Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    12/08/2024, 00:22

General

  • Target

    8c95bcc25bd7755ab4ce8998c6a96aa3_JaffaCakes118.html

  • Size

    6KB

  • MD5

    8c95bcc25bd7755ab4ce8998c6a96aa3

  • SHA1

    11dccf31bb8fdd4bf1d783a255c836fb5dc091b6

  • SHA256

    92f062e2f95a1996e755f2d0359502656c850d95314b9851c0577d4b285af566

  • SHA512

    3de1c1279ce2a3e0a409274b8561c22f46a658657f988cc2654c2aeacfe7f46d17473ed27900c0a747fb2c629a257f164928dc31542320afe6edc7da11c78f41

  • SSDEEP

    96:uzVs+ux73YLLY1k9o84d12ef7CSTUa6o6M6dcEZ7ru7f:csz73YAYS/Kor0b76f

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8c95bcc25bd7755ab4ce8998c6a96aa3_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:400
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:400 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2860

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    711eb14831dca8e8c93b8bd21286fbec

    SHA1

    dfad62cea0bc686e181e4a692479e0e0ea0f7ff5

    SHA256

    7f02603fe0a98477ecc90cd0d31f8d5602284154ea256891862d47d3f3f15b1d

    SHA512

    495660f9070417f0457ccb893bb82171cf7d7affc25f4679fb815edbaa5619a4934d203137205f8e33e2196949db4ed10a1dea62f104643fa40547ec30768ddb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e7553757ec90651a423ca71a2ce82ff

    SHA1

    a49bb0f6b5b09c05fea262ab1382abad94c83d08

    SHA256

    8456d6c9b18b271a55ca3e1896f1f94cdfaa03ac723a223487f1f78b4d12aa00

    SHA512

    cfd34617157a85b0db2a670cfd43039a7d78c58b4492b38015a0e28a2efb56cba00d64ced9b4062503d44cc7e1071002e433cfe76629ae82f9f54c3c36182b0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db15a84f320381c52aedd692559035e3

    SHA1

    39c12bb4be86d7d060013826063a058cd8542773

    SHA256

    34cd69595ff837719abd270f41ab73321c55a95bc8afbd45c85da8e1e578f76f

    SHA512

    3c3d2ea1928c260c275e5b56e54ab064b6902b02c7b571631ebf80381ae650b0ed46a0ffcad22a4e595caefe8c0f22291c9b31d11099c5693eb1a07102d9d795

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8cc4ef6e4497dea10ed9774e822c8bdf

    SHA1

    ed8a8bf23e6d16556fddb9fe20bc0de6ed1bf230

    SHA256

    98ec7e338082bd2576ed4f863e017bc372a4f61f64a76b2b7a226abd9367eaad

    SHA512

    bde14f4d5b3f8cae2d39adfdf0c862f4dee79cb9bee0b70f96a57ec787fb2b406a468512b1bf2754e1dfc7e08b482a691ff9a6f5b10ad1155fe8b51f8b1e3a17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e8cc8cc3d3e78484fe603a37d029e41

    SHA1

    a851c0e9f0bc331672a35a818ce9d78798d27d24

    SHA256

    bab052f8928224d2cb8a75ab4d35073427d762f679dba81edb655de225234184

    SHA512

    4d9282b2c3223785b673646267c69bf0e7009034ed3007c15332b083e5ce740421a090ccb3d1e42c7c374fafac7ebd56bb113773482e7552a0eeab4845b1dd74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c315c0cf0886ad2cdde923e6f93dc0fe

    SHA1

    a4a17f03cb361c3089214438028adef885aaf068

    SHA256

    8e54da3f5ab2e60eae64991768402eaa9ee7372c45a9560a0783539bb50d0ea2

    SHA512

    767541c9c142ea654e058903a44988f05240a55153ab10ec727baceda9fc839aa7ae0d3f12a5314c14f7961b03de0496f1903f807bed939d2e88a430fc83e5ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f34b6ebb1692445e567343ecfae60bc7

    SHA1

    61a66ddcf790cea0d99ee1be020ee9dcca3d8a70

    SHA256

    eac4a8b6a8e90167ba3f1ce354abd623fc693844b2c1d6e8cf3430e452a03a6a

    SHA512

    3925143914eb57d66bc08ad52bf82a0829eff520343752821713917219eed1c9154929467e8659d46df6215d3f96623394f260c1d757276db7481f7d653fb0fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    34cf3126298d0f1b8574c157d7d8c671

    SHA1

    33c91daad249f3d2a8c480029b4eff3ed130b943

    SHA256

    9feb88cfbe870e7724e140db817462ae907895b18e107b2d4119d520b3a5d514

    SHA512

    8f62a66e19d92991afd07f449a35fb165c8d9b36d33ada4dd1d92a1c8478103b7f935faf7fb6d01d5613a6822586d8590cafb052f47bb14bcbcb005573ddb508

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    72994326fe73b8939bba0b6f84adf7df

    SHA1

    48f418ac9bdde8989c60596481ba8f125524c7f1

    SHA256

    0b5bc8abbc13a5a7cfdbbf122cdc08e711e3a69fcc8e0051ce34f408d59e5504

    SHA512

    7cb4c75dc45ca7cc54dafabac2f5c82f9ea63af36f89dc3535710af17675538fcac485ee9e74b9ff84a188fccb2ecc6937ce8fd6cdf681c89b261f9e5be5d1f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    25499c7d78c531864dab95d3025fd17e

    SHA1

    533102be7862760a579ab2574986a16c0edbff91

    SHA256

    823b328613f1fc050d44bd849b5d846a041ae303a487a8550dd84f946c1a1a19

    SHA512

    bce988b5f874413359de6987964f99151f0ebd605d65a22eb7f0ae1424ed2689e742ba0179e2684f9866c2cfda9956ee0eac2b08ed6901a17452dfd17ae77b99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    21bc46fb5491c6bbe9669174869e8542

    SHA1

    7394e2508e2c6c5d27ea53013d36b6785b3c3ec8

    SHA256

    e04a2cf18cc6a96930b79533c8b74eaffa48e81d3b19c18310be6554cf68f4ff

    SHA512

    af22f8ed2a06523b787d1076e76d370b99029d5826db29bd556acdca540febb2cdc2a145000012270be8ecd3c53911c47d518f15bd2f2598962bc448522123fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4393de91cb0964b18a8d8177b240f82d

    SHA1

    aa6e7130ea993499eefd8a4c342e0a674db757c6

    SHA256

    a476e95d0fc92e45be9e8c2f7ff07af0dc2fcc30b36bc2ee99120d67a2282632

    SHA512

    d3342142d26ac68485e1dddc6eece814ef9bb19779f9f80bd8c30bab9bc42df64de09a34c74d1843e8d88b4ca3bdeef1ed696e4d34677823078e3ff1a3e22c39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    58eb9894ec249073d87ec19cf88040cc

    SHA1

    db2a86b1f41b273cebee2ae39eca37c0e52ea4b7

    SHA256

    9bfa337ce2a0b0242dbaeb904c40fb4d448483ef059b9cf991b4baeffaf7f4cb

    SHA512

    b07eafc96600b96080c1eb6b685aa0cc2bfcbb9b57cac8c7e9e88cc572aa571ff75487d4ed657f8eb3f6452520ef39d64768f3ae083ce803a904d74d3ec51314

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ef02eab09e36de1298dd64f7e7e0fb2e

    SHA1

    b7f05b828bf23100b0f6b3f46731f349b3f95a23

    SHA256

    3a6e2e8e18d849f43f5283a30cda988bc9e2bf30679cc3515d91e2c194aa7fac

    SHA512

    acf1f71eb28583af4c9054e102241fb1c907d69dc9b73561eeb6be58448a076b134ead4a8ce3797cced2e0f42f74972e102940f0f4d3cdbebfdcf2311dd454bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb83b3b747a1dc62324287bc47a36b38

    SHA1

    69e5fd63b817ed9e214af4816454b7f8b29ddb4e

    SHA256

    78acb026bd0efd8f3516d254cb34bed3a93e4fcecda9543e8cde387e7b664f01

    SHA512

    c4f6d69069bef63168a304dc5192a23596e7d46dd9c2a349afbbb15474cec8b0d3e6365ba74a6ecb7910e6e3b627a5a797064922a3ae45c620305596ef10a3e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5faa2ff72979f1d597da3dacf4c85867

    SHA1

    acf4381dedbad803778240f1589dcb220c9c71e5

    SHA256

    c73a11635a17ef0bf6b1f96a94360ba807bf665868f2fd04d7c3797d72d32e7c

    SHA512

    987fdc54ba1cbe0709302c275188a63e537ff0839bc46c5bbe70b133b1977227c4e01d2dcab198314ee583e4281a23cd7cf482fd017b16352d0a71e7b65a4bba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e49ed2ea8e28f25f2a83c138c74ffe6e

    SHA1

    a0f21de5d47f244d2072e1402a408e1f5a8c76fe

    SHA256

    d81f9146737b37c4328b2871bfb1191037e18f57b63062677b2ef492746c1d0c

    SHA512

    1767c9fffac6dd32b039edd3400123d3e7eaf3b14c940021ca672249b9c6ce8e88d7007c12c5b0b94651f11ba90b466558a910beba2b1199836a8869b1127997

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70af3ec11324adf2f692ec92f04d5bd3

    SHA1

    bde93b3656a24e3069b29727db98fbf8583b44e9

    SHA256

    5809f4c7a60bf53dfa86fe94d7402ca92d7f06a61005c24646fc52a6e66f065b

    SHA512

    dda465a36883860a8995111425c9cbe8c0dfbb726ae5b102234f70863bc640f912a5b069b50ee708a8ddd7aab620174d19885d9aae626afb0c1558177abc20fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd984545c636456689748983c3c050c1

    SHA1

    d31c15b2f0e75c3f33e42a5c8dfff5ffa56e7b96

    SHA256

    5dfe816588ec923711590f1d755db6a7087b43934dd823a51f2de0966fc70d30

    SHA512

    879f0a70e1c6ad9ffb6ac4ee68e08db46547659257e7d8de25ff1f010e4ce30fee971a8cca07f6110a881c7d41c7774bd33dbd61a75c347cb88f89e527584efa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c07dde15afec16e5511230a607744b7c

    SHA1

    72292e2262a71ca26971819b7e5e9b3b9ad60bed

    SHA256

    20f725f16f0d92dccb0b926f1546f95c6364da9d5695a9795836a2f157bea0f2

    SHA512

    005859cb938cb4dba0ed335ea3174bb646823c17441da4c251c758b473f45ea42e098d9e10023c44c02e42532c06050ca7c8fe5faebebc6113e869199902d48f

  • C:\Users\Admin\AppData\Local\Temp\CabE5CF.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE5F1.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b