Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    131s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    20/08/2024, 05:50

General

  • Target

    ae16816fe2f42aa2dbd7df1a73fe3735_JaffaCakes118.html

  • Size

    21KB

  • MD5

    ae16816fe2f42aa2dbd7df1a73fe3735

  • SHA1

    0d7cdcebd2e03a9f65bae51de34f377e49b42b03

  • SHA256

    433ca4ec05c72b521858c2c915d56d27ba92aa4c0a97f629f7068f77fdec4d40

  • SHA512

    7c195615beefd52a28e458a6f781057ed793041f6e1f679f70274d3c254acb16f2de1141167ac13b5a6c6432389288c2ed8003f8dd2544ad1bcbd30bee112f22

  • SSDEEP

    384:4+QfPFd9QZBC7mOdMky+KfpC5IgSnbmFe7Acuv61Y8E1jYEPd:Zcd9QZBC7mOdMkEpC5I9nC486EPd

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ae16816fe2f42aa2dbd7df1a73fe3735_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2992
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2992 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1744

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c75e9eee233af4c384f6bc80c591372d

    SHA1

    7e4276fb6e9d5da63a1b381de5fb053dc3aabc00

    SHA256

    8b46d382f2c323784c5009ff9950ed485790a95ba9994e6d6080f241056d825e

    SHA512

    3738dec9edf2aa9f4025dd07bea5d61e2fe7c0a1245b2a26b3ae57b13268bf354aaf28ee02c9e5dff867f24b5427ef050806ed80e07f1a1ae1ef03f9a759901c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df931f30bf8a6cd99d4ce859787d2c8f

    SHA1

    2c388dcad5a014fbbc24fae784d3332febc2e26a

    SHA256

    c4690d3a08bab77e11b668a0b6fb408832ffb64077ca9b7ea9ec60248f28267e

    SHA512

    61290ad54be8cdcbf21b998af262602d27bffed3b56b0178bc7a739ccacc4d1b3158b3d8ed11c89e591c51ae6b939be64ab88ccba3a07db9b71fbb31a18a6e99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c7c1974a7816fd3a3896c955d1b99533

    SHA1

    d98a1ae2d61d2d3120352ad07087d20d33033afd

    SHA256

    e9f23df960fbade49fd037d49195fb1daa9b77fdd07a3be81b32ebe9141dd4db

    SHA512

    afe10b586e22a9315a279818f7cc60066fe77275f1a43f8913d17942f1cd59f186026cd3ee8884486729459ebc3fa1caf64d5f909a3ee86f11751047ed74435a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4495a1fa460083c4f54d4c236cd4a529

    SHA1

    c516e0dcdd471d8833660464ba235314b3209491

    SHA256

    0df19f3f7e6075af76f0b5be6a68b09b48dcb424f62a2631fee9446af46e2487

    SHA512

    580b5337e027cd82b72873f652c7d1b4997a724b74e74cff82667fafe204f48ebb4d625150a500a8d0b0242f5e637d0e747a4f52eb37033e987da77b5ff8eed0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab59b27904db98e95ffb21c8a3e8439e

    SHA1

    865e928ddb70522d185bac0710318056cbc26d19

    SHA256

    a5dcdb21e633a59c098d132f3e963bb1f6d3e8e8bccedfe48877828d48078957

    SHA512

    58c5606a4f90a257ead0d71dd8c92069e001f98a58617bbfc303ed55f16ec0857a81d31ded569b130639c818194242639e9620256946b295496e4aa639c05286

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    83226b539673c905abee660014dbfb86

    SHA1

    2c67d0681b999a63e0c1d342e40e47b971685ea7

    SHA256

    206224d4d91ea56f8bfb8ef23a75da86a61cdba604afe7862ba5d0e78d551b1d

    SHA512

    8580c9333daf04a5602b8dcc1e96f29bbfcc8044d36787720238073da10bd9a9f7fae055f065b4ce7a4b75facd31e860e2b6dbaf3572097a49cba2e000e99093

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    222f1cfad907255eaa7e62eacedda371

    SHA1

    b32b156ec365a9987eaabf4152d37779d9282f45

    SHA256

    696f5cd65d2337d82bb3077570d97c2bb1d90574d94db09fe9c6a7fa51558e39

    SHA512

    177b9ce245fec2749c18fd2b9cc31bdb0dad83a1836d38ff14f99258873063974ae5b8618e98e729b6bc32e763db1d40733c6c5cec0280b7cb42cd090bd382ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce450c6bfa8b9289f6ff8918875f8a1f

    SHA1

    b883781e2d0f4f56fbca0a8f988499d41d86cabb

    SHA256

    3def449511f4ac4b19a107fcdd694ce8b975ae0df158897942b2f2a216e5040b

    SHA512

    2bcff846923aea7df0b3ef170934200dbac7193ecd02cd6bb02b2fadc3e283a060e7dea01f1245e2ea5db9715b70afcc3fb3a68ae6a1d1ff4a63383c4432b8af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f6b2f7d660e0e4260de7949c86563ed

    SHA1

    600c50230ffefe2428e125338f9fe28d2ce6cb50

    SHA256

    99842f07fa71c54ae149c7e814b7d79264416d53fd626929b738cc4c75ebb1bc

    SHA512

    3ec4a368781a9af2431a99e2bfd06e1ac61e7ebd59b6995062d89b41f303ecdefb0e58f038c7750d8c8c03f31b805afd48b84773cf549d9212e76bd9abbc9028

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8cacc91c12b8f7f8551ad95b7cdc5803

    SHA1

    0c437ac4a6b77c6066bfca7c06cc532b2e4df094

    SHA256

    4bbd937bf9d83e96c2584c4e7066102c7e5a676362c1966c31b68052dee7c916

    SHA512

    a8de6106b9e89babf0f8cc64f3e7678470b92bc6b87a9d9625b64021d62779b265010aeb1d3cdf0a2c5733908116eedbe6856654a3ce3195b9d9f06590120da2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05212722eaba3d2b30c08521d144f4f1

    SHA1

    d8ab29a17ecf32593c815ce8822e72cffdf5f0a1

    SHA256

    5abe3c762188b01424339e4ea3a09d848f85a897bc571c644657f325c4367028

    SHA512

    3f069a7e9f94e74e62d97a9636e113eaa83edc4adbb3b0efb9eef7393bea98f06d327e38a9a12531413af2d55859e7996fc38ab799ecef959edb5c961b0f17ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e9c89a3edd08f263393e457ce85cd423

    SHA1

    7c034115d0e5cd7f71bc82a62db5cfb965d7ca54

    SHA256

    0d4a06cdbb514910e9395091f1e278300fc781b17016a924faa8fb924c667e7a

    SHA512

    8e88c0afab969302d80cb5ffcb5e37898d3f0b99a496d9c23e3b4d586908aacd2ce49fdd515b258b3fd50ef3db866d581fc978439665cc1a845a8ff706aa9158

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    90d4bbf330fac4c1d8a12d4a47a8ab91

    SHA1

    00e114908597d03faa40727c6a537b4b43db1fc8

    SHA256

    2c089946f8444008d910a413b219e7ecab5af4d33a048d064023a801fe295158

    SHA512

    907bad0708af86b8dc669c504f5cc8316d18d35684b0fa24fbb1accd6c4f2a57eea27a601fc911944011bb1cfd0fed05e7f2030ab0ec4cf6572d4adc7da89ec6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf39609052a95da444a961a251ced920

    SHA1

    a9edd69ba0ec1ceb1787959855e5f668060ec7a7

    SHA256

    20b8af20304a117e144bb3ce691d6b631728c74460d6a0226011cb6649c08184

    SHA512

    149084d49ec664f62f3c215f86d0a288ca0137180b9beae74f699de79dcd7be4a01c641889cecd007a6d79ca18cbc2af91344b11ee8caa3984c2b1de6b925e9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    55e70f4a6801ec347f7c4a1f3ed44fb1

    SHA1

    ac493c1f45127a6a6846f5588e7d74b73740e474

    SHA256

    3f7e0da16cfb404bc1bda3f6819d88ded1e8e8ad6a8f80b1915406869a1efc4e

    SHA512

    71dc84ae0215d320745a00653e138c95fc07b75e75942a102d4e72c646bcf572282d0d2628606a14c5483ccdeb8b32ffbff78882cb7c1642d87d15f7502df0f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d2211cee1aec0910027450f0b10ffebc

    SHA1

    baf80a4412b27850c4916b408d14a60e7fb7b02c

    SHA256

    20b78800789b3ba77b499ea3c0ba6d5bfaaa1382f39eaeb23d4e5d85d7b5427c

    SHA512

    23a1bd7b41066047c84c9ca168964dcf41f8a7bb8e80876e4042c26f06d9ee89cc88c26c95a14c37db3bd0356e53e04fdc2213a82f9cc4374dc79c6e8eebe35a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ffb9caa81a44a6448704f3bb4449a1a8

    SHA1

    688749db52de4190921f20a3c3d5a1b027c1bc18

    SHA256

    f04e7028801ad0fe38af39e1137ae5d6098cc5220037429af51b51843fae2727

    SHA512

    188c0c632391b5810d7e09b92a4d94f813d07de3aa018dab1154feee3e3ef4034febffae1a36244475a7dc489998416c9a345ef8a08d752e4f90e576e01a322c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d4c5d97cbbc04244bcb5e8a9a02a708a

    SHA1

    81f415eb4429c7a4857cf86b787ae82b0931e6ac

    SHA256

    7c3daa14c4874d4d174dadbcd03519f74de55fee0bf457acfa289b597d9bc62e

    SHA512

    d8d4bd95acc91c785de0ebd8ba1c8a008557a86641c6cd4fe71a6cde656b38c0f701b8d83c97c6b0a0d554f376a98e0e12dd377ca1e6d10ff75cd696a834e272

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    655509037625453418970a5b4ede54b7

    SHA1

    3d5d894be907c2ab013d81f4ebdf8d13efbe8d6f

    SHA256

    5ec36ec508a8a786dbe45661e52694721fbce1d6d7f3613cf8a9f4d075e4c079

    SHA512

    d032d15623fb1ef193c65e2f8a5c682be19574e913d26bae33ffe5ad1db656d1afd3602123082103e512d14017afe8209304b020252bb15e48855fae7f5a74fd

  • C:\Users\Admin\AppData\Local\Temp\CabFE6E.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarFF0D.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b