Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    24/08/2024, 16:54

General

  • Target

    bf0a4442cdb84e65d5d076e8b5acdddf_JaffaCakes118.html

  • Size

    35KB

  • MD5

    bf0a4442cdb84e65d5d076e8b5acdddf

  • SHA1

    632b5978d6ee33a8138a2abc9542350ca9f97df6

  • SHA256

    5452a43343f08fb773b8c1d2039587aec715ee7d4afe4e7f16d96162292f7a52

  • SHA512

    a047a743746da3a981a18d4eb1c89bcc5dc4f189f26e0c5cf1600ab010c43004823ecf1b26c1a730780c64c1715e38681f354a4cfa6f2e7307d5791bcaf04e3b

  • SSDEEP

    768:y5la2PAULKu67fkT07X10N/cNcDh9fjhIhSaY62ec/meCI:yba2PAULKu67fkT07X10N/cNcA3I

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\bf0a4442cdb84e65d5d076e8b5acdddf_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2924
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2924 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2860

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    190b4812e15c9a16c62ea9a269f54cff

    SHA1

    e0de92d60dd830f97bc4ea45ac34305a69a9be7b

    SHA256

    2b427b7d5890444381c6a432d93c1cc78414266d9812c38be82214011f0a1ee3

    SHA512

    bf96b2f3c2266b4c81f5c4c4433f1f8f45da33fc3d5814485a6a7bcc555c61d88be6c74ed70bfe40d3f9a62e8f1247074d99acc1d7be9002a53bf5873e153c31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8867edcebc8623d9db0c00e5e3d21357

    SHA1

    7be6fcb6fe09931007ecb469e0b6821ed3a2dd43

    SHA256

    308df5abce47648d13ff22afbc7ca323d23ec09a63090d36e116d70feb2799e1

    SHA512

    588912c3e8b6a1fbee6a3898e3adf2551146fd8d1a650069252c6358f2cfe076347dbb5b743502a2146797bfcefe8d6d69e36f5f48bd57a32303f152f83e4f72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b35f1cdf6e087a7c2af1c10a71ca385

    SHA1

    b9f6d4d141edb22a9a6bb302dc3f38900ddcc7ff

    SHA256

    70162bafc2ab31dd974775e85829d62aef02b82badb6ab41514402dc0e9b0a66

    SHA512

    a971df097286e6492130e7d8f6f1db0e45b1b10b4d8aebd4d14d70525738ab4ac31993eb2ac22374c0ef89db35153c2131c7dc0cfb5bbb9a5e9eb385a154a2bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    378a18a53760c31bce47a9b0a0097e80

    SHA1

    29eca57067d8c5feb36d265f9830f17733f032dd

    SHA256

    3a8e3af6378aedc6a1db070c3dc165f9ca143e69753a768abf9b239eae54176a

    SHA512

    051b92cd36d1755e40651beeac6df58370ff89a28cf0732c5e042ee963f39a25b4bd3e23eb5162393b96d8520661b674c241e4bc11ea78d90c76952afb32b4f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d5365cfaf25d30b069f1b88a304def0

    SHA1

    0e2a28294250ba1d1f155a3524b14d35302731e5

    SHA256

    043a2f483b164e2741c832ea16bcd7fe6a07c290bdaaf0e9cdf5c16a50d326a5

    SHA512

    0430e83ef45f34e605f706c1c89b4ef0be6fb530c6ef4f22209de167782a5ab1bee112d87027a2026b5606125e7c89ac3a59d24c2b2f08c653ef8dc598e92ce2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ce5df28c7a315c221d21aa88f7a43ab

    SHA1

    375ee5beb542c0c8d6ca78ff583ce084b977ad37

    SHA256

    52ef172ec61b6debe31fd768ad4e041c9376de94628bb7787f8209062b76e96d

    SHA512

    04162b8a84b0c3e1f3b2e10a006a0d91caa572f8954d38a0b5129e8f6fd7842730e72c49a485e63e7dde7d3e151723730be998ece9170bf20f3f872f2052047d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f195484137818efe8dc303e45fa5836

    SHA1

    f912e03b501b10bd075a566620b33473c3a45c81

    SHA256

    98dcc40c95d2da1504144ee72e9cf2a07118e085300f04b5c8b4c02533b0aff2

    SHA512

    55af082bee9306e3d928e3a4085934ab88db693bd0a7d0d6af326105d4bd2d44e104d015a9d5a091a1c57b0d950546fa73d71d014031581595eeda53e9ce31ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e11faba7e56c984022d69a5c92ed531d

    SHA1

    dfdb25e1aa098880e6bdd5b458706a8561aa9c1f

    SHA256

    2c2eec5a3ab889e63ec7132115554bc55ef0211fd2986846748ddfb7696d25e1

    SHA512

    85efd2253af9d090a2f7edd7c7e0252d551cb79d83764a799e43033b4f4d3b1be8fab269350a289d6b8ffc0af9c8e30ededdb0089b42075cbe799a1a10a0c99d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7403c3cd161b3f31ccde5ca491ec01e4

    SHA1

    5fc255ac80867b61e7af7b67f0b78b1ad1f78df9

    SHA256

    2d2a153d569df6a0ccbf7028d502fd3a2c47fb135445cea1e10b77d9eb65fc3d

    SHA512

    69b3c50ad00722d110a9fd6e5eb85f72182d1e5062220a65f40f2e5a6ae25fb2c380fc78243b3740af0848bc53032b46ac85996ffb98b6e16ccb8d63037c8645

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    55eab4455acc91c855cea1b2ffbfe1c7

    SHA1

    281810170b755654f8f9033df61cc26f10967942

    SHA256

    2ec2afd786e92b65d60c819666e9391956cfdb5af804330b892638979dffd51f

    SHA512

    d690daeb8cdda139441a659b87f38de258a0b8184aeb3aab62ce13d47cfe809a591ccf2e79d9608179094a4d1452348769a4bfd5c9cb6f6abcce9f479ec0d560

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7cfc5607096c0b008aa8a451d58b0d7f

    SHA1

    03e6a3c76ea5ff7d011ebfd1bf4e6fcd14e2d5eb

    SHA256

    a7e6371b79b92700e5a5da603f1a4a480150f15d243cccd82a9997a56dbe9054

    SHA512

    293ae3bd3d6530a576bbe692639e99c3721318d39abf6de519d5509e5f3ac3c0de3ab26d20a6a29e4963e99c315a8aee672421f80a246ca1edfc0fc273323fdf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff94d3464ae267c0251bd3c68dd8c596

    SHA1

    0be0e36c25f2ae263b24b7aa68f56ef5128ae13f

    SHA256

    87cf848dab4f3285112d177f4f5dde40eebf8020b5d9bffe35a23497f3070de6

    SHA512

    1880cb3c35fc91e925c7617fea3671c50f2e208e4dc10fbc3f097ec209a4d7475765732189bf76bb9b7da5bee37233c199bdc253017d234efa8b49041f97bf5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e52b255d8bfea4b19a4f66ae4ccfcbd

    SHA1

    f9584b06a02cf042c4cde289be9b804f92376260

    SHA256

    d85b9d788c7e34564b073c9d63fc2c1d065f157f272a08af5d703d95b8c55307

    SHA512

    59a8ee09cc73f861578a038e6e6b38c9d0d97c2db1afac6e81ea365e31c395f4f3468c0f4e7bc0db858884596b00b81b3f6054ca93f712c1c0430fe1e0db7e05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    adb300d20124c3223109bc6c365d2844

    SHA1

    ac0043d9d2ad3ab4b8c42c2dfb78b68a081f79bd

    SHA256

    f01f0eb42a16f3b1b90c503469ee0164a6c31e807012616d0e2d68f4afbcdc07

    SHA512

    46a158fea094064f9e6bf0a89151142c66df2b1be5a773985ac5ddb663426982f6c589c188ce96833dc19aab1c6e9866a0183cd4bbc4369926059d8453079d76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da0c3eb692d237e1f10065da8c7dee95

    SHA1

    241afa3727332d9513ba7719bb7cf1c760e4ccc2

    SHA256

    a8a2720bfea831db8015aea11ee5ef97acc6270129a75e7bfb4173e0df7e562a

    SHA512

    7dc167b587f3d282f4ae469f39396b1de93166c9f9dd32bb8a9e8c1499701b245d4279d630d87d6c45c29282bb696a7ae2eeb71a0a921ee6e68154206b346f88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    609aa18ec70f0022b3ff863a4c88b380

    SHA1

    72c70c7458861bdd32381a2715a967aeaf995b2e

    SHA256

    4eed82fd7697651166d783eb9d2a87fd6a0e24e8634bbcde9f81f463283eae30

    SHA512

    1d55b3f1fd1d0943a909099b2cc8c6f89d633b8262dc2b3a600bea5776a9e2cf1965d0a542266fcd3905db3841dd16cd94a8b8d6021d88cd0348bd0b3685dad1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e96eee565181fc429fa4c3909b8bb8fb

    SHA1

    72908851d1877a48a91cb9ed585909f6a4bdb581

    SHA256

    1726ed55d11c4c2cf0239a991add5ec244bdef1c0772d812c066a1b5370947c2

    SHA512

    4e47955a2717480cb825ece3574fa88379c6bf1c70f6d96ffcd6f7b4bf5c99cc05739d04714fed3c2dade2ef92fd069106313bc7ced829f5a84f51304b670fbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    9f26da3172f2fdfc78962bc09a36d8e9

    SHA1

    a4cd54a09783cf6eb3753bf9c9e49f1c5485323c

    SHA256

    a17d6077f49d181dc572fec2aa1a30b9864e42496bb016b9b780e8f4b4ae818d

    SHA512

    43477e6f17a263f28123e98ce18389f613db3bda89a990d1642e2bd17c9c4bafa3260657f7aff59cd3f4d3f4b5f085893cc84c60f003af7533d45252637195d9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GA43GQEJ\f[1].txt

    Filesize

    101KB

    MD5

    ced56751b702e2327ee7d2a344ede4b9

    SHA1

    7bdb6ac8124c1099980613e745ec6e5f686c6033

    SHA256

    eefe0fe25ac570325d9de31260889fa1e27dd41f6bb7d21e2927c97d1b76ab8e

    SHA512

    67cbfad5dd87955becceece17eaffbfc3e3cb46dc2cd46ccf547c1682af069a8f545649dee5d90a99af6b5f3313906e38c2e20f8e00f241011b7468770b0792d

  • C:\Users\Admin\AppData\Local\Temp\CabF346.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF77E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b