafe33e038031711fb35215bd6f4e9a7540a06aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a229a21f7381fdf06833fac8c5738d8

    SHA1

    24b89a0c3860711c4ba5f69e2ebcd5f4615ca79f

    SHA256

    53c8a3432c037c59cdc3db8ab9cf71c7f896824c77e50eba373d93e70668e4ce

    SHA512

    1f52661049ed41a681489de39ad06de96a63e9458665e5ac3c95d3b2a99744701f142c274d0501389e45ba17bb13571c26624bf5e99a79d50d19f91be1fee953

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5428221ae9c25a1b108db6ebd04cb551

    SHA1

    1350adfdff914c78a3000772cb1a4019a209f134

    SHA256

    ad04362c8ee34d0a72ee204f37b648d3c8d8bca484964db74f8c220ea5b4a656

    SHA512

    053bafb7f1a548cc62df9fdb8020f3b52da38d8368c197e612c21d13d68aad8b0dfd4aec31ab5584fbd3e75293a8d97c1c0e4fa415d3722fbd71c79ae22c32e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6db6012d4cfaa35f0cde7a8b6172d999

    SHA1

    b4e0d6e74bada6efc7d824203ed9e7ab4a280d7b

    SHA256

    0d3ef1f7cd281fc486c2ff0d491ac554ff063bf868a4e2dbb9346da74e7bbce1

    SHA512

    34afd800f212f7e0caf43441133629784568cc7ad8e493ddff816eb0ded94b81f30f466756349a94ebcb221c0de5ccd5c184b11ce07fff2d355d4491c2e745b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f73e8a086348fc67c72122b3dc2b03e1

    SHA1

    e7e48f1dffde8a18abf2a98cd1d66a839139238f

    SHA256

    3636c42fffc5713bd08a046936b7c258d2ae7b7a574373e952b3d34b3401c6ff

    SHA512

    f4f0201996607c0b1c0c2a3925f3b99d34fa9637af14d35091f6fcb4b31ff5a0c471b398fe54c4cd36d0ec7c42283fa98d41b5eb9d145bce45fe7323274a17b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    25c6c70f825b74829a5b33867c9b4f15

    SHA1

    e69f3c288bfd176495ce7c9e16510df2cfd41176

    SHA256

    349b95844afbb1b2c2ca30a8c86faa67314ed5dc008db483faed2765233c7c9c

    SHA512

    17e0fb5df53af9db2a2c42ff9198e1bb2da246eb6e67de45324c2113eccbdb93f0d5db40a111a4e9e0f5224828d5695bcfeb8b8c76f6254e7f469748e3404322

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e936eb153d4e3af9adfda7a6a9629dbc

    SHA1

    40cb4180c6980f16bb0e42748b3e61cb39dde044

    SHA256

    cc283e9b6520e515984d43567e6b36b0a61b241a7e31071890dc0be97601329a

    SHA512

    aecd94626f36a8bde94c015c3ffa3eaa06084df041a1de5d7d9721a9451922eba65f9b2dc41fc6299320314c4aa7c0cfd0d7096b000ce32386b2c96fe7e46e60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C02877841121CC45139CB51404116B25_436A12A0FAEB3EB0641FAEC097954DBE

    Filesize

    414B

    MD5

    d49d0057d650155c9035d825e99928e5

    SHA1

    a1b6f725e5f7be8f20f6a5c8258cafe91bdc9eaf

    SHA256

    9c306b58ab28d2c1a67673435f8a5e3d0e1713279b447d034a5606301749e592

    SHA512

    6aaeead61b8fd6f3c1af0ada96ef4c9abe715fd68494a7a7cf63bcf3c015664e1ba6cabac9dec43dfbdee77fe56475cf7754bb0b5be7f5df744a7169312291c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F59A01A8B782D93EA6991BC172CEFFB1

    Filesize

    242B

    MD5

    c96aa1dc722a658b0c9481b885354bb8

    SHA1

    96a9a826a68bd38aba98e8c350c5e2a1e9cd27ba

    SHA256

    bd904bd62b86244c4752e63f6de95cc0cb3969657892d2fedc8680dcd3a8e643

    SHA512

    f08c4e3fae43c0ae3d4f12b58798d6e973382d4c97dafc0bbaebab109e78c2e8ec5f8223484d534042fd6e5139b82187eeda53a724e3ec0f2ac15999ed0c7e76

  • C:\Users\Admin\AppData\Local\Temp\CabBB09.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarBB0A.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b