Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    08/10/2024, 23:59

General

  • Target

    2766ce2f9d56502270a9743cdec75d2f_JaffaCakes118.html

  • Size

    736KB

  • MD5

    2766ce2f9d56502270a9743cdec75d2f

  • SHA1

    923562ef686993add5980f4fe9bd87be6455e9ce

  • SHA256

    b9824be501af42a81b8e5034997558f7be53485d88c382e7a3c45606bf5caf06

  • SHA512

    c37eeb87d14281e3f6b78b7812ea377a476e6c36394fd290e30ea2ce2f1babccdae2fa776ec371b560288fdbec64ef4399c51446215644673efc00a744a72bf1

  • SSDEEP

    6144:ysXEdDBohhgCZhyqyDLzNhVuQq7iMeGG902acLD:ysXEdDBo7gShyqOhueV/

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2766ce2f9d56502270a9743cdec75d2f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2616
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2616 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1276

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e8d5c5d948c002920a6f6e7f4137ce3

    SHA1

    828c86a2b2d46e61e03890baa3dff74a8c19effe

    SHA256

    74f08cbbd8ac52218c0f3be22fb0f8a9486e875b97332b3b93f6fd5a3915a372

    SHA512

    1870872471bd2fb308ba32aa68b1d166e2efca17390be0e6c6b9180c7c79c2216bafff8cf4bd43491035563e8c57edf045d48cf8e14e294c965060afd09c2682

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c0552fcfaee22360977310b720f630eb

    SHA1

    e580f342a51d164877ecaed74bc225d014bb5d4a

    SHA256

    e06e07be3834ba92731bea6307ec4576676c0b53623c01cdfa30336d8d6d1c91

    SHA512

    2f4d21dee0e8125bb755dc4055bb8a5aeb138acda166f826acbe3ec0a36329453a2cd626641bc0f9193ef039fc2bb797d6e1d14a7199e6288001b28dec42cdd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb9108d511485861d884a1eddb7592e8

    SHA1

    bdb1f4218ca79e795f0b522e01600f0b9ee2d351

    SHA256

    97687b79efbc0d3e8612bc89e28d490d9a8be4c37d36a5abd692c4f4ec3133c1

    SHA512

    677f1f414e408e765b4f58d8115fe7ad3453abdb9e1e95076cfbfec95f088e5fc586134ec339594c20fb623fd628d2afb9e6aff9d380a58935c06aa2c9b6a88c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22fd3393fb5c180895ec93095e2a9e54

    SHA1

    a8d54a041980de62a3100edfdecbc2d84bba2702

    SHA256

    21afe95c16cb02cf10b7b22bd3a60041016c7921b070d6ed8bbfce159fbc70c5

    SHA512

    af11b8ce3176e92db5f86a0f4f347d59cbefb11d19539014bf934b1c5804d3980918489d71749ec8972eaaa54755b1f843752c6a66814a6a7432143767d8710a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ffdfe54822732ca4fffae9bbfc5bad1

    SHA1

    65ebd3a2dfd26ab316a68c6170079afee0739d5e

    SHA256

    1e1d851d8749eadc0e6cd4c8dc41eda0d2db9e50c37081587788b63707510751

    SHA512

    9957f2d5b3b115eb25e44efcc8941d08bba1d04de23eb552db09cf9af6c2936ced6057e2524a9b40eb68ca1d34ed1822683551c23609e419aab5ad51231a0ec0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9740a29ad12a0bb5e211910b24fe424b

    SHA1

    56694e30d20de75d78ead77b83d3af42ae7e1c5e

    SHA256

    5ebc0b772fcad3e3397f206512d498b43ff0db687ac599540ec7663deeccdcc1

    SHA512

    7de5166c6428566a0c63b5d8a616740e49bd5e2d66dca8ba3320639609eb6dc4815bdf9f3cbf87cc7414ed2d8fcf390deb0c2dfce2ccf8dfd1ee800d743d2a99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b54f57e3e317c4bfcd84c6871edd117

    SHA1

    72bcfa538737fe7fb5ef6727541e3a16d8204a91

    SHA256

    99892e2b7cf3b919b70273b1a9b0dbc80f67575e290cc845317ff3fd73071ef7

    SHA512

    9df090e38f40b931b87673e851726f2ce6070c45ed322605b930ca24318e328ba6b07ea95c104ebec1b7005cd59a1af44955b829422b287959accd9e08cbadde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b8d144a29a8648b082796994f9e4fdf0

    SHA1

    6c3dcd22e2cb2be56283409fc7c0fb3b35cab4ae

    SHA256

    582ba74e8b07e1a74b88d095b6b58590846f8a66a2e22c3bab7daed50e13590d

    SHA512

    3b43a42f388b18d99f64d2d29c9929b6171019c7afee46cb25876fbee0a18ba4fc5df210b6aae9dcb64da9d7f3b077e25a26e86e83d132cc82fa843705449ba9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    79eb9e92f6889ffd4f88aac6e13e95ea

    SHA1

    a4464b07175be9fb55a2b40a658850980dfca0e6

    SHA256

    04d6d3fb54ecf7ac617282538cee417a9caee513fe4dc284533a4ad7c497f173

    SHA512

    2fd8c352f063d680ad256c08be4fc69b57c7e96719479f3f7b3e3ebf3f19d3365e688fdce73f12f704f9f70bdf5f03a34b2fb14ff02d45eae92b49f00d376007

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    04b77fd403394c976bc459db39188a43

    SHA1

    48fa6924051eade2ab79cf4e6bd3efe40bb7308a

    SHA256

    b92d21242af87a4101c9099c454c805b685e52e45bfda4048d5cbb27cf9cd761

    SHA512

    9c9790ad821e98a8a1496c24afff701701a5c7766d27c4d54efe5c23fce1b449dd80af12c14533bb5b55bce2452ca594672ee765c35e5157a5fe0a80e501f15e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df7da32324ba5753bcadc22229b17d95

    SHA1

    d82c59027fd8570f992b3bb25b8f719138836e2c

    SHA256

    7fdde061e0fb4804087d97b05106e3410d68543a920d2451ca6f7fb63e3e0117

    SHA512

    5e14879826c0d7da546b5e4818ee393a44394b1cd3d417fc48bbbabaf5a349429b8dafacc26c4434e0639957127d1f5cc3556e8ab89b479c230bae7c15ddb99a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da66f9473f28fa81223f6e06adcfddf2

    SHA1

    56af022a5f548d668bd9a51184df51e8825cf0a6

    SHA256

    37603ba4d1beceecb6ca1db15c54210460c9eb5a47594041310c3ddb1efd4fef

    SHA512

    fb0187d6e7d3d73e66fdb2e817e2bb88db57956700d6717b321b9ae79e2403b31c9ed0a5a05a2209272d62ebd03ba04c68a57c957a0dccb40524661d4c465be6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ba4a1a452a2e1c5d4dae7183f550ef8

    SHA1

    3011c107df1421d22561ff984d3b1f76acd3d15b

    SHA256

    0ce40254d5194c32ac9558326a1aae4f471603307cda9916fd364def9bc3d8e0

    SHA512

    4064848b39aa2a969070b687bfc3a838bb8fcc67600c8311b904ca3d9e08eeac85d945ac802fb5ed015627cfac1a0b6ffadd9b12e71c3f932da68dd954a94070

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    185f122150921ffe617783442bada0cc

    SHA1

    280438bfa1910311115feab5b633f7b5f2b25aca

    SHA256

    189be9cd831b6bdfcec31ac9cda3dd1253cd18e48e47954d925ec352d0ded87a

    SHA512

    5045ded40e8b6f9df627e3b3b8ffb61a19c133a1020d081065c869f33ab162cd79c47822245b00b1b0bc56984bc778b7240f040fb9143f0889d10fcc38513859

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    635a4b9ae77ced3dc8642b27d23fcfd5

    SHA1

    dce359da41834f24bea4a749151c35ca19662a48

    SHA256

    f2df1a1635327f298af8482023135c48517e157a76e0ffbef734a5311322ea7a

    SHA512

    3439b25cf8dd853141e6cd970061f32bdd3493e83337f3c136dd0a72bc5940f326e3fe3a067d71151d6adc7947fa0e927c6e19df3d704363f7845fa0f0e3fe9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    469875f9cb20caf20a7510e347935de4

    SHA1

    fad8c1b864387b3ff2f3be142cd5a322239a2dd4

    SHA256

    6798e4193c80dbd58b5035eba5f85fc1121137c13e9624c5361541da6a067bbe

    SHA512

    b1149743a3d5084e34cac45523ec91639f3fd0c78d45979193df82a39e7111e04a19618cccc8a1aa23796e1541e0652a4d98bfbf7516ecb56660032483e837e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b8249a5b56b7f924675248f5f79eb2bc

    SHA1

    b5e147526bd78dfcde21bf94f9e5f2baf1a49377

    SHA256

    c8e12f31536db5591fb7fa1c903f39fbbdb23b056d6d42471d8caa3f74f224ce

    SHA512

    9b2539104dc0498320d9331a174ac2478ad94b478123ec56d7027ca9bae2d1dd6bd6a14ebf6d173f3ce72ba2bd494f827fa280db4077938793f8c9b1358afffd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    99029844d69e11fd7c100f0ec8e6b18c

    SHA1

    81770a2df16f731e445c0670b3cc25a52232a753

    SHA256

    1e6c6bd171364db2eb7b985dd6004bbe65a1d82881b710dae159022380c364fb

    SHA512

    9e9bf27ec239b3e0a0d6f0153e846af9d3584a32b350ea78b63ff4524c56eac032d3170936bc9054b6597e6b87a37a381622ffb3c93b50cf4752b376d4ab073d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    388648073b20ee88b2f51d9402e43856

    SHA1

    8fbaf373c8573c69d7bb82eccb51008a1169ac71

    SHA256

    4c3ca7a32bc8997f1aa0cabbb60d4a3ded6592943b4071f6b2f531a4ce0a6441

    SHA512

    fe223cce44957dffe390efb6c1462efaef93aef72ba6eac0cdc8f43be6fdeccafafd482d47a1052c45e4bff8b3ca940e23b7f578256cc5c00d49b71af36bebf0

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\633SXO0D\layerslider.kreaturamedia.jquery[1].htm

    Filesize

    124B

    MD5

    15682ef8b101b7a3b980deadf178734c

    SHA1

    f878e3160f7dae0d2cbb657beec98ebf53f171f8

    SHA256

    e249f90999b4e2a48741210781997bcb214aaf3079dc9b01b26a5b6d9d28031e

    SHA512

    794d298890a418bd0039e6da1f7f9569823cba3a010bd2d914bff1bca31b35fb12292b7bfc0fe0d8c2b55c1c783d57ffa75c310785d47eef013e186c6144debc

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PLSLTMYI\scripts[1].htm

    Filesize

    124B

    MD5

    24c6265d2438f23f5be1d6fb6217428a

    SHA1

    4fb9e22d6a7e0539ce0203ce32fd1503a0703990

    SHA256

    980de4c560b2e0c1ae92ae94ad1dac8cd6f014427455933d9eefbe6964c63ef0

    SHA512

    7ad69052cb5ecdc8265c072a83086a668a8e48f0e7d2f692883690e3d264c8ed113087d3cb2151a9a99850fc8813e034f5cc8a101107c68a744faf719d7e531b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QS2MOPHD\jquery.prettyPhoto[1].htm

    Filesize

    124B

    MD5

    603d079dec423b867644ef5aea00d9c8

    SHA1

    a4cde466eaf8796fe6d819cb8b0dbc279201345f

    SHA256

    271731b27930f4766ae195f8ba3637e4d487441cf170f8028720e00e9bb12967

    SHA512

    47325de7044928640ff4d367ef7a590c3f16d9dd821dbc4cd47b15d2e874df18f55c79e26464283201f71a1f1205b53fb0a5be55a8d3b9633b91eb7f06f3e393

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y1738IZL\280953[1].htm

    Filesize

    114B

    MD5

    e89f75f918dbdcee28604d4e09dd71d7

    SHA1

    f9d9055e9878723a12063b47d4a1a5f58c3eb1e9

    SHA256

    6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023

    SHA512

    8df0ab2e3679b64a6174deff4259ae5680f88e3ae307e0ea2dfff88ec4ba14f3477c9fe3a5aa5da3a8e857601170a5108ed75f6d6975958ac7a314e4a336aed0

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y1738IZL\main[1].htm

    Filesize

    122B

    MD5

    00d64a82ba2d055e5facd3a30efac924

    SHA1

    308e275068e3bec5effca608fe9df2008c979650

    SHA256

    aaa3feed097fda6687c7c27860c24980f3ff105b6f326d10c98854145e9afa6b

    SHA512

    1151e227086964ec19c11eb388ace411a56a6e1da96409b2bfdb5313fb5df75223add437a653decf3afdfbd2be2cde421c512f9de423ad74f2ebbaf81119d8fc

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y1738IZL\style[1].htm

    Filesize

    151B

    MD5

    278751a0c5bd40fc714e3c5a506bc1c0

    SHA1

    6f2104dc7148835a834a72f7a76d33200390bca9

    SHA256

    be4e654eafb54e422de7c946a868e4ec7eb5ee759aaf3c12323773d1c55ada33

    SHA512

    5f09e5dab453c36c8a4e0b9aea00e466b6b82564c1f62a3229c02cd3a92d10512b5b3142e8911a84bcedae70ede88155f209179ac36bc397ad22ce89d168aa48

  • C:\Users\Admin\AppData\Local\Temp\Cab11D.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar16E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b