Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09/10/2024, 04:53

General

  • Target

    2b30d8c693a5d48740dfcd74e0ab1033_JaffaCakes118.html

  • Size

    383KB

  • MD5

    2b30d8c693a5d48740dfcd74e0ab1033

  • SHA1

    d8fcdc485557321fd2100071b2ace7c2dd9893f9

  • SHA256

    1e59b80dd1649be9b21107341ac6a10e9d265a6cde4540d14008b4ff0dadbbd3

  • SHA512

    19e3fd67a0d8961c060cd62355eaadb98939a1293b454db00ad1a949dc5ad2b352d0f372a2cc40a72185aac7bea2ee85258a60cbb496f3ed04b1d863111f47d3

  • SSDEEP

    6144:rPl+Jo0TKzVNoYo4HiHGn2nEXL+sHU0KwlouPZPIFI16nWMPh1zOGWYI1yz8+5j3:r9mxKB6Ybimn2nEbpbPIFI16nWwOXrwf

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2b30d8c693a5d48740dfcd74e0ab1033_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2792
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2792 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2616

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\060DA88C75EF893E32438A87D4AFF23C

    Filesize

    504B

    MD5

    29813b0121d335c6a156a08b3d7c51aa

    SHA1

    bbe7376e8758dc912c279a66c7086ffbcf2e317f

    SHA256

    ceebb87b09bab0a377a95b915cc2942e705d838ad4426b14d8e21c28770c5372

    SHA512

    a5ce6e40c1763237fb284b7ea9491f8fb3c4228018f68c5f8572b6268f64b0bbce8e83395dd84f83a32183a47b3537a9fc39f15b622a6ada46756e065942a1da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    b3c0145d2ede5d0d575c79037425f9d0

    SHA1

    55bc068175fdecb17c4c1e25d93a0486c7e7b23e

    SHA256

    fe43e829d9c9c095af80ad3949d4f94784d9ad766c6655c36108d1268cbe922f

    SHA512

    6e6960186a170255af88c1b890f43306143c791cb07f162e0e1bc1dd498ac6f94fab24af4a8f69b95982d1ac14635f216fde22c2ac0091c204685f5097002fbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5dfdcaa67aec75ee56a1cd2809fdd557

    SHA1

    b0e037fdd62731593c3b828819b78ca625301c7c

    SHA256

    6b236297e4f1ad745b6fcb0324187f95263dec787d80a3ab399cf304f9bc14dd

    SHA512

    ae6163f19d6850232df300457164aff3c031ad20618f2af21f209644aef89205174b4a2e8899e70ecb680945c9347668b497294e5175f09930b75d96a8189fe5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f8ca7271e28ddb8b08dfc2d4cf9d3403

    SHA1

    df719fc06c9d04721cbf142c75f939ad14a219f4

    SHA256

    5c6d54f25149750999428fe127abb1d52772108f1fd9cb2dd057460d50eca801

    SHA512

    1dc876f69e169343a311d4de0436a5e07eed84c275acc41fa32d98d6fefef6f6851f8652266f331924682d8a734ffd6b255b8aba5b8fdb514025f3c05bae1e11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a49d50e334ec04204fa023956bb97afd

    SHA1

    bfc7668709324436e88140a91b8a734cf5d674c7

    SHA256

    1ad2cd6309a40e8bca66131b34704db2d886218d8aaf09ba49e78fff92c712bd

    SHA512

    69fd2716ca559d2b1bab35a4a0940120e3f4375dfc164454749708972fba66d6efb68698207a7a541a3f8f3934ab4a2b06acd20b5ee69dbd212d444c3ff23a5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a81961eb00fe0bbf95b83667654ee244

    SHA1

    c735be00abd7a8ab3206347208186587ad669489

    SHA256

    38a22303238b50effecc37ebab74332734f22ef547765c2a9163c3e378f134ee

    SHA512

    cc931a570c366e20a7b9bb1b0dc1cb5d82c6fb0a26f82e845c92a829ac7cd2c0ff0aba7ec95b8757fe160110c5b40efeef51f1afe3c2e8308dd42f0565336d17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fda1e4389703d45e848bd0849ef86204

    SHA1

    6113763ef1574515543b172c6215adf50131ab7c

    SHA256

    d69789a8b5304b10606e0d667bd8ccc907e659f9e2e91736750aa18ee324d12b

    SHA512

    3ce918917a8abca98531a499b07d6957870e2f4bec1c36c9d07f194963cf52a151212aa40b336097847a6584caa6af4c962c27b6506175813b56a3a1c113838c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca1ff3b3526757c0008a335b02ffc80b

    SHA1

    195f857ee715b09220c3595bbff2eba3db50249a

    SHA256

    c287c944e802377dec77634dffa7a0ee6148a59c7839ea835c1ef69a7643352e

    SHA512

    dc4b1d2c7948fc5a4104b2654b23a1a043be2efb133bde420bcae7aca1a2c928094944c66ccc155c2cf4f8830eed1cc17a52ef0f74edb5cdbd548f1254a95252

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0bf6803351bec2d714c88879313d6bd1

    SHA1

    3944c7d85342258a877cef68efadc05e4166badb

    SHA256

    506e73aea8bf9cb2148f16c2dc7997c07392e69e705ab6f40a7899d5b32c0b50

    SHA512

    f1bbb845e67544594653e9902281d95033c060f4a7c02d441218d1dbc5419424a04a0c0a9b80e267a964c899165b44a46c04c225c44d2b96558a73be900e8e47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d34f58ad4097ee7ec81c48ab6e7a8f87

    SHA1

    377b9c1ce9bef18959eab49e1777a5353261e63a

    SHA256

    85dc6ae3701e4e6a4ef6ac783e57bbc06b4181eb61da90cc7b191f3af1c4bbad

    SHA512

    f450698bea2120002443489c10fb31634557d768222a6d87b7998ce4eb5421dcf7560ce35716178b25f9f46bf54eac55a781d275f95c700e405f4acc05db479d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d3115717ed62e2ee94dc4391204d1b83

    SHA1

    febdd0c7d12dc8d07a88888394488a36a43a3395

    SHA256

    3fd69f1d82d091b8e81c057b5f3fe8423aa0dea1232bbc4901259026754c7082

    SHA512

    96d25fe653890abf7d431d858afff56dc2438f5405874cbbc23cc13e22dbefb7d6710e1b0d172bdeabf12a5b1fcadca90942d539f938e1b7384c85348b782e3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    58cb58d2a231852fe0cfd1e50d3ce56d

    SHA1

    5fa8d84d26b9baacceb122b39f5fb7f9f36453ce

    SHA256

    ba556a2743f0c6bc14419f71f45eb4b3ddcd5dcc722b0b45d89862d4a1356be9

    SHA512

    06de15a0132f2d765adbae450980ecfc059a084cf76e5f040e1be040799cbc23825f0f5b7ffce72d4726d38820c85ec4f92029c33b4c29ca2bbf9f5ecf3ed67c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c2725bc827b57bb76f4cbb176db041f

    SHA1

    cd088aa4e6567c8c76c7a963932fda081b62fda0

    SHA256

    6dffa24b63c57ee00b52366a5a3ee705f42ef6d20ac2c658ce6f667e4bf61ec8

    SHA512

    d378fc7da612936a89112b0332bdfbe1b237640cef85402c88d886b96521a7feddeed5247fe33e3a5d22c0b2aa1916f9b8ad253e754722b7830e6984c5de18ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4415ba6fbb7fb752350581a207b7c5cc

    SHA1

    37fca9f33906824b6de24e59e46600c0c5fde7c1

    SHA256

    4559ff582f3ab645508990fcf1e618bebee0416271f34cb4ae27d38817d7440e

    SHA512

    898c8bc6b9f9387eb415a386df26323346bb781856e34c0d6b97c2f92887b9ac9896d620b4d3f119e8685ba769a0183c6580515fe1051a37d7be609f16e449d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e2b3784e13bae8435a21e5e08fc59d7

    SHA1

    e86a5a055f1517c6e54f7720b98e6d846ca21f65

    SHA256

    9ba2b085e7dc9268fcae2de3d44e6f7eb20589e332a3ab4dd631e5979400b7d5

    SHA512

    9e2895989b6d03f9e323cf0a0f459c40e9712548ad846108d7317c1a86fb2bdbca06a39708152b276a5050d43733f65a7179b779e06de1f2b2b9009b945531cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    422b325d8f514d04b205a7f4db8c64ad

    SHA1

    75d74edebda0cf580bf755f675a753652096481c

    SHA256

    16b84608cc0c9a78adc71eb8f4d880d6984e627ad8780d1f4f27c55249385f41

    SHA512

    345cd3894bb4721c385df2a4f2164a3daf5e7eee9d63a3fddd0b6e80f8ce1c553a3468325deda38ec1c931edf3c7a4ae302df788032b7152be0802a0b01938fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d4bbc2be40ec42dda07c7a04dd6f4c3e

    SHA1

    fc1a4db3e1254bb569f1e564487da339d20cc93f

    SHA256

    33443756d8fe979aa4ab53bedd2b9e0df38d8101ab20a1c693c098b007682462

    SHA512

    51e16a8051c4a616d3c20126ac7d4c15f90694fc1bb8992ce9c85c9095d19e4c9cf9a700e766eb9bd4a8896d859a5355f3a125b0eda0d3e8fe98a59733ad30f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dee1cec2ca2889cfd1cbda0efbd2ca6a

    SHA1

    390d3c34c81e86b66b2226415bf04de30cafd004

    SHA256

    2910c512afeef2a8e64d4ce8c91f57d5c9e4f860e95e5930a781ba121d940448

    SHA512

    02bd49ee5bc9ae9d0a63ffe129bb6cc5815cd03c56e8ae35a6ecd7c17e90c65d477d09b349ebc956f0cf460ceb5190e5931f9da91a02843edfa32fc7a8c71744

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fe1947811372e4ca1e49596898607a2e

    SHA1

    a888d9f04ce6e8993bb39d4af8d100f193e40f70

    SHA256

    f3e61c46ebf0a0c46faac0a12dc3919dc5f36f871d17ca046a62fa48600c4dcb

    SHA512

    9249bbe49021e28bedc62e90a8926305d17d08a7cee5f7305022ba57d2c0151bdb48a179f04b9430641111e82062661fec21b6b591cb7d092d210f646c45db6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    511dc5bf959e65f6b10ecdac42ac0d72

    SHA1

    afd52b1467e69ba3cdcdb4c564eab8435bcf51e1

    SHA256

    b25d3260d5c2dcb84c1f578706cecf17f95f107c39899f2837f4afa6c5ea195d

    SHA512

    5430e6b4f5ae8105e11d844d1ff6ae9e9e038094f4f765d6b6170b2b9311495ab8cdd66d217dabd05656531913464877d507f3cadf1502ffd2a899647aff7ca0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0658d5c5da5dd297b37d25503d437f08

    SHA1

    02ff08d3da55784294c0b4767ec7d6cb36bea90b

    SHA256

    a951e416fd5342d6e8cb615097e6475981cbaa6dfa2caf99686aa09c9f26f9fa

    SHA512

    96f7dc1ed9621cec1bc4175cbb850068bc3c9cb9c7bac9593228b28872eeceb90921bdfb4d94ab8ab6e36667355471ee45b8e5cac9d2a14801c8d7f143d684a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    04bc7951bc18f38315ab280d76b9e89e

    SHA1

    765ef43ea06e3ef4a7fb2d21cb6c405a645376ea

    SHA256

    c2358d908520a484294354b2bf69ce0dfec8595f0ae71ff4df7e6e7136b6766d

    SHA512

    0d89286d3e9ea351771e2cdf54a37f4bda82cbbb534f053750bb4e771bce60e0f12f35b2c9267b6e36b6450acf5df8c6723403b8b98550645e1342d480ed0bf8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    c08b471748c40925a1a1adb164759702

    SHA1

    96e81806a06eaf35ac36360def6ad88dce9e6bcd

    SHA256

    381ee53a03f547525e168eca2d86db3a189d46e7e0e5d5a5d06e6d767170e8b0

    SHA512

    b886bcf1b08f8cb337660710a26f246d6350cfd6b08b1b678221b1bb00331de8c8c735a19cac66b36a0da0c4394dbade38915b21513a7e43b0da66e47bddce9c

  • C:\Users\Admin\AppData\Local\Temp\Cab94B2.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar94C5.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b