Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    28/09/2024, 20:51

General

  • Target

    fd1efab5ea70607610a5e9fa59b195f4_JaffaCakes118.html

  • Size

    38KB

  • MD5

    fd1efab5ea70607610a5e9fa59b195f4

  • SHA1

    1500574e2d51f73dff01e46f67458427404b2837

  • SHA256

    967d6d2cf4fadb975c58405be22f1dc162be7c33a3aa08275d8792b92722da4c

  • SHA512

    669751470a356a4ddd8ce8903f2ffc29d1673d2593d7a6d682a43ddc83cb976ce1887c44ecea7d1257421f23050421015da952361d96cbbfc0488945b2d7464d

  • SSDEEP

    768:ttuc6IxLVIpBU4qHWy6gAH6zhqfJx/aeZzeeeeeWP2Wdzj7pI5ppidl:LBIpBpqHWyuH6z8fJxyeZzeeeeeWP3d9

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fd1efab5ea70607610a5e9fa59b195f4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2124
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2124 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1632

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0DA515F703BB9B49479E8697ADB0B955_96EEC010953ED454BBCDFA69FC071E7C

    Filesize

    516B

    MD5

    d8a90f4f12b456e0670685549d5c0366

    SHA1

    49950499548deaca2f056d75e29e67e563688b60

    SHA256

    3d024ebfec7f740e55c6fae4b06740aa3264e3302e4b157967ee3dc7e7952aa1

    SHA512

    f8a7cc31b58909b01e2c4a573242f5f888e04da3c1de67ea111d6e130ef691db48b83494d1635ea3e3b24197923153673aeb7605d5650f9ef0f8fe516306d4c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    f7f26a7cfbc0db85d7dde5c64a86eb23

    SHA1

    1614050b3f36a1c5f6666f070b1952c2375ca9da

    SHA256

    4afa9d26ecc4a6b005962958150a678cb302d8d9e624f1bf68b57e296b49a761

    SHA512

    2b633be8fef8797f7bade6fd6f33230c98864ec72a812304eacc85407c17bbcbf0bccfb431f28404911f16dbcff7476669225c28d03f48143bda49924015a005

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4B3D1CD03E2BE9D4F9CDDE390F5EFE31_8E916DAA74753193667AD3D34775E2DC

    Filesize

    524B

    MD5

    7c3fd2b903d823695c4a36cd9a454c32

    SHA1

    feb45c9f7a63e875585057dd75301aaef588d68b

    SHA256

    22278b8d370cce06b32d18180eb6d583b4905a2fd04144e389692439e0956c00

    SHA512

    2aa3a85f157dfe7d852c51b7859323ec245657b2772bf3ca955b6cf204a45ab24c43c84cd86fca1b57f16226ba733e55b99b0a1fe3e1c647ba6823370bb2995e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7ae0e8bec05fd883f3a030aee954d4d

    SHA1

    bf72683c2efb1011956084a83ac8a6e199a7a9ce

    SHA256

    4042d1488d398ff2abbec3f3186e2275607ba6514cbc2130d87a0c2436cf6731

    SHA512

    21de89ab890f7af3a03d54dc177844f1dc4f5b50b18971d4e437ac8c1f0be05eb65e1950fce19ed490c14242d091a9c77016314a16ceec26626dfc07ac52878d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4502b64bb15f790e148a8a11419b662

    SHA1

    ded58218a23b5059a433a89473a52a926d2d5e26

    SHA256

    fc420328f5361dbaa10fad5f281dbe2bd37029f41b5728c658da4b6019d74fcd

    SHA512

    7c9b25bcfea5354bc395f58aa06fe43044324727caec74cbf1715a0ec0d6ad66dd5a5f3f83fdfb5cfd51afbad503db259dd0c5fd56db460e1e78953f4def4240

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    15d6f038f15563efea28a8dfeefaa639

    SHA1

    64cd935b1fe901444033465da8f04d5be3220431

    SHA256

    ea745715e8a81025651ab710ac3218b59abb829f5ba6b482b56a0b07e80e92cb

    SHA512

    2e5b6d193b87ca384b011ac3f18f70304a51d73d2ead995d467f694edf89880eb6af2ba13d8ec9c77ed1c478fe691ba3a3df06684c7a8295b6ce3d62a753f84a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b317698dfc7701a1d0a1af7c1649390f

    SHA1

    491ec68a1c85ef78b25dd820c13a14b320508466

    SHA256

    06a31b3e4a38eb0926e273f5e4e6cf31f9bc85b858931d8875f0180258c307c4

    SHA512

    81919a97a5120457304688b9737e9120a98155b58d904a8e0df2cc92c7951477b01448876cbd6be2d3069a52160c6f6d95438ce8fbec47393ebd5a26331dc3d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2494275f0c7bcbcc16d658e580fa7b54

    SHA1

    43ced644563d323f1cb1d7b0f7c80f2e81631c18

    SHA256

    de691f329676e80286436d4d74457a6e5e80871ee8f50a222ba89a81edb5de33

    SHA512

    a6f3408f58b42e2d57414da062dbca4355c44750386b3fe9b72124f14b14c8b906004f1cc9e15ff149bfa51cd7787c593b3008f3d64ff2d1c672dfb74fad7b15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e41149df72cb3f62bc7fe32456f7d6b

    SHA1

    4ff9894d6c4f715a05e91ddf3795c3a6d75a22d2

    SHA256

    3e6ac14794b415f818c78defbc8008bdfe5b087bd212e50b57d22e0e551d4237

    SHA512

    cdbde42dcd22e9f1fc526550e5fa29b2d407d95ae0d81ddbc4045a2772532f657d783ada0866c0aad55f4db1c968230dbb4206f4ea44806ea79b8de35169adfe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce88aa5d278395808632b4a9df1215eb

    SHA1

    68655a1e7a3fd829f2e23e96dda0a9e556ed2453

    SHA256

    81c938ab59e18317d4aef11aac4c1c51f0c437903595f24251a0db14450b253a

    SHA512

    89ba783d35015319b809043375aaf73996c35e374e81143fada74ef152ff02da27500af63917e1c03cd7240ba04c50fc8af103d26cc4acf5154c8b63f2fbc6e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1504c70f5affbd64bff42e6f27fa91aa

    SHA1

    6444e0a484b105a17cd1f5cc7cb71e8ee5aa0e21

    SHA256

    7a63d6a49e9677984320cfd4646e1a18df25f69f890739899e13040d107169da

    SHA512

    5d3b144c0137be39b14224d6544d7ebf924019a9ced0f2df4d0fff3edd0d646ec1f30441e62b3ca10126d85c9badadf0719c1494107b476f3d9842f42f4e064f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    50bec7ab44597e11fa94484ff8cc5167

    SHA1

    1aa084434bf83f2f4e0992044f0ac6868145a444

    SHA256

    2f8a4ac03e701553dcc0c4b1533c08b89a2c37ff9f9379cfb45966c34fcac6f3

    SHA512

    3807aa19c623e450cb6569716338b8891a5fb7fb4a229f4628949ed456d8bee2c2d414de08e401a9dc7081f680270fb43b79543cbc5afec04fc4ba9bdb7dde52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7c8e6ad48ac49782c5b44e97778e4322

    SHA1

    1ac4f9a75441fa40865f4fee202fc33a3b29e090

    SHA256

    de68d1e2003c4efca01aa2892ab97224ed82bbbffc13178c6f04bd02b0acc580

    SHA512

    60f25f10a8b2e3e2188a61e12ecff887411d29f93e7a9bc37596d1c094cefed43693b10b96b51b480cb81adc0e058ecdef5265977fdf8a6dad8942c084c3a851

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    114af69b0025db009873b337b8858a8e

    SHA1

    96158cc0a6c2d4129e1d7f97bab10505b425969c

    SHA256

    0808d57a20162dcc9ee153728f926ed781abcd82cfdd7938e4f3ad4f8a680bcd

    SHA512

    24f01ca8ed6f3efd983e40dc55c3c3ac6141d8d5015d422f0639403950ec21d4cfc24c72e74a58a8d67af54d1814e53baa86ffee3fce228c62d53a15a5604bea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    477bb824018cc779208692860dad8cc9

    SHA1

    90e897f21d4381403b98fe6cdc085970c2e9541b

    SHA256

    ab8e2c20d6674535e113f37f66f7416303708ce6cc1c4839aa4dea3ef0906873

    SHA512

    c215795f3249ccc58f055cb713f39aab82560d2094fad082071654140535e48ad7351af6248dd5dc94409c13cb3a909bbac5e8041b03962f908a1f716b02eeaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf3b8c5686f0fdca039e0f8e348539fb

    SHA1

    4a5b5892a687051f11341b5ee7a70c936dc6b264

    SHA256

    cbe7712aecb5d54c11094eecd355ce98dc1b98f7009bcb9274361928fb8aabc4

    SHA512

    bf78036cefb1681b5f2209897886a13aa03d48986d904eb412255774513a96d98d59b87bd2850159975f891b32da0d35efb18db8eb01565bd80e8a37efaaeebb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00f84bcc2b7542bc6449032ecab8691a

    SHA1

    d998fc2f9cbd3a84e64ebec86270cbbd047d47f4

    SHA256

    d67283072433732d81c8fb2488ffb3eda8e17877dc51f8530712b19b0da04b91

    SHA512

    6798caed35864ba8630840459ca1314ab852c5b6696a7772ce148e92b6a8a25d44bc3d1ed5c16a1ed94e442123f67405e24d3db566cd7dfd507141f56efb6928

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2cbe84a2debf3fe0335c0d8c2304aac

    SHA1

    d5132d2d096bb551e4e8fb0dd6fd8233789b0bef

    SHA256

    6c221a50690ba028587b66b52ef01f1f02dff62856a8415895391a8d0662b892

    SHA512

    45f1a5621d10f118964c02501efae729f3ff098365fa91c87236ad3b073d26af1614be1bfd3b97f340843110126ba483dc523281a48ec15a07bee91267b73994

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f58918b3fa11b87bb0afc8eb7037a5a

    SHA1

    73c2013329cb487a92dd2489a274046a22e36d2f

    SHA256

    ff951b05ff1d44861f4b5396c68f8169341c73c9e9077068c9c610ae88fb828c

    SHA512

    f07c1e3b07d4c95de7c0a1d8c121421ab79f784c6313aae50eb6476fcd89b2d9b58ecee45e4f58a919152f6da99d11876fe2d1e834d79b085dbcaafdd375649c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fffa030ec5d11fc1d913614825d15e96

    SHA1

    4c8e8b68c5883079664c08b681e82f6408236f9c

    SHA256

    fbc462b21270ce739ad8166205fe35e32af67ecea49bb3fcc1a0a472b16a1709

    SHA512

    dfaf2c00e6ae212b306cdbc34971ad8af67e65a2f2fe904725ac71c6be19d36216f33f0e955eb4330f96665c302c3833002fcdd105fe51f98a5b13b8855566f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    38cd3212f76377a92805efd0f0d23aa7

    SHA1

    a9bec70b78e4d755130360504066d999cd69e8de

    SHA256

    4aa8dd1cd323107f8824c185ed23fdfeb2c166b98e4180b357f4d9bd9ed07cde

    SHA512

    9898fe8f95e207032f3b2edbd6967e6939f8e6d3fd5ae44265ec4aa8c69300c1bfe575fa5cf3bb446881a0ec70177dced642ea29df6dc5fa8cf7ad5f3519c4ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c29a34f40f6141aeb5d373e460b61efc

    SHA1

    bfca3a08ac7066dd33e3e81402dd194a22f9d2f7

    SHA256

    8c0271d06ae9881bc98d5e87c48517ab5696df5b47b1a75890a7cef0895832dc

    SHA512

    84630af934e4979d7ab13d12c260023d3b41e9df5f1012a0683b86e92e2c8aa6c2f6c787673ab4588c8781705849333bd99f52daa59b573467c1b0f924b50f2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    94a5063058916d753106d8e3a947117f

    SHA1

    606bff8a8ea4205c7d4013f243e85ec31331f7e7

    SHA256

    ea98ccfdce33a995c4c1f6513779ae74032936ebc1b1d58091d6fbddc8875d1f

    SHA512

    45761c5561ff117adfa5a9a614dc28e10eaec5dcc5f637581f70a3cc447c07bd29ef8571969ffa3b22ad87de42a7ef7bdfa3abf16fbdec87c39e7e8fad9ca505

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bcad5771d12e1c8b653b8896fdf4fd5f

    SHA1

    4edff17c892fb50c7b5aa0c60bb16b8fc3350424

    SHA256

    e150f937c9cd5d6fa8c7b54b25da95930c5ecc3eb511fac0a29bb49b03d19cbe

    SHA512

    da85bdc6d170d6db0d8a5be7fcbe6bf234a26a7c853e62f74ccb6bc24c3e7504a0fdfa4761e362d3cc79912f92dd82cda6b2212b351d31d57e47d442b34ce4eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1b77b419ab56cb31c52409b2613ee67

    SHA1

    d122efb30695ab30c2cf887afca779d0ec970993

    SHA256

    04a6dd66d7a4aa7f888d3c345d84992c0914761e9aa9d4702d9c535d7dac30af

    SHA512

    419b3179eaaa245c2e688012d91b4f38884bcd8515777794537aaddc28daae9efce18ccd8e671548ddb0e422a7e2a1264aca1495457645ee402fb2257f89d15a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    6c5b57b51c94b3b92d0d32d44d5c62d0

    SHA1

    2b440c11ef7d9d5d8effc0817b4e80939e98bbbb

    SHA256

    b68e6e96ce3cabbca37d8ae1b5d19be0808713cbc5909b6d203aa61c8002b558

    SHA512

    919de45743f086bdc81d9a79a5356222e05dae8b267b0514ab32ba3406f0f395e514d872cffd7e6b690edfb30fb4eb607c8df2b4cb22f529bf1985fa46ca3810

  • C:\Users\Admin\AppData\Local\Temp\Cab9AAC.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar9AAE.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b