Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    17/10/2024, 14:43

General

  • Target

    52648e873364a0cdd2bc2e74366d8c9c_JaffaCakes118.html

  • Size

    6KB

  • MD5

    52648e873364a0cdd2bc2e74366d8c9c

  • SHA1

    b0d592b2d95e29b09c806323584de158400342d2

  • SHA256

    ac7ebbd4f4628461e36bb6511a979fafe7e4cc10d35df2a084c679fd10cc45e8

  • SHA512

    e999a5b28a52d2a47d3511b0913ca23fe8fd50fa4966b068deb8b6803dd1e5eced30d6fa3458db775b2f8c234990a985dd362a99920d047e1a5d36b6de68c7a7

  • SSDEEP

    96:uzVs+ux74wXLLY1k9o84d12ef7CSTUAjkcEZ7ru7f:csz74oAYS/ub76f

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\52648e873364a0cdd2bc2e74366d8c9c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1792
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1792 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2764

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    c2f974476d8221dc596ef93ce94fd40e

    SHA1

    fc9a7b59476cca08805aa706014b63645a37f986

    SHA256

    1b1321e772e7b85fc4440b0ff27c6da783f07e683654eea8ba4c37143e7d1a1c

    SHA512

    8fb70719463a83be452e1bd52ca8d110bbaeb45067c78020e00cea853c7b13be66bd7581b977b857afb453abbe9045d9c7d4b46c25a75cf1b67f10fd571e7874

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be07c799a4b90a82194c32bb83c7ab08

    SHA1

    8d74547ca7cadbd9da3bae2d51d99513980d3586

    SHA256

    966d7a03099f47fea38eccd4c0cd631c06015c0b1b90dd0aed5e64154655f78b

    SHA512

    02d1f3f33504c0c9a7a66d1cfca377c1ff4be1a2339c153fa184561ea2b72b3d8661f9121119cb68c4548807c0d17807dc2626a80ec22f3a3907203dafb4010b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    afb9ac3927715394ce57fbda9b80ed22

    SHA1

    0d85cf92e76b211bb5d74ee3040364d278bc658d

    SHA256

    f8c3d2d45a573247e8dfaf74c6dae3892e86df47ef1a0695458d790fa68bc786

    SHA512

    6270dbbfef3ffd0e9a8fadeb9e2cf00fffefda023a9c526620262568e37ea983073f307ccaacc5e4ab7bd19b98384c8005645e94b54af1f98a4357fd17a5341e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    81ca0346cbca302a61686d6a4cbb94bd

    SHA1

    9668cfcb4744b9c0cb798f0a631f1ce7cfc45489

    SHA256

    57dbe441b981a1c7eae215d6ad306511fbda0256f80a2131ae15f54b0dee3764

    SHA512

    ecac8fb5bb677c58beb5a661ebc5ca32be6973de30c3c0cfa5699d13ac08ffdf74630eb41960248fc93e379548eb54c2a40dfbfafbd889bdaf8996399b06eefa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f20d6803ce9fcc88ff4107e67e09167

    SHA1

    dca7653fc4775b37716233733b6c71f791b4d148

    SHA256

    43579dba1c3dbf6a71c33ba602adac21be33ae76f350a2dfe713f8778edcf83a

    SHA512

    8c5f6fac152f7af385c3fd0afe79eb1b8ee9db16d8a43cccdd1f209043be5c69f28731f5cf407da43bbca229cd0189438311a5a1f4be383899b69042d252e7ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    59eefde62c121bde782f5b6a71c1767f

    SHA1

    383677a37070afe90caca0f9ca073e4be1a82d1a

    SHA256

    94b2667600d7e404e7b5486d941c099cc70daace1cc4f4c15b4487fd5169c9a0

    SHA512

    a817cd4ba8b06af8b15207ad396e24d9ebb43b284fda7c892a0288d88d94c24bc9e136f81862a9a221c89601bd21f87ab74c63ed6623bbf7caee5fa626308037

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd575261778a1507d82feffd359cd68f

    SHA1

    fb05e10c09c80fb027ded02e6777d850bb9c3599

    SHA256

    67e6026adfa6f692cbccdd70b2b3ac2f4bb5d34b915b6980ac45a330bcc74b80

    SHA512

    0bec5bd7f57f01bd906f4a0b2fc3213e2f0e827ee982363757e80b2582ad3868e325b1f910a00b5510a6fb72ac647e3b03429d9d0de452b9cc466ff7026aab3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e26c4f682cd8db76325bd344ed339548

    SHA1

    700b4724745c7759e7e463f97a437efe3bdf175c

    SHA256

    c53eac0bce8474ec3a1b8e0ae1e71b0044a90d6dea62b9b891d62a338583b284

    SHA512

    1218ad2fa898155bfa439cf23c1714565d44e50b8d84cb8084527a54ef0a7ba31fc9d7b240adc7a12ded135c20407e93421190f4ada8748f764797d1e935feb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b1e3012108583764ff1b4261288ee89

    SHA1

    dd3d758e352c83c4e734cab6631bbaac004a3646

    SHA256

    791e0b4dce312cee7645d94548ed4de8d3aa22e159c4747d28a0ccb9f48c017c

    SHA512

    e5c8f16412aa4bd78eeadaaf9b161068baa94f1444402ec1b7205e8483de0a072de7596da390b3fa545174305f7b6258547fc718bed9711ac27b8b8807e3989b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1719e2c3affd18b6b65f58c87b2c76a

    SHA1

    7b82adb46fbb2beb0e2cbcb94bbe21bd89406393

    SHA256

    7f8850f7d3adc59d74d2a68bf0554d4485e1fbabf92779cbd206674d2527f21a

    SHA512

    506d044e52f6a14377fc950e4c8bff368e8a8dd30b8d04ac41e7760636628555390762ac25729fc01a0066245fcbfeca72816a179029980c60b1d6230f405b07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    067bc2fd05bb1a111229a8ed49da0104

    SHA1

    000b2185175515b9212fe0b24f21020cf456315d

    SHA256

    ef47e284eb2a6282e17abe0f86c65e108c1e8890ffa30da973f6999ab15aba49

    SHA512

    b025978b3aa39e749e2c2f7ef59a00d9fdd270c184e71d9fef2a3a7b8aa0ac45d7d334105748240509c8137ac1aaa3a39eec02a8880b195953c4eeda2e55d214

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    15787bcdae44210cf560c4edc27d9040

    SHA1

    c6d6cbebf4a8dfa3c18236be7edcab0e8505c4ef

    SHA256

    40a61fadbc81f6ea80dd37eabcffe0a672e5953324d0ea2475f941f780108458

    SHA512

    36e7ec5ab339b19e0a29581d18b3e75182d2f59ef703cfa65c8178ab1c713cadc957184e49da4a0b8f121a958c75e6226575fa743fe7816e411ce3662a90e248

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    443235915a2c3afc478180d0f37d2260

    SHA1

    9ad32fe63ddb5cee74bf89bea47d3d97b3595e4b

    SHA256

    1d2c745a75bf3c5d94873cb4197c0dba2e03924f0a4914d56daba0d095372900

    SHA512

    ef2571c076f387b8eb40e5164cb6697bd6824eb91cd0250145eef1c3b175de03b98d88150a08188459cdac385d703db1a2786105b1d77fdee56b478913990c42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc86eb44a3dbfe4263919c2fd09585a7

    SHA1

    cbd54b0fb5f5b3261ec5d5e647a68e5930950d8d

    SHA256

    4d97fbe50fced3471ea6450b869e9a8bc358af0559e7a2f491a807443c5ee2d4

    SHA512

    4adffc3b097114f2d5f472ded84619ab59bcda189a6f363da7c1e01422436992a2e533a551f4f6ff3e1c3fd410dc4e3919ae9c2e6e31c21c7507660ed2a5130d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a9f8596fc5c858c560019fb8d5ca440

    SHA1

    aed4760f171ae71e6a4d4ef0825502a617b2e667

    SHA256

    2ce16ef4608ad7a58888558cc3f12846ca253037fd142e3769d97bcf664f8264

    SHA512

    c66860e61d7f29b0a4102d50b141c1717ad8e6bafe74758c75c61a196ac47e38039834beac63704a0c4dd48608968f62c6f17d9f7cacf51882b9c84c799c7e36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11d04028195a151a52c5eb8cd6c65824

    SHA1

    b6391ba6d674c8c9bd74edea1b0fd3702e81b2fa

    SHA256

    b5c15d22e87165f842c55a26ee1925bea5accf40f790631c48e1d5658b89caf8

    SHA512

    1a7957e31d586a2607edce132fc51ece9da0093abfd2980b961938fea69892182751789f057d1dcb9459f38354347ac0d6a0d68e4cca0a23a4338fa54700ab4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ae997942ff31cc006980fc6a89ed663

    SHA1

    6e2ffaf82b85abd9a7fff6658214a8fa6d2a6b3e

    SHA256

    6cb8f5e87568f536d99a530a2b9a6ce15c9af80ff857e844777a77343cbd5cec

    SHA512

    184165fae2aae99420bdd8ab25f8be637c0ecbb359bb93d98c53916db2307e1cffda6931cb1df4ed67ce4dcc1d283aaf0b686964cefb0baaf553cca0b6dfabab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1f485ce631f39c669097ecffa884157

    SHA1

    95447d90c9ead9b300bd8fe1734823faf6c0519a

    SHA256

    d01d34de91294874cf22da4bbe15bf159d03232d601cf09b195b4c4d6a327c65

    SHA512

    9ff2c0d0ed0ada76b44483d97ab86a71c37d71ad8787d258382827125696e891038caecfd6dbbf45fa3a7b4180c2cd20dafc2d4ff39b5bb503441a66618b1a7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    708eabdbda61d839bf31519a10f13e19

    SHA1

    af221acea7e6c5277b4f7cb4cad28888281f394e

    SHA256

    a2de71d44bb74333a82ed81d6b2d53b2d047647682776b73ad23d7913f656b12

    SHA512

    30a06abbf2731ac4decf0b2856c50e7ce0a970b35dba2aab0bce3804533d4a62a9eef8a5ef75b7e8319f760c26e22a9fe2aeb51608a4ffc3dd594a67d91c0fdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0fa3e7752c2595e92543cf0e924789dc

    SHA1

    59a098a639046b1d9c69f51c72a5a3f498a58f33

    SHA256

    599949242c04159b6be6f26c6dddf176e36b53ff61464a7a684f99fe9cabcf9e

    SHA512

    ca3b67712a0b4eaf8737752dcb8ad0452ef07967a83355ec77c96006cb204917f533098d1709dd12348fba675ae904b6be49bd8f1dac29d38692b7f64df0f82b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f168b0d0b573f47ac07472730895ffee

    SHA1

    1d97ec801a2114053494a3a58e5b8bf42143bd1f

    SHA256

    145c0bb6236444e3cd7c047a828a6c34c542dff6ea7196e7c34e53c702b96825

    SHA512

    0a9ec859d24f29b2b2b4f003eb6a871055c39f1cb796f08879eeb93bb95860ed166579a782db6e0e1e876ded0a39cea1caeb2280981b9928d0bccba251607cc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    ec51a0a1a57f33b759e2b85165ff5904

    SHA1

    0d1a3b51f22717b117f75a903b6aebf4b54df846

    SHA256

    f05a707e72a08d887dd8d11931333ed3fddfb0e3dc46542571adb9733f96df1e

    SHA512

    9ba81798cd0761b1f937fd3e076ca1d6718d794940c7db3f8cc6911192f4a999de731973b385b0a9bd9d16e229b50c5ab350d90c4232581f68904de5371c8c26

  • C:\Users\Admin\AppData\Local\Temp\Cab479D.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar47BF.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b