Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    66s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    24/08/2024, 11:29

General

  • Target

    be7ed2bc2c0591e7551f1efce135a9bd_JaffaCakes118.html

  • Size

    19KB

  • MD5

    be7ed2bc2c0591e7551f1efce135a9bd

  • SHA1

    fb2cadb4ead8c2c17785f0d343f9d930e7972397

  • SHA256

    ab4772da8765e99c48686324b604e0f621fa96dbada7055b6f66536329a85736

  • SHA512

    53a96dbb3847323cd46a12e7cd8b3ae3cb11757d8313f686b0219faca6a25ea8f935f846069676e9ede30cedbb7dea924bbadeb06e908110b0b46643c2bf11e5

  • SSDEEP

    384:KLKy62iz8L8h08jZxF95bsJoOGtXyQX7VrGnAJXp:RhzeyjZX/yylGnAJXp

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\be7ed2bc2c0591e7551f1efce135a9bd_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2320
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2320 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2076

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9d8e872ec46d233fc0c9afbc8bfb2b7a

    SHA1

    6eba48fbcaf34e2ae2a2794f2a61f4464062f200

    SHA256

    77ccfb7705d76cb9538bf3a94367b9260b8c76569a130019d10567623fbb9ef8

    SHA512

    0e736e13704ecc798cba586a590c06fbb46537598497c2859b4bc9325f20e3462ffc8d150837dd500794583c4978fb0eb0efae0a3573fcc9ff18221da9f99c71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b8a665f84ef042915e117f0f96e88da7

    SHA1

    5317591efbd4090f0dde18816b6a3f56ac583e07

    SHA256

    2a8b0e73196a399ecd08ae65d6928353ecf777d0c45ea6cdd9e8fcb7bd7d0935

    SHA512

    510121a2ffc582cfb1d07bd0269e9e77a7eb571d9d6d97f2ee55fc6567104686f44327c7469e8c356e5d5dd4468957333683089cf91e6dd05104427212265c8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7eef3b8ab115d8302c12c7d460e29fb6

    SHA1

    8fd0019f5aac7f3de07bcba1c1bb9d3af3d1aeed

    SHA256

    96af944504f701fe8f728a11de7c28751c29403e66e67c177c48e8714ed69854

    SHA512

    b467c2e11ad216a0fc9bd6cb796eca2551730fb9b48b9866bd99b0dfcbba6db718984ee5c95de4e0d55af611ea53cab49557f33008679ead9fe0902ce392fbde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5b96e675b0ea523069fd2d23469a19b1

    SHA1

    076757cdf9dc7e5b486e717b2552b5171c8aad1d

    SHA256

    22d0d38135c25c1f1e3cc5a6e8cd55ae4c8f9e66e0c85850b28ce8ffad2aa6c8

    SHA512

    d59dbf54639e98b6ae40252f8bcd8eaaa06f1793d9dcdbd7625bc2bd8a26d71c554d0c4b6a1cac540b3c0b5ff5aba12582b41280cad18c6364bbde33d20015ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec37edf56ecccfbdb3c6b195713c5ed3

    SHA1

    ed21780f57675c8f2441e133b2039ebbff62e534

    SHA256

    6baff907739b5fc7af5e29ba846e27a85a0025412f8dd83739181e45dcd29e92

    SHA512

    683f60b218b7e8bce902b86ca0b976fd01b951e041897a4fa8406d67de6084dca0ea247d544b7ea0b16dd4fc48c74921196e770c2dcde025291357667bd495e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3732283867debd0d40560f09d07d7d08

    SHA1

    7faa166b0b0ca0e33dd2adaa904e0731491cc93f

    SHA256

    c1497a2e0f9dab791e2a4a82620ac781448f4c4d0112b667e8495f01b4e852cf

    SHA512

    6e6c69acbab9ebef1941b2d3d7caa7c1bf82c13519668d8f2982a441c48a49b4cc680b7d29a3f0962c68164de20e6c939ae587a43c4f0646885ac29c9f6a5736

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6be1227e73206b808562099325464f36

    SHA1

    f4581114727f4b6575bf5c0627114fef39dc2d17

    SHA256

    e209f09b297ce099dc365661e3aa92e5fcf3ff4cb8bdd538683d3625b27bfeb4

    SHA512

    7870798d062ba54dcbd45bb7150168011e53e06e018f9146393e2352380b56bd12b92c1d80eb560f797789dfd099636ce04a06c4689ff1fe9590ad4a0dfb6916

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd06fe8e37bb080dcc41a5155e237776

    SHA1

    3a5784470cc7ed79a8f032dccb8ae0296e495eaa

    SHA256

    88e3998b42c036a7dd40bd37cdd80e17ff764f3bb07cdd2168f272501f6f319a

    SHA512

    b3101585ac44b459898bbf578b086a1be38560cabe1dc4e5c9b8d9b84a4e20af63634d8499b844e31b2f9b65e5be71b9ba3fbd5c7767e33f2c3ee8cf361bd92d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    473d5586fb4f369cd1a3d5d981b15eb8

    SHA1

    5e8cd10b560ee4c1ff7a7407518b67d5fd6e9a97

    SHA256

    1267db2f0a6134fb4071c437b3ce2edd8835516471d56f2c2ea73d9f1159d675

    SHA512

    6630a00b86a5c8c8d4a2fba31496c2b1cf0666b93e7cda4798abf4093ef6ee0c17b43b0a028c62a65246e06edf3c37c2fd8d97570b5aad7de9ce942fb812e447

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a870b20fa1e44c16d4e8b8333417450d

    SHA1

    7718625e3277d5eafdf6adbbeb1ede89fa611c86

    SHA256

    d4241caa3192219008e328a7eed3a55e44a1293b4eb5f2fcf17e5a4c42e4ac82

    SHA512

    9bb8af0219b38fa1434a1a6c9d6b22b64d37e998d19eb2c0ce3fc5e04048dfcd207544be958b85318334c37f68f42dbe1c9bae0be374fe864d5d8c803cd354fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e82d8c0d90579ae8db18d2987b1d8254

    SHA1

    e48829dfb84d245efe0774548ba3070cb807c9e9

    SHA256

    60c4f15ac4d17a8f2951df361277959497e22dcab8514ebc84356c429162ef4a

    SHA512

    e1bbe102b3932b8304edbbb6bb6124eb88c96585093cf5e364b517a3bcb6fcb4df0b70a7b0f69abecab66f738f6c59636f1793cc81d9f80f4c199e5865c0a82a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    732f868f8dd6376f5375baab32946b20

    SHA1

    a2ce66c8fcca6b34ce84879cb763b2ce4391b593

    SHA256

    c31fdc2f688f88a4e5bac18832ebdc3717f8eefbcf7b08bcd17a4731913fe678

    SHA512

    1f8f2dc9b28e062f5f06e6b63599accde7b976b28c788955c5a1727f28d79cdcc1507cbf56920faf329488d05e20d52d9c1c6da13fcc95f984c44fb2d70f0741

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9965fd41938343bc1c5c34f9ede9ce1c

    SHA1

    b15acc79761585fc1ec1908911b95879ca68230c

    SHA256

    f2666e99b78bebbfabb553e1db95077908b9c037031ba95ae6fd35f9f9f8c658

    SHA512

    ecb6da920d79d5ba7c075f93d787219be993a2b9c7b041b3b5aeec27ac77fec5c2e436036cffcfa55f8ddaee69f108f50e79c3e69d6fae4b816017416a7bd05a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e46d6987ede006ccc26c9f871f90ef7

    SHA1

    dd2d916a93fd799283319b5934d64ec01557942f

    SHA256

    10363f19ad21ec9d084bb5ea079e424cac400b0da8aad85e1bcba09417ce8a61

    SHA512

    4d3f8ff1a2e3b1f49a23eaac7919ba9ab2adc1c06adf8bc08cb9afe8fd01dd1b823cdbe8d7c3845f5ccfdc385101f02bbeaadfdbcd21221903cd2f350fa49f83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43fdedc9bade304d71375f1027c460b1

    SHA1

    f2635b29e13a24bb4b5065471e9924939738ff65

    SHA256

    9a3952487f1bdce51a86b5c10ee66ca94c5d1ab5bb058ec61901a2ff0188f94c

    SHA512

    50fa21fb5ecb1e1186377ad86207550ac250dfa2dab2c1a89f49d146384ffbb8e7c220d004121155dd913c2b6bf18047c206aac37abdaed5e3c46c47af411930

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee49a7f35b751053b7c35688e957a34d

    SHA1

    b9329742afe476a82358d9d8c153052349a32d8d

    SHA256

    a0cf838706b08a174bbc83dc7cf6cc9d80d92bc5c86433a8caa67c960a346a62

    SHA512

    d35912cd51c1c302a46e3421347dc38edf6a4c1993c76bb20397451032628c0af5f96bde3382bb6d609cb0ba3f45635852c78f9c2bd772944a44bc32eff6b71e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e86b93f48918571bae86edff87bbb384

    SHA1

    dda177e51b3fb0f71c4f23f6f004f4bcc9a39cfd

    SHA256

    06fb0a98f5a94ff414bbedbe2d42bb03486b5b93ac1eaee9c6c9025f17fd9055

    SHA512

    f0c10740e3c2652f127beead5178257456dcc6ef4d22d268852f1138f61fc437c61fc28790c60be9043a695b9ba6dc4c24c485eab861c9834e347ea0ed1a31fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49861a460a1390660e03cb83292a43c7

    SHA1

    75d14c30cd085ebc816696a13f8c7d769962264f

    SHA256

    756caf73c316c3d14ba4ddecd1b5f6f7b385077a59cecf262012cc1afe6c4179

    SHA512

    b98ad2097e4799e868d4f06f9e1362aa0ef01d788fec0cbe48edfd22f8881c33fba7436b08c67a4b207648d097bf3a6d8c2c69a6d5d44165bdfa116236adf025

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f4faf24fc111fad3207aea33601b73f6

    SHA1

    c5f81ba58a710d5a22b6e8ba25104c34157b22b7

    SHA256

    29ffc647ae652f41e500fb41a593122a126ebddd5b38d36dc30ca9dd19630426

    SHA512

    830de5f37a429414464ea62542eede253506d879895bd589c211b7f022929f4a9db780a6bd307cf014d40daa7af465889a8fd7d88c8a7b97820d7c8fef398ef5

  • C:\Users\Admin\AppData\Local\Temp\CabD6D2.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD742.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b