Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    26/07/2024, 19:42

General

  • Target

    757273edf416d57523db2cbd6767a75e_JaffaCakes118.html

  • Size

    10KB

  • MD5

    757273edf416d57523db2cbd6767a75e

  • SHA1

    be4a375792f87eb7c0d64e314a2a791faff71bc0

  • SHA256

    d562c74e610b76b936e14831a7754fe8a46f4f30b75da716ff99783f0067e546

  • SHA512

    2529070270cb85ec09ae8ba4fd861991d9237e43c0b9f1b7d55c543f51d8ed678179319522a7eba845f653b54fa298005cdd2ca09e84f6e2b9a6c36a164e79a9

  • SSDEEP

    192:2VIlIsr038d8k/w1wvqVkZ5BfqnuhChKh01SZauBuLbdU8d:sIlIcu8f/gY5BfqnuhChKh0kaguLZ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\757273edf416d57523db2cbd6767a75e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2604
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2604 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2820

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0c7a542814ad3d44c787fea54a0f20fa

    SHA1

    93107bfbad221e2699c44bd7107df2c67e7d82f6

    SHA256

    4045833c927f8f29d9ac3f8eacc7180fda155a5c8d1f5c7b7597e6b457eb40fd

    SHA512

    9d1456de84f25cea4611e4f8b3e05c00217a78f91ff0d9a820e520de4044fa5511fed9793ba553deed3d97c46e30d73bf9467794edb1de534db76ea62a6e9481

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de9c92055165c471a45561ae19ddfef7

    SHA1

    14c1d694eac8a4ecde9b985fa8325305136a24e2

    SHA256

    6ccd06a5471e3cb2a490709ef614b90d055dd5c3607e294b40675fce150c2130

    SHA512

    dca00e276b7705fe3d9b15eae765e351a435ab8f672d23c1b89448c1addc1cef2c3cc003bd90aa4e98ba07b34e47205fb01f462c79b274ef3316260d9214331e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68edb609acb13ae5286691c2d4576820

    SHA1

    c28080c9b564117f13cf656ede06013d76c9e23d

    SHA256

    747163bf070ee5b2a7279aaeb1ae053721a8138381c667733d08460df2489196

    SHA512

    f07f28aa8eccaa36496b31cf8ec0c415dd3f18d236fef57b185e97a38b1e5c7c67be22bc892f3b5d3f5a8e3cfe80bcde53ebe999c31f006fe0473f9ea277dbdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05f612bf04e6756d7eb3fd10312d93df

    SHA1

    2fc0ac0004a5a68050651c5dd3913bb412ac73de

    SHA256

    09a9ed8f9ba399780eed34565adbb213174a817db5b10b13d5abe8e6b5e26846

    SHA512

    685b97f2719e08997ff1dd9fe468e12481625005a47ff585aee325d6aebb9241ed351bd96842743473c56b6a481da3bf89a792edaf3b592b71f3fc4b06ac1773

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d426ad5fda4ba0c04324fb7536eab59b

    SHA1

    abdd5e85526d57ba584ae6ee2487fdf95e04e5df

    SHA256

    14afdfaa1976ae1598fae9ed6d55065d83f3de066ebe86bbc9dbddcf62d3d0dd

    SHA512

    53a01146d2c2139427c504d4b31272e2a0bd92b54064aa848f820eabf174bb8a6dbc3f9ced520060537f69ca16217bcdb486af5eb37156cbc5846d0ae2ab30b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1fa0596a0010956a473eb9730a7f80fa

    SHA1

    7f1e0e0371f5c30ad59dc8d3a70cbe2047bda89c

    SHA256

    ec01ecdac699a45693aa397127a8a542927a79e5650c9f312f727f4514b76911

    SHA512

    94f517703692384c1e8418cf9d862cd22453a8b369273ccef5798697cc5ae0141c5183d4e58970c5697c6a3b46edcceada302a9a0d9ece042c40458b1fad9f3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b02b0814ebb364fc7b1c80f102d619fb

    SHA1

    f3f1231d0d4f30271b2b83f794849d6f966fbae3

    SHA256

    f628353877b9be925a2ee7754d81a0367bd9be76fb3f9f1de88b49356016defd

    SHA512

    84b2b50bb2a29838a84dc8ccef118821dfa698ceb29d0f78d2a7e40e33c069367ce5af48ef02eec8fc8a768e3c2f580858cfcddb59c8739f0bde993118bf507a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    97ace99e053bbb718e2dfdad1c8405e2

    SHA1

    36cb092c4397a0a02bef9119224dc877bfe37ebd

    SHA256

    a2fc010a3d9bf1e9fa3b6d2be63622695885e05ec5fa00313f97b08915370324

    SHA512

    a4a57fc7771f331f7d05e26ef84177e3536167c66be06ae724178a81ff78f81d25a45b7e142a31752fb0bd9f6df70c5bcece9c230a3b42d2c05badd3b74fbf60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e54f131abced7f6d194285445756bb4

    SHA1

    a8c3066d63dd510ad1bb08fc01e523347cba3557

    SHA256

    d6e326c120961f4f00f00eedaab4a0a838e13a9e9a24b36e1d82f8b24513a354

    SHA512

    c7a52b6828e379c12f694380ec1fe4be398402de0319675c52a9a7da5e93bd01ed3539980ea9c6395e383831e7ec1e42dc29416dd35ca262080df98033d60260

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2465edb00078ccf82d8d8d1bf5420bf7

    SHA1

    6e66444004874b7a866739d25b7bf9e29a906bb2

    SHA256

    8a96d20aa492b75566923cbdca11534cd6dbb1d00ffbbc0e6bdc6757a3794af4

    SHA512

    d94b7b8659cf519aba02b0906950741788540fae4a52dcbdcf9083b206844e9ea07c47aafa9f50de3d738b923f9c8ab3f064035073d295a51d535697db366665

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be09bba3356d0fdcb8b14293171fc5e0

    SHA1

    81ed74be61b3636b41bfc75ff4d2232726f8f6ad

    SHA256

    796b022a77b7a5b85f7ddf5f61dd249f311b729c9f97522978cdf3ae32488f0a

    SHA512

    ddd5732ec5fe917594cf8ca8cec029c01d45d9eb249313cd5c918b926ccbd0819fbdc85b9d5cc36e409dc2b44abecbd84e52fb67010520c9d0d43942cece37f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f073e53a92594d8adc5fab877e837846

    SHA1

    a4580e1c4958a2367e6bd28a34d59b521dc1e894

    SHA256

    58ba003f931c47e0c042a4708b3f4ea875e86e282aa35fba4fd2395aef7a0cc9

    SHA512

    2090a5bd4e1f59fdc66b205bc0bacdb4e656f60a166453c51d49d84c976880c39c59d34183b4fce94ef74a689fc21a9cf69608e516f62c9e845d31e76fab22b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92f5fc43ca01fe8b6b734d8d066b7b1f

    SHA1

    00505119cd01b949acef58cfc062538e8f37b823

    SHA256

    53f54b4df88a2165ffb72dfa09f92a907045f9ca55d7afcbfd7adf1e11acb064

    SHA512

    0b9bf5df7d8855efd885d56c6b49e088bb5494ed82843f101962f57e67051dd88ced7de32046b419ce99da86355ec42d8a964a70fee090034a9a71e5db3c9e87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    13f8f0aa6c77cddaeb58faddba60e8e5

    SHA1

    cbafdcabf41e7509ac244a60556de6e922e726d0

    SHA256

    c5a1f46047108fd1365666347c747fdb6aab5c786c0672bfb45d9d143d0250af

    SHA512

    954591d3952eb96f518327020e223a5f8be258e991b2a38f41c4ad0c658684e9e62a5b763971fc74f5f54c661a53db408096edb6b65f181642adfab385d02519

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3389fb20c9a3f059d2154dfa3bd5b1f6

    SHA1

    c4ba600c0efa0af7474834e0e4e3e3368c60a13f

    SHA256

    d23f2b0f122e662354315b9d799adf5b473f78fa4e6ed026075b4f9a5f4e923c

    SHA512

    82fbeb508504c3105b3ae83aefced42a8d065e5d456a1d6ee2f96e46423c8b737ac28fcb68eea76164767dad3af055864d19b76093c1356cec431efc3ca87525

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b5a3d5c8e77caa31d0ad8211abf3a8d7

    SHA1

    479ca3fd960ae3e35c4b6fd175299dde82974f51

    SHA256

    bc30461e211f253628fd9e12379e26a2de53d68b1fadefb041b8a5b0df8e9a08

    SHA512

    8a6dd103cf5f95981326215c44d321033c9b4cfdd8870fedadf5d8086315805cd3834e81e09dfccdc165612a689692c7d00ae7fb653a4914a90a4d8603e033e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3fc2bbc29df0886729b06577fe9c7019

    SHA1

    e49c96e8d26af13a7f8fc436e49a2426f0b8b23c

    SHA256

    c6276ab80b4f39f82e927a915927c88b431cc4d43d26e84821b25bb86eed38f0

    SHA512

    eab3084d2b84696ce339c5fa2c5381674274ff6f1ff01922fde5ef8dab0717521a32df394a4016c4098642ae6e8e8c2101570df1c77788597533f7a0e7686f0f

  • C:\Users\Admin\AppData\Local\Temp\CabB7DC.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarB88C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b