Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    05/10/2024, 00:22

General

  • Target

    1573b8a7eab9a24c1d0ac7ae6b9e9685_JaffaCakes118.html

  • Size

    57KB

  • MD5

    1573b8a7eab9a24c1d0ac7ae6b9e9685

  • SHA1

    fc3da26f8e3eff6dc2bc2cc10f4f50ad18a292ee

  • SHA256

    b6046b10793e6631d5e4b27146fb961a085e7ef69ce0cb5e800d10f5da250ebf

  • SHA512

    52873f79a6e96a77f521e25e75fc8071fb41aa91b3ea2f42fa6ac17fa44e0b7123d50621dc21e6ab949c8718c7c3a58eddbeb20585ab92cd61eecd304aae2dee

  • SSDEEP

    1536:ijEQvK8OPHdsAeo2vgyHJv0owbd6zKD6CDK2RVroN2wpDK2RVy:ijnOPHdsK2vgyHJutDK2RVroN2wpDK2m

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1573b8a7eab9a24c1d0ac7ae6b9e9685_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1680
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1680 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1384

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    6d7edf6ca17aaeff46314f9dd447d867

    SHA1

    d068c30a2c87bd7a6b256249f3aa93cb794eac79

    SHA256

    39c4ccb0ef4a4e11b3cd7b005673c40dc6c3059f995ce26d4fe02c9fd298ef0a

    SHA512

    790c3717637d4c2ea9375d86e4fb1dda5d8b66191c3e86497146bfb2bdf204ea65753543c00300e655e9e958c9bd0f1df41316f47517cbaa8ab5feca7a2b314a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    31603726e7021bffdb6f4b637d559472

    SHA1

    4a374781f1fdd7dcfa4c771a05a0a268211e92d8

    SHA256

    81289a74c1347705852aff9a6ad5b7ee1bc339d85253b2b106a68ad075d9266c

    SHA512

    be761b89d49fefec347320038dec88c068feac2878476643a14f4cfe9f57f0c860b62be8f21422a235cbd3fe0cdcdc905fb373d52ec4066bbddfde564ccf31ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f58e7ea460922c852fc1f827f5c95400

    SHA1

    3f3999cd86e1cb23acd7237d5a04e70b03d7ba89

    SHA256

    24c205f11f6fb07ff7158cf0657137f4e013f7138d9965a223c3198930654178

    SHA512

    f9fec2977ea95aaf7aa8e1ee62e1802fd30c35b183210896e947e7aa1b43510edbb951604d2628c224e7a5c64534f585285070133a19018170f6dd6bb65e4905

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    09e8ce7cefb8318d7494223b0835d7fa

    SHA1

    1b2f268df014bbf856a39a98bbb1484a9b6e0577

    SHA256

    ab309dc320142816b966b55061db5d39ac6168b556fe35ee8180c709acaa9d00

    SHA512

    eccc79d7aa39d57f6cdeb05dc2bce8d3ff180e54241aa7b3d9c93d03979aa903bd1ce3d05af9ba7efb0dc2af6ce0a6eb5da15f5492ff4fd7718bc539d58fcdcf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5839d76ca77f4e0574e13cb646421dc7

    SHA1

    ecbb22dde5580d4e5e42fe4dc6afd70d4ba2717f

    SHA256

    b9ea1bf218a0d1bbae203db1ba6d726a8dee11df4bb3a8a9449aa39ce7667963

    SHA512

    eb23c2277913c857a2c841d3ba5fddc5b6f4fccba714ca00deafdc745fe908ca6152cbcdf1c515d1b20b92b7acf389506ea3f7109f813dcd3c34c0379c30d773

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    73d55729bc755fcdcf72dd5618d8ed6a

    SHA1

    5c8796a4bc194e90e0520b9ef1b24440c1dd568b

    SHA256

    cc60bedee61aadca482a2f9f4576e6d675466bff7eed0f867eab586e6c78693e

    SHA512

    f45bda6ed4abf1d9dcbf5f301edf993a05471c642832f2a1879a8a66a3613539c7c499bee782b36ae976459e7ab90ff8376030f244e76092144a2eb539daa517

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf6ca7b11ff1a64f978dc8cee6bcbc4f

    SHA1

    58aaea8e5aebae478a21ac91d17dc2ebe0014837

    SHA256

    8be02826a722d03c543f7f3fb527a7592dc735eed8b720d854a2d698f9c5bc0f

    SHA512

    259de64b43af3871bbc8eec0a8ddc51923816629981933b3e13e082706996124b8f62dd9170df736bc9c1e56391ccd3f7b821c252f4861497ce3665fc037ff7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63d46928c9f0d431d9cc936cc2e25704

    SHA1

    2f85b57a0e5e135ad704dae82cda3ef8ce2f3dab

    SHA256

    883d16878f882e3d37613d3035a5be583b687f125dca3b9f82292ac41e1b3924

    SHA512

    2bb2869eee9598091588d37837b9f38b55f31c89f4f93347d4d30234ab1c00bd32db68d5f92afb6318123585ae09a038d8b8c135ac72fb88095ed4157fb97c3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    24bdfca36ba9dc84049a3ac6990d2e89

    SHA1

    85c26d54b5fc400f75b9221d06d1e00856ceac47

    SHA256

    678a06e2e40c44350f1ff21483a11110f4e8bfe7d3b1b00360c80963eb9b4902

    SHA512

    da46138c912d854c844a8ce708c5c9a955cc4bc148850c57d23ac375e05bc4a0b76b3028ab2a2014f6f21f78931e0d846c17c1684a29ae7811158e649c03a6f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    381c53df0e1169324550c381254ee6ed

    SHA1

    0dcd23162bae224b69be9bc11f5d821c29a86767

    SHA256

    f9a804581b58f876c911bc74724655c6c432e060f6fb2fbd28fa5665bf70dce5

    SHA512

    f8379148e557072caef9114b5dbad736ddd67205a024f387acc8efa4eddac2285fbd33710aabdbf10faa1318854fe7e10d7edeaf170f0b3a7db861746ce913ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7970fa860e5be57e683716b1ff5312f0

    SHA1

    000a4550eac8561421170e755199e29203141e99

    SHA256

    5142f6f2c165cff9f63dbbb962d660f916f9f0d208a710d52a4b655fe9fa897f

    SHA512

    3b60e39042ec550c0866fad707c1dcb3567aa6e1ac440fd4bee0d91058d45ba6f74dd7dfe12a5e39fecb248c61cb65c7f59bb13ff3673b79e1e75f2511f332da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    90e982944667db807ae4854a7b15a187

    SHA1

    39691205fa4f22eb1aa2e8bf91f3f0881a61d8d9

    SHA256

    7527ff1f1366aa6429abb89b2d76676edf2bc19c815462b2e82c33411836b8ff

    SHA512

    ddeecbffc4fc1eaee0f59d7196be1cef45945574b6e2bdc52ccf7b1a1efc3393ae27dd67e9dd6fd0cca0bb908e5ddcb6be8c996140d0a7a714e92d6fe681d618

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    66828b3ee470556cc3bcf030aeaff0a8

    SHA1

    8efa081ac6a25dda2b57b2af6dd2495836486d56

    SHA256

    d7bc537413bdc0548719db120752d7656babfd1aea15b37f170aa20ba12ef94a

    SHA512

    dc5b2825d5188148f558d1a59f5b38b783f66949e0c75be17af8fcf837440cc36bca6483450b254ac5566d4101f536950c3ebc54745d8f60f27a4e1081b7cb1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2705cc5139702a9552dacc84ed8bd7f8

    SHA1

    147e45d818caf989dd665e676b7bb1d185cf8270

    SHA256

    fd4b1c5a28aa4e1309921ba004313e55db2708e23e31a13c75973e6a7f6140e3

    SHA512

    5f6f1bd413cf1e11132aacd9a843ef8f436bfa3c221523a1da70bbfcadd8718e042ff101de74cd913382b422d4a8fd6606f2158319d75d86d70e55d68315ca3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3e840ca62d3684cedddd1822e025df1

    SHA1

    bfb36fd18df0e561926b7d0bb6dcc56731740c48

    SHA256

    87e0da0697705d29fdd504379ae1d045cf0a59067b969fddb72b47e2eaed51f9

    SHA512

    6c78dd4f56bcb043aebf44a8f847b70440a7b061dce1b51d242773250e27efbeca1b5760da489f4fdd7b56e171f37590ae31c87e0083dec77891e72decc28747

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    663e39ebbbb53f0b010f1ee4137b8435

    SHA1

    db5ad4c3d5833e133d375f9d8ea7175abfbc0510

    SHA256

    c63628fbff9e820d9c1e7d46f8ea20e6cb03e58443952f0fb5b9f90d7fcde3ca

    SHA512

    d510547810da59c4987db56fe7df90077e1df3f5974884c6d8da828f254eb4e1b58be12cd0ce97cdf341e1ca0349f67563aa2e822e19bf579543c17376600698

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6fa647a7c3779b1fe6f758e6e23b9d97

    SHA1

    c24fcadb60cb7c81cf67ee6397be8315c5fd6e91

    SHA256

    330745d75c75bd7fc61d371994f888b9fbbc8f30c1eccb83a7234d5a2effea9d

    SHA512

    daa67e0a96ef1ff5136374003cb78b43291c5a0e9f095747162c7ed4c38714956881934b6b6226d197014137318b7cfa8fc6fc7dd008bff492b23ca9d595811c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    976c5d4338954ef71ec7c204c1a2fe1a

    SHA1

    2ea7366f68de4e131dd007290bcb3f76c58a6ed6

    SHA256

    2272ef6ebb5aa96e59594c764a2d31c04dae744e51e41597b0a55642ff61d442

    SHA512

    e85350726237bab681bb824ef2c66703c1f649b5375fe0446b60f4b3b44f48edb90d4a6e767bf2bd963ca701d1ab8d402be7b10653c388731f155d3f1d874971

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae87f76e9adc981ff1449c33d55f6a21

    SHA1

    276bb93426d9e1f7ed86d7318b0cd296b630d9e0

    SHA256

    9656119b13a086f2d4d35e6dcf26ada29c00b4b28135ca9ef9d7487cf189dbe8

    SHA512

    85c93670ee0eaa66a949da4882554d7b016f9319c0bc0b3e399057ad9a80d889c500e9f5978cd3c2e9ba43e6e430582ed6dd7cbd4789cd64a6d2718af98d8ae9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c995452219f20e651ee759cfd54cb9fb

    SHA1

    8b2e9b404ef6b7ee3b2f13f94618afe7815cc57b

    SHA256

    9b73738ccdc9dcd1fb63cf4f2708856161c235f5ba1b9bcf42f2ecfec3a43beb

    SHA512

    9407121677da3d1f7cc84c52553bce9647fa3ea17d60d0dd8768574e42d08f674e072d388f5449022d7702fdd452c7d64d373d881431605134e954dc3d9b7d70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47ecfa6c3279e11e3710a5f05c194252

    SHA1

    1be7c370ede881b451788a10ea8201f203aec213

    SHA256

    065265661cf56fc296322a4248b67fb1a49f8a32dbb1cad28bc6abbbef9168cc

    SHA512

    f5235a6bd0abde8b3b57c7bde5c35c1db7c5edcfb611edaa94c59716724c31686be15797b46a221ba7722ff58823a87a3d0fabed840bdbf25c2304bae17579aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2aaa9bf87ce9e54025e9e93d2555ff5c

    SHA1

    dbc08c9987f6841c2b1e8988942bd5613dfaa67f

    SHA256

    b181cb8f83c6c2ca61db60367a2e100be84683f56a69443f5927125de41bf419

    SHA512

    76806418241e134b10e200e8ed15d4da590cc2f503102c18d1ae4ec24471d08c106eeb566bfa1bf51bdd22bf3090806fefffa7234731a995299ea766f74089df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    f16a5f90e43e331fed93482167c55c79

    SHA1

    ebaaa918bd8d34c620c4e297007792a33f751e8c

    SHA256

    ed27b41b377611263a59221081bbe711b476fc9e7658d4fdb5ab3e6c5c2c0d19

    SHA512

    1e7a707a78c33b70fd29416f4973002a7ee126639364c607a7482b07ac3455a032f0fc30c2e96b1bb9f9d75dc4a26b220a945eaeb6618981ebcce784aed7cc10

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M4TQDAHL\f[1].txt

    Filesize

    40KB

    MD5

    9ed9625782080a7e52195d561d2137ed

    SHA1

    804d3b1fb97b119c981fad98afed532b7863d337

    SHA256

    9f3431e5b52aba9bb84777f05136ba6c90eeb841a33c0678c2e4232113207d03

    SHA512

    26eefa42bd46b74731a46f673bab6fc56b7bf05949636ba063331ce0cf041155de6841a6fc01e87c1abeb154017d55d95ca85d43fbcdcb99d5d41922138cd7b4

  • C:\Users\Admin\AppData\Local\Temp\CabC776.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarC788.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b