Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    20/08/2024, 22:49

General

  • Target

    b128d7800c4826146cc447e2cc37ed6c_JaffaCakes118.html

  • Size

    6KB

  • MD5

    b128d7800c4826146cc447e2cc37ed6c

  • SHA1

    f229f11fbd8be3a7e6d9a0baceefc59504f8d931

  • SHA256

    fdaf3986fae73a78236e594c303a1fb23400fee3d3ae0153577d78db011bbafc

  • SHA512

    b3c21797a28e26791a64fcd8fda48aba6834a7dde7267bca2b5cde52c137566d96532c174067bc0e8cc6b6692039f8f5cfe486ec7004160a6ef030344e1b9775

  • SSDEEP

    192:4ml3yegwtsGqMMUi7q/+TmZT1POek6pIeo8:4ml3RgLMMUi7Q+qZhPOV8

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b128d7800c4826146cc447e2cc37ed6c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2360
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2360 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2712

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    59660d50e92b7e0f02bc180f2edad66a

    SHA1

    6bfe174cdf88b7fb1b1557edd280fceaafba52a8

    SHA256

    5825d2cd89f83a49145c8d6172b3bb32bf038567813e3852889a669a11ece0da

    SHA512

    d1bed721bf8d840cca75bee67fc403fedd27dfcef135e91bd9b0c40e59ea7d876ba01f7c122d5b22dc5b616ee0d3920202b46b91b94062befc5e5e957c5a9adb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43e90195421c310723d5e6b09eacd0ca

    SHA1

    f870db4c1f14538a1ca6e8be9e84b2748fefcab7

    SHA256

    99e9ecc47674de1e9c858e6a8a51ba444d0811a0b224187042001d5dc221ce3e

    SHA512

    20bc70cc479aca9ea5bbe19ee54d20394c357bdbd701d16a611817b54dfb4123c4717707d4225181fd50c74e332d7661eb77ddfc21fdd6c9bba93dfbffe1742d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8021ed65fc924ce25541cda6627c365

    SHA1

    141ae9af92fd3e097cea1ddeee36ce757de7357f

    SHA256

    7c4357f90da19a6afec1152f1bf45482751b0d745bc6571d6cc37e73d993299a

    SHA512

    8cff8740ae4ddde9b437630e54130b1b968413043a557f0d171eb33ddd78d596dfe3374d54e15834da3513fa0f6f2fc33ec1cfd37b324e26e36cfd655077d549

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5878f3fe1d5d5befb5b80fb52b772c32

    SHA1

    923e5bf2d2e8e33837443536fe71389c948cba78

    SHA256

    e233b838a25c5dfb03ac87dca299ce6f31f93bae9c73f95971a5369b64bba2b4

    SHA512

    e005fd578f8e91e7a65939a0becadb50b4a8855c2beaaeae0d2678e4c6aeea09138e32acbadf68eeedfc4a8f1571bd732f6049bbc4ed8584336b5855fcfd384f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d7b688c41bb5c88362baaea474cbf2b2

    SHA1

    bace3144c2067438f3289f81b8556d5cd283d29d

    SHA256

    63a652c9c0b901392b259dce75638c5f80d9839f221768cc4710e3aebf6388e6

    SHA512

    53a301f91b922723fe1f5199a276a5c89d18032b52b2daaf599fd11c1b1d724e007026ab08fd8f086e8c5840071bd9b5032096f5ad029b1d4ef3f0288ee91555

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb5d927e8884065190ff5b81fbd40c87

    SHA1

    55807ed929efa28db7857576ae95c6db6271ee52

    SHA256

    7fae69c3c2a6222de85d9d0a05a04b66584df2774c893a3e0cca81735b97965f

    SHA512

    2cd84894e985f4efdf7e8d6884cf43e1796a9d93264d567d3a4e49644e1d943d1c834164f57b7c9a631c1eeb73e37ddf25f0414623a8aaa977a1ed40df77fe05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0756f8197f96d3b1e3547630a628c28a

    SHA1

    9c8154fdaf2fea08f64c6c5e8ef6214ab2056015

    SHA256

    ef7bf9d5747b861b8ed1ba9a5762e96103bce747aefa46494483e7d018a534cb

    SHA512

    54ac25af5b8a7b98e62fb580a471f296de2ba0f78a003efb42afc66f415b71122063823b0cece5beef59471d384e31ded36cc43a30bfe546cc4154c4b5fec7a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    446f8b2c1a35205f88fa99b241e8a455

    SHA1

    38e001b949fd44293c964161e3b9f1dc49d36a63

    SHA256

    99d3e6a6398c37bb4772bd433712dae1e86d426c7061a479c3d17adc20c1e408

    SHA512

    76667b1f762a3222c9d0a0933fa888241fe8a8c6bdcec5b7f2ae5c9fa20260d69b46a5967e6b69e18c042a06b377659f8e58665d9c53e6c807e9de35e5f9f1f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05d948fe40faaebb6ddd9c0f7b6685b4

    SHA1

    de1e2ba101d16283d9dda8a3648cd72f37f6e391

    SHA256

    f09f196b0695e5043f932b1fee7de46402132671957b23544756f3d7439960f4

    SHA512

    c5d5e8b0eae7b3fac4784ad45943ec42620eed5067d632b9d5e2bf55033705584e01a6e5075cb227e579a818bed9271674d09544d8bd8cc7917996382a5cb87c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d0b4a314b1e971e3312aea2b7af5354

    SHA1

    1df38918c7f86b6577b8b2b7c3a02f9af35a97eb

    SHA256

    54bcd77ffd33b27bf4747370edb7998e433c1641a770468741d5a3de05e5ef8a

    SHA512

    409b6d53b1274e73e92ef11e73336277e1fa22feff9276e8d125917a26de766b2ae9ebc830f9d4a245c18c7678fab693772a88cc7e84a0e46554e1339e46ed1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc966ba182af62f89feea562246185f0

    SHA1

    44b8a7bc9f365932352844195676273b0837e18b

    SHA256

    883a9ac7512512e1367a93684411b0cf7e09e420fa3b5d05bf6ef00eefde6115

    SHA512

    8784cf9fb5964cba3f86533f3654dc0bf6e7c8da93ca5b162f6c5c4738535bea2fe1f5f144e1f7d707bf342b35eca976cee2f2f3b6d9575a6feb2719f290987e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    08b3c24741c17d024a6b6af48866cff7

    SHA1

    b32eb4eacd9acaf21dfe052659a59875027d9796

    SHA256

    eebf24f2e519829c2233a53451023e34a8666a21dc6d53846122bacc206d67e0

    SHA512

    1e473865486e9b2a745cb887ebdeeb75099b977c0d23f2f0675893b1524debcef4c9e9cf2e332e28c062173ed4544a0bb3b1161d6e0b874c38dc8e75814529b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e30965cfbead0a2e4e8b5a7188047df2

    SHA1

    db60ea151460a9f15e5101afae851d562e7e2f24

    SHA256

    0fa403dd2a19d0d71d98c01a2b96c83d9d36236ee57fe452332c39797d1bbc6b

    SHA512

    025fe599da20f30f1efc0736805483d71abcafca87309b6cbcfe784bd68a00bb9a789deaea5fe41aecc1043ca64c1c91d3a289a099a887c4237b8cdb6dd4d544

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1da28160b752e16a9d6f974e7dd5f617

    SHA1

    dec05babd9bbc6d6e4e8049717bf7d0612286d91

    SHA256

    b9af42130fbceb7cb02f888a1365a7ac1161cbf42b193553948604d6d5ef0f44

    SHA512

    79dbb284ffd53c4b99743ba85c021e5efb8d725a8e53d0d7a42820335f8492292b5937576b1af6f1c7bcab34ed8a6a190157b4f2d99c0602a6071f7b40edd10a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22f9a441f6d4e2de9e7e48af14f15303

    SHA1

    f7f26bcf09c7a974f5d630e7185b52292911b28a

    SHA256

    cb0fa54e55e6e13c607f1340159d9df88055f38d33f8efc725aa949b367e6e0a

    SHA512

    b03cae9968ef9098b2977445b476cf836aa54220b724fe50909aca29680e2f2dd1eede846599b8d082ef9580f95f548b3371ca1d22fe75fa051b02d11cae0f50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    50268891e99d8acd6796f2baf89bb3fc

    SHA1

    3c14def76f3cc30d7435e0aac967a76d8d1f0022

    SHA256

    6027d0a97bb57ebdf70d3dae648c0d89ceeaf187083c6bf70d6e0f9a89d6523a

    SHA512

    85fa41d5ce24ea5a111fca1cddca44662cbefd6110a6f3760a381d6f3232bcf59303d9bd224496d2029c9b6cb5bb3cbefdf35cb7ecf50e7656a6b07c7149065d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df5d6e2b077f53e8c1b8b0c0e3eeb54f

    SHA1

    af820b2597f4c64bb57b3293b88d267445f422ce

    SHA256

    c9045105cb61e28d609fc1d07c1a35c014a0d25004a7cfadbb52663f40f58ff2

    SHA512

    70c459750825e0f18fa8d7241e9c4e0ba24931ed67ac3c50577fe07a0fef3627d3832c12f50ab8596da75c00d58574f784e85ae84d8fb1fb1d188a76eb3ecded

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e7bd4f57277987f5166fe4ce03a1f23

    SHA1

    33c940e2ad66b26f8455a1ac5b16acc88e5bb18e

    SHA256

    b63c93e615da0a51b16a160ab47d0b8003aa1e0866c6ae84face93cef8bbf080

    SHA512

    0efbcbd4e9d9b35026fde979967687ec8755961d1b9a20f049ef810f9b36af042ea787a4687fa9df8f47ab7db8c1404755c195939d97cd075044bdebe75774b9

  • C:\Users\Admin\AppData\Local\Temp\Cab8FB4.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar9025.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b