Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    29/08/2024, 20:02

General

  • Target

    c9889880928f1c37a87081717432fdda_JaffaCakes118.html

  • Size

    24KB

  • MD5

    c9889880928f1c37a87081717432fdda

  • SHA1

    4a33e2c61bb5ee138c3f22a833fcd79a7740b579

  • SHA256

    e0a79835db0575bf51fbcce8c3ec657adabe4551cd771d269b151c26fd77c1b0

  • SHA512

    6a4171f38964134ed75abe33e4c1243fd50dcb8675a52ece7f6131acc4d7cd2dbefc801ca9b1f742a64f13c1d77218e2f0b0a0ca6f0482f80b8bdf2f6a0c868c

  • SSDEEP

    768:BUF+Wp1khngy/VnAwjRjfVQte5ViCubx/Wscrh:BUF+Wp1khn3/VnbjRjfVQte5ViCubx/s

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c9889880928f1c37a87081717432fdda_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2288
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2288 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2256

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    2729818d20a07d9cde424a13f9404471

    SHA1

    4d544b5c472b977e97c3db3f3eb77c3f11901201

    SHA256

    36ad21a6669123d4b3bd03cbdc3871ac35af2b85ffc0e0c1972af64adfdcb2f0

    SHA512

    0edb1d76e1c9270546c7e74386777be873aee152cfe7549aed6ca00f648ef7d8599d768c9438776aab23334550db52a091176193f43541ef99883702064c034a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd1300b1d340c6fedbe031b7a1443b2a

    SHA1

    21adf6a5b3a9faa432039f2b9c03e5ab953b507b

    SHA256

    2d321cc8cf1550b0541c23a9d9a0cff498fab3ee9aa09db2672bed68706d4141

    SHA512

    160601b751e3e9a6d25358dd6289af5089eeab38ecaaaf6121b7caf75acc84027d15601af58f0fbfad699dabf2e0eccf97381e79f65195590b5946a799a75b47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a665974a1226d367d2db4facbc0e72d4

    SHA1

    c172dbc1f5d60b8ad2929f552061d723d3cbc671

    SHA256

    28b52a191ec206581b592ec0f90572d6e6fb331900b578396271a2c9477122e9

    SHA512

    bd9b6bcd19b8bb0ecd62eb9d41fc34f9ba9c8a3c9819820916004d7414ef9df10da9d93c351f7c77717fa6847a6917cc0d9e620a5f6ab71235e365ec04dc641f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6dba94d890590065187bf21e457feb78

    SHA1

    faee7f1cb0e5e0ea72692fcfa554177d55d3256b

    SHA256

    67a695cd8700918f353ce8a67a2385eb92d0079a0dc97117e227b638a44957b8

    SHA512

    9bab9dc3665d789fcf2a462dd5770c6997f67be01b0f952a9b84262b17a3800bd70fc896c671c591b6d191d37a87acf0b28b4867aa633b6ab630fd7c4374577f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fe844362f30f2c48aa17ea3cac09eb2e

    SHA1

    caa5239d3419e0ce3fbeacee59e3ff8026a9f45c

    SHA256

    6f6b93af78e08c765ad19e718cdae174f65077fee62f1f784694275b727c2448

    SHA512

    5561fbaf2c377d9a6d9f72450375ba09b73691658113e7a055b68ee9d4b0f56bbde32df24b1469511d0a0d3c84f123584997daf58b77b1292bd0ac7ff1c2dae8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    156b2ecb199dce86a26de96f586576f7

    SHA1

    7ee6f6fa82912ec7fbf7dc36d6b8a358a5a42ac4

    SHA256

    02b773cb7ac38f3be3517ef022bc0e302c030969f21461a5a06ebbc0bbe057bc

    SHA512

    db3381f031b452eeb5322211b6d99a3181bec7a8e317b90ae5c8c1a87039d05fab9de6eb03ab38a5a7da51d07f2eda245ad0d16042131e2b7cc6e385b0a003d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c98de0027cfb6c820b8a2e82374113d

    SHA1

    6d7faf75dae922efb6cae8a208d407f3d76ca4e8

    SHA256

    f9eb62685487761f6d783fbb963ab2179e467d8ea801b8ce8f33ebfc3bf5ba32

    SHA512

    3fc42e7bdf77396d140e4a619f3d5b20b58d1e7ac1a5ff3fa49589e5760f6a379d9738d1a4c831baf165d4e838cc30b968893201cc92f161af29f8aabea3e319

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae28a4b61642bf66795d17bc7883b5d6

    SHA1

    9653a1280bfc844866b4b63684c8fe3dcccbeee0

    SHA256

    6d8363ac9149635d53731015c0232d8c9db18731699786b04832290ead5de1d2

    SHA512

    a9f92f4bbd6ce986834c2f89c54971d76c74cc7c673973724a3a989fd4db2d82e6fba282e40981102fe6d5aeccca87596e3a761e944fdf3ae7860d0fb0bf5402

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d9c7a3580af3947093d2dd8b7bebc4d7

    SHA1

    5b54c70849e4269f64808d2cdb02e70cf05808cf

    SHA256

    61d711390c40f81a3d01cf2f76f2f0f3ad709db686f9a09f9a699b8076b68a38

    SHA512

    f6849a33e0e26c001dd5d003994b59b3fb3cd1f83ef0bd8e589af0cd6e05a65a94dda3421a5a84e19dfd0b559b6fa57c778c0c32d297225f4a85390b348e061a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f9cea20c566ec6d7858a739c2c5fb4c3

    SHA1

    7e6dbdd2757065a01ea10387e092aca5a6029ffb

    SHA256

    21eceb01b056e10d3a2acda255c7a85b87c3649e734bd7cea0b156bf9102899e

    SHA512

    74178c38a8c698dd930e6c02d68373cfbe9078375cb7ccd1da4e0a75ccf8bfbaaedbb64f5f30ba32bbc1dd626c708fe9ae96c66b8b02453e1c50642e9f4bafa9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d83339d07583022d7ccdb88ce389e71

    SHA1

    9b28dc4c22f90fcc6596ebb4f86fddf47a735e45

    SHA256

    6a48b927cae6c785f3af200940dd832662d9b6dbe0dca5d393888ef4f6a86f0e

    SHA512

    620891e96af858f271079608980f9abc35cbea83466613e3ed183e04b3b23ca7a0f65fc969631f3c91953bca2ad965b675b4423f1fdd770828186093abd57331

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4cdcb29c249fd962bdd5d6eb5cd62f50

    SHA1

    4889ba296045b5662cb64b2ccaa7a3541f6e8cf0

    SHA256

    1fbbf1d112aa1fdbfe10f0730917c297be9a69f5d2243674b2956d77b9f0b962

    SHA512

    01ed8c1081e62a02cc7d171833297e53031c452f0e54b449bcaa326491beec390c821152308162341d1feba4fb3235979775b255f50ddc5bc58e6cc117712f00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a704a82386458d6db7a57d0144d19dd9

    SHA1

    a7c0bd401957a384ddabd273d28b5d5c1ff6d3c1

    SHA256

    eadb077d230eeecb1a69a1430a2ef2e6c0c314ab7c7f2d8e5049ff4e9896ba42

    SHA512

    7fb3e6a08addbffd1265b926f96e29990cf3faadbd8c0942c15273aa212c959a3892c13afe8b861fa0028deb10f8659981f7c8bd772e85bdac5a58cd8b366750

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e182a5327a21c3b834b6e733f881844

    SHA1

    2b6067d4023e8ebc51513e3d19212556760f4362

    SHA256

    cfa634cb4063b9d0b8019ad6d8a616c872c2db0d98f94905af84d76deb5c2666

    SHA512

    ac4a1a9aa6e5fd1af9257f6133495a95edac3932d19d6e7a8d54f467a6c3fa9746c9a1b3c18fa21b85f8e9d839dc593cb01162276229de21883d7f73f9010f3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5081f4b5a2908a9ad8e5b80aa5b77214

    SHA1

    92550b91296b0ba1c2f5eb1602442911483349fa

    SHA256

    235f7f1c2ca2b5c87f00fc70cb38e6fd33faeb8eb20a2e87a13af72dc45c5d41

    SHA512

    ce06c5ad46cf3762a403dbca69a249237fbada22ba7ff006153c7b50c35ebd1781fd15ce2aadf66ee3bbc7e1461d30471a2b5741e48660df38408a037209ebc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    352decfe3542fe4028912484ef136b76

    SHA1

    f4d77e167546609c7e7d7d69718369ef96efd019

    SHA256

    58c28f35826b7c24e0122160b1371272976a0e96323a2c364f6bbc6dd143fad8

    SHA512

    5200272fd2bd1edd7ea34c17a06a8e5226aad38a7a1fc7cf9423aa28687a15fbbc7b355b32875478801229ce75dfb5d9a1a00b69db1aa0ab2248805b92ed9e9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4fa0290f6bf0025a1d9f09c9f4d6e179

    SHA1

    9cdc630ef4c626708bea5ad0d38c09d7d4caece3

    SHA256

    0465ea52c5236e93abfefccbb657804d194350b208511d3b721734b907fa79a7

    SHA512

    3e78fff9b9ccedbb891fa6b7afc39b6a701511b7e9fa71f19ad2795976855cd83246f5ca63f5df85678d351f7cc86a62f6da27024403c7167583d472ba33ab39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eacb3c2bc10a1ea9ea2fa922eaa98030

    SHA1

    3482aea85271416620dab05630ac4f4382c7d967

    SHA256

    43c9e2b4fce298be843903e8b8b33e4ca349799c4636ff2941bf95ebc519bc47

    SHA512

    e1f830a2c51b85119f8a8e3b1a8f27ce4bf5440f1aa961b124681ee7cec7ee199163c7ef0f6d183f8ba3e361924e0acaec1adb0bf786b79858165cc234286dfe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ba963a827fb9c80930b9ef2de5b6438

    SHA1

    b83c78fa28cad6217ff6153f020ad106d1fdefd7

    SHA256

    7ab97c101d6a6eb3d2b536ce409ef8ef7712cd84a193f178932c23706f4a23f3

    SHA512

    3d41382293a098c8e9adafe03745cc396c759dec0e95b7964b792a7da1d89b269f4deaafd0fb61e117d8d53b7dcab6261597947fdb4f01a284023b1204bd03d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    f1609c777520bf6d61ae6ea65a840931

    SHA1

    4e31683c90e8af3c77d31b451433c5cff6f11970

    SHA256

    edcdbbeef13b32e84f96763b44aeda3d61cc9d8520dd6ab27a0dff9e638d9398

    SHA512

    f4834053221f97e6057a434af5b53e3341aafbbf0de57ab9f08fb0f6c6752efcc5ec58278e45d7987a1a15eed52336e9ae235faa63ce2b1782dcdc8b38496b54

  • C:\Users\Admin\AppData\Local\Temp\Cab87A8.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar87D9.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b