Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    02/10/2024, 07:52

General

  • Target

    09a306369b39b72857900c1b5ad3971d_JaffaCakes118.html

  • Size

    26KB

  • MD5

    09a306369b39b72857900c1b5ad3971d

  • SHA1

    d91b0b90932fb3282a5e73f7557e3fc808d6b07d

  • SHA256

    32be012081b5b19c9f3b713378992770ffe4cf5fd60ee4a0c1ad7c2462c7217e

  • SHA512

    de564249eef2329443984e2dd9ac94c7324beeaa78a92416e99b2140ef2718774c735f693309cb8244a2fd85ab17138b2ca892a227b1d47547dba272e2776518

  • SSDEEP

    768:SsjtUBlltC52dkNAQcBn5TPL9ny6IdrLkd5AUdmAbC:SsjtcltMS8AQcBn5TPL9ny6IdrAd5AUe

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\09a306369b39b72857900c1b5ad3971d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2424
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2424 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2432

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    f03b1af389c83fe5ef9d47f77502226a

    SHA1

    98b017a6b287083710712b8eb08f9b208812d005

    SHA256

    83300e2525e030aa4b5e23f3f522641a4a97101385a33a566c43ca0f2d1bdd1a

    SHA512

    99a9ddfe8b97cbc9a6523aa26351553a5d640912baa5487e39fdd5d0b09f6f99b58259a9f5452755358a030c86afa50dfdca08fe029e411cff1c721f55350ff4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2cdc4ceab52d7549ef261b5aeedc8cf

    SHA1

    ca15d5e18f6e6e81f86c0665492ca34d350a46ca

    SHA256

    dfb2bf9cf45ab40dfa7f943a138665861cb8e50cfa278fa1e2ac801b894016c5

    SHA512

    577b8edce2e46c21bd3422fe8b546383d33b768e57d86adca01dadbda9809961478c7dccb0b3cbdabbc7d1c9774ab6cbfad64cdbbdab27d696c371ae4389dceb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    078b58a1e915b63da865f254eec38592

    SHA1

    c549bcd301fb01d060a7f223ad589749793b6952

    SHA256

    4e6c402d48a3598b551f522e71ca0c881c51035676fa02ad5a5973f8ee64f586

    SHA512

    42a291890e8b7e013008a05e4b51a4ce1602eec09f5aedc1b326ff55fa61bd453e0d304f0fe9e2082c23fe4e90772de7f8dc256eb644f74f1ad0f48dc98cadd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d60f473e80281d8341b6203c7942fd47

    SHA1

    67aff58709b2797dec5d6086c96c784c6bf0cc0e

    SHA256

    d339aecdd82397dc54cde7b066a480bed73b7e0e84b17ebc17828e028995d3b0

    SHA512

    ce6e52cc2122645bd8d238aa7a214bbb8945901280833a67ce0ea8754a947d7ba6795fe0912f3fb2f84a423c489e0061608e224efb64e3884bc4b609e281fd55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d51a035c5a4e6a19a9040bde327fc5b5

    SHA1

    c90d2521d2dc3628d758c92673c6fe98ce34d5fd

    SHA256

    fe3c57456ea82b67a7e9b71a4e2ce5a0696c9c055626558ed9601d86507b0004

    SHA512

    973fc1a93f0c3fd38c78bc672a72bf6dac5d1955fd0f1d426beeca38d5962a8bd30b8d2bc4f95a9b7b44cb02cc9a8aca6462a2aaeee88412797c559efce2ef3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4afb062b8dcc598f9349776cd4da0330

    SHA1

    5d2af8af8676e077a0c74ba122d590d0b974548e

    SHA256

    87cc9d4bb3b9d1ddfeb5c2e5317c4bf175b20f0d9127da01138b2de8984da683

    SHA512

    3a7d0e4dd364d180604e709bc929fc474381df5d85ca3448b6f40a6051c84d6a716203c501b16e495d11c05b21a36f9aa686488c79705ede30c777ba223065e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee7650bb3626548b00a95cb35d78104f

    SHA1

    7003c84db2f581e4e610d400fd8be172b5c0ad84

    SHA256

    7ef2228ec3fd1008a24d83ca2b56ca6c77d1078c41721c822ba8e4b09a9290d6

    SHA512

    41c2255912a0b0759b835fdfbd5604aa7daf9f54494c120a59622f3c14fb79f86f27e35f318f51655c645bacf8ce917e72b1e7f61cc3f9746a2ee4faec475edc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a9fc61fd306837ba339f62a354eec3a

    SHA1

    48e3f46039a98613ccb853c81ea2abb6c390196a

    SHA256

    2c0b8f77fbde9f8a720d5cd4d04b955da07f20b5db2de5f3e16aa25317ef0608

    SHA512

    6550c84ee36e4b826130e1cedf1e5b67df8b78d8c73c101a1e8178854758560aad39b78b38681f8dab2c3deb145d73f96d4e92a658540014bff23f927152ccb3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    20220ba49a1d12e8f767895fbc920132

    SHA1

    c003048049e1116c046249aa87d6d3b10a1c0413

    SHA256

    1c74b793487aa454133093c2aae913f4b581d2620a90356aa9745afa5f68e190

    SHA512

    9235ef8c86cbb1726ce90152b5e4b86d75ffe96ec5e6f5ba4230dac70b77905be811dfdfff454894c155e8190c49026772117fdcb72e40c10e1ed98d9fe3233c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    acc0529d02ee3f56edd9d051d03afdf4

    SHA1

    dacc1294c5144507338b0e9881bf889be8e056a7

    SHA256

    1c999a2b75ceb2b053efb8653f402db0efb9d445d867591b6858993e2829dcbe

    SHA512

    14920a89c016b198964f5015adb775cc60e6f3fc785689bf66469e16d5e2619f60ce091c551f8021bda054bc2d9351a88601cc4271dd8219922acc9a9207e965

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    73735ec83496364c33e7e450e34d3a41

    SHA1

    ff101536c3f8f4df2f7a32d9fae9702d23fcb966

    SHA256

    1db6cfe471cf2ab60169dd8828a4cc0af378b9a8e87f315194a527cb8275a5c7

    SHA512

    d3d52b1f6e9b679e406c4808b24c3a9185d0768a07f4dcf81afc0c0bc6e9581ff435abf4fbc16a7f14cc48ecd11f598a2b7d785dd55a0a897280ea7bc08321f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e0a415cadc21237fe3670dc9c8028e5

    SHA1

    88a3bdb2039c0e3f61ff77e4286ad23db66a6d71

    SHA256

    937524ab929431194a55847fbc18d1898e3b13df5bcc3e3e6ab20400641a5589

    SHA512

    0e628fdf1c058f8c171cbb49ff9545c80d2f5d8ad8ce7df0287b73f058470538a299a571f462c99a56e8b5b918bd8584d37ed2b21ee6ba2c747d5129a0deaadb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c907338c7f906833f75153edc3e7011c

    SHA1

    b14bf3779b3eacae24be8a3cfcc37efcc87a9f45

    SHA256

    1cf6ed305e49b29e1f98197cb0765d719cd703f1d83227bdb43914909f30e7d3

    SHA512

    ad38cdf7d22ec1c2912ad24a3f3381ffd8c55ba12f86e6c292b36d59d4495339604d4e2dcc0499deb6421b5587cebf255d2287666b9cfa1eb5e0bc3ee1975098

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    381d059b974a451fd5536ab33363f32f

    SHA1

    113d46f97101f40eef5ab4e4c0ef89228e4201ae

    SHA256

    6dcb91aeba9923bf16a0376d93e7651c1c97f616276a60f402e43361c61f9964

    SHA512

    f78d081899c50c17945be2aff6fa1045e63bd5865504b052e60c3deea35fef9fbaaa0e8f205db47926e01a99cd85bc0723e9458116e11742902bba153f632787

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    56b47cb2dfa563f6f077fb48388f7e0b

    SHA1

    0ce04fa0743876421de640a1c90243462b597fab

    SHA256

    4ad1b6b42b74670cdbeb6abea3a92078b8927275dfbf1383e31e1426ff7fe1dd

    SHA512

    2cf3dc079f1ab42279102ded56ccc7e6e56e9d05ed815772526d5b9eeda0c959e80255aebe7af2e89b71451f1a50076eb35d3534e73ea4e9bd89e84df1d818aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a855fce7cb6ea60622dc9feac4c9ef0

    SHA1

    f683abd9a772825c71d3becd84bb39eca82229dd

    SHA256

    56f535ddde067e855cf2ef838c4bf7821c5dbad9bb07adee6940bb6e463d2c5f

    SHA512

    6ae257b25e27c01f5f1d25da53531141676d73dfa29a19cf94045ff2825107f3b447ca3259ca1c43e57d5d1b448c807e7f76b3d5a39bc244053ae6ffc47e2ab1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    809a0083d84f4b8cad94380227328151

    SHA1

    e68b8786b5ae2eb7b2713db12fd82dda5a9a8a03

    SHA256

    c90a018b2203cd5c04db6371cc12f8b5c6cb88e1aee2c62cb6eed6d25a60d189

    SHA512

    7d25e6c1f4532ec11cab051a30eeaa89d131eef9790a0c2dd9af66a7c1f6126682390d7181ed981183ec1d50fb5a3c09ba315880ebb37d988c7fe077eea7a605

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b83e46acfd4f52746c606f810766c370

    SHA1

    6bb8d77b5cef0027a1aff250a92b24a1b66ad094

    SHA256

    02714c7b09bf3b9827c42beef06b8b32cd520b66bb4b959fbc5ff1febbb768ea

    SHA512

    3572f547261512d0d511756d2ebed0be8eb435ed975aaef7345ebdc3a13c051631162b2d603c95a9bf8390c1d0ce930e25a073f5eb469dbd181d024649dc1327

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6311ff2b9d7b82b7c89eaed6b7adfebf

    SHA1

    29e020e8d72eaa94f7013495730e4c7a980edfa1

    SHA256

    508f778fa0c7ffcea678f9c55138069433998671554cdcd95454b7372cf43fcd

    SHA512

    903e04f4ec73acafe555c8c268ac068ee627ec94ce58d4fcf78439196d66e66455b6a26f5b3e90720e39f5290ee96d8ab7f8414fb49fe8a306036b62d848231f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2c4ac1c99205f032fbf93fd81010069

    SHA1

    0ecb4c227a5a4e85716ed3238c2725365758e1d6

    SHA256

    4eee4f9271c8149c6d87e25e276017fb980fadd7d617067011e813721e900223

    SHA512

    66a6a3d85bfdc873aa8ba11b06330750f34ae7d87651e9617d300423df270a97637052f78e534cf799026ba757ae5bc167fd89d2f24ed63fd7837fb8292b1e7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b6fe0a77728763ab3265f08ef748992

    SHA1

    79d024921536ed70c396246e940cd0f84abc26cf

    SHA256

    d6ee51be6901f203ca9b384b390791086344e232276b45683af97f3a0ebbee4b

    SHA512

    372d3627291916efeca142441bd3b36f75ca821508b5827131e9751a6fcf3c03db614644e6366ac462eec8ea0b831b985e8207e7cf82b2021cccc08a0dd300a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    c08570f020ce3c995a4825905e4d5378

    SHA1

    6445a754f6530426ea423a742dd543abba02e8a1

    SHA256

    bd63fe710b896ff7e9ea6eb1986fdd26b9f907b043672d23db8c96d4bbe4e6fe

    SHA512

    62f9e3da7d761544bef956119759ed642ecb9a48b7517bcc6114fc872a660fdc28d3d122f04da47de4f78d8058a00ba82ac735312fdba91472ff4fc2f2496c40

  • C:\Users\Admin\AppData\Local\Temp\CabF8F2.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF8F1.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b