Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    20/08/2024, 23:04

General

  • Target

    b134cd2839e9fac745127a3c143339c1_JaffaCakes118.html

  • Size

    8KB

  • MD5

    b134cd2839e9fac745127a3c143339c1

  • SHA1

    b22e477d8b30c6d0702ffd654776af0af28b6b3b

  • SHA256

    73aeb80948d5cce5e78d756ddaef1aa6d7304302250c96893ce90f1144f9f5d9

  • SHA512

    2408c5943fd316771e10ee9a3c326466cfb54f08a22ad480a7a0cae07816283c764c4c931d971629755260ed22f4914d450150f1e5c005d0e72d723f69ff93ad

  • SSDEEP

    192:XhppaaJ80Bh1C0Eb4xVLE0RUIGsVjvZrL+EMjf:xySnLXCDQjvZH+EMjf

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b134cd2839e9fac745127a3c143339c1_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1460
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1460 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2216

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    102141f9a1eb93ee71426012168434fd

    SHA1

    bd3611d087a5d3bb742810e1e418727219f97d0f

    SHA256

    f1ab630b02312b03d1dffe831b581e8c054f8c2cfa6090727cf5cb92565cf57b

    SHA512

    952e0d01636f4928016e320c54b83ee70a156d392db7dd5ae2f941083090f1c28fe97b207b8bd56d9480d55787e878d49d2daece4349db621e903a49a8f77c70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b5127b57c21dc1ac8e8193a829877193

    SHA1

    54549e25db13e6bda79cbcc3a39c3337b52d01bc

    SHA256

    cbf325d666d949af55be34c3b5a3527671ae413dee7e4e8ae67a2af2aabaca8c

    SHA512

    5745dae94d4de6518e55f003cd08562e1f35618b4ce1c50e7ae0c1f9ba5f6efb1f1784905174ec7e22127bc8094a693ce6626ded77deffb12b2ac2728a5b90e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6cac99638743c8d89c068ccd37311991

    SHA1

    7baebed5300f6c1b735b545cd676eba88864f55c

    SHA256

    1ea3b8eb19e516e962574fbf1c4c60c325da2314c129dc576f1b5f35266e5a43

    SHA512

    2e060e6fbb26dad8542c4e989b13a6ec8c9fea79059ba70e79b88d08cc8dd8b87364e99a029ce906a1a1a71d4000d1d5aef78c1fab1fad24688af12c7cfa4519

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2aebff6fe819cb7eb94b54db47bbdab6

    SHA1

    ab4a57321648b06d671f1756f660e43a7852330b

    SHA256

    ee150bcefb8a97f91455404823299bf9b61b9b265d563381e797f7a6d36d8ddb

    SHA512

    945da5e11d2944eecc83c0f7df4b0e6044b5b3c8e4c4954dad3a9ecf2d7fe49353d83c80c425c15d686f9513a9ab70fa27c863476e4abcda9147b6d651204be8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8202728efdcc824efa33d7e03d2d20b3

    SHA1

    83b31c5fc888ad09c83e39a3c0469c0c85a5a88e

    SHA256

    2bc04072fa3f006eac4a2ede8d0d719114593410749ded49dcca7c03bd75ad15

    SHA512

    331100854f15d07254e6b1f5159b7013a25148c72fed2fffadb8cb1395a50a91ac9ce0a23315ab4267046268957a4d150c8e4c97eda07caf07ed490b1457fbe7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8e0c7527233a50eedbdfa0e756463e0

    SHA1

    d1d9b50cf1308550da65785f8f764650c4cb02a6

    SHA256

    ec9a48ca15bbb9dd259d6bb78ee61529820a16e1827b020db0002e5ef074cc06

    SHA512

    279a86ceb38c1364d942017122aebcd18fee96db1dbe39d2d7d334220813d675ea505f67d91ef674ba3f82b85ef42208b6e8310068614b704b3ad490ff28c8e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b76976276b9c056e14557154901652e6

    SHA1

    1a4460156aa419d14232255fa690772a8ca00889

    SHA256

    faab2aa29b4007c42c577b16f73acd6820e84b898cbcce616b0c2da4df58d60d

    SHA512

    8f4c569449c0e2574a7f65690bf0da1ff1021b4a846d03676eb0a6483deba444f43b59aa203f61cb33ab49e8d2c8a4497bf2a1bfc2f64d278bd42c7fd251f531

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a39585804e25823a484f1a8c83f6d060

    SHA1

    6c8c5653bf648e0ecfd32480d6f3d425b3b4586c

    SHA256

    c69a0690a0c19b7134fc3e133bc495043baa4ffc8b3bbdf16faa43d26da3961a

    SHA512

    695a781a83149b7222bc53dc6957a7ac1d9ad82569390d7f8699362ad67fa8e1f7203991dfe495858232b583942d873fef44dddc1f9734966c86fc16f089e2d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    79a6547f15f8fde8aaf1f3f2085ea25e

    SHA1

    dad58fa53538b37fdc078b622df14ce0916712d5

    SHA256

    d9b8007ad2b481a319a1608745a44fb4db354f5ee61b5790880f8363a68d8e4b

    SHA512

    c70d79adc7dc1f2e2628412f43ce37cb4b221d6a5b90241c0b764e70b7b2b2f40ae619f62490b975d28fd36033e9704b52fd3fbf2a68be3806af5e9fe944cd05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a6a80a191b096abe118d6469f6af2cb

    SHA1

    c0e6fe344a34aade4c17bfa1802747945900b355

    SHA256

    ee9993ae4b97ab24d64b94f261f3a74fb9fab38576c086ef30736a249c80e8f0

    SHA512

    aec1bdbd2e1b1262d8b8a5ec6e84f808fcc4e9aadc47ede3f97d4d336a2b6f173a14272d18fd890c384f662791835d693e2aa4ddf5a8d0722a366e9fd82604d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8c2d18f25b03c7a196e50f42487bb53

    SHA1

    975373f940c959bcfdd652923a05aae623f48a08

    SHA256

    6fe79e97c83d5c63ca15f558c6e9429ada02a1d77a6a71cd9c6be1faa43c52d7

    SHA512

    8394aade0bbbc7db4f90a2cb680093c367087bd71cce569331e919bf1b0bf370ad34d18e44f4f7864279a546d3fb20b5aa25c780498815f991a42f0f5829ae1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f7f59ac03e747f64c2b9978d11ebf70

    SHA1

    77bb469d75da23eb2c33c52b3d48998e053e09cf

    SHA256

    c24294dccbf5aeec9fac775770f9319404c9e6945b403bbb708777092dce414f

    SHA512

    14f4442be2b853e94174d9ac6198ef624bd8392296ae67b732bcc1131df5f5b2f3c79a0198bd2774774a854464d74593fb40e22cc86a4b77406908b295397d8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b1ddc8e8f626688a6f8a8aff678b28d

    SHA1

    272d971e056385e262f11488048ff41529823b69

    SHA256

    cadff8170d38f55fff5afd6857bd9608ee1ca0fcb1ba4ed8d4d8a35ff611fb49

    SHA512

    7178f41a12655337c78ba2772fa480d49fd05d7b167e1c31751142b6320b6c95765252d980e7f349fb1429a7b90e23f194d8c8a06bbef486045c556e354209c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dee07010da197af9685519f1478c52bb

    SHA1

    e4c013211039abdf77298bb8056f8d667d6ffe50

    SHA256

    e423010d42b4363ac5a78e4e663ede112438f0f817bc5811a1e8e032d415f69f

    SHA512

    d6b4c0fa2ec6796ba21448b3aac2e1de4c85da4633136fcb35095ae3883241e58177abfd49c0f187e4daaa3c700024d766fa84217a4e0fd86acdfebf816dd6b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af41052f6f87cfa29f399a9cdc42da72

    SHA1

    88b853beee41723cab8be098a456414603cb9599

    SHA256

    4d0ac7ef2512bbffc7ebe134872a830123fd053ae7adb947aae35eff642064fd

    SHA512

    f8684ded57d7768c06f92e5898fdb3ac5af8762efc9cbcc67066028c0106164c65b38475bc3b798c18d71528f48c2c8ea8716ac10687638f37bb5026d9e5f6ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    54a9ec2bce2dfa6813d39127f6ee6bd4

    SHA1

    d2b71ca4ddd736e1368871ec9d519e7a5d738f5a

    SHA256

    3e44df339ad602d496179693a6cbb21becbd8074895db13c7cb0355d259c1917

    SHA512

    e5f50e8929fd2d58c674664f50d8ae982e95b2e2f24aca89f4e4fc491b8d922fc63caa2d91a63b3107c4394a20b3effda6d7bc97e5b51dcfcfc3369aa205253e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5a3b8efa7d906b4653ad00ef1ff203c

    SHA1

    afb7dec15403a43f499e2f0ac4c97c05936c5367

    SHA256

    febcd4ab61f627013cbde625f01454b0040938dddfba6e073ef955294aa2c792

    SHA512

    ada6e4b84b81a774b5b317f25bee81a724bb8ff6d90535a911d14d1c483511b9e95aed3452d4b9b2d032a006d11ae4c6527a26e52b6e95e211abc6995526aae1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    650e0cdef5f33b0fd2672510ef16be8e

    SHA1

    e82aece38cae01f24c9f28454295179af6c0125f

    SHA256

    2a43a033c9a8df8b188c068b6d4488834d88d2040e166a7d95d3281403606d85

    SHA512

    d80d1b7eb6eed1455ed6a2d686261b4c293f14ff0b08c71c0a460db15c3329cef8933ea3d9f93765e877a05ac5ce382aad6bad958cb8ca72de639bea32a5b2d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    31da6f86cca62bca0c1c1ae246b0222a

    SHA1

    e1211eb42244c1ea12fae153b1e7a263129475d3

    SHA256

    e00cb84dfa032b7b7e6e37556efe9ed1e91d9fe3a62846f3dde04c9f22b9a430

    SHA512

    7592beb3013ac196b13e2d72bc2614be9b24490b3975814701e4772772ac03c1259d05b8a5d0fb75a0f57ba77bf39b7dce8c903e7c11884a8b1a118bd7965b83

  • C:\Users\Admin\AppData\Local\Temp\CabC3CF.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarC49D.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b