Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    12/10/2024, 02:45

General

  • Target

    381547f95227355b57a5e19be25f2557_JaffaCakes118.html

  • Size

    99KB

  • MD5

    381547f95227355b57a5e19be25f2557

  • SHA1

    6d1790e762b72266c418245d4094fd137d5e31a0

  • SHA256

    a9da95f0dffd47fecc2ccf8db84732792642d005c51a331b9d2932b712dadf16

  • SHA512

    143c1bf19ac4615eede7c2252b9941a7d2a99c5d7f898b1b29e1cf6d358c69dc3d131f4a81f72a75038ed8ee572428052670246277b777f128d0a452c5fae740

  • SSDEEP

    1536:STSzmzhN2u2UY7g8iA2CWzZ2wQzRskpFbN711cX:STSINxAgg2C5TzRZFbNB1cX

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\381547f95227355b57a5e19be25f2557_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1520
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1520 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2092

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    8361b5abe064bb1f2c729c0ca23e5f3d

    SHA1

    bedf7252208205a53649737c9e3fa546fd77e875

    SHA256

    b293b06377f7c99e9113c344503e91dc721c0765a7e184b7359910856ec54269

    SHA512

    f9bbdd1ff3f278c0e244c0c08faaa7fde49f51f801b9be621b8f4f903758261b9cc607fc839025a8e8925ba715378c7e7f0a021aaa16fecf21f25af53bc7394f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be99c996166b5de4c9068d26cc7d9e29

    SHA1

    918a597df5a228986534ab58a5e3a6f3e6cd58aa

    SHA256

    c043cea0cc3362c793d3eefa6704d43e8ed4422002ba58107ff9c2f92b66cb56

    SHA512

    6227dfe34f3d0fb5388c75861c0578ec78d2a23fc8cf65b91704b7b8510076d6960f8f8166e1adfffab1c5b1f3231737bbd36c6f61b43193b9c7682e657e23fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52a975f3e332d17e8cbbea6497182fcd

    SHA1

    1fced5276b5632a83d8a27e96c9f7d5b5fedf0bf

    SHA256

    57e0d9ef131f50a7d12944c70920ffdaaeb5a1cb2ff36d954dca46e711506c28

    SHA512

    0c66e66fd4b4ddef8546bc470c0f8970b56507c41d5f45013ce6dc9e4708adeca9e8563849bfe8f31d74a68f46975e8eda2f2ec1053811f0efcd71dd5533c3fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a35349fcdd5d7520e69fbb9aee2374c

    SHA1

    224b78a18b663f9341a42d16062671d044867c69

    SHA256

    49e1be34b0a2c93cf95662d082f5bfa8c9392bbf7f1c4ff4c70256d16a2dea64

    SHA512

    c829feb2f9ca89465f53324bde4bdbe2195b35475e6148d27ef0aa3d7d6e8a0c6e5cf36d5ed4e2cac8928ae072ff19d5204b9b20182f1b7e5261be371de1fce8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37c61d687e80480188beb96ad7729833

    SHA1

    980993c736e67e071efb59b9ff7ad716795190dd

    SHA256

    b0222b6bfdb4a1c9824160c74bc41a3ec90dcf1d43732fe0c9e6eb03ffcbf462

    SHA512

    f5423fef12ca941ac90e9ad5336e5051ecaf9f5c0ef9d3b2f91def138d4ad7ecc453d58746d0344a310ed244ba35f0cba9daf19aea46f84ba9a208c483d6b5e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ff4458aa79861a5b1b3e0459dc5db2d

    SHA1

    a2de13fb7d871ceedd646e0965a204aa3fcb4893

    SHA256

    96bebbf8ffa44c9da0b41f7d076fbda861d753b811faa807313800c827be85c7

    SHA512

    dca8d1e475e265b4fdd79c19da78eecdfaed0332003ee4ea6ef3884376347b958b3ce5f6a7240ac027c03edb2f78e62dcb19b83957e1b7cf9039f9260e57d3ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    64bc9d642415ddc18d809f7d44f14db7

    SHA1

    5b2a0dd6ebd44456e3e4513035d79e87869d01b8

    SHA256

    cdb2b7a5c516883361492cfd8bfccb5b50d15f733e4fd69b3da5e372042b1bc5

    SHA512

    2e56a33aa7e7d00bcf602e35ccb5f409451f153154dcdf0dfccefbd894d8e977842166c511b2162cf7bf0f97e5f0121618cedd2ab22de54919947a6f35f88220

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b1e407120bd97491e529dc9e52511d4

    SHA1

    63dd3412c2dc108a9e2ff52b0cf263d31db3d9c0

    SHA256

    73741631002ba52ff9a8e0d319c1e778a5e503930233a1b6c29ab679dbb1c5f2

    SHA512

    c01f612a3d6e1381fb87bd6c6ec38d94defa7d940cdcd01d9f515b123d168f4198f468492f6a912dc5236143399bbf49fb510495ebb48fa107b94b76a3c26299

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    771d2b9b29f6b6bbbb290719c8622992

    SHA1

    82e99620935a325aac9a5b690a236dd986a29283

    SHA256

    ff2a19c0ff00277babfc189495d534cca9ed73c6c975ccac753bfd322147e3f9

    SHA512

    8e7af7556fb674bf1dab428dd1647f01eb9f605381717ed1d5bc5773f85b9c7947ecec7a1cba7bffba0f45d8703d95fdb5bf87cd42ea4e13b9b6a78f1f33e2bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47102d02f8baf11113a9372bae9ad834

    SHA1

    1e4dbb619d7b350dcfedadc4cf79e8cdb23456f2

    SHA256

    dce96f1118da7582c40a75d9817f70b56b0460b24caf40fa12c88cad107247d0

    SHA512

    c3cb760e08f67678819f4b020dbb895bd55fca24332f95a242850157b3abeee8b9b6f01f728d5eee073004a091bb14a22758dbf70ea4065e0c08f6f882f539b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    121c51692162a939eb77328abd9c7cff

    SHA1

    2d31761f375e51604e1e36b5f53dc33ac7a0822d

    SHA256

    c7d132407899e131df9027da6077616eb2762e61691e923695c5fb4d360b20ea

    SHA512

    030f15d5bfe44e4f24274247c962d47e142a391e9036110ecb328fdff7cbfacaf2424217d8efa147af82abbbf2957bae6875833343770fe67e79e3a6b1006172

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb055baf14ed09ac4ab729e72514da8c

    SHA1

    08e40f2ff24dd232af087cc81e0635fad6fadb2f

    SHA256

    73f990f95da3c08ea026054c2b9cfaedaa65f4a7c014f7b2c08afcec1d19951d

    SHA512

    64bde37848210dec03777dfd1e3c0b7debce10957bcb2a9a3acb2d4d3cbb6fe335a00c041801e138142491940a390144f56b49ee7ff039e1bc09c225762272de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6cd6df2cc10823cc637ad1afc5ffa201

    SHA1

    b9e0710eb09b66bdeb8fc611a0284c22e51364b9

    SHA256

    b70fc59ddd7b411af1d357d84ac179cd2f04e098b61db35f9b68a812005ade3a

    SHA512

    e46cd3f6c78a3737387d5cd871c9b0318fdaa78dba06a73efd5e83f5e2b9e9daf88c4184d9ec8d68fb99c6a633b80624d5002725d39b942c457a02e2fc1957d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f92e897b525b6c87c72550c8f0850f9

    SHA1

    c8198a25d09e9188fc68b15d5ed56de323efe588

    SHA256

    31252589a3e555d1401274fa7e091aec036294afcc36a4c26ac9b3cb1764c2eb

    SHA512

    74e7187381dec2f0c0335b23b4d30aeaf8a0f9e55668ad3cc5787bd7ab40d45f041a9a4bdd5a7ac857d916a41856bc4c1b113f25c21143eb508bc35410c6dba0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df5b063d7e60269f7f5981a1bd126bdf

    SHA1

    f9a4fa9c8725fda112327b7d56d4bab7c63502fb

    SHA256

    2c6edebb3a0de98d5b3cd98180e75292c20997c1dee3dd531c94058e32bcc35d

    SHA512

    2c434d0cc1f5bf853a739b5447830c4de9a1e80ef6aaff25a86471a5b1b41c2ba2ed1ad3f20a82c6784e18394092df6ab8cf91b80c58059cc387d032d25df867

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c21c21dc3d41e618d8167a6b4f0a7fc

    SHA1

    00fd99d689bc64377077919f1efd03c4e4a0ff47

    SHA256

    cdaee4e8d00bece36b20874ad203c166f06edf98b132bbaddb18d9bc81238002

    SHA512

    d37a2626bdea365fea12bd853271c26dce7a1869707cc5c2497a5a8c558dfacfc299b1dd059cd01314aedceca7b694e920b4a5b24ba8691be832afeca67adf34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7811f48cb6e735c5f6ed49c18dc95cf

    SHA1

    4ef9b7121126318a620f1ca8b76d93a7d76f52a6

    SHA256

    c0aa86213765d6884abd40ca66fcb424fc9bbadc9620a64edfe2d94aa01756b4

    SHA512

    598d09fcb7ef528a20fe837a4e3516091546a5e7fca01b1f35aeb000b40be4d28e916169a8cce50003b982dc4e4b22804b8a7d28d63ac550e3ae826c60c15499

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    072b624dec04dc939f55c9811e2fbef1

    SHA1

    2696609f287e1718357f53b00f8be16a08148969

    SHA256

    c4c9bcd0a3ebe21064cc1949fb33ff451a0e889ef1b54611acf35866d3f42d35

    SHA512

    0c9fa2c2f9420d21567b08241d2e5c240aff2945da2a1d70180a5951c68932b7cecf54df82cd3202e8debc315281f9cdccce51442038620912bbb873ad72201d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c76b856e9ac1cd8fd05b1937f4802de4

    SHA1

    776c7b6e323a5d8573d38fe26bc8af3d01857644

    SHA256

    694baba0f212fdeef6641a79486a51db0cce44a133e60512e1d97f0c3fac3113

    SHA512

    d7511cd202c165326d8289b654c48eff825a0aebc53b643813e9167db82e90bd92a5df2a6e5ded26a28fb68f5f3d873174340dfef23231672d570052881de1ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd5b45c96c281462954f1e8b83abae39

    SHA1

    ec490030da3914012e76bd9ba157c4da3d4ca5e0

    SHA256

    38738cd2709c1d11fdaacb51ff2d8cc27b3018703e3de43519b20e975e13dbcb

    SHA512

    e7ec5c32cfc079ba11914be32f70af6f7a7ee50e1fa3401b53b3cd3497ac11ae730a73181476971c09f8d9de811f5bf027cf179ac567e49eb4c9abc864bbda3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    88a28957804fad42ed6504df1a56ab19

    SHA1

    9c67ed8bb6ff69e62d6cc6eb7e21f96552c178a9

    SHA256

    661347a2de0d342ad6dea9150681266739c5651d415a5e2e8436b1ae95ae3282

    SHA512

    039689f029bb73b78cc4d92ae3d63aa8839aa081aaa1310e912a084c64cae6f452ab3a2e8ea3aaab16772a719ca5c38c24aebed4774885997e3c7ef93a1eb2ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    40cbdaeab893bf65c85e159147d89ea9

    SHA1

    c09aa5063ab0a361c127821d7676ef969241f452

    SHA256

    741ad8d5aadfe0cf086062e5b535a8b474533379dfc4d847e033e2b1a8c6166c

    SHA512

    c4fd55d02b3462ae049895826ddef665dd60afd53a4def1dee090c7499a8907434381cf56ecb7d89c62afba3a2945766001a3efdb8e2421d675983e104b1cdcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    214b7b35594aa3208db9ee9d62447503

    SHA1

    61233a3049889d1125803649830da63fa3cc86e9

    SHA256

    c3fbed83b18cbd6ce35c729e877578644d397bf4a7b4dfd3819385fe54efdb2c

    SHA512

    a2a7763cb38f763575f574661d8dc46617b4fa3f9d82b111031e3bfef9e49c27b40a65e5e28b218a0b7f88f1a86fcac843666b4aa6e43a09378fc01a75b77d4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a31d0b305c2676aaf4e108c140f052a4

    SHA1

    1153b7256b98ed1ba35b3593c7752d433dcdb2b3

    SHA256

    741718450aebc02f54589ab69bcbba849882410c30af8c0fddf5191bbd42d7ce

    SHA512

    d01521cda479d48ece85b3b0bb6f9981ee448509fb52c33ea2dbe0fbbd8e70fcc5d68ad22a82d30660d0ac8c2a62011984f10f2ed7646565ddb3b6eaf1228b44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    ad6fa597f9efada8d3c527233587c5b0

    SHA1

    f9489e1a3113c15bc4487e9903bd081b15ecd8d7

    SHA256

    6f49f42492676558171b49b6e6c43aeedbfc3d09a07621507304979e0dc4f335

    SHA512

    e7d431998dc96cb99116982ab7f4d35cb6c3ef96f40b85cbf56d62bb83c358876a44bb2bfef0bcd7ccdc61fc513b4bbf35981f3efe6e061a65320ffd3d0278ab

  • C:\Users\Admin\AppData\Local\Temp\CabC332.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarC354.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b