Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    02/10/2024, 10:21

General

  • Target

    0a2f49fb259b83d772636f673dd42a54_JaffaCakes118.html

  • Size

    26KB

  • MD5

    0a2f49fb259b83d772636f673dd42a54

  • SHA1

    bfe233ac8b508b71ac25007c170801e378a1663b

  • SHA256

    b3d5589c55507a212740a3d9404117df83540c7fb8084bf3b84dd0854f84c10c

  • SHA512

    5c67da16c291694ee7135987843345da6935758a2777a19caf56264e5900fd8bc250e0db370e2928a8e719f2fb2e8251577375cd32bf54df8e20f40ff46006b7

  • SSDEEP

    192:5bpdNpqYij6weurb6j5HaLA6cepsEZFuID0sC/wXhwX7+Ta5diku7hKVExuNcYX:r8Yi+weurs56LA6cQsQuIflXG+TdK3X

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0a2f49fb259b83d772636f673dd42a54_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2332
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2332 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2916

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    b78da8b4e74cf7fefe26b05d5888472c

    SHA1

    221e0eb098cf7ea9bc3a301f6f5f3609d83b5ca7

    SHA256

    28f09549423b9a922ccaa8cc89737742e65c39a97953f89104df6c4be2516520

    SHA512

    11878d5b7c068b411349cbb66e6719f4e0f7ee5a1ebc73492bc9b73dbeb09329e5b7d6401d533e09d6d54bb46f60b27c740643881da98dbf26c85dddfa495d75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d78ae31504b6ff941d7c9d314adc46d5

    SHA1

    ce646311a4ea04ef205e2f0a9901e58e4828e80b

    SHA256

    7af597ef521bea77e4fc4ca412ef5cf203a08897e3132e9259c51865718357d4

    SHA512

    65258dd43d65633c29662f9d7d3958798cb798ec219e5cea104b0373fc51e536ad8485d2b802ec1550931e2f06a6d8a3051f8c3896bca74255d8c0b07fd60649

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63c34d44e4d1ca0c6c1815f9839d5fd8

    SHA1

    2f50b9b973372cdd73ff158dbe2d2be8e12e3027

    SHA256

    7408ab1e1a325345fd64aefce1d451c78550c424f83f0d497f154b47f0dd9f63

    SHA512

    aeea778454a4382e48e93b63797d5eebba8cb8dc9a79d22f494bfffb20c5cac9221aef5086aaf58358009813a72e3ec40f4c451ba659c518aaf0eaa41e967b49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fdd49efc767ae7e2694a364d13130d44

    SHA1

    fef5175164506d0c1b840183335155a10f1b92e9

    SHA256

    4bb13f651d2b32325a9ac71da4fd9b7423ffb594b38dc902b55d49ea89b3f9f8

    SHA512

    2b1824b4b4945403271b6872acd99ce4b2886cd6a267023ac273b3c6ad54643bb8da8b58e6cc3bd426fad07ae7e64f4b1281da3d66d1c3099c6d078e51477db7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b3b5244bf00b171caadc5bc6ecf6df6

    SHA1

    70cf3adb89bb8a43af4f836d3f1771e8f85132db

    SHA256

    c0d04ad62d2cbde3c796bd12f1a9ea96af5c8339f3dad1c4457b88108db93a7e

    SHA512

    2149a34a0b9289a283c785efebcc70c91fa0f9d315a496924f97a17fb369d58abb07ed9fb2d8f66fdb7b58d7e5814085e040c4a1b1b82a397be8c949b12b5f46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    55651eeb2fa5bcc45856473a469a8dfc

    SHA1

    70a579fc25beb550edee09a57299c847e1d6d214

    SHA256

    b5c38aa52c218f9b09a5356a3ddce2f217a4f8b2a8e452b95c399a7352211492

    SHA512

    a86ab362c41a6b50bba602f5e401a3b171d6b423e41b7fca1bb2c9bc8cfdee9a2b6efa859b2e729c73855e44902706c7a2d621906a1b4486f2d809ea3aa4eeae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49b362e765340e1314caba94dacbb9da

    SHA1

    1f4478e4a8512eb8e8ec1166e3b87295ed455b5c

    SHA256

    6db0eb79ad6c0f26b3176242b0c498c4b723ccaac7cf56ffdc1e90dceef0ec6f

    SHA512

    1d2f350c11a051dc6d7ce8d36c4349ad1ff93458d65d642c24c39888be5854984863efe06512199b8ed63fb9a6e0e76dc490b52e707342a26c333c498ed2fddf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e0c28e2a31985f8526888237c4e6992a

    SHA1

    49ccd7d4d768721589ed100cc6c7b9125459a63b

    SHA256

    07033b2e4b756f678d0d9790fa520a0a650309c326b1278a6da0b0569e2b2b10

    SHA512

    0e79ded26d172f482c98581580eeb0f7cc7f21e5b7821784d6a4074cc150a52a98f858dee22bed7a54a53027238b6bf63f7dd6dd953aa97ef0ae34209c81c9c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    14144e42bf862549df3395624b87e26d

    SHA1

    e8b108c6d7958f0b440b8a3105ece1a636480e7e

    SHA256

    47c66d6afaa9dbcd5064840517119fe094dbe81dadb11d4ce245909ef5327c1f

    SHA512

    f0ef6d0c53abc43a775da6eebfd8292fd41b1c2f1037740d74a4862ad63b13c6af9365f5439a413f6c21a508164b1a951899abddb54801740765c4930b564537

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb8e8edb3adb0b59ef7ee52b030ea815

    SHA1

    12edb8e15cd401fd854ec31bfeec06297e40adcf

    SHA256

    b1443d705ee993faeedc0d5934df968320252f9aff3ef857b52a3808fdcc9dab

    SHA512

    f8f5c2451e95fae28c25f6cb4cbf71f3df5100308a691550023909b83b7b0de52cfb6bf5a53636a1728e0d281f5bf8c9b7c10c96bed1909c0d2ede7bcbc4fee2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f1834ef681d142e7e5f3f0b4828a2ef

    SHA1

    e31bb49b3bf32722d7acce4b2d5e17a56985f2c9

    SHA256

    53920f61500ec6f2bc1f6d825e2e45dadffc686cc49f9f450968780b7c257e26

    SHA512

    23f931eb4a2953fa3f40693b77e7258fc34eaa5f3abc3a8d420bc2223f50137b53a44f639c826e0363dac02c8043db762a9d09b31e601608b8e95d7ae96a50d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f57d7a7b45524a88017251d5a65d8d6

    SHA1

    e3d78a59a7fc159c9448b11ca3e6c8621d149101

    SHA256

    e3b5c9fc71a1afb7c872577c5c96070c59f5198d558b06ce44c10df51814ad50

    SHA512

    7de1a0fc4ac3cdf3a707269fedc2a6e58e7e97bb4f6d7c320e213bd81dcb6273acb79d00054975e351ad72de19203b78f816996036989a45bb8257e502a8cd38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a66a7e00bc9139972a7d6dd5f7f3f37

    SHA1

    90617a3e8d2ae5a8ecb1bcdee89b707a62772d1d

    SHA256

    6b1c703dbbbdbf3db62beb44310fa372c40d41aaa884bb22975ac4c89c3562f9

    SHA512

    6fde0a3619622520be4d3b7d19483c7a4ddb94d8e5ec7c89777c6e091b7d692d1f54cb2a5d40f2015c466e0a5439a3cb1f3589ee38cfbeba4ae82a5a113f442b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a864ba995645dbd8ec9a5ed969479892

    SHA1

    e790e45d7f491ea6a2c719ba3b8ae1cde449b2a0

    SHA256

    ce2b61afb2ed0b7ed97c3856bda72d16cf237760aa101dbd21406f629d350a28

    SHA512

    054f4a61cc26524a69f0d5a919febe89d30fca1c40c1c91f65cdc7dfc3b9ac7915da8a309a3a1d106cb3303fc28e72ee5ba43f3c20ba49f7ed95de8341780053

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    42e9e115013a1b1d20096630d4ec1c92

    SHA1

    7b5d418cb63a8b135e795532ccf8cc9a5edbcffe

    SHA256

    0203f30cb4b3dc06151115cbf1dbeee56e9e0689162bc715463710435e8c0bf7

    SHA512

    8f1c72d99bb5a1281595447170f2fb4ab649c6640ee57c408065464cd5c954ef7805aed5e444ac30b0efe9e8ead6364da14d9e92bdca9f69e3da567c0cafe263

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1a0105170be12ea5d33ccde3f6f1b169

    SHA1

    9adfc8fbf18073c579028b1fd4d1a1198773c104

    SHA256

    1b445d0ed62956dff838a4a44f1906ded9c123f6583158e88f1a7f03e1a2c5a0

    SHA512

    9969243a34504459cfb61cf36a33f6eeea6549b4dbf2a5304563ba4ac525e5acea699902366e922f2d1230f9e7d43880eeb05e51a6b6407fc01ab748d2f05c5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d32e40105161112f9f3a905d747e7bd2

    SHA1

    4b36d92a6bdfdc397a4fcdc2d8b2140d7f65dac6

    SHA256

    694dbf6688c7a87324b66b30ea1a4d0b5cd95670e398cef7fbf701fe523f7815

    SHA512

    7ad950e090c5e35ff38b4d604a9e82b7ed66d8a070081d25d79c2b6793e1be7813895ba7803a7c396836eb7dbb1561ae4d5dfb9df60e9d7b080828b2eea40666

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8fb40616f46bfa0f45b1d988e979bf51

    SHA1

    4d8e051fb3745d68ad30b988def4a765880acbb4

    SHA256

    5963fda3541869ba42601daa1a84df9017bd822a66c5f7b39b7f1a50ae6290bc

    SHA512

    679569162e5fbbfd79ffb29fcb8677c42334eb5271a87d1bf01bfa5fa3c78fcca7c56e9b280ee02310003eb5de0fdb00553dc970ad040e569d9d8dd3129e2aa1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c5ee8402a97e4dfaf0332e12c11819d

    SHA1

    7389ea820562db2f4767aa62a82b26a88255d657

    SHA256

    d98948e310b0dd9df13f70486cd0cf80fbc121994697aefd829d2b8eea3c6070

    SHA512

    4cdbf24c92e35cd4e2a629f99896b0cff251267539f4f9579a50f339c68b90303e481b33e9fee888b26fb12fe33b724815a06a14a2b10c615a803a179e6df36f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5137c44ffdf675bd12c41a4ee5e3f1b1

    SHA1

    fee62a4d196c63138cd61d41759fe36de6c628b6

    SHA256

    05e65612d367d68703d654287d2f7cfe7a549d470db876970cb13679507be710

    SHA512

    741770f37606c220784261408ff4346786f27153ce54180720647e082d120c1af3b36869669ee313814ed32f71410ccc3e761b385b7144f59e564051dd4cf556

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    927c399c2c68e086121a6713c17eb8ca

    SHA1

    44273ea72406c65a3a0061e4405573c7d4572c9a

    SHA256

    61159a8cbdcc123fb11d4efef762986206bcf499af9d2af66e6a0d53198bd162

    SHA512

    fce42fd7fd4fb974c56abc22ead1d0a2f0c540e5047900f7ae8178e750e50ed18a9569119c1f407ff0d2c91e2927df5e1af66bce53852caede9805f867c72f78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    338f004f2882e73296ea8c9bbacd646a

    SHA1

    21a3352ec519cce43e6054d3ceb2ad9c4b74d3a6

    SHA256

    28701342854753dba288b15d55eabd129cb63914b2b1d3c1756c9d45f059aace

    SHA512

    e61ee2b9e75554458fa9733e5f4b3196c6bc046d9f719997800a34b5f864c39d2e97aab922f4b623dca65d62c34bb4e4142524124330a75252a6148b81d2d5ee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7CNUR30T\cb=gapi[1].js

    Filesize

    66KB

    MD5

    aa012028297a26c039c37ab25a4bd17a

    SHA1

    25f23d01b5f580c00778e1c010225e5b8c73b66c

    SHA256

    55cd2316edf7159b623e4ec2c9e3a334027c01e2d1cc386f833ebcd35ed87b38

    SHA512

    d346eb082674fc26d562da9a12f36ad2cc7db1f1b35c891a8734284cf1bd052a967137c1281982070688b2bb2e06c7f4967d1c9397311a31a11a8560b9c45fd5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D6V88JEY\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    e691b2e17de9ec018eca758518bf5dc8

    SHA1

    3238d543acf53b803dfbd260405fa558717daaff

    SHA256

    438d41bec769ff386a2c1555b6bf9105362f67dc3e711c81c6092ee7fbf6ad2e

    SHA512

    5589a5cb408ee8e0fd473de24224ba8fa1453eba5df6e591570810f992160d4f3e8f60f8ba74d9994861759321f5bfe0c4a608636913a8407b5184008457afc8

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M4TQDAHL\2254111616-postmessagerelay[1].js

    Filesize

    10KB

    MD5

    c264799bac4a96a4cd63eb09f0476a74

    SHA1

    d8a1077bf625dac9611a37bfb4e6c0cd07978f4c

    SHA256

    17dce4003e6a3d958bb8307bffa9c195694881f549943a7bdb2769b082f9326d

    SHA512

    6acd83dfd3db93f1f999d524b8828b64c8c0731567c3c0b8a77c6ddcf03d0e74ee20d23171e6ceac0c9f099dce03f8e5d68e78c374da2c055973f6ac2db4e4f9

  • C:\Users\Admin\AppData\Local\Temp\CabBB75.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarBC14.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b