Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    23/08/2024, 17:03

General

  • Target

    bc94b1456186c0acdaee06c508c7a75b_JaffaCakes118.html

  • Size

    6KB

  • MD5

    bc94b1456186c0acdaee06c508c7a75b

  • SHA1

    fe3c3d262458aafd21affe18c72c6560153eb830

  • SHA256

    415456415d66ba56ea976b248d11f62bd8214aaeb1f61d6137f2cad46ddfdb21

  • SHA512

    b1194ad18cedb283d75adddcc89079bf541d9f18beda079b2ba0455353eb118085139b1eaf7ed2b138bdb3fcce907cfcf243e54da9e3749659a1ad0ce1128a91

  • SSDEEP

    96:uzVs+ux7auLLY1k9o84d12ef7CSTU7t/6/NcEZ7ru7f:csz7auAYS/O4Nb76f

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\bc94b1456186c0acdaee06c508c7a75b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1964
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1964 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2308

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49c9533790dafed252439abb94b06f7c

    SHA1

    f29d62108dd8980d9c6a3e5b93c4e62ef10a8bd0

    SHA256

    e0375fe5ddaf04a98afbe13afb39e6b4f04d8b1fc64498d45c4bbf55ff462935

    SHA512

    e4573335ea79a8517bdd5d9367310bb2a010a797987e8acaecbcbc8dc939aecf16564167e66035e42239c0f3befb7ed27a45fd80c488a82c6b2cf7233e88699b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    861fa363795b6de759b0364434b0a804

    SHA1

    78a5ea49cd8f8757c838a98bf042009fd5bd0c7e

    SHA256

    b772db1bf2260b8eca6a6b197e336a8f1ce971aef21c408b45cc5300ef1f01ca

    SHA512

    2e0ddc7e27f893df7bac5435ab8b80eba83c5300538fa71923bae2d128156933f79be4483d10aae9afa833248b600e7bba42fed6c95c08ad0e258d8d00778774

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e412110216d1129b79e0671b7bb070cf

    SHA1

    8d94f257355eea1f28808144cd034b06b94fe828

    SHA256

    21d6eaea0b922a56032be95239de7bb3457c4db8dd6e3fa11e31c46d4ca724e2

    SHA512

    acfd4769f9d10cf30b6bd41a04b8085a2a01a9765f1b981ebe7f5068a11f1b796c0a006b1d41d6e789168bf5d3525a149614f7308343ad09bc7e21cb394ce2ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    117df544ef7fa664789c9a591e378b00

    SHA1

    3777f7a4bf89699d13949ebe29d6bbcfcda2033f

    SHA256

    681f6a74023fe41208e33fd4eba00477fa7c142b0d283232bfaec5110c8b35f5

    SHA512

    5c72c9ac48a8cf417d893757e0162ee3c6a6dbf0a9f56eee2fbba5e48880f480426e1b28aae0dbd5a35084f72e08c922608c58d2068efc1862988bf37f88a9d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bbe4f45f1db446dc6ce8711731f00720

    SHA1

    013798618d04ba1282ccdfbb9ae1aa22396883a0

    SHA256

    97196be67a16d34e0ff9f6329e1247953831dc6e7bb63b9674bd0c2005f64acc

    SHA512

    42065bd027e79fdcf7588bed76246261e2df759b5f94e65390736404330cad8a25f73ac6ad631ee37502899dfad41d0cbab3744be160647b484c8491d8af32bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    099f0e60296b41aaa980f5b1c8baf0bd

    SHA1

    4e274517054089e10dd16527ba43da915e986e81

    SHA256

    6cd7c45665006d73ac6be2c65716ad1fe0dfc025789b618d5e8ab375d0d562d7

    SHA512

    4c7973306ea03b4ddf5eba2dc797b8524c0729de7b54240e4020af4691fd9605c9987fc0e62dff574e50a547d0e7ef9d35afd04790a652863b67eb447fed4095

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89b3980aa8df74bce12c388dde470f40

    SHA1

    6912482014aea94ca2aa34061f4c08e80af87aec

    SHA256

    dc57c77de1230bf65ae5ae00eae86f89fbe16c56445c966568692b9d6e262ac7

    SHA512

    2a5e624229a4f76aac693761929c12b743b2937a55b7177d9ee253e65d375135a9ccd79e12633e75703ea73aa791381a7dd7c393d0001c954e2d9c47ed2d14dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a66ba891865fc704a9e90f8ed25789a2

    SHA1

    f915db61051c7bccc659573abe67ebecfdfd5fcd

    SHA256

    87a697283ba5912be0fac0e72e2588879ae97da6e1b855deee749ae112a6cdbc

    SHA512

    4bf15790ff07bba168a6d08b77720d6846a80db87069ee14862b76447f6c5914be4c4d9b492c4f5a66f6f486a56ed11887eaf729cd1e889bea2a662f82c913f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b5b97d839f963c88b375c961754969d

    SHA1

    505c21c73a32d8d83551d80f755d8dc40162acb4

    SHA256

    34ee4c6ee47d4507c1ef001b354014df497b053307efddd5d39e2f1985b1a71e

    SHA512

    11574e941ad82e094185a66ac5bbd95e8c0c6a46708410cff17bb66dea3b1d0e90df475a4ea4257a207346ca1e9524e4e9b8dc16ceeffa3d4692f53cc7c31c8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4bde02a071c2af2df00f4e3e77e2f16f

    SHA1

    0b27da31623df6cc3298e011432ff6df82d7f8d4

    SHA256

    0463ffe89611e03d3183f86f53ad56bf70ff86608c581e540198fbc53d3b1710

    SHA512

    de2adcd1be58d21c4881b187476cd2ec4bd4fe934b37257c010943b1f793b0da5dc7880aa2c117f7d7179b17fbf898acab3c6164edfed1bdd98ebde2ac1aef8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7c905294f40970f2ee01b17c25ec46f

    SHA1

    c7c31dc63d7e79aa47ba19b57601bf94642c24cc

    SHA256

    265e1c448f2d18d4723d9d28be6007d22496b2d4143a93ba13c0c35e9a15da1e

    SHA512

    461ddd6b3dbfc0bb08e4dbec9d387699a3234febaac1aa30d245f9573bf62696246c8b4a59bc53e4b1b891209a05d9167ffd01eaa844fc75cee86f441b46fc79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d92619fde2522c2be039896d60958e9

    SHA1

    472413e355884aaa3f9599140064fda041e6461b

    SHA256

    c9240897e3e4247ac25934d0b628549395590f4d631a21570808de57b43ff9b5

    SHA512

    209a906eb5d1ec642b80fbdf99225bdffaccd16bc7f805bbae4eea78c0684b8b2e87563655a97b0f33b6dc96ddcb6eaf259b8fb47958d548364484803bc0066d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    995e0fc27e0d24cb7b341f7a2b93f9a1

    SHA1

    4d197cba953033b64f352d5ab695eb7bd9df4bf4

    SHA256

    bed79c57aceb89a4fa5f2c918094b915eb6a665acc0ae1ee9a177e81057f01d7

    SHA512

    f90d552083bc3587c1126609b90f436e7f391fe1b8c60cc6c6e441768513311452b4453de1a2ddaf378cce12f330f665b3137a92cf2c018372a046d9ff905cd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6d4f64cc90e8fefeb894989e7d49ae0

    SHA1

    af71a35d13467b121987c9391ebae0f94a5b22a9

    SHA256

    5e6e3003688da071c5f67ce279abf71dc4bd0adfdde17a9d5183dd2e2169d611

    SHA512

    af4632b3857edd3c52a14e219f9a01e5d7521e96a85842495f21d00a1169c1003c67e14792c0a5be3510cdf0f703285aa6b092bd04374a7e18ea37623026726e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c18a2d5500a4e3af89b3ac9670b2f496

    SHA1

    f3aad76aed2f6503d701d254864e85eb36ca550e

    SHA256

    899266d5d33d90f9205af8a8ce337b24ca2db88c70808ce1698722967ce56b35

    SHA512

    b67357eaa6d676b29590429d737ed31f34911e407e9386db4ea8c1809d20d5e0a340ba5b0d473baaabb3947725f2165232bc9ea952a25dabae5a3dc73ecd79c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    960ac562514711c35734c37fbdd0cc73

    SHA1

    42b7c8b13274f0a9d0ad2e7d96be06e6ed5ef3ee

    SHA256

    eec1938fef2e37f1826e64da8d62f68763a385130151b99137012c35dccac4cb

    SHA512

    fd5606ee5c20edc7d11f8ecbf4816d5221fc1fcc86e70b2a49eb7144f4992eb640a35dd5a5e80cb1f1ea5197ea09f7bbdcca74da4da55bcba06e471758efcd52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa46e1239e2d60fc9022ed0c3bcf822e

    SHA1

    b6eefddac62c37eb9b7c63412214d27f4d91dc77

    SHA256

    9e8390ea85a2bbbc610ac895d5aa03dc0aa5eab14fb06e8c8f7efd500eba8a72

    SHA512

    bb2121b54e810ae91454a40a3f34e39d986862d4897cb53c86e59ff7f296b71acf6a995b0fa7bf3c23ce70e3a4ef005e561862ee61cdc70d41a1cf4280995d90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44d899938d4537d982fadc09510a41d5

    SHA1

    54642e054ac1cda7a204ab5c7a17e86e65ed0030

    SHA256

    3cecbe0927d509496980bb5d1e507a2897895c50701d21f7c9faf4b56693abbf

    SHA512

    f7b6f6efcdf0672fcb342dcad63815c15364f2c90a093271a70e954e509b8adf61c77ec42a4f8475101056624f2b8b70ac04222e6023aaae96a4219be158be73

  • C:\Users\Admin\AppData\Local\Temp\Cab6C7C.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar6D0B.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b