Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    29/08/2024, 20:06

General

  • Target

    c98b158635bd60a5e5fa2296aa394220_JaffaCakes118.html

  • Size

    53KB

  • MD5

    c98b158635bd60a5e5fa2296aa394220

  • SHA1

    79a201e11333582306a4c9934f293395ab09c6be

  • SHA256

    9780d4ba2bed2aa8c58a0bfe1e1471c965124846b55d3df932e5dda4f877c22b

  • SHA512

    713b9368ac1fc4cf8ba66edd609502b17799d6928b4f63a1d4dbaba428570cfc0dc82e6e4af5652623077dd43c8bdb22b05f4f513961c9c2dfb52ca374ca10a2

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUJrunlYG63Nj+q5VyvR0w2AzTICbbUoH/t9M/dNwIUTDmDM:CkgUiIakTqGivi+PyUJrunlYG63Nj+qK

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c98b158635bd60a5e5fa2296aa394220_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3028
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3028 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3016

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d84fa420501ea2860da3a60bcdaaa18

    SHA1

    e5d4385298376439647920b2ac5c1afcbbfb723a

    SHA256

    aad4be20809aefb18fd330f024c2b933b0bf439312f0c90f0bab40aa269f8d11

    SHA512

    a627ade20b5939b4ab9cf784f060161dbbf9d0ca4dbb0e18c97bb4e7eaaf1be6c6bbc67adcc464c7b7ff461ffd8876b561d80c2cc1fe67fb21ce5ec0e86e0f53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4845488e0d090c50a071cf387ee24234

    SHA1

    dade3f42b432a1a74876d22f8862028a07cc5941

    SHA256

    f9e65476111f376d0fd1ca4b43767484fb156c1c015d23aecc782d0216896031

    SHA512

    b7e1853f64eb532910ccdfc76cb915b4daeea0443b56a9246af67c9c0a66f62e9cf4ce7ef76e71b1ca22ae820f5500c1e16bcae97ae31645f6669014d68ecd7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    296b4368e56bd42c92af2662a36ece73

    SHA1

    0ee94ec133b52d05a49434365c621c4f5f1506f2

    SHA256

    a8f325dc05cd29c32b45179a59be13e132c6dfb794ab06b1a50216d3f86e4c30

    SHA512

    6df53094f761901698641a681ab2891746bb25789f754b5d2f42850c8cf7599d8aac6102c5ee288a1d26aec6a76996c88323a7faf5e84a02110f338b22986c72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61faa6a6f16d3c256524442db627912d

    SHA1

    63874365daa2e2cff8f59a002b5c41ffc755cb68

    SHA256

    5718684cd370c9652c463877e3fcfc9c7c65007d98808d7f4d9074f676273629

    SHA512

    ad5f613965cb87a1b1ab295ba8c5c18c94ac7127f3dd35a4e8b30295f52d4a3ddbeba34103f2c74196f86118481218de173a19fa510768903674fe5d5cdda9dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8521fba7a0aa8510158fefb60effbbe1

    SHA1

    814ddbea953c91750b2d5a398473655bfbebd84a

    SHA256

    202dfa8f42173f4115d6dd49a06a0bb33ac3e2d216d24a0a11036643e4e03f3c

    SHA512

    608220327c84ea559365d9831c715e57c4e183d2b7bc41c9d8c4b61bff7d81b10224ff207e4a30b260a70f45fce07538ce91a8b4e83221e110e4c971331a062f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    544d30a1e2cc429d5f24811929b0b1df

    SHA1

    6f398b63854233769243a020a961694f24e65bfa

    SHA256

    6cc0a58908afd9f2b92af242dbbad9182e32925733546978b85b8dcc1aa0c4f6

    SHA512

    9ee2d989ecb685aa363aef95acb857b15a335482133ddb2762d1798d94596ccd252397874f7b2b5cdef81ca1944a8d8a094224a7edc4ae99f1be29580faaf7ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a35024cb24e8f7bd4ab34ca3170a8c9

    SHA1

    2ba92add6f92a565734c3694ae7cf30a883e2803

    SHA256

    1d4c2d4cff50bba32981c5c27f91c7211d0e17ffaf096c4b2bc83fbbd63e84ea

    SHA512

    5fcc91cbe9f351ff6ad0952f7ab686953cd03ed85175130400ca957714c578101999aab599c44a94bce3301e3f4109999efcc045409281954780d41ab9b1bb48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ccbe633ed216ad37af4b3601a75b658f

    SHA1

    557f4942e711ffcbac948f43437ffe4384716c42

    SHA256

    88c7f19bcf487b62b686b1cb2d94d98ad39d00fb870f6eab0be7d26f947bd33f

    SHA512

    83f140a3d19860085233f0a431e07ccc07ec69b1e151e78d4aeddd50177df1e53dae4c7c59ce6d393cef4ccda8a004f7a26aaf12c15c4e2844aec2801b353e31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab94dba6c4b27de8f6fd9bc11406a99e

    SHA1

    475130379bcfd2bfa11afd3367b478e5a086f0f2

    SHA256

    d996f8b1123ef41f26281bc4eea94f3349bcb447f27e49aeafc350310c9f2651

    SHA512

    554b158bbb5f15fc2bcba25e141ee893382ed250ca48f3c712e4f196a0d81c311caaa90b18b890f8d5ae4694d736b5b7692aeb9cab8e4cf8db73886c9c658828

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e0d834638c4dc020d008b1abc3993c1a

    SHA1

    0d392a3c77e3e61438bb69659fc494851645a911

    SHA256

    c367a81099b5bbe3ea50bf18c8638f92c6eee9eb71b3c77870b0ad434e1d1cd0

    SHA512

    dfdefc4f8641cdf1903a3e4fdf4a0720f129a9590bc114e2934864490622b5c286a8d9634b1b8e59ebaab3f344adedaa8cedf91b29ceb69d5f0b09065497a24c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1525379422ca6b51fc09ec51e50bf932

    SHA1

    861e6dde4332b633a98fc3804bb7319743d026fc

    SHA256

    1dfeda151e313b41a66bf506c2fcce0e0221fa297f3cb8ac99a2ec3b466077e7

    SHA512

    d015698ad5c31b2cea69622820b3e936c2a607835f5c3bbf448500f39854181a192464bba2817d1881a5e7b7544ba7d56d986da1a30aa8be28c95beba141a0d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    094d35b14ede5a48d85a54c47c24d352

    SHA1

    714d435c1f358059d062e3702ee485f4b8081db1

    SHA256

    f72dff413ca74e2d09963aa72e8bd0364eabd7ed806bb47cb5593e996eae5c16

    SHA512

    9fb334ff6112b208e57db38f59ae0ecb622d168b591438a1fe5cb2871c38eff6156a0da2974b676a7d3d26d0e5020cc937a899698526e2b3813fdfbe36700183

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3633c7f625bc0bf45d62a5b391d0c9ed

    SHA1

    66176212bba76c7892ddece5c31ce4013ff3dd94

    SHA256

    fbbde9bf77f45f4d15fcabda683c42f92add435247f566276575565347f049f0

    SHA512

    e5eea337692894ad6cdd8ee5f15caf4e8662d6e1b309f805048a5e02ef5075c2d7cad44730fcb2a56b053c1836692be307624d5ad4c10e934929c0d487d0b4d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b2bd9603a9f89f52228fe94bd884c36

    SHA1

    19e184c86cbc54429ea817bdc8dfa9328c743d87

    SHA256

    2308e89eb53af310ac4b743494c467159dfebf1209efde97caabfc5bba3f8281

    SHA512

    a8a4d44002cea2faec5ce124795a314030c61f88c61af5082713227cefecaa2abbd0d66a9fc20b3be636a588a1fba6e1fd8899767b6730f1da3a03724f0fe773

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0066483e59f5ee42227ed78049825aa0

    SHA1

    85bd36a9da07b679be2a1428221af99fefcf9d66

    SHA256

    5d29c08afe606da0454593a50f8a3c6c14e919c7a12af31ab98e04a6a08a6fce

    SHA512

    376d21e991945ebefc929678c8b67559768deab08445feba76a977d949a58bd5dae048c30cc8ede680e5de778ac68d0efd5936d68ae16f176335a5ff9d4c36ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    14045b09d64584c157a096c76ed72ce6

    SHA1

    012f200a470c60c8570ac13f31f516e948931598

    SHA256

    470559c40b5eb4c8d01ba720d62231f17765abd4b4d34ebf576d3bfb5d086810

    SHA512

    5d8f0a50285196690826c6d75b35e06b6607544b9c3ec71b84a481d75ccfe95f37b5f1688d3e70234ac8a5798d295d11fc7d2857686926b378c11f03bae2745d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f4f55fdc3b6dbafe2bb6ce905738d65

    SHA1

    12ed671c974acf9f3af6efc81f58763a80728356

    SHA256

    f907c87432b4c3f69d92dffe50e080d38890db3c80f1bb06d7cc1f4cc04de44e

    SHA512

    862ed1a1fa588dd52e8e2c4849e55830e85a8fc2eb74d6f086eba35bc762ab4a14f9bbb82de8915722bdfd2486fc98d29e9739994aeaf820b5847f6dacd75c03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d44db5bab2950cf6dca816696a0c9578

    SHA1

    64fdbc7e126c2bd3755930be91357f412904a1b3

    SHA256

    1ab47e615022bf85964d82466620a55f3e76590777b84521eb24416a069791d0

    SHA512

    239e608bc584864feafc4d48d2c03d4df7023646b4cff53b4144458cdc341e1b365f69f838e034d46d3d7d1c434cde4da4cada8fd332a375c77b5dde2b715e58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    856aa0b161a5f145d00844f1230d0ff7

    SHA1

    5bac9a981cf77a33c3b953f7c571a90625d90329

    SHA256

    d04b2c9946489e454fd5346d198bb1a2d98065f634275e9cd9a8705f1a2fccb3

    SHA512

    88a4ce0c9954ed5991b7c036bbdeb7fe122ad144e538a358eaaa79c2b41bcc8431755497002c3b815793ddabc8d6d3212f0133c3d3a7977d4b38404afcceafc3

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YUF3ZB4A\glossar-js[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\Cab897E.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar89EE.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b