Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    76s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    21/08/2024, 13:43

General

  • Target

    b3b06c759df1b64b06192978deef52da_JaffaCakes118.html

  • Size

    12KB

  • MD5

    b3b06c759df1b64b06192978deef52da

  • SHA1

    7173d55739b7b9bc4147aed4de4ef854bbdf99d4

  • SHA256

    9b886b50e0d98f22878c59887447f76b4e2c8680051449528142b8c96dc49284

  • SHA512

    865376d5c3bfb84354a448b5182e8a75d595af7f503879662af9972679e47fd322547b26c2830424748e32632801e72700b5db6aa54cb1434a8f55600737b87f

  • SSDEEP

    384:BE4HCmmlNtyCWw18ATTkS/r2A+SwQlz4zWhuj2HgZ:BE4H4lN4w1UfSBLhXHgZ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b3b06c759df1b64b06192978deef52da_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1548
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1548 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2648

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e68f12f852d3c7a81cc8a69e72fea89

    SHA1

    5581e1ae37e77bcc80ec5e6353da2716e47439b5

    SHA256

    264e6f559459a2e0504358fc1b843078607bf573e3192d9ae239131f6ad088fe

    SHA512

    b03e1f780147d00ae75cddc0580245c2cdf35488c39a5a4747cdeda9b4efd697c8e0dee45cd79e18423c21eba45155930b18ff2976456dea730e940fd8ae09d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1a6d4de89234ee7ffd57d8d79a8f2560

    SHA1

    6493c5ae00f6db779dffd7c4b47c9d5943600fdb

    SHA256

    f91ed5684af046ae4197ad315d9461a51383d5fbc8929220f713d2b73210fbf9

    SHA512

    05d016c89872ef51c984822381bf924e5ddc561d92dc4e9b8724c5d391a342081cc510e7c1e2129588bdbd088b670ced5d364160ea40850d6922d10124aaa391

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    151c647495861b32e79695a818d91dfd

    SHA1

    b675cd77d6083d5fb24595cf14b8347d70415515

    SHA256

    4c9ae09e48078c68fd7f56842517142bd26a65adaf1f216a3c4d504eecbd85da

    SHA512

    b606ea8958f4c7800e2725e4eb44d96bf1b0bc05e845af6f3248b3f2825da0cd532ac65f9821c78a80490e0a23a50eaec82ce07dac6e1b9539130342052d63d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb41810509cf850542ca8ebe83b12b2c

    SHA1

    db14818ec3a021f3f08c41d58a94899a3af7fa1c

    SHA256

    82d780f0d63c93543c36dcf744c92d27d3b5257fee0a921ea67e7fae8e16a3c5

    SHA512

    c1e1a390183520a8ba35c6b15d7dbad04b6f051098fc71e31c11a5180b94438ef4437afde9d33375c2cfc055076f6b95541cb61d4bff7a4c30b641a48c2773ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    36c22792930e83274c5ffea3e82430de

    SHA1

    5ceb57312abbd22b00bb93bda3d16e81e0bee628

    SHA256

    22183e7f43a1508fdd6a5b7617336eb8601dff3619f3e40f927b2d246190f1ea

    SHA512

    955630e2439a06f53f1c2afc84a3a901cb26dceab544ef6259e89b434f58c5197c810d2d457a23ecc5c590c50c004a15e249c0798853d1e811562a91740d4f5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17429c2a8d1cfb5d0aac5eea545f287a

    SHA1

    dc5faab15af542ade666cad9a0132b15fe1697ce

    SHA256

    ef11f95ca9e969de36d526b7bc327400d4c540b41665e943ff2a43a50031e202

    SHA512

    185e63811f66c220e828d724277608b11a3e4f08cc32d49a0652d953127a82cb640154982fe8870a05f7158e750be8053685d4a0b04377117724949adbe06745

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ede983f2702280229aabafb89c1c27c

    SHA1

    17e0a8f47e6f4c61a49fb60bbbb77a3a4493bd5e

    SHA256

    5e946344b2106af1d26199a5a93267817a7062f2a2bbd720411771345e9e6a13

    SHA512

    7033220d3b4388151a2e96ff5d8cdd0ddbe0aa663ba5d9221e61e5f98f25742d754233cfabad37c9bc75262c48ff6d8dff02dc4725cdd1636262f7a1c85f8905

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da60f74f624cd292cf6143046644a022

    SHA1

    31fe5bd0f05c9092d82bf0043ad15f6a57cf5e6b

    SHA256

    633733b385ff4edc478b72d6f7a3d2562b38b03302e55b899cd7c03757719097

    SHA512

    0c85843e165a9400901733c3dde3a0023c1e2e007fa219de5d2097938f4f6fc41c7478f9381f56fc1ba32a8cda3117661a6d9639cdeeb0839af70674f148fbcb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e6e9c7f9d2299e192d39034872df4adf

    SHA1

    a1178a8d6c2f1db17fa617909552ee68182ed412

    SHA256

    fa7427a1f00be8c7b03cd2531a9cdb7aec3cb286665a9ac78569fc2d5a695382

    SHA512

    402c96c08a5b5d091a5e7e95ae8ec1c07bbaeeac4f286e7f07d927c86cff18a8ecf23d7706a32a6853f0dea0b5283d3bd119ad27828b8e5b00a803af15352b4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7d1e72add969ae18a210bf660c05300

    SHA1

    59731fa15f83115ebb91bc419a78bc14d9384eb5

    SHA256

    7bf04b0da0f380dcce72014682898bad4562077cdc0c1c861e94da02cb5e7127

    SHA512

    4061c9c976d56f988be7c8df556a6eb4a7b1aaf7092176835c0eb95a5b45b642f35b27d7f49006035aa48b619944298e7ade24bb04451a27c9b68bc97ae4a2c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dad214045ec4cd68c8efa2181fd04dd7

    SHA1

    eadbfa0018e3e3c3436983c4a885cb29a2cc2b10

    SHA256

    88445761a37f5d91e192d4c3d9b13c065278fcf47836a8bb7ef4bf67177c01c7

    SHA512

    1afc915cdf5f1211d86512d02de8809847c24fca69bfac788e8292504b9799a5ee8c7703c407dff9edbc0f5077cc72426e2e350eeaad432284f16a8d849081f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e75bbfe190909953639701c188aa7a3

    SHA1

    d28e40fffe81c768f41c48881006e6bc515f5f4c

    SHA256

    4301acd220e1b91eac2d8580a7a1f9f9393939f5485688602bf0dcb6fcbcf583

    SHA512

    b177ce7f1a195a8a4782fa9058d5bc8f7799498cc06869c215ae680bf53c823efc830f371b1dcaea07807edda4a7359864730da005a5f016ef09ad3005a523aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67dd715f0585172b945c5cfe3b15fb24

    SHA1

    b1788d27041a87cdb3f02ec51f294fdc1a34380a

    SHA256

    c3c22a035c73bdb8cfc20f48683b04846a3199ef2006eb54cadef437cdb0ef54

    SHA512

    4b3856cfce5e6b568a523ce76a587375b7ca8605474ebb9a204c7ac81fad6218b28270def886878f83ebe9c75f6794cb1e3636b19138199928a054801446b2d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    33a301f65da366f6b9954b911e73f60f

    SHA1

    ce333fee355961de8e0794c64b8a2179dc40f634

    SHA256

    dda47258c0998d50e15f5e49a35b6d1c4c0e9630256781358f4e263fcdd6e2eb

    SHA512

    b2edc0a1664b596af10b322bb2ecc507c6530055f9b65355eb9ce658e90afd0d9b023b9e838cbc408f332ea9f02d8ce032771cd3113d3b2c67f63192f7ed8daf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c31039f0218a084bdd754e9dd5dc867

    SHA1

    9bdec0eca1d4bfde7654534175b0cda411e32864

    SHA256

    d6fd6985cea206c467fbdd5eaf4cd984d4a94e099136abb33a48b8b1c8f7794f

    SHA512

    eb5465b697afa9fa2ead61446890dce9ae31e6427d5e398b7ce327d749e5601b11c4379064a4f01ba19c07cfad3a2599a846c63782cb2fa43d0f0c397d78e4e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    384db2cea9966cb5952cd2c082567e8e

    SHA1

    e580e3bc307532a6c0a72af5d08d823270095602

    SHA256

    f1e520d5eb30b41fbd8708a632105357c4d71c93c6d87f21af9ad8eb787f9008

    SHA512

    d6619413028e98e5f394de3626e27e3dcfd94b841578672ce059b1fd0a20046ef19bb9e8764529418a8cb6902dc94294369eeed5ed0371d12c4805e8b586d8d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f34dbc333cedfaebfd5e1164eb1906a

    SHA1

    d441b67394aaf21933491a3451d93a8ca3d913f2

    SHA256

    18e70c3463a6c5d3158b0fb092dfbe8e3ef6f6bb603fac3253543513ad39f767

    SHA512

    82d49500cd25a70ad699f4537c8b0b806e1909385e690e195b88580827c9107927425b4006e27fcef2eca079ee1510baadb63eb97429d559475a18504f305b6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e57e424f3ab4aae3b37698bce0d1f9c4

    SHA1

    58b3604a641cee5dbbd2fc39daf1cbcfb2eb5f14

    SHA256

    fce04da05c5d388bfccdbb1352027f3b72fe6186cbfcabb904a15d9a3ddc195d

    SHA512

    be3aa22f1a800351998691d65cc2a9793d840b6d5f73a36a5b7cf95fa81b2222a1bd3c497029b16b7924c9fc4ef25f3b08202dc7b9f58f166305a67ea70ab047

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad6ace3172deea6b1d9ce3d3c9a05746

    SHA1

    ee5f5d4078f491bf1014579fa262735bc9675405

    SHA256

    a8c8aae09c8b8ef0e42dbd0e08a1f518d402877e51dcb1dde178c6bc09cd5b07

    SHA512

    cebe0a1aecf0c036c9bdd456d0814fbbb5a9b3d3147cbf9500860cc7386e47a9fb0261a6ac8c3c5612aeb377b1c0e332c340925d69f88911fd3f8d2f3d5166e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    283f8f6d9217c239667352f0695a5683

    SHA1

    0a415bb65d07a5a48509054e77fd3442e702f4f8

    SHA256

    e36ab4c93fa5107de923dec5cee0204d239f39c26c8fcfdfe5b9c0863541f703

    SHA512

    7556bb12c2a567ed3e9a64dc33c2ea1de7e0e6817265c90218dc8a29865a1112232f311d783aaefb6ae4f3e9804a9e20ce0d500784cd9d52575452c4e4e7bc3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d6f6633770e9e2f6d66ea75bee8a2ac7

    SHA1

    6c0ec2b665b22255cf1ef46377eadb1122d763db

    SHA256

    88e872981494acb67fab55f7e8004c0f7298045e798aa187652deb128a49c190

    SHA512

    11e577464621ec5bde903a9d83862d73f2d04525212bc54029bed16bf6019480d1c9b2f65042fe239b7c4d23a7da4839dd7ddadbfad9883a97295f6cfb279fa2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    092d165f20272113f5c562ddfb7be18a

    SHA1

    c3cc36d72434f422023ce75cc53d93976882026e

    SHA256

    1cdacac7951c7dd5c0703b2383e9d0d2f576914a96412c5c95304e928abadcd6

    SHA512

    ce01048810c996f678be5ea046e9699273eaa3dd3109d6016b1bb76bd538665a857fa227e0892e799068020c025d54ea3874000ed8f1b7f9ed97abea4cf468a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    42e136283b0bf3f03e73ebeae7dbd952

    SHA1

    b238d4afcc084c8e8dbd8ad91aa1db9095884c3a

    SHA256

    c8db8b542c6a04d54d62a2a83dece7e4f4cd4fa1343d0c189b9efa11516c5437

    SHA512

    0ab8f0238160914700cb7e7d30bf9bc9ec1958f79d6378ab85442ec44d0d6de3ca377b1dc2393a49024e281c466bbd583532da07d48dddacdd559df4818c701c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0822328d2deb9a9352ffda7d10f6cf2

    SHA1

    c4a899d186ec8a06d4f55b7f6813645c2032e1cf

    SHA256

    e83e58b9af1bdd06b332f419f9a690d334f7d3df887d7800434a4322a50492e5

    SHA512

    c88950122c3ce4c3f614cc25828593679ad67c34c96f5da7899d67038947c4d03e019de310ac7f1a08eaa927d194111cc97b84bcb154a2f2c1f19c6512346e98

  • C:\Users\Admin\AppData\Local\Temp\Cab5092.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar5095.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b