Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    27/09/2024, 15:11

General

  • Target

    faa378e88656aafac4ec246b2df466a0_JaffaCakes118.html

  • Size

    37KB

  • MD5

    faa378e88656aafac4ec246b2df466a0

  • SHA1

    43fa77c02cb1740aaafd9c3177ca5bfc185bef7f

  • SHA256

    06c9addf2e7712bb21710fa97982155f660b02f111294f181eb2bd5d1089662f

  • SHA512

    498d0fc2a3e9a2750f8b34facfd20444ca317e39140f41693a0fc2a2c8641ec708cd40eadfe7af694c485e23564debdad2faf246a2b59a46ac0e717e1ede7c9c

  • SSDEEP

    768:F/bVoRTW81D4RA+vEOjz6rdG2Gil54RZfPGnf3Gu34aRi6781DdRA4vEOjq6h8at:URTW81D4RA+vEOjz6raA7IaEC81DdRAW

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\faa378e88656aafac4ec246b2df466a0_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2172
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2172 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2540

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    198799a77b47294363b147890d4f4cdc

    SHA1

    4a2cd56b11c795330a6abfc1e10eb1be1fa9cc3a

    SHA256

    7c7944db1cc7bf5d0de9c9db55da1a5ba3b4d794a31f69147f97b17944e260fe

    SHA512

    f5f251e667f139f15bf3c21e8048efeec92840401764e8bc15a535352858aa9deecae18b8017e93cc5b8a4ec88a81d95658ce2719ecbab4aab2105bdb490fddd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ec9d0b959b59bdbe1485c917994e536

    SHA1

    6f0878817b30b7fcdc41016c00823136305df4c4

    SHA256

    da63549a91a04892e2903c8efb888142c3f612f8a902cdfbb24e98ba736d4c08

    SHA512

    94893b61109741d240ef4250deb23f4a282c7a9481fb8272dbc46b632a0e193c1c11bd647aab206325310f759d5555345b5cf2b712b5b7d8868b0ccb0a1ecb8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a40bef7ba915801a010dc56c6360f09

    SHA1

    ce619a604ed8f7bdd014ddedd3e58f7c84133198

    SHA256

    f620d3ca9f5c3ee8b0fe40fe5a17f657184bebc3cb68555ffa6b3ae137ddcb05

    SHA512

    c876388c2796e0697fe17ebe65b3adc528c037011c9ea19ccec874978b01d2e720dbf531c61e5ba88430c6ed888fd71989f52ea700b7f531bf76e92d8793dc6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6285af4beb61c839fcde72749638c5c

    SHA1

    5e3e14a5d3df770a736b4c40ac92620c47d831c2

    SHA256

    6322b49b2228b536228d8542452c51c874d4d87d5d8fa1e487b3405df970b381

    SHA512

    01393fb266158563011090f4501ef4874d6cabfa7d09b861365a1c6cf892885259de24b0023bc26ea653e4e168bc59a13250ae4c16b4e29956df8bc7c79b894c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f6873eac04a678693087811dfcf5531d

    SHA1

    92f09219a6a74d970813b2e8493b8f81482d33c0

    SHA256

    2d34815ac9017bbe6773e03ed93550fb5373d5988da0c8dc52144000c57bef0e

    SHA512

    c4e6827bf583ac8a8b95c5ac6551a723eb1a6d688593962d36909b5409e3aeffd804c74fd4f99d65967c91e0bdef32a654795106101e099d76d057717578efea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e7b6f0513b4dd187afe38409cd20328

    SHA1

    637330a71b9ccaa0a24d0eded7f580577dc99812

    SHA256

    061255b7f434c1e5f6791bc2bf6f914960ae55cb15f4b43f0bac24cd316aaee6

    SHA512

    13c503a8814ff9ca322470c1828f4654283b89802b661b81a35a2c8bd7274cd398e14eae63cba53ca809583b7869524a62efc6202b9aafc3f503c5a62cb5b7e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0971424f04f74cdbacc6558649e073d5

    SHA1

    91eb7b594320c390c89398181c7dba8c0991d8b2

    SHA256

    5ea2b12f2f630e82d34700d1578caa25bde4b3d8de8bad0ab7f5927be3a6ce31

    SHA512

    412be478ea08db00ee47da9cf929b8887b27abc117d8f350b3a2320f4ef0dc82bc1d6c879db9062ede8c1bc3fbf44f40cb837c77316465fc6e04305c192a9a1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22799c011edd5fddae7ac1fee6c13db0

    SHA1

    47ce004436a58893b4ec46b8656e4f85ec60c6c9

    SHA256

    8496e462042e2048049b54e9017cb2088d4b958457d0d2befda4939949927965

    SHA512

    fe35b5ab2763d75d36fcb8ce20b641f6d15d1039d04dec66693b99c9f2384beb1f9a95f5138ab5fdcbb7c2efa9f947cefc9168ad36e89113109eca6b91818425

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17ed67b238b70c3674285d7657350b7c

    SHA1

    21e6c00f233b191f09ee014a6ace2cef6547d7d4

    SHA256

    ae5e253af4d882d2673b4b83b7a4c14c2d4cd6369a33c129b6b9ea5a2d5e21da

    SHA512

    466d7a2aeab445d1801bd9eb4bbd38f9846a1cf3ac46313db3511d99caef739625bbe5ca591f3f1c7796dd97dd4f8e85dbe93416c007e764e0b52292f9e867df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    39432ea1c0db0d73599a9b105f9d9774

    SHA1

    053923b702bdeb9a9325e8789e434f56b0acdc7b

    SHA256

    edbbc77f0194102cf95abf79ce951d2e8dd4c7128290d77ee4b0d9d699c4e917

    SHA512

    a1e209b4c4d3fe436fa31304f44ba557874fcc8f2d26a846fa98d0ba3bbca6679cc932720a08645031eb4c730dde0d29c389ab5cbd1798552e3cd5e0ae93193f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    233f992d0ff61988a36e62e6c4353ede

    SHA1

    a9b1b2b57858a1e031535f45d8773ac19d07cb47

    SHA256

    0df562d1fa57318027a1ebbaf04b3f218f437eba1fc9a5563496bdc5996815d3

    SHA512

    6af07b3a6c4f6c8dd308c5059e9fe1f26073f05fedcc5390c3eb48f01fe3356f26a67f2dcc94d5536b1d1c5f35afc37f4320f4d6306542168d448621ff4c76ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd137730aa27c05765fdbf441910a004

    SHA1

    bf295cbd79f02622bdea3ca437ed3aa5bd7323ee

    SHA256

    34f992ab515656a34610a62a7eba1c3ea843fea835d5b47d70a565259585a073

    SHA512

    a2b6aac0f0ca48dad81ebbea7e854515937958ae49a39cb377fbddd3c81d9b17de1809b507fdcb9b6918e5fe253d8b57dcfd24cb92028a52ad48d3cd83b6949c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d7c8afb3502e71ebea2752197cc95973

    SHA1

    6dcf595185be0eeb3add407e76b7d8b0749481ca

    SHA256

    a3089a4137a0fd8d7e1c9ca395a01ed65decb9f30772aa29f24f76b0d8b10776

    SHA512

    2ff6cc6044d0e29ed03d657843299b8603f79d866937d0a6139f2fa84f04017409f98e9d7c9acd089ba8cc34b35ff0cd97ccf43b5ca30b20de044cb0945f520f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9fd1f8547d4a5bfbfece0b3fe0fb9ab9

    SHA1

    840605a93d18ad222f31bc76a2a50b666635091a

    SHA256

    cd10ff848f6d484553ac90c1be4745ab3ed4a7be08095f00038797c08464119a

    SHA512

    677d73a6e7bfadc1b6ac9359e4a875db839d3a21a6cf6feeca1acca63d93c0b43c712306bf37a146b6ef0d33a4346bdc2292ecd579b6903711141dfa05e95c22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b00b6449c91fd62fe4eb71accf0ccfe

    SHA1

    b4fa14b489c713a4811c3a6ce3f5d753a73564a4

    SHA256

    5ec46de108d7292a2b7988b6f88c50c6b98a3f4247904bedb586033985b09387

    SHA512

    a546c85bcfdbc6fb9a993f229c9b301158141b24fd092cbac627d607691fed62913289f4c0e94ea03f961f26fbff2b084217595a5308a9bfacb673ac072f0f1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0bc2d03368b0e2103907ca660bc01f9e

    SHA1

    88f13adb6e09b90dead301a1ec5b505315b622b4

    SHA256

    714d1a24bfc564517bb529e53cbccc0eb156cc7f4017b0f5a0b2892a174ae4ef

    SHA512

    060f638ed6b5c84a252ae8b8c1bdb122fb4f065624ebb87c6e3bc29af9ee1a0db5f3626f30ef121840e64133b74e77b6f2f91d5149a2134e06d6ce1fa34728e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8214f37b753220d9c7fc6a613d724057

    SHA1

    968c987772f46183591a8cd88b2204fc0a04a3b0

    SHA256

    5e959e70692ba2f2a569c01bd01d38e34651bfa03da69827ffe21c842151e0e9

    SHA512

    668b1d29ba70e2728c72dc57ae554d8ad04282e850dafe7d1150d1d41414694587083435af8a788efc8dfe27b46c68a58fd17243bd39c33f0ae609e602236161

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06d7b9d940d65eab3025ac9ed0462b5d

    SHA1

    1e598e6527de891e60c603782f0055e105482075

    SHA256

    e53e953ab83c400ee8110c3b58faaeeffdd6d1325666d200dfa5101163e4ed5c

    SHA512

    1289b4b7604058838b8a856a33da935781906fc8230e282598ea0b25f61b03885f00f3e0b34ef4ebbe1d88a699a16f8488b645854a08a6343b28912649efa192

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d0f555fc66f41c9e98d35c7893e3caa

    SHA1

    9c29a67a2fb25aeb44a728b5d8b2866c50df230d

    SHA256

    60a1b922a9afc54694b5aa316133d10eb69dc57249370c38b9157f667979c646

    SHA512

    ab5a09935a70932fe24b39b76b52d1abcc36ff88c4d7c0094c587b8f9b26c71ff40e36ee04cd89ee5c413fabf581b9df86199cfc9c1066d3a79a091e58636a8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    286044528ddee65d308b9a5bd4d84bee

    SHA1

    c9581ef8aac7c84e8b1e578d4de531e537dbb0c1

    SHA256

    9b12cb6967e7a9d4004d70514e67645241669e481b1fba4300c897f228e89c44

    SHA512

    366b373ff447592c912818216f8fee4c22fedcdd1612e0c45609cb571f9962ceb8f78ca252a51236c59162b530a6ba0f7421948fba69bbc488e880a81a40d2f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    144d5787b2a5fa365ae1491ab09cd46e

    SHA1

    7bd19a9efed60e07aa45c714e24f2da0f81746b9

    SHA256

    dda4cce203389d224e3a1b62cd49d8fb27d9df4d989d38a45e773ca5395506f5

    SHA512

    fb02da17080fc05efb6d487b0cd4982c4f914ac6534ec827b055298015256f0056793b2ca42cc0042968bf61e9613b6685df2af7342fe0b94d8d567db4970029

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc261139d3c8d9e2637210dcf8b9f4d9

    SHA1

    9f3672e386af7b7c4b60e3016a5cd4427b773742

    SHA256

    0c9fe6acc80affdd4d0386234b66ef7d6ec93b198a8eb86750287adff61d6ff8

    SHA512

    ef44ad4071d4a0b3ddae4ac1a38ee0c1a793020a80bac8f4ec771be0e98235915dddae0ee173ef38d0566bb7bb7b1033473fb356c7d4dfb9fa1879e91058e2ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9bfb29a138674b5a2af77aea2d616729

    SHA1

    ab26243b0fab52c58fc8b9f170a615ec411a6faf

    SHA256

    5ecf0a57261a86c698119c80e016620cac31ceafe458b6aefa0831c777bbf347

    SHA512

    c36d99b098402a7e4467e9dad479b81f915dd00b4d08d498ad0db4944dde0a3203e401fa0b17d31dfcbeb08f11a074fd8458b140b14c0bd13f6723a9817a6cfe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    948ecc2c2bd841594883d1273df14df3

    SHA1

    6e7690fc65597bd19d484a906e5c9d408d77d297

    SHA256

    09cfd8577dc3876b1c4c4314d2c64625a581f64dbbede00f524087258d963ab2

    SHA512

    75f1bd139a65b55463a801b242298a829512dcf38c1d85033f5fa8c7a99e482c1af00d92570b3e9682515be1cb860581d73065f4a214755fa1e3909d1b1de1c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da4a9d7b562170c33d1dbdc2b41df0ba

    SHA1

    ee6d7d26152b560d1c69a738148120ccff800224

    SHA256

    345f439bd2bbe43dd9d687c09f0c0f7abf0ba15a8062db2d21922a072a6c4727

    SHA512

    0243d57cb6e087de9a80f9d2eb52cd6c45f39a7a434ba2193e76772fbbf22e96fb5d9dd4a79835607e657136d9db01bd2e0767b5f546790830762a19b9f57e47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0d676685f5b178ddd098bd7f99bc32f

    SHA1

    777ead9ab8d0660830f514c9db5e4991adf26336

    SHA256

    29724d94b73448f7bb170cda891702cffee9135a0646531bbe779d472e94fb08

    SHA512

    b66d246cbf8f18ff2ece320ea7e12047645a44b119d84321f610e978e1e8a22d505f16a19a99802060fd0e3a8be9cd2619ff3ef3eafed82cf2e2547ea43c7567

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d0404375115b8f53f6a7f23b825b533

    SHA1

    1fcf654b787ee7934c2342dc903d7c79fd88e84a

    SHA256

    d26ea6755990025e441f294697a571942af9441fd8db29bc1f6488ca102f9b52

    SHA512

    c76d618ae72e44dc31ea2b99c4c22c13094674e3b496f65380f4b62b3f5dadd65807d4761a856468e1f6c618a72cb9cf098e46a4acfc29e386190d422624d46e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    5bdfaba8a9453c16f4eda3988d4ab5c8

    SHA1

    ac987c413ca7c982d0f5731e9d8706535a6a2ff4

    SHA256

    fe640dc985aa67ef7125b718d8f810f3f22b95f40d6f8c7d537e469e6c964bf9

    SHA512

    f6942d3bd63f810aac2c40b34c8731a089e48e22d2cb602e901928d9ebeb139de7f49f8c8172a5616330cb9a1aae7e28fb284ff7bdc397dacf58ed1cd83e79a2

  • C:\Users\Admin\AppData\Local\Temp\Cab8039.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar804C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b