Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    26/08/2024, 06:05

General

  • Target

    c26b95bbb2810c768d3389789c2629e2_JaffaCakes118.html

  • Size

    69KB

  • MD5

    c26b95bbb2810c768d3389789c2629e2

  • SHA1

    dbaa457273ab0d2bc913805db322c6587e882266

  • SHA256

    309432f726d3167100d89e4ddcc64c434523f9e8648fdfe3ba7a5562da5f80b8

  • SHA512

    bd10efa2fb3f51146347ff1a4122d0743364136f4e61c115e281b6cb5c57439c39d0fa475654825dfda49673b2402b6e2a8651bd1111c5dbb9cda67e34360862

  • SSDEEP

    768:Ji7gcMiR3sI2PDDnX0g6sYfz6+FooKr3K/HPKeQVKoTyS1wCZkoTyMdtbBnfBgNp:J3iHOzTzNen0tbrga94hcuNnQC

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c26b95bbb2810c768d3389789c2629e2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1948
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1948 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2588

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a8f3b2abd0e76c6dfec7b5fc0194895

    SHA1

    2e458c326365e39ad4e59994f2f33772841a70f0

    SHA256

    6dbd0a57496816f7c60a5a0541b0a93b2af974ea96db1a5064204a21ef4cc481

    SHA512

    dd1c8afa2c04077d235b8946b80a13386cbdb736c30f42f11d5b9e93fcd0c50c37f969afd4009d6d8916cecc57e99f13fef1223a3d304f2cf1690b37e426943c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e70070770f559625c1b4dcff60829f47

    SHA1

    a307009dd8bdd340216a3bf8cca03bbd3aa49473

    SHA256

    bb21c4337a24c436695dcc7aa2015d2fd09b425d8590ace838bf448c2fb7d839

    SHA512

    6e33fd5b10854ddfe99aba7e5df3c4f7edb2b2a9641ac454efcf92c13e91f5825c455601f45db4d43570f2bacf413b5d43562ac21aaabafd5fc824054a28a2b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b3807bebcef3885b009400a1ad71a92

    SHA1

    c32cd0db98a81cb0f37d7d2f3c4760201bde3a29

    SHA256

    5608a1e4a5ec486f0d702177688cad2e34cf5d7c62c74130b6f93608896b3c39

    SHA512

    4c12e194053d7bc468ea8fb22254745621e60d0bb38587beb223136b13b3e5eca0ab989ae74a6c8e5e3b27e18d48c0922cefdbd13cb80f92684eddcdeacf1931

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d939c09733731808e437e462bf48ef76

    SHA1

    8867afb44dfa5e6475186855bab6ce2a82bbbc8c

    SHA256

    ee33e8e1bb15918d6cb3f26dce057c6dd3fc223fdf4275fa97061625756f6c0a

    SHA512

    6de6f65db8ed4fff1c3a8adcb64261198988308bc2c4b1414ba0a867e9923dad8789870fd2375423431d52c261bbb16e4283137370ec958efa5010eda657b18e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6576e6168d8647d0c98a5f64c45d246f

    SHA1

    e7ae9ae2ed450f8c6da9ec6e0c8f34c94c78d400

    SHA256

    2eb4d1d2e9e66aa3fbae160e6e8aacd86cc59d044493d2efe825b191da902788

    SHA512

    eca70b900c033c2c5005c768674dac319c245a11d493ddc3f42d8d5fd82a936d34072a48746fcf384873f2c906b1585f785b3adbd16c1d79d917e09bf2565572

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6474bd35a88a6e4820ba4b1fdb1eba19

    SHA1

    d0bf1029dae409d475add37c7713d58bd1e8b2cf

    SHA256

    d8535c5ef447a3642e3ee69c76502735ecaf49740a60fe74ed1a34c2e5475a3f

    SHA512

    fcb640c98f503c2b2ecc4a7e55ea97d80a1050700e2b59da5f0b769524181489221e51037cd2cc23e208a47dcd1e545aca1f5dd952904fae61aaf8a534c2a2ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f48847c62e2ba666f6546e008863b1b9

    SHA1

    8aa1ba4b0b91ed425899d2cc292d9166a9bae19b

    SHA256

    a11bac05ec622cf8ccc46173ef5c981ea3f095447c5746056243116e74a0e620

    SHA512

    31ff5c07008a1dbbc73c0060d86e6de22c0aadf43a046675e5b02bb2609581afb37e9908df40d59d3017a5e56cc669db89895408fef3d4a6ce7ad49f0bde2f43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b5a5c3c2a0f6bc42e5db2ab04537c02f

    SHA1

    36793cd4bede7159f1391b903ec485e9a9c95bbf

    SHA256

    72f9f9b90a8e5fd72a9b26ea05faff4fbc0829d279190244f61189f4b55b40c1

    SHA512

    b9fa7d196da0aff142f0e83694f2e233565191aea60cba90d098fbfaf6cb3d2727bf3018c6185f168d11295dd33d14cec22b367b96290437dc163a983c5a3afb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    24cc577ee0218b3682aea3ed54f5e9e4

    SHA1

    0e9d9cf94d815442faa39cffecbeee27ff9e2a5e

    SHA256

    70336f58fe8bb5c7361876dfaada10571dbc24f96ee91ddc1cf0bb7c8bda8086

    SHA512

    1fabef540a7a4b59b66a63ad9d820297f267b082b8373185d5bbd0c11ff46f0a58bdbebd8b72c05ff53f614ec1593ce03775eb78720ea3846e385db4c86f3b49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0c888ecc335e524e3f31301534233322

    SHA1

    bcc59243ea443961ada20c5f52776b4d357c67c8

    SHA256

    b97e743c47143e44033f4f0c08e028efa7337577ab8ce265dd4152f121a2cbe8

    SHA512

    ff430c6b4b7346aaa502c22820c3d06c9d9a2f478f33927470e97a111a319f217d8d45b5eaa1848e52bac7ad9211a92f5dde3c770b635e5facd600669704f348

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aac88c39ab3204b53d5fef761e9cb43b

    SHA1

    c97e29e10fb13df1a631f933c2a20a47252bf8b3

    SHA256

    9c01df7c9f94b0387f6e3d5181fa56eaedbd51b2e9cfc4a5e464e5e53c37b9dd

    SHA512

    8491cb47ed740bda4c2d7152d35cd20346703f5cdfe50878befa4b469198c43d5bb51e7cf30a49f3e1ce065188b1be1fa7cb1f41459e5b3e225f1dfd2b0da7c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a3263daaa032273bfc840211ceac793

    SHA1

    a3af46705d51f34b82ef46bc787ade941ae61ff7

    SHA256

    7d7f32dd3c5cd5d029a8e891826c63c1f8786c3e36e5ac007537daac97ec7913

    SHA512

    e78c3486897d746e82d542e61345ddf8fd7cc1f39fe83859ac6dfe02a592607ae6f2d49ab35cb65b1b76fff703824498631c8708ead7ae08c430a86c34cf7cc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b8f7216b8234564d1329d34fc9649221

    SHA1

    81ffaf4d1e8daca323d7d7d6581f50cb6152a782

    SHA256

    6b6285999c8efccd55b344af5e88476f02011cd347a4fdb58061b682e8c94d9b

    SHA512

    dac0eb6e70a78ac9d9aa8987272313f10eb70485a5163b7dccef06c79463b9278aec3c986a155e911ddf9574cb84938405917e9e8de287a5ce527f10e665cca9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5c0e5f9b2f48a4f7f08949fe65e441c6

    SHA1

    a9f2b86b03f6cdf00a2653b71e4d4f0737562075

    SHA256

    c32dcb925a629b46b29a3083f029c04443b053f8da8d4e4e977cd2ebd1ffedb6

    SHA512

    bdf57ad733f0831ef97a030cd1137945a168f97d61db0f497a879560daa0a8706021b17d597670a1c7df64efc25956dc8919fdc541dfa3a1b2d6f3c96b9243ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    117aca171abd0ca03e6a9e7067bd884d

    SHA1

    d1ebc5be6e376dc48d8b83f3227a0a54aeef2211

    SHA256

    f5033608609eeba7182d40c47bb885bd6d4887b4c14ed3f8337c6ac4d3ef6985

    SHA512

    b5cbb56ee4307a41b170a8101e99b7c4e8c9cbcf8148c7982df038bb4b3317d3e5b242fcd3d6cf5a316c3d9aea823b79cceff6fb88715dfa68138fc0374b8adf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3684302577664d9592baea391e277751

    SHA1

    4c6ffe4eea4776ada08a757709cd72abcc8b6376

    SHA256

    208b841cea6c5c09783fbdbbae62d40be0a05017828fbb81518ad92e60e8e33e

    SHA512

    75a078fb668c770449b905dac3af25b222a0872a318cf9bb52b09e5aa2348af09f00518bc96fa7eb777c7551516ddb9db4aec7d8e8828be93b55569dc7bcb6d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a555bbe023280e0abd7e3aa9bdc6f8ed

    SHA1

    4184ec9dfad1a33d6f0a2ccb20bf323ce28d6d92

    SHA256

    68a859684ed0524ce34eea2b4947e6842aafc4cf6dce33f1b4a32bfe23ea6839

    SHA512

    08d9a80c2fe52e829e08c63197d086b46f4a8dc3ac67c835dbfeac25f24c4b3549b8da06817e0d80597446882a2c410388101e4c88f083e365ff143e77f897c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b56fb831945f18bf27b66eabb5c42332

    SHA1

    c52d7f32d3fd8961ad73db1beebd434f74281810

    SHA256

    27f728e156083ba509735829905aa120a9023aad84d34d3dbfe50eee5f4e1b20

    SHA512

    cc05e4b3fc2cd2c8106245eaa1ca8681dafcc74dfb3df627dbc114b63dd0b9c0827bdc40112da8ded0ba552092343088b613b0a1f4fa7fb776db61986eb9e614

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d9f6d9cc971e1e18b2bb74231ca7c246

    SHA1

    36c2a593c49df11fa2a92479cad001fbf637417f

    SHA256

    e60db316868bf4daeb79e6af3dcb2d265e5fc30719c6d4137a7e9866937e91c1

    SHA512

    78788dfb40d78b7c2dd6fbeeb89dfe46f52ce8e43bb121785bf1a710b8c0a01c0bbbf4cb05cb75586e5da176ec171e3c9e3fb8824bd06d35f230a292baf6e85f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3aa2b2bf6b94eb37884e73ae41b47547

    SHA1

    897ebd78cd885fa293688c2240e87b5e8d0c3803

    SHA256

    c43eee046cc36538a10b173b2f8a586d6ed640bc25d5ae5d506fd680c3307bc9

    SHA512

    6bd531caab3f40427bb5e073d808b92ae243d1c24648421914927fee893eb6a68eeb921d72ba9ba77be822e3bca23e36b13e88e3765125c6f9df11cc3387310f

  • C:\Users\Admin\AppData\Local\Temp\Cab3D03.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar3D16.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b