Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    26/07/2024, 09:03

General

  • Target

    7366869151d9d85be8aa69cb5ad3fc5d_JaffaCakes118.html

  • Size

    53KB

  • MD5

    7366869151d9d85be8aa69cb5ad3fc5d

  • SHA1

    888e8cfcc03fb31cfe19a782cc4df3f19ef8a84b

  • SHA256

    462c0d4cafeb55384c6d394ede3f7d975710f2f0c9808d415f740a458fdceed0

  • SHA512

    cff4ee9a577d7702ce6e5d3e7ae81c7ef16197fbbc2300120738a8385ae6b831f75991a430d9fe0d7570766fc3e9f2fd6155c7f4fda50249b9e2bc7d15365750

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUzrunlYX63Nj+q5Vy0R0w2AzTICbbroQ/t9M/dNwIUTDmDK:CkgUiIakTqGivi+PyUzrunlYX63Nj+qV

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7366869151d9d85be8aa69cb5ad3fc5d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2184
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2184 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2756

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    996da64745743dc318be9143fab4e6f0

    SHA1

    766f93c1a032cfa617035b948ab78dc36e36f8eb

    SHA256

    277759e72e066569414fc3da83dd521e361f1704cec68cf9e195f693c3481d83

    SHA512

    7b8381482a24560f7973e09c599963ab13d792da7c7f3accb6ec574b3b79c50bfc8531baa5a1a0fb74bb0049bab04f6e29d70bac1eb7be1ae79d0322ef9ba6d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e89730332c508d709217065014877e25

    SHA1

    c2a284813e0505e10cb9312bd9c08f2c797c2a0c

    SHA256

    de91261d3079f9e3e02857adccdabfdff7943a9c9cffe614e026312c2a6f3c92

    SHA512

    fa5a7a2dad0fdff0ad6d895304455655568e3ec411d34a7edc9bb0d48c1839c0cff5a1899b92335ea8099a093aa63371e005df4fadb67b04d92678f5ae5cb84a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2bfecc1d037b092dad9c8907295b71fb

    SHA1

    d4411e8d7464c59825210c4742db8dd15e8102f6

    SHA256

    3dd2015af086ef645d68f9cba7a6332d92cbcac6ef2cc4e9fc42dac1cd2aa082

    SHA512

    93f381313c46c402fe5873f60cc1bfd7f87cb03bad4860ba95ae05303604b1651bc881869c14f8acab19a843b7b5a31f549a07569cfa8036f8d03ba0e685aa53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8bde0487859f52581d4240a8ff7c8428

    SHA1

    cb4e82d11ce88e2e22a5e79fe91484089127e8aa

    SHA256

    60715069e521c7e7f37d4c6c6e3571ad65ecff1760b78e64585c17a0881938cf

    SHA512

    27879b2a9a702e845164de37d87566bf51c962bf7eff7a74ba74128eb86fdb34791c4e78518599c80d83045ecc5bd31672d617cc218071d8b0339c9a4c559a04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1f79da23cc8d715888343bc75ff3c08

    SHA1

    e2c67aaaecdccf0e228b015ee09c87745eb71a6e

    SHA256

    f42905f5f8fdc0d17790a01776e66a0fcb4e26dcfaf5c73508d6e7218061ac7b

    SHA512

    fcdfbe210d1fc30665c1981964e10371d94d142df561c4a8ececbd235bc9871c1106fdd79d3530b15d7dafcec72d867e5660bfdf5f839154ea33e96ed0ab3730

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9bc89be49387edd5c6569052f8cb9f43

    SHA1

    6a637a5074a61756b7489e1f3ed7c019fc06140c

    SHA256

    d1d1e0fb7ef3d18479a492088fe6fc3214af5adefea200c18eade6e05ed915f9

    SHA512

    d9dbf5dd9e12f4faa76bfa9cdbe7e0f338ab38b4bdf0f3cbc58b1ba231d2a4e589e0eabcf784737437d1a5a52dfb5f1979cf4af40ed3959597571d8c29d43b23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4eb45442b61bf5f5e455d523e6449953

    SHA1

    c631c8642ce02bf5cae94a46a58eb9afe83f6a61

    SHA256

    36f21b8c6da0fb667f22da46e1491b49ac31062e17e4b80fbd43692594f10022

    SHA512

    cb491d9752ba58fa07656a719d568c817f708057ce0a9693703b8dff8d014454884d4d5b28f068d089bde9f86b4d884d981849c65490bc525ada471820dd5de6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3fbecfc1d02528ef114c04f91c8c75dd

    SHA1

    6d0ba4c10959a621f9f4f1c23da979e8a05391a0

    SHA256

    7615e1134ae932395504d4ebc058008cbafd37da49995772f02ada3f54cb818d

    SHA512

    8070cf12e62336b53e75d0bb3bb63603bf5470c0ae5445315b8b091d429d3d426814e7d61044c9121b5c59e037a16d38d193f5c70c1c7d4182aa68913cec29cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    468d5906b301e2cb623b4e38782580b7

    SHA1

    9ed38f759125ad4e2a4c89db8804a0289c80cc39

    SHA256

    72e405e32f18ad16637bbc1c3e485fd95636f219fc6f32fd10f4545b4b5b819b

    SHA512

    9fea75d4445f034d6aa4f24dd3836e48636607c245c16b8944e401e2460bd3190d80c0bcafdef8f394eebbe5e559ac78ae82b43ee56f98f1d842037c21cfff37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    82d440a3f20b8bc617128572e0d0a116

    SHA1

    5ffd2c76afb9389b96bd93c13259155a156dd4c7

    SHA256

    f895de94aaa01a4aec8f64f7e4904cbb9065981fd199a7c5e77810c4227f6d15

    SHA512

    0ac9045616ecfff022fe62194469ca16f4d713715fc944a8a80fa57707340149a590e3b3771289d6708e3604bcf92e3cfbff5617abaa136823345e343b139def

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2d0c44a88f1da267581ae3a08236fc48

    SHA1

    a76c554e5e11418cf9442b3cab362f08d1ecc892

    SHA256

    e65bae71cdbbebd729f381df85f6a6b43395f831ba8087cc9aacf84d14c715e0

    SHA512

    467f5b527ba47473baaa03bd61db80082f389a1c83f12a77fa22ced5e6aa7642602b382cf97a2733e8a0b0de0596b11aa3d58f688bbc4dc03c7c5b9bf695b4b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e32af908ca0342105dce94a64532b43

    SHA1

    fb18958939f2460830c939cd2fb524f969731651

    SHA256

    00761b5c355872ab174f119d36ab421f3ceb224a7c9d58e226897f9e110d608b

    SHA512

    4225d59f9880f899f1c816330fc199ac46c2909b1aa4bab74813e6ebc0af98c8be06e4ac818dcce524f598987091264fb7c6beca6b9dfbbcae3817ffbb71d85c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8533468c02dee21aec2a4c238cee34a9

    SHA1

    3bcecaec298fc4fd2c543da13a9dfa3061541a42

    SHA256

    a4e7847dde195ac0fc0206849ce68a66cebc0681eb931583872f3aa1cd079e8c

    SHA512

    83bb3b97160679241053a0557a9f578e90067375bcae9d1a89de995aec60a78b63ff8e1cf3b9632c44c8442073fe4ec295bc8d5a60b7266a543e0d16f789d2b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    667034eea093c7a9fe04f2bf1c500e83

    SHA1

    85ee4e22068d3ce996e9eaec5de4ebfd9c3e3d98

    SHA256

    fdce0d5ae8a4e2f3a8079bd47f7ea25fcce26c0bfdcac524e7acf7d430f3edfe

    SHA512

    2f082ee14c918d38a65496367d9a0dd5905c3a3730befb27953e049652333d9cf5c668483340de82494eb98f0788071c26313e1979e8677d5535bc3e311d6de6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    183a25e4efe612869b1ca59d58f8a0eb

    SHA1

    1523efaa791c3b182b1d15b1ee0e26946a437f38

    SHA256

    fd2a9203dd1deb0d39938e04e3ff23ae3c7f056e2357922262fee003b2a502b2

    SHA512

    3a2fcfca19d3d7a227c276806ce1f3a20cd8155bf66aeaa66eea5aa3ea6e86cb7cb0e26dba2a2f843f17da9700e39eff38c71c71dea82a8e74f36b3cbc04a51c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    058bc56b8f6203a7382101bc90ad6550

    SHA1

    f2dd89e5130ca225b2db7fe6a5241c47d0d934fa

    SHA256

    5aa3f422576de6dd88162404d7ece20b6c8852848c8f086de4ff8151e86ba1e5

    SHA512

    67ad29912c2fe5281231b13c2cd3b83fcff581940d24c3f09abdc3d2f327d625143a5789e2161aa7ac568b5dba7b6b0161604bc6a64839755a20b0490b76bbf0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    59bc6fa3add385bc5529798c8b5f257b

    SHA1

    2c37c63f1aae8c29fb7ca6b13b3a6083371c8ef6

    SHA256

    d5c5153e867b011ec72abfc6d0c75ac235298890f59bc4eede6f33bffd32de10

    SHA512

    d9f31dba949e607bc05bbf1960c2672c592a205a90389ae40161b815949a8e0790eb73318125286535daf13b56c340e0c5192ee2dd0790687f3201220ee4a4de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e32be9cf5f27beb3955a7acbf65184bd

    SHA1

    1829e824be14e17aabd6af3db968699e5ffe5fd3

    SHA256

    7b7faba40562ad9d5297af5b54a993cd7e12ca838830534963bab256e9f91fb9

    SHA512

    4cb48df611ce47495875e94f44d70bce355202cefc3cd37d713f31d88bcd03ecdd3579385f1b7db5d522d201e4a3bd75fabb58bb9096503fa76b8e077a3ed69f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    74fb9d1d8cfc4881c8b1f2a34a947727

    SHA1

    9933ac149138c251e0682ea2ede527345687fbfb

    SHA256

    ca2e4ba7b07e1a6262b245b75aa53807c051f05b09887287730c851e4d69aac6

    SHA512

    b42602bc63c6d3d9f6862f14c83c5f2d8b304a4652864c8c2dba93473a813276c9114191b57dfbccbf5ec7e8c602e77ad45a848b01d747fc19a61b1cdd83f5ff

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6XUZ2JLF\style[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\Cab36DC.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar378A.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b