Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    146s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    22/08/2024, 10:53

General

  • Target

    b75c2ec5de7d36e8efe243516b1df97f_JaffaCakes118.html

  • Size

    5KB

  • MD5

    b75c2ec5de7d36e8efe243516b1df97f

  • SHA1

    d32db8a83550ee87c2c6dbce9ede5d5382425e3d

  • SHA256

    f9291dfc38af0954c29d1ce461cf5035a63fadc0c421db31759ecfb4ef03f9f1

  • SHA512

    2be9959813fb5250f10bb45c56d69d277ed14e25b3e34be4ce05c26d7b1d8555826d16e5a6e03787896ccf044328be0a9b24c5a847222a864915f6c1b9f9307f

  • SSDEEP

    96:s60iozQqsRAgat1kOeUkImsjs/RK/GK3Np6PPeTFvj12uD0FbDxtiL8YnL+hRVrN:sv46d1kXsI/eaGN1tgFb2LErJZp3

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b75c2ec5de7d36e8efe243516b1df97f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3012
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3012 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2444

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4be22b7e6e2b1f4555a67d9699b51eea

    SHA1

    634efbb8fce9595e909d5dcb69d1f8154fabc8a1

    SHA256

    808ba470b650cf7466e7cc60352e428a0959406f467c8a2adb57c9f11b361c5b

    SHA512

    5300ae4293c00620cb6c6f2a770629bbf4df0b1e9d4233d0dacc928495674250b1b627d403ee323c6e4d4f8fc387ce8462a3fb974770a51049c0a245a936924f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b5485108ca00696897b5a04d19c314a

    SHA1

    8dfb22910ff2791405c63ef1ec44385df27d54ea

    SHA256

    e4d20e224fb5f2c04d62f7f0ef2c51bec0a1e91cc857a06a33c0cf6e75143712

    SHA512

    aa5879ffda828a9db8f7fb91c7b37f6a80467c5654606f9e79986c7ba1348c370ca14e279ec13bfa15ed6932115dcfe2c6da28d2600ac4cde8d06522492a583c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7c26a5b53e9b7f8593357b37611433fe

    SHA1

    30c5acfc97d0039dbf34826536be164a9be98922

    SHA256

    04b68a165f1557412a1a2fe7b4b567c373cacc6063fc24af8979df0f58d310ca

    SHA512

    52701c9419fdb13c7143f5b7e2871f8183bf4d6b7a42b062cbce288f51e86b5ae5e651878046619a6a6d246b464bedfc38a782bb1e5fdd0ff885ca555932e659

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    804e98cf7eb11c410bc15779d9b80471

    SHA1

    6061d711514dcce5c4e3a51e0dfa05f1e596b8de

    SHA256

    297f690f3c14b4864b437516f101d536d9500e2ba09b705d878d897e5b02324f

    SHA512

    9c2721830913aa8bef8ed1a3a2cf9335f59b9100b016296426369c8c032676b18d8a5049b3407e6d400c62d2dff467e56258ff82aa20349535b7acbc4d1ea5e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6974ef5e9716458bcaf5a4cda8dec3e3

    SHA1

    5a112ced241e5bbbb88162f7367e0dc76ccdf0e0

    SHA256

    d5ddef807b5efbfe953ccb826f265c0100e54f4cc8a072c465d44bf5af184938

    SHA512

    28dd24ba85901bcc846cc8068117753f0a71778747b0f6dc84d7cb44b17cab6526787f7b56e799631bd9717f5225fbba3e0e3e35152be7d07ccdb7c351a74615

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    698dc1830d4688636715308e00c321ad

    SHA1

    b7c1024f4cbd653e8724b1b5b1893e56cf5656de

    SHA256

    1c896afb5ee1492e21991e5ab299362e74f43873b7a5eb25d53a2d7ecb5d745d

    SHA512

    e9e5bce035291fef09c8b459896e06e1e3dade328b36b6f7092dc51e3408682e5d05959b0dadfd5009ba134cb329f5b83b8642409356168c167feb1a83cc44f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4fd4e48ef2ad70cca47c497561c986f8

    SHA1

    3e1bc09edbd4465e925bf95ce5615446319811fc

    SHA256

    d9a1a8bd982a21d4a7b8d35d81c1926b2df120ca07932ade0a308c947378abbe

    SHA512

    da75c2155a8c9f9b7c20ac6c8428d555b82ece2402e5f401f895f779b5d0fc8423f64277766deff0ff528bce8170e0594e8767294071851d33de1207cd9bb31d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    72204b7ef2cddfeed8f08b779904b7ce

    SHA1

    84acb670689e5029e0e5bc16fa451e029f3408f4

    SHA256

    fdcf2dcd426119fab0d005b59a748c418b1abfaae97353b0e75e35fb1dade4a6

    SHA512

    d0bef2ade975fdd948af1ed1ec9831b968483fbf723c51c7f83fd3918f8d245c4f7ca16184d683dd8531b28aec1ff8c65aa1b7139d29481626efbe8a834850eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4acf802efedf4cadd2dead2a9d0343cf

    SHA1

    afc8b28f2a33970988bd6108cfd828530fc13b0c

    SHA256

    879a99139976ddad04bc76b952adb1d3af35ca39c0711026247e9405a51c3509

    SHA512

    402832a79e81ca1ff99e98f10441325975ca6a597f7d9dc6fcff8ec1511f4890431ca9f67b411390504db3348257943037ade3c66aed1a073696845b98887297

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4add7acde36fbb7652fde2e214b67783

    SHA1

    edad65e34d949368da0e35bdeab052e9eba18861

    SHA256

    2377105cdf1f16773669bf285539edf02f97517899a2453b45b527bdc1e2b976

    SHA512

    e77111c7a0247b7b63ab021190d6c56252e22d9c988419dbcfd6d20604cc092a67f0042821319d83e39d08ece0960b3549f480eab21e730a1c2550ea9ac75082

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2dc527342551bc720e8d2c1834de6377

    SHA1

    2755ab4d05b6be34364bd0a582c4a89fe6e8e88f

    SHA256

    bfb92fb1c67cc6fe534f9532bdd27f8c4e8f685caecfe9c8afdc2876fa206025

    SHA512

    d0ef8604e167e844f675e6a8f40add5f7a650d3a8fceb8f482877a5de20ec5ef91d6812c7b96faf644e7dc2fbd6c5af0e38d0cec0c7a240a5e842282d2050cee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4602e028265b1ca87b78707716a5fc1

    SHA1

    a22bf7ee4fc0ba5d560e2a1791320f3d8d8d6a4c

    SHA256

    00549b754a648d74bd783dd91939f93c8e01f79c8c063fffdcfbdc37da774298

    SHA512

    baa15433d80991827d20b6b2064df2ff0d0c71dda941850816bd4eba7b1bb48e42de3fdf09cd1a05859fa8e32eb06997de1a426480aaa2c9658cd4528bd7b5f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    915e2dd6ac8b311f279800bfad1ac30c

    SHA1

    7f2554919832e900b5500a7c697fc9efb9be75ee

    SHA256

    bb74a9da8281c4e45835f2e6068a6d81af9cc79b7b93457b16c5e85827776158

    SHA512

    6e1581d7763292114e42820f4315f8069549a5a99807b8247ad53608120d116de5ce39b944f9559c3d94489e9041b76affbba46c6d4adf82f97067dac69f03b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c692b2ae9673ea38219b66d2e44fc34

    SHA1

    862a889ec4b58045b186d168db35f6cb10402a40

    SHA256

    c141151939fa4cc40dfdd81f5f9e2936c11f22bd561a45053ac3333d418286ac

    SHA512

    31bec68b92945149d57c140912f1ea1caeff508cd1e1b6866764d7c5a7df097d3fb77afb993dd875d1d440cb157c22057c8553c7ad20f614dd39887dff84f75d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9cbb591d33ff7a543bc7c8745d0a66e8

    SHA1

    9973ab2f7644689b4bbd2f1224fa0e62f0502287

    SHA256

    95a12437456e02e0e75e8685ce01a6e29ff91c21c6016cfe0cf22bdf47d3e9b1

    SHA512

    051091c161160b56a89823ca87e0d20bb0896acfbb10c80346d49183787781635b7aa880612debea5f8c7553d89ae6d52d4dc1fddc87aa1e1983124120e011cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ee84469f61afe4997c098e6c8c54d65

    SHA1

    32d6b779700970605dca0166df1eb2c823f7fb59

    SHA256

    3456dff4b98b20db3caa4f6768b590e923f1f5f925ada0585493dafa8824706d

    SHA512

    4dd610b60bc4c57d35f7fd47575cf75b5717a2dca55339809a3bb3e1e5424bf204e2a060b4960f30fb8bbf802479e394edc6436adf2826b35d5acd819fbab21e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43d6e7bc3439bd1e9fe9260244ba37d1

    SHA1

    d2e37d4d5426ce6e99929678a7e2b7c3058d5cf9

    SHA256

    eec72f6525d018dc78ea86e00ad3d4ac44ce4d24e6c7fc7937aab6badbdba443

    SHA512

    c733f73012d8abcb8d339198cd13d59066d90a9f76760c66e2ba749883111985e2d47cdde13cce7fb0ec34f45256bf7e9298c5f47957b81e128c97fca7744be2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e6a9a38e9874c75500def988096c4c0

    SHA1

    2c437dbaadda4a45384eae9423f72f3b8dfa6922

    SHA256

    e60c5e27be8c7d09f2f0e5441eef79fca3ddc637433ca32500a6fbbdc41cabca

    SHA512

    3f1dd34409f76f7239d925a2caa7963f5fb399041c5320e93bf831dbd3fba31d96dfceeac1d22770b4b1f322e806f7451837969707fa8d81b0665593a6b6de20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    16247cad17ebf5cd7960186a9887f6b1

    SHA1

    e1d685c799e53be366d63cfdd200c7eabd3af567

    SHA256

    87b80a02745d82c1f1da074c901488299ccd03b4b06a36e06036137cfb18fd40

    SHA512

    76d5ef4b20034b472248e3c15fb709c469e9947d3a53804efa12af2dbd7d12dbea54b901879424a1468dda6435a5fd74c8f172688f41a13fc8c1058994ae8f70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ebd5e144068d0ea30e2ff63af91e3dc6

    SHA1

    ba755b8438276a85ba94cc6411ab6a75b2284b56

    SHA256

    d7c287576327772e4324f6c64079b7f4e09bc1e28832b9ecf7ba44e250dc4d8e

    SHA512

    57c1b3a03df1a824a40f2b4ccf59ddf24d43d2f28bf2315e7f724ce0d57dc543b0214cb6579437ef8d09391cc96b6ab9f97cdbd46e7db463f71f1652339f01d1

  • C:\Users\Admin\AppData\Local\Temp\CabB82A.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarB8F9.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b