Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    22/08/2024, 08:58

General

  • Target

    b70c9c0092e525f025c708cee9803c50_JaffaCakes118.html

  • Size

    11KB

  • MD5

    b70c9c0092e525f025c708cee9803c50

  • SHA1

    7d7270939d9ba9c8505fa95b28a720f8a2b97412

  • SHA256

    37145eb5ec10c3a3eb5b6740f16766fb8876e20f4cf1b98c3ed27e80ee5abd36

  • SHA512

    a95e738c3f0343582f641e896f652a516cdf689fd102348a45d1c942af1676df308a110e8aac4a170679993a0d7395d31a916b6250b95d4d98204c7eee6a0d6f

  • SSDEEP

    192:xSJu4PaJ4AzzcsdfAVNe0HgH3r6g+KgIzmW9c9HgIg9JghVzgl:Mam2XUNe0KAezmvJgwVw

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b70c9c0092e525f025c708cee9803c50_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2328
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2328 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2720

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    64281f3db590242b07ce7be17a65d107

    SHA1

    7db91375095bf5bf49168676b347bc6e041b3052

    SHA256

    269aa95fd7fa5585099762a87257ab4d7d4f32945e70cf6892d64e1de42527de

    SHA512

    081053293d54da26d080aa3ae1c7205283dfbc7e1543b63aba575981bbf6eb6dfb52f58324732bf27b0f77c402e64b2e44b6926776f22c1af16c65e3b7fca566

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac499a746514d686ce39cc882d32a6a5

    SHA1

    711d3f1de4ecfebbd8df47df790c088aed312e36

    SHA256

    2f2f91a7affd5699937bf986a65716408917b9369099955b2d544b1f125f1e6a

    SHA512

    bddd4a34d806b5134bccbbac1ff8d8d84d08aed870d6f24bbf84d86488019ed9cfdedcec5ed08c08ed7cbbe276e3164066f7f7a051a0774d3503eea7309bc450

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2e9037061df3f31ae9792475563a549

    SHA1

    4327c0f2c20a0e613fe1e06a61c19b2aeff526f7

    SHA256

    256a0d7c2b8f89f5d44961eb7cc7e12dea7e5c212554201361eded06591e070d

    SHA512

    c45ff14861db65de15d4e034608c6a44566771d2f388376071c6e024c072eeb059d31c76f701cace16cf8545518e1b92fff59c9a3219085a2c669467de9963bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    088321bc59ea9e904ebc05c803b97ddf

    SHA1

    7f3b6870a279caf7fefab4fde2028732e9cee8a5

    SHA256

    4d87794b721baa3db5769eb2f592a82454cebc07bbd7dbdab3afab7be311bf63

    SHA512

    410e8d8d214b1be5fa600c6e24960164debc8f2793967d5e87d460f2556c56a46db6a8672b81b064ae799cf6f64d06344f7345e843b132bef62b195a1bbfabeb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8281d55fe86c4665400e1f94c7058103

    SHA1

    a1d26521b3e57d2b6c1c03afe5913447dfb49a3e

    SHA256

    0bdc820cf509c16981ee9600303c8de04adede045532f348411c6cf56066537f

    SHA512

    5305df726148482d9eae7cd3f661535c9a7a97eda888bfcc2e0028bbadd4f1665ff5f11855bda4c496fdef47b77634567faf0cc1a91bee470aaf326228b66150

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06115b5711119b9f9e55bebede07df41

    SHA1

    16c18975d4d0e969e3566e5eeeb5337484e2d085

    SHA256

    14efc5cbaadfe56139248d6ddd2cb043b46b1251429c313c0215e2dab3362763

    SHA512

    1637a806bd4d023c97effdd50aa0c8df2d497e84c7c2fea9279d50e442980ca7c00d3c0b2df27140a7406396b4d35e862454e912bf7c196ef86676fc9a9e98a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80e3a979ab18f093758bf0bf870c6c51

    SHA1

    0637e0ad55b90d70544c87f8a629b8451a078ba2

    SHA256

    9b92cf6bb414bed55ba98bf7244bd275e57d4eee4e1d80455ec34b53f5f2c81b

    SHA512

    8a2c4df92ffb3f3d731042a21abd11a7efe080db6632fe763441d7d8cfaf37e1957cc9dbe7b7f1b37f7608d87b989092292ebafcf8ae1bf83378403d6c8d4cae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    438a0782c50d39d673418a78344a5578

    SHA1

    53ca5ac81c330c0eb31502e4e0d9cc385b7ad2ac

    SHA256

    bc653ab4a5d720896da146b949d955f927f5bc4887bde91d7fa6b78c78d355b2

    SHA512

    52aa4cd5be2ca126bfc4468614fbceadcbd383930f89de06606c44fe01106adb15ef3aa1061f446be4ba83874147f80f62f024c11dc827b3df27972831059cf1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ebb685920fa8f843d8e6d2bc0a4971a0

    SHA1

    26e6029884b279c84fd79c94f9a5e42a5380fdd2

    SHA256

    16ac87ac0a94ec2bcb278409f7f020c6ad02dec50c5f8a0ff7d6be48fa45adc2

    SHA512

    47f8155a14daecb90820a6125035bf5de1ace254257af13ddfbcb339308e8c742992378a19ac18f89935cace25ca5fe3dc47c5ec6d213b70d7591680b549de9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    82ea26698678d68bfb06d0f3722e0792

    SHA1

    3ad787cb5a2c63bdf867a2bf1af0e58485e5aa68

    SHA256

    f25e4bd2a7e09dc9ce77f2391e5fbcae507be3c25e5fbc23c4d5a65200a2e077

    SHA512

    850a3e02194b13de7b05c62f60afbc9a7ec8a04775d5fe9fd54b0bac49be7b08d8e74cec12bb05b61c75a4876afe1b21e7ec5704be00870706d895d3031609ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da07224a58cd5c676762ac680df158de

    SHA1

    169ed41c16188b51d9d9bece6d3d1fa1ac66ce78

    SHA256

    dc114a47ab9547d98526f3515ddb41f88826e0870f01c5f4120ce7da6efb785b

    SHA512

    b1a27d71a5955dce21f062bf8403772a3d00143a8f12fdbefa73c61a46e2de5beb1616ae0e649aaeb190dfff5d6dda9d57836ede06cdfd2cfed4025883facea4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aff792002f9a6c02af5c5ee9ba54a129

    SHA1

    1399b55430be4186f7ac140ea70b01ccb01e8cd6

    SHA256

    984694793544ab5ebe54f8b0d66eb939bb8609667b9ab95ee57548f9f1220e1c

    SHA512

    a1caba2f7e8fd4bf61e2926b3b17824f20b4ec0d282d0a3cb08764c020441cc786f2fc068ab857c27afbafeec572c3f473708f712e3dd4580c9da155c5acb68f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    46e71dabe67c13611cd640179450abab

    SHA1

    abad2fa60646029ce24621cd16b44396637e9281

    SHA256

    c007449d8f52cbae0844f82752bfd59511e7f3f86aa9b3b89eea3a6707465045

    SHA512

    eae4c464f04a1dab4783e19d0381b09cc6dbc479d9c65f0a6b9577ee95815deb77e3f165fc13c3ee143e562143b09cebf48089dc932a11221bcce4ba004b10af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c1922b5bfe1c5d1bcb9cb8b9cb053c74

    SHA1

    45c093c037bbaf078bad7b7ca2a4568c794bfa4b

    SHA256

    03c22f60fef2801706301b385a40400e4198b65c1bb1960fc518fa844ea9cb5c

    SHA512

    7202a1fce09d607454092b9c89b49351cb6b914b1833d573af8f8aa122807ec2990595937d4a987736db033f59f7fef38ed5d0916dd067065b7e577853cb8f62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ef5a2c30257bc012e9c656245d08388

    SHA1

    7f08bd21db4ea0201b89b7bd354d6841f0c92db3

    SHA256

    21a3540e67d026d4066ffc6b5bf84230afb1e4d6439d1eb0f1c3560dc24d06f8

    SHA512

    3b4b09347014241e6cb2c24064a225f0c0827093ce0c84a83bd7301ddacaf3617237f0817cca18b701b37743241246ffce46cfad024cbbdba5abadb545ff16dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c19b495268a0adac59c567688c7e64c1

    SHA1

    92cf67be4b932e78197fe669ca8963166b4a678c

    SHA256

    6c407a12cb7a47f1f21e44ff45279088853436da4b063e647441885d26b90b87

    SHA512

    377ff292bc897c59625632ea9ed58c7659673801ec83c0a43be65074740ffbdafabd97d39ccc3fd969d7c7abac0682f332b5cd2aff80267410e055b9858abb31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57425f7f820597faaf3e081c8d64b227

    SHA1

    01cb7bf1835a482682ca7b3e78ea5f9ca67aeb33

    SHA256

    ad7a169fcf41ab2fccd9e32096eb83556e5b99a88de8cea34b5db72278056295

    SHA512

    28230b8dd693850279b745aa91d3a05a4e3b4b83d46618f5a29b9cc3bb4453296f72e185e1b209a8dc65d4a2a500ea6e76bac8a85ee143312b5265a8c502130d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    587ded3b9ecd97305442a00b6807158c

    SHA1

    3cfd508ddb714a8a30df99db43020d77d64b85fd

    SHA256

    4d9eec1ba26e3a250e96a41c5e8bbf30e9301481e26d1f1466da76856e2c0d79

    SHA512

    567bb47ae3b181ee5dfe995a7870d7b937d971a4cafa7b1e8eadb9a5e868e263603f1de0c7bfee8aa4904bc7594e65b070b2d6a9e40bc702ce7fee3459badb9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    64f980e338eef40b444382cda4c58188

    SHA1

    b6e73ef8c085695c1f0718abfd420fa978eaa2d3

    SHA256

    f97b80e490d90979dcbb8fd9249bf883f10d6a2dc239cdd3da8242c46df9f406

    SHA512

    f9eb1f25a00ac23ac11fd5bac2d872f0a4eb7243ca6fd67f1392b8fb70fba1ce031d724f46ece9b45762ff25df2c0b589bdc5dfd923cba278bc0d062d2930b65

  • C:\Users\Admin\AppData\Local\Temp\Cab4C2F.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar4D0D.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b