Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    21/08/2024, 02:46

General

  • Target

    b1d58ede658500b269ed31467b90f33b_JaffaCakes118.html

  • Size

    1KB

  • MD5

    b1d58ede658500b269ed31467b90f33b

  • SHA1

    0573e73a1d2ef1f996845eee3e587808c25ea747

  • SHA256

    ee758fae0011090d2228ee155eb07603bfab2b137797700916911c21f6958ff6

  • SHA512

    30be6c7f4c76dd41f11c4b577fdc34feeaafa6158dab2314e67957f44481a1ada73cd67c259082bc0bc5da174c8ea9f0b6f2eda11948c163596b5f48b3482666

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b1d58ede658500b269ed31467b90f33b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1048
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1048 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2572

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7fb7a5555bd647c43b065112518a6ecc

    SHA1

    d9e3619358ab681b13c61c7cbd1134ef16d5ea43

    SHA256

    99874c87708d53f9ec675b17421d1adf87ed3c535b218886d0e23af9b53a282e

    SHA512

    7ceb8c2d598309dc1458a026a5eb5eb3b6e2a196ecdde0cc05baa051f5a0ae8e2e7551f1c44fc0cdb3434fae4dffefc8ed65a644145cb4d1d711ca855a3afa67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    413e792f87674c8b9cec2351b0b553af

    SHA1

    15024a5bbb5c71fdd1c86d784fb78ae284321e7f

    SHA256

    4033bc29f3ee9cf8c8a287778d1850abaec5cc207bf78e0fff96a47d2d545205

    SHA512

    aab63d8535213bdaaf70616d1bb1807bc1bae74415848f24a8daa730c1aecef61451142b846409f2aeca0ebfa6977590bde0e29e4ae57e064634c0c5fe12eed4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e9df3b66ba4b44370c0033b479e4ac42

    SHA1

    14bd6c7c30797d5e14cb58c185999cc07a55f9f1

    SHA256

    55c2624002c565b63914dfbeb63e2db405f46c7619ba81705397523838986e4a

    SHA512

    294e64aa0bb56625d520d869d608a020bc087f86f93cae11e3a9142ec36f03f5b3bd10a3df2faf50795b2db2e18d05271f40d95957064ef98b19df21c3110783

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8cd1e09063df54968dd72a9f073e029d

    SHA1

    11fad202c9f1fd2613166fc48b737c02c1d114dc

    SHA256

    5d3d9ac9118903129b8ce40da84bec7c8bf3ffb1b85d13f4e452b975408d013d

    SHA512

    0c0d3264f4d3686991f881a4606b07f95b0e3b68686db10a40188a38d96a04c4dcf31aad37dc944585cbbc67394cb74573e625518ed251758cbb04a0dfed9820

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f607da71e9bbb00c03e433e06016008

    SHA1

    94c379aef2dcefa784dc6d4dbc66955a436c6f4d

    SHA256

    76a3297510f1720b3645e99ac7f4e019ccfef669c44f52454a58811d5d0cc8f8

    SHA512

    2095a7c8b9291f6e533ee67f6d0733d5949ce4effe3201cc41e1ee15778804c9fa8019a667f521049060f26378e19593f3ad60eee5c803d4bcb03d22033539f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f1ec13a96306b3eccba9e04f14255e79

    SHA1

    b3b5dbf63f475fbbbabd795f465dd9e3690cbbaa

    SHA256

    701c553cacdfbc6397cb27ab0311397846c671a06c13e273b881a0d33b53fc81

    SHA512

    3e8e671abd7c73c25314096cd8e44231c11e4af5b88d52e4f4f6835de0cd0bec8f0b883bc96cf52fd45379679bf883da820f1f9043078ecd2f290028820fe6ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0e900cbe7d8c763445d50dbfaf52869

    SHA1

    ad5bb06caae83bcbf5bcfa6b3ab8ba218536c237

    SHA256

    328d5a705d269d1dad4f538ce9821f93b08d91494bf03db337f932b25e4a96c1

    SHA512

    3c933c59bc3aaae3b33a7dd1550276e3b64fa6c8ef304d3f984727ea2404ee2eabe17cb6cc3c7fda36bd6214aca6cf17005fe8dcef8909ccdefd01fd8a08018c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b5a1b54fb2d75b187689f85d115e7fd

    SHA1

    46133adff45680aa98e3e59a8fd7b90cb0480957

    SHA256

    8efa5d56795ef2275fc3f73efe95770d65c4ddcd496e3285ddee719f477191f1

    SHA512

    b064322f49106de9b2310bd5358730774270c4f3907c7e8e95f9c6f79180b180c5a6e1707c45f7ba8b46ab3cf5b765344f9b3861eda7460fc94de3d2115b4aaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    784f277be661b61daad2c6990b1472ea

    SHA1

    c7f48a36a92895f75b1bb54437b504c80079edfa

    SHA256

    2f06c16320981ff498a7ae648797b3558af7ca605c4185c6da2444a1b87cb2d3

    SHA512

    7b268f5cc2ebae3baa2ba409bb3904b9bf62afd4bd0e661882bf91da13dfb4cf0bcefdc0dcd3e98d5f0eeda4380d245b27151cb4dd3f0b90a8bcb7dd205be7b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e9d9773e69f04a8a8c5b499ef5992ac

    SHA1

    eb748e0cecc552e8132d14f3fdb977fa83da7083

    SHA256

    0a2bac5ec65fda3cf405f75bd3cf8983d5a7c54e7bf4e7ee55d93f20829146cd

    SHA512

    2ea70c014da55452e9fb9f78f2a77f019f85708943fdd88df4559f3528b69ad8c7ef2a197c8a04a1ab29091ab764fa5f62da263d07c361c4b1e4d869055b7ab9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7062dfde542c6679b55c1c72779805d5

    SHA1

    c673ac41b39aad2c4ec6732b7dde671daf58ade7

    SHA256

    d79ad974a4dafac3f09699496aecc417204bef13cc933d4e82dc8002766ee387

    SHA512

    0efcff3d77de8a64a1cf90be8d94b14ac821db9dddc7ce17819c651a2df6b5332989d3799a729cf49b50ca414f9ff2879780003bc5de36d2da2e897fda1ddffc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d3d7615fee9aaf4a085d49961a7f6b55

    SHA1

    d0b067f73771959c2eefc9dc6baed7dace600a2d

    SHA256

    ffe4d15f27fc0633d1e5d7932678b2ff388e8a32ebaf6ac75c451ea941bf69f2

    SHA512

    23f6a5ef39d2e6223a45c2dfa8989a432d1350c6e92aae9678ee174f1db3583016c81ce74097b90d719d8847552029d24162a8ab36f4b4f040ae5701da114486

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44e504de4fbcf7ff05ecd2703565a000

    SHA1

    ac285b2978ca1a0a25a14b9eabe53a9e9289898b

    SHA256

    3eb1090bebfd5654a77f980af673e5532a287078aa89ad65b5487bc8261bb5ab

    SHA512

    721f9392446bb32280a168506f2fecb860b55cebbe36d96edbb917188280144af883c90ca0f34a0c201f14a74119ccd0efb5f798b85b0aa452373958bf89e5d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f7dfa2fba60fe519f5e26f83780a579

    SHA1

    1bd55610436553b1fd1355fa5ff628c0367e2559

    SHA256

    e60119a79c01e7752e7b615bb18b4635c89ffcd753c2ceed08cd92af75f758b7

    SHA512

    5930d69d30467268234af5ca38b3c8b06ee1516f4e5d9513550075fb3fed9f9e47c9ede858077eea6bd5091a1fd15a498a9ff8c685d4ffcf0ed5cfcb5b035b25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e3d21e33145e393d303fd6f918fdadf

    SHA1

    0ef308e9203da3731c173ca7287ca5123996871a

    SHA256

    88886d245c5ee1d4606c9a74103906a7478d4e7950b517112944f70543b48f21

    SHA512

    a3e9d366fced527792b83de1ccf191bc0dadc06731c50a9959dda397701f29c4e36527a0e7b9cc4bfe5dcebd613c4d334e3717914a2b93b418eba3d325e59333

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc6cfd36f8d8694d7ea4bb36ed7f9f6f

    SHA1

    05230fd1e7804eca989344a09586ee371ad8488a

    SHA256

    85ab72a01398f6ecf6b79e0eb7cd4b8c2391812e825770dbc83a083b4b6503b4

    SHA512

    dd8d21df4908ca11976796353298a36b5e8d21988c8ff9532b7184a3333a26e9ed6d6f5668f3a8681851be874c8e7b4783d52f390f9eab61e15ba80c1ff67f47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    431d459ca25fdb6e28ba3cf7b64369d8

    SHA1

    4fef124be67ec4eb18b5f42be81218cf3143f221

    SHA256

    bac5d53c2f0c93738bb9fb8e920d5dccc7c0dee834ddd029a9a4b85d8b543fc5

    SHA512

    0dc82402e23574cdfed8f0e0423173e19b27d32cd913e502c36af77b72b90f21fc5364606f3cb4c89390f1b00eb14820cd1edb50fe26b3f1146ef5b5b7e2a28f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    022bcc2436fb5e1487971256c4e332a0

    SHA1

    68077a39ebf89765f78c920184988c86c4c3efc4

    SHA256

    54ed393c360df171c8635086985f32805cb576811d79cd4ac0d9e255dec060ff

    SHA512

    67fa0af4f2b128ff8d9ba15cb19e4cdb59fe3cf4443936c3bfc07ee475ed2d7adc6f65cdd4a7770bb9a6c89da3181a07226f84f5c93d14bdc1f1b4160a54a952

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    550b144f3d61e55fa00dbe61b998e77c

    SHA1

    d8c581d46d048e71cc090b1a63e717f75270ae74

    SHA256

    08ba41427c8be93c7f468eef2005a3e89626528a674859cd326436e85cc0cbea

    SHA512

    5086bd6418f917f45cfcc01066b472ddfcaaa88175ad957293ee4a115ef4b1522febc2a57f4f673d7404762ef0879b5fe7ed7a556b2f50f252d0168adc2fef42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8176173389e8400a229061438175d1fa

    SHA1

    3b0bb7af7f9d8b54e068d4d636c60dde110a98ea

    SHA256

    b66a1274635b396226e70b2facdf1c7766c732e4237c6d71f7edead515aff42d

    SHA512

    f5c54f2b316983906060c00b7592a6e37ec8db998431114f6a7fc8a45350a4ea6dece1ab535d929178300a44a105629f0a33dbcf884d2365816a3839a6105289

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43312202b08dde03cd74b2fa6eee9e5d

    SHA1

    b9e0ef044ab190541c46646910bdde3dd8e83fa5

    SHA256

    e5f6631765a1bd651c870280d603771f49102ff025215bfa6dac3a025cb98a97

    SHA512

    1b2895c7ff4a35de539e4a47b75f2c024f188a2d610028c9383e34914497bef3984045d1c8029e05748f8b47ea7cfce508a784ee2274a1ade662254a986e87fd

  • C:\Users\Admin\AppData\Local\Temp\CabF338.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF3D7.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b