Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    19/08/2024, 21:53

General

  • Target

    acba64236080b079d0d4e3229233fecf_JaffaCakes118.html

  • Size

    5KB

  • MD5

    acba64236080b079d0d4e3229233fecf

  • SHA1

    a6a0b8d724c27e8c423d03594f604b6a947cd3f5

  • SHA256

    97f06e8c4b095f00958d04eb22e022137d32f042849771a3713a10e9793085f1

  • SHA512

    fe209f46eee791e1f51ca3d8f323227e78ea3d7d0eb6a2a896b2678430a93bcc3f76b125178c01001e735035b78faafd4cf6f6ba1811393bfdf246f050381915

  • SSDEEP

    96:FODO2YJfZ1nSFdbawKJwRrxKDfn2fXgDRU/ihZZQK2OTJDfnh2Iln:FB7ZnSvaw3rFIpt

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\acba64236080b079d0d4e3229233fecf_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2320
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2320 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2068

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c20d226d8398d17ad94fb783a2aa7d42

    SHA1

    5dc5d3798391b4335303deafad7146a3ba1fe5eb

    SHA256

    f3e3b677cda925ec386ec907f99c0eb17cc0d3338cd57172ee8b2898700b3daf

    SHA512

    7d911f569a831abe85a40cbb1fadff3e9e479f876636998b58f6beb651848e79afe9a36c059ddabfd6e1b57549afa0144b779f7a88922a1796f1e5327f75fa90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e74df927649f123e8b1d7890a478f498

    SHA1

    5a7c5f15bc59441483d6c538b1b51248b0109015

    SHA256

    2138a5458b6f7328c50c515029e06320cafb80b4e53cc331353d6237e3805d93

    SHA512

    2155713c987e8cbed486f1f3a184c35513d786b91c221b2f22c0ee688241a15771faa2e7adde660723703d548597985247609d3c1c469165cffbf595a2fcdc40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    155294e09c11c2de563b3b5dc30f98e7

    SHA1

    d495fff8a9cb2914fe2df5c2f4d86c6a7d5ca0de

    SHA256

    efc7edcf0a85bad4e8b94b51aae45630ddac52a3cb8c4283e1446418514d864e

    SHA512

    c5275d46c8625ebd9564fadfacae5b783be77134897944ebeafc1b525b0fa68e2364db1df33132946bc2aee2d01d687e2a18739edcc742d6b42ee6730439c073

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    51ca6ac234f0699604293c7831861629

    SHA1

    5a3346d475b720870cf5dec52ae442ad08853e33

    SHA256

    f9bee005c2371db3bc8613f054e1bf4ac80a0535feac0e27fffff5ceaf43df4c

    SHA512

    168617d43978ad246512d0e3aba33b7312599c732d54c3d165736c2e08c3bf44c4e8f6c786d8d804a7cc3b9a026701766ffa112d7057b8f44822ab3a7f13394b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fba780fec26aad2161a00b249bafee3a

    SHA1

    5dbc9dd4b3dbc877806b9d8b790d12e81a48ceef

    SHA256

    8c50e65b6523f9c058bb848e370a4f598b7e857b294f8f1c2cbb0d8a292b8666

    SHA512

    65a528241860a223b9f1481a45d22a1895912f21bd5a3bf4c5807828f66450099989bd768ea5340b0432508ad7afc13b39adbf378bbe728387275b1b359e8c4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f5efeaa44f89e31db3151ef244b13a46

    SHA1

    9aa53d04f425f11deef82cca8095c8918a47770f

    SHA256

    2045600e9b0dd7695e955853d6bbeb7062a20158e454cd3bb22e2863b27d71e2

    SHA512

    9480335535eb24a206f272aaa4e7b0aa5febf41b104d95680d722971dd9b1732cc98f88e16589ef34a68d7d1d71a286d031fed39eac7a053863cd6858312cd4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f29630a2ffc3a971de7dca3cb47737f

    SHA1

    533b33c0c3414f774d22814db056e188a5cdddc6

    SHA256

    2fce27835b07c64c2ffaf61b1bae0f7add7e23ec20f3bc70b2c2031732aa1d0f

    SHA512

    0fd067b0562b49fa1149a043c23426e67a5e6f92cd01b49172a6f02f6260920ef884ed95bfa2800caa3ea5d8a51b729c15a9959488385ba964fffcf9bc824a10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c82dab9caaaa85d52b2f815ce05be491

    SHA1

    b9610a636cb4d4593e22f8c1dd8ab63d855fe1a4

    SHA256

    61038f2a01fb1a7dccbea84c9688ebc92093c9010ac2d39dc7329fd1f04757f8

    SHA512

    5a689a4ec5078b6d0b4924bf5d50a0fcff4ccc50c001da9677c89a98e2af32390ed608a65fec19d79be271127825e7f933988559988202c13ed9546f3558dba1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7bf3608ee0bb55b49097286929e602b2

    SHA1

    117279869dad33741c457acc22faae64435ee973

    SHA256

    56e0eec571de9a2aaa709c3642f62dd03a161af3ead13cbcc4fec5c1a9a676bf

    SHA512

    2351e13d7ba119eb8952230cfea0c20cc39580c20160a1e290b83b2954475354bc7b85b6f74d24f98631096d10684ac90cccb9cfeb1b55e53effd9909c40669d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d927c1a378d2e791cd0b827c411b2d27

    SHA1

    6ddc1fddd2f7daaf7bbe83dffc0152195072be17

    SHA256

    d073afb109cfee804a76aa1867f1e72de9ba61bc8fae663ee4a58b96358af5c4

    SHA512

    b425d2e13c7921c9f3e9ab4b140727d766c38a9c4a859898164010dc1967908b7b383d0ede1b145b72d50e02ad42d9794ae09227f2197238c2a29f38f8735ed8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c112f689a2e4c26000f3dfc0d9874841

    SHA1

    f3d41d98cb0d34c5e47897510ad2b0c1e3566ff1

    SHA256

    756c0517040528697a6747ed74f084b540096df9dac29e2ffd590ceaf95a0d8f

    SHA512

    33043786c3378d55894c8c86abbf67b6422fe3aa5d2edf92e722db3abafe827cae26fabf439d563aab5300d09222666f9fcd0c558fe411e20b68d112998830fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8af2dd4a436d490e6220526928daa313

    SHA1

    c2af1b6ab4f68893e937d45dd207493888a7cd5e

    SHA256

    99c006a357dc2b45578f158311791482731e36563a8f0c6fa6cfcfd5b307102b

    SHA512

    4c995c578ddffb27d74501d8dc764fc354e8dc2859bd84aa2a1f40ee9fe54a8b7c04df601b482a0f9f3d915fa0d56264c4a6e7daf354a0f792b5542a1e76c849

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b0338c85e610425de1d7bc88d23e662

    SHA1

    422eaf012e0b07e6d546634615ce9e03456df746

    SHA256

    452ae33e46b059c6162fb649c5f840a2be7171320ae01449919f88c21ce8052b

    SHA512

    b6182b86f8b3080de0a7012526e41dd639bd510b5c4b8257db6bd3659f4c021f7e889697b5237106383cce02eef0e38985c71b034ac5f8fddf4848bf62b4ba49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e6b91b6a68c31e81fec307121500d6d0

    SHA1

    bd9fcfda4452158caac3ac327d7f03128563919d

    SHA256

    7eccea3889f5eef0e9520b88065db8c01f79e6e07ff2d8c39a60aec7ad58b6e0

    SHA512

    2ba32c87b884bc2183736f8e169fd2f82d249b0de9a215ace52e40298b77db5b91b2ce75027704d6551e13b6c8a4a762ec530e577f227a768e28e17e99c0a705

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ffadcd6f53ccf7b339e4a48a3d0f753

    SHA1

    ec2b5054b65a58f3a4da34cfee23c79a2614b816

    SHA256

    becae9e7d8ecce635e8013735603abdcc81f7c42569aa7e7a6b1f660745312ff

    SHA512

    6d561058e8c0cb57a9649206ee8bcbe876961a9ba06c25ca6d769c09a89d9fdea173e4c309742c04672c3b9fcb6f18255c8a8477b8abf669ba8c59ee7c232ff3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1cb91bc784644e518fcf2b632a79d3af

    SHA1

    09d4cfa03e437e3d40692471aef8c2664843e00e

    SHA256

    dccb2ea23fec73b692b411bb6742025e5d1fc05db68049bf9905d99763f9cb04

    SHA512

    194dc33b08d9b981e8bf385705f5a5bf7402024a50a5918a8a475564afd597df6b1bc3720fb9f8a68b7b603ba56452e1a25f090ac8a8fb8c70ba1375477248da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c931ee62738faa157cb4b4e43628a0a

    SHA1

    75e930cd5d1f6aa5ea52a00f2ed81367ae8fc9b9

    SHA256

    8cc45d76c45c1168838a8ef491e35c6ed61d57cb3a9448aa7ea539b103c6224b

    SHA512

    206030803e5294df67be28ee2ad47c5079ef64fb8255fb3fb0277a3360275e79cdc63c3588b5c6207b7614e75580e4510453be002ea74e00cbb12f1b95cdc720

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5156924ab83daabe81b616280bf05acf

    SHA1

    a8f847b50d2d799fda62f5cbf77878ff33e8b158

    SHA256

    96a462b2be2fabbe1a958f9bdd37592976958df0f972d86fff69fc1885b407f1

    SHA512

    550219a15fe57f42d080754e9f16882bcc18ca8b76d426ec5c64d2f70aaa7b510b1e9e2ebce73ecfaead9fa953cdc8ed6d6bfcee9135316ad8140042271cd63d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    436aac1bac024157712b320f5e2753fb

    SHA1

    fbe310ee994b491761eff85fe9b8bfa49bf1c7f8

    SHA256

    6e4f8f4b10f147c9c98226153215fb4bc74ce9c0a3df6aa03355d0b802b2bb28

    SHA512

    0798e06586614f14ad6acf84925c8cdb20db4df2873b09394b6df9cb0ec9a8fe007d0c1137b400708abfda49c3febaea8d5f8372dbc20b51491fceb77fad9ab6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    55f28b5e50a28a0efec3f6bf48d054ba

    SHA1

    3a5232e2d9a9cd0498fa23e81d18b38783d84864

    SHA256

    da998f575ccaddc1a3b8e9dc9a8578d5c3b9039e15117c5edb72815349a96cfe

    SHA512

    950051296556935b15774c07640a48c0b3f97869fa81b041df2801a084a3389adefa5b02be8a70d46a0203af01c02a4ecd84c6f9df94170d9ce17aaac17d3643

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5dea02c12cc350bcbed5bb5bb2bdb01a

    SHA1

    73bf479ad28e0f8a4901533edfad92b3f73662a2

    SHA256

    0f3e04a2bd66cf00d6fbbbe02ae4d16b1a2e73fc80bd020e611ecd4224349589

    SHA512

    c137b60831deb0d7e9f9caac29386a9730269abf64080579aede41145a052061620c2fa18f86331cfd182532246c6c9847f297ad4a429d2d5d3ef508ee90c701

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    196439cb59cea677f01f2cd50d4b0d50

    SHA1

    9494eed1a87a1869a7cac200e59f90bc2f985c8e

    SHA256

    8b062013825620661565444f93ad88103b2b2598f2bf24a42c771a46733f605a

    SHA512

    d740474d7c8fdbe9a1a7491b1fffe7bfb8bf882144ccb2c2be45cb3c18e46563dcdc308bf81ea93742bbdc29dd15a740950ba27419603e9c74ea4109f7557764

  • C:\Users\Admin\AppData\Local\Temp\CabCCA5.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarCD15.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b