Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    27/09/2024, 06:14

General

  • Target

    f9df772d54552106ce9217358d674dc4_JaffaCakes118.html

  • Size

    53KB

  • MD5

    f9df772d54552106ce9217358d674dc4

  • SHA1

    a0368fa32e788e37eeac562f435870737348cecb

  • SHA256

    400ad223ac28ca6618286a239ba125519962731121f9514a318aa4e27d3223c8

  • SHA512

    f50c130e3312a490f863eca850c72bc3b7e91992bd178d430460f4d6b40c61556f26f0110d02a6118e6e9e10e2044966b0f37931466fe9de5102fb36c38b17c3

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUlrunlYt63Nj+q5Vy0R0w2AzTICbbjoq/t9M/dNwIUTDmDC:CkgUiIakTqGivi+PyUlrunlYt63Nj+qn

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f9df772d54552106ce9217358d674dc4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2088
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2088 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2776

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    962c3f04643dda5c226637d59939cd6c

    SHA1

    ebb16b91a17929c7727d89c1506f81179fd067af

    SHA256

    f2925be57a789fddfb7dc1d6a1edfb20f3a79e4b8afaf7134c15f4d416eafd3e

    SHA512

    b428cdb6a00fd0fa17cfe21588ad7a55eb7c6e479ef5fab23d88c795ab1c8f74b87a573f188f77620310d3616be43728615ba97698127102a6bc32a33bcbd56c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8dabf56c61e3ace00bc384ab7e5b6559

    SHA1

    c18b1b4c44997eddc467922889d703dafe76b080

    SHA256

    d509b156ba0f22e3ab24b1e906b0227250fdbb304e9158c15a05b10ea9884aff

    SHA512

    64087c6382fbafd8bb97cc3f261b4bc14bfe036aad09d5121163accdb181f8e02c5c08ee30bde31e22b11063ab237a240903382eaa5cd46c8fe5c04394b83985

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    65744a5749e5b6e60dd70d0e2881e585

    SHA1

    814c4da1a6a5963e3b576ff4a370d46b27f2ae2d

    SHA256

    1ba5a20e79fd7f7532ee2ec83fa7830afcf752f8c49ccb55cb4dcea8faf6c348

    SHA512

    8636f871399aee1ad831828505cf76e63458b8f284cafc77e0217df787337859da1606b22524ead07e202676374e7d5d1ca12d72a0cf0ebf6e0558ef3c4409fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43b5ef0a1fb7716c5ce6a3e3b6d80fb6

    SHA1

    c6f9cd7b667e674a3bb3e5602398b92df80a848e

    SHA256

    448b46afd3a43adc4d3fe9833f7aae9450cb40c7d7abdf99b22926b06a1fc207

    SHA512

    b28ce07a3791a44d7f95619ad09db9dbaa245d99c579fffce014fa80b6162a5198a91024a93f2386c629eab94b13dd1ee6197c46c42c78cc0123c0facb0c0732

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d1892d2586586e3165add0d1a17ea92

    SHA1

    1ff88ebfd7cfe2d14aba4391ed00997f0d988c73

    SHA256

    9598ac2ba944857e50b2cc89e0e9ddf632c50ed4b1e4179ea2d8faced379716d

    SHA512

    3f37f00304cb872d7eb315c9e09f33ab63e3b61226bb5fce0970101aacca88273bfb2491da5d928f8341958173eecbb4c6c0954ab5c1a351196e6f2304c23eff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d7319d2c561b910a4dd1da819165bf3

    SHA1

    790d8d8af6da3216c1599d4c6505cd032946316f

    SHA256

    d95ede8cf9fc47b5650d0591385f16ae1fe7c221f94539bbd148d3f812a817b6

    SHA512

    7e3bdfae4026a3daab77644016f423ad45ced318770c970cb1be62b251e26a823c34befeb579ec5bd0e93630dd7608909269235a4d420bca198f2d25b9d97148

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c505ebca1d2515ec35ce076a33913ceb

    SHA1

    93e3e099c29312132617e1548234b8c4594bf75e

    SHA256

    5a5b808e6c84ebd7c97e08555add2302e11f23e5e7803d8b84b5fba649ff1258

    SHA512

    4654b629bac89777679b21c6c5fd00813f13f6980c11e9774772586e4d2bb38ba6543ad4fd8ab57d0586bea4ccf54bd464839c18b7dec5b6a74d9c39374493b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ceba8f0e928609f312bfbc7a32b29b11

    SHA1

    8462a14c10236c89a33c684d32e636b277076bfa

    SHA256

    818cd02a0a669f7d20a5a931bbcf6ac4d7fbfafda393e96b1002a623bdf6403f

    SHA512

    0da72da9fbe5de3edbec64241cacf072b595e5984f0d36f9e92919618651c44d5ea8e185b88ca9fec5d0fe94d4229990af7cb1d6808c8deae5f90731a240aa8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e77d7f540cfa222ff2b62f275c50feb8

    SHA1

    e81cf12a530d6846030ce6f802377d6ae2470ed3

    SHA256

    8694f69dc21f7cb741220cc5a70b89e7d29d32c894a2c0a66a79194e668089c8

    SHA512

    11cd81ccbe76cceb90372621d13d6fdf4a06cf7c2fd4d0b9a42b8586f298f42623daab4f324eb85f548054513e6bce5451c496316103a3f0f38e36e7869db70d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2fdfa8e7047f6ee473837693f49244c6

    SHA1

    65f696b6587a85429459a7cebdc94b4ced7fbcec

    SHA256

    e208cba3c2ecb3a22007fdd36ff077fc58c5c1071adf767619765246ff291e18

    SHA512

    4292a23ed981005c6abf9f6b8dea4325b7dd75bf5e810633f9f82bf9e13cbfb33c25898659d32d26ad043cab8b7fa9c725f07760dca1035b20dad29144701a58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e3b661fb4743e9d937d8a6d8504e38a

    SHA1

    2fa4dba447640c4a3278c68c61247b0cbf1c2da5

    SHA256

    d868d160d314cfe7c43fbe26e32afc6a72be5baba3d8e5ed7237f7a2d0e5d55d

    SHA512

    30a2dc8d80c6a0c92fb0d3bb1807bc275f793267ef5ec57a0753462e334d687549daf1688e075fce18c5698197a45acc0bf8db58efed9a7dfde19dfa28c6ce90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f9a899fa0d19e91f5aff78be92efdd53

    SHA1

    4962b53e083c6460856aa927b4ba8d7c892ab078

    SHA256

    f088aa0a71c1680b02863a8231a7b5c67100795bf8cb2e9df749f76cbc2d9c23

    SHA512

    8de558abae5195b4f490cffeb1580fc8a98a6a30660da8f99f56bc7e9d0c5a3fd6d285a91e0eb97630bec67a288597c32a0884f078a19d088413feea9079109e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be338d0e9c8a6b323d1a91bde37645d2

    SHA1

    739cd79c41079f8dcd753c423c5d272c875ddcbf

    SHA256

    8987e1c107b65161c658465eeeb2081675eaf89d8fe53e2a5cee29ab5a810836

    SHA512

    3916047267beda12f9a19679fe44c885ad3d5fa9545a7e8861048b496c70be27abb453572f458c3ce238fd1f7424ec221b3cd6184dcdd22ad7e37145b5240368

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0250a1ea7ff7aa2fb7d846b8ffcf7087

    SHA1

    35c3935b5b9b18eb452eaf01b4b8cfd70cb0c121

    SHA256

    e76a210d9714d5bb8cb301d5d8febba48cd839af27821e912c97528d72bcc0c3

    SHA512

    90b10f279947ecbb6ebccea524d954cb9e4f9b8002b181c000dcfa6e3d7a0b29305bc41c65285d8d8d4e8dc28be1fd560ecde1446eed663350479e45423b8264

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dabdac885c4dcde2fac6b29a2c61e153

    SHA1

    a09cb416bd9104f542037f6febbb5bb12c81357d

    SHA256

    b2f74d678873a5ff403ca781e7a68f2d970b919ae56b51bc97179aa0d602ae9b

    SHA512

    65aec8f15c5d90befaa05f0bd42e2d8c0ab1c2b2208e4526546fc3713896bdb0ead2548058af1c28cc647aed7a44b020a20d848e098faa2c177ee89a6b363f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9533738e55e5479c55213d441abdd6df

    SHA1

    b9974de9b2caa8bafb7b69cd1bb36b3e8f80d6d9

    SHA256

    b420dd2af062a073926faa2e57287be73d5c7fd45ac1ad8fecdfe77cfd60e287

    SHA512

    493fcb9b37b81f700d3408fa657e79a8f835813b57acb23439d7f4ed6302a0c6a422b3491183c92ddcb9b3c53a43dc7f346afcec6ed4772aba3e9b46e25f6e7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a4dc9d5452a22344f2fc55c3a97f7027

    SHA1

    4a6d6db5ec513fdc94e19cbe03622d166e47c388

    SHA256

    853e88d3cf37396da10e4ebb0b7d1eb7c371dca2c92aad45e4efe45071ca6654

    SHA512

    25e38deb61e2449b8e10fa41eea1f8bb8b56efd58835206d4374a5d6f704c08c2b54c5f708937898d2e6b512cde54fa7cd5662fe623f0df1364e0f98272262bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a171283c42ca217c91f0c9a1808ced2b

    SHA1

    d0f2a6f8a3d32411e462df1a600a6f09ad2d0af9

    SHA256

    9543e9f5637272b3356b462a28e227cc8776a0f3020bddde91392da7058dfc89

    SHA512

    f8b1fe8f633aaa91f756a69c595ea76316c89f6c4d72e23678092a50a2388491e90de55c4f12066ac8d7d36e2bc9a89ebbfb4208c14eef11b102be92bbe6ffd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ff4c9023f7085c1a1a3ff5b1cbc1ba9

    SHA1

    55ae88379883b2ac308a5edb73e70a7495b9c2a4

    SHA256

    92875bdcecdd2f560c498df0506f91f977a103db92febc01633ef50792dd584f

    SHA512

    70b66f91f98c1a8cda83f579023b91be2e5a18f8bf9ddd92d7b1f9801e6ace721e8ab67f2db88ec768149ca6897990c9299914a427f41810ab48b5c6ab78b36c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db6e269fabd2e40c8e193b69ca3f02a2

    SHA1

    f8198acbbd490e467d700bba58b97b5e087efb63

    SHA256

    8248a2c9a9a892af78a44f435e86bd1f66d91dd78d77e3aaa6d0265861cda82b

    SHA512

    8d1f009aee7dd5fc5e96783f1790d63091250d1c787619b6989d444e690925a39be3c67a35e107d3b263be31cae4844eac86a1123d760207fc691dacac102f3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    31d8681cfbe4a532d68e66543b4a842b

    SHA1

    e2fd54b4200494d11281fe49c463b6758d6d77ef

    SHA256

    2303dca8ff04dcb3dd98e967f07b262d6952f638fa028b24476eb44015a53a32

    SHA512

    5ec36b33e71cbb436d9cbe80b816e496cbd9abf01fe67641156fb5104e29e017b216faa16cd85789deb9f5c1a18972749f465fd63feb4d3a76f388087f905ce3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c53adfca7d27d04ec745b257b703353

    SHA1

    24b4f6c6589b70af289ca285b47c4026b9eb3592

    SHA256

    1f221e9e3be6b054e2ac19dca4228530a0347ae4d99d6eba518e913c494ae41a

    SHA512

    3e8c7f19364cd04388730ed2c7a66d22906e672e3307626cb5e49c630510bac9897599292996add37718da63a50f8ac8fac3f5c6427b4e9f79b446a1d28c2f40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    65bf4cf039f2b0a81be9ae452d83481b

    SHA1

    760429337df5f049b33a9bd1372e7e15989c02b5

    SHA256

    f4f91b4e59e3d66efd2b0e6d6c12ebc2634fdef5d356e82fa9a4031db4bebb29

    SHA512

    f16183cbd1037cea49480644e3df0b1edf3ed7795a456e3d8b129643aaaff0a62f81ee87f1038db5cbb9e88bb646acab1c0ac405ad77d926d56c2b56bb163337

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c70362980d224f54ea6770781e869d9

    SHA1

    ebe4b0dd61ef2a69da8872fe7c5bcb6aed1ab903

    SHA256

    85ecb287c0b73677e61c4c74f90b982a52092e010a7d7743351cef35cfe911c9

    SHA512

    5c278e5878b1ea523b9a3fd47b73cdce44b055fd4a1a4c449e03a1d5e97f87f30f41a4e1d83dd7bc0a017b64d7e53b84edd8d873f3f004c513a8af04a8813e29

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\40WV1DY9\style[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\Cab5BB9.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar5C1B.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b