Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    12/10/2024, 16:45

General

  • Target

    3b0ffd0ac9041dc4ce2f943b54163156_JaffaCakes118.html

  • Size

    54KB

  • MD5

    3b0ffd0ac9041dc4ce2f943b54163156

  • SHA1

    fd57582d9e0188d47a0fbabaa25c072fc1adea9d

  • SHA256

    f4b59abe2f3884ce2fd8301709e0a2d272e7732ecc0bbb15f2817015ef7259c8

  • SHA512

    1c6ab8a4677d20042f432f377f2dd8b2a015f7a80f6de2065e52c9c5ea5cf11915c8b0acdec06bd759a2d2a8980181d76dd7c14f618c4b867ccb64e1846e1350

  • SSDEEP

    768:UUkMgOriWNcaSij7HD7H6Cy9p6ex6OgSNCfAbs1xt2SifZn5:uijjD7aCyX6+tgSdszt2SifD

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3b0ffd0ac9041dc4ce2f943b54163156_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1632
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1632 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1124

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    20ba7e71d59e5a02ac44355b73fd007a

    SHA1

    9893c625d7a8299baa59a861f1a9d194aa69c670

    SHA256

    d8d2c18de2df002c0b55f5be70a1b396bc5c323704568723093c64d111fbeed8

    SHA512

    024c17a85beb8e41ccc2dceedd21ef1081686398a5321d54c8d9e9fe4253cd1656c9260421f0e279e085de1fce1593803b36f002b79027e96e3f7603b4abc45b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    c7b81863c7a0c80a5199d4d2ff29b381

    SHA1

    de35cace9c2bd0544e3714b55de1ff2f6deddea7

    SHA256

    c7dbdc16c83e85811328a144f03a92760909a1412cafbc8e489b0e3be0f10c3c

    SHA512

    7f451c3f2a45c8ead3c5f50e6bbe789d33c9525499a2328f47991ffc5a94813f7925b9fd7a0c332216d165aebdbd274a2b6d85faacd32acd1ba3fe46f2feb97e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    09b09c81645a4b698351b35dbc839315

    SHA1

    f49f3af0060147bb48053e9034f663c9e3d8132c

    SHA256

    0dba5e938a2a32322ebb254384b0cf5ddd247c9ada66b97513fe3138db7c2027

    SHA512

    fc123142efcb4bd792d21a07a0e662137103f9f6294cbb215fe703c492ff26cad8faf7f4b97c93b96b9166e44ad36ba4b242f63aea189d806e9ac3971986ad78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    32cd8c8d7178b7db8c77253559c7c1b2

    SHA1

    566262c2402a7a558ef14acd5bc5109e527de147

    SHA256

    9ea1068c6e44067d59f7012f2f31da6a5018c3467036b39c6f1dee69ee9a753f

    SHA512

    cc1e6e035fe162550892bc66c4246c1aa530c9aa47df369a27776634cac184708169f7bccd8ffc7d7cb4dc2910de4e1893702e7a01a5de5b35812d991ece1e14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa470712e43ddd0a9cad19de3060bfff

    SHA1

    8847fee6247422360582d05fd7b3f1f59a5b34a8

    SHA256

    c864ab4f654eeca2def52ed458ae04ff62849a5b274a37216996dc1348c2c40f

    SHA512

    9e4c218b3700c9953319571459f68bd6031d2ecb0f8ac472c6867b54f5be7106a5304052c8dd26a481dbb45e2246ebc8ad6ec020926e1fe76c113ecc993c00f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f756a1790041e1f4cd553bb27880e32

    SHA1

    42065c4db97e3330282c50b77c9c26439cec0d26

    SHA256

    b1de63bd262163145cc30d577f286f053dcf85971353061cbbe1bca652ec835d

    SHA512

    0118189b5cfa1ee9c01f9bc7c5ff0f6c08341b9c49b9778120770e9cc944cef8c4626090b6be4f5e9a90ed173cd6ff438b65708794501cce89f77e65f6fcda7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab1b4129b365017761c811e0c6cf8293

    SHA1

    600e00e45365135fbd9d81f89bd172a74c29e6f4

    SHA256

    dc3901303295e808a95f504fd93c625fb62f0cd6d623cbd0f47b57b42c1c3b9c

    SHA512

    f41ac98d21c3d5418f9b12ea6882efaa50236938e94ac37325b056f54ad7b470d441ffe45260d44a167e9b04d081fbdc224f9c438ffc8099f7520db886b409f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37d4aa510b26df18555c3a45e8d5f267

    SHA1

    746b7e8ed5a67b0c7bd9dcc175cc9dc832e6f0da

    SHA256

    fc94bd9152a1e722043dda8eb1da35b2afec82e374515a24ffd297a89f4b21da

    SHA512

    a11cca69ec6d55904ba8b3d26613975125ce71607cae848ff08875cf9f4a4633b0388a6e5ec50433536d0eaf72fe519c8489f939574edce825b4580eac20254e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    13e7fe0eb24070dfa148ba5ddbacd634

    SHA1

    eb009dd90234e91a2c459c6464399ed51fbbf1aa

    SHA256

    f3ce293ffeba5962af327703e50e3013bbfec42d9aed7c1d6632d6f39426cbad

    SHA512

    bf2a77ba71de5dce202ed3a8e915aa64a272019d743074fe6a44a3c3fc404c3bb4786ae21b49f651e42a50af367b78df8678a914e198e34ef7f05cfa43a99bbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c59cf23bb9922c6f7abf7b9e33398f24

    SHA1

    234614067e3b6f56e4675f4a243068603030a341

    SHA256

    67c31017f8c243a4bb21c21f2891ebc1cf4dcae0d8380cfe3aeebede545a8b89

    SHA512

    3e7c37b3009aa294a187c8718a1cd7fcd9d34e277690a46e8aea416f1176f659a396abd6d998a12eccaf962a37ad03e9f4506e83fe4b51482e133904947a2af6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a237de2c1c4b39c4d8ea1751717f1994

    SHA1

    1af135a90651196a02e7fb840e0e3d001b1b1e0d

    SHA256

    18e560d662d30f8bb886a327b818b5a61971b51c992086ad2bf2ea132e2100e9

    SHA512

    50ed8e467861cee76191f6f5e0a25afda67ab4cb8e660d55ee0151ee34ffd546a54505d37b4ee7b38e0aacc83f64f588cf028b0c88086334c6fb20b23243b386

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da29af2440bd44ade69b6abee0f67526

    SHA1

    79bc04f2425088d496c53e0a063373e5d09bf592

    SHA256

    d038909a9557b40865755d9b4d78c5b6765d151e23a0a85eac9f5a852e51a3d7

    SHA512

    55abd3537c27ac18284f05cc1000acd08f6dab244f86e62ff4c68b62caa1305a15d39931eb2af8f827ba21c8948204df507971ea48cf719ce8cddf99c51dd06f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    467ee5837af130341eebaebb2e8cf2bf

    SHA1

    f1417e8ecf43f0b5ebd1fbbd59c0c88d64550154

    SHA256

    512d5f068f601c052ca7760e599173f8e49349f8c6b2d0f928b3a07fde1a9428

    SHA512

    41bb337beecbdf1595999f9c9f44891e40fd6a509ded26492717478a587c175a53783767350b7d67f8e13801f69b8ac9a2d61a54dedb9cf05ecdbc203aeebbb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    911754e0d639bec8336dead025b37e56

    SHA1

    4ad43b24b87b3966cdd7585196f69f67687966bf

    SHA256

    d782bf7175c6d14af7b5ba41de6a08fadb23d97015df9747666e2f9e768c72ab

    SHA512

    3ee1d7df83f30719e9a9a2299ee33df991cdaf33486c9ac81d429cdf5205d93bfe99835afbd94a2d168655868740221fe3413b9fb38b09458279f7bdd4078c43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7c8f0769b0e04d34434e41e1f5a04878

    SHA1

    d31ac715aeab348bab6f601ab6813e81daeb56a1

    SHA256

    2008678e3dd439edfdd6980948efd892a9d76dfd656ca09a96d1c53daea4035e

    SHA512

    e7e437d320c641f72fa252c3b185aff3fdfd307f076eb46f85e0bc46230e8b35a3ab3b0a9d92fe46ba5b422c1c3af1eae16340538def77c918e32fb5e2e32918

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5382dd2670126b86dc18178bb5bbcd49

    SHA1

    a09a02752127748eb86829f9ec84970a67ed7eff

    SHA256

    da87df7d6f7c2fecc0923232a9aa6901f4f67ff1d2107e086cf9625565fb053d

    SHA512

    76b8c2660a1c2a29747707895fc59f76e7f677244e20b0b76f616f6eeabe0872b7918598d438bde2ffa3ec46261fe866a9ef4b55abe21b63f158100692791014

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eed6cf4bc4c0a86d714368240331d400

    SHA1

    33aac375721afc02edbee63befe92904f92c3c31

    SHA256

    44133a1951c2ef196e684c1ff1988041ef985ac652d2742e57c1cab8921db7ae

    SHA512

    f2a84e2a365bda4e66f294cd02a4918ec0dacebd009d3e3312f7070cc717f79987dc0379ff94a1164efa2c3400f8b069420ebf94b364d62276e9ac243c561fae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da98824d44ba6ccd5c57339877c1abbb

    SHA1

    2c482bc2e1f0361c4aef95ce7242fc3b8407f126

    SHA256

    f89f59e55bea9fea52c6c78780bc34e430e78634982415dc4d4bb3ba3d7e8d4f

    SHA512

    78ae7e45d786f6476c63a54c96321a50ce72698f8379affa27f7f0700e19216ae76b47b37b07a2dcce3f50010f6364beaa8f344ca44f5657e4b77312211fe98d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ac162576d2d13ce8d6ed7ed6b5437f1

    SHA1

    cb9d295319eff5f2c5c8cfd819fcaa78b7cfb943

    SHA256

    7c3f5f3b5b90bffe458a11453b08659d66270ae64a069636ae572a7463f9c25f

    SHA512

    29bb74fd5517ed7da07bc4d44db0798df039c6c9fbbeb3cc2c1d53e38bfd0b9e5e1fd95b7f461659972a45d958c135f405b3e77552cea1c45773cec46134cc60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dfdc5cd7d7c4fa9516883da8649916d8

    SHA1

    01dd266bedd2888c3c6ddfe48de96d00108e8c37

    SHA256

    4a9c907b3f0ad9a39eac3126eadf1e74a8dcaaa7bee0af76a306fba0a101de93

    SHA512

    e60df328f5678613805fdec6510bae0ee9ceebab992cb323e284829f2fb5d44c1f7d1cf699c55b434e8c29e9dbe25526c95240ed685665835d5caff9648579c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    94ac327401b88edd1d378b372d7ea9a3

    SHA1

    be7185f285e75e37054d311797bc91ccdfe54815

    SHA256

    f7f11190155671c78fb60559ff34ec2612806a1ee638316237322cfbf68f1f51

    SHA512

    16bc3cefed87619dce2c355b4aaa25f3fab29b957e7552efb64d99f4fce334c7774fc0119ded71fa0639c5ff928f17da700dab5b3abf4e57d7a6f460b1b41ce2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4db047382cdede291b9f2df0cb1507dd

    SHA1

    71091e74798a28fb0702fcd6efadc0e965c88cd8

    SHA256

    817ae80015e1923879804ac32c95a54b661809d2daeeb349cbe3c8f429b97653

    SHA512

    34803f0ee811903c80f79710081473ca77dde3f63a4f679a88f66fa5f9253802ec8b7cd913adf8e53356b3d8c250f73b1124c1b5e56650d1dd255087e317e506

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    26709ab4ff77e7ecca8010c5387059ab

    SHA1

    241d45c4879cf8a9f350cfb5cb942b5e67364302

    SHA256

    37f7036d9aa5da9afab39c125926f3742aea9f1572af3b9e9a6748e2a91a05f1

    SHA512

    3b7752a7d1f86268263304d6107e48eb45439edd5c5b4fb9ffeea2bda6cc370cbc58b5eb4fbde871ffeee9e10c8718a7a0f56c94c47f629e9684312ccda1c39b

  • C:\Users\Admin\AppData\Local\Temp\CabCF52.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarCFD2.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b