Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09/10/2024, 04:35

General

  • Target

    2aee66168be1f5d560493c7e0d2bbaf9_JaffaCakes118.html

  • Size

    139KB

  • MD5

    2aee66168be1f5d560493c7e0d2bbaf9

  • SHA1

    ecac30c945dc51a00fbe71abc06b9d312120f0b9

  • SHA256

    b20b6cc5ec6f4dace6fa910c3ba2f528b2181ef5d9bac9ab7ab068fd59a937a3

  • SHA512

    83616cdcf66233d11ef502ef2404a69a0102b29037e0537649a7601dc1327733ada7cbc7078be1e764d16bda3b76c355b303b2421e9ace3028379138c75948f3

  • SSDEEP

    1536:SSKvowJXUs0+lE7yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJA:SSKwUU7hyfkMY+BES09JXAnyrZalI+YQ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2aee66168be1f5d560493c7e0d2bbaf9_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3020
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3020 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2700

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    9e430217ecd2e688fa10fe94289f7fd6

    SHA1

    fa63afe3eaee70400e9086ee7563ce2d6ee8a6de

    SHA256

    eb6a8f4701b3dcb746a0c3030b9840ab7b5fc18753124a5aa52d7751a3320bae

    SHA512

    16b62ee61406470683402d46b2b578c97dc4dcb0d019bb354a8104e51231943b2aea8e62c8f68f2909d045a0228ecaccfeae7fe0f4276768658671f181956659

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8509d13ded807c3f09ae87d2d0455505

    SHA1

    0c3e5849600d8763d3e4c6c6ce1495cc19a5e4f0

    SHA256

    1007fe4dfe01bf81e9e15bfe7123fe46ede370be150839dac9fbdf6028ddce06

    SHA512

    c0a6dc953870815f2d1a298707f56885040ed968c7290bb102ac643f913e227c81c120a46bfba81a58230bbb00279d2d56fd6e5d06caf172c6d63086399c0e28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a273696cf62b1d586eed2c7e625d23df

    SHA1

    c85c25a8a73095aa0c65bbc4a270ade95a36eca4

    SHA256

    6ddb48b77d530b79d80a3c65a6d14ef03e33fcd75a88dc9fe8372074f6fb34f2

    SHA512

    594abc417b5ec49aaa84d4a8800265354f14ba1ba2f7ed0ccf9fe5822ab3b11e903c068534722a64f20ec14f6074c682c2ee6022c2781ca2e896d196364a6afc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1757170bac327f9a9307be34ffdf5d16

    SHA1

    23fa4a3c0c1d786274de0ba966dced153cec0606

    SHA256

    c7847a31aefa99e21bf4d9eebfb53ba50c8b44a2cbe0b2c2ee44190b54bb3050

    SHA512

    8858db3459da430e40b2351dc1b534d8c2994771e29ea4248d03d569ddee73be5e5e7e3e5e10fd8dc328646bc4fbfc4cf309f1a2cd2570583bd7d8fccc48310b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0db16ae2ddd022f476bdcf78aba639aa

    SHA1

    280ac6868c3ec09a9285990417527ca8ba0ecca7

    SHA256

    a6f01fbdfdec342307771abb42b15685c91f5f996de991b211c3d0385de7ba1e

    SHA512

    603eb0c9eb346585812c0ad84ae3b6951f707fd1f015694278d68621d006a3b5f866ea92a416c25d51c300d4bb855214b1ce3a0a9c6dc9a42daeddcd0fbd8329

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    551de5302794e8ed51bf0240dc102a50

    SHA1

    55c30d912de1b142e31cd3eb7acba62209112c1e

    SHA256

    cbc41b0174c09da6eb42386982a6fd70d8ca5c877687440ffefe1eb0dc22c828

    SHA512

    51ecd7cb5929db83681a2a084849e59c7360a79857c3dd0987f2f215024260539b039fdd561e326edaba19012cb421ad3962846772749d77086a1ac6a833f58d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    426ea7163b9d4ae6d2fb8adc7ff8df1c

    SHA1

    6194140a87f3750fb832f03001130c757df2220b

    SHA256

    4a5036a1568923536a958296e817c09d691d043bee434615c4461b60f2755b22

    SHA512

    52b4042fdae6bd285fec597fc5df28c7835e1f1f5f70de06508526346332e6db5b714ba69fd4e22be538591713647ab2cb83bb213238f821cc8aa9a31f2baca6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    73284be16680ef1accb449fae8ebe51c

    SHA1

    d39bbe07467f4511be3057fe252046eb4b0959a6

    SHA256

    19f8f46985a5a93471ac2855d17afe2b24d6e9403d3f389e89767d5d30c1cc81

    SHA512

    ca787de526db3ee29b02c174d21abdec1cc86392e95b8039eb4626858c79dfc62a4d7444b7b74f267c403fc4c620d3f0365d0fb942630f4777853c0c54ffea29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78dec9ca96ecd79673e7ddc2dde2915a

    SHA1

    e8f015111be46ae89e17e13fc69a9592d8905429

    SHA256

    5092456e643c3f746e272f26be282326c5e289fc32322cd31099196f8b8d1a5f

    SHA512

    b24961afe33c045fcf774b7b8dd73ed99b18ae98709880d865d0baed7c1870c0106479d3b1d0ec5dab652f9382f824a59ece6f0e9d9e1fa14525ba993f825082

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    48cd20330f111a0d4ef3b3c31c5f2f36

    SHA1

    b0cee45df2030c68ad34ccb210e02076a4f06065

    SHA256

    fe7fa9827e951f715c2881d2b7c4d745a88f774ae62c32e1f83d1e351fed9d0a

    SHA512

    93c61b2224179b38d62f6984143ee9c1a6bc99c7d72606c6d98330af64638b7894c821489c1a9f27444cac85218f2587e645f83b39afb4f3d37759f5f320023a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c29c252e39a2adba1768cb23cf51c0c

    SHA1

    84af8ee81e1f66aa97fbc5c3b7bf1ad18fb4311f

    SHA256

    9ed8211e0757ea471ae4b53bf74893705b6e88595e8aee25cafaf5327607c019

    SHA512

    02cfedbfc511a62d10f490c69851bf1ac2b90dc037b43909056d0caeb11f56631c94f74df3a5c97949465fa38eb0d15b401fef30a42e2ef4497257f3bb0a24df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    71d62935fa2ad79cc93f1faf812e635b

    SHA1

    ec68ce2691de8bbb0d81b0d9ed092c0a69b3271a

    SHA256

    762644574004fa4a14c9893eaf2ddec7967dd8f9fcd5a97e716118f464f5eb11

    SHA512

    0e914326e623826c1dd1cfca3b55cd98ea459bc56a34bfd153ef8515d049bb2f42dd43a2cfe5ff9b26ab0f4079a68ada67a792f24da1a1a0835090ee5fc6c7d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    700756076ea8eee931cc9d65907cb43d

    SHA1

    f2ac2a70cc98e17f078bf37847c4557fe54f8d72

    SHA256

    ee887e7ff67e89da72268745a6a880aca04dc4a8899669f1e57aacab564cd0d9

    SHA512

    126614fdb4bb6de405179015d738ab824cc351108f1fd3be8591955fe94900a507ff42aadd9656359a1ad80666b1e1e4f5c23dac6bade4f1d609c1c04891f84f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    648594ca523cad27d270d0f51eba0f60

    SHA1

    53f689ebd3e8d58e8c455a380095d81d3741b70f

    SHA256

    f870e15429a0abd722a267171046fca1d2429a6ee4bbb083a398985563a61f36

    SHA512

    ec86673089a64457e9b0c7fd587e88df7d035d5f534139cb34756b8d70778a60804a77e5e40d26443b44125e8369ace23a20688cb77f2e0c95cc629b3bd31482

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f37ea86cbd62711b81a6f16a266c6db6

    SHA1

    f0ee2657bb9b761e33bee1e4920fc49b09e41305

    SHA256

    7c1dd05f54c738788bd75dff7632339ed64c8fdaa73e3d430d6e8c35162d381c

    SHA512

    996f46a507c1c2ea01e46a3bc7dcd4bdae3dcd80d685f82a2d95ed1abb5815475e9fc2c8aed1b5c12bb693ccf5eb301cb213bd97a5ff38d3cb148fa727fb7296

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c144ce26f342ceb7471d7f8b298a443c

    SHA1

    522845b37b90f669dd15530c9ea79d02307e4348

    SHA256

    633581f8ed317eb0ced79640b0d77907419707ca9c10a89e5243fc1fe1b0cd4d

    SHA512

    ea267317f4c26805e54c51f998fe424d781c12a95bc4485743374657a0943c8c01c3f06135b91a59da4ecdfe3f1bf2da181b47defaf07cc5b4e85525d8cf81cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7112a8dce185d704c1261d066e986080

    SHA1

    19215aa8d6a75dcbb24d8e7efb776811cb7b74a9

    SHA256

    e44cf8ef50b1a2f52e2534863e7d0026a296b452d39a8e66899258b2c97fbe95

    SHA512

    62127acdefd36c3d735e4c2df1b1160e60bbd3e89d98379854e90be6505bf5681fc21dd48900563b49a12bb358484d5e845c9fe8ca23d7fa0ecf3e68ae4d7b0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1aef531afcc3f079369c4122e9f243b5

    SHA1

    ba0a88b5ea6158e914f427ad3fda040473770847

    SHA256

    763a8c147b84d8897ad9bd7059d45460ac13789628e972689f94240e01d9ae35

    SHA512

    03cc114fd2a4058a038c19683a4f9b644f30ae3f5845ecfca0d46a986139a2a20a51056777209a5f5579548b3f225a4a10375ae32bddbc1513720fcbacf0133c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0cc04565983e2238fd450f29f1f8234c

    SHA1

    a0db1ed93470a1e12172c183fcb7eda4dc096d98

    SHA256

    7c22cd1e17d1aff274a055e248a40dd7d54be6f128303513db181b1024888525

    SHA512

    a4f290169b16e2a411594144c721e75b5d02e993f65575a25113b2435d007902635004a74f753064083923c71a95dbe80f5ddefa075c12db9042baea6caafa09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b3a1e23df3752d4f35ec4eb44e3f30f

    SHA1

    1e9414e65091e0ea6eff3ff7846573306bacc21d

    SHA256

    29bd8a0ee5207522613c1d58531d9cf4d016700adcf2114310d09dad4b7c2aa2

    SHA512

    d7637c2644632afd325258b79b1e306918a813af7f9785cc3f35b9b2d11018de87d87af70f5205b9b341553c69197ffe0a60d6c727e8a89f7f5b6c2bbb214e63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3361d3c89b893c7ea28b65e99dd9397b

    SHA1

    88cb3e44443f7431567649834c33b1d018e98bd3

    SHA256

    9fc25d6986182872de56404a7e7ad017ad1682934213fdc2d22a2072f80aa201

    SHA512

    425411225395c8bef10caee5726b1125f1ff98b0e41e828edd5b2e3d132332a9db04a6b5a1c8ef8cf31274f5130bb8999a50e0acff2fafe484aa26d4c2e92e9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    279a8671c9d512e441f35d5122c7ec72

    SHA1

    18be8d8c009616c9826e4bc34cade00081ab7e89

    SHA256

    23ce308a6b88b6030b38265a3ee274fbc36cb11d6d30bb115759427ae5d0cb28

    SHA512

    db0aea18338fe29c84177f4a723f502dfd114a3aa143de2336821230b173585fe2f357ae8681e656f5d7b2f540af6120ca8797751ca807986e2838dfa4b50fe4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    c990408a3e29d35e2526bd3cd4932663

    SHA1

    08b094a3d11e6c98dba5b11061384765d30661dc

    SHA256

    26871d2aa17997ee52d78142f4a9d23833b0c3070caaa3006ed666752b596e42

    SHA512

    145210bfd5686a9b6a0c53825ff3032ff417c977255f938effdeb7b7e924e94895110fd70651bf5cce1c7b15f31f29057655d206c4a7e347698e6f48d96c4795

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\56KJ964X\domain_profile[1].htm

    Filesize

    6KB

    MD5

    a29a43833ea67e51f153e824290035a6

    SHA1

    b1060ef98f9e8fb1af5193e8f67c4548f79d0873

    SHA256

    b7b5d06fed43b392ac54fcb1a36196e62b5c9bd81441b414098a095bf5bf7766

    SHA512

    45da70988bf0f10a037812e7eaff13abb92fa8a79016a7480ef95b43c9e6ab364d25a8939a7d8b05115a9aaac9d4c8769d90d1366ae98949ef9b60daec247ab5

  • C:\Users\Admin\AppData\Local\Temp\Cab99B1.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar937A.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b