Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    25/09/2024, 16:24

General

  • Target

    f666d44da9e298df370be9033b839002_JaffaCakes118.html

  • Size

    25KB

  • MD5

    f666d44da9e298df370be9033b839002

  • SHA1

    5be724fc341ed62e5bc48a63495a0e7bb6791da4

  • SHA256

    ad624768bb0eeba42d3f3e8193b51eb7301b62cc14175c8e748a93e076f18349

  • SHA512

    ef1128d86da1fcb74e06ae3ec67db986e7fe132c2a025390c7315150939e724d76d331318face93c939b5871e065dd398e04b96db3600813f4238eb14da38ef3

  • SSDEEP

    384:Alh+hGwOE9mDkZwfw2vsfS/O6pMONFIl6ak1iMCJfprjGcZJwX0YIoqG8jtuquD7:+h+hWaqifpgbcuBu/csUfP

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f666d44da9e298df370be9033b839002_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2328
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2328 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1928

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    e2a7226e69b7a5d146f7232d3f583069

    SHA1

    3168320fd8013c30540c5cdd8e73d9ed501bec64

    SHA256

    3b6b06f0fc30cbd6ecc7eab5a47e236c8f94c5e9c718ff011c93f3860117f977

    SHA512

    65ff5e39d6fa9c09ad6101a9181c0ef6d752de488844a7f11d86394e360d46bee70d3e2e7451ffa68ee53e7a27dc0a992dcc5a64c0aface9e3f60426fce0177a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    008c1d10852ae0860c46be6c04033f80

    SHA1

    7917c280fe125c01f0a2ff892d06adc607d16b13

    SHA256

    7a9621c866938822a0dedcb90a412c1c3502a5b00c170190a4e69ff292b28729

    SHA512

    de7fab40488cc17a2d40363e323bbcb70433aa0029ff95f710930e103680931d4e7681aad5b2935f954adf6b02923e07116537037c3f0d27ebdc07988ff04ae2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    938f5e8c9a16eb5e9b97795f416c19f9

    SHA1

    813fd6c2b77f2dad923f2b8381e7c786c54884e8

    SHA256

    9b0864a690504c54d2ee1f15973cb5d73b3cb49430bdcc91eeaa3cc8654019fc

    SHA512

    6cb1ac1b3220f50482b2b709c4a9c11029419541162d9112874e0461d62cbb09d344773ac85ee6bb9de3412b247773026e23b31ba43ef1c16724b3b090c5b842

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c1db4a5d61bae3c7b19145f64f747ed

    SHA1

    1e2296255228fb4e07306dcdc08930543d66386d

    SHA256

    86c43dcf294206c2eddbb6665b4ae8615ab2665a7ef740ac850d7123f61b433b

    SHA512

    a78c92c4f48fbd73f20c4e73f1b4a89fa03e1ca287dd2c4d5090b4fd6597101fac34449032ec3697526e72fc3845678d8349d147b44b39b224785f13b7d7787d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca912401885d5e276a041fb1066d862a

    SHA1

    23f476a13195352df674a9efbb6f575fde1fddf8

    SHA256

    42732ece25e789fc76a6fc87887163a3546b93e577814177405a1ea1911eae4e

    SHA512

    3d56755970471370b2957485e6a57b9b4023157341335e2bab901bb3452adf0d148938e7b8e71491f51d426b6a97e0335b5a83e4d5467fab4e54d365c9a7ac01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f36055a55bb3bf44ad4f662e7289dbb6

    SHA1

    cae3ae933b672c41087f57f75d029ca312040022

    SHA256

    1e6a3ba2b80a320fbd468165af5bed810e4ba9a539bc151b918f99f50e4f9b14

    SHA512

    5d7f82223db7ee11ddb1523c8335708cea12dea72d2728badf2585f6c753502f2cb6e1da9c1ed5bd15b2587fc17324bfca2eb042ffd119a5fbc77d00bbfd1bb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c75263d26611085c9d2ffbf0907837bf

    SHA1

    9d0791351bbf867b8b7628374d9ce09142e78671

    SHA256

    d33599541d282202d5867f3af77dee4728c55341748439367d17a82b1b688e57

    SHA512

    39b510bdbb1866673955c8f89489a06a8d224b2ad55932bc0604523fa2e7b227c15aacb34eefe8b384158eea1785af30b11fda08194dff026772bc8bdeacdd23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78e69aa1970f38fbf725e861e1bf7ddb

    SHA1

    139a7376235c9979f4b96e88118df46057640eb2

    SHA256

    df303ac56fd1cd24bd47d878cc0a601427173451c5c998130f5a7874a8151cef

    SHA512

    c5de153bf3f580838db911fafc44a439a493d0a675efe8ce687cddad5e813e8e73e6bc3d1d1550e33d0b34da06c19ec691a360f8c396730231cc60aa0558c6f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ed747f0dde245e54fbbeb6153f83e93

    SHA1

    b27223d268f44de783557347206cccbf508af50b

    SHA256

    b3b884525d35dbdc1e7adab742a15a78232bb9dc7d9acf62bc66e1042c5dcc09

    SHA512

    f83e964b5e81cf23445d6330a4b4096cec8b582a69abbaa191f72dedf56157de80e03f5847044967af49155c80fb72afcb4b23750e0b6abe67cb8abce597724e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ab6d77636ac9a360d84e63884934a6f

    SHA1

    4b18606e6d59b1af10baeb0244bd29b5d3ff96cd

    SHA256

    9a6860a7bdf6fc1037d41d3fa186da7e75b3ece8ee12c2c94741866ac69c8d3a

    SHA512

    5b29374e5cc36a5d070c9f1cba4ee9fb063f593776b7c900d832567be595dde87785ac1264d49451bc74ef331d07a89d12c2cd35e8d4caccb63b1bf08e5a6625

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6732cc3663b82f8d8a7c0af1e0d17cce

    SHA1

    361f1914ad78eeac9753e770a57fbb53c228adc4

    SHA256

    cae2a5d1f5d834f70d0f1662dcd4377f719d57d035cdc804cefa53784f40074d

    SHA512

    5deb2200b23e2638e6cb56f2198d8a9afadc5b379f1d84085fda344d3538672682d6718b44aeac73f6a34813c0c5804ff088a6a9dc13f55bc9e7dfcd38a99578

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd99bb8f799950ec14321ef657aa9bdb

    SHA1

    918548f49767f43d3bf22987e98896d7fff6193b

    SHA256

    4b2492ec941c6546b9951ade6e2971dca4d0b58a400b55c16765fb912b666011

    SHA512

    bf705435080e6a1cb15e75f6d06e0dfdf5d08b1ba4373296a13608de96d19ea4e375dfcf7b2328f607fdd58c24305695f3813dd636de657e4755600fa6f8b534

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    84137d09e613f5b6c41fbd47071846e6

    SHA1

    5ec91aa81cc72f99c84adf121733bec5ec872b2d

    SHA256

    641ab539be4796bc60fe3ca1450832e47983b5b9421d65ebe9b2d645a9db84d4

    SHA512

    67b12149a2d869c3c371cf4861d112c71235911ef9baaa4350027520c282044ae7f5744599d732ac3d06fa056a3d65c4bb633ad003ea46a2585fe033697c1307

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca4d459436a4c6e75c4ea5385042e1f6

    SHA1

    8108251e1bbf633a021b5c10632750f9fef3afe3

    SHA256

    b74e1b052f8b16b030c3e99d76eba8b79d75738c582aebcc9055763df61af587

    SHA512

    0a2d58117f8ae0c1b2a2677800b107736d181ba0e3fef7e8fc8bab6434337a1ee3cb15f8b21067df2af93689b5797e4270b5ec385449800fe128607e01347098

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    62f28f9c053e3eee28afcbb2fd778a3d

    SHA1

    bda37d3393db703947b18be1c24a9d38ffaac2ae

    SHA256

    993c64a4c0ec87fa7bae75d88dd09dacb620a45d84339f3ca619c69860ff3f6b

    SHA512

    9b2ef7c5475578d89bea6e0283e054b41544aea3644747790eaab15a9a375450db2e7ae93f22739a4b511cb9f70cd458598bbdc2481b92698db0c8ca683e9805

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2454742fe493c4c1329362e218f89a32

    SHA1

    089e277940387a2bbac632e3d2a9e0024bf89705

    SHA256

    7eba85a2d7f178b81055ff7ed2050ce4dc7905bb2a6ec753ea4d9c987eac7695

    SHA512

    5b93f5591e9af9903d2165887410df7f88970ecfb3c64339992546ceff242a50a3863d711e9007640ea215f4dd1dfa6d601f5364d7f4e547e5aa8ef08a8d59bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1cc470880e320db5d1ba7fb3cc29c4c0

    SHA1

    73092ad611859bf0123f013ccbd166f7bad8fa52

    SHA256

    cb952530cea5801ad869e35e557557c7794273d316a1af3109449fbf9ddbad55

    SHA512

    db6ed09f3d21d5b53ad781f4a7be999be8e168f8386b75a6692276e56f788f045bd26f075e182c42e2a691eecbecb0a55852f79852f5bc8ce4d15b6c5ebee380

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4886874d0df15f0b28d144820434bb6c

    SHA1

    0b7e3697a5049ffad850957bb7a0d92ca8c56206

    SHA256

    1ba5c61e25aaaabae2ceb47a4c2eef091853d94f073680193ae12e7d1ad556d2

    SHA512

    63eda5ef4b5b680a95b5aa4d891935ea14bf4a55fa5410aaccb347bee1fd4265f46f9b47131b411979e4e38953ee4cbfc236223522d73bd11a5f25dec8e14429

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    808b49e6e070ba590a6c83178d472c45

    SHA1

    8d453698165dac536aca7ae816fb3d47c6ac1926

    SHA256

    0617daeb8e3054e1c5296b79a09aed3654a5b15e64d5273fe5f75adf30fbfe05

    SHA512

    59efdc00d1b326692ce48882d689f58d30d3bf775061abab65802a7985f1facd48824edca790ad876792fcda9d5635d8fe56fc89e4c52cdf8d97baa4d95621a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8f9093305bfd3e35745b018b93510641

    SHA1

    4f6ccfa3218a0444a5baa95b4a096df0c6191c6e

    SHA256

    837eda80999972754d5dead8495725a9e96916bfc6707f734c933254d6334a81

    SHA512

    f013e1f73e9af30b33b3b4b9a3e53d93743222430b4f0339fb3d91ed5b890f5781be0d5c5fa7a61ef090bccf279c4492983166b75518858703535014e094b26b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    ff20d7a901749d38e280e72f6c56ba54

    SHA1

    43bf8ae3a0ade87d74d274929b5ce63c7cfa2084

    SHA256

    3061210f7b2ac5d9ffb437ba1320279abcff687e72ecb5351522c99d6085d13d

    SHA512

    46d1b8f90c492c076b9cd383cc1dd3cd7870b20df1d778c59867965349947f71cb8d7608717cc66f641bba3765df85f1f55183cad64e01ff157d242d8d0bf8e9

  • C:\Users\Admin\AppData\Local\Temp\CabF364.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF395.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b