Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    84s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    01/10/2024, 03:28

General

  • Target

    04344df2080cb734c912b2af86f10cd4_JaffaCakes118.html

  • Size

    11KB

  • MD5

    04344df2080cb734c912b2af86f10cd4

  • SHA1

    53217b4409909ee9dbe1a78c4c7386f5152af696

  • SHA256

    61890b88dab9d53463947cdfd73bd0ca95692463121d12434bed6e792fda37ff

  • SHA512

    16facc756139f84f2824c79f4e23aa1a113e8d5fa16d004f842d5df1b4efe71ae368d5a3d043869109fd8aa28af68a94d9236a262984ffe0f94f6717e3683992

  • SSDEEP

    192:Zy2RP9q5xy17qGDEDzRafXDYF5cHvk/OZb8m+Ii:s2RPP1YITY4HMX

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\04344df2080cb734c912b2af86f10cd4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2336
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2336 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2212

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12

    Filesize

    1KB

    MD5

    7fb5fa1534dcf77f2125b2403b30a0ee

    SHA1

    365d96812a69ac0a4611ea4b70a3f306576cc3ea

    SHA256

    33a39e9ec2133230533a686ec43760026e014a3828c703707acbc150fe40fd6f

    SHA512

    a9279fd60505a1bfeef6fb07834cad0fd5be02fd405573fc1a5f59b991e9f88f5e81c32fe910f69bdc6585e71f02559895149eaf49c25b8ff955459fd60c0d2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8

    Filesize

    436B

    MD5

    971c514f84bba0785f80aa1c23edfd79

    SHA1

    732acea710a87530c6b08ecdf32a110d254a54c8

    SHA256

    f157ed17fcaf8837fa82f8b69973848c9b10a02636848f995698212a08f31895

    SHA512

    43dc1425d80e170c645a3e3bb56da8c3acd31bd637329e9e37094ac346ac85434df4edcdbefc05ae00aea33a80a88e2af695997a495611217fe6706075a63c58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    46996ee69935896774727266e385b5db

    SHA1

    fc2c5ac69cd85db75800e24782a0a89b7f05e3c5

    SHA256

    5e63d4b3a3b3f6e90a3da937368475922f9857ee0a76934e3b2438cabc866e10

    SHA512

    b4571af432ad62abf9bf0b8322d08b3c5c6e2fc32b1402da7c709f1f622b5f246af52ebc15b2f4eab46018721918a4690f5810816766b86252a5321612da066d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12

    Filesize

    174B

    MD5

    501f54599183852f8d3ddd886c9e97ca

    SHA1

    de50d3eb4e61e66967ae0e634c03da1d8687eea1

    SHA256

    532fd9653d1b3cc0d21599ec72d46165be9c3b91a127d031bcd8e2c7712e5695

    SHA512

    0f569b668cc1209e5aa599aa5de1d2acb4e6ece2873e9ce0e4500407938e78bd1a3fdf24442389340b77436e644007e193502ec84851c780933872a6b63d2d0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    74727e2819f5b7b260766d5822c96348

    SHA1

    95a412e303fc9b183dc8ff78c5e90435982d776f

    SHA256

    6d79ed7143bb956f580c1bcdbccb3b6299f608fe0eb788bdea7cdaf12b25ac3b

    SHA512

    25db252f7da404c77853b74129ce6c061e0638f1d9ddd860ac5170418c4fdf59435a4a4cd247c41fdd331c2081be5bb929e96bc8737ffeb14861604568c62eed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37aef02d793adb76badc51297ac1b5f0

    SHA1

    2f019ac6bdc87c76f365eb1d22fb4c5045f9986d

    SHA256

    4b0b7bcae532a8ebb22a982f1e4e94d0a97bcf05cb2e9bcbba39fb2a3cd3d3f8

    SHA512

    a2a87a7c966af5d8c733664c9a01d1d680995bf1f87ffc2c5e0c5ea7eb565076710844ec6c9013ba4fb4cf8f51810c4bde9d9a78268f3c37149c60d77d94a12a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4fd157160b79ac10dc997540ffae863e

    SHA1

    64e1366ad58c6153d77a9c44c68f3e9f8b53d0d5

    SHA256

    dceb86e6ba4391ff051676436f1c8e476b5c81931cebc4080c531e591fd6b886

    SHA512

    42441f907cec56fbdcd01fbb3f877892e8ee1e1e836e62cfc1999352730706f6f4856b0c97f4adcc3f141fa837abe19e85f6843750536333d2f0121a4b496848

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ba3bbb071b76e4def3f197064693771

    SHA1

    2b92b19ebda8d41146e5aff50fed9f91b8901c54

    SHA256

    66cedb5f0746eadc0d598a0ba74d1bc6e6c8f4ca83c827e65d6f81cd170dbc93

    SHA512

    ca532581e70a65769519b055501bd76c9a504c04e6f126e8a83e26e134b9056fe693942c3ba9e133510aa22737a93b8ed395585cec60130b4d4577571a240594

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    31f7cebd29cea4b9f33ba96a8b951fba

    SHA1

    da7d5210d68ebd73817494b4cdeb59ad6a881c5f

    SHA256

    d6f438ecdb8a210ca759acdc824f3e16f82bd5bb7e959a9f5c92a4ec5a442287

    SHA512

    18f018d0d8a282899c629975b6fc762a44a428fb199fe8ebab9bb16bf861b2bd2978c0f5488bfdb9c592b736d8762c9e3a8875c180f5ea961bdc729188b6d41e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb65c39f76cbb2546fc1959cad4020a0

    SHA1

    2ec58f7cf94b2619ffdf89c8b57f35f6a100527b

    SHA256

    1dc6e030a51d4fc128709a9e60b44ab3e0c5b0e282aec35a452c951ecce14ba3

    SHA512

    e043339d4c7182b7002754568a5e42487b6fa252e3abd0f5eb670a3239215fb06301564b8590bddbd75a0788cd7cc7e59bcb6c1d24eb1d56b89617269e6928db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7fce80fb35c797d931f72a0a981ebaf3

    SHA1

    db44952215067f0abbc6cf28c1aafe1938210c72

    SHA256

    811253ff5fde2e4f3dbe93ce8b9546d903ecbd993805fdc00d76e8b692f59e1b

    SHA512

    88472e75e5361c84d9d758742a3e8d28ed5cd5c8e65a04d8e55aaa242f9f0c5643ab411ba40016991b08b2942a3bb7834c50bcf6d572194b7e0e1bd63159cb4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd190e9f54fdc321670004a63d831ed3

    SHA1

    5e030410f32748e0d17630a3105e8367e1dfcee8

    SHA256

    83fdddaeb9038fab73c7a87e1feef2bff1a58043aa8896093ff151bb4f27989d

    SHA512

    5bae51372f004f72a16e204049ec771f49575188b97734e9847dcd854c468f9e3d42e8c551d04d7c644b5e024cb7a0f52fcdbfab23fd88a3e6a1a1511fb2dc51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bb6ee12fa2b55fb326498ae660724a20

    SHA1

    e615e773f3c9ec0c8483501b8bd1bc94e01600a9

    SHA256

    024e190384e17b8edacfd198252eba3316ab6d4ba8cda7887eea2aade298f4ad

    SHA512

    eed7d2c96a7086543328a49e4eae54d63c93527e79d2c7e2692e12c3032d206cec44a462697657294679167441958b13ecbdc30ac8a9512880159c6f64a3d072

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a54e7ecb76f1c4ecda92d6ddea019809

    SHA1

    9560f9edb474d589428bbefc7af1399e30ebdb66

    SHA256

    1a8d61ad27091edb4e498eaf2f661902b364df030ab8de432c5653296be20366

    SHA512

    5ec052c2b8d120085bf5353f9512e8a7efb18fc2549bbde14049baad7897c091a41dba15767ae4d89c67589352fa261c74635e5cc05697165ae98ebffe2e687d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a2f71a321ef43118394db85491ac37a

    SHA1

    9413a2d8c748eba51ebaf16b09b70386e526d480

    SHA256

    6f9cd10b34c5f7c38104072f6e9f09bf99ef68e1e83f172b5c1587691885fd28

    SHA512

    e9c1a744834ae61ea0fbd7906d6d2889daf8a627b0806e31803901afd26b8a08768ec77aeb4280b053de49d7cf6a011a4f39efcc52ee90033d1a43b714e64626

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cecec22e2c2b26c550fd5e654a987635

    SHA1

    6691e39ff9f8694207b061851ed5c2e27bd0be39

    SHA256

    ae36416beb45921b49f4b2c471cc5f760a02d09fa7345a8a2e6482a7d3d6552e

    SHA512

    2db2a491deca863f8e64b802798e9dd60a0a9de23b6f109ef577ee5e741491a6e9756587dfbb76bbb2e911e0b87e8084f9f075fdceefca2d3754be4441a80d6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c0b8b0cdd0cbe225a9e82f9ae63379a

    SHA1

    aa722e1f8277c2eff1474ba78181ce98fa265eff

    SHA256

    0c8f592d31324c52307fe91c43761fdbc30d32b2896a9d0b445b008fedc6810b

    SHA512

    2f7f97acbadaf968509e5b44ed350b647ce3faf0e7def90ac06c956bba7e17fad621e50087cd5c84ecb596fde92531952d0862d7319cf0d8bf99a0799a58873b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bb278ae79311e285177c7b6fed848dbf

    SHA1

    5e9784b55bc34da29625ec4e6f07aa8753f84de3

    SHA256

    e23ed625b4683d2a5aba7dabd459b886115e65a149652b0100580d0e37a9c7b4

    SHA512

    7beb1c353098904034fe0a46385a8a5d2f3e12a40d586296d63586223f47b7f10f0d44d8a2c6d67226989980d67f43d6c5cda2f5a684ca88a600abf95b28bd6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4dc85cbb5f59a4ff21d35012f2c80043

    SHA1

    58d1f2a23273a6e83c9cded05d8aa232c1fbc380

    SHA256

    e9d00991918e1a739686fe8f4cca90ca431c170b1f57f3eb0102128cde7e602d

    SHA512

    9b3cd00b79a02479749ff4fae1fa0f4acd6bb99d68e8afb42288acb5b779aff424488d283faea5ac357eaa18588578d0ed28ab329716c67c30cb63da1fd83d13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e36bdc156865ba443a0b98f350bc4e81

    SHA1

    a0a93e686dc265261f46269d025ce514f001019e

    SHA256

    6bd83d8f061b479516e81317b942c3cc66771dc31f366c1023497acd028afdd2

    SHA512

    38aa66dff583bcb3d47bcb2717ee473266172701f355aeba8de36093021282f0b09d8c75d0510c9b526d18b96fb1a99ecca6a0bad7c40529177203e675c101d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d83e89f167529411502010ba6a47b66a

    SHA1

    bd3197f2576d1d706d2cabc4114318d7b76b6201

    SHA256

    55538f68ec5ff9b937cba1f6184de170168da29c512d90b4fd81c843891a5036

    SHA512

    371f29a4eb96445840ad09be5c6fc4954a9f1ba060ccbe112e330e160ca12b46ce774c07160fd88d0b4f26a4b25da44db1ca77cc8cbfa1bc6d7adeaf166cd0aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    770e8a6fa7035560e7e41598738dd676

    SHA1

    8a4c97933805e556a2a54514039fec36c3a66a65

    SHA256

    193c5adeff4ebc7bed8c5ee49cc59955203cc11fd88b8a2fbf0ed6e714e625ff

    SHA512

    44a4f672ccb0cab2345b91b5dd0914916d8422639f740ae92edb769900e1b366d679705d170445f8c22ead3ed984e8a621f13a6ab40046622daa3ee79f807e2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8

    Filesize

    170B

    MD5

    400f5334d2144592196b729707b97a97

    SHA1

    8f8d80f59830446cd757fc0f028f9c7efc01afa3

    SHA256

    e24b66655819d314c8a95b1fae4d678b5967f6d2abf68de20e1299a213f26070

    SHA512

    a75285c220220006c343a5fee150a9ab9b9b096d520ad4822b05998d1a4481cb9329f6f2207250b5e0cedf62355c0fd2f8b787e532dc0f60a6d66c3cf9cddecf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    83d5d61432e6543aed224fe5940f5255

    SHA1

    3c77152c4cf0c8d96befd7ff80ebbf66d9740ed7

    SHA256

    86b7e4b02077709eff84e3b5518345c06feeed040e6771bb32fb1837cfdc7bf9

    SHA512

    2a67a409a468a7cf8f2409b1104cc694ffb31baabf5ccd8ec48322280dcc68dc8b08c713bcb27ca95ede00055bf5b714cd8b3de67ca2ac2fc785b8a8313885a4

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\40WV1DY9\calendar[1].htm

    Filesize

    167B

    MD5

    0104c301c5e02bd6148b8703d19b3a73

    SHA1

    7436e0b4b1f8c222c38069890b75fa2baf9ca620

    SHA256

    446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f

    SHA512

    84427b656a6234a651a6d8285c103645b861a18a6c5af4abb5cb4f3beb5a4f0df4a74603a0896c7608790fbb886dc40508e92d5709f44dca05dd46c8316d15bf

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LW44N8OS\I55Q4YI0.htm

    Filesize

    89KB

    MD5

    5a098bf4e2525e543dd7eb7d0deadc7c

    SHA1

    877cde2cff338d6d66375ee8deb7e52a1ce403d3

    SHA256

    f05b8d7db8c6a0e72cb53b20013714e32743da369b2ac1875befaaef84e45025

    SHA512

    f2444107996be25ea5c5979ede2f63ff0be90c483bf23a8a9c72ab6607442fcf7f87c0b5fa4958e6255382bac4bb4407b4f52de668bafcac2aac15ae37a2c4d8

  • C:\Users\Admin\AppData\Local\Temp\Cab2AE8.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar2AEB.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b