Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    26/07/2024, 11:27

General

  • Target

    73db9959b07059ffebd3b45baa71df7f_JaffaCakes118.html

  • Size

    9KB

  • MD5

    73db9959b07059ffebd3b45baa71df7f

  • SHA1

    0db6bc9b0ecb811a25d95fc7349fb754231be9fc

  • SHA256

    9041b887c2a28ce21502a6e8038685799e60928737cfae8f306a4d931a30acbe

  • SHA512

    176903454f3e54cf974dd7653f7d81d8867071e04bc2975d6d775f1c98bfd60d20caef5e65b01c26edd94adfe2d0c40b178f7adc18b636add2bef24ce9dcce81

  • SSDEEP

    96:uzVs+ux77KLLY1k9o84d12ef7CSTUiGT/knIDpebEJJ+MlVHcEZ7ru7f:csz77KAYS//IVg0JrPHb76f

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\73db9959b07059ffebd3b45baa71df7f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1972
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1972 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2284

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e3b87bd05f48987615001f7bdbd4a7e5

    SHA1

    8f9c5ee2ad3216daa420e18c9ab65a2dbb55c5a8

    SHA256

    ae1ee3350740edf16cff4a81bffdedcfa61dfde797660c9baddb1a4c639ae1cf

    SHA512

    0a9e9f74b7d3d08cb0bd48744a02038101b05e6291b253fc863874b55a26a18d4f2bbad4c0882e7172fde25ab9b6ce8cda478ef93567de84235cd37795364134

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d24eaf894b379f6c2894d44c8abe14b0

    SHA1

    3bf1fdbd85877fafec599e1fa04a9a72266da972

    SHA256

    49c061a0e847136759a46a5513e2877518fcb671ba19f9f44f50e6d96888deb1

    SHA512

    4dec48af255a84ae4a8f22250b63948a550ed08fa10c7b4f2dcd5e39d355741d085af39587472fcb522bfb922a9a51a3327c5f7d89fd90995c116006c58b044f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e79d2fbbef5735d4bc83a38f982534f6

    SHA1

    5cabf3b5320a46734bfabd5fb2221458b28c1954

    SHA256

    9f7f935f62e49a91c7b5550c1f866e78a18c034d9bba73acba3c31b71fde8736

    SHA512

    958a012467ac5b497f03b118eeb9642fc0fda7832eb2726c5ff857679ce33093cc5c0c8f40a5717443c99ac96fae852a50343a7562db00bab82c25fd266369ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    40a4d6ba4e6abde6bfa9e96b76bb5648

    SHA1

    81cae9e1c150f830439946b615791ed671508c79

    SHA256

    e97d3f2a40296f768d612c38af4dc0e9ef37ae18b191066152062b974e47c496

    SHA512

    7bd9265aeaf71af80fda3fd99164f7bfb0795337d680872fc6bd4a94d0d7df68e7b46d7e525125b30d3cb42d8a106fba9ad27230e5c193a227f5df6a5bcb1a0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c269519a0326cfc386bcf80c24efdb4

    SHA1

    f37b29a4cdf64047ff3ff39333194f2ff3fc10f6

    SHA256

    1c73033b83c2467d3d60236e8cba9c171452d82ce59ba0f6a062840034e5e4b9

    SHA512

    f45944aa63b2ac98f8ad1711053ec1dfb4e6d2696137bb8ac70ab6890e0105c27c7c73bf4accdbc36c07675fe3ab80da64be0a2d383f2987ccdd7029f9d68a64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5151d1fcbfb7528da0727751362e682d

    SHA1

    2fbd8a7ea62380f953d380ea2c2ec12a3999dd0c

    SHA256

    9d8986d8b38b9b0f1ffdadbc7fd1a5520ed0481ff1194952da1ee6d4fdeb98a7

    SHA512

    e3860fb85d3a75dc2701788a34de98fa87b1e27c88a586660e771405bd7efb20db5df168caf67e0975117dd48136f2b0415524b7566cf47c0f09d8ea13a120f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    13fd578bfcad0319c00789ef7d476632

    SHA1

    fa355f37d5f0a749de45cfe4a2f4df711f4684bb

    SHA256

    19620f2dad92a0989f5f30e512443ed3c08e955b43deb5636ca6fad612a4ab10

    SHA512

    1a736ebc737f412bbac8c75a0776068df6fee984dfaf8436819333f2e5bcfc64e02aee50e0b299c4d723241e06c404daa3b4e738c0793fab8b471ee5beef9ea8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e9c6e431bcaac2b6ed612f3765b26b95

    SHA1

    134bdbb122fa1fec6c1df4647214bbb382ecd863

    SHA256

    6189203930d7405a54aee7d59fd907cd2abdf68592e49376df867de7ec1ac6ba

    SHA512

    d2bc76158cd92fd72f1b8579ab9602b8ce56d97e2d4b944cf5e01dad559c332ccea858eb360be956c0073fcf2068cc2b63bd26f349c633e30b7112d022a60f2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9584a009db150f85d96e69d52f7cf76e

    SHA1

    196c5a7b529b0eb093f8e67e2a40fc9f12f39422

    SHA256

    9743af7a0edc3da20e9900c7d45d84ea30f3ac47c60f2012c4231731d273ccdc

    SHA512

    e85c7ee41f52df7864cc782663a296d21e538710684228554dac92248bf7bb8925ffb051c702194b4c5d7f1f0b2c3571e61c9e99deaae3a457eb060d86208218

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf12e20c2ae8fa6f54cd223e237fd3e3

    SHA1

    8883acccef32ee28cf86f815470c56a55b372411

    SHA256

    4eacf4ff41148b7471b532169d5b33fc9b94f1917918bb4b13666725c771642d

    SHA512

    f46e376a6165d8959ef70225527b8d98634782239ba078a749862654f4abc2468fe3a804c73fe099f3cfc33364c03dfea45ec42822ff408a96b1f6912a9b915b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cfa831c4452697a18a262923162eaa30

    SHA1

    ba859bb051bbb12f21c074f79a16cd78637dcda7

    SHA256

    ce15026b9db9a2bbed5ab692a5746e3d594ac9ad2d4df3eef98cf6dd4a7a0091

    SHA512

    0218e765bd9fb5aed8759494059a2996e416a3753e1c64339318f09a4c3e1223ddaa53544df29b5f8f92c127a0730493ea9eb9ce1f08455e88f059332a015369

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e5790f7265d6d59e3acf61aca31d8af6

    SHA1

    3bb917cc0ceb4ab56a30d8eaaf94ebea5cb4c6a4

    SHA256

    9c80bbb5bde0b75aadc5f72c60a5003d5e91dce70d368b57e7b86321693f2d46

    SHA512

    35b120f7e8827b5d79811ca3a1c6327e41f9399d39f740262ee3b090b88ee9bc725ca0188aa34b709ae055e98bf91e2ce8e7e02af8174efa735fb9fa6c893634

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a5079772452ea3b5cd2ae87bce64784

    SHA1

    ded743a2723605f33abbe160b3b01e7010d256ab

    SHA256

    3d0b489fb94b31a25b6a482a351e26bd326b60a0f5efb2d8b6d95d007fa13b62

    SHA512

    c221f75351bf960ef1924a3223e3d488cd56813e707aa38bb39ded6bac48f5ab4c19e8aaac50c191773032051d52478e5695502f816938dddb9bbe012bc2b0c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61c3b81b3e06c6c7a2e19fa7dfa0da5d

    SHA1

    0268c818f791000d7788cfbb9c37596a729e9c40

    SHA256

    668f21e2cf6fff61cde7bdcfbcd8d1181a081f2cdbb28bd0e05b08945e2b7e96

    SHA512

    3cb881c5ce559d14a8f549540d468b62a28e17ca2796c7086cf334ebf62ff1efafbeeecc36e3732648c3a9f81c2a494f958b041baff46c9af5be382c46c5862e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a38f26f7afa40021ac4c68b2f8c03d2a

    SHA1

    20121199de228375029efe3c3f866ebfc95cdaec

    SHA256

    ef571f8d73368bb09253e5800ab8e44e9de2456d8331f44f583f5306933bf305

    SHA512

    4f6e1851497ef5fe9ea27fc72c7d5f4cef4f5b3111c0abc1b93e6e3fcd8c409848824839fe7518a9b70d7a34b6093d87642fee0d169345fa5013c38b9a7c60b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d57cfc9d86402737b0fddb8576151139

    SHA1

    41741ff0cf501c7a6b5743bc4489492da2cf94f6

    SHA256

    552e0e0389135a11160bcdb9657f837b2cb697ff4827ea0bfd60e6791972181b

    SHA512

    c2687b6b7d028be91893067059ac5f6d13cfea07ce9334b2c86cb69b1934359ce315f213cf3e90994104086618d6e47dad0fcd42bdc2088f52677057716f7ec6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8278f0e3a96529e28076abec41e9e87c

    SHA1

    0e8aede645509a08d4cc7df67fe781b38ed0f080

    SHA256

    6ca726bf4a7b3b1f991d308d816dd478cb793a570457d662022f48f8f39dea7e

    SHA512

    d08fdb8c14606861a7a67613401e06d970d2d8ed2ff8f33e5ae97c74f69a6b0575ee291cd3c6985a917d4d53bcc71ecdd46a86b8c965551bb351a8adc6059cac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f2afadf71f250c6337d781261fb3e400

    SHA1

    3b0307324f50f96374888bf401a6c242792e77bd

    SHA256

    5123ba7467def2db57e7d47644c163bddff35adf24cc55477f6c1c216765e399

    SHA512

    0d93d5b1a5ce75da0ce3512f2bd84079b1b24074fb44e0d1c8907810fc41ee848e0064a9a43a4ea85350e7079d3925f4f9ae4693f5c436c9006f603374eb2f4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c38e9d495d31a738accd82b626ee32ed

    SHA1

    5e47ce68dc13ef7e22598af26c426582c446983c

    SHA256

    dbb42c6026588dca2a953d3bc31eddb4fa9289dd67c179dfb07b4b3c0c8bfd05

    SHA512

    ab8b8fc16064fcfc4a2cd3025f29bf179fc855d15869bab3469d36ecd8045f10c8c16c4447a46d658bb9a646ebd8f328371551271a856c1829e5ff58eb5b8b66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ee28c8658099510a4ef68fce8b1fda2

    SHA1

    28406be1a04ff2829d78caa3e9ed124a3587ac4e

    SHA256

    bb3942c8645982fec80d93e17fcc8e8e0c4188f78aa3a422486af4d55e09f56c

    SHA512

    29167013ffd41cb7b1e72d9010cd31412efed2f3e6cb1413728a565fa0867254a5152db733b44a49475f05da3ddb34ed4e933e24d9fd3bc65414cb0ad51f8a0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4f15b7c08593e473934889433b8a3e54

    SHA1

    65789280ac4d8bf1fb9db477170d1cc9a9f40825

    SHA256

    0250045a716f3f82e3703c9c1622fb2cf50194b419dfa9c4be49d15aa2bf0034

    SHA512

    ddbbbefd5d444d419e166b4f406aaee3b4aa49b211bd872535589bc434afbee44971582f0780209829f0f245b1d210c9a1737c72727987bd1343b687ca6cd5fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11c36a8dc6804c681930bc9359cf70ac

    SHA1

    72a7daf5d42b64dbb83bfd1fa16cb4c620885a4b

    SHA256

    46b68d0d809dbe78e6f9dc4b95cb2166fe651a35985592660abc37c7531a1d9e

    SHA512

    bb12eeecffba2723d036c6fc30a35a4802f528539a71b28869dc55d07c486cc7069ce2710ccba4a4deadf497698656051d6b4463fa5fc3243e9b6fcd078527c1

  • C:\Users\Admin\AppData\Local\Temp\Cab8901.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar8923.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b