Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    13/08/2024, 20:11

General

  • Target

    948fcdbefa4a1aa00d74bfcb36efe561_JaffaCakes118.html

  • Size

    20KB

  • MD5

    948fcdbefa4a1aa00d74bfcb36efe561

  • SHA1

    bdd34a81dc92e86f61ae6c0d7a7d2e80ff05dd55

  • SHA256

    5ba8acf86b4d5000f549b6701442bf477428e5f71c4813f3058446da5065602e

  • SHA512

    62c1412b7e72b79f1e7300bc1690a89b5d6068c82cbb12e3fecf90791eced02d5c410fd11e3dcff575a7f55548c94ed0f71916df5cdbab774c5a65a7645c5d79

  • SSDEEP

    192:PVaQT8qFB/pdeB+qrW7txaqzZ/qLcaKuECjDvrQObtTajuS05eFYPrei87FLm2:Jxpd7X6WwfS05A0r3St

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\948fcdbefa4a1aa00d74bfcb36efe561_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2808
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2808 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2728

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98e84f9c111eeb49f015db1554eed5bf

    SHA1

    0739b4ffde0d0c41515ebdd63a21fd7d6b1f213f

    SHA256

    1e8e34fd16756f83be3defb20cc3d18d30e155b55918b994cd697df666fbb55f

    SHA512

    df8111d071e8227408c5ce03db951f9db87ce6c19b55a87fb10a0ba669c74b7e45c94196752185330c393d6e8747ea6fa8c661d557b3d06e5bb62a82bd904b79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c014a6ae5087f657b58aa6b2c86fee5a

    SHA1

    0d41a909e03485f02b1909b2c5a576571d94d465

    SHA256

    415e2fbf7d5ce5227fc5135e745ec66015dae7ead11e996fe50506c57ccbaf0e

    SHA512

    a757bf0356206df351e6e8509ec6ac877a20a1c4ef0813311d15dae62247a10486b459ad984b3b78615f6728abc31b5bbe1f5ec5088480ecb8e91865c837458a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0637479c49db89f6e214ab0c36e05db9

    SHA1

    7ce4c143653dca2f55b4134dc25df69824cb1857

    SHA256

    1ea23d0ef9f58f11ed817bf48fc1cd34d81ad0d6a1c219fd9eac35e46d4db1da

    SHA512

    b9e07c8b4c7921920def74e1dba0a6c4d2af555b56e617ec4d52bd1c81ca6e0a955e4df313ebb91f10def9d13a6cce8bbce4e0c26acead69f239d5520012d22a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c37d6804fc0ca2721a959b1903128b01

    SHA1

    6c14920a33ac4ecad5c4d835d84fcaf66d991ed5

    SHA256

    b2e6c3d2f5b0d1eeed351e83162ae3b57cd24169518e28ef3852fcafe1a2636c

    SHA512

    651036034a8b8d4f6baab59f412c46c15c7f5cfe08b3200a4472099bf1df2a3d369611a3b2f2559f4ace931d51f560188a07619c4e547049381b1f3b9e84301a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    120ba771e2b26949bb485231867229bc

    SHA1

    83aa86db2e707eca851a6ecfb13b14e9a14b6279

    SHA256

    9b503f531b427437c63663ec250697de5f2d5f97c375c3f09858829e7606bcfd

    SHA512

    a3ca08dc7bde70a2af1c47dd3a217db13add9ac74fb61f7ecf47032046346bfec2019e323a7752828979214b35f09ef4949492c99f36e2dee53f15d4a98c43e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    076dde19af0a8ad08577e467df42440d

    SHA1

    df21dafd8dc14c32e911fbada5fced42290653af

    SHA256

    2163c0f099776f00fe2699f216820b48152e77962ca2867b2e68e933a39fa081

    SHA512

    ac987f3d92dc48ab99e54db76fde6880592807890d30752f899080fb3e2713bb71af4d4307762156738ed472c92b47b1f99f4a175dfc5ff07b65d3d2e28e17d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c489fdba1173f1d53c2fcff438a3ced1

    SHA1

    cc5ecfe17d59ac4b41f23e137772195195f40c2b

    SHA256

    0cc40728b655f4f53a47a608f05a7784d9df36f6d0db20a138459e780acbc84c

    SHA512

    c9829a8bd6c05637630dcd199c27cb3593a8361779034f81fef6086a1bfb4a4c5c36b37bf5cb21d3836ce32040b9b550b859492e10d9a63ce6269a7658eb14ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c619ca84e85f283ea098200a3c5ffb0

    SHA1

    d59ac1514ed279d741c930d00a9cf8845c6e28ef

    SHA256

    164197a87c2fae65b7e34bf3e6fd854e3268f2d75dbd0473519bc7c5f3c5add3

    SHA512

    2b968ee2b15f7f571737417bdb8449d1c66a6ad352c377af0fbe254510a7afeb88e98b1ca49456fec710cfbf4459046b0d0c300348aacca89dcdc6e912aebbed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7865936f4b4a78c04ae6ecb8b7272858

    SHA1

    1d9aa9a3da4e965662df0268989e5060db0816dc

    SHA256

    d8e17496400a44e72430ca8a49e55ca84342bf43aebcd8dcf6f7682847a6b6d0

    SHA512

    d277b77e9dabdc7a534a6d5067fdd8769d68f21acbb35f6c6ce26f79e1b3e221cb58a81353273490c182cf562b1cb3a136372e03289917738eb4341357381128

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb7d8cb6c06e64ad8bfef22ef777f6ff

    SHA1

    5c435e93c26904ff591a3e2a31f49c22ec521240

    SHA256

    ec7815401711f79f5e9e5bc675506ae873aede76044152baccc81a22b020c19d

    SHA512

    96f901638f3b9b5142bce2a8382e8117d15284c1e359b5c218f7f6abcb3cea2c5e888fea1985772b4690398ad87a2c34791091eb28cc4d7512eabc560d127f87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f62dba91706d31dab0aea53375de5d2c

    SHA1

    4b8a9482cb1ab9a019468bc65d9b3103c0a23416

    SHA256

    6e4a356d3015bca279c56bad553b1edd76e69a1569c9f3cfdc8acfe996c00eff

    SHA512

    7e7767e3524c17ebaf2c406babb0d53c46ec213e2f68fc3d92e8450f888aaa065e5ba8db210d8bef35e94084182d5f25b9eca4865d82c76d2e3669c2b5157e9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cba5083a09b97aea1d9c20aa9057a4a3

    SHA1

    474e1746d1115745ee5c5d0e336c759612200d86

    SHA256

    42c779790e3d9a176694b9c54d2c30c64749c917c7b6655b1a8bd1f08b73eef4

    SHA512

    a403c7bcd41c400bf8988f27d58431cd48f9fe382d53ddd49c274a529b0cc984e1672f462f14545f2d31c936e7318185b0921fa2fab071684242436359c4d1e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    66d141b83ffafbd8dd5d3fa4d913fce7

    SHA1

    a132a8d66b83a6236b81e62d40fa325500e38305

    SHA256

    2fec9ae30b1469f276ae4634c3ab767f2a84815bc771c3e190f3d601a9ba8cdd

    SHA512

    57ed1bac806448945d48e9341f377ea321777d13b2822d2c89d82053abfb4e75a069e53bd76c2e40fce6b60a1d657661959aa0f60cd514c782bf96728bb290d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0b43ec7c7c9b53f42b26c31fafa7a3e

    SHA1

    8fb368d5a862c237aa7de5ccc96ae12abf8022fb

    SHA256

    2d9054fec76c0cd40a52155f66b3e6a416a3b78ea92c29db4178c8e38445fb12

    SHA512

    453cba39a2f4d25125091ddfaceae95a697a130c746b36ce906455583ec6839d7cb03886c00736e93a19cf616c984e1c2488596fcb74a9c582234e56689c32ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c11697363a80ca356b6fa67101f25f90

    SHA1

    40e8ea15258bdc7638def3625557e7579a1f5e20

    SHA256

    f2a80a1a2a5168f38c2abd28b92afee693e7fe3d4b646fef0ca5b6cbb386ae9f

    SHA512

    d03cf2f9036f8375ea4b0c0a9687de93f5fb5013fdf126b66e10e5d5bdf61283a805ed10829f8091f2152a5c6b60862636cbc72a178aa6c107e3eff6bd9f90e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a7c2ac5da7a2e1ed8e424f6939ef964

    SHA1

    a63df7acdd187829a2a47567fd76314321df93ae

    SHA256

    48abe8e44f726b3ac7ed23ff9e6827fe8bd0473274dc83a21f60acf8349e5553

    SHA512

    4dc722c30f997ca26e630d17f2eb8e35c4f379609e5c87e5ae188eaf70d91d24cd8a8287fc46fba7a7ae4901dd39a9fb4f7d90b143fe150a915d0278e224b06a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ef8f3f56c0678b10c7f93a138bf733d8

    SHA1

    33812a771180e918da514b64c112494e1a8c7bbd

    SHA256

    be3ad1b83918d7aa9b997ed89833ab5c6a3b1d9bfc44807e84764745bf20a433

    SHA512

    6691b73504ad69c57d15cb6df47fe868a4adc888aa43c89aaae5b02b7d3f41ae14b48ac4027cad8cc2b2d2dbd3a4edb2b6469d9a827e0aa42740843962745b3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a666fc7e998e9ade0120743d24af272

    SHA1

    5341d4ee23ccd0f742148fcc54f5984e73379c66

    SHA256

    bf7c15782aee6d027bf10f90008fda9da9da4d39d7b93cff6dff5110c361124a

    SHA512

    9d981a7384cb1281842c9d1320358a8b48bbb94f89bac0c575f1aea71e30b5375c2ef225a5cb0dfc5f8966d2769676906623e1f136e8007168704ef626491ea3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c87fd95179a707f86bd7858f99657b7

    SHA1

    f699083be57e942ba711882a3ddd863ccaa58b7b

    SHA256

    bbcd0b905eea57d837d3401a0d13b05a6ffa3917ce5cb0afe36b5f417e0a8643

    SHA512

    cd4b261fe134755bea78ac87b663f7c1b066a0acffc59cac35b1c1f0963be407e2230b81355a33c705301bde9e20ff445bef19a8a80613b27ac5383b17a9750c

  • C:\Users\Admin\AppData\Local\Temp\Cab80C7.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar8147.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b