Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    71s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    20/08/2024, 14:08

General

  • Target

    af8678de5a518104470221ca5bc72f11_JaffaCakes118.html

  • Size

    11KB

  • MD5

    af8678de5a518104470221ca5bc72f11

  • SHA1

    f51b9ab53c4be14ff4a5f72dc62a009782c0e7be

  • SHA256

    a46a66ed3067bc056b6da8e4b154b6fbcf056ac0c983dde606314bf2262f8d2c

  • SHA512

    d2b37c3896d453b72ac09c03468b884bd77b0ef290112083acea8ac2ac6321c5dfd2a0e94dd58a1ab3fb12f4df60b073eb7190b3c252c25cf3960aa6b9b9c417

  • SSDEEP

    192:r2LS2Lv2tvYP2LHR1LfP6wgNuE302yeu08:r2e2DqvYP211LfP6wgU7eut

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\af8678de5a518104470221ca5bc72f11_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1732
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1732 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:960

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d492d04b5d903767593718dee05d2f22

    SHA1

    618526060cee970dfdf4dc35928b6e90e8f7a378

    SHA256

    d8bdbe4edf1e6726060d624cc8736268883fc022744d9d1cd858f119824dfb7e

    SHA512

    ff330abade68e64fb7dd699dc63b56eda02385777e7a9cdb00bcb741c371a693349097caea0489ce70983e2537f2b996c1e893dc4c8f7ec73ff707befa53590e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d9f2d867c05c2b33dd4e13a3c55179db

    SHA1

    a4096f070dd9487ab933e5c81b5515db263ed816

    SHA256

    d5db564022583bafcbd8317039a9b5ebbdd388636825c42d44e00aedfb3872e5

    SHA512

    4cdbf03168fab3aa9cbd86aa53b7ccbb330096d9f0c1e5dbf060c7b43e78dd4372984cdb8d6f0a63f3f7f0489257d160a14cbe435f188952fce9a5f6ad06906e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    261defd382b7c617ddb480a73c63a32d

    SHA1

    c4e84948b45c65ea10dfb1fe02162c0b790b6bfd

    SHA256

    c3e04f3a351f5a44fe08c35c549e692949f6414741532159aef57d78ef5f6695

    SHA512

    6ba47d0c5ae5fb1c10562827a22632fda2fe68b267bc44b8ad629c10595c9665fd68adeec1279692e3c160afcb84d41c124379bfddec3335028592ea61dece6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    36c7b2680f5966100e94324a87bd7572

    SHA1

    60a33c1faaecdb6fa449cd2de4b23b1a6030ee44

    SHA256

    cda4ba7c00d7428c5729fd789a322a2f767866167c93c0cd5a3413be8f679130

    SHA512

    9a3cdc15307f997b1d832906a5074f7d1a8bcb1f464bc4cb547e23ae9e640a9532da923fe4ee3378f40c1540df95c031bf4c629f0937f5f5488acb302fbc26e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    404d129a90c207a56ebb466816767ed7

    SHA1

    3588eae0685064ff55a366c3f56c0e1492c674bc

    SHA256

    7c7d55eaef23dcb53a8c695c4e6e1e3b4e4dab31dd35f8dcb48e1c4e92dd303b

    SHA512

    02f08b684139ff661a7b8418446edab17b8d41016f76e9d22147f03865ad38d797bb3a18dd6bf6aafc1182d4e5b7256592d61492f60b1a110d8f3372eff09488

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c159c878f8812b4b773b8ba641b18cc6

    SHA1

    42de206aab8da996ac25fa52e72be3c291b88ae2

    SHA256

    b5e500b07f00c525c0ea4bd8e59c810b2666e0fd7acde8d6f8fdcbe5be3ba447

    SHA512

    aff43c6529f36a9adb2d7ac1feb04a09d8c1239ba97762a36a9b2241a74508bdef32423a245679306707f53e23c00b3c9781fc961128a6f71a7542cf8892252a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a72afef6cfba6a05a2954c44ae9b5e5

    SHA1

    ccceb5c80b94206aab8e7f6e4bffb9caebba0a07

    SHA256

    e22d586466d916519a2ec18693486071d7d1fafdf8828e1969e70ae3cbdf78dc

    SHA512

    bf351b784f652cdf5e16f338bc1de3ef6a54208e00f65f98bd7fb91fdf081084cd47571ec07709ad2597c3211461e6325da31778ca67451b6b4fb5bd0ca01ce0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d80855f6d0a054d6809bd9cd253a1751

    SHA1

    f3046d02b3c64c080fbc6e34ce90d7fb538c4f77

    SHA256

    ed556daa1757b33d78d7f849cd33b9faa61cb9e1f78d7004353030cf318b2668

    SHA512

    92abd373b60bcd6820e406bf1e072788fc9e61c5f1e79342f7493d239f4ea9d18b9353a5c1bc648f866e8483bb532a0e947150700936a5454d400f77f291d62b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d6d932edbd3e247bf3b1377cb0ba5654

    SHA1

    d6d99e2e09bb2eaf10226cb942da9065e9f4250e

    SHA256

    4230ef181765b7bbf6660cffba16665a36d7873e7494a5e6693d2e8e9b391684

    SHA512

    4632402be8c5ea01c888127b57ec1056aa949e290a45aee492479b351e905b193fb0f08ca7dfd857f6bd76824b350dd7c1cf5493fa38196e2671880501762836

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1f922a5f9a2a15a9d1bdc55f2aed2f8

    SHA1

    e4faabef81f5926b6ff2eec7291345da196b4fe7

    SHA256

    196ef7d48a2787188166562bd1febaa2ac1ae1c22ce5d835508b66c3fdcb0846

    SHA512

    c40256c04393f54324059495e1ef758dabd63942cdabda0a6ae03b9f8cd0a39ce77c1f21be74a30dc1e9517c35662e8e6af75045e6beb384fa42fd21883da4d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c112fa12c54a6e421009d3f1330d204a

    SHA1

    48cf11a4671aec3f3dfa27b902ebf184b0a2c2dc

    SHA256

    40f44b349c9a1c3b514ef6d85c348875e44b6ace13ba06ba720108c1a2c96362

    SHA512

    a36df8814b39f9049c6dd34d18ac912e6c87904deaf56bd7e8e45dd6fde3534ca8547558e7f33a427581bcd96e530a371fab5d315acfa4f2b5f3b0c79cb12abe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5b93d55ed74f87721112359cf4f0b213

    SHA1

    af49c07db31cb839ec4ad5a35d02d10825892e0c

    SHA256

    95a109ae4414176a4c7811bb7828607ae739856fee98e86259f04d70bd39a5a6

    SHA512

    59037c5b74fb90dd691dc8ab28a72e803a598e002c82383f7b469dc904a5b7c0d9c39473a24d5722501646bf2dc05ca3749802006dcda93e4168190685ff7d65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df6b8c375245b716af7e8d46ba218714

    SHA1

    43a74b9d4e6ff873e0c0be75bda211336d191c89

    SHA256

    9116a9417487a5d99a79cf78670229da0e36d04432b6eb3073ce934566bc14d6

    SHA512

    dde528b0b35e91a27111af1fea0c3551ddbde605abdcccd5a53795fa9097656fbd77eeba3d77658329f7fd987b673e30d1fb0d2f7361a5a1136acc752c79fa41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    01c38ac3c045ef8049aab7ea38016d18

    SHA1

    cec50ff1a9bb3ca1452203b8216a60ed0d521502

    SHA256

    dc8439764ea24c0c66b231f7b3d2812d8b79cf1b534a6bb10075c87a08e6ce66

    SHA512

    eb34da825c8834843bbc7a288320d59d324ce2b2427a6203011ff7e800d282899342283d352cc9eeaaed1a9342855f42029b4ddd3b7f72bbe6ae0008f8c9fca1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e6c10f8da88d8ee9d08869fe06963869

    SHA1

    330ca20b05af2d1c4578763ecd04441dcaaee0a1

    SHA256

    0dc46e515cc52dcf0615fb55054f2421940f97c0bb476d8322f6dc5639b321b6

    SHA512

    9787c4325514d974c497dcfd5af45fc49c8145f58175b20ab92f1bc616948a23ca200b712669a5dde00c67e00d7ed7c3335dde5e018113a2cd2a70fa88fc99b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61dec1635d458b39581a22bc5ffcf210

    SHA1

    57a437cfb5c211f3eefbaaaa9b34c65bb6e61225

    SHA256

    af39b6ffc478a4b0a67f5e09722acaefb2aa08307bac5eabe9486df4bfabaab2

    SHA512

    418eba353f231e74f78aab01e52fe7ea11780ccd98686d17940dd8bcfd909f04e654cb34f459a1b6ed2aec60cb4407aa3c70c65b52ed93382273f91d979d1818

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e2c6207db8b9beb4bf7bd86dda57d4d

    SHA1

    c54d2ed30e558701c427e4c243587fe1c82c3a4a

    SHA256

    8cd5eb8496c47e1869da0e191eeb117ce431a7ece35590986603245df09ebfd6

    SHA512

    30dd06a1ce3e3390fd9b9d49b4931593a596df459a3d6a6ad2e6d9cd10d62bea22529d96717ccba6f2d33d184d4d032950441ce5192da1760d766e5f8606fbb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c832c4d33a94b91451965a3be0821c04

    SHA1

    7ee6d98db6165c23e878a898a3165196914ce0e4

    SHA256

    c27f1ade7fa1d687df45644c5910c5f9693b005642cc9451f428876ce83602c8

    SHA512

    f53aec0f489f2faf7a1298c597325ba2dc16a3267945eed767a52d5b1c41e702d0693a79d5defac4a5c098d4ce6ef0e9b365596525efa2c34d36a8c61b9c55cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b2572eb447d0a51ad7b52ad23592751

    SHA1

    9be8ed52ddebe2fd5c79bbae4504cecf9fd2eef5

    SHA256

    c7f13359661139d683103f7dc454642adeef3f8f9200ff75c94bec603a56d67d

    SHA512

    7bb65641b447e73ce9385f117d64513cfaef19e70a3c3973cd8090a72ac990b2d4092526697dce9d267bbfeb26e3a6d02278a1c812ad302e6cbca6d2ed627bea

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XWMUP5AI\3w.com.vn_small[1].htm

    Filesize

    178B

    MD5

    cd2e0e43980a00fb6a2742d3afd803b8

    SHA1

    81ffbd1712afe8cdf138b570c0fc9934742c33c1

    SHA256

    bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d

    SHA512

    0344c6b2757d4d787ed4a31ec7043c9dc9bf57017e451f60cecb9ad8f5febf64acf2a6c996346ae4b23297623ebf747954410aee27ee3c2f3c6ccd15a15d0f2d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XWMUP5AI\jquerymin[1].js

    Filesize

    70KB

    MD5

    10092eee563dec2dca82b77d2cf5a1ae

    SHA1

    65cbff4e9d95d47a6f31d96ab4ea361c1f538a7b

    SHA256

    e23a2a4e2d7c2b41ebcdd8ffc0679df7140eb7f52e1eebabf827a88182643c59

    SHA512

    cc92cf5a9b3a62a18af432fdffb81b76da84e2f43ce3c7800a919c10809118d0611e29a47f103ff3df18a54d5331bc5f06ef4771dc406cc763b30ff2a66a3e81

  • C:\Users\Admin\AppData\Local\Temp\Cab3DAE.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar3F76.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b