Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    13/10/2024, 20:30

General

  • Target

    41ee0acf18b3ee92c174e8415dc75bf9_JaffaCakes118.html

  • Size

    43KB

  • MD5

    41ee0acf18b3ee92c174e8415dc75bf9

  • SHA1

    f13659a32d043a25ac01567a43441c053aedeb6f

  • SHA256

    2389a0fea6ecfb180bd87a3a566ad12287024565271870f3b026cc4ef42a65c4

  • SHA512

    998a49c8cd3fa4bec4a9de5805f4cf02c26585d32065b730d1324635307b6485d45bfa95986b157b04f822d002260c4df05ad6c9e51263598d0458aa8eb3010f

  • SSDEEP

    384:uujTpDt5QpFORiptMTzpFampS/BJuuqoTWhDKXlaRXSs26TXyTVnoTdiVVdE2NeL:uM9t5XRNOKlwymT6LwoZNALIN

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\41ee0acf18b3ee92c174e8415dc75bf9_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2220
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2220 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2800

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\88407AD03B847CD41F5079D9B983F10A

    Filesize

    5B

    MD5

    5bfa51f3a417b98e7443eca90fc94703

    SHA1

    8c015d80b8a23f780bdd215dc842b0f5551f63bd

    SHA256

    bebe2853a3485d1c2e5c5be4249183e0ddaff9f87de71652371700a89d937128

    SHA512

    4cd03686254bb28754cbaa635ae1264723e2be80ce1dd0f78d1ab7aee72232f5b285f79e488e9c5c49ff343015bd07bb8433d6cee08ae3cea8c317303e3ac399

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    95a2cbf6a427a7f1a51c52bc84fc30d8

    SHA1

    2c201d3387307a12c68227fa492e6f0417f3be9b

    SHA256

    5d94e2bfee3fb4f9977d9c43d178ea26e99855832e5441e81d991787e6b897b8

    SHA512

    c5d1bfbdf91e9a1bce91500d792ebc5591fee962abe95aa225122c4cc729f945a3e66108b233b80386509eb83fdebd8f25e65e542de8b83f8ebd3352e4b61d4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff11d0b47b358a64de791bc29c99c78b

    SHA1

    9ef687de895332659b9566fb35455ee20b7d04b5

    SHA256

    ece852ee2f5633088e0be78763cced414b12dfa4222fa13bc766203f04063732

    SHA512

    4afb66531d6f7fc551df294fba24dde6e66f1ee32b0fc4d66f95d5e080deecf48b515521e1ec164979b71d4324eb5771d0860ccc92ed91548e4da4f4c644429c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e858242b95eaeccc4e19974cb1ee9bc

    SHA1

    7a6c4f6e4941111a2643a725f2c1abdbe38b5b91

    SHA256

    0a3a62b925752cfbfa6eb75fb02a16cae6ce0ec5178745fc6be99374c3ee0086

    SHA512

    91f5b6123f37416dd7d4a123f6e425d4690696cfd936abf8bd351bf2f426d818c08fab3afef1957baa3b229e06d4e156c981f67932558f291c6171a4c4617198

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    31fd22aa69aec7ae301ba4908d032641

    SHA1

    35ec47d9445fe1e434696d8ac852bb472863990b

    SHA256

    d31078282ee7eb0c592d4aac4a22d46509b4d0b3fd8be960ce5cc3b8f4512452

    SHA512

    c791f4acd39a8ea53cf744009b14f4588f3849270817c25f8c429055892189618dcbc6e8dd24ff998ea230407b90b8d35e0fcd0f62e86c7f9e07eb7d4d9a0f29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    311235f7eeb8360fad3675a979638212

    SHA1

    5a01da3d456d38c21f7c6cbf3117512ca2c71cdc

    SHA256

    8a4872595f9b620f860ed9f4a52ce92d251bb4ccac886d52233988a71d39aa02

    SHA512

    5a98206934a934b8ecf4df75b808a5a483c0b606249d0fab057034d7c8adfd9486ea22a834c01b1bed2e0aee3b0011980b4302dd15dadff5f06389cac0bd628c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    24c7d9c5b2d6dd04e81e4666efe2bba1

    SHA1

    a48b9a3c6c604bbd72ef6501f7ffe4eaad3db958

    SHA256

    fa209dcb6155c7408e15caca123a1512751e0e20847af97e82a87b62defb1eb1

    SHA512

    cd447b570a1540b530f47d70dac5ae43cf712f2929a1f4d403912feffcb8b4d06a1a0d7f93adc76a01687eac1825c1d4cd879fb569d149ee8115c77131416e9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    948423e66f7a25639650db79fa76bbc2

    SHA1

    50b5d9f48bf53633aa288c7a3f26b070ccce136b

    SHA256

    3a68ba702245b77edc67bbc55ba77cc66caa4189c011aa559536d640bfe1e7d3

    SHA512

    8adb6a201a2cafcc52416b1b0984c6533f6d626c75df3967387ea65047310f3904eb73486a6f70a3ea61db83b64af277ed8bcce7387e890fb5286ebdcfe2467f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ccbb43e4ea49dfcc082af6b52d5fc722

    SHA1

    19c8fc2ac76df559b60f2453d72a06b975ecf901

    SHA256

    65c4f5415e71b503be57e7b4a717a2e45e75afc55deb65a6c086417874d179d3

    SHA512

    7683c37818d63f625de2505e66286cf42e1e5e91bf7009260259ccb93ef930d6f3d8617e9c97bad0953761ec60a35c876f5c8eb120c13aab41bc69ffc28d6b6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11896b227bd5c5fab578f9f9a7f20aa6

    SHA1

    585b96fbb03728252302d6ec9e7b5a34e1176cee

    SHA256

    378c86ca596d2e3becb26d8820b715df0504832e3699e7d355075b53a15ae39c

    SHA512

    d3e8455184172b8d2b2383930319d80914d894dc7e948cd80d81ba9d7b85e69cf4905ad94a976a359844b47555d3044e506e7c2fe4c479abb2b83e36055a8cb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da5dd7139deab0d13b2ba21b6f783559

    SHA1

    adfcff8011af31e0b5b89b4c530a7fd279c48bac

    SHA256

    98278a90c57ba7129bfc101fe0c1c937f0028088931916f350cd6a94e9a6d1f8

    SHA512

    4f8bd8831c8681b9cd47fb79e3dfdcb386a30551c60a7d18a6ce397c7212973e597a7288062bae9d5e0f0bed28b591fce6827cade29e0e31615985d2d4b94c41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3e13020773b4c3ba0bb2309c82b09c8

    SHA1

    959c5b3e43aa7951c28dc1a392144cc2729d5152

    SHA256

    f768ebdcc176bd5e7b7d6c701abd33bf24bb685d4f3214299d84e779eec9a8eb

    SHA512

    6fc4da9f4964415e1fe5ea9b42c0a5cc18cc6497c4e3adad5948832e796ea5f1a451e2c269ad2d4eb408e393b63c6c0303fdfa0a26abe386b87e99e4020cb204

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    74988b980530d04f1b1de758918d016e

    SHA1

    2d87ae7de0f14f24fc653164bf89918a09da12fd

    SHA256

    2c1ea606c8e3e0ebb355108f1167e6a01412de08879c9e7c641527f164938cff

    SHA512

    110ae9a1691e25e01b343e5b8adc310c0f69e29b7e957ac7251a3c00a83038e551a630ff12e9fb9f2cd4c3b444a3d254103871ea4223598f8b0aadae33e538a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b8d56a9940031aaede69650b41626792

    SHA1

    7b15360ff37dcf18950b9fc8f98ad78b03d95e78

    SHA256

    7b4715690345adbdbea12bfaa482358484a1da2fba5e58af8289f084f3e8bdac

    SHA512

    d737fa5f824ec070cfe3ef204d530accd14518246263fb6d17b096a5f64a90a016b472a491f37e0abec74592587a08060d6a1da2d87661ebfd6632ff96c3f2ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    65a088a89d5d07c762ec054985c6c9f8

    SHA1

    bdd04b7465cf4152214a0b8e42ffe29977b80726

    SHA256

    feae4c6cd3163a44bd653e6c3bcb22034fa342e6806a00a3ddd4045b50b8e77d

    SHA512

    fceb397fc20e715a28e094fb9a8d275a57e3c51e98fc64c393650edc5a9848bbcba461661b060a027c9ca24e7beb30d8533a973cefc6ac7170b6b621c5bf50a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b84e3934db4600555ea72efe9dce400

    SHA1

    3c79bb7249123f6d2d71791d793041d64b13ad63

    SHA256

    9d9ea64fc110432e9d88bbb8a8a766f94082160833d97e9e6f62ec259fe63d20

    SHA512

    7407a8453d951ec0e6285c83a685ec47eef35e785d5da7d759b4dbe098a4ecd354681f3ef70631f8358454791b49dd0714ab8334fa5f5b4e34bd65fe3616d4ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89045300f44696c07fc6e0b348e87d95

    SHA1

    6b142e5915cec2f2b23f6db7b7d9ba1e87e289a2

    SHA256

    c915071fc2096c16663560537393f0533a9651ad7c52db1461f49a8ec3329e34

    SHA512

    8651095b3862614e47a64b13dbe493b2223269e4e3398a70f91a3fb17be646e0265ba1d9a7cb242cf216a9b6f1d8a9dbbec3e92e82dc89877aa299d46a866258

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e285fd8b464babf5df395988117ec016

    SHA1

    4912021af7a10d759c2a638f4a1654dcecf8970c

    SHA256

    214cb424dd97311dac3edb01d2d0909147d5a98f20af8fefd147d0105e51bca8

    SHA512

    cfd79ce9f9d7ccd7331f8dbf3214e1e23e80e8cc66556bffd4c91617ce0ca1d27e12419adc3f4070e92f6add035c3a43825bf8aa6227b32131de3f2269c98b08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    685786715dac98ca2309a84cd4e3eae6

    SHA1

    10137178f582086c2a482c88fab000de4bc55f1d

    SHA256

    1b1ebec38f8bf5989305554ce03be60ada3e8c1f604e9431dbcac9de55873e6b

    SHA512

    1d8301e8662944f944b7a87227bf855b2882eb2f78f60c2a17bc6ebfc651426fa934366aa30c4ddc4c5ab16b88f5c750683a9c47f439955c39b558a168a7d68a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7a83c52bbffa253fb95eea959719679

    SHA1

    9c04cfa7567b37c0cbe652c385f1d624916541aa

    SHA256

    d86d73c70e4fa3dc66c7277110e3175ad27e11ef41f69426eee240e9a2fb4e47

    SHA512

    94dcf2e143df9aecf508bf6f6e0e2f530a8f76910114650ec9c892c92264791a570d4bcbd220c889a455c114d22373584e6b84ac733941ad9d71a83a38172b43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a8f6bbdce2dae929f4e2148aba93e20

    SHA1

    3363cd5e1d5277748142aab5939b7913be8122d5

    SHA256

    8ad6380a44af9fc94739710400896988fd35258804a71d5dfc440c766c650d1a

    SHA512

    71f61776d5f2d2975af6acda203cc97449c8bc2d9062e754a54f8f28521f246d1793dbc85e1bcceeef8a851a615112ead99a1f1f6a67b88a3d40399d2e0090bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c7561a7a0759e99d2a4e17bd069dafca

    SHA1

    96b28915aaab9e287aa1f9a41fcd24fef16ae653

    SHA256

    925b02e40c3a31f2076776ab4f384bfd6dda99ee217bd656efd1ecb971b84b0b

    SHA512

    af1ab00438ff3b85a3e30475fec02ccc4762d66eb05bc6a1b27047ff06921f2a8a3a79816b7c3486ab624551f53be471b26e2027f687fa8e31a9a9783238fbce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ffcee90cee0ae65065dc97e3dec244ff

    SHA1

    2bbf938a95bae2807b38e673141aa904969df7d4

    SHA256

    3a9b5fc83b23b9bd2076b04b54238b081c9f66a62f8ce027814e8b1818c00478

    SHA512

    942e3febeb5391f447f88da3aea82ca8ae469b49091f157242bf6e271f371c082d78f2dc6f77347f9cec6e16abd39ba40e69fe677375108b9a5b3485e87318cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b06a3c316e600e58f7fc76043b6d268e

    SHA1

    1cedd0ac992ae0da9f74898aafa7a68287e837f2

    SHA256

    100eea6ab819885e45655eaed32f51ec3f3098569ebc51662bd504f6745d2f23

    SHA512

    ad19e9cfed6b5756875c95d813d127ff1af7993074f969b5805d6a1f8dd15117e5cba4cbb6a2cadc88948e2103e961066285e619234a1404ede29822063e45df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    29900a20100c1a5b93ecff86413afa56

    SHA1

    62cc8cc8537b4110eb744f266e8d67097a1ad05c

    SHA256

    b410d0b75efc330a937f1cd3545e651bee18eca72e6f0688a0d936baf4678af5

    SHA512

    c714d5e3bbc238f487c7dcf32aef30440c4ae01a5a1a0df93f9d07b4d438adbcb8a9ea8e404a39c10303eaeaa586dada5901c70202db199636d9215fffb563ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d597412dda6b117a2724a7b97d0f77f

    SHA1

    f6dc89fe9e37bbb04ffd1252134488ed526bd4a7

    SHA256

    ad724d4202c1a46521ab031a39b914585fe33fb6f329fda7fdbb199ea309d4ad

    SHA512

    28a0406561ae65a7eed5d5409265cabcd889faf91ac2176b8a121a0060194703ffa9d9f1c979fb63ca5b590fca6c5bcaf5c3f09d7c0befddd57366ab44ae646a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    5a15ef95f164e74b79b20cb0171d6d4c

    SHA1

    05f0c0deb55586e006eb7d02f20673e1cd5b3867

    SHA256

    cf0880babfcc690bea22c5ecf70e6586ad958b3deea55c5acec1d95e479101e3

    SHA512

    03ec946d873843b77729df9653e382cbd7cfdbdba337b69ed942884f2537755b2b87298645bb48289c3818d83d6b0d9982a26d856d5cb049e53f0989d285faa0

  • C:\Users\Admin\AppData\Local\Temp\Cab1D04.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1D27.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b