Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    08/10/2024, 20:33

General

  • Target

    251138489b0bebf92f877cb096b92611_JaffaCakes118.html

  • Size

    29KB

  • MD5

    251138489b0bebf92f877cb096b92611

  • SHA1

    05784973c339e548274314b44ab3f30160020733

  • SHA256

    fa4c5346b2e80e6e9a8e9c392b9737a32aa22750917ac36356071e3a3e34664f

  • SHA512

    674105ad043dff89a9f4d203ebe6b0655880640e60ff1dbea97b4cf064f7824a514c6fd99af014323cb5393eb383505d44fd29242b074399620907cc9d7fcacc

  • SSDEEP

    384:/YxG0YuxYbnwqXkHwmTeWuJHcjVrv9XYjrrNCaWdTxUR8DwUhJ9143J+QXRQdbek:gxG0ahYwQeWhqVdR0HDca

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\251138489b0bebf92f877cb096b92611_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2400
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2400 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3040

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    8c53d3b1f105b442097adb348fd62f8f

    SHA1

    2a3d7ce6745640cf2977141382b216026d071746

    SHA256

    6bc97019ef97f02af46df591e9f7a42fab70a5c50c824453c03b372c8055a5f3

    SHA512

    3f5c476d6332e724bde5ca8583a3186e7625f2ca16b96504bc6f0f1dedf9b69afb7db6c243fc056d8039d665d0539fb21091e81bee69d2686d5a04cd0f6ec408

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e231df81734247aa95977ca52fa2616c

    SHA1

    60442693947ca5fe220dbefab182dd1471ed8ea2

    SHA256

    427e2cc2ce294c40bab19aaca9417ecc08e681c9de81b6a7065eef110cfd0cfb

    SHA512

    377a9ecd7aef5baa98b3ee277ac68b42f38e7e0ec32a745d39bd119993b1bb093caac36ef3eaa41dfa77d218dd86aa567d85ab4d53e9bd1df8c7c4fc427d8f10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b9059c4f9afefeb62e9f3876df2f31cc

    SHA1

    f7fe9203460237c038a5b125f0c5e82daae4d3c7

    SHA256

    1b9b2a7ae09b5a393f300b2f284b7b2adb1db535b4e24c9d09d4bf393c95c398

    SHA512

    bfec5624824e1f9282a6af58ca97dc020bf9e709093e5e9f7c57a60a00ffb3632acf1e67b5f133a98e747441c420e8afd5915be1638e586d27a22e0ede0ca382

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78ce2ae010a4ff6e7cf4b3b357ae2785

    SHA1

    6352a6b063428f6878c687a6f68ae541c40a7b3b

    SHA256

    08679c599e9969918a8e6e8404dba05ad1291842136037943dd5bd145d9c9a63

    SHA512

    8859a37fb21f6e29daf06283b7d7b1e8f3faecbada317d64b3ff869c0eb68dda6f03ce593b12f5dcc374a9ac95c97f6e1dffb3bc22cbd297f069c0524a7c43a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8531160b4848a94693607cc3d1328f25

    SHA1

    8d283017a97291f2112798706b5bc00dbb95089f

    SHA256

    0ca38072528dbbfe12bfb932269a67c07ef44896057bde9c534032663b0e4654

    SHA512

    ed6ac9fa8345ec18a0ea4b4096db1ec2522baeb4de1a433a1f77642199f4845cb323c04de7bba0c4eca079b22088c7d1b5e00246863430452bd1debf182801df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f45644b4f9b3642276ceba6a03230ca

    SHA1

    06548d48541ac62a930d384460d97620950a3cb1

    SHA256

    5cf1e0827c31366dc2786a1b35f797fca3ef190a55b5d407bc2b63721a5b2296

    SHA512

    8256ffd4a1cc25240d6da597bc5f9736d870e2b77cc29cc550c5224c974fe7a36db7c0bffecc20f5afa154a2a19f23b9aaf1a5e1981baba6f040fe656f55e8c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    541aca5c8cd57e3aed7b08fdf39dd1d9

    SHA1

    1e3d5f46bf70b29f7693dcf247b670a283e3130c

    SHA256

    5c0861e6a1a5f1cd6a9fe49b63af21453248c2f9b63e95fd1a1a73c8c64ba7cd

    SHA512

    9877284e3fe9fd8f3b975dd269d8b90d8d324488700937a5991eb9843c754f24ab2a0c6e0d2737a9b155e684cef74d0b266343103b210744ca7078313857709a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e77d3da5302825dad963041b62682e0

    SHA1

    58c03efc1ae60a4d218a6ec5b44b82466930c052

    SHA256

    b5b317e566d97b254d6640e72d41346229122e244d0b5532973333a07cbcb2fa

    SHA512

    d5a48d20e67eba8948388a8e53e3275605fad7e5e4d0441756974a6ee28d6a6513a8bf014fefc24a4d8accaf72d69afcb7efb8c77f584d857b3fc16e87b37700

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd784bc37af1e659cf7c3a0c1a6b2d0b

    SHA1

    51705b564597a1a3a57b73438d81fb60924c2aba

    SHA256

    d782bb326d799f6a3f90b5023b5fa3b476f5aaf2c1ad69ff340b8c0b11803a23

    SHA512

    d7d5ea6cc5340b0bce178ef404a93e123f8165e2721de464708533d115a2656fb5f3f35dc729195c021f89e1dd59124c7a95e6d10886b02378c47608ba5abcf7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7ef113bd3412ac1e4e646aed03942ca

    SHA1

    ef1a235cd576d9250875941ac1da4ebf5e52688c

    SHA256

    dd43aef1f655964199413b99560ed4f24f315198e6a812b002f587d8de35241d

    SHA512

    089e3a380e7ed56fda1d0bb277cda487f819ab5313486fe8b3a6bee80189b73d2e4553e9120a2010e7367ea7a38ded8da4d9decb82d1ed68184f0454e619eae1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ebdafe885ee58df2829917906d94186

    SHA1

    946f969d1eca57e2c7f44f7fa8ab46a2155017c8

    SHA256

    24d4d50697941fc4b78b8932f5b01c9009ded24ab064aa4075eee1b81ea6c54f

    SHA512

    356d0a07543d7e9e0b003f75ef8e2c4659601b050510508b727900e0135b8835027331e0a1a0df98b09f50c7057aee79bb7a1e26e6e7653283389e34305c636d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22b5acd2272d7bf97e900ff376795952

    SHA1

    855415571d99665d10d25fcdabf014c053969490

    SHA256

    719b562c95ab663d38d67b025333cad0c9b815e67d6e6a454d89b6f9812fadef

    SHA512

    284fe8ab76ec71946e1f6cbdfab34d43d9932f26404d411d0410557598d0d2c51d24ff233817cfe3d357d15c3314e87d047881197727c7c9d1e4817e3045c83d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5bfde6b4345b97063bb8d1573996c960

    SHA1

    15ef5e3ba71ca5d2607307aea06f738abc88347d

    SHA256

    a93d942782811ba3970e031178680aed24c2dba757c0e754984d7f64d78a75ff

    SHA512

    1a5dcee845d40e3470cc8cc1d3d8458a94e07c9ac5719c5893b6f23563fc608a11c75032339b43f600b26ee03d800bc428e73d8638ec070363a6438fe300c06e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    71974b1dd5e877db9edb0bafea8556dd

    SHA1

    2ffcfbf2073127f33d46cfb8e135d28a52a05373

    SHA256

    12d0e093b090d525f2737cba21d814dde010beed5a670224908d0f17300cf373

    SHA512

    ee78d871a9ff9da176103422f353c0c46be2189e6875d1f4c52b71f2fb6a69942c56986d34d3803b874a286e49e35ab3bc56f38f55a88c907598befb5dfe6905

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    578a40d3b51bb79541173cad228340d0

    SHA1

    ae56145eb2734bdae379a759b9f95132951178e1

    SHA256

    b930b042ecdb9dd343d6afe5188aaa135f8fc423033dbcacf2b864086c4497f9

    SHA512

    68780ba697ae843520a55e7bda269e8555977448f303f74f7395f19145fa80e89e526b12bff7b4684ee633c78a74f1cdd02e6c6d57b27afbeca9bfaaee44c670

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1aae786907d031e69cd74b74dd7c5bc5

    SHA1

    3236bd93403f672915304ecc0d950f383b96e1f5

    SHA256

    111351cf68d654257054cb216a970f2cd62e938b6c47a0da2c9e6fd0b31fdfb9

    SHA512

    3805deffa34335189afa0efb0aee085515564b9e520cb44a4c6b3b6f3fa855ba308ae3b6ab46de1422a5b6644966f6a397540f4ebf1962ae4a853d361edc9b13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    34b036e2edb38c5a3cf3e95f41fa3a82

    SHA1

    61ffb64f3fdaacec16dfae94c348d127cee443a9

    SHA256

    c4dbf15f2807cb0368c779c738becfb4d00997601381810cb128e753edf3318e

    SHA512

    764b85697a8d82a1802252ff1e7786abfbaade12fe1ab5491e8a5ab62238a534e1542ef1f62940a83ee7424132fd51dd7aa2476e06280508a8cce2d6a4540288

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    033011f694b28a6db8900a7283542d62

    SHA1

    c26545ef1c2db2fcb1ffb2c94ff06e5d388b3e9d

    SHA256

    249bf50bac836cc806322b922fa3218b0c4489deca52e4d384b7b8ba980d6270

    SHA512

    25e2b9cd26d8f5e1fb7adfaa9e83a02c0c00ad63d1be06694813aa39250c123738ab9a937f5f6f35b2a1a3c936618764a228ec94f498ce3abd042148253e3897

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2831ab47266b77c667cf05c599459471

    SHA1

    0a529c32f122b4d839e695642b450e1d629bc4db

    SHA256

    6fae1d6d277e161e14824d154ca563f59d583fc389e09b2924692a9ebaff1b50

    SHA512

    ec798be187baf021b8c3b771a7a8c6a9ddef1e3cf159219544a1b9228582744df27e95b0f35b03c5d1cf589db390d9bbb599447741a14666f00458a60864f4f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    13b0ee1a8ff12d8952967b1c255b49ee

    SHA1

    b449d81b2f117cb0233745c5586918d4d0a7260a

    SHA256

    68e3dd1410a78b9a9080bdcb96a8be77cfdedcb162ac7f94ef07111c50750b39

    SHA512

    4266a9e78963dad7a2f0018c855bf13e264c7a136dbd0dea82a4159f01a2dd0f23b2482e8781e3d08282a57569ccfa44e1d1b2747bfbb99169bdad9e32dba30e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2cf206896b860a24d114bbb32de20cd4

    SHA1

    eced71be3e634adec2b81443c8adc88c4456d2be

    SHA256

    5dcc83c071f87575297a5e4459398288b855b62458bca1fa184a2496d011ef46

    SHA512

    200623488b8453ca0ea95256286f1bf2f9a7930844deac83c8af9d428271821cad1a79e6461baff4117865b9bca5f4b1e35fb9c982f54bdf3e4a36a31c744d90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    8c550d2c4b7dd0510ba27dfc813abaf7

    SHA1

    e884d160be791d9972ff430587f8e7b8ed84b863

    SHA256

    6bdec0a735128e07e3920c9b755634a038d7954a0f6915312aaf9a96e168e349

    SHA512

    d514aa676b314b004238cfa324f91a0278c95337f1a32b6fa9439b74c0cfbee41249fd29617ded3f439c1e5dd92e86f01f46a5931015f62051bf0743af87d896

  • C:\Users\Admin\AppData\Local\Temp\CabC998.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarCA08.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b