Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    69s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    25/08/2024, 16:21

General

  • Target

    c11f8dafe615e10890ba4e962117434b_JaffaCakes118.html

  • Size

    2KB

  • MD5

    c11f8dafe615e10890ba4e962117434b

  • SHA1

    7da3ac27ba5ffd729114ff9fa833ebe3e752b6bf

  • SHA256

    09d5c5bd4f53487e52a0d10465587b53d4a5a882e521004ce6d0d5215a26308a

  • SHA512

    22ba512e4fe7862e23c7e9b0c1b199a9841392cff595aa9402292c57d009b1b376322f69197a37de84e678cd9bf9150297fe8349a8b698a6a2b0e7455c895b3b

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c11f8dafe615e10890ba4e962117434b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2904
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2904 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2712

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    925bfb86cedef51e765df8a6fc6c5339

    SHA1

    edc95aff4675ae5073db5c65cb4a5e45dbd7f5c8

    SHA256

    0abb8481f93345fe1a1cd1d9ebdeb6c6bf00ef3f61bf3feeb75636f57ff488a7

    SHA512

    cf742b6a0edb5de5ba4f1e13e5beb154124fd6806ece27a4baccdb6f187a5974e4b152d2f752862806ed6da1d8e5520fa9b2feb958320c0edb69babb54865ccd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6370435cce3314b4301cf91107a4e3d3

    SHA1

    0aa0b4cc01d79a820335e235bc3840fd24f35de4

    SHA256

    8add2f241806cd219ad2c0e07341ddea8c99079aca1d605dd65348f3ca383cd3

    SHA512

    784ab1b4042742d4394ad0bdb57b8291d99bde19f0f1c68338c43f752200be32bb42ba093576d37fa7ce4060c7b3597a781c6a89658c1e75e082222493320cec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b6fee3fdd628153e7f728cb58b9fbf4

    SHA1

    d303cd0c97b059dd7b5497a9588d6215e1eac5d8

    SHA256

    bafc0c4354fdc05422a771261f2847022a49d3ae1d016d6a406b2bbcba9851d2

    SHA512

    aebc93f871ecf00fe4202611d617660073713cb9c1c81518508de24fbe007ab1ca1040ac959acbf12e9a4d5f7288f6fc7204f2cbf5dca4add5d9032d9924bee8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed18eec95ebbc36a52619149964c2ea8

    SHA1

    b52668782545a76516c745e2bbb438b25f816e46

    SHA256

    c86ee25eb4cc841aa3bb5c1dd69d0ef5661e8d620ed1f0536c8ed8a013ded06b

    SHA512

    5866c447ca50b4713751d9ea7c380abd31fab66e9fe6e1ff16c7091ed04d05bc5210d44ab4c931c418749f39df7b7f3df29b731a5041fd9a114690ca3e64ff1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8980e3f942eed71016b7d437f6a383a7

    SHA1

    2b2527dd218ed3688cf27caf2f0fe390b44c43c0

    SHA256

    15f02c539c2e674a64cd7055a0a00bc9ec21935266262e84d38fe279acafbd5b

    SHA512

    60c7edbba818268965ad6f6dd4cc9a7a22d6b6bd5ab3b66c3a447a840df05627b09cf2b924a04ff0070b6c0a501e4393ff356bbf6520fa328d64fc169dfb7b42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f2f590785c81ff7599c7b2253708148f

    SHA1

    994307911c16d07403b11893668819ac66fbaab8

    SHA256

    90957a16b79283ea19299e185b00780bb7cb855e37cf546caff7ac7accc6daa9

    SHA512

    b121f571098bb4ed49f6fb6767eb0bea9f06f1b65c1b91b97c863247c13cd57fe4c09a1f94ce6e09f816095cc30e97365a411d0e58fe6daa64bbb4caae607269

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cb09af85318892d8c4c17175db1ea079

    SHA1

    029a06e10b31776b1feea9ecf69862a230a46e4c

    SHA256

    60d1c077ff08590736dbd9a58b29ad5f61b8bda03c0a8ee13cc6ca5198871543

    SHA512

    f01882e2a48239a70e17e2c7221150d779824a13109bbdc98c4f4954687ef08c64c95588070023882d09576d95ebbaa680e6cb3f01370e239dfb5d9cfab0a1fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a21cad137c7eb89c12d786bbc5ec3f84

    SHA1

    bc37ccc2ffa727dcb9c0241df916ecc9cb10d636

    SHA256

    df62975bf3afb892474f46423005a94a5183536244a12d10ace88e4d916efa8c

    SHA512

    6314ae3d7507f11a0e334d1083eff91d04f5375e6b85ba4044580f4d4cba58836872bb3ff46b3370cedd4c7b248a7a5fee830e0b14f3beed9392642b4aa90bd2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00e1f45cb8f0d12313983390b88e43e0

    SHA1

    22f0600f64781605b0a801f926c3cb15696456d2

    SHA256

    7b76ac7435083628f7017e56f3adf75e85eaa89f3ae2d753bfda4ba70eec920b

    SHA512

    14f3042ed1a6592053991f98210e337564a2e4e50b050845e25a8e03f19385c3ed01968a93dca517b03370510ce0cd6db97afc0641890cfc24d8026caadf3a37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    95ae0169a9e7ee83e04f18a77a0dc201

    SHA1

    07171a6d225961e8adf86dd046be696128a028ec

    SHA256

    3bf423d580ec2997ebdd6ac54f7183da2957cd5212466cffa3a8b2c7dfc1ed2e

    SHA512

    5d42bff5a877029ec1519a46dbe15bcecb435d15ffe20ce0a9fc8c2af749dd5586ecbc148d82840188481e9826792cd91df0bea4fa66dba87d6104a918840120

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f96b8f89358293292b0203d8cc85477

    SHA1

    40f5342dd90811e83f2d720fd52cc5e268d6113a

    SHA256

    a5a139d05d6dedf76efe98cb027e484c8009a76fb6d5fd5112591139781ac1db

    SHA512

    bbba0f0955819829ba1c42a2ab4abd9e9bca682a0fbf5a966beac233b963be5c9f92de917f1eb2b3b19a05d870ca2984ce9cab6d7665d232f86338708d9c6d7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b022ddb6147b12adc87e8d9ab835c1dc

    SHA1

    a32a2312091c0154a73254e8b0ec1ce2886185be

    SHA256

    9dedc83185465c66effe6a8486dcd5f98a668ef650b9662fcb7b7c9188e98410

    SHA512

    29d922f010886db7134a6788ebc306b37972d7c3f78d9dc4981be01ecae8cd0522fc3b9c4fb74c4879896686e93967ecd1b1a3ae698f617017f96ab0c09c1062

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a207be944043791f615c51dd3d030e4

    SHA1

    91caecb0c8a17fb5f9ab3139b80e0ea9cdb8c709

    SHA256

    cbb6e7964d872ae2d234d048ab8c654d52892c23a0cb696aa082f2b62c7a2fe9

    SHA512

    d4e78906ba8387f30a94a24e65d8643c32d7eb4a1fc243d3e14bb4410187afed3ab4896d5a75419cee143c975577ae626868f77003d54fc3170da1c37c178489

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    155a52e6824bab88be556892f54ed335

    SHA1

    397867afe8ece804b77a800773fb2f6728cef886

    SHA256

    814ec49af436417fd4f5e6ff9cfe93d609acc7bb26b053054dc0c18086d9c0c7

    SHA512

    f0e56a63ed375a1668195eb936e91029f06e307689e2a75bad13c3fb68ce9831c37eb8cd375780f7dafd22a05f279d154f0d039d5467e01434693c2292b161e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a121a33329c88c5370c1b6c3fb5c1820

    SHA1

    7dc0e86181d12fb17f23e5cf323bbbf7d56b38b8

    SHA256

    b237c47a181efa999d164fa0e9cb3fc5e60289df61cee1aeaed8c99f1215c6a4

    SHA512

    6edf080988f215dc240e8cf7731177d58a68210a0ec832500b1a3e3572eeee5bb69f80569ee35e03cdfc931836ea0c5aef890adb92f3516c8632a602d969a1d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f12aca432f59ecce45ea8668bf9c4a87

    SHA1

    a31f427fa7aefdf4f80df0b01d230c5b94225480

    SHA256

    64fc165a274425e2deeb2498403f7fb8ac8436bbde65b787e8817a2ce1a91c46

    SHA512

    60a8de7f609b8b2dd0f0ac8b167e165d5faf049ad5b83cf9cce6f2c9635d22d0e12b5528c78cf35068684d70ab5562efa923b271f5ed05408123019e4fac96dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    175038918fc9e17ff29b4c39023f6852

    SHA1

    188b26a695e256c59188b477e6e534dd03a49045

    SHA256

    10cd13524f3c75e869c50d27de6cd008cded888c2d9ca76ba49541e0221e8650

    SHA512

    3292bfae076b6650eddab51fa6b80cca6b15f5ebaa88e93b3459b76a556f668827cd2e7b767c1c7d0069bc5d031b885266dbb9a2e49a5abf0b4252eeba5be7e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba3d96b53ce9e94603853e958256e3db

    SHA1

    f48d2ad7b6e5443be32153f43333b7cffe52d08e

    SHA256

    d4cc1c348e611519e18538729848b3ff94256834c155b7c743e71b14f8e9186a

    SHA512

    45e571078034fb09264090a743bd44a15aafe51a3174d545d5e1a00d69a51494e64392766ea72b117a06d91f259e0b2e67c6690be978b2801a308c2a9be0ee7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9262a9b50e66c8f0a0c0b3d074241160

    SHA1

    e225404a8604990d46b8bfd9604344493cece5fd

    SHA256

    89b6d5b8bf058f7091344bfc4f7d5513bfe7275a0d68201eb8b0bf5a0557597e

    SHA512

    962d8ea1a8421aada874ab079f4d662c60afd21a3c5b07f537bbd25e4c5894a261b59bc8c187486d3842f7a87638ad99af7b8883ac68606bed401d85e7a57505

  • C:\Users\Admin\AppData\Local\Temp\Cab1355.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1404.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b