Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    25/07/2024, 20:16

General

  • Target

    71123a04fc867079596c1e15a2a277a4_JaffaCakes118.html

  • Size

    10KB

  • MD5

    71123a04fc867079596c1e15a2a277a4

  • SHA1

    3f01afae1e0a18d9769b7c6d7c8eec8b4fca8feb

  • SHA256

    c0bedc5dca47d280f93723b832d3ed71e3271ef7cb81e5fa997ae63e20737dfb

  • SHA512

    70089ac4afa16ff961daf650e8b1f7dcd32411478467bfdbaf83bf9de2481827b9c8db3ed31db942d4eb5c05909e29af69efa2cdf108aeb79d2ff73191479d02

  • SSDEEP

    96:uzVs+ux7HtLLY1k9o84d12ef7CSTUcGT/k0xpFPDiQkg/DkyxZrLkKlVHcEZ7rur:csz7HtAYS/pOxSg4yr0KPHb76f

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\71123a04fc867079596c1e15a2a277a4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2180
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2180 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2296

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    32fb3eab1abb241ae7e3ae0291ef2320

    SHA1

    e9946d401ded8a6d0f91ce54bb923fab35bfe802

    SHA256

    b6146db6de8a5ca51902f85a8158c0261afdd5321127d71ec14422a566c69699

    SHA512

    b6874871309ab0c83bc3e7b4cad5c5075ec590c82aabc57a839ea4ab5ed3f8fb5c69bbfde31717e2f7f539650e39db3a40ac34d298aa719d14241562460d3362

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11b0adf84f5fa80ab3cdccb62cd1bc87

    SHA1

    be902642baba0fc6662345ba4c669c9269fc4af3

    SHA256

    43a0b1379c37704953fdce0aaf7464ac61229c0ca17e2ce3ee551663024a19ca

    SHA512

    f49547dcbfb18abe6f06d97d4e5b9080ad29df889f1ed478656256a29df526ecc9bd05ba8fa8ef55f431a5ed410caa005b466fe33c6b674d23417fe16861b084

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c573b95599be6e1c49debd2ca39ec728

    SHA1

    37a7c5e373ced00f8be14b22d83ea37a1f4f218f

    SHA256

    e118f52c750feb7015be0db20c6df40685fd9636d464375647db65eca44a11ed

    SHA512

    b8746c24697e873430650663cb78e75da2741603123e6d3040d62f9dcdec787192ad0a320516d03137b53535db76c7c69309dda66c0f6f779c67304f34d44186

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9bd41b82f065a27b28b97e2913df560a

    SHA1

    a0004f3f0528f0be79ee2c92b4dfeac01fa90c08

    SHA256

    602ae6363d1f12006f1ac0521adc4ed5688dc26e17449a50ea301689e62758a8

    SHA512

    f02057ea5052004795032f3a56daa2c3bee4249d627a846f5ed827c008b70baecf1fabdd4f423b15fe7a570cc7c9ce04e14d8dc8887e5dcd4e7090c147d9bb42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4c419ccbe76d3d260437eda8b682bfa

    SHA1

    51b3d14210fc42996ae3ad4afe17bf6bd5af26dc

    SHA256

    011842206a8dbeccb17afb5fbd0be9c2efede22200ca8d7ea05d9571a9cd3744

    SHA512

    c21ce93147e87bd86c4b0a689c1a201e6f5c1280be4445ceeb10191415dfe36392da00652123016469ec7a83b959f745cb57d271a2297cbabdbb897776b70296

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    add52b1464df006c1461dbbf69986082

    SHA1

    d296af38d5d625797af142c64b67b199ddc34bd1

    SHA256

    3ffc73fcf64241b86561f38fd1ae2ce58e04a5056c578a7a169728255252cb83

    SHA512

    d39f564f0ae445c30bc96d5e366fab8317976872b44229c8f1758a3a976b04ed808d735681029fd15625f946b68edeadd12d5b8b6803dcfe5cccf50869de78a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    701c2ae8ab94bb57e10a849e392489f5

    SHA1

    bf6042244aa307dec5dabcce9433a7593d3e1dc0

    SHA256

    3cca352fa79828481a6e61bebd77d948991aecb0561193c7d5ee0f49f368d67f

    SHA512

    d679349c87b5f260812808815bad6475f291273144a08b68a9ba8c2dee06688ad65f4f29a7b3f7b3bf59b1eed3c4c0e8fd9fd5514b332af6a325d1aece7fc9ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    abec258f4943dfe936c5b62eac9d96ac

    SHA1

    c5c45cd6f80ae2bb0214e1d9a3a2f77e0b981ee9

    SHA256

    835beddf8f214c42aad79ffc8e532b2928c596603205935bcb2aacd48a7f2b5d

    SHA512

    2c5d450abb5b9f34d4058a2a670e329984219dd7034ad0d05d710007cfeff3946c7536b1daaf40d37d5269e221d17e0b1bf718a83117ae73effdc264de5a40ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f1e48f6ebabc0a4bc529b4372aa6cd75

    SHA1

    5a53407970bb20922bd9c57d3f31aa468722d98b

    SHA256

    18a6b40987bcb0febe36658056856f467d25fa6218b536d97cbca1d2d518e679

    SHA512

    60164c7c110679de98ed936d6651920e43fe5e44d83948caf694557864bd351d008f3261f41310673b5868cdcd8e32698bb268c1d7e4595b5bac75b71e40b161

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e34cdb57b77f5e8892ecd00f9dbf622

    SHA1

    be4cd8ebab23b84e367fa78fc6e39318e643398a

    SHA256

    8baf093a2a91f92a93b468009a59a6abf233a301717d9b7ab9319555dce03bbc

    SHA512

    1f72bc83dc46a72c5666049244f21a405a61ceb004c03b17cb88c779381d60490c6fb75e0b3952d618983deb90cd29dfd3802b5cb0cc4a24dcf980246910f060

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5bb633bf8b4b2a811468a870ed7bc2a6

    SHA1

    3c4280f0c86f2627284fae0ce42f619f3087fdbd

    SHA256

    a877207b78ef21da3bcff892aab78cc42ccbd060aac133ab1fb1dfa51e88b624

    SHA512

    83eeec250188a061b125c1c881af5899172fe45eb0ef063a0c768e57aec09c2c7329bd15936a9ac398a8e6496f58494c211b54d74d8c48ad7298858e96c24c13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da6019b6431a2c9e4708c525309aa20e

    SHA1

    34a80de3c9084f306434698023add9f6def7936b

    SHA256

    e225f3e7bc5fb4285cdd137bb2a39472857090e44a1ef5026b79cd0503020185

    SHA512

    7cd88023d1aabb4272ee43a55f2817cc71b82a3626d78d5d9f825b999128627ad28160a19a0d8ef43a48301001982558b5e6b2b4ceb544b93136cda5c537fbfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    03f739ea65db978fd21da33766fec54a

    SHA1

    cd5ac5881cd402f959f2270352e222685e9480b8

    SHA256

    96d7a6d59e3aca96cf7ecc3b72fcc59ebcaf2b1fcceec049c208e23ff67a543f

    SHA512

    c89a67b237fc04c0d55b25d1e8615f19ab8b28bc00deb9a223edb35119ecb0fcc9f138f2a00c8c21047ad5c5246bcbf4efdabdbb795a240c1e9ae83f0fd1257b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    737e28ab9c70755fd28ba70d8669a11d

    SHA1

    8c234a8f3df2f7f374ba8cc756c5a7d8345a1392

    SHA256

    2bb88da5604eec9655fe521c83c5bb97d8185282366027efcbdfe41d8d4c1db6

    SHA512

    28d1591dcc9e0fdab79cd227fad680d9ab5ab766c71ca77707e592d5e779c2e50a9466e3ce8b78b082d6ec24d4ff12a540add4994dacdf63ed9041b8b7e53716

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d348f1c4351d44a4dac60d6cd865e8c

    SHA1

    730d74a9c419bfe911a5f3089b5416cdf7207e69

    SHA256

    e46de1acceb01bec3dc79c84b879db2ea5f5c9ea528362a2880b469c71246e7d

    SHA512

    4271bec092561bc92be14a580415e077d577ebfc9cad6eb054c3727fa40a82365e42e93d52818e48522b0837a0ba25b8fd433a507db4bf34f5630d843d7fea3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    71cea8c7cd23ea913eb7987280235293

    SHA1

    c3877e63aea0b415ac8a0ccdcb2934507f91e177

    SHA256

    118a9d071d8ccd2a94a051a508bb259adb55ed0300cba1d8f362cdfeb65ad971

    SHA512

    b395ff08a3a0db64ee4de856910c6bc50efc66bc83de89cc5d8325d5be65fd7491de1071683a356018382ea5d825c9f620684efc1608107bba8f9bab2399f144

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf33d22d07b7ea793ecfce791c1580a7

    SHA1

    3087da36af9d79cb951a53727d62a1878eee8447

    SHA256

    2f940e8a8248771e098397a690dbbd5ba5b5b2ce9cdfab1fe1d61e60278b808d

    SHA512

    bb677a80fb4786d8f80495ed836e8575d98db27a9b46e14b6b9aaa4d4c5149fb2faa2c6dd42f228c234ab62da2bbf92dba79100c9f6022784da7cdb3722eacea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3622932e495e166da7a0d0cfc923c97

    SHA1

    12fc35beec0816a8ef3e59cf061a40b170e9ff94

    SHA256

    9df86da7c262db78688e1dc2c5d45e22217500d988f16f06eaade15ee0c5398e

    SHA512

    ed12f8a6ccfb898f76a70f7c7a98c9e78c646d566e0eba74c309be57e3a79c5cbaa96af416d3c1e78889ba86308908ee85a5e880b74924ca1469031f11632770

  • C:\Users\Admin\AppData\Local\Temp\CabFCB9.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarFD2A.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b