Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09/10/2024, 00:14

General

  • Target

    278d4a1ffa8e5f4b051fb7d95df65c05_JaffaCakes118.html

  • Size

    57KB

  • MD5

    278d4a1ffa8e5f4b051fb7d95df65c05

  • SHA1

    9c1589aa03d48b74c49bb639f24fe75697d429d8

  • SHA256

    bcfd32f4ec4c9ae60f49a8f2978cbd4c6906f62044ddf55eed2823c425699a8c

  • SHA512

    c0283a300e7971acfed04e6570b2190b089d630dc66a144b08faf9acce40f877b7cc9b47bfa5fe8a4a6723cc97e8a746b7edc9d728bb3b5baeeda39541412ca0

  • SSDEEP

    1536:gQZBCCOdd0IxCG5pyfwfSfkftfgf7fzf7f3fjfxfWfWfRfjfqf4fKfJf5fEfqfnN:gk2T0Ixa4KsFYTrjfbJO+5LyAiRRsCvN

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\278d4a1ffa8e5f4b051fb7d95df65c05_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1728
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1728 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2228

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    8d333c60912adc64614d2010d5664ea7

    SHA1

    e24aac70ceb751a32e48ebec37ef4bb9aa86e0b7

    SHA256

    af92d699e740f03a99c06d29df15fc0c4b56e36cc81b1053f7154743d5d56606

    SHA512

    e9e1f8250ea1dba21acc9171d4ae36c1920d8db806ba84473febe3922f3a6cc1e7197cec93f118099036789fa60e04a7305f887eacd81c5d516ea021017e8d2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ef312787608288b4fa99d321d0666563

    SHA1

    05ceffcb9a99459a9ee51fa91fd6915505ac0b06

    SHA256

    ff57274e7dff26b7370275273a0c2564960d2442acff55beb4204fe3a1aa6bb6

    SHA512

    aa7b22e6095cd601657db73e7057bb60e948cc4aa8c962f6d9e92c4d9100f4dcf9209628dd2ece908aaa54af1cdb06b90a8130172cb95b19a1ff477e1602814f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3c3ab2a0bcb2018a41e7b02837d9ffb

    SHA1

    a62d795e1246c878f7d98456d95d3ed76324d212

    SHA256

    12c7e9a4a3cc155ba485eb0406f521d504f938d532caf4be5d1ab934df66a8b6

    SHA512

    084d87169c95b9d8e9a7e16818eb2a7cb44499632ae5b099a6dc0c6c97a3d8ab8189396342d518beb2ee235654941f3e6e426c83cd7c9aad9b30b96013e56c89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b9af8d045f58816950c65fe2c5a3a8af

    SHA1

    f652c073ec7f28139b1921d877b31491de30d0c3

    SHA256

    4d1c2dae76149ca9023f74d0561d9b1257018d69d6610f896d21e7193d4b894b

    SHA512

    34fef933f4264662ef45e6184270c02ce8999da253c28e36ecd302c383d242647512bfde029d661ec0cb013e7fe8745bd3785d9c5b959c128c49a8f9129c09af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    696cc9b473a7d671da1c5cce089bd769

    SHA1

    573d19e07d70a3b00391b77037c8bb8aa3db5b24

    SHA256

    6fc8c4260c6f5fd34ce6b1574bc4a1164a8efe349cc4b951013e40f1675757e0

    SHA512

    67713f7526a5757c41127f936c0a55104a55df9c706a431579dde82d89607b6fa26ab630ce6f5208485f2cd07fcae9aebcf9447f824c05b39fb6d758076c4b44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    061d01e280632c9ad03490e962f3fcea

    SHA1

    407a703b897d88457b46dc3f37b5fc5cb793fae1

    SHA256

    f414f4a405b6a640069c99cc33f5d8409e785ff12ba63c9df428f191bae3ad7e

    SHA512

    f39c643c9344d13b45cc61ed0c493e74bf6b0cdde73ccc4d8f49af835500555413c4493a26e942b7f746553bd4c4cf1c1a68aa4b8416facdd6180c4fba0e2500

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0bf95be0ebc437fdad0fa86f157d474

    SHA1

    9dd0b65fc38906f7da1dd520d50b5f2703c8e8a3

    SHA256

    2320604fc1494e14786a6487fcc633e3cbde8f9f1385a8290cc7a54f018a8cb8

    SHA512

    a4bf690e96c5f71f35aaf624e392021494da2587ab5faea6287c4afde86eaf27aefff0326451da58ddd08a718f6ad39cb2ef7f39512015b69f8df8d743ab7c3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    14f29c8586d7830cb9dcb8db4d43516b

    SHA1

    649db91d847656015cb6cb552329cdfdb47b896f

    SHA256

    2f20d91016d10a1b501e9c0c72bcb489cd5d83c428e71f5eeaeb1f4ce0538efa

    SHA512

    13243ad2a018c54dbc69f5ce9b273b5bb3e17b373c6e59ba7145ed878593929d8af05190418b5a2e5fa711d4054fa416a0f1a9301cb6a5116a134d4afa59a236

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd70e685acc345c4ee6a236dc72c4e15

    SHA1

    cc5897680a251f6ed7dafb4bef3656345f5d70ff

    SHA256

    417dde3a7dfecc5ded7cc76d906e391e632192307aa0aafb220e7b4e75c82b48

    SHA512

    178966bc1ae63e958773744415ce730776c26367be0e48c7b945ce46d17b481546762971a8673eb55ce7ffdb9683c13ef6261eeb49485954b32d9cffbf9cef0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    995685d4d405b6db8e25c1a32d80d5af

    SHA1

    0c8a0b77e1cf31af951a3f6dd68484864f28d3d6

    SHA256

    48a0af476e5b3143f1855af91cd806b54701c3a7d495bdf8399808b6ccf90dfc

    SHA512

    71aea0b1fa026b93455020c8a9a7c040f8b773f86225a2932fc1dbeac37783c9d16eca70070be5934c53f286a3f69e4ba76887812663481da57b6775c774048e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b67ca48c38aee9b4d9d92de9a6922a2b

    SHA1

    0b367c0cad4c8f3d7cea9de1e5c7cceed9ad2e91

    SHA256

    77a56f4fef221db949f94895cad8d97eecf1483b25646e581256bc19abd22e92

    SHA512

    b1ac98f27ccb75f8ca27e4baebcd7d2370463cdc00f7958e6a1535b65a12006104b0a98af7a0c9c0526169196f435bdfca12548b0394966d3f9bd91c8c15f0d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ab571a0d6c2dde19e81b2d6a6957f67

    SHA1

    f0e5fe421d60f6242abd3ce3b9e5f4142ebd53cc

    SHA256

    256a3e7ee0eb9862152e9b8f4516d24b0df9ca56f436f28b9c445cf16ace6361

    SHA512

    c460c3e0b8b8dcb54ee021a5c2cc491a3198334fcd390e443fb4ded827a5fb70b16f34dc0b5923f7c6f3bf5d8db06a1debd514727442018da341390d97673e8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3a34b5e739d015bb34abfcfdb9a9346

    SHA1

    b4a0faca606990b4a124ff0a45a54eb95617d2ac

    SHA256

    96bb1d443e431f91fdd93d7167fa36629c568b48bbe615f3327346a22d1f8e62

    SHA512

    3023d81ce5f202d6d38aad7dbc3c6c04b04f37a1b6bf8e0a2b0eb676111fc0c4af46065464065b749aada52472b6014943c3255df0f53f4b9e94d8a76c1045a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8bff82f5317df3e2676e78214999de4

    SHA1

    e949b61429d1bc4faaecf7ae1d9f8ed05f395057

    SHA256

    5eb0dd3daf1cd26ffa5720cc5e01012582486d3727ffbaac10005e47ec1396db

    SHA512

    b5da354004b4ad042548199c016439dd2985882f8195be7e726fefb62c5b95e5d962311c7f2059d983a972924bc32f256702f8bb07d64bb11976ed5182031091

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e2d54cb7152b550334ee0655f0a1641

    SHA1

    c60d37fb0f7c76b0ce12de473f131cb08ed38ac8

    SHA256

    7e7106f71a0b1423f2878926abafd90a3f72c87128dfda9c733bed44b57da976

    SHA512

    14867867ce663150a2d4c1258ff2336b57ae9dc5f4ee30cfb35b55290e46a454b7ab4f42b63ca92e05d7f981a0f91309067b687ff9f0d91823b5c046f3e5d2e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57bfa868dd883fcac0185ce9fe237c47

    SHA1

    7afcf57c04d613e60f4cf67927d0e61b338a4e73

    SHA256

    d51567f9300565cc53a9e1f31687083fa3b448aca65acbf3d88acf943ae01df2

    SHA512

    0cfde038db97db70cc4f2384c651af01beca50498e3ab890aa32821ad8493a0e6064aa52ad776b2e628962ec6aeca0a68d663d2b81411494be32121a2c076111

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    347a4714d44d42f8bffacee453e8a994

    SHA1

    552deae91e21d30813ed004dd3e870dce1206ce5

    SHA256

    025f7958869c5aa604a5dcfc3a258c73b4d7f3cce71cac1d8f016a1878e61683

    SHA512

    e1a321157edf82d76a3ffbaeb2f9cb21e9e0cdf9e65dbe1b0923b8b866d0a16e2846750ca51b3cca5dd4bb1b0048a4bbe1d94638bbe75edb7fef78f1e5c0d214

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3cb295faeb23c106e3df2f77fc2c9061

    SHA1

    c1db8594ad35bac49bee80044fdc14191c9432da

    SHA256

    1ccf8e9218cf037d8a46fb0df571a386b35886e88a6172e8f779f5767aa6b0f3

    SHA512

    ebfeb436535ecdcb85475aabc7371e445f2ac33616aead3e6756fedeed477cb1f467fdbb668d2de4adcd9ae4ece726233e07d9af8ff98622f6e1f3376cf59b9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    400af8d6a1add45980b40a4a7f37c012

    SHA1

    b1f6a1be1a78452e50776da001b6ddc3391589ee

    SHA256

    a8a05ed85d8f58428ad021ccbbeb3228c4f146803fab0a22cd4120eebeda7a7f

    SHA512

    6ce5be8260b114818302df99b64d5f0d187e15c2a4b70eca444163d41444c213ec4ebab3163d90010217dc290b51f6b086c3a41242aaf51cdd6f0b3f4bfef0c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5478719b8cf219bae461cc41dc682ed1

    SHA1

    88885a7ac213df98071f0e0f137b0337b35b73b7

    SHA256

    9f6938c3e6349104fb6f3274d42f767389de847de508c8b8f9025e8b726fca2c

    SHA512

    35c82d4f2f1a5e8de1171441ce749e8d4c9b18ec9818993f136351dbd95aa7bde6600d08e51a005eb0aa7d2d44fb2e569af62e46f2987cd8790d0d0e898a76e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    d666a9ebaddeb51c9367c445f8f34cec

    SHA1

    d42335ecf8ae4f0ae4dda89eaa8f8fae983fec40

    SHA256

    bd08333b926a04da9bd29d29869abbc58360292420c212b8bd8d5d36ee7b260a

    SHA512

    a39be0e19c3b9ff1b0724d170b23a96f4ea8240e9c03acaff46b181c2406876fea2e1b4120471911fb68768359e73652778a50c9f521587993c057f84092292b

  • C:\Users\Admin\AppData\Local\Temp\CabF6B1.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF6B0.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b