Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    07/01/2025, 02:24

General

  • Target

    JaffaCakes118_481a81efb43e1ff3493986001cc8481b.html

  • Size

    19KB

  • MD5

    481a81efb43e1ff3493986001cc8481b

  • SHA1

    edbe1c866d6c89f214ceb52fcc8b595639bed2df

  • SHA256

    7a469ad6619e038ca67480952f4db07f3eb55858b388aadd60fbe992ba37ac1a

  • SHA512

    fa9fc5a490550e04c44b71c65ccf8b989da6edd5d1806af2f3b5f210665fe8161b17b8fda2c6747bd4b60cdecd4294ef247d1f565ad1d035ce9edf158398d54c

  • SSDEEP

    384:zBqtZRsVuEc+6bkuOENbnuCul0LgIssbQbDwiTkBFV1aG/a1B7rl99Ye/ZGr1h:ItZRsV2+6bkPENbnHJZYDN4n+Gy1Jl3s

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_481a81efb43e1ff3493986001cc8481b.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1112
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1112 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:680

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    d30c18656d859c65e33c97069d205644

    SHA1

    6e56460c569f4625c9458cf55ffb31b01f5891c6

    SHA256

    ffb5d262e62b205872ebb5d51875ecfd545406add43912c412fdf43837ab1dad

    SHA512

    df169452f3a2c50b4bb1319b78392bdde92afa5c2f09293a4bc2e2408d42d51cd3dd6cd8bfd90907f5298335453a85b8c5580e61f42bb4fa87d22b72f5c3d2a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    65e7a1c72fdbc16a89268335fd84caaf

    SHA1

    97e732b038313ebfdd148b3918ef40cfe4a39a2c

    SHA256

    6acb359eba0dfd6be8d0d193c17561996140cce6ccc263f8a3bebc9686c27e43

    SHA512

    f067c7dce4615f33a6164c4ba996158d53fe4cc3ff8ab7c5801c5fb76adf174e23f309a86451f3cc919be38a209e02cdd63a2021bbb61c7b6c4dc73ff9db97b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b9458eb91e46d72d8c74122cec3fb5c3

    SHA1

    8dbf076d2657b59eab125a66e68ce647cc395aa6

    SHA256

    6671d5df6ac5643e4f87ececf01cc497091188774553c45e9b3e9dbeca246f70

    SHA512

    44931988a2d2c60f48b996884931d5b8686bb8f8768260ba49cb940df77e1f4ec990ab6d1f76e704de6eae4e73bbeee3fddfe7137f848b26c94832d887ca9038

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f993f7475acda6b3630dadf065847c54

    SHA1

    05a58d1d5adbc88eede9960d48213f244c0fc0ab

    SHA256

    810242520529ec6dea9a9fba4f9ae07c2ea6f72a74596e582111ca55ed359918

    SHA512

    3cc72da3e24799c3bc2d20d675ceb917ded337dca0c3981e7e9b42db048fc7229d22b3659322ca42df909ee2c03db895bd00dddd229101ab8199ad167167d124

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c52ebba3000b348664ed25cea84ff90

    SHA1

    d8971c369107b3dafe14980476555cd12f419faf

    SHA256

    eb4168e779cb031497e10c7d990e6bb16bb05eba42310061c8c62ac39d90a796

    SHA512

    2756e62db1a86ba0d8041a7ce3bd769d6c2494881adb8709a330c33010bba925196d540481e488f85b2a54b7a3df7df6801b0ad9873d682e1c7e021ac72db1ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b83a16f520ae1abd5ba6ec6884519f2

    SHA1

    980ab906af364a27a765032be46384697b8a7a8e

    SHA256

    ed0570abca325e1c88e62e4c0cc62542da2eca6f75b0b47d895bea6327de607b

    SHA512

    fb0aa368e3b35cf93d8b7885a41cb3495c93dcd2f57391143dad5d751226fc6be76963e785c8ea18f316482ef6de1a249201c6917355d836068ea6392a704911

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f8d931b95c9a764ee49b7a2b80c919d4

    SHA1

    136b34fa978d9285f1f3703cf8e45cc7b9594a4d

    SHA256

    ed0233dd5bb5085878193cf407a93f49865ba5008d7cd08c457c32000438dc48

    SHA512

    a9e06fd3ef2cf2cb5fcc842c4e780eb89f8f5e8e7c7733c69097f9b68450219789dabad2dedd8ebcf2f6688dc19614301b90751693a71b5c6f6694ed71820fb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28bddd79c08f2dd588b13e04a3ef365e

    SHA1

    299ca17f1af61385822ae4025d9d77a7ed21b8c8

    SHA256

    daa695518bac748ee36a22af4ff1f7488206004c8a16bd25dade2c1cdfeb841a

    SHA512

    ea566ef6163ea690c9958b24404742e31666efe0b214e746dffd285b3a82b8038931aa6daebe7a1eb9cdc82898ef2b4d4f5200d2d6b60f3913e0c7e051608d3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cfc7902eb7e85001e713386b36cfb38c

    SHA1

    52b2f57a830811674dc217fedd6f10ee6f0a0e0e

    SHA256

    820c8874e3f195442240f22be470f4afc484a41b8cfb3b00acca4334cc92a3e6

    SHA512

    8f39aa95925974a4aa0442b16557cc30f24e6c3297dc24d20f3b0f3c59245e58a1700a703f23b16ea3e26285f2bb7671c94c7cf577b6eecd77a684fa9ecd07a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6769ed22366f3eac8591060e96d56316

    SHA1

    553601686d3b816407afc8447696ca1499eac82c

    SHA256

    6465e504850b2170fa5ff53a7c1683208fddeb3940b66a2865a4f50f960a0b6b

    SHA512

    670e187a120a902a5abbb13535029bbfab3b279698b636218273f7d9055504f19474d8485fe85822dcbeb91471559e6f8b0631801677df778fe50df4d304e097

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    82f08d3e756b3d59a3359298c5580dbe

    SHA1

    205b56cd12d2a7cca4c6cff72217e485ba428c3f

    SHA256

    b32dbfe577dc5dd7ef0109cf0459d481560ee18d4aa51402a2a48d7cff5337be

    SHA512

    b453ee85a4d701ed47b10f60846b8e30956f62904d7ac07f71f8fc6cce5e8e8dfc694e8335dc5abc88d011f5f7faa096e58c20968f72fbb6a50562fc16ad545a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d09bfb7d354620ddbaa459a03b65cfa1

    SHA1

    4476208eb887e0ce65a4aa6e91cabd1f76b133da

    SHA256

    88c63bf67983e4295b643efc302abf991bb991ed0a7c664fd92010dddb40241a

    SHA512

    f83c91a22c9345a8f9c48611f09385ccc6a51e7e2a2434b83fc07fa3c89d3d3953fc545cc488cfd4acca0f4b95d0bcc4ac7d7c6a3ae05cff7b59f261f955ae6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2021a373f4146409007c5b690a9ecf90

    SHA1

    c646f8d2d424abccae862cbce3320d64a1d6cc6f

    SHA256

    f643b4c26ab4916ce7235342ec27317c387d5ee776a9713b5fe4035001c63a20

    SHA512

    d60fab0cb9389622c84d4201f8d78d0e84a4980519508ac9e7b2ac56468250dbc449893597effab29c1997c43ff67da0d9121bcf13d4c28f04ec12748d170d73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b037e57892513ea34dc3fe8dad6e18c

    SHA1

    ce84f1578be490e8d11d5022384398e156ff6246

    SHA256

    81fffbd492b27066e64c28831674d421e658cdf9411d1dc4952d88b95da53e79

    SHA512

    c8a092221ddb289cc533ae49711bed6141dc5f27462104664fda7fa8304527a970d4c120f1e8ced61f5139a9d5f4390709b698840eeb62b96a82addd73fcde71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b405aca0b36301439121639894eab57b

    SHA1

    e20ebe61542a5cc62251529c318dae6efa3c116e

    SHA256

    48234d89397365fcc3bf8cbe598b7c3c4f4017caddb9f4a080bca85c1b927da1

    SHA512

    fa4c0dfd70df6c1b0e215626301aed2c272b38626f77a24bdd133f2cd1fc2e1163efafb15577ba5281325977f733a8b9764f3f03e5b3915e8a740f29e6e342b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a311651bf8427bd4c944cdd622c960c

    SHA1

    8296f5bc08d8a5e6513d74c2731acac6eea56bf0

    SHA256

    bd837d8260937e8562050410ce901473284e6793a4902ae1901dbc70a0e16fa1

    SHA512

    661d476e3eedf1576ae30b3b1e8c95af89ea783ea4b7fe41873c18df70780599e37ddd0bf4359f2da08d1bc14146c85998a4a8d86920f3587f1143c6242251a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a6a08289fe85f9d579a53e6a710f0307

    SHA1

    5185177e729c69af04b5267402caeb9da9c67e93

    SHA256

    a91ebc6384c2a8a1ae6d1886710c746513a338d0f78ff3aa85faff9b22bdd900

    SHA512

    cbcc768cfa6534c1c63bada2cea3a85419d2deb46532cec8d29704ca3c0de4adb19231608af8d38d1f35365a32cb1c026101b6ed9f89d01162bbc4b5c4208525

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd28f65702529a947a568f4c6743174e

    SHA1

    ff11a9ba02c194f650886606cc95a431b318b93a

    SHA256

    471c4f666ca7715d8539f2a58fc3cd493941a2eb0c75497c72b40c09d01bd6a1

    SHA512

    ae4da57402f522fcbd94528cf779c8ade45e7f5e18106ff9b68c47b85a32ac1a5f383464a3602cdea9f35ac51ffb612d72cef758c27ef12d58bb039f58c3a7ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    6cef92996c32ca2f83aa25dfcb6ce473

    SHA1

    9898e57476dd84c684d5070c0a6ed8209dbea6d6

    SHA256

    18c5bd2ecf30d609ccbbcc5b31af8d352cd853156f7cdcfe1c1302fdc0b22518

    SHA512

    93049b71082d76bcc0486b6af01a687dc2e62a3c078935f9704df7beb13d567df81304696144989c695753bb61c956feff5a339f76316270e84752778c727845

  • C:\Users\Admin\AppData\Local\Temp\CabF28C.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF28B.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b