Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    02/10/2024, 19:43

General

  • Target

    0c36819369b949113ba7072c495a0b4d_JaffaCakes118.html

  • Size

    150KB

  • MD5

    0c36819369b949113ba7072c495a0b4d

  • SHA1

    236f78cf16e5ff2543afb093b4d87a94ad276226

  • SHA256

    914527f1183abed0f7ec8dd7b39042ee02ab9a28a746ed7291ce25ccf6487194

  • SHA512

    bc5e76581f2e5b2e4a14ee7b5aafee7f29990c7a961fab24f8feb43e27ab9fb2afe17e2d182c5cd74816e3dd83bc116df6f70d84a80163398355bc24edf74a42

  • SSDEEP

    3072:sWheHuL8G/mHKnY/2a6+QUkaeQMrC+rNIHhw9UtZJie:dCWNIHh0UDJie

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0c36819369b949113ba7072c495a0b4d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2932
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2932 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2708

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\0E03D2AE7344CD893AF6BC974B9AD61D

    Filesize

    504B

    MD5

    b2af46c2985e9d11f21c1c0b29abe55b

    SHA1

    a9d90f40c1928914208b01e2ba763002d16d2afa

    SHA256

    c647d2265339a19520e426bd63e3fab0797d639286c5a185a9e6de2f0643b7e1

    SHA512

    0cbac373ad5e73cc4298d31990407910bda189a28e98a7a98b529438415286c93bb6f7dedf7c804bdd9bdad0fc2ade4034a3c13e2d2cd7a73effb838460f2305

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751

    Filesize

    717B

    MD5

    822467b728b7a66b081c91795373789a

    SHA1

    d8f2f02e1eef62485a9feffd59ce837511749865

    SHA256

    af2343382b88335eea72251ad84949e244ff54b6995063e24459a7216e9576b9

    SHA512

    bacea07d92c32078ca6a0161549b4e18edab745dd44947e5f181d28cc24468e07769d6835816cdfb944fd3d0099bde5e21b48f4966824c5c16c1801712303eb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0E03D2AE7344CD893AF6BC974B9AD61D

    Filesize

    550B

    MD5

    b236e3e0ec91b1648b27fa991f2f66fb

    SHA1

    e5a9941e9e33e5de793a23cce30834474d581345

    SHA256

    033da33332a97c8ddfcd2f86932b6a7a1467f11350eab5d15fe2fa8fe5b22008

    SHA512

    2eb4a514fc86a4d5102b576c24a1aa7873cc03d203214ce2a389c01a55709de718ed4d48c925cfec50b9fe9434a625baf518c502a85b72e9f4f869af190101b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751

    Filesize

    192B

    MD5

    f55424c0ef47419dc27ddae5e662ac80

    SHA1

    def871b25b4af8d90c6cc322b524d441a15ca72f

    SHA256

    6dd3bbd68bf36a305eba1d81b0ece45b69180909fcdda6eb0367190e9a1158e6

    SHA512

    89a13bf5e1796c85f82288e978c80a38a489b61e2fc1725be2b3464e320bec82cb5dd03dff662961da831f0efa06642586fdde0fbce74612192d2fb7299ddbc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751

    Filesize

    192B

    MD5

    560605517c640f69ede4ea626aab5ad6

    SHA1

    d2fd7273bd8df905b009fd45a494ca2359bc2eac

    SHA256

    82d60a261ca3a3d76a9c8fdc525b52d88f2c353656cbf55d533e45e563ae443d

    SHA512

    6050be960f8cda1e9e87dc5a240a1152484732c1aacf8d46ddefd83eea4ccfacdf3d8c11e85ff7157ff8e15fc41026c44be6962ad3a3ec02b90e16c6fb631a63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    f88bc30f52d7015986288f42639d62b4

    SHA1

    81ab284feb9ef6fa542c2eb858bfaad069430be5

    SHA256

    ac450dcf40590647ff9c431d24e9c5aef2e4286d019b41079db2d48f9dd091e7

    SHA512

    c438b9faea0a66b6d6d84a53c23548fb2a51a9f69034ed400d28647ca14076409243a4051dd99eae1ca5d576ea2342cfba675802ce5793172d3811426be3effb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fcca82494e1980a4d35e32c4c7c58aec

    SHA1

    e4df708559769887318cb84f81e2f8e0c5cf7037

    SHA256

    2a9ce9bde1aefd1067dfe3440b86856ed36b1d25aac2b03d2e47e29b16af4053

    SHA512

    893fcbfadbad0924368cf1d3e23d54c56c260401859d20e1c07f9f61e61f27727e435f3d9eb381d4b8877967e54ed11ebbe5b1e7ec9530b14614c06e5c220ad4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b5a2809b7ae5c138eac35354b134455b

    SHA1

    85c0a2c4933d494dfbe9c883b2b3a90553036bbf

    SHA256

    cfc3670e8b6c18b112df7dda8acb1be1cc3fe50beb1df54c9f74c643eb2502b7

    SHA512

    576733a40485e8f3245455342027d3f7676315d4be6fae2481629d972e3ea9b3c0783e1ef900a91f16fa05f9a6be84b4c279fa7518c40dc3980bd10f71f35f09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2090c83b9bc4767fc6a8d9bfa46dfe04

    SHA1

    18d63a73f657851ecf45c0ad6fd033eaf61e5ff4

    SHA256

    777df12e3b9f7ba6c3126e60909c9b28eb761eed98ecdf84b06b3e11a89e1234

    SHA512

    b8214d286c78f15af5d665db259858b086ecbd9ab65e859542848edafad659be930177fa0623e72f3aa9fcf78f5a9e76a896532e7f6c644cc88493c923160013

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    64d5e34459d3ee40041f0330482a9869

    SHA1

    bf14405d3a02398d9bf740bd17beae1b79780354

    SHA256

    3646f7c2bd4efa21993a3e2bae7201160b6732444c655f24e6ac3db5487ae7cf

    SHA512

    6c419e0a21cc18d68be318dcc0f4d5112c972d7199e5ccbf358acc464053f78893645695931b08e49c1029d467266be5e075be8e2420e7fb6ff7e38b7cdb1152

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1efed6fdecf0612f0f069c80384a5d4f

    SHA1

    7c4696a96bf5758c357ad08d81eb50db259fdda6

    SHA256

    226a33722d586dfb2936ed10923e7abc5c2c95c27291700f83a982a6dd386876

    SHA512

    ed51856511a706557dc096db07efc38c01524bf6675340efda9ffa9d7094129ff6a75e37391d8fe2fda864abd109dadb92e2d113ef467b4ce929f3cb22e18915

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1bf50819df7ef181a189470323990e00

    SHA1

    4e1ecfa777710cdba78474a6c6931fe44b5a1610

    SHA256

    d74046a2159a76910177947b89822224000f01e6d801496007de708b2f87363f

    SHA512

    ec7664eca6fbc59d2d5eb29dbf059958ee5ea199aee6cb9ce03181c5fe14afcbf9f9df565e251def37dba97657895246b5689ff87767562e27d2f7b7b44b112c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d455a1e0db1d2cc4af11ee266b092c04

    SHA1

    d2bf2f80d4e6cce207ab776393011d8c7d375302

    SHA256

    7c0568380a886f32ec94bb11980e4bdc12477c6d76f451e3000fccecff1d61cd

    SHA512

    dee03b21e7b5355bc2076a858a16a4ce638ea7b6991423383b7d1d259882240ec880a0f1421aeb2d8e1805f71a87aa9bd6ed25f7cfb8cbde559027209a98633d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    27f622cd41b9951085e4078f4a080da3

    SHA1

    f25e78bbac16755e4278be93c4835c34ad966d72

    SHA256

    5cdb6904545874793950c89375cf609207a81759eee62f1e034691708ce81f2e

    SHA512

    c61f5e793970befe242f1b130bfad75859a9ea2b0e607c7499595584bdb25e6fe21fd20be76f6590a91675ca09c7b9af40e523040486ba7eb8f4ae3c54784462

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d2c7bc70562a302348eccf61f6fe7bd9

    SHA1

    b5575bbb74c4a36310bb88952f424f5aa0f4259f

    SHA256

    504b6a7126ab720d75a011947786cca87e713f86c608cbbb7c29261b0f839bdf

    SHA512

    34d522a9eb97c42782fe61b707c479de107eb4c1fd2308ffbe65f4a9fe369e223564d9d3f9032b0e9d813275fdbea65c08edd03f75e3f5e34ed6bbf7906d370a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ceb5d37b453e2f7c1a1315fe2196926

    SHA1

    c119bc62a6f273cc5e0422cae98939387462a66f

    SHA256

    0ef809ac1455517d020e987f4f2eba0b25276780f5337ace4bfb5804b039fdc5

    SHA512

    8dff34ba23668b6e0b29c32fb5a67e4234dbfaa994f21cab64747cb41f865d495d4ef83a04f3ecb634869c87725bc9d74c72aa8db25c90eed4be8193f982737d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    027ad6934db7081bbd6805038b2ebaf8

    SHA1

    8b0f252b367a7dd78cfa695c91cea4326c2e7cd4

    SHA256

    63494b387c1fb94a1c48ebaa137fb20d27fa204ed56c572c69e7e9742eb78943

    SHA512

    43b9551e4bdfdae4d6797a810983762fe8a9925d889ebc8288b1c5d680b9b23e5d77299c8e19e15a0828d15ff2eb42c18d586e80fa7504ede257116ab53dec8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff08bc75012c2bc8fe7ccf673ca5f2d3

    SHA1

    cbb8f520c48e728a72f9e9d3b91a391bcf8e4bc0

    SHA256

    13360f90ec03053c9f8f1c3b6051f9eae28d9628970c5496fb240a402202bba9

    SHA512

    45f72f3ae904bc78ac600ed869d71fe00ed184aec1d5b81df9b47f6da909203204ac74e57de09f10177cd72c66e4fe30e25513c510eb46c4946fe69f362137fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4642ce599e30add732582fb3a141863a

    SHA1

    94e4aef97859b93329d6cc5157fd7d7081bd0189

    SHA256

    6246e8cec4b6ea707b607c5e29a1638c82476e04e3c9b727bc6825908da92bd4

    SHA512

    e1447444bc41c94a3fd9f067b3cde1f40687d38c95cee530a41281fe663df8adbbd7708b7479abd12d6042979a843d76344233a99db97fa2899622a44d053642

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3683e50d59ff1be47f1ff2758c884d61

    SHA1

    67c17d9754b281791c4959461f1e6405ddf6dcdc

    SHA256

    18b0435defe5ea3181881e37dbb7bab2e55d18778d0bc32a449f7b3c5eb3ea8f

    SHA512

    d09f92d9d3f5babfce664f77246c2188adc1ba8fa18d34369d4493c20570b51d1bbdd87a62c0a8dc862795c59ab880b4470dc9e73131f5374169730973fd3382

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    31ef8962bcdb5d5bb945a5fe48ac1b99

    SHA1

    507662f7a83c0457a525b3f9122c75342a759558

    SHA256

    29a94410f493be02cac44bfd50213927ba6b14596277400fcc12b1551c4d745d

    SHA512

    51ca89da4d662c423a783198ff67bc7fb2e2c22ea3c8c92672ac07404f4b886e9ecf491a518d022761c17155b3dc4b5dc6b31b3dda47bf400632bd0fb7a4602f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f2f7ac96ccea2968382637f4cc84111a

    SHA1

    cc3ed628941fa90ee132d846c0750d8a998d033c

    SHA256

    abf1044835b5f4f94a457ee3f6653876a87e9fb2fc874d24dcf6976d6c4f5265

    SHA512

    92af4b742f9aa84e8e5f2929e4d6385fe8cae7f795a26f0de321d581f316a61432c73247428c9a6783d7565495889ed11467472aad2aca2a0a4a5edc51a4f422

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1bda929e467c8e5b250426794fa47682

    SHA1

    7ca4fbab61476e3b8b4589288dbe426a6699e32c

    SHA256

    0444830f627625be1592846eaaef5d860d7b9c008c5b4fc8d4f5077850c71c70

    SHA512

    1708ee1fe481ff5fd60600eaf644abfcca2451e7c126e8a95bbe7e1bca9e1f55e3ac8f1e3e9595a03f58794fbc8ac474b6f4a6004e3febae65675cd32a95efe2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2a2f2a082447a7ec045265388d105a7

    SHA1

    99573fcdc59181f31b3d11bf83c85b95b7e32646

    SHA256

    f378eea07f01b989a4343c7de263a304c7008d816250d5a6c597e989c36ed1b8

    SHA512

    1b367cc899c0d3872859fb77606d8035bf7df02a4bc7bfac7ea5eec7bac4a0005c7d5e3c755d5db549c2228c726ca49b9f5ff43a1ef568e81c2a524da089b28f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7500a4262a4a91e1f9827c24ac663c73

    SHA1

    3ba092b48eb746ba8b5c74cb3fee0404180a7ae8

    SHA256

    84e8ccdbfe5fd32953a0c73246a02dfc9f953a0a3ada3722d0721b10d15a3821

    SHA512

    0130637b2c717ed54f93e5d8cb22f37b4cccc3129c297b8557c2ddb8adcf55448463639e091ecddca00f59292333f622671a7a09c7d489f2cee60b93056ab923

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee36e9a631cf90ccc39ca54fdf8a06bc

    SHA1

    e8d0ffd6da771e796b176daa50b6943b7b5f265b

    SHA256

    2b1a12ae1f6d939d94cd708ee1e0ce5b6b031cd42093c717837f55ea37bee49a

    SHA512

    0d0bb33ebda7b34269adc62255ced0d504eb968dabbd410edc743bb052f6aff7ee8f4beda28534c909efddc96a5465abc1822acd24b6d380a446eef9ca779f8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    39adaec23aac11adb00ef49673a39788

    SHA1

    8486a80b6d50e85c1520ae7ccf75bcbfb1107363

    SHA256

    9894ad44186a2f2b9f015a2629b74fc499e4b39d0a3a7366d2900a568f99aafa

    SHA512

    432e58793fbaaa1d6fa4b11e10043732d935d705553395a9b74d13b287c4729775111995c77a83aca7a8c2640f66facd9685717d602590645209a67e52f78827

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DJB1KT77\itemslider[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\CabAA56.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarAA57.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b