Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    25/07/2024, 17:44

General

  • Target

    709b2530bd55587f9fb138ab8e452b6c_JaffaCakes118.html

  • Size

    108KB

  • MD5

    709b2530bd55587f9fb138ab8e452b6c

  • SHA1

    90d16bcf4d6d0fed68b6124a20712010f73771d9

  • SHA256

    d0fbaf37c7a32193aaab2f2fa132df60196b6132ec8829e85e6e2a3970852c6a

  • SHA512

    60ae4d0ce3e603155d1b98306559d020a3b061d33414ad8d80dfe6bde505fe9f222e818b293bf2d8b04bd1491048f1de293b8fd7b741606dd7975c054662de53

  • SSDEEP

    1536:fjOrm46BGax6FQ4mfYZLPciaf5GdDk+Uevc1sVIWlonFnZspee2u6fq9kHXl3TQy:eJW/fqhiyyOsVjQOnQidn

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\709b2530bd55587f9fb138ab8e452b6c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2732
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2732 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2704

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F59A01A8B782D93EA6991BC172CEFFB1

    Filesize

    867B

    MD5

    c5dfb849ca051355ee2dba1ac33eb028

    SHA1

    d69b561148f01c77c54578c10926df5b856976ad

    SHA256

    cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b

    SHA512

    88289cdd2c2dd1f5f4c13ab2cf9bc601fc634b5945309bedf9fc5b96bf21697b4cd6da2f383497825e02272816befbac4f44955282ffbbd4dd0ddc52281082da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0746fb1e6fd891b7064693e9d8a74918

    SHA1

    24339d6daff3ee8c5a026f63dec9143607fc1d6c

    SHA256

    636657ea43bc8e6402cf020479211fe881cebea2a0ccf2514d238dd55b6e5795

    SHA512

    f5f6b037cd57daac7d429af8b2701418c7d369ed769657a920b8a1cc696f9059401d5095f19b695a81314fda178931e6e559acf6f2bd665c4f14c7a9d00e6482

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    71ffdee8a841fc5b41b6799cfe1289ce

    SHA1

    5f109c0f4aa349f2ef669a197d15a054d10806f8

    SHA256

    4405be182f97a6fec0752a352d283ef176f0597e6bfdb6985aedbe3ce1604469

    SHA512

    d5b18ea345aa24bea5d5d50530a11d8826b51cf773f2e030ce4cedd0e2f6c3a258f469da75ef18deafad877f969cfc6f025db3f4191a86de381d5bfa6f91c226

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0145869100d02385132b11193e953b94

    SHA1

    dd6e465057ac59d1753171eed8fc377f9f1c4ae0

    SHA256

    c670c3f2a688b607de5affd21e3bf4866c355e00033b6a1b515cd8dba89d879c

    SHA512

    7ee691855c467bfd90650437d8569e1ab0b78af770e39cf659f294e84ca2b6131648b918f07f7cc322cee816ed461c412eb7027dfe899824e8e32a5f6b665741

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    017464982346411d94bc0cf1a5b704a3

    SHA1

    602dd23d231a0ea8d7ce2e33e5432b2beaccb96f

    SHA256

    cecfe0add3e0c6d55a6ab3c90b3ef83c4641feff6faec4c4b094845c31a67430

    SHA512

    73fb6c614aff24b95763d26aa9d9da875405d38ca31da76e2acb1faa920811ad11694c44137a9cd98b5dc4cfd7f1e3f12c57645b5576b83ca71a06ebb5299f3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db9a87c79756d5116a8227ec1c115e86

    SHA1

    69187cc02e41d195525c2b33262bf1cb26c447b7

    SHA256

    2896ded051a768bc8ed5988bdc862d6f1fccc88cbe029acf407d78af25d55485

    SHA512

    97918915a75c6d239104ca374b5efef5ffe3dc9c4cd1b0aaf1e70fdd5276f822abb5c6e6acd81caf66d38029fe86c40f1efd103f37a4b65941eaec0fa5537503

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dcc2ace1ab5f9c93375bf6deb7d20793

    SHA1

    5f5243ba25af6ac49060a7cf67ec1194b434a21b

    SHA256

    06bba83d5fadb5ddb19ae1a515f667045b0e4b25332f3978c188ae0eeec4b680

    SHA512

    0ab6d8e81d75671838bb4824e59fa74755990785ec311ac949b86e03490b4c460a0c425ecde27cbcafd5907531f1b6684e23b99be98d36d5322cf42ff50bc60b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4abb3544e4d046ab8dd29ea5201e0575

    SHA1

    d38930ff49072b93440db27ba1ac3beaf42ab1b3

    SHA256

    fda8d81dc7e9dfbf35d5e6d5ea81944a292465b9af21ccd4a11d5e20310b1909

    SHA512

    78e275313fa5945089e53f869a9976ec4576373c8f2b67a1ffd58a178fbc1f53066ca1c82666477665e71f2cd2b86b61e7d54790079c54701929ac54a4bcad7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4272c9e588f3afd2ffb7732da61eade4

    SHA1

    1cef4cfa895d86d0130d72ca21d0391ecdb7dde1

    SHA256

    8a7cd95a5c86feff41a3838763d82aec5665224c1d0f28da289bced8efa6a1ee

    SHA512

    5621810ba9e81e38b15811a9ce238cb39097a5eae3bcdbec52a7ccb7ed2af2e2c9b1ca518ad7c31231fc4291d90816e74f6968e6e105a14177e57229d7cdc14d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    33e48cdc0cf0585c286b6bcaad5119f3

    SHA1

    96094b72c4157b7732829e2dced71456fb58ff43

    SHA256

    73944120fff66261013214598d563977b483559544485a95f0a02e9d2194907d

    SHA512

    3500c4bc97eade2db709974a0f5f17764e052abe792cc8c27d352d75bea75d59b133a1917711c1f696e611a65a576992c551da5f60db75824084e2c7129fb987

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4970f71ea3cd386e1c87fbfc9c5f63ac

    SHA1

    7371823388b43263503b9c9b29916ecb73e1ceb0

    SHA256

    8ea7b9ea9b3b59c1b59dab8d7492dbfb85d61ef8300fcee6122a7604cfd1c74e

    SHA512

    1d2b7a95399769fb636ee0dfe96b0ccf070932eb2152ff5d441fcbad34f1adbdef79babbd4f9d37f894fc9a6d2faef5485528d9375e33775562d7937d670bbaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b87ea4cbd55c011564ece54ee0caecb8

    SHA1

    50c639b0ac0ca430d76e26deae1bc99c69ccdf4c

    SHA256

    6bcc4c514309961c798046f798fa385aeb59555fae51128ef99527d5db0475ab

    SHA512

    6995767971d2b1710b7c39cfe467fff4684847499dd587a199bfdcd9995c966181079b888906b40e4de214e34b74de6b5c937c3f4b64ef5d1148704a60f71b53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e778e6b78ff3c0c555047dc3f8934e3

    SHA1

    1598c0d0ea8ef594fcd847b9f5930311b3386a16

    SHA256

    ef372d9e54f2eb9af6e43ce9535e6accb89b144e6ffb135db212dd4359078974

    SHA512

    e6339fddf7ccfa89a244b7634bc170249355b549a84be8e5ec295e0da8eeb1de9848c35ce7a668f595e1023624b430975951fefcdd10cf3cc1bdd9ac220be999

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35c53268eb299e71ca536091c7cead29

    SHA1

    d4df8ed46f771fb694ba4882b7ebd089ea110f9d

    SHA256

    04df1f71eb009e446eca6b1cf6a06dc2afc076c0b2ebd42fb33bcfeb3d203dec

    SHA512

    1383ccb7eb2702b61a3c092a3300bf3d97d6028beaa038ab454317d7fff360fbc73aa198465698f44e1846e75a10f242a28cdc0a1ed947cb3376f141274a8fd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c50e532a64b3e5886cfd71fd4a7b03b

    SHA1

    5692f33fdf7265d22b95211c6b4da60af1b777a7

    SHA256

    07392207afb1acac4364f12e0a22091550645b06408269f935009020caba3ecc

    SHA512

    6e0521faf16a24c065c6f4404ea611b990f9388821b69929a65c716bf20292c0a093f870faf23fd7ea6083b29725ab7d5bf1da91b504d31745f39188849996a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c63f5edc36001c52c8a43e97a566cdd0

    SHA1

    e15ceffd1a5bbdcdaa69be6376f1783b796fea81

    SHA256

    c1bee06d1acb5f84c320d9a2bfc13094a4c1a8c9dae2145a91097a661ebf69a5

    SHA512

    548b1786cf8e2a1b2bde269d6194b8417a774f83e9c961e52149296263b921134b563710db852bf2a758e0d4c5198228c49f65c7f172ea598125a87cc54f519b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    184ca5032116271aaacd6b6489ee1662

    SHA1

    4b52c8ec003b8d3a086bac2bb765cd40126d32ab

    SHA256

    3f68223a8d84c3db6caa83ec94fb4a3121c62e9dd24630d95b2d821871a32016

    SHA512

    45ee6732c8dc93e2bca359a714d4ca4a6dc74efa242849614ae4c871f42e99a9161c8fa3d21aa65380cce64a307e957c45282c6bb869432565ee9c8cc790b8ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f2e66d1abdddbd36b858f0086613746

    SHA1

    b07588e01bcd937648b53e064c62914130c0a5b9

    SHA256

    d9ef07f4a9129c8576b5d7e9229cc5214d4ce91b6d0b67087834792156bf0e1b

    SHA512

    ec39cd1fa421e3c17644fbc399654bc5cc2826832b6154dad1e01d63d657cd74ff1e0d552aee6f38de77784e02bd04243ab9db94d3322aaa41aa0870b848c501

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e53d56643e4e00a92a0b4449a7db625c

    SHA1

    692686ec15285b6dfa15eb14f9a57b3b30680714

    SHA256

    1826d1f02ae20c93d97237b4eb7c8aa285afd214dc121257a423a8179d894abf

    SHA512

    f190ab31a762470996334d3bfb376e9e4eb6804fb137cea2a46d6189a623b4e3f0124e4590b71b87d5a7905bfbaeb1556bbb41ca0df1b638f87fe31149b2346c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F59A01A8B782D93EA6991BC172CEFFB1

    Filesize

    242B

    MD5

    8833c99ac8a14e8c1e127d81998d303d

    SHA1

    26b198ecca4ccca452329a60a48ba8d3815dca59

    SHA256

    3c5f32c8d0105bbe8c008e45022c773625ee0ee6c158cd456df4d32b3ca69ed2

    SHA512

    068b495147c662be3d26c5b43c9aac9657cfcff4c9a4d3fde72e1f26ff9279412dbd2eff8bdab2e465fceaeb1137924d17207813f4176ec0bcb46045992d894c

  • C:\Users\Admin\AppData\Local\Temp\Cab120C.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar122F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b