Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    02/08/2024, 05:17

General

  • Target

    832c9596a9c07714c06646d89a83c4b2_JaffaCakes118.html

  • Size

    133KB

  • MD5

    832c9596a9c07714c06646d89a83c4b2

  • SHA1

    47942f1b2e6e36a90f316a06bb0a0bc0bf5420bc

  • SHA256

    ebe1f4d32cf7626c103805f9eb245d7cb1803c8bed3b4a6c758dcea0171a31f4

  • SHA512

    de3ac23d43305b7dbdf5bd4a2298ec8eadf25990e49ea91403bc66a8172721bd4ea372e034435005c957c4b2bd39b6bbe87b4f9b355a83123a8110d701247456

  • SSDEEP

    1536:pbMjw2fMk1D3O9Pj2fckAoHAJxNL3RROuuwcZwjPT9p:sRgrLbuwp

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\832c9596a9c07714c06646d89a83c4b2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1368
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1368 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2928

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5fba144445c4076733c19a914a01d800

    SHA1

    c47b58ca31b5b7b9ffd85ca635aaf6dc37e9e52b

    SHA256

    3767e84b22ddcc6c17b96ac47cb1438ee5e84758c67d3a51c57733ccbf519db3

    SHA512

    f187cd749261c59c18767b51cc71ff7133d08b92d7e53949f42948ad3b486838682d76ad2a3efa4bb365bf7297df46abb42610f61c79f314eade8fbc15b9b2f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e422143396e3fb82082ad3ddfcdf190

    SHA1

    a2df9e8c0af21cda291397508c569f4fd9d158e9

    SHA256

    7c92f84d98f4cbb68b50da37e76da8fd0d84530638158f13740a138dcd6a46e0

    SHA512

    364650c7d364539726b2de44df444a96f1e600d88a116fb4ccf570dfec8886d7a9fb1c6d5caf5dbaf2fd3121f7e542550f240c8adcac7fd7041a95dd7e13e496

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6106d8bd7b3400ad3ba048308861fd62

    SHA1

    227a4d3cb6d69c729edc733ce5e518462b418684

    SHA256

    93d9f5ba96351a6a923fc87fb0b52bd33d4261bc09ab4356e43896ea8d7f606b

    SHA512

    d777ecd41ae260dc09dcf4dd82af98f2e66982d0eae329721f01bc43a1cad19810cda9095ecad2487c548621a783f7625c8cabe7b5840920115db07ca081fbe9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    060d5881a103c20aef32312cd7d43d78

    SHA1

    28fa6732314b1376018a6c9fea5d26a6675f1411

    SHA256

    7804f96406b20fb83149f86b021648fba0b71b10b772541ceeef0a4e29fb4852

    SHA512

    005398ef81831468662bc2ed66a96008eba3c1593a60a77bece3b4a6fa448b987ce1b0f6ce2c81520e3312a0d67b637b5b1c840e25414fd33df99ecb30b79df4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e55e8fc8f5de45fed4fde573b4874ee9

    SHA1

    89241a0dfbb552d725cb594df5c47b2c9a1ce3d2

    SHA256

    e71cd388735665b66d368e381247407fe6c835870426b4a5c12dee907ae01906

    SHA512

    4cb1816eedb7324b8f36e6c2acafa600cb93d642683a0420296663ab3d3a215ac92ee190877e450183a0199f4fc8a3bfd85498aa49b5c225b539e8bb0af4a1bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d76a65eda624b8953f82153a5d7669c

    SHA1

    3d98177ee3f87fdd0888fa1e2c056daf652e918f

    SHA256

    3a5c383ef53cd797eba727e5425a73de752c3046e1e9936bc5486ee8712c2ae2

    SHA512

    f0445011834274399c9d2338e37dfcb7418ad23d27d5f3b25d7c44370b97276f8884df79f2ed18033ac736393758297a9500665065463eb9d34763daf34e11a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7c7bb5cc9fa0a95d48f976144ac942b

    SHA1

    59646c0795d8cca54ed12d3332bdf0286fec794f

    SHA256

    a704f49eecb322c0167d0274184a113f28cc3fde1c12bcb1f49999c6726aaee4

    SHA512

    0da5581be0db060be4658982ee2f53be82313e17119a5d868255781253a5893547bd33593de9d18dbe0f535b2bc90cdb8b68f358ab0671b46ca599a3f81ae835

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    babcabd81a8b3ab47e99aeaf06b4cc71

    SHA1

    e60a22b9e2c12488ccd08a272f704c1874b5f57b

    SHA256

    b05ba507bb5f7037733f1e3cf8745c308e137c675ba13f63bb19e56c4437f65d

    SHA512

    027430855c5c479d74dd321efdd56ff133e9165079130aad5d25b1ccf875aed47cf35d67ecb6d37ddb1cca0fe3fc5c42bd96d862888ec94400b640e9b48163a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e5aa2ec0b72892d298bbd4ad6b4f4a5f

    SHA1

    7eef2fed7fc8bb8e3133da8fc547832ccfa3003f

    SHA256

    065eaa304e94644c6f5823d75c1e62d89cb4b8e7d7d554de9dbc4ed6e39a0327

    SHA512

    8be7f9cfa69e424840fbe0139847dcbf259c42666ced7dc8365d3463c5ae575145edebcde06e3641cf3bb6723ed0d47cca7f971b6a6863e371102149d59968b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37c0f2d708f7071e9b002d9e8b183cf0

    SHA1

    10f4e58e67c64cc99913e37b53eeca38c48854f4

    SHA256

    61df7e900fe278c986ac13eb0fc274e75c22e9e8f5110f3669f890758f6f4bf7

    SHA512

    79453b198a5e79325047799a52f5c4a6c8787d59851c9a4cb9721bc0a4421ffb7bf5fa01e1af6cb9104287eed00ff2793d4fa49afd6896cf1d7e73d8cf741c20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    824296c5ee803c2c8b9775c56aeff770

    SHA1

    043873d4a3e24a9d89ebf15034f539a5ce0b32e0

    SHA256

    7f40c3061dbcec020a6c099208530514f3c40063d1ca0dd0855af8265baa1bf9

    SHA512

    9983164f5c45665815f590b2ccf99f65f0aa1ee127195108c91a5c6d37d8543ebc2402e3584fab14b24c242516699417b54ca77a8d7353788820d749bb0269b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7050b413c84cf93726bd40a93304a73

    SHA1

    a6ccd5549b662d8c5f915436d0848da6fff14c39

    SHA256

    74c0e4091d3fc4e296d699be91b42c7ea79babdea9cc98b6db65b0c566ccdd11

    SHA512

    e40d9e15faf42edb5a92df4dfcc32eb01491e7c8f3669f3319ac8accdf9a6e376c7d0fa97bb5b15d92383ada88b8dc218be3f4e26eb858b11f610c10261c443e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9d26d4a7c287987e3db6243439ba54fa

    SHA1

    975b5528f74a34e7b77a13d4bf2c603bda81b171

    SHA256

    bd355e12e4e05830c1cec1c18a4d118f06f8e5e76c27b78bf5a6d434cf82c098

    SHA512

    ab9460b0ad5a816118210008b80be87ad8698f491f64c4a4fb5acfb10146ee8011cd9d1fe465b787a5eeb88328ffd401ccc5287ea92db09a18f509e8bf55152c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5d7cecaa69b235a75764e34db15b5bb

    SHA1

    afaff111734e0203449ad306538f5f702ad143a8

    SHA256

    715448abecbc5584552b241176137e2cec2e28e96b9868191b9bc3881177dba3

    SHA512

    a6f48154dfea11df40b08f1a2824bbdb8372ac83b40ee5bcc1e7caac0c18869798f236a14c1dc41090e7cc434713f03018f25e1a9d1bc3b2821bee6eef14d7b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1592bb63d48f3eedf1ad9333e1e39db6

    SHA1

    9e5c9e09f93912315f63921ba6105abdc303c439

    SHA256

    5b5e51df0df15ab83497b8ce01e7191b8f4ad3dbd64c84e32b61fd2b1b9cdfd0

    SHA512

    20ae6997d3a8133bfb37868467b34d78a5538adfd3e631f10932e8bc49f2d251ab69da926efeefb1a5326c247d9736b95bb54e0be1172dc2b389ba87af47bcbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4571d39ab0243b3da862bf2f312264fb

    SHA1

    323420d69b2fcd870936028f8d2b14c218d33080

    SHA256

    5ec3bb123bcfe533f4aaa07298aed63d24c7202c1f99f6fcc88c9e16e2dc41af

    SHA512

    8f90ebffe77c0548550c412a66bfb6dded5ffdec78999b4adc1eadcedbf4de5912474f73edcb1d15a0375b7915844866955b56c0bc1496aa65edca5d4453a023

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ea74d461e37e77803b8f484746e5499

    SHA1

    fb387a9977aed2e7c31c1e51b2ccdc62fe6bbb64

    SHA256

    d19a58a40acf505f9dc719ef8adaa3865d5bc1d643219f4cc10a76a9034bd5bb

    SHA512

    56dd1918790d1bf3665e72b941381b8887c2450712fe4b09d38941f8981cde4a6236e242c6ce7adeee37847c3803a591d2525a2bed5c61d6af33af4f03659d42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b3944da97626e26f74be0febd802385

    SHA1

    4941273e9760c8d22bf13c4804b88374e77f1d1b

    SHA256

    8166f4887b3fa7f86a07ec68036b3306676b1dd10aa99391e54f581822cc44fa

    SHA512

    7dd7f4292fcdf52832703f3599b7708b27bd3a0d1431f9bdc3d411e527ec1750449ba1cb35c4328967af9e743a0dd3a8432652fa1222d4c626c6aff67867182a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3b33463d98f756805588ab646bd8f91

    SHA1

    a5ec499151510feae12f712c45175fcca0960d3f

    SHA256

    2a8390b5239075032968cc3174556e2f1cfe63b0f4c86993b501d32d52d01bbd

    SHA512

    4e9df198fc657a2aca38ad4a061ba6a82305c5c4bf906dbefad3709bafd3f4d3b32c82c3ce8d0b1c7a25038809bb76e2e63d859f44620a19ce8c533071ba59a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6cb4f955f6a856866f23d8280bae1e9c

    SHA1

    ef4d4d30db438a7bea9adab3d00d11a9f0e6f743

    SHA256

    caa833e154d5978e808a1aa6708a7920ac61afa81174dd10909999857c19f299

    SHA512

    ab9304e4b9c56498bf11000824a5bdd3dc6fc300eb9dbf8a9906f28d108ba58600ecba99b020e21f1d99231b78cf9a873f8e1d3b260b3debb1b74d315553e817

  • C:\Users\Admin\AppData\Local\Temp\Cab19F9.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar19FA.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b