Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    27/07/2024, 00:01

General

  • Target

    764b375d9a261aff821bbc330a617fbb_JaffaCakes118.html

  • Size

    73KB

  • MD5

    764b375d9a261aff821bbc330a617fbb

  • SHA1

    ccbcc7f6b2fec74c4e10ba9a6c2fc798f7fd13c5

  • SHA256

    a979cfb0833447349077e10f4089b01918612d5bb755a0ed3ae4c721c86fc3f2

  • SHA512

    74ceb8bfc12e7f08a1643be3646fd2134350592eb6142cf2ff88ba23ca407a96047b2cdf59924474679ec348a4eb5ebb72847347c33d9ccb0abfcbd44e8bdeeb

  • SSDEEP

    1536:FW67ECiOzsub5oeS5JrZ5W3NVXHc4eI3k05:q0Mz6kK

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\764b375d9a261aff821bbc330a617fbb_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2416
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2416 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1624

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1a0e48578442475a0874ab2ee0afd408

    SHA1

    e883db34eb780e4209f151c33502120e3773c3b3

    SHA256

    2879241405ea46e4ebed0d8ceb5a80fe6201b0a6e445ac58b7c9cb29454c20ca

    SHA512

    18d96126b5e70389418cd118a0c206a4ca4f8a5d1c9d2f72ed16766e5a3eada7bac675e32ed152b7fef254676aff8920af402642c8a688e4a106f230f45b7ac7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    34bbdf2db1bb2989a9c6836c6ca1778a

    SHA1

    d8106343e76d53e3abbebab3a032ef8e153277e7

    SHA256

    0f9f30f7d6d732374d5031c5907a374867c8aa16e699dcd6d22de6c353169a53

    SHA512

    ed898abbeb5c0ad18d2ac3070ed7857cd565b1ca8ce1744abbc90cf8bc94035c9cf8396cf7ff989d67c257d2c60f74a33a349397aa9ce5962cfdb69101fd156c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    733af0f4fa5c50046bf1a1aa530dac91

    SHA1

    129a3396c646a0447e3cfb1789fadccccb70d683

    SHA256

    7f51a7305db8a09c73de138647827a9819be64fdf638f0abd9bd0e7bf2f0b36c

    SHA512

    fa5ec6b3705d738e3791b381443888b307b9872604e4914df1af539e856f133abe29eb93a44a8aca5364dcfd7c9ea9f5addebd2b7702d249b51f0df64f2c902d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d77e8562a9149b0dd5c2282ba1fbd4ea

    SHA1

    9c90bb53d41f030235c4fe669444512cdc113e31

    SHA256

    dab0ad4fa67fa194fbd05b5b4a2073e6a545ec9f9c3feb4595e44e4f56f9d23e

    SHA512

    fef3205ee195cc588d8d27504802a9645b8bf47992b16f7156d4973abc06597cb1d780beb484b5141e774d4f5b56e18348b0ec5e9e9da9ddeae70a17506c189d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c19e2943cb93a698ce8f2999ca89b9b9

    SHA1

    434028971483ca14fb4a47020b92bd77f2ddbac6

    SHA256

    79fc7ad4e33fc131b43a93648bcd6a6eea44593561be696fb61c8ce0d3bee73b

    SHA512

    7ade3ddc4fb08d7aa9d6f1befc893ceae9290eba74d8746c3d48dbc04224d8c951075167b0249c1caf3f418dfcf56d5edbd90a6b9d41e8772a3836ba309e66c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    616f66c2fbb0f226d9cc2bf9d19cbbe6

    SHA1

    a2fc6b98b1978f5a92f01c2536fbb59f2ecf3f24

    SHA256

    8b8be80db9cb181be5b4635f4e4cf3aa71c508e89021039b847db54a0e202903

    SHA512

    c306b9951d61193e30ecf35ab50f0dc50ed7521b9d45194fbd3404e4566c9689563aa2ad5904f892f320db72f79bf68b296ae08756d2fac2f23bd87bb38886ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    969aa7523b26e2228eeb9a36d7b924f7

    SHA1

    b4c9cf60a853deee91d430c0eeae948e25dc4e86

    SHA256

    85384d19c974147a1816f80961941d11b20392527e4ec13294af1a9491f00a68

    SHA512

    276be5cf23fb23c6c6cd8c86c6d28359f3601388a296ea11cea0d32b8ab7e9135dbcdbb9f9395786f239f5399488ac82b2414b9f79a512275ca1abc445517339

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ac24f5c5370ab9e148fe2b9f2309eea

    SHA1

    6c3468cb07e852a195c3762f9d7a33340fba1362

    SHA256

    f1ef12d8f0fe70947767ab4a9bd4b18b7e0c3fe0ae876bdca0303bca185d856e

    SHA512

    7d0fbacdfdd9f17f841c5aa9ceb73dcdf8fe2225ae9baa2253f03ce45a68e3ba9eaa41c59813efb6b3cefb8b9bb35a043d7ed07863245dfbcbc0bab03176bb47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc95779716d986943d5a9bc37476eb6f

    SHA1

    f29976e685c556711ce5adafdb43d79d7fef7b37

    SHA256

    0c65c242a71ef108a75775c41ed25b651e60269dd01e456af41579fecc6f6430

    SHA512

    a431549f540901daaf5d89120d90c81099bf53510cdc0c366c2d006ea43e23aec0aa2911a642ffc639a25a2da8e42377dcb2096a7bea8bc8818afa8aa33bfb11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c65377dedbab0a6cb9e549d8b2fdf36e

    SHA1

    b18d2886fe8ac7aecbf6937d404722664988f7a2

    SHA256

    5fcb395a78419b19d8cba420a2a401f394a35d783d3d1ecb73733cd25f31c335

    SHA512

    5c2d1af77cac81327354e94bcaed25ea10771b75d9437b24021c6c833f9ceef5735a41b769b88e5190d8607a4f5085b40d0584693c24c66141966b78913cf6d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    890b88daa4ccd1fb6e8d756017df9302

    SHA1

    d3922a5d49a87afb360469f5e0d5c94282cb26e8

    SHA256

    de015e3b29fdbb9c96661b4ec17b3345dd3d37394d732741499910f7d4f15dcc

    SHA512

    c1edd76ac0ef1895fa1170ac10dceb3c8ee01231e141f02012ed50c2a366d7e0c1ceddccfb6404be8604da7b0a0ba0eea43befaf22fa737567959bf7c3dc4f30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cb61254ea73a51be643f1730afa6f46b

    SHA1

    396c46b2e7d10963debd3d6c52391b37660bcef1

    SHA256

    4118db81c6977c0c751726e97cc59be05de9b21e7cf49556f092a59a2f9c966c

    SHA512

    ce90aa207699a4aaae2cf9b4cafdb31112362b32438aaa878552a43f54550b0a6bc6c64f01739fb7336b8c1c7c36e3acdf38a9d943a45c4408c65496253fa510

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4f6d35eb35a413f78a5535a0fdb91e7f

    SHA1

    76a85fac9dc7d67758ea10eb2f1c01b8072b1a9e

    SHA256

    ba908b6486c338af671080ccc97c780c664cfe1b1146af24c25ced2ea43cdf11

    SHA512

    eef5d722000e86a55dba88c12342a10bb05d92588576ce696c5da5583671556488fd26d9b857d5de9d03c2f8cbae1f794456c53fa69fd287a4bb2c044eff72ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a48d884ce251c606e61908777ba188ab

    SHA1

    2a560ac3a4150a25a5909819c96a9f6a6459bf10

    SHA256

    24394fa4a95094801373d31fbe25de632107206b78ee70afbaa1db62fd2c88c0

    SHA512

    b75103cf67ed6aca00777a7891fc12879b66594251154d278358cd01c6d05971bbad3658bc03bed43e097f0d96409ff7d872a8c43f80cd030c8df42fc189d54a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a45332a0bbfc33f682b16442413f932

    SHA1

    19fdb101feea6473d0fd6a02943f777f7a7a7a02

    SHA256

    01ea402553a8b468b1e95607ebce54f06c7d49b984f5c191d3271681499f1e6f

    SHA512

    667b22ed93ec50afd345326fc18468f47b93eaf3587613a623816c01fdd2316678cc03026f88369b860b2d03c776a33ca7c97481d4ee0359c4c5c0b06598ab01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    54098a527e088cb683889095a5db9766

    SHA1

    bf4a15d8db55b53d24e776dbf8bef4610d72c0a6

    SHA256

    22fb32ca377746fa8177ce1c00cb53ed35dc4346b3d2e93a23512faae8d4bd07

    SHA512

    d32cabebf2a0c118174824209b62180c0a594daccce335bf426a10ea6d3bf128da7eaddfd11736b32e0574755321c618e308a6df9cdc428ab4c9a835774395c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44d2df215578cecc86380170d06313a8

    SHA1

    d1bd9a492bed029b368fe5d82be8dbea518322b3

    SHA256

    1c9130778dbd6a3d8c15f892e6c788790b649e506d79e0e2c4ef93388cc263af

    SHA512

    f577764a140f2cd92506d554825f953963d868a36137b8ce75d8e20c5164d0112bee75a40b9b9ec817355e3d40b28ac264a4f32eacb9bc2bb63c326b0942a8f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f63e964052f53bc49be984dacde7a0b8

    SHA1

    d23d305cdfe3f48471adba465d156a1123533ed3

    SHA256

    25fe4b29f775d98e303d99e0d07fdfc57b75b8fc0eea2caa7108aaf887dadfa7

    SHA512

    a447901604f919edb23f0757d9a57abdc1568de38809b41bbc5ab19624320aed06ccb31a64b371091c560b5e82a8a212af5d9c01341f9f42263542343eef142e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    912d76449ad3e3d72d0ca3dfbc984ae4

    SHA1

    16dfc9df651e1ec2896e83302f81466905685e0e

    SHA256

    ce4267703ea5a9daeae978caaa8bf0b188fed69263fb4bb9fd9657dbffaebc67

    SHA512

    0561ee69af1032414efb517e186e697bdfca4277e8bc3816332d69baa9c9ac067585745e80c589ef7569d4766a720f71a54a9b5217cb177e3dc6c77e2712db82

  • C:\Users\Admin\AppData\Local\Temp\CabF940.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF962.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b