Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    12/08/2024, 03:39

General

  • Target

    8d2a3a059c2e1cc0cb2bec408733c7dc_JaffaCakes118.html

  • Size

    105B

  • MD5

    8d2a3a059c2e1cc0cb2bec408733c7dc

  • SHA1

    792b4d4584ff62cddd2c772bfc3319cc6ff92d00

  • SHA256

    2bfabed46a006e38a9fcf3f1a79dd4839fff3c2bb8eca4e010910a60d490bf92

  • SHA512

    eb6b9ca8a70e6f4f8f54749c02d3f1da66e043e7ef8ee15e54016fc7bd7c87d8bf3a35b64253baebb2b6cad54c8e69a31f44c411a34f37126f7027033cdb4355

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8d2a3a059c2e1cc0cb2bec408733c7dc_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2972
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2972 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:836

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    013b44c916c1e4481d1e8d1ffa25bad3

    SHA1

    48adb6db5caee2846464662149de72784ef3ef1e

    SHA256

    ed2d5e4163f5035bac41de8ab002a27d1fdf36ec002feb4492ff06daccc544a7

    SHA512

    7177f1b8092b17b6f510f3fdaa0332849291a2c3a8a54f98558b44266af37ac5b41b5771c465c6dbaf90ff388f15f188b4ee674cabb307e86ea9c230d791f8b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a744acbd0439a763e7b3d6b7c9a5fec

    SHA1

    547bf6ecdf55ecbd05a91e25cc9c8ad3e9f98852

    SHA256

    4582a491f9c1c18658843c60ed85cf5b3ed98d83bf11276ac8368a8b2d8d9a59

    SHA512

    4628ad8666d58edf18b6bec5b7c5cabc452ba0662db768da591908062472a36a366824e0e8033a54913da7f7cf4cf2672edd7f7f65a190ff13ac11ca921d7bbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    72c33d8ab1cad0afdc6f5c1b50bc517b

    SHA1

    0211656c1d07c96d492db2b82e12aa2d87fd6d35

    SHA256

    a96ba53c3640b0a628fe666a2cbc4debbe846326f5768129cd1a6eb52c4c5c22

    SHA512

    1bb48b74976e3eee380f8a90d30700804cbc7b639985ea2ddb4ac5cf79076c4a8b67b65c9bfacce423468821725e4680c628b264d21ce832a72ee4a74d066e97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5fbd544e74bc2735fdf3d7290d7249e6

    SHA1

    bbed56017e1118bab3790909fabed087c78c6a45

    SHA256

    8cc95c45e5aa0ddab0eac8ccc38ba9f02d6a77539b9bc2aefe5fc877a2963a8e

    SHA512

    f1c7532878fd423810bf696d5951d0a56f0ad2e97e57c5cfd733616de9cbed47e9efe22c8eb6884102754b4b95b39f2c64b4ab916d64b15113a3e01918db91d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c206ad04e3d7aabf10ab0c5525ccbde

    SHA1

    b1e68025b6f5fd3f379e595f5373773d42d94328

    SHA256

    ad3c2b0f8384551dbe3dcc7b2dc1aec4d57e0e63316c1cfd9101cb770cc952d8

    SHA512

    ea5455b9a4f8c7a5e276f98e67146cd21d251520110965182c5371cb9f13a1370f857a5c9123a8ceefe06b1cfe3e9fd0c29e6a3ce7a257bf5f669d039b94b12c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3509f5f7b2b768eb5eb02135a3127ad2

    SHA1

    2ada07308018a70e4868b09fb3532c38497a52f8

    SHA256

    6972a588eecc008aecade7cd4cc246878aaefda1c14d37a6e977b57a44cd87e5

    SHA512

    179f98001930ca09347e14a27aa5337fa5883729237e851c3f31714cec5d7f4ba26a7369cb8f7fa030cc2264d9189419df9e740af95fbe04832fbec8a92dcd00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9915b3e60a11295d4ef3ffb73ed560fd

    SHA1

    8cd18159d63f8c1569716835ec8ac6ca9f033eec

    SHA256

    e5a5d843bf11c7c73bcbc717c65af669d8385e224846fb2761e5f2768285739a

    SHA512

    6576bf86c0df9c56777fe875e4d15f1a32140458e83a985eb8d67f6a2e41bb762b3a3bf9fc7de5d5f7632f01314313a809ee38638f04824ede9a347bc2a0b756

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3206e4cc84c6023828ca5954b0295187

    SHA1

    e02d5d9bd1eebe6639ddad7829eb8d9a55d1d738

    SHA256

    dccb9d793d36acb4a303a9bb51acd1700b8f49f9a827dddf5c9fa87ed77ba3d5

    SHA512

    4ac22a7b3e4b38b471935869480c024809c81382bd32488d2feb06dd8a9f7b22a51f529d06bed41602356f3c9dbc9351b08defb08ce4464ef1bf796183f905c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7085466026c00b5a3433159275ba2bb0

    SHA1

    0bb85c2f399b8fb89ebc6518c099f2efb74ea329

    SHA256

    3818bccbe5fb842a1670477b24d3dc082445db6440f5657e3b8d1ffdfc71847e

    SHA512

    47104a981c6841c86fe820d059f4498f63047d3bfd808c152701201841b908e2b126f50af126b4d8c38b3be4e97980dd5c433bf9723569e815061e57ae8307d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    40baec5f4257102d06db4c136c453d77

    SHA1

    b34cb87b6048cbdc00ff57e75278569212fa66b7

    SHA256

    3311a31cbed5fc4193588ee17a779079a464919cbf8fd92e09a7508bf6fafbb5

    SHA512

    5a0ca02481984060663040ec95679df57cced1890358d087d03707d0d4a919c120d0f0370b7d2fa48dca6ac83ef94fd762894b265b6a69b971a80840b2584016

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    36b9b86c50d51988cefb229d32cfaf73

    SHA1

    6cc4018bf9778ac53161127462a5ab462c6b1c64

    SHA256

    19fbe7e8e15e72e0223cfe6602f75c66026db50d91c21f907c52a5e242b98a8f

    SHA512

    42aa3e6b224d2abdb38dbaa12634d6f96d10d1758376f15a0a9f7d4751907814483ebc2a92497d99aeb4afd815f54ede7f87fd44d392b42acc2c1bd661c6ea30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0fae6494c04c2f4914c83c8d1c10de4d

    SHA1

    be998934b2bff2954206383f41b8280a6f458d27

    SHA256

    d6f8947bc0a7957f580d7d2b471917e48498e00b80012a77910ea5a148f9f979

    SHA512

    8fea972eceba5a643120e121063fb29375f1333526bdb4ab3f0f3e8dc38922b319fc442bd879f3e9c461151716b1131a46e55485dde851112a0f0c378a849206

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61765ae0dfed4b280d74493d47542a41

    SHA1

    52ab049c15ab0821ba0b9be3d74c9a206cd5cf3a

    SHA256

    fbcd0cacfa1cc396a0a514bc8105e06853b533a84bf16eeb3ca14a471541afb3

    SHA512

    e413d15dedf74346043357a86a00c24ca7738cd07760eed36c08b1091bb0364e871519cd2f08ec5813c0406716361a6c24236fd044f353b2dbddbed19017f2eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f4a28251fad415e74678044702697da

    SHA1

    497551c4d45960967c64ef4eedf68cc73e258a48

    SHA256

    e837c244648c0fac145ed1d05b83d74034a529425215d5a10d3325eae1fb3dc1

    SHA512

    21d1e4625490dade3af7d020fbbf5761708d996d6172940ca2e23081d84d319147f1945d4769769ebcca2512a9028a0a78339d41526038707c0a6fd0abce7229

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ddfa81ce96a75e514c93322885b5e4e

    SHA1

    d3b8f660517d9f3c1019b9b8a64c857b757529e3

    SHA256

    b28e882b99fed91b05c63664158cc9dd681f97c0ea0eea323e7fc6b52dd5476a

    SHA512

    ad37bece97a110e75f2e096a9e2caaf275d95a3b7744042ac743d5f2dd495abec1ddebd80755e06149c925b28eccba9293419b5058267651f0602caf232b56cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec005d2a5db7d28fcf050fb13a4e55f0

    SHA1

    083bd78b814f57894b79863e597a91cf86c7d4b0

    SHA256

    ee93b7464f77f4d7d5b783afc4ac6d4311e121e897154b01d642be82da7bb66e

    SHA512

    53bb5e6cb071d9760f442119c5071587ee5e82e4ff45bb5750958c9c73cd3e7a48ccb8699243d03361111eaef05a50123ffdf813446854762d911ea108e220c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    878fb0371f7515de9968c2bac75fcd79

    SHA1

    b09c80cad418f0f9c7b37787cc8f89836c82e7ef

    SHA256

    c1e348b30bd6feb6fef2195055b7f121648e029dc2727e77732c12d59d0633b1

    SHA512

    dc54fc5f8ebd91e3844e22791e00dcfe41a8a62eecc8d3df7d4bfa9cc40d16a0ce351b93addc8d0fe276be8758f6f8b06af927e656fc61fa52d4a8bddf0cd1f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0dbe5617ec19ee718f3d88f6bf337874

    SHA1

    6685493056cbfe686dbbb986b435640d57cc1194

    SHA256

    ed4f971d4e9b7cfc3003df509f4fbfb92fa3bdba44caf81b50e372e85d573202

    SHA512

    501ec600a398d5e4d869e763610645a833e0a4fdbce027e7c1639a32cebb7184e3b74a578e5253ec725ac4cb138cc8734f18d2bc0ae0efc76b955484173b6bb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5013e157da2b26b6a21d2610fb45e7d7

    SHA1

    4a8f0b2be8c13b7df250731a567b0a821b6ca7ee

    SHA256

    278d61bb014c743d176a12fb82e1e7122f5aaa24fd448440498352a11506c70e

    SHA512

    eb069bb153596078ef98c112f38100a69840795c5a6b10187eda12a0e1476ac92929d8de6b0fbc1170af759b29666cc7ec5d4198015d5fe78c0d55d5824e86c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a68f5bca2e75563ef607a5f68815f252

    SHA1

    bb28105860384a9c5421124b6492a9bf67fb05c8

    SHA256

    86036e7c0e7e1e52b87f56308e76ebe3af31473759ae0b79cc3e6650c512099b

    SHA512

    754ee9bd3a0f230367e7646af2774d62f365e54e049299ba7727cf99f68cfac8c00ddeab1a88f75a5f34ac1e84c03812c0fe657287b9a014d738a01f09cc6d85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49a00f352041974b567d0a6d731a8a4d

    SHA1

    55c0f0881fe250cf9c86d25398d87a390ecd10c6

    SHA256

    710436848609707aaf2e9b933a2dfc16f949dce2d81ffda6298cd55cd5b6d44d

    SHA512

    9df55b9c84a34f41b5de38f6f17765803de0207f979d965d3096a45104f3011abac9b9f0cb8b8fe8bb50b356f9c2f8b65691ab9585c28171c99595063247b2ef

  • C:\Users\Admin\AppData\Local\Temp\CabA4E8.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarA589.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b