Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09/10/2024, 02:13

General

  • Target

    28fe0dc5bc217210440171703ddced99_JaffaCakes118.html

  • Size

    47KB

  • MD5

    28fe0dc5bc217210440171703ddced99

  • SHA1

    2b7f1cce9573841590154254fef3acc3f9468bd9

  • SHA256

    707859980fb573c1f2a5562d082ea2752d14264e4319283b623540f16c41f826

  • SHA512

    ea3ac0403e8aeeb738ef7618cc25409d14b3ea71a281335f8de5edbc954b4da1e8d48f495150c75497be435820817f133e04c2c8326e525cefe21caee31dcafc

  • SSDEEP

    768:mSHSSSTgoEBTsBp0MLO4KzkDOcP5kEbPn2zBHxpU:mSHSSSTgoEBTsBp0MLO4KzkDOc68Pn2C

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\28fe0dc5bc217210440171703ddced99_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1852
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1852 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:880

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    1f1adcc47cf3ecfb5de0693659bbe843

    SHA1

    7d25fbd88279f32f56172274a60b542fd7be31b1

    SHA256

    5c6d011347d2fcdbb4458ee3873898ade77e650cc45670c893b78cd733e37be7

    SHA512

    72d414e7150062de99d4cd8adbafffeba8eabf1e21dd8209c58ecf7426ba85d742465a988686ddc4cf6f060dc873c7bb7429c3c953a62f844b5de4d6a9dc506b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61d79e5a902cc8eebd32799e4d90b23b

    SHA1

    3e88a80314df1e499d5ac284c84fb2f4f2f72ce7

    SHA256

    5b7f6d0423e99c57c10a639aca82089727480f890c4bb2eba2d207ece62e04e0

    SHA512

    40a5e81e0fb1cbede315125525a76cd3641aa30b58741863276a1ca6a84d2922197eae0444f784f89b9c01277fde4f63a35ba5a5ab8021b1ecd5e3926e3835a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec3bec5b06eb3b1cf4e9a2a7999e10bc

    SHA1

    d0471687dfa0de3f3edccdeda2dd7dbf42e7d96c

    SHA256

    44f1e1aa6403d892de63c2ef67f60c0dfa1e8a4dc3154a8a2c84ab112d709e4c

    SHA512

    c27f4714abc182bd55251095c9e8a485e7e48e7601a72ddb62f6d58aedaaa71fb5a69844427305911fda9dc32f6a33bb89a52400d147a28350d195b3f49fe230

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee914d011723be4628ce585b4c135474

    SHA1

    bfcbdf5307787da3506c2fb355b987d60ef690d7

    SHA256

    4162f53bc214600da9bec6ec400c62de52be1222e8fc2107bd917f723643ea25

    SHA512

    109b26d3aebe8a1c5fc95477c40b049ccf0e26aec3c2f38c97d8a7b2cbe738e2bc532b19b465504c297fe53488d0fc0641b71f491b9662f8d6091bb1a7d4eec9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f83c11891003075a52d729c58233e20

    SHA1

    58082634d0552c29786da66fed7a15689c24971a

    SHA256

    af6240dc2ae23a491c243eb43924baa688e5cb82b09ae9d5b3ae341843e58b72

    SHA512

    56b51ffb5d4cbc928c2af15fb45117f57caf2c49f008ce073520829faba0a1962eadb0bd22dfdefae71d0b429425ee50fc2948ea34d4af59c9bf2cc385cb44c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7e2eac3d5efe2d41d9b509b2c50e118

    SHA1

    ec4d0e00c9500615c395217dba0eca8f5f37fced

    SHA256

    a1d44059d4f312bbb3b4a21d45b564c950bc1f77a5bdcd2930bf1564d25a945e

    SHA512

    b685cbf980c718aa62e8c5ebbc94a627c5b1dd15b67e180a86c2c14b0cdc74f15073340b12eeb5192f47b65afebd494f3c0d75877bd3035acae6c1605a0716db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a69be66f0f8f7f6a5e5925ba8f427427

    SHA1

    c01be485ed010026f540a1888694638ca2d11cb6

    SHA256

    e06067d66ba012cb631612a364408a54fa11b11e659d2b56a42176645bab4072

    SHA512

    0465fd752d307bd8cb10f892a9bc9994f272c3cd3343119ffae1fb37c7eff9f2ff5eb019686f83cd8246294d98c32fe9c512dc5737317e156876fc8a7ea0ea24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1abca80f701f0bc7eb7efe57b147d2a3

    SHA1

    596182284e4603c0d434c8ea77d330387f1116f1

    SHA256

    bbbd4662f0ed26d30dc62220bc0ea5438a39fa70948bd96c8b2bdee7e61d09be

    SHA512

    777fa2cbf74f2a8236190af9e9e642aeb293c55fd8a1729d1845b4bbfa3496cc38a796fa06ff5ce18a9eefb9cc8dcbf1f6d8ceb15e3ceb4f96b18900252bbcc1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2342ce267cdfec3b663f642928eca0de

    SHA1

    754cd8ccb9703e20a6a43203fc16e3486e9f52da

    SHA256

    dff4539477bc83cb254a227d774008d3db0b7fcfbedf550e7aad8cc767165441

    SHA512

    d93af0a3bea11e11de03bcc619a34c20e60c2962c3927928a0ec4000d266130ab84e9802e0e2e29a055611bf6b317b9035d968b319def84de37e41a48f71942f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e33e19f73aa3c821cb07b53fab3db819

    SHA1

    9f5121e6dc9d7d0873e2eb694680f83a759a4ab4

    SHA256

    625edfb8076e5f7c5326903a930bad4352f9b814c6843c803a8cc1c8aa18c495

    SHA512

    523047a7de90a65e255b438d1ba69bf6bd410c702612b3c51104cfc9ed9cabf0db0a64bd365c00d7fcd32ce3c3e8210eba23b63af4741e4947ff751bcab17432

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ea27803fcecc37acf00bcf0592ddc42

    SHA1

    6bc58679379685a87956fad94aca8d85f2a0217d

    SHA256

    68e22c4e47edecd52d1483f8f4f032effe5ac9c968797e90e9e071bec92852d4

    SHA512

    f0e0e7ea886733759bde11db461dddac33fe2b2705d9dfcd0cda076480a1af3a7bdeb91027c4e4456a090b50262a5aa03baebd0f6cbb01dce113308739c94328

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5125cf4972b9d0bcdc6cd9db05443b2b

    SHA1

    522b0c34afe7ab1859aef517c6cb4e703a78be13

    SHA256

    dd225992b8e2eb04edc4ef48d27057b386165f58a2db1ca65c77400e62429b64

    SHA512

    3b0ad38c352681b2f8582b710e6b7ff1640dda57ffe644b94197e2be18246d9ea0845b9f984bfe0acb33cb1c67234db74e80a7646b22b820527ba5ab6e788737

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4dd9aeffe664726509ff79816c73fa59

    SHA1

    4fe68c8bfd094e4983fa12bf3274133187e824fd

    SHA256

    492d747f3da1060434ec61aaa06bfd69a997d45088d87dd0eb60adc986cd8cc9

    SHA512

    bc3cf3e4b766f364d7ffe6c1cf6d767bd1d0be616c7aca77558b0b025b2def240acede4108d8ef54477ccbc9bcc86ebc9d7a1e2537ac33385f43d6b181de7338

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    30d44ab457f2904c186702b4e6f7ad2e

    SHA1

    1cd20ead0a97053ec3fb69ba25c78ef4d79b2187

    SHA256

    8d8941b5a7e9e8bb9ba7f83df3176ec6549054e67a78f2dfdda5efe02ba022c9

    SHA512

    448cc58bc5acee4d132b18bc69d38588333b50ad7ea3418cb2741c65331524bc4d1a0c53c2845de43edf992014ac70f344f0f0955e1eb5b60aaffa2da34ef018

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a606c06519ad26072f4ef53cdc1b4f3e

    SHA1

    4ea2d1e7ae4ddd71dfc6b51ea3b893d887f77414

    SHA256

    5c0bcd44746a52726fb097140390bed42d530322f9374ad0c6b0cd883645a8a7

    SHA512

    fd3deb2a290935f2d47123a9ad0a695b87c37996e985cfaa2dba98a776b156cde818d03ea433c6960ba3b5231888351b42f2026ca7040f23b2edf9a7eb667462

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aeb0c74956e549fb163143dd71884d01

    SHA1

    d9ed5a6586834df0bf9dc365fc32bc4d9353bda7

    SHA256

    a0db1f1b8bdafd63e737e2bbbe9c7b4f51b34aeb6b59c1a753be7d5a3774adf3

    SHA512

    2100cfde9ce43fd6a8a20438ab8c132f2098eae1d895e474da9afa3baee65394834ef07da0face619fa9e29de17f242208caecd3d17595927b1bc8112d9fb07c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b164abf5cbb7d4e51243d6b0ed84dc75

    SHA1

    975604b3ccb54191cf084fbb25e0cf44addb9fe1

    SHA256

    a981448c3feef7d79a95aa881f01536c1dc02f80d4b1a5819c6ea0733c81f5a2

    SHA512

    59a0f6176edcfd61b5a2031f1a541251a6188bfe69170bcf90117cc575f670a231058205f51a9b7a033ab7a1462b62e9399df5c6c516b834f45bdaa7a2436872

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    58ca1a17e67cecee6d9eae00275d319d

    SHA1

    d3f056361b76e8c55f27b9282a837d4371fdb02d

    SHA256

    ed6840f9ff6238ec733453b2f52f046b358b8aee1cdef91bd21636664aaa63ff

    SHA512

    50153ed12b667ad74c285771e36073c2e5485e3219c87d89a38e15dfe1824ac449ee52a478bb8ca697f9e7a29e8c8633c2988e5ce79dd95ced5152be145f33ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d39a1d885d3f81e6d9fd3dc824e06b9f

    SHA1

    b63eed25118d0735917d74f8930f3b691843f505

    SHA256

    f52a9ef7cfbe5e1ddbb110890766781be4e20bacd3d5a943bdfb73d1464b11fe

    SHA512

    f43346df22d757acd082e9acc681d7ab9c24006146e0d12008776d0f7d6cead184887424668e68a5da1cf7ee65c5235cefb68273e8a67675c1a8b2a7ba2b62e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d82c06187f9a592e0f80aad2b91279f6

    SHA1

    7c62488894afb96b98854d62836db73741a0cd00

    SHA256

    eb2da4bfc4f0b7a036bb86584e7b3ee0d162eebbabf75b30986c9a62e99615df

    SHA512

    e0372daa10c2442995927e3521b163dadacd797b00012d199851f009f3f45dd4da534f3103f5bec59a645fa94a002a12b6d889489f3586ddeb36a8e99c1ae67f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    d9bdce5d432720233a8bf782ece78d92

    SHA1

    0ad2b565bf6a223c3a15a204aa41d166dd490c48

    SHA256

    9a1fab6cba403067c57f278dc3f9037950077380826d3657079cd26a45ba2a31

    SHA512

    65aa8176c5fa07735b69715d59ae07859196a58b1612899b6c52b19b1213e0f73fd266df3bf4c839125e7ce398a6c4ece5e153640acbd22f86ea104cd833732c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y8UFEBH5\getonline[1].htm

    Filesize

    36B

    MD5

    64b61f312cf8dce4fb28eb751b01ca03

    SHA1

    a2c70e8bc138120ea35886135afc3b458bc9f38a

    SHA256

    7efe917132dd8733c47958b585f640115b23ece525dd4acb041de089cd6ecdf9

    SHA512

    7dcd4544c7d88afc8e369e30d05d882fb829671679bb0ca9f5bfd19d1a3293ec8897c64e2d73fbfbe723294945dc6b1b27b352ec932fddd35cfc91f845ea2402

  • C:\Users\Admin\AppData\Local\Temp\Cab2915.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar2916.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b