Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    17/08/2024, 09:00

General

  • Target

    a1efc85897de7de1e741630b7239a9d9_JaffaCakes118.html

  • Size

    7KB

  • MD5

    a1efc85897de7de1e741630b7239a9d9

  • SHA1

    5fdc0f3ef5428175272f4c39be5b1acb11ba18bf

  • SHA256

    f113357da0d37968c787358d1b3ed799d9229f2289cf223719b3a5c102a342b6

  • SHA512

    c89ab7b6be23f75a458e43da1aa68fa23bed23ad137a19360aa5bcce7ee6c2ef05d5ac9d8603467a89dc018dc29cb03abcf6636a00adb73f45fc2accd38cc0a4

  • SSDEEP

    96:hCiiiiSiElSRdiiH+Tck8Z1iKWCyqIsJYsNUSmxdFjv9FfxcyBXgPMnoZ8PU1kQ7:rlSRodXt79XLRoZG44NUnpiW4Cj

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a1efc85897de7de1e741630b7239a9d9_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2084
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2084 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2372

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d7bb95c9aa8f4ba74fe30ee429ae3453

    SHA1

    84a24339de2eafc1165d4adf3d0e5916a7f51780

    SHA256

    e2e1f31ab5a3f9418d98587db005b98be4419755eb3e168c93383ee682ff7a97

    SHA512

    f936fcc66d75f2b6bb125cb426a40ec3686a06d258a2748efe887eafd7dc4b8902089dd131956fb2509ffe9a345b1b781632939aa2f51a7422fdd9634c611740

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    336d130d44b33cc826a012e459204d5c

    SHA1

    82f3c606a5906ea292a26a669c083920651b225d

    SHA256

    53e2f0c7eec68936a3559914bed3f9af96ceab2fa59e5207de3665cd9ca2d2ab

    SHA512

    6e257835158685a665ffff57fb271faac0a86c64aacae201dc024fd17023027f0f684f18b4fa76f64d2d3ae02c145dabbb109b01fa4435d02efa9b61b1e547b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    331b562c3989766cf73df39b36b241ce

    SHA1

    7c11f5167b894dcf7fa8760d90723484b0714958

    SHA256

    707b3a3880bfb9cc4c5e2666caa5ebbdad64662c7bb5a45c9af846fbb5cd6740

    SHA512

    54b1aa3a0d613d784da3515c6d5426aeb4d4ed9e45fbcebb43bd1f5c7dc8b4197a76d3947237ceb6750062a3dbc7afd64d4fef80fca840b6b9693edcd59b80d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    159e89fb3997010ac68145061a65ee49

    SHA1

    bb76584f64250ea7050f4fccd90b35a3f40c0436

    SHA256

    92531fcf89f06bb21526192dcdfbb481c2cdb0468c769146e160550f65ddd523

    SHA512

    6ab4c38cf027d533aa97228593a1da0277fe2d57e9260c14761973fb0d547ae9c6ab365aac80dfa3e1ee5d7d6bd6d5ba6c48b46706c62db3a2c5af42bd1ccd2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9db1dbcaff3275bf1ebffe7d09fe92ed

    SHA1

    b81b3f1502582564805c85fbab82fe31181a8661

    SHA256

    f180c2f31698531b277d77c10f93d6a766c3a68648c0b2ef6e88e51afa862eab

    SHA512

    0687f6ad4bf540931dd4f4479c8274072e7276fe69b6a45c1aa73d10b9e4cc41c344e30d3fa65e714fb059bbdaca1c415dd30f21a56719613b5589c5d601c87e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44241125d19a0a26b50e150a66fc4cfc

    SHA1

    4373679e6295b32484fb1359e7d8ab8bade44725

    SHA256

    8fb37e4fc5d25ae77d3abd6f3ea9008de30c776a0dfe2951da396b3766248093

    SHA512

    d3bcd5c3beadec004fcf61940127c9f9c0419f503d75f7d708645ab4be66169ec4bf157ed7f571f6300c6f1c67cb30507eab8855832c1bfcf331b859cf4d586f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e3607cbed4b18bec93ffd79a7752c9c

    SHA1

    5ede5a6cc64048aac7413d28c36bef8fdca633fa

    SHA256

    a368a1cfa2a7e7e23974ab524273a05dc16608ec1f7d7591dee1bf29986eebbd

    SHA512

    211425d28847402cb14d56a54d23fe17c7097bc8d4c860ad8d94f886c6825848b6994bc9bb15ab9dd6844f8427a3dab0079f0c72d3bc3af0131d1a50c7dab327

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce70e0bd2d076aa7ad07484149952bc5

    SHA1

    f46ecc2bb65357183e8c54eaab203beb2eac7581

    SHA256

    26a9c482aa75c5b208d51cc1e533d75b3c58b37aceccb2ddffcb019bd687b861

    SHA512

    3cd4fef7a339487681b347b899fd42203205bedcbca1e0c29a44231c28a11c0265e0857c20910957a684d59541015b3813360ca3f53f28e532457949ee903232

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87fb3137caf86a128cd3d70a5e64c9cf

    SHA1

    8c00dc741ffb8e3b88c7e7c83dda81ae16d4c431

    SHA256

    287b825af48568442b37ce96e9ed0728dd32de8dd85c8bf5f40ac50415eb7196

    SHA512

    4ac75926e6be04e64722795f8081b13b82ff7d69a04173197e6460d5b5168a63e3c1f971d06a40f4968bd1faec314e0f1be2a7bfd51bdd142d7b2d81a21d7502

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ddc58e895498274a397d8c8c8cf2166f

    SHA1

    f8ceb710833c4cd1f37a87ad7d4f225026935ee8

    SHA256

    32175310b653abaa5eed5297b82714555d24465d27b9f12037cdb28f74055a50

    SHA512

    eb43bd17143436a4727828a7ffcdd2ad40aea5c5acfcc684825405d182de33b874ce1f579ce66b9358635c5581f8121d37d490aae902a03de9b30750d390f36b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c37337d73f9865cfbcc4fa0d023dd083

    SHA1

    7181fa4ffa605c49789300951b868da573ef9923

    SHA256

    10ac9fc97402d175d22697a974e2249a39e2e37c27c6c3f3d708ff8a623e71e7

    SHA512

    ec4d24ece177140b3f817028f2875559ca170e188461d6f789521f7484bbaf880e10f4f2b9823f99dffc4fde1fb1292fa639f6cbbad2e9f358b6713ad5e12a36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    29fb5c5e02e5241af37e10ea1b0b60cd

    SHA1

    ad66d0c489a9d80c5a7d1bf9cbd5afde78be8ca0

    SHA256

    95c6ad32d091fec1025849063d36749f999e5ffae4e16dd8c173659e15a90380

    SHA512

    da383b2adc0a6a34a14ca0fab96fe2e3b93dbbcc6656c4164099e5cda6c6191a5061f62d87c48f6476ed058fb51c071a7fd273c771d4e945ef7e11e5c6d5f7cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5a2fffa8da2cd5740f374420b6254f4

    SHA1

    8dc1e399d1c40ff1540a4983667e74782fa2fd73

    SHA256

    a4ba4ee80a3a5de5d084325121e5be9429699cd44a3f4707128316bc355f30bc

    SHA512

    602417fc84a479066ffae3089603a101d00dcaeff12b8198f20e76c2da12bdeff5544fa8e82c0b0a96749ac93008354dac81b37cc75136893a5b836a2377924d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5439ed6ee5ef35c3c227fd0ef3ef4abf

    SHA1

    d8688aec00d4c9b8ed6788992c1de68956828953

    SHA256

    349758fb95c0d9f5f848f322656bc8c826f339399a05c66b122af1d467c12d82

    SHA512

    85b003398b211a620a8564bcae70015e4d4c8375c33969508840c7cb6ac74ccfd0f8d34d8c1ab14595c40a5c1a330c496c1dc0718a052297696ad6a5ca1de9ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ace7f5f6796d9862c4162a6e1f39944b

    SHA1

    b78464a8c7c6ba0a1d20d3858a0332449981a96b

    SHA256

    7e6a82c1fefe765009c60e1e864e2cc68e8fce9242dafec61e66b07103b2eec0

    SHA512

    5d994da89af96c2c26e48cd0a7fd528a4bb76859a49e5a2fd92ab6fce967bcf01c243422647f74e4d022d1259666910360258952726b3779b1e7216b31c9671a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37002da1f68f6df1d21c813572f3cbd6

    SHA1

    254fa24b172aca353c52c35c8cf13494ec5ab786

    SHA256

    fd5257d8bce2663230329656dccac797a6a50459e6599179b7ec128765648a9d

    SHA512

    81c3e47082efcd93d8cee25d62ffe39378689cdcba32909c616448af8e8cd71e812d261ef2b28d4b53f2fd18020cdeca6cb7475059dcc204011d8fbef8442d29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    644a8ee77cc00d7d7bfec2848ed9f8de

    SHA1

    56654ef849271f82b9cc5c93df423cdf3f56087a

    SHA256

    2e45bc68fc7a042bf896e121b95bcc38c2c571ee7da09417021ed9967813cf7b

    SHA512

    4bee54884f4037409c69270e63ed23fd896b607fcea83e7c578d9fb5e571c88a2f5e69ebe3327a8de24ddd8f3da687a5792628c65b3cd6f0452693175924fcb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49bb17040abdd3f5bbef0bb23e1601f3

    SHA1

    33a0a961ee18c5442a97d070186ca29b22ce7488

    SHA256

    3d949a7661821c4c16502d1909485503fbb73b82efa94b5e82139a1dfc21c998

    SHA512

    8f6fba4e0a710cfe8b27286e51f941fabcea3ffd1d71b2f8d05b464f2190af935e9929fb5beaab3198f6ff41e30ba010c88864499e06229e3484853e9b99b0bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8fc592d245cfddcdb5e4ebebc7c936c

    SHA1

    ddd52fee30ab04782974d8825a6f7ccbc9015e48

    SHA256

    9e03d4414230fcd1293ad47ff7357b61a5c328b69725ee4a37f4a54dad9f414e

    SHA512

    5de2486f0d99bbba571d6182a84dbb6835659cdc203ae2f9d5d14c55aed6bc3ba640d8fae797ee54c57def6b7c076d659d75e3d057134c8aa2a88a180cb79d4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2db54ce949f6392db32658eaff790a4f

    SHA1

    c3a9d0cfde749bb701e9285efffca8ca0fa00911

    SHA256

    84f44ec98022be9d2dae12ca2f4810d2d33ebad23e53f5686c6a8975f1bbdebb

    SHA512

    3bb85470f4e478cd6c914e4d6bdcc5bdf2bea869f48218b8713a38a95671ae6a84133c8e849c5562f6e448dc9df457393b2cc2164f0c9a297cf44f787d135dff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1fe64ae077765d84000516c701f09e4e

    SHA1

    6f0bd4d1a423610be2f01a6f60af6c58dbad2f87

    SHA256

    4f75493d8f4d39d72955a947723804a9c9c17bf9c77b8c6672839f3890368df9

    SHA512

    b21d78701dfe30ab5b21708e045728f8a45433a5e99afa700d0dbb83e648d51fb2a56219939c166fb10d380e400e7df57d2271ed7387834a4ff4c1e64ad34933

  • C:\Users\Admin\AppData\Local\Temp\Cab19BB.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1A6A.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b