Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    66s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    12/08/2024, 07:20

General

  • Target

    8dd31fed4176930eaf0db1e48f26bf1b_JaffaCakes118.html

  • Size

    19KB

  • MD5

    8dd31fed4176930eaf0db1e48f26bf1b

  • SHA1

    86025a37ed32f8bdbb5afa7963f32eddc1527d44

  • SHA256

    a8ec1578cbdc570d4e1b8fe22a19ecbf9a41a630c0f32364253e08a851615da4

  • SHA512

    b5ed1d12ee7256969ba125b53dfc7f92ade1eac4ff8fc33162190c212669694c19c1b35813e0482dc628f769533e28c3a1e952c3f17d8234a6b3ea66c68f6916

  • SSDEEP

    384:LLRxaoMItvoleWWzDEPhJOKJ/WRqNzTH54cDoSh4FCEWYUn4Z4AxVDGGFN3oVL:LLRxaoMQwlARyHXnWFCEaHAxtdFN3oVL

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8dd31fed4176930eaf0db1e48f26bf1b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1520
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1520 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2152

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4020614ad49640037792c38c1c431d7

    SHA1

    7791ff753740299129f8b356f5337976e9fdd3b8

    SHA256

    f98a7172a5b65a51f23744686d87848711d97cce530836d01c1c6891959f1e3d

    SHA512

    e066aedc6e1bc612596c8cc40b4e8925eab80ca798e6f9c8e6e2ab26702f50566cbb0be3421c64fcc3999531b72b26dc1b5ee3c9dba0625ebb35f57551d778e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eee31a8577f906f0cd38711d7143c663

    SHA1

    d9525c28bd004ad1fac80092305f3a089bc9f3b8

    SHA256

    239fcbdbab24b1fbe0e427bcb2958488b3ad38ccf5f07a5cf42a5489236c6b12

    SHA512

    9924cec8bf022c504aa95da4a1c3e3868c240b1ecec6bc43f874dd43257299e1a2b6349b414fb33fad7a4d074eed75fde8f823d2928958cf57d79b94b9243f69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    55ef12d21f5d3f4ba9d276a8cf654c21

    SHA1

    de667434fed4bda5a10bc9df080b6b67ebd8cc49

    SHA256

    dc9ae65bee46c9a3dd90e38742a3cbea0255d17bb84ee87bc19beeafc7e36ee9

    SHA512

    00b0f9fd68101c353fe338cd7d233bd39c534a9fb0a8918a20e5748627516d435aec155225396156bf90ceefc0d6be5d1147218971d9346810626065d2dbc490

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a198333fb050b1407506ca52048d8fb1

    SHA1

    d31c5d7c01aa0b88e13fbbb89567b21b5f2bf4fa

    SHA256

    e064376abe0bb7eff3d9d20a04e7cb693c1dfcb87605e64d3cb231cacf1aeab5

    SHA512

    74026f387b2ace0630cd78302d4c5a57922b92c4999d3cb9212ce581883a688b6263d9ac55cdba31d4c41a85cc38b9b45c5693d8f7afa6123c3dfbb857201e8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1747fc66d33860af24b1fb8645e613d9

    SHA1

    b28a925e9305cc251eb9ed694f9bb89c35d46565

    SHA256

    2a2da77b001572dac044cd6f8984bc48ff3808863d6d1ce7f14ea6f054523925

    SHA512

    1876a69ea1909a029ba9fdf272d14da7c95be35a7f6852ec24f1d0d7d69a852167be3545578eb28bfb0b33d1374f47f9d9624508e80a8b663edb9aede5c2190d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de1e3f72456e1d71b62810fb8520406a

    SHA1

    1558147696673726238780b414151dc6694ea939

    SHA256

    47631aa0212be6b0c6469936b55d7e9f8a68208be29cbbfb5a6e54c8c6a69327

    SHA512

    db1b1d5c7d5e1a3e70bd7523ee70a4552ecf1f4dab9c5151deefc0d775c1f8bb4afa9ce65cec0823221b962fdd8be5fb730f2188eb190b31eb56b3497cd2b2ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eff4700ae6e819d031b8bfd357e55f51

    SHA1

    928d5de8217f49fd805a2b01ab5360381f18ab4e

    SHA256

    a6e0264a132d3084c3cfbde69f0144a03b0574ebb0e72e03f1fef3ff29f3d8d2

    SHA512

    8e310653987ffb2887cd415f63f8904a52eba7fe0003f9cfaaf210cca99119726f577bd4f6378ed208d164ce9c669124fd257b0332b654baf0d3a7d97c60e17c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8aaec9d6b300ca40ae7130206d78a858

    SHA1

    be6be53c8b03f0cf92ae8910e6b350a0ea067601

    SHA256

    505b0a8f4aeb4d2c6e9dac71bd5d2564134acc052fb2af9b3ebb1a54ccc5d5ad

    SHA512

    be1ee88fb6c7f321ad858d9db828f201cec9c4685e9e1aef527ee3eb87ece585032b792f5be1cb86692f7ae83425ff4f153de03ed3abb81818ae5cd0fb2d0f92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bad79d29a0d41d38293c8d22674e128b

    SHA1

    13b49bbae25c902ad554d109132a91fd57390140

    SHA256

    4bb3d16518441b082a7da085db8dfe5a9b2382664c4ba6b3af8cb0b112a71d68

    SHA512

    af129907bef9e154b96332282116cd7bee85309ec8bbca34830ce61d9145493e58c6b3cb1318f74668a266e77751f623dd1c916f26d6fcc81dd92ef700ddc1cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8dfc7136964d3c8bb2260c4f6c454597

    SHA1

    3b713e5bab2891cd421586defe4f7a72ef931fcb

    SHA256

    7f23533e35e66ce90f5a6ce2a105dd6295052a08dbf1251027064fda9b1c695b

    SHA512

    79a3be595b5e2b8da188f24e3dfdc9a9973bcc8871450d3b5018d8ed903690c609061506c1720532161474ec0612a894b9fa03b2afad98287bfde8987180347b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    876b055ab1815e1afe35935b7d0cb7ea

    SHA1

    b2666d4b0ee5cfb024c9eb109be5d3ac6abb8c8d

    SHA256

    62de25cde687ef409064bebdd78e69698c9d5f974ca88b0b8f28569b8a5f996d

    SHA512

    b5fb1c4941aa30d280fe3082ad5ea873f08307f41871aad0e44b6a7016d43670452157a19f39b355bdee87f7e61c4061dbedd22666a3292650fdde049ed1a227

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f623308d232b0d4a4279539aac89c43

    SHA1

    db4aeb8c9202d40dbf0e9f8721d56a83d7b44d36

    SHA256

    e1c96295288d585e9d384313f9d072ba8fb741aa34a8ddb75544e9b15aedcc65

    SHA512

    63b25d174caf3d89dedb09c313f1f6ea57f06f1a4b0e34e54a54d57a156f054adab58d0509e938a78a37d46b59c27e290048452958451529cf60b80d48674e15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e37c671c48cb99c8a3675203eeb7ff9

    SHA1

    1f92d7fb2b5b5a88af6229e226da61f6ac9e7413

    SHA256

    bb031bc1702b527e1857b24a87807eccd5bcfb8e669f02cb7b7502a06b155cac

    SHA512

    a02085f9d1d1462db17024e6ac3adf330d885a5d53ebed10487cc65c617bf2df24b97e50f536b0254f0448e33f8062d572916aa4c9c9cd6f57c1d70f6656eabb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19fd4128f386a09bddce9e516cc4c8a4

    SHA1

    64373d2973560e7fe82245038a26ad845470571d

    SHA256

    c60ebb58bd55d699acac785186fde51e97368495fa7fd70cecf15b4472a1bc59

    SHA512

    02e4642934849f5798496b5e35315e23f2e2bcedab791d4785119af3eff8af2aaad7d0285bf4b3fd6a441e036133628791c4d0046e07a6877eb781bec962c3ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a57ac51c1f5d3c9885984c2caf1e946

    SHA1

    aa5d837d55c0045792a14c42ca18c846c44c691a

    SHA256

    30c178cd9b624e96b5426d7e68b33f4767235ba5afeaa2bb389aef4f4b63308e

    SHA512

    fbbb3fb2e62b662757b46f5643f1aec98202d67584e66327837ed46ff2d59c04d9812e2e06c80682af1f005bfd36c5f27bb23e41e593cd785c2f6a6491d2ca06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    50b99531f87b1c6e5c71742fce110d5a

    SHA1

    e6465d52119d1a6fdaf720b5082f1c358aac0b57

    SHA256

    24b0a50be7f1507b9b12729da7b8311dde473cc9a8ce3379584f5477980d2dba

    SHA512

    497ae7c248c7b96ef75cbbbf7d991732c8340d650e1c2048b70c818319be12bea33c82f8c8f610b77a7c04c1f47d0665525ddf93c81a12b193dd560f388bda14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a9ad2aebde2d775a3bae7efb338138a8

    SHA1

    6aaf38565b1faa4786bfac17df0b66626b54b08f

    SHA256

    92b3a3daa0edd45cafb24d23a5c70c97ac02c870ad6fe18ebaca61590dd6ad7f

    SHA512

    bebab1507bb12d563881cc039e92b72d48e822a0360e90f9a334462192f34b1f32ecd1f847a341e0f5f25b47fdfc558b6fbb0d191640107eb5fa9e4ca7a75fb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d736b6553ba4b9bbb62a62aa25d504e

    SHA1

    06be665a9eef611d8c98011996a36f18fdf9ea53

    SHA256

    2602f1b3ca035348511b3c816cdcd833791765df27bc24a650a3a67794da38b6

    SHA512

    4dfd9f6496b5e13e8efa5588fe30642a06396199c63daa359ad2f465c250887d5ca91e28a21b47cf01e3b6fa5c4b45c9c06a87f2e80ddfded3d6cf2049915704

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6797be29827a3c5ae47501766eb75768

    SHA1

    8edf31b81f31079b8f70fe16a32243a7bfd9c83e

    SHA256

    912bc4b9d25a9292b907127289b14476734e45cca87da6bd17cdf49cda70890f

    SHA512

    8065611676769db75970315788831e3cdeabb4211306c61a7b0b8525f757a9f61a90b36bfc80534d7f6ce4ac595cb0fea275bef5fccdf096d84194a0b7e4f636

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d4388dbc5b99f71390e753c326bc8ce

    SHA1

    fa939663a840a76feb59318b3e598c850d41922f

    SHA256

    311c1197d6824ea84726ba9aa2afbd69ae882208ad1faf5c9df8fcca6b32ce99

    SHA512

    749c5d0421f60e5f83fb697981b4ba4b916f79840c4be69734e68c7af9f7d8f5363fc9c8a8670d97236004d632eec1a22e9c1e22ede887a8c331bd85e2bdb1ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    60a57a305bbc4aed2c27863c93c86d71

    SHA1

    b9ef46b608211328dfa0e86b64952a5a3b3ae05b

    SHA256

    7d34c169928622d41be3bd33316c2b206204d745beaf4357846b8ba8cfdc9193

    SHA512

    c2b132c4249a1b20b479eddadfb026e41325d55797598b2b44d20dd9cd552c5a7c0216d48dc5bab3386716697c7b7abe4c2efe68e386188d0cca0ac8c591c4c5

  • C:\Users\Admin\AppData\Local\Temp\CabCB6B.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarCBDD.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b