Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    68s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    12/08/2024, 02:30

General

  • Target

    8cf61efe80eba85d9e034b09665bdd9b_JaffaCakes118.html

  • Size

    17KB

  • MD5

    8cf61efe80eba85d9e034b09665bdd9b

  • SHA1

    076719698695946fcdd393e627beaafbb70a5fd3

  • SHA256

    b166ecb75efa3b7aef2eeff9a8864e24f1ea2a48b138d34fdc300f8e9ef1523d

  • SHA512

    0585bebb679b29c3759ebafbb57b34ca44f29a7d333d9223f95a04147ef7f50d02113bc3efb6c3e7cd7dbb06ad5c5a474bb1fcc97764e007339b4f0b330d4a7a

  • SSDEEP

    192:1IquEr0u6jv5MDwHjp9rR86iESQ1EI5HTBg0RAMfOA6lsVtKNd8xKRy98NL4Rr+r:1IN5RFvTGjsETZ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8cf61efe80eba85d9e034b09665bdd9b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2164
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2164 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2592

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7981f6a45fc092bcfaeb78e61298b5d8

    SHA1

    db26d67222ab4d3dcfd2a5a128794a9fce943fb6

    SHA256

    31c11e1f22d0b4502abb1e60a5118803a54b019ac55020f4bc08bad68091b0f8

    SHA512

    ccefe578545ef4ef32cd8b07ae9feea5ae6d569346f7feb2ba61748f29e5af6a27b7d6da0e2e5aabd6caf05c120476b2c5e7ac37f47c64fd6194f52db2536285

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    540597ee9699cf46c64e8ed195a0e729

    SHA1

    2e68fca795b54864f4f79801c5d89c109e42e30d

    SHA256

    9f4930b2c471f999697c87818fb31c3cbeae53632a4b9aade0f5839ef75fdfb7

    SHA512

    26f20a56b1838219de9af719b43c71e79aa014fb7cc5c0d9bd457f1071fd8f4e15469c404a8dfd525692f788a253026009de3cb8e6893098ee86d95af19646d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89e57166185445f2d941a49b6976d695

    SHA1

    ddc251734ccc624f7a27a6ad6984dbac07bd7caa

    SHA256

    d140eaa15614e33c16e8564018f8eb2bd6721f1b42633e54d8fbe3d4d5b79fbc

    SHA512

    4cf79bd751a4761604d50a45530eb7107be7456f49bba49aee0f039dd952891b78bb62561fead55d6fe78ef27a40785c92ec0367a13173a1a013c64c21f08c62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aebdd0f5b775d09a92cbbba80e2f3eec

    SHA1

    dba6681eb5838eb88def8eff8357eb3dbb5be01e

    SHA256

    96233bc112383c2f794988caffa97031f1d7ff496e22b0a7c412fea0bc2a2399

    SHA512

    332d159a7f093642aae3e836ff5a5f4bea6bbfe7ce5e3a66f8e67839434972762f8789b51d3779bb94aea91534e6bca45ce92aed03df2d9417314ef9db1a87fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8190696160da82c186690fd0d9cc931c

    SHA1

    a0d538b5997d4a813d33801712834258675c3ed4

    SHA256

    eda44dc84cf9943be58165ed77c7f0fd47dec85a457255bffae8113e2c7c589e

    SHA512

    149242729fe6840ee67a48b53fa1e4f8891dcfa5c68aacc4029a3d78a8e0cfef26797a3d55f4c80f7540774fc8cda18ae7117434147ea6146b77ab190b795503

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    13f0681e1b451a6755e620d3ce5f46ba

    SHA1

    5a3660a0e34fb6a676bacaf9196331a03aac9ed2

    SHA256

    d1b9f110093c4c0f8f51a834dd1f0ab5d0d9fc14d44b26abe6261b4365e99401

    SHA512

    8f15607fc379bbca4396255b28e9ba4d1b1cf2a072a395aeb1a94ef6562b00300bf660cf64d73c4346714ec551d9337b7e7ef58446744270e956137d60724707

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ce49c3abd761dfb016add7e6c0915bf

    SHA1

    e9c02f157d7ffa64a3d2e30295d9347a340d90b4

    SHA256

    e35475aae45e2044289921a0286796c5ba87bee76dcc6002ea4f8430c5d8b9dc

    SHA512

    e4e971ccf3b6154d51a96ae8ae2c091c4038194f04d2fb5210b5d28afb4cdda9fcc572a94eb3eacba2c441194eac2e026a740edfac3e2a572a9d0221c2c0c79a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a108e037da497971d7967928254bff12

    SHA1

    d56ab8a8b37cec846cbf28eb4181e4460a281d27

    SHA256

    f5634dc27cf69cfd6cbf21a92da5be907e775e4aafe2ad60f14d95100cacf481

    SHA512

    3c9a4678e54a68841bc8d977d9e5f4739a4a887b3db9c2428b16b0f6bf742e58ced09ddd25cd4faa3376ef6f548bf7dfc70a1b8ee8b3df7e120286cea81c4845

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f71adb801dbab2501231bcee771cf59

    SHA1

    6f45e2c1990f8acc622e25126a6cd9904ee73ce4

    SHA256

    84b4d489cccf1fcbbc620aea0834c81efd41445ca3c1c459682825e645240d26

    SHA512

    aa96b7eaa17a293252214ef13f3c2d54e837b5eb84542e43ef9052d1bb5c5da5bad7541eb3f6334ed412cab77112d9e465edafa82e31f29f52d30d98b41c1193

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    492feb8e6b6db158bda3321c5723792d

    SHA1

    5ba71c6bd5f374d53768fa076fa9588159f7bb5b

    SHA256

    61888602fdfd7311b2cc6bd90082b95834292c5934e47cd08efdf238652ba1bd

    SHA512

    eb230d0115cb2e41537aef8f56807343a6c82211508385763ad8ef04cee74e90c5a7d27c5d72a79d8e684336fb922545030d7bb4f0430896a8f1f1f2f211fe52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d02e26b2183dff00a4aa9df2171b1b6e

    SHA1

    21e22b68e7fbcad5fb5faf70d1067c55d089a8a2

    SHA256

    d35930addedd3c76ef8b607c80a032bd0794d94f366f6053b3cfac3920cd6ce9

    SHA512

    01e4108f3570815ea29badc9bd8af5f12c7b98e909d9d0ce960ccdb5cc5c83c4b913b225d86bc60e304924441a2b19096530cb315f39b0a571d80c86c14dcbdc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c0b1f2d830080f339fb2163f2c46fce7

    SHA1

    eca8e9a5cd7de5826239893fb2d0c7dd3ba97bef

    SHA256

    5c48b2e738b31459bc4cd1e15e5c12d522e748355009a93d8725e2128982e1d5

    SHA512

    5d45668f7c13400583b25d3b429d8c45ff935522b0338682b8110f1c1ca95ceff91cf8610c465a7b22603baa70f9b38d3e6192fe60cd11e0cdd974a7ad349f75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0bf7e728796a5de0a5c1e81bb73c140b

    SHA1

    41ad58c4bc6dc6d0bbeea64b81d1a147e0cb2031

    SHA256

    84e55d38e216cd422fe7445bcd749c48a4dadaf44269623d1afff80e7c8124d4

    SHA512

    ca62475a660a40a09974fdae237546218d51c19dff633bbb9b7fe3c5438411c0635505d35a106bda90d1414f6261fc3d4e50b46f042868bbb91e243d664dd32a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eba5e4b9b1b6b7de21dc410be2995a79

    SHA1

    b99207061a30e891369ab3ddaba08729296dc54e

    SHA256

    0ebef846a95376e9592edf8ed6d6c5f435b0665e8128199aadf3e63eb46bd8e9

    SHA512

    f92285b227dd7a34e3f93b675b723b9812a1c3f6a6bb05a11779c1be6849b379125218b1dd4fbe93f7017ab9b20a3e3f49fdd2869b7edb69c3320718987afb57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d436e502de3ab3a74f3381381964b362

    SHA1

    1a419a594872aec91a68ec411500b866ab635447

    SHA256

    8d323344000a5a1b632215a92b6a7152ec61dbad8e4811c0acf744d7b4906c47

    SHA512

    db5fc1613a35b9b46145a75e405530723f1015a8cf6e4c1a3d675ebf4f6e474fbda4b99b41b9552f0b87d5154942e89ecc18f7564d2d475e1177fd8f49bfbefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b12152a19f780bbb182bb916a868e011

    SHA1

    996149504ce51a94167831adb05aff02faf3aa60

    SHA256

    9a0b64ece11b17c2eb8cac3961a1bcf1022b52fc5a476cbfebc0ec5c476b4940

    SHA512

    c6a72c92e8ead39cedec27a00bbbb4073daac557334a13c1f0b11d9d0e5daf2e212fbc6bfb3b5d2467e805642f817251aea9a5e302953e2b4a82d0cc64c59405

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8e0abd6970be3dc305e956bc9bbe552c

    SHA1

    c1883a2c3a6153396174a660def22c80d71adab2

    SHA256

    6c9622871a12c4a019784ac5dc3b1123812bc6ee4027e4849dbbab4e8f17c1b8

    SHA512

    9b98f1d1fa45cf526688dd06a9e5e9a0bd01499b632e316d2b93a61b40ca2a6ed6ce06edb9d26d700280ac927909e41d852ced2189de44e8a8a293a5f62e7d9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    972fc7fc6f8b88afab79406e69f47943

    SHA1

    d289ef2270d97566670697f517c953abe88dc6f9

    SHA256

    c15db561c8c7a09bf763458997503b336791c5eb1bd516c631abdbdb3e4d2053

    SHA512

    da73d3a96dd236fa1f8152c72fbf97c8847951d7e1984361236162c4d112d07f871225abc9bd4e34bb47bef7d43b355e4f4307663b7ccd8c58d0bed6dc42953e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    880d62cb23e1fe331c4a8c095b5df069

    SHA1

    ff16618a16f93b2cd970369072cdfd84c51bbd00

    SHA256

    4572ab40286652438864781620e2c35446e5a606535c1df71ecf89942237a709

    SHA512

    4c7e3ad6076d39469fdff1cd8653cd9cd142903d9195cd391c0a49eadf7a0067e059a235d0b11aa1575a124b548127a82d3180b1b436d83b64eea0542d2c27b4

  • C:\Users\Admin\AppData\Local\Temp\Cab820E.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar8231.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b