Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    12/08/2024, 06:43

General

  • Target

    8db677588161be4a6b1d8f1d9b776e9c_JaffaCakes118.html

  • Size

    77KB

  • MD5

    8db677588161be4a6b1d8f1d9b776e9c

  • SHA1

    ccf99c8c2c5cf27739673ec7b85dc10682419a05

  • SHA256

    425675008ef80446cad87202af2387b39dd68e3ea91b500cffced2971a338460

  • SHA512

    1ff910dbb1986a04ec53805eb447fbd79a4fe3638d6e4f267537302e1325051342ae128561c6811021362a4907fb403196707d060e2730553fe18839618f74e2

  • SSDEEP

    768:Zcd9QZBC7mOdMUppC5I9nC4kyTJ+ci1GPd:gQZBCCOdN0IxC0S1GPd

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8db677588161be4a6b1d8f1d9b776e9c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1960
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1960 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2468

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    768a7c88bafe6dd7916381308be515c8

    SHA1

    679acf7713ff3733f7c9d1bfc6b0644b0571db29

    SHA256

    faecf1124093bbfe148a4db6554d81b0c1283844d23f3e7167154bad9f4a7fa5

    SHA512

    2f6363327ff8842fa4631366b5f383af25c92cf38e66468fb8a4cf2b6b723d2595f89522643815d2afc08c28fb9686e95bde360d29b9be03c0314cd45bd010d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    142484d23d6c557f8854ddba65f4cb74

    SHA1

    7e873fa4c8f633b090ed2783367d1bef75b4527e

    SHA256

    ccfc833688866e71465d997f613a15892b948a6d968809d1eecad4546c7963c8

    SHA512

    e87ddf23bf54ded559cfcc8a43323d300a7335ba916b4ee5b2de2d581fe68fd187a7a1265058f1adfbb8f27613ec033dddd6736f3126222be2010a1af9bff73f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b97936bc387d46fbae08f400ed57aa3d

    SHA1

    4c8eb9890f10cb92b338461311af4b17d9e66150

    SHA256

    f84203f47ffef9b16ddce7c81b327adec2558587229af352b3c67cce38d881c9

    SHA512

    8bfabb4478a908631bc832fab0c8a72cd4ffe708cb837e5624ace4302b2752f5dfed3a524ab394e8821af1595e9ee292857855615b5b0c7bc4bf5b52aae3c801

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    60b95e160764cb3bb5700a7b4234ff90

    SHA1

    da30311615bcb33b37253f22cb7600c27802e580

    SHA256

    3d20f4c5ce55e91aae7ab4fad60ed1ea97110ae4b75ebccad26155c3609a5905

    SHA512

    f36aa15d2689a458ad772fea1626da8293a2694f4169f1a945e22fe132bdc13070815bf48294a144584915a2525b4e0e326e46a66837d85354b0ee6cf7709fe3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a261d9faaa19c44b9ab7ba254312f448

    SHA1

    85eda03adeb115cd4afebb68d8a3dcf54bc1bee3

    SHA256

    53329ada58340cbe83e2e8c6335bfcb9babd059c12672ccd3d359c08731eb92e

    SHA512

    39ffd7facd11baa786e7293494b8ecb31c305ccf02e7de3ecfb9aec006418f98a3870f3c13afdba3d6ad1d70b382f962ec9f25d139a7551743183f4fc2ecb101

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80b46a30c87c10977efed4dbe27b54b0

    SHA1

    187932af3f0e9329765896e8688ee6724be04e59

    SHA256

    d36264eb678a5806edb338294fa10c97bcb6f17dc8c9b40c29a244f4ac934bf7

    SHA512

    215e98b8d43b110b47101910417937b9ab4f8a9399cf8344b0096529f2d4633270cfc18743613a7ea232111a8b684c6b89e98ecfe5d664782ad9b050851e5137

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0806e3fb09b818ba3b9113ed711e336

    SHA1

    54e5509b18301cb10f7c8ccdc7e8dc3280c6f9d5

    SHA256

    91a7158449bed0ca9b8c47b1f450a4b754e9f5ebc92a504d4c5e74b54947b2fd

    SHA512

    eaad7475373774d73f8f626351dffbbd4a5b02cef71db6e8df8fbdc6a1681c39a32f04d68c6c2a139e7acc8c5544928990bfcf2b93c282214e43763c491928d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de2ea29566abb19af225fa4b11934938

    SHA1

    8584a5395426f697205bd1bdf6d7db84490cd152

    SHA256

    581cc243ca324bd686b17d76fd8825eb2feb685618d974775b29201adfbce4e5

    SHA512

    2f45f291cb841551fdc61ebf831615857d968cc9e8a1330c8c797892017be27e1bcaf198367a85f318dc05dd38639fcbb4db5bdec7fea241f61f6f927e336155

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e47c16db46e9ec6ad1c8ce3edd8458c9

    SHA1

    0b003d5e25255ebbe6c8ff1c29b013b5611727df

    SHA256

    0b1ddbf8de2df6e4a3bd79efb4110c0663ee28a2ba2526451ae04dd96444a665

    SHA512

    86e89f5104aff2e2acd55e282511acc6bf2434f768d570d319cb26c52e15eb267af6d3e8eceabb37443c9371d664989c387ac003675fbf471a5b732abb8904e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4f4c8c4636bcb946683918b313b8bfe

    SHA1

    b923d125f94b56bbf1df6753c0bc5581661ee511

    SHA256

    89c252df7069d072d6bd50e24b0cb9246e5837420b8b17cad9930cffb8947f65

    SHA512

    0288c617135679383ce53e13642fc975072cc5e3970a75673308f666265d6aedef829af834924a349f9302e621f5c31ec44315fb69621807ca7ee101dc8c87b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dcc6130a7a0e1e136726dbcc93a7c63c

    SHA1

    992d66cf11134d261ca5bca0c4677128d60c6449

    SHA256

    dea30505ce036672d8eb1539a0551b253ca251621f3c620640a640ca711204a1

    SHA512

    dc74d133c843084f1beda03acbe85ff5a954d3f6bab3f9e1a89c503caeaa17438cea89dcf1d1a478477cb06817177f9d9bbad53a40679f72f11ce3e1fce1aeed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c05d20497c5bb43e9bad8f356b3e7b0

    SHA1

    992564c63ce06a42ec84ab1b522b90efdde97cd6

    SHA256

    8a0dc233673e9b97f3eeb79466a930eaa1ece920f2dab9bcd72feedbc284dd4b

    SHA512

    c0e7127f83a8b929f28838416a4a32bf4d43e1b6531604b4f403265f078280a37f85c95801acd1ba5dbd5b8284642c6df873b3acdaff6877f828fc770e832dc9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    13f45d253af09cf4cc8f38876d0ed934

    SHA1

    d1c0549c6288daff25eb40f8239964aba35c50e5

    SHA256

    4d9e4cb7e47aa993453b3f94a6410e9aaa089cee574c6dd7a376e674bfad763a

    SHA512

    e9cc6835797a4abd77f18ac80ec1c459a88e2535a41b9dc5947a7e51f1d1be58dabdd31a7185bd02512365bb100882ffdaac40e25ae3b7a41b6b79f362c5b2bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    39af94cdc9c587ffa1e832da1d8fdada

    SHA1

    3368b8c2a90b134006beac7826eefde16a502f37

    SHA256

    a240681e4a02a637b095f542e865a9f286c8de7ebbb51b67121990d85436a7fe

    SHA512

    999c76f09584be5c43313dc2321c2ae31dd2c502126f696e27f7391a0de994c3627226c47ab9680a0ddcb83d6a8622425d1d0e34c7e35b1210173d6e4c31889c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8dc31225e8cdc910158dfdfff02427ec

    SHA1

    b70e8439485e5f0a07560f4d48f61293462089a3

    SHA256

    ca8c2370c72dfb9422952d80d729d4710e9f0ca9603c51e797b84cb6410e11f8

    SHA512

    a18c993db4af7eb456f42d79efb440efed3e7d7ce55464a2eef77a4d208a45171b08295e319d202b2f0e02e8fac7ca366005ba0544202c53d23ae18929b575b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3d7d61c9104bda2c0cefdcf1b161dac

    SHA1

    9b74ca88c981e89d4104e9afb680e0673a272ed4

    SHA256

    421741e2dc76f2c3e288e54cc8c3b7d22ecdf90dfc90ce7d422c2c5fb8e1dfca

    SHA512

    87ffce24fb9c6794a0cc781eae8ae364f8cd1cdddeb4195b2b5730045afff3ae9be383f6842b3f295bcbbf26a569470542b09e5164827d87111c054822b62e5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd2c3e7b08daaac5ecb64ce62eac6f61

    SHA1

    37a7c39ce38adbeba2c6ecf9ae792c83e1ab75f8

    SHA256

    307ce445e7abe97b37bb50b88d491fe55b6c161d3f4b392841a6d6e37234c8a4

    SHA512

    c9843caabae7cbc0a3570baf53c0fba032bf440503b4ad2365429b090893e7baee71f4a3f7db971f96240383af1254fc261fa493f82e771b2bf28facc7ecb7b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff318e246559f09d6ac0599813ead723

    SHA1

    0afa525a3f9c089f3d4d1381e2894d23dc5156e2

    SHA256

    0f57ed1cd8f45bce23677d521388983620e41fd7015b6d627d73aaa9b0650351

    SHA512

    047fdd3b026bf9d12c704e7a60a5276c46304931541981f4eeebc2ba90fa672fd62f237cadd3948dbc52cfcbe1cdd9461e52e2deca3f2a21f2dfd4b09ede5135

  • C:\Users\Admin\AppData\Local\Temp\CabFB62.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarFC01.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b