Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    18/10/2024, 04:35

General

  • Target

    55828b0039dc5ff71e58ed35b304a4e4_JaffaCakes118.html

  • Size

    7KB

  • MD5

    55828b0039dc5ff71e58ed35b304a4e4

  • SHA1

    3cdead772bf9f7a69528612217922753b57b7158

  • SHA256

    7053376e6ea46d6238fec4cee6709a01d0633b6f8144f1b7fb759f5aad5c5f64

  • SHA512

    0d1aa8cc61a2294b9f00b46d4785b6e227dd68ea4a0258443f00ca8fa28e28209ab7bc6c9c40c2fac907f5b66a1996166d30337987c5202b426ef1f8516a81a8

  • SSDEEP

    192:3DS2sNty1GRLIjstMI+CGrayG/aGmUDrnV2xUVNEYpD:zS2MjRLVtMIJG2yGyGmUDrnV2xUVNE0

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\55828b0039dc5ff71e58ed35b304a4e4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2368
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2368 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1724

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    9a9a22520651bd3347e4179548066a1d

    SHA1

    970ff35975fb05524c8f68b693d8f8b91529b504

    SHA256

    eec92cb3c13e85255648c303fcbe46728325917df8c1c5d0cbf7589c5829af98

    SHA512

    f9dd773f45a44aff4b739ef54e86852226a6a827b465e311d18efa5b66ac9492181b33237b1041e36cb63b32922907a8f8fd1ad779856caf8b126798ad69f6fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf3f1af579dee01edd57a74b5bc27051

    SHA1

    0fae4bbb1ae9846bb300c9c5360be2491732789a

    SHA256

    1a1869673574f2361e271c094f541dfc8cd7e1bfbc719151b2eca74be5215b42

    SHA512

    332f91b08eadc5690a0bfac256d70ff7bbb7f71615fc7bab03ed052a17094ddcff43518964b2783a927a8d7e34e4ef91638ecd21df36fb998ad774a3e299486a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a887353ca1bdc06d1ec5c22d0b8e33e8

    SHA1

    d1bba5c2ef5e36f4807b3d72d31be8267a0e74dc

    SHA256

    8fd20c278156df1babdb0e73aadb0e5ca2899390882fd7fce05a1b734b4bff24

    SHA512

    aad8c93b3f10ef500050c328b4f3f0dfb74ce571e4fd31caaee5603dc3c42cc063a5ae66175d8409021130f74af9a13d0320f1dc491d2af7a4a42fc940f0d8fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bbb70c44bf3f2af3b7840347235d7038

    SHA1

    59b674bed2c6ebb94efc7a35f72a228cc031d3f6

    SHA256

    b6a6899386ad9d8cb8954f202209358c59a53899a150c7eac742f8f8ede208f2

    SHA512

    c8473874e67047fb247e02010ac8d3e66214ca225b32d4145caf54c5e8bd190d699260db865a30b12723b1f75b91f3f0c6bfa55e0b474202b79a5449214eb6e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5315a1c48aa5ef1cc9e2713af8f97f14

    SHA1

    6aebb7ad93a7a7647b6f90cac436109f23a8461b

    SHA256

    94078512068c0640a4f815d095c387a6fd73ece63990ff486911c4adc18e5eff

    SHA512

    b7b1ed2af0d99b682fb1021af619bf3a067fec52b7066f8a29d81642d190b8eea90787e3904f166e8b088243a825f409d391a7fb4486ee6b8da9b01d99154c28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    715fd8d69e82ff8813a2c3eb8af66f2f

    SHA1

    555df5a0894769bee88b26bf1d9a5b93dc38d61b

    SHA256

    92d0eddf4cda1588684fd976ed0e4ff48c2c6230cb78c21cca90dd30db57e47c

    SHA512

    1593805388b8f83dfcb4162b3e9f4a578e2f5551f98ab1c77ea3b336eec4669009116c8b97d2066ea9d729f8a50920eed18b6070143badf125064b36b7b3b46c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b92974b5bbcbf7b1803df51f0e3f9c3

    SHA1

    06d166e3297b6fb0ea953d052b7be7485c4e7c1a

    SHA256

    4bb3b80355bbcb5358944db308e5cdd6c9bb8f7429e4bca3ff41d1f6e456759e

    SHA512

    400e21466caf6f0f8aa384df1bf98eef2a410c5851fdc1f0179e95947e504c922d7e042660ec5de3e595c9abd1d7515307b524735324c48dda013f3e63cd2e6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5b851735c9156586cfca2e5e7c0e1c10

    SHA1

    c47cac52b3a4415dcee716d338ae292fe50bf6e2

    SHA256

    b12d79bc523b9b3d34bb79a84a0545bfcb0484e54c3fe2a57fdb130850f5ed5a

    SHA512

    02807064685fe28f150a8e31ed2b4dcba2825ff71061e29cace368c69870be75e9acafe139926834919770707d049039fdfeb3789078d34ed6a28da7f36b3853

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    777a3f7797a56701f17c35213ba11d43

    SHA1

    8bcf855b991ac37cf9d6d050da125f6c85f4ee07

    SHA256

    66f20f4390038f55d85df0c52a22ef98b2adc918e5591e9db06a23daa43c8176

    SHA512

    aa2b9cdb8ca266127daf07ad516961652fd7c46ac2732e1847829659c5b0545c419a991177e8e5b3f263be4038b23dfa0ba19599415aeee0678005d602111df0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2d262e4fa3ce862ed9c5cdf9a849e0c7

    SHA1

    02d7da9ed220086d2110074ab5cff66580845136

    SHA256

    d5d66b2061da2ff15e5af3ed474f789aa67c00733a8cad5099a69acfa956997a

    SHA512

    581cd15459f6e78cd79f4cbcdc4e640200e972e154ff89884e075eaf2f991b8d76b86e516f5b0837f308a51381213280c2f7943d0bff978753efba1e8d504b34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7fb6625ccc28589107dc47e99914747

    SHA1

    284bf5d9bf2e06b4a03d767725880b1f6cf52a7d

    SHA256

    b1d92888e33358620362ae52540e6327b63bd3f3fc1873e7f3d628f4241fda35

    SHA512

    0623cb89556937efddf5113cc1c407019edb6c049eecd00ad0a9dc426cda387774cac9d5266be61eac9aa16aa936031387cb9f9726a358e4576a1b0f3e5560b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11b9b000ce86d4e1fbdb748866f45684

    SHA1

    403fbde99fc69eeef2ae5d6def93963c9c778ae8

    SHA256

    000cc4dadb245125fc6ce454ebe3b282b984b380f4cec1a03bcf504f1593705c

    SHA512

    f95f897aaa4a42e917ff5886287947871f22e947673a329dd5a4f187b74b14ff007cc4842d19eb2a35a0e2d3094429e986b9c09ee29323f34d7afae184ea962b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    138d9e0eea6e74d2270a1e3d3b924fe7

    SHA1

    4d00af247151f21ea9b69319585a4ef80f55dcf7

    SHA256

    f1b5de6e0e92467a18955fe8fd04d3d486fc4704362efebdfc700614d58a784b

    SHA512

    4d5f79fc8aa4ba5f8e4f621a85d64a4cb81a1468e9e7bc0976cad63b35152a34e5ef6dd44b05fff21cab6a9bd14febe88126750ad32361e0fcc7c18f27e2241e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2dacd025b3ceba1073739c08a8b17eb0

    SHA1

    d49e3695850601a64227d416d9e9dbc7523ee383

    SHA256

    68afa59a16a1a64cbd282dcd85d421afbef5d81ee77cfc531882bd4f48cb25c7

    SHA512

    334e8f4ba3b6c0ae7933ed4b704cdd04034d26600adbd4d3db123b0e5b0b6b173952af949d316694dadc8224f5566dc4568ae82af36ad9dbc29c5b9359b2f0ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d659143d6143f8af0f478f158d82b66

    SHA1

    db7e91499a35ecaa2020f776623f723a6621d931

    SHA256

    42959f855a7151aa5a3737597797abd98b06add35e43f7048cb2336183a90071

    SHA512

    ff8ebe4d2fb0d2e038c86c8fdb8d7e9fa90c7e9c83a51d4588b9b58d05a7f2909e5bdbe687df00b33caa90757545f54e3951883d2c9e94042e09bca49b866b02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3dda533ee75ef462039e1ef4294f7ef8

    SHA1

    3bed3830ead3368b3fdc04797d8e9352089c4221

    SHA256

    68388f8e5580a27c685024986c02699b54839570446bbbee4194d757adcb1a5d

    SHA512

    7c044cdbe23832f643c42720ecbe4bb967c8159688799b6284cc66ba596409d70923b6405de9334adeb3d89450df69b1e38a401353c9276ee4193a0e100a2493

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7162657615013d0538170818575ed50a

    SHA1

    4ff46779f96a1d7ae0f97beeed5cfa49b5bbc52b

    SHA256

    2a98b02effa24b3c2ff9799fbfc2e803a6d7c90c321884b4d7e10fb082a2b5cf

    SHA512

    fb19bb4911821e8ca841d86b027429a82b7f5ef1621a6ee6de5bd8114427d9ec2c6ae90bc8d298cbca00edbdbc1f5e3540a919b212e0df62ccaddb49ff596255

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7dddaa59889eff7e7da4d1e5fb068f69

    SHA1

    7486e092aee55cd7fb8a8e6b33209cd75b903e9d

    SHA256

    f9edd2863aa515dd9c4ea22cbafc91fb3d082c2a48a35440a4b13e6e5284e79c

    SHA512

    1554cc559179ef29457f5bc8a0976d3eccec10e4f7b9665f9eea4825a408b7ad1a27fa58732d34640b95d63496b6caa3f7bcfb55539b8d5d84bf6138856ad597

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    371a89ba6aa2c1add25e8d37b04f07ee

    SHA1

    3bcab85a222612abde18275bb8eb549afca0ce59

    SHA256

    1def5515e68379a933512cededb3112f646456fbbfa3c48b92f255e51229d79b

    SHA512

    f0d60b6459567ee4d6bbfec1f034058a8332b6bea23b5e509126ae3832de3c65dcb536590aa957b00fd864a09033b55a1f971448b0c3b4488dc34b61bf794a11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41330f90038f4927180f01a76fb75555

    SHA1

    bb6459426ffbc14e7634b571a8ca5811e4b87faa

    SHA256

    e531faffb21e150e4e2dfb22dd1aea6612d3955ed65d69468d235a88aab5e188

    SHA512

    d52c8b384607f0245da58d8d747f866a9c574d8d333709872600cacabae7c8872535ff81c6fc4d3048b28e841a86749b44b9d163476fb867095f58b6407c57ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    d92799a9e66f5002d2da8a174b5be3ff

    SHA1

    8110e79c9207889e75c58162aa086e0a8b695fa1

    SHA256

    052fc6995d5d0855f53785d4d005c167e87eb9be3beb29b3707c3825034440e2

    SHA512

    b301ef05a7f2e538a33e39569e1795a22fe72e8bcfd08d23c08a8153de7352574b50f56d23fda638512ff7f6b64035a16d226726239ca6c58e6f1552afab6dde

  • C:\Users\Admin\AppData\Local\Temp\CabEEE4.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarEEE3.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b