Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    25/08/2024, 08:32

General

  • Target

    c058ddd6b599ac58918dd112618c39a5_JaffaCakes118.html

  • Size

    6KB

  • MD5

    c058ddd6b599ac58918dd112618c39a5

  • SHA1

    cf857e15e5eda77c9db1525f7073f840095f6115

  • SHA256

    17b2432035d6e06c2573bf82b6e2e0aa8a4f6f558dcfab7fd47d69f395a8922a

  • SHA512

    8195a0e5fbcd680bf51b68ce92b81fbf2bac7c466adb192f919677a7c4024fdc6d46fde6d67c3711d4c6f79a2f4fa2f272870870bca8d4427dffc1074a6bfdb0

  • SSDEEP

    96:uzVs+ux7SHLLY1k9o84d12ef7CSTUiZcEZ7ru7f:csz7SHAYS/hb76f

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c058ddd6b599ac58918dd112618c39a5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2220
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2220 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2264

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63080d484387152421bf7aefc936be99

    SHA1

    7147b2f9780233c4cb44c508e90f4593afe048ea

    SHA256

    9a4a7bcf6b6b8b938aeb3490a8f5ac195ea87286e710f4372fc4bdc2c8bf068f

    SHA512

    125b6adb51808f2856011e9cccb7b57f00a43dcd13f04d51e224ed366f28d297c651f9e1649a26c8c2bb808654531fa1612292fc7cdaaf02eff7b91b48e88f06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6589931a074ce92d81d575f85794a7de

    SHA1

    0378b5b9fd57f2eb817fafce5bee3d9589b8d179

    SHA256

    82cebdcecf1f58b34fd919e812c55408ecd2d2cba68ccfb7d38dbfb8ff5fb881

    SHA512

    ed21e26a6efc2dbe94b5b874ae7785f822025bbba0707e53d4db79dea911ee051a479aece09ec408724ca6ae67651b2cd65822348652d3c2faa5e653b7a580ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df9b96419f34a1fcd0f763ebbffecff7

    SHA1

    b9272f087d10554054142d226fc04089cb749a67

    SHA256

    ea4d67cd09219c2c12773f79480727e3136d5792765934a87351540eff407634

    SHA512

    0fa653edfb667d973abc37e671a47857240b224dc9250cace9beff2c2a9691fabac79bf18d605fb24dafc97920271f60c79420bebd84e186cfcc623ed273f0b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b8e9d6e3af673b5edee3fb14cacff08

    SHA1

    cf9a2aff724e63ca5dd84f968be4f2f421834beb

    SHA256

    b9fc6eebe297b37f3c0a974cc5a152a489669782991216197f6254256abb581f

    SHA512

    3cd65369ffa56d6d6806855a2601281ae9bde7e429e9924ed207a6678d148cb9b1644ce919392e8d3f05e01426eb4a4df243ab72bc7042161b7039b92a971365

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf826f3d8efcfe77f9c64ea0c3b85d35

    SHA1

    b59954061e31ee98f7de90df4b9267b258c3b835

    SHA256

    e448106176939bfcbac1c137087af0f1da272bf560d4a9d4b9e2705342ddcd7f

    SHA512

    b73013c78342323753b70974c4e1cbef5c32f364fdd00d5d36c51daa0c15bcc6feb34cad17d88d1536c23659a5f72e6d5955512096ac3d3850324ed2aa09c269

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d91249ba359c48f70efbfee4addb4a8

    SHA1

    a7d7435000da395ac36ae8ef97b97f1529da377e

    SHA256

    dbdc97fe8ff52fd21d8a3d0ef88b11ab72b5334fc222b9f67a571c16fbc8ff07

    SHA512

    aa4f447451929893411dac73ed6dbf65498426376a9e2a5d4412fc3d5b6325059a14fe1c449f0328d2c57f8612c7e12dd8abccbd4cd5feeded0b05979dba6ab4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    65353ffdb16d7067e51be205da13d32c

    SHA1

    fedc787dac8e381fa29659e9eb05df16c116ed01

    SHA256

    06a796d6e28adf5d3b4e04ee0c8ca11ba5f68a32ce35de0a716d73b0f352122b

    SHA512

    c2f27483ed292951b9ce61cd7d36d10cc33f5bf1c370466b276b9c358aef34e828dad9cbe12a6eca5158121a26bf3aa4f41b6d45bba27f28670bb47e81d4b95f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8f4c174ba9f31404eb3d45ae205a6e61

    SHA1

    588228f8e5f78ab87d6528c5090f6cbd60248633

    SHA256

    c128157538ebb96a550ce37d007639cfcde4ce8a735cde9da64ae54550ff9474

    SHA512

    bad6702cc59f1da0379c6a2215b71ecd8586b930aa9b89eccfb79bd04b10c274654b82242cb977c942da6ce6794f0fd45f657845014776e42e76d6ed4b51d164

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00de66a20ce36cde16ec0c0a84104563

    SHA1

    d32aab76c0f6766b6a8b742560fa61241a39d086

    SHA256

    74eff3bce83e9b6a7a16b083344cc803289ec0e96ea2dcef4a09fd9f52801e62

    SHA512

    cbfa212e258c9b68977cf7fb485844fbd6abe04e22185accd17299d21ce90964b3b3260358e94bd581cdc18f48e1bf9126f484b743a76d52a56eaea0faf6cf51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f83505b94b437ebbf04449c106f6bc40

    SHA1

    5707e3f2c54d4b15e1897ff4183778408cb69b59

    SHA256

    1463c1c5fa7127d5abf0c53d807f7820d0e4a23d2db235282148f83fa01a059e

    SHA512

    cbe0732002452066e3145b014d9ae5819c388baf8ae707747a6ee6f692fb0ac58b11a3099452b4d4a2b2c1e1fa76ddc917528c583092e121b1a9b788d0b86b7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e6303d18bbcde07183cb34ede744f89f

    SHA1

    2e7f96f7ad7ace56c9db5455124a84669aba50d7

    SHA256

    c1541f08372112cb6ca7a90fc76c2e3d9b3cc041c11e9b0dc9ff13e0f85a9ad6

    SHA512

    2ae803c9561c1f6f76d66c8759a54f077b1d8cfba26dd5446fc6a1649e45103ffb96f5da4185099dd409f52b0ad5f579de8ed6f26c15b240e9392ff06d784f03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e55d27047dd2164d099bf7bf17565b2b

    SHA1

    cd9370a7c33e24fa8ce5599d9ced0d06c5a15291

    SHA256

    a0ce3f4cc3d069f9e9aaeaa7733fb643fa97da202dcb844edd7d7dc2614d34ab

    SHA512

    45e1b3756d335911fc7b1822d9a1cf272bfe19810db0151d5a8874cc628ff814324a2c3b2e08774ece6856ae3b6a8afc12493a3cc56ef618c2938a4326bb3e38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a073512378c42be1d977e16c1545ed0

    SHA1

    5396c74f262f09d54511c70d1217a07439576f9e

    SHA256

    d39b9d42a965ae7ca329f5ff1177d2c76c610fbfe6f860d3393c8e33dcbb7df8

    SHA512

    483c9de68d037884bf8fd17a49c55430b4710cca35f411bc70d593edda4c4c00b9b490d06225ccdf123665b64a7792b6e61a0c2e6eecaac8aaf3fb8352344906

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c1210a4c5f04c59baf957165490c862a

    SHA1

    0b9ffed4758039de8d7743109e4ad8d36328d3dd

    SHA256

    25cfeec1fd4103b2bf945292c7530c29ffc29bc483c8819fb5cb355d6ec50dea

    SHA512

    fff4693b187c7727ea43576df576fd78546e172ac01f05210fa34d214ba7025393f8dc382dbe719ef86e5f681aa281bdabc46ee1f17ac061c89f4e3759809af0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dcd5137d139e597a1fefd7af0f5c0eaf

    SHA1

    df1091231faad2d9de6f56735efe01edf008a289

    SHA256

    74f99c92a80d207861e4cf2058b3ef6ef3a123fa9b855bce6c9f64e0e51160cf

    SHA512

    2d312b40732c95a97230db8d6402e9afac6f8029641e90b4da03f06ca26c18e44d11db8935b4e1c587850a3beaea4ae8063ce1dc6f178f829c19b8f396c38194

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b88e8efe9c545a20f21dc41a06bad3ce

    SHA1

    6f2f14880f76a9329210e3f2ef6c22a8d0353df9

    SHA256

    68dcf5500afc460e97d2902adb0cf45b04cad7edeffe40b402b92aba31eb87a6

    SHA512

    85ab0554035a332cdf8c38a650a40a932ae9fb2b03a3becd90019d124885ff6688b53833399bb43b121561d13931f78d636a7059c788539075aad5af58211c41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ae002cd9cbed6ad7d2365ad143ef59d

    SHA1

    b1fafd7cba7a67588643f567585bb7bbafcae07c

    SHA256

    5d1220b350277f6edba9ff2219c4e25c30323429cd94a8e8198ae0d128d5bf7f

    SHA512

    92439c202102b3917b65e51e1bb356b6048e0b72c0f00d016473505b054765610f5f7bd180e3fd020982a200e49eff32583be50c5f4d75b713a02072c3bcd622

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e5397e1e5e95b46366274d12fe88d24

    SHA1

    60a51a29c189faa36684c00faca56e6b92147753

    SHA256

    be2653a6f4993dca7f46cad2bec72ce05882902f49f953f10467a209e5d8f8ff

    SHA512

    715728d8da00576bfb13adba3eb28447f4e1316a1379242a87d7ba3c564f3d1068a076442f8d57f860ec12f8ccbb594ec6a673732a661350d74faf09dcbaaf4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    659c50f1d233f11eb6c7185ffd227836

    SHA1

    ed517e85371a4025d1284d846632054e4def7bf9

    SHA256

    1153cf13248d243c194bef84766e566a32118892b7a42761c8ad0d1706b25212

    SHA512

    338baedf1130863d9dea3a6b573a0955a8b1bda6a01626ea94b80ce4a231873c289c4112ed87f728750612e5068b8499f86b5ff6f791f108c2e11e15450fee9b

  • C:\Users\Admin\AppData\Local\Temp\Cab3E3B.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar3F09.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b