Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20241023-en
  • resource tags

    arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2024, 23:41

General

  • Target

    JaffaCakes118_3f08ea21962c6720591b0de03588762c.html

  • Size

    19KB

  • MD5

    3f08ea21962c6720591b0de03588762c

  • SHA1

    11026f74625eaef1cf5d96cccdc46c92b915046c

  • SHA256

    da0b8ec7c02b4226e7ff77e67a5b66a3afd1027c907d2da0c4868f6bf5abdfdf

  • SHA512

    bf0e9ee29323e37359fbdac502f152929ed5b05b8b1eeabd806ae24e6247e874895b016195c0a73a57e8eaa752edd58c267033c5266dc3777654b75e80f70085

  • SSDEEP

    384:zBqtZRsVuEc+6bkuOENb6Cul0LgIssbQbDwiTkBFV1aG/a1B7rl99Ye/ZGr1h:ItZRsV2+6bkPENbbJZYDN4n+Gy1Jl3Y/

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_3f08ea21962c6720591b0de03588762c.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2360
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2360 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2520

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    2c1cc705b01471dc7734f37622ce5999

    SHA1

    00514b601c37719224f8237e8974dac1b2321918

    SHA256

    aec6443e0088d023b11b9ff895d96dbd7e8480dd85cdc6a8ef1fee7c987846dd

    SHA512

    6c8d53fc9b4db499e94560e3d581b18b6976864a3b6a623ee419f71647f27a3e5c768d0fb1c219be0a421bc359439303fd2c642474fd124ab2e98d94a302c092

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0a3213480268d34e8a5f13525f9c33c

    SHA1

    27b830036c5662d404c648894be3a28a2bec9af6

    SHA256

    47120e7570c67a283536dada462b225c373f037ca91be1f46f1acac1dabd0e1d

    SHA512

    a325c822784e22bdc66af385eddd70d25da650aec2051bebc2d48b7ad48fa0c6f85e8d7216f3583cf6c1088179a6c2e110493d68c8b4c280cd78953efe3cfa81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e4966767ae5fa124b549df10ddbeacd

    SHA1

    216798e83b27548d76099108d3f31d090cd33dc7

    SHA256

    41bd11ea823ab87cc66ab2cfadb2c9f9d597a065be58da80aeb5d3f9944bfc3e

    SHA512

    1dc0f5feceabdebc6ce1b4eb7984cc89d188f497efa3cfb8e041e5d0b6ac8570f81a0a18d8e7f145d338a0dfee25b8c588947007816b1888a527e6e1ed6d74df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ad01418a5925832f9def62d506492ed

    SHA1

    4762f7c6776867209c38f8629a631c3ed10ccf99

    SHA256

    462c876c567a90228bb5a688593e6bfbd7d635bd928e3d4c8c4b8acc581f6c7d

    SHA512

    da4940667baed39a8f2d43d0b58f9527844af98fce2ed754108ce12dbbab5d331b35df12ca3e91944bcc5367084660feead52d61428eccd1c9fb9c6ea174f878

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d7625e1db70b2624bc0b0efc9425062

    SHA1

    c4ca75b355377214d57d51249285437d0855fb26

    SHA256

    a6bd0537629fe8888f5e5b2812c6a89fd13c9c834a9005d5a7a952950fae023c

    SHA512

    950dc511043d7add0f99a0a890483f73d12609e902e439aaf982e187ff035937c7a8af1e4bff2aaf2e8a08706a7add6a423df2f0b97fd479cd23660ee706f0b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70bce66e00b34336c579e40d682ef949

    SHA1

    41518fbb5a766f0aa2b825fce6a8ebae6569dd5a

    SHA256

    d26132e5a3c45ce06bbb3444a4ccb4a20d353016e7bda67fee7f250c9d506e22

    SHA512

    ab5040a4429b941e1813ffc6beb2108a95688389d115d6417dc096e954007b31f62784a0c967dcf4fd47a85d48dcc0750965b316cb492339384a210f6951dda9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa8a6ea7bb24a4bb2a804dfcdf5b08c4

    SHA1

    00c681b778b60dbf44b35db29eec1f28dbf73157

    SHA256

    eb9157b92c93f0ae6a86e6615f3dbd73953c9ed592a18f9c6442e71b3e03a04c

    SHA512

    51c8c3bef18047da8e14b660d4ec127db8d28740786167dd16f6d999a83ba9d869a04c878a7b910783bc8233bf54624d0ce1a1ea231fcd35a2e57a534a52e434

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ddb4d55dde92cfac32b30332fb4853af

    SHA1

    81a150c38670a1264c92a8359ed22b3926fa1dc7

    SHA256

    62d7c41d10a6830f7e161e8b46041537d50225544305812fa1b9d9e0624957cc

    SHA512

    d5d1331aa6b7197547f8c618430c09b9d4f3df461097a6398786b27700c1ca3c0f2f7bdaa9ff5bfedde7e5833cf6fd1f6884e28d10cf6d0cf5fa36766f0e5f10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    23eac64cb5e81e00c7358d43df539045

    SHA1

    0a37f72fb076b08db1d8bf77daea3867a1407ed8

    SHA256

    fa548bee751b2ceb9812ff9b58939c553b7d98ae5eecb96dfd8ad4b3b0b3b92f

    SHA512

    afaeecbee1a0aa5b05fab773c4ee0c2a42cdb1669c6cc656f4ac153d0a540338a1c3ccc64f233ff8b6035cd45dd0d53b03577d8cc43b50ce9db632af9545b611

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b0d4c54a5392e28834e841cbbe5d4f7

    SHA1

    015fe950524143907df1065ba6247bc3188892cd

    SHA256

    592cd4c62e1c157b8c4ec572007be127a90453d9ebb5b62985b3374428a05c89

    SHA512

    ab32f9d4d59c4e58322a5a80ff8c83971057f0560cfb284c13d42fc69f22e0f6420195715989d0f555ae4d1ddc309563d9f07030229e179d0587d4cfadad9142

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    38565bf3d9fff739818ace7ec213f520

    SHA1

    0908f920a413068a38b56dcada42ddde7f955072

    SHA256

    f9cece98057e4055114f48693142985dda5c96abd95ccabd6af28b8b7f9f70f4

    SHA512

    fce673bd22df565dce8d3f2ac77f8e2cefb5aab452caadd7b5dbb5a5a866308fb4384c978a0561c56d6ffd3ca1793240fa94104e8880949479a0e3c38acd8e33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e2e1684df9c93d25c335706579655c1

    SHA1

    4c66ce6bac4db484b7f578ff2ab1f1df1693451b

    SHA256

    10d7847835572d0fce6a756865f352fabb694e1af8f5e444ca2d0d13b7cbd49f

    SHA512

    db8de8cf9d2eec47b5ec40e12a5940e3e6c092d71a6937aa6597323482d90afec79f498ba502cd0210a761185eff1cdc71c3d31ef082737828c4905e6b35fb20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f26d01ed1d0dc076080077d46e27e709

    SHA1

    396524441eb63976bff02c726f7a415f7b5c5bd4

    SHA256

    37e14678a18ead7b4170646f0e48024e916ee1359bc34390ef43dfd71383a6e4

    SHA512

    9426f2e7418c474511063699e18d4ad22f49d21aa783b4f5360605ba6c5e3d1a819e85e6b8bd421e9d66e76151853262069e58d49171a22dad0b75dcee4101d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e3791e3dbac6ce4975a2e9e7a5a956c

    SHA1

    b1d5686b23b81f628fd7be36850306603fc4993e

    SHA256

    bafc90c7731fc5d9125d148b7c60926ab6eac83855f6c0bbd03e4c7b3cf12876

    SHA512

    936ffcc2be5de5ff775dd74e1a1584f7f0e01589070f7efcc348f5e67b4fd8bc415a449b8e2076a6c46b4a44781fd0f5e50e04dfab2cec3ae48602e174174bf0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8056e3920a8209b491943404399fafe4

    SHA1

    5bcda7eb40dff8f44e6a07e3c8fde3bae4d3e6e1

    SHA256

    2091d2485560f9e14a2463b0f54617e442bc651e6f1f4ea2530b8f6238437610

    SHA512

    2cb4f22e223f9a774a10fe37b0779be8e17edf7a34a20242bca5b8d29fa121861198d1f770ba9a461826c6335451a3ac4e82fa9350bc5836cb67f1f217db188d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    23d5c7cbbaf31dfcfa49454eb11d017f

    SHA1

    544418a0641f282eb09d06bddc36a50f368b2e65

    SHA256

    2949e40d073c4bdd02b010168d3c060f82836b4e2da0f92a59ce8a79b7bac570

    SHA512

    c2af39602858eccb543a4966980a9ec379dfe2bbf318bd2544e3c81562dbbfa66f5bc1c6183acbed2a7e761ba252680f684244def0d0479f61353a6b96f647eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    669247179bb7e616b47367b515fc8a21

    SHA1

    617b42b877979c98bfb9bc7605eeac5c171a6707

    SHA256

    8c94fdce0c3556f799289f4df01ed579eee8aa9c0a352c1d245991e8bfbf8d0f

    SHA512

    d968b0b1468961d613daff81401fdbd70e3f548acf841521acbf5289b4672f356d6a71ba53cff1215263ad44d9c297d2c7c6cd4b6418047508f94dee2fc7e39a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e3f4b68203e7cc4e2b6f5fb98cc925f

    SHA1

    df51dd7efb84d27e3c8ce1fcba5acd9d69f10e89

    SHA256

    eed166d1c602ff205edab4337a149273aca05ab99f26bfd50d64ebe936f31fba

    SHA512

    626aedf4b5bf68cc7cd3d7a116cfffc6c8d906b9687ef345af64ed76c8b18d5d2c5e4d5128cb6b88debe02a44f21bc669e631aebaff0ed9069a809695d3140f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a9425e3907fe1643c4fa766deaf4909

    SHA1

    2bc4608ae673e2b80f6788cff35c78bfcf2b3ce2

    SHA256

    13792e06736db1aadd45ab07a730854edc9e5b4f8ae1929c7d573fbc1f34fcb3

    SHA512

    e523bac8e46376c31fdf769730df4166598e8efb2f1f3f63cfdb76e4b33c3f2ddf64a278aa23a80c116d6463eef85c68d3bc6d5eb651bf188229f6fa94aef5de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    efe0ea5d35002bfea2488f95375bace0

    SHA1

    7e7c4b6f84ca19e18067f8b81a2e2b5cf9667e40

    SHA256

    6589b3d04f75ac1915fea496ffd309d55f7806dbbfe2129c02bfcae0ee3fb212

    SHA512

    74a2e0031e391a55eceaf514ee042e6ab37f3a31477d309ff4540f3faf9a8d65f80525960556b0f2a0e088e50b097db5b0924e2f6ee4dd33a64e16c9eea72b36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb02ea1927a69df60b67879c0e83b779

    SHA1

    aef4eea2a21c511f78470d14fb4caf1eb9d09fa6

    SHA256

    0f75c510465ba662a2875287b1f61e877aac450e9f3ce86131fd00440514900e

    SHA512

    933866dcd2e0b681a9483757cd09309b0e93bedbeca004bd651abe920f272becb27d03152ed32e530c760184c1c2be72a743a1b4cb57b55c36a03013b85730bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    699879660aaa3e6af2231d63fbdfc867

    SHA1

    460b9f9299990b9a2a4f239251f0d2d2dc78c049

    SHA256

    be659a09044251933ca43823a0697cd99969c9b95a34e6e85dfc2d8f56b4dfbd

    SHA512

    187ce125dfacdf6a2f60dc66267a33a05143ab55907612e545dbd9bceee3b95766638d623064a64195d07b40e50b8c32808b6e71bbd9b435100d9e369617e7a7

  • C:\Users\Admin\AppData\Local\Temp\CabFB60.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarFB63.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b