Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    28/09/2024, 21:13

General

  • Target

    fd27a17082817242fb424ed8c06aafc2_JaffaCakes118.html

  • Size

    77KB

  • MD5

    fd27a17082817242fb424ed8c06aafc2

  • SHA1

    b30db422d844e269b8f22ade709b0ca79c49cb10

  • SHA256

    5864a429f5100b8dba6ae57d12abb4491be71f903d19b93c3fc567b828d1b1d7

  • SHA512

    9d3e6e09d326278d05624774aa7d0e61122ad088085d034502d592b9e12f921e271fc9442f79c77594d245a211c09ebe66758125c062f4ec69c322e26abb84ca

  • SSDEEP

    1536:ij7DufqmjDGZudPzUyEwwwDRdLsqySiRhBxpoXIw/MGD8GN5y8K:G7DufqmjDGZ8N/MGD8GN5yD

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fd27a17082817242fb424ed8c06aafc2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2696
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2696 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2692

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

    Filesize

    1KB

    MD5

    dc90b632ea2df8a5233e779c32d77a1d

    SHA1

    007786def1666dae999fdbbb7cd2d74cd0e03660

    SHA256

    9a4a05129b91d1fedccfde3437be5548bb5c785b74bba4d29dc3c2dffee43fc7

    SHA512

    f845cad1b7c560fcad7b3cfa56e0e50494a8af0cc001f91f2e2f6e7f8e363c172e15840f0ed489dd993db6f67b41446d85eb0bd6d07859cc02a6b72fdfd81912

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    979B

    MD5

    d9ea815114a72bd587a44f9e95e35f8f

    SHA1

    ef3b602b2ae13fe4c93fac665049db10284070b0

    SHA256

    877895cc1b4c7edcd7597176e0a49a43b88d2dc414aad5b4565f78494a385ffc

    SHA512

    f4297ab2c0aff3300b9788c8e0a4d14ac717302807a92f346d920f1c1aa1ac32c0d4f8e506ab0e26a59f94489d9fd0e1b8cef7cb30525575c5c06274886daa08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a74ca1b95e47945687116e9ff7eb272

    SHA1

    796b68141902ae9f4b2fe4bfc13eb542504cc081

    SHA256

    a2e04edb57595d566b84636e3d9519babf62a18be3d981f49eaaccaeff3ba134

    SHA512

    b42f3d7801298992839d5599d0e2e86d8061c17ff0e5e97329f0f7dde02b38955c2cf8dfbf7343fecb7381deb5fd251dd75f8a9e0643e7caf99fb02a950793c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee1a15aaff3c56b8e28b247ad8db5c4f

    SHA1

    b2418f44402c2f20a4649419879755551bda79ce

    SHA256

    d6e757155ff7dbb781d93d9b24f64035d8fcc42749b26385b13896b3a6633298

    SHA512

    7798f463dc571c4d5a7f4813afa0ca641b97d86323d3cb491bbdeef1a64bd3b2428daee9ec62b3311a56525375537cb699d3ebc5516a198a001c07a03f8eab31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a244ee5c452a4be5d592fb323c4f8d18

    SHA1

    b2f5c1866436bce3d055b63514fc498431caf642

    SHA256

    b245f7bb476157818329ac87f66694722f7116ed5ea748daa933cba6169b51e1

    SHA512

    df6faa03678ca183b3e5948bd276515d09a076968ef40bf90bb7181b68461aa3ebf2f1a8b1658001b569a8a483f3e30375b9fd9c10e8b893a1fae39d400ddb9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0fe4392baf0104b53407c70deba78302

    SHA1

    2740740fb2f6d505b688b1a4c0676aa6458d5687

    SHA256

    c1cd33a031cbb42c36089dee34f62013015604413c319c135b7dc18b6d2fee5e

    SHA512

    b17373ae95365911e2a81698c55c24ba11ca0e837436c1e22f26b60283d4f60275ea4feba2e1c18c8e6615caf89feb5e6e919c04faa3722bb4ea9e2f722044be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9352752cb4033bed630c77828766c24c

    SHA1

    2c3e8c2e016911579fc6500f6131f88777605eaa

    SHA256

    0e99a33c6fa1c59a85a33fa907baa45dffe73eb25c9d679d7230a56433c68129

    SHA512

    ab58e6548acf5c526517f8800b577340d3bcd2edef3f895b44cb0cd38c2d514dfad254f880e1f35f0309eceb666565d0a9f90d1c40b8d4588a4cedf697b08209

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    273b61f03dcf26e9fcbb383265843450

    SHA1

    4cbbf43fbc2db76dcca357291f376ed42697345e

    SHA256

    6f9c2c742f0ed640358c9d6eb69a06c51edb79cca8906fb11f5e1e517dd02cb8

    SHA512

    b1038205e102c45a7cd1a38bb22b766539682d750434ae9e98ca2d899eb1dd89a764b10db96ca368009997d8caf5c5cce3ee28e8fda1610858e14895e6f91b27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d1a357465375ee63888692791d4c1d8f

    SHA1

    98ecfdda5143cc7d6976f695ef7fcf9e21fcf1e7

    SHA256

    e40c9339f0dfadb51e4c8835750419acc0ae711617030bc4962e03a40aa9329b

    SHA512

    201e64607f9876c4dde12683aa5fe6c280d30b614c799d0a2d7912d3769c6124c7bb19c4ed0ded9026d38e500a574046071d627690478ec590c4174be92d0b7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aabfd90c0e621e224152b2fb1b3d3355

    SHA1

    10f3d17214c1e2708b032ced336c9041182a93f2

    SHA256

    b59ed7b4b05ea028b17ee873b48b098d1efa3168c86e3b570bdad86b50242484

    SHA512

    35c53f1c269469c72a1058d65f94121066b8fe9818b8a4ad03d408071e5df9b2b1fbc06ce975e958d4d78e032986466037d588c64e8321887ba404ef33a82b72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c783d43212fc8534f9f4c0b1e3a12d38

    SHA1

    2b38344c15273a93858b17f8cbdd5d6d11d7f562

    SHA256

    ff229c20dfd61d87ad6519baf5d58631a0ddd937f336ae326a05df0e5c31cbee

    SHA512

    6d8ea5db9261507ec7bfb96ffb63a0f2c9c8c814c03cab69b6e430dcd67e655c5fcac2efb58cf1f032b44ba9997a56f9def8a71ee45421d51d61adda12546809

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e3ade0964d006acdf5fdccc67baabae2

    SHA1

    cdd8fff012e24affab8eb13f8de2173f4e178525

    SHA256

    7850b32affc59ff2740b5f7680db9ee7f458c0b968f21864ae4b1491d96dafea

    SHA512

    38a2d7fcc1fef441ff75ae276e160c036a956a32971799f0c2734745f31485d1bb945d70ffff5646d82a90335698f84ffceb26a263c4f52dff620fceff36225a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1102e7d3bc99af6c90ef6bcf09f095e

    SHA1

    dd56e929aa9e258d484ad95ae28b1af16a0da656

    SHA256

    53d014a581acc74b58180a5a18c15891dc96aed5bde56a1cefc748f3ef4f8851

    SHA512

    3438e6e9679b3678fafe32059e9cf591c02d3c828877302e9696d01986d6c90a5908c1f0f9d6b63f72f2c6bc6cd1aa7a620050013dfdc0776b70df06cfe40b3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    402f4fd243bf91b1cf1980fbd7c6eef6

    SHA1

    558bc95cf19d787f594e7161c00790d1e590fe97

    SHA256

    6fbccb1979635140a897aa137edbd0700c8491c2aa340873478ddcbb2accad77

    SHA512

    252bb819f5390215689be38c96a3ba7beb8df561e45ca69d8f7ee7106ed761a5493f00fcbffa89e638022972240b8ae21ebe41f16e48c2f7ac357187e3b515ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17acd57f0163608b11c783c6770c5590

    SHA1

    bdaffe9949062a0d0aae0ed93040a16c69bbac46

    SHA256

    6f70816e42d183f12d11e9a3ee3abb8df2d35dd2d901907be244c501c2758a2e

    SHA512

    e515d52901a22841ce3a45a7679e5b783d943b8e97e55a62ad522abf8c7078e945862a9b6e2a24b4317e0f9ea814dd26db1962342ba5879fa9427a9d7ba5d5dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    383ee7027a71989846e6d865cf41ec8c

    SHA1

    d0cfc811778e67603d28ced30acf223d3075e779

    SHA256

    75ad12af50b6c0076766f32e82c0ce924d7d6ea8aa046d6210c3704f63f3cadd

    SHA512

    6da9c02052b4872a057195549b30dbad381c709869f7fdc44eea322aa6942005f507b1a4bf566ebbaf6af8ab6465f4f91cfb39a1eb835a9292fbedd608ef1609

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8f14278199017d60f9ba3923aeaeb42a

    SHA1

    975eb4901198ca08e55c5f354b9766dddb8c433d

    SHA256

    7f323d5e9351c3b69734875dcf97b3ee75dab4bf00daa10f72037ae76a6c6f19

    SHA512

    7ad79cbcc507cc424117020b1baba938f6a263dcf791532f9a8ed10465395c635c91e13b3fdbf3a5c039ce2e841ae5224ab9a27d2ef7ffaab36c78d80c483282

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5213dd0ad6d33b9afa587c3bec5ff7d5

    SHA1

    6c313562b91838c26cfdbb60deb15a1f65c7e2d9

    SHA256

    930e8e40f1a515a263e3b2d7c72ff6276d8aa5432b13f62b3a457ccddda20a16

    SHA512

    92a64d63fe96425f751f4020384daeb7a81ffa786160fac55f864031a8cca96353af3a4de4bf24b9730c44d494ec1557e1429b1d6269e8e32fc18adea923b7ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e47ea39b04c77af59d0fc71fde050513

    SHA1

    1e6a0d8f02da7b0b3302b18ccc38d721ff629616

    SHA256

    56dfa28b830deeb3e015251ca0ab1b90b9197dadc1077ff953db21cedebeb772

    SHA512

    5e9842a29e504e832d3fc0dfd78d8e82ab283564019168e239da5d1fbab1d4850cca465db657d1919233ea490cb5fd591e7dce288beb028784952a46f82ac119

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce21378fe87f0b232ba9e4dac90cb6d1

    SHA1

    1c1ca4ae09c6b2980f1c5129dedd8a055b2f267c

    SHA256

    c23533299c6fe9ff5d82c24529bab81b6edd8102df701057ab40cea852e39a39

    SHA512

    cbf05725e26646b2aa89bd20381a3fe66665a1a2619c597d1d00f6979b6c46f342c1e666fc75804aeb704cd13ac6354cc35946d5cfc98115bf9e4ea29178e4a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c7f32a8033c04ae4b62de824180c4ead

    SHA1

    d1fdb87c354d2504aa734474e34bc38a86551abe

    SHA256

    10cf1b89ff7bfb9cc11394b1c9569eb1e1b13b3a7d1eb5b58cdf02be70fcd333

    SHA512

    ba0f6b7751c97def321130cc6616f0961e5a209575c3695fbc0a4e8e11e9d1e4b0dca973ccb53f33e6001bc83757b97a7fe6afa795f973f3d73063a2acf8a34c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1a767f7c9cec79b33865c1199ab297b4

    SHA1

    025d8760f738365b6d47c2389cb09e773dc57af4

    SHA256

    3a4b422d58e6c7bf3f1066b59393e6f5a0480cc8f0a39724a7fd7dae971ca5e8

    SHA512

    fa13e9a478699097f6f7da52eb2c23ab0e6e178548c98868341411fa432d32bf45b60289f03410098da9287496b652b5faa17da628a8202b389ec497dc322068

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    585d9fb5fd0508182661ac06cd020816

    SHA1

    bbaf5d310c54e47bad6fc84c47ecf338d58bd486

    SHA256

    76652941513d1e74feedc572f9e90422f95b8ecdbd8c2798fcbd44989d0c63b8

    SHA512

    d067152e1a27543a6000d84a817213391e4bd2cc94cfb92bc7324d29865dc35375e89cb0f1ef6907e8520d6317d40b6eb71d5127328cdcc3793547596d52416b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e5c0cc78b75a5386c986953d898ac3d

    SHA1

    8b35b7209771f8eebac3116c23a9c9c60c2f4993

    SHA256

    c8945d0aca11fc5e5b5cf48fdb73ae92610a4bc17c002fa5b10195002257d234

    SHA512

    e256f567b7e7adb7e4e75a470c4789b23a822a6cd00dd56f4b8717420e93ac358d5dd524f675d9e41c1b2936ca1eb35dd9fce135c6294d435e852b8473c36f57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70fd1c37c059f38e580e63870671687a

    SHA1

    ac1fe3f4a105c7755f0c90be009644cfc0628fc1

    SHA256

    c02fbe48a423b1d45a576a0358c2cb3539d88e9c293e504dc816fc470ef6a7c0

    SHA512

    8e1923bf99b57a35fb47a0b88862ec2fd5472c859947ce9d97ddb671bfb7c531fa0b261a2a5ca79be8afc5842c099232bef24dc662429e5759fe11b78a9c1e18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

    Filesize

    482B

    MD5

    10a06b84e0e3a7ffbf726f5b8ee9f474

    SHA1

    ade760b965ad83ed7e5c6611d76f02532ed2b37c

    SHA256

    d66f1cbf8a250780397a99423b13b07cbbd82cf5f6360f0339e151434bbefaa0

    SHA512

    e4908ca4e0f801f4f042ad01e6966035eead5d50e36493f2399575b6b18880be1391889e9f8b603e39746a01b5d9dbad3f65dbc052ad42fd951af903393599c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

    Filesize

    482B

    MD5

    9b21251a0cee476208e25f539c0e1dda

    SHA1

    d4c8cb63f8049088726f7b4a240a9595c06164ef

    SHA256

    6ab351d7660f9049b1d812fb1991e2075f246f9c01eb9a2652f6e5e36bcb598b

    SHA512

    ac3e92b8e41bf2ace005bdb54eb284e9a796c79c74c7c7cfa350a1ac99734e8197052b82a7a7d2541fb0dae174a96c62ee4184b552b02203afd1e89798744316

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    480B

    MD5

    83ca1d77fb57b92e8ed2feeedecedbee

    SHA1

    9cf6e82d5a89be4c1bb221943eea0e059377b43d

    SHA256

    527bb53f02a384df9caaab07d9876db7c81b9ff070c275a646c65397416aeef2

    SHA512

    1b3c076dc0a46f0ac393df16e8a74bbc1e4dee76d261c37a7947a4b2717d09ac3550013036174c41dd21e7565b4850ba14c011d242dae1aabad740c43ca4c417

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0I0VVMWQ\reset[2].htm

    Filesize

    1KB

    MD5

    5c6dbd7ed422b4982e9b031d910d5095

    SHA1

    e7869a4a2646c94e9661763f07689a15b9926d7f

    SHA256

    0a2f96a0ed443a6435ca865f34b0777d07e7bdc1c51eb7198fa700bb283a1084

    SHA512

    83e23da9cebfc75250b0a13b2481a33e95c101d050b4bc9825851a03c4986135ce82715c62593b2eea6fb0bf20b4236a5922f14c94a8959ff8774abe8c845c0c

  • C:\Users\Admin\AppData\Local\Temp\Cab2780.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar278C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b