Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    03/10/2024, 14:06

General

  • Target

    0f1035c34402ba11bcad4b758b076233_JaffaCakes118.html

  • Size

    458KB

  • MD5

    0f1035c34402ba11bcad4b758b076233

  • SHA1

    30f34c740f161b813e0442cb6ac577043fcfdce5

  • SHA256

    bf9b0cdf6ec5521fd98fa82ac804a8581448595f23d3d29979eafdcd532fdc8e

  • SHA512

    65103399d56f76c42327eccb5dcb3dbb0f51f0f4386d2a0f682298882b9074837c441b7d2a41079c370ed2f52e6ef728e21ba2c02559579964e3cc87829343e3

  • SSDEEP

    6144:NsMYod+X3oI+YtsMYod+X3oI+Y7UwsMYod+X3oI+YMsMYod+X3oI+YQ:Z5d+X3j5d+X36e5d+X3g5d+X3+

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0f1035c34402ba11bcad4b758b076233_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2148
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2148 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2524

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    013b9da3d885bb9a9e5b9388e4bb431d

    SHA1

    8dc45fdb82f68f98c92cca41eb9828c117a3b7e3

    SHA256

    9fccdd5d93463cf0c4b24584637810be0f98bd059e6be1173f39a6124d68448f

    SHA512

    ce092831d9bdbb12c49f1183ffc7fe5b043adda91423e8a11a6e7a50812292b0f6bbcf35c92b5af51467b6928bb618a2799fe223c57b3c59b92383679904341c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad14b825484a31970cc17616907539b3

    SHA1

    f2d1b5b2e3a21ff3a6ec8bf7f8770afa3dee8341

    SHA256

    143976beba4ba127525908e48966ef8e631059697173f67f50aef8063604a15e

    SHA512

    c71a18ccdb6174ac9dbb1d0d5fc334c9f8d58befc2623fbf226b87aedf5713b4f92f7b6a104513623d8a5ac9690dceedeab1dded2b961652e0c674e20d29cfcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d7450c2d57de8a107ded15d014deb999

    SHA1

    877bbdc5e4815d7a3835fe2413830b9fa497fa38

    SHA256

    e60c17efc8a9f6827de985898432f975243157569dbb0946725737a17fa29ae3

    SHA512

    2bbf5e21b4c4c19bd09787b7b1fd6f2c371ed9417320d51aa3fc8e40c3145f6d1e8d555f52640e252babc42dc700f65ead9263236aa3e7e3f60ce61f700cdccc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    58daa31f0a8da59754b2f948f8c5a126

    SHA1

    67e1215a4308e5ff9953d0eb0b871a5502efc6d2

    SHA256

    d86b059b241f6cca5df5109f37ffd5edbbc15e2653887752d565db6aea6e983b

    SHA512

    e10a91cc61bb4cce9234e3b868b2826bfe942c7f18038febd9d9ff9ad69165bda5df91203aee7a91c5fce586074eb7197a09f500c9bd7926e44cab19d984dfa3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    785aa30b665ab864929458e5a776c2ab

    SHA1

    5968e52fc12fa4b7698593c2b59afac34556d24e

    SHA256

    ca5927f09ab848f8a6c2f129e4e2187669ced8a62e5b5e7d04eac0a25b8e96a4

    SHA512

    3bf0236098fb03241fdc7415a9cad7284184f9a402fa5270bd68957f7f30a257d7c71680383b58b5c96bc234d46dd737793d2e4292a6a7beab48ece6e9720f55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b4f6089f9d3259e381ba05536acecab

    SHA1

    c3a8f9f33c0b8841c4ce21a608b6ba6fb467ebfd

    SHA256

    42867a8ff75c5dc20020d53dd5fbd1d4daf87a3418bf61a9e728c3d6a1404a07

    SHA512

    bafa352136dbbe4005411ae66c7385c507ee807f6d1c8f596216069e28dc5e34070ef01df9de56ff46e1082201434f9ef38208bbe647e9679abc7146f126e4a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8513950c547b2b750392816507b9ba9e

    SHA1

    ee6bc8b9e7c393352182e9c1c228026140209579

    SHA256

    ec5a7f550cd607f70b5792d2a160deb9a7dd35b51973bc515334c03ced863caf

    SHA512

    943d941ded6808c646d82cee6c33df2719111830764dce411ef8b6b834f8d09a0dba3168cc5985c2beb7d98bc0b1ef05ea80967d41d524a9d9eba88ccb42be44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa69ea73327e058d705bc914ef700c4a

    SHA1

    1105a495aa90b08ff8c9b3c4121cb321f6a75610

    SHA256

    95009774d37f9b65b35192b15b88649d1e937e780a95abd61372dfd463cb7ba9

    SHA512

    262c31aae7b4a4c9c568a1541987538de79a48a7b0f11d584663c282577337a6460cc632c8cbe81514f7f60e3b9ff868a4b039d9bd3b8b4172ad98111afdbc15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    283520ec77acd7c2aa9a272be1c7ca3b

    SHA1

    7de5984b3a38158cf1167a6082586ea9473bfe8f

    SHA256

    92c0d65d8f859bc15a1f14ef87d0e735b6098bacf72d2e7287ed9f58b97682e6

    SHA512

    40bb2b24efcc0e3f579a3e39717e13d5f276f51d5bfe2d2d4235b4e5583ad813220adcc3d7abebe5cfbad11c066bc8deb9cb0a2ed07a03334b210d21458abba6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4590b3377bfd17c01ec30d5a6c7194d2

    SHA1

    f6f5916a9b7c15fbb6ac2e1465ba52a616fe9918

    SHA256

    489862dc69375c20118a35040bd589d4c217ec402338f2ecc3b5af6b9e65b5a0

    SHA512

    b87724e6eecca10d2696fa815f8ab4127f2758d12d3a0b2dedbf8fbdf24fc564aef9fe159bbdcdb1eda464c0c502649be6c8801e4696b445b5985038e6fb1ac6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    518ce50dc217c6935b33fe476a2f4286

    SHA1

    af7f34ae780317b7c4fd4e1afe5cc17c86b7b3c3

    SHA256

    4d0177b21a8323bfa3c8a242bbf09d2ca7e932bcedf39d3b069d19c672f6deeb

    SHA512

    d7535ca1bb76c421227b7b8db90e87243b7301973686755883cf373ce9097fe0639bafd9cccbf4420b2e7f8d73b14feb8798070923a4b215e16f79b05c0cc8aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a86a52a8a1a61dc5f896801035ff5731

    SHA1

    bcd75e0548e703affd8a1f584030d37947a8b8aa

    SHA256

    94a960fdf82817b816a3b16e1bb261c258559de5ae99197670927c37e0229569

    SHA512

    a1f1379f60d013ef76a63170a226073326338be80f9ee3cbb2db91542377ac757fbd57a0737e097a389f2e8bda762291b0f8d725c9710dd7ea4d2160499d37e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0fde93ba3c29f808d5ed92f24d33f3bf

    SHA1

    dc8fdd1fd3c8870b180d84e3b7361544aac3c07a

    SHA256

    1a850bbb376fdfb485f3ec678c43ccf4d16f17b5abbdf04e6f30c4ce5bd12d1b

    SHA512

    d9ab22307dfab345f5a948d8f977d8e13760d179feb0e4ffdaec857127b5c563c14c0611e8f7f4fb9b7b1504a414d9ee80656d7c9c5a7bc2430d266a2eb7a25d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fe4595df96c49e3753a7849b91147fae

    SHA1

    ffa14605357b37c19e41763a90259bbf48898329

    SHA256

    b9e7517d025e586c1b0492209d9a76211983181181cc4bc40cbdb5941dd010a4

    SHA512

    840534a99a1f5f3988fc60d62f7e8100ebdf9430812c8d4f0f73a16a1dfea2a1c183df5aa8cb181c1c64b58e6d69018005318bbd199b45ce501de19a91129d13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be44b07d32fa3075268ae0522ac93c7b

    SHA1

    c433676668a590b0ba22480dc4ddb7ca629a50d5

    SHA256

    4d3af39eb0d2570d54d674989f32024eca3db12e38f2a2e648610f7fc96da348

    SHA512

    0e9156bc3bf551769f90d17a82278c9d0247411439319700fc03122149948d841485a8d54e580980105ff72695db5ac35396e716fc6265a61b0a744412f79724

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2a7a76fbed4d4f5603b94eb42bbde1f

    SHA1

    06f8d6afbe1171033d586ff6dea129f2201a5146

    SHA256

    4415ee4a3a77ec3d75842199917eea3a00c31f58cee9a3222cb57b130be11d12

    SHA512

    2ebc8df5a229df60a1848f9f607afd26708484eefe349f68a5bee372846f8a5c454fb2d3a5df034d55b1bf9530672660663c6bd2772a916a3739a842fe93b80f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    07208fd23c8b5fc9206b338a08b815a0

    SHA1

    9778a6da27d042c80f73825abccbfa44d8d4637f

    SHA256

    b8990a7803b675e7bd6a6547420bac99d717526144f6edcfa8cd4197e0f19df3

    SHA512

    d50156c1f539ae53d04f76c7467419d1ad5eab1ce4a326a4ac27ae2d51860f03031d46ae917359f7880d70750bc83b74f1a5bb21e3331b90ffac2e9d6b44139b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d447fb4b108cdf7f43782ef0bb910ddb

    SHA1

    d97f8f3120ada083e343ee8df487241564232a2c

    SHA256

    9e972e9e237eafdd566425d42b4b0a067db2bbc79c09f63ff8ccb1d0c28c5cb8

    SHA512

    8ac89f75975f96acd063adb7b2e83c7b17956b93d3fbc8f0a9e92c49a474f68c8bf78d7bc4451c4ba76bd915abd92558d2edc612c3aaff0f072b59cf2b4cd5b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f1af236d7467c2db90ccd743d998064

    SHA1

    5a8fd9830b15ee319bc0080ed950a5f2c6ad5a15

    SHA256

    f618a7bd25a9de074723b89a0be37f9cf5e098d3e394f5cba85b7478fe5114f4

    SHA512

    3287d28555f715e56c9f411cc897cea33aa5b70e6680931a16468813990ce597643722fdeb782880dba466096868bf074a9fef9b63d7ed5d9669ef2c9ace52b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6802cd99d68eaedd90b29fd88fd9d534

    SHA1

    7414690f7673429c847db336c75aff75c78e9c46

    SHA256

    79a8165cf197e98c9ae0803627aed3352780684f2366ee7c869185686a407b0b

    SHA512

    53e35782e0dedd6200cb6c500efde6d61acc7f331ae530bd316c0e3ab7cc4e4c077273b9d4c56b2676a48d9b8152e228b42dc2c5f597095d52e2351111c09af6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    ae0630a50abd229ea14be0e3e878909b

    SHA1

    d6c72fe05b4703cba3f5d27ee0a34cd44ad21b07

    SHA256

    56b9288ec28f599e24369e465bd8136868c5b904a40b9831d74f3bb03534e8e7

    SHA512

    e3717ac8d63814ee9bb69a7822045309c8e6e996abaeffd3b98d59b62bdeb010e455183da58115bff0f778721dbb9d69d86b4df238afd35a3d79261357e0c9aa

  • C:\Users\Admin\AppData\Local\Temp\CabB627.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarB628.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b