Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    06/09/2024, 22:06

General

  • Target

    d08ae8f4c2cba0a237dc3a4d166c6f18_JaffaCakes118.html

  • Size

    94KB

  • MD5

    d08ae8f4c2cba0a237dc3a4d166c6f18

  • SHA1

    33afd77a115e371f37429e02f8993d25fe04114f

  • SHA256

    444055a193b10e376ea34ea9671f4783a08bcd105ba05c6d9082f3f86f0d346c

  • SHA512

    4ab2d2fca8857c397bb0ca281ab7bce3998fd1afff0fb9cea8e5ed8516898925ee742fd6be73b775d35c5b915e526f0d9c3760f5724ba0f6137c0544bcd157d8

  • SSDEEP

    1536:fzOrV46B72VwgYlLPciaw6E6/+anYkHXl34HDT39MXYWdyRjB1:pNuhudYsVIHXSYWK1

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d08ae8f4c2cba0a237dc3a4d166c6f18_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2176
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2176 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2796

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c153380aeeed9464fbfbd321f6160dd

    SHA1

    5ac498719cfef6c047e6a84f273c9e0ff436d504

    SHA256

    402202d45df4216d43dc1dac44e541e8e07ae2c6dea234ce9531e40cd18cdef7

    SHA512

    7adea2668c056b605aad6e11f4ae563ef9ed9203c26bc6b3599bcf35e862ec31c7f51eb94d961968feda511c6367c7a728f10df83ad164064e119a990d9ebfdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fcbc2de4aa479e25fbecf5c468028ed1

    SHA1

    4fa118158e8891f69148136f0c471c91c800d06b

    SHA256

    ffa2b9255542c0e81b3643b6d426e212e528f98d57a80e9c8915d2974223d86d

    SHA512

    e6e1a72dfda41f8bed502b5a41874a8de4ead1e5dc3d507bef1b92f238b9938f5d7ddde574fc29fcc2228c4c141c1b8fa185a5d01ac218a521ca7f461b00c26d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c0eadb508832d0221903dd892b967104

    SHA1

    d856d11979b2485ac2733e971eb957e1cdab62b5

    SHA256

    be7c57de04de31e04cc1f43639780f9b8d2ad61909a00f73815ba5fbfeb558d8

    SHA512

    550ea7562d058c887895e7e6957299959b8d01b3d72b117c6991823bf782d900c2452a4774ebeddcb07a0bd43a43349b39ac899af2571d0049620f81afb4edf5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4db82fad47e1c4e99c12234b44f7c6b

    SHA1

    1bd21062997fbc64ac5a8fdc616598d5fa99be91

    SHA256

    1f740b1a7d1f86e6b616b265a8c4c1747195bcd555f38dde4a2483f2e8a9183d

    SHA512

    8b00225a9a84edc57490328121bebb58902738a1df6c35c6ad03c0f507725e52f276fe22d5acf2d17eb21afacee2f3b970707224920c191ded1d48514e9725fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f4a5bd8210c6d105e3f15b197036812b

    SHA1

    ec89eac5db98d75c2c7cd19cd8f741eb599cc6eb

    SHA256

    91c52202631b74046d4f7ae98aa1f2ef0ef747973f8a0b5c961d7703b8374b29

    SHA512

    b4b5c04dc8326e72f292e5b94bcf8a02fae2a8d3768083fdf77e13bd4a599d2fb0df633c7cede68d7f440ff4cee9f64a23e25fefab78ba0ae0ac1daa6b751819

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0800790c26faef1c65fe86680147254

    SHA1

    cd53296559bacf9d03b2cb472be08fafed9aa20d

    SHA256

    a790123fb300a9610e4ac4f33aa6ea098ad1173bf3f69665b890f8919bc3bdc6

    SHA512

    18568d26968f27b56a3d32b28303ce4ff75918ec22b39826ea49f6254b2a66cf7a3e4ecf0a5826a59aef98ee2b9baba302acb9d17245c75355b895478629ff00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5c128840d1cb6a02cdc0c9e94b4eb74e

    SHA1

    0692f3442a1226e3acdf4764b1c962f603c4d947

    SHA256

    23ce4de38981169ccad912ad8d3af83fd62a5e9fb26f26f3dd41f6e4a230e6d6

    SHA512

    8281bdc3f11f004eb4752109b1e468f1093eb0857847cb22cf120e2a93a018999e5cfd0bd4327b760cfb090ae8f28cf8421803eccd07e1d5c35dce1be2bcd68e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ee9d77f19c5f5b52456bc8b09fd915e

    SHA1

    3a1d2b5119885a4b7673c9d605da380796562ec5

    SHA256

    4b07504fb21a7c8dce6fae54b8f2735bdd040998fc54845c4ea2d390925d875b

    SHA512

    4943e6dab56cfd7afde4bd3436db1bc015a698a00c0ab273801322f1465f37246b09899e3a88b9deef93583775d752596784a0acd2e609e4c8803a2ee1e706f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5152ee1af016e37b9396bef7dcdf450

    SHA1

    224df0265be7b315f9f47be446575c8acd794c27

    SHA256

    a11454f140931a60466772df871b6f8e402b6413bbb3d8596c23d5adde8ff562

    SHA512

    4510b8b6ed377b6f87ed652a7858a1706d5ecf06496ae725961906b70bda340c9681b62d2ec8b48b027516cc48d11fb95d9a6c79bdf86ef98fe0c1e8f86315c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5bd94c09a3d45146f4fcba51ea034c05

    SHA1

    4335a638a7ce1962778391af7d0ea9112e7b690d

    SHA256

    b633813dc569310e2864a606195edfeefb51bd05fab8b9130278cff84b63f001

    SHA512

    49a04742d409e73dc5d8c92b15028adeb5dfa6b8cf8841e7880532062dfe348286309fa4b6786a19d70f4c323b995d35881e87cc101d5467b45cb385517eed8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2bbd72e41f19188ed8aaeb450378f627

    SHA1

    fd97709934f2368641231e04514db67665f9e467

    SHA256

    5dd073a3f4748e8adce32e140d9772b30fa70f0ca8c92ac7b16724b65db9b2e9

    SHA512

    0baab8a0a1e953726598b87727fdf2315dd2580e32fb4e44c7c99bce567b52b5a05902209d903e645b920685384279ae5761463835874510c3bd9e565376fa00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb704978620ea9aba65709b1781d64e5

    SHA1

    4846cea817a7449f7d350e485668e9fcf9a0c6ac

    SHA256

    a3fd9612b87fb4a60a37e090768b13ff1089d601597f915a41b4463eada548d9

    SHA512

    b528824d247442668d1dd4c3c4b277fd567ba5d1bfed3abb993ac8586343781def12d903c6f81605eb9e2a47ddc7631f02465c8ad0643efb140ecf3e0054143f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7dbf36da5455eedcf5ed1733e9c2b1c

    SHA1

    1a3b6fba850f60e5fdd00f5961e446f678237eb3

    SHA256

    0631195a49a12c0198f60cbf221002690001d51bd9593a48bbdf2934ddf72d24

    SHA512

    5c8753e31610359ccf203fafd54ecef2e4e3b5d4b107104e2173dd1904db46eb6c96e04e1a6b2559ae62227783fc8e0f99f1660dd318f8c4bbe26ee3b02e5733

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d4adaf66c7754d86a22dfd17b0e71534

    SHA1

    fcc6f2eaaa854ac970b19114fa07e81f52e7ded5

    SHA256

    6513783cc4191522e13ad453ec889fda334ece06858d6dec453495432ecc3896

    SHA512

    1fae24042612a5ee99a3dd6a364dad32d756eaf3a14ab314c3f596b5a154ef88d2f64adb7c60853de701bf7639e2bec9100bb8b6416cc6c04d7ccd06d99edbf2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c86974bd497f6b17ea7ad7f324a5c90c

    SHA1

    6810dff0198bff53097ed445e0314742d9aae071

    SHA256

    05c7cf3cc8ca47905444463c8ff958e55a3871d34ff9413676f6783861f87f37

    SHA512

    c66947cc592415a64af49a15fe970bafe784c90591462c0de8c1b648f66c38dc8275163d5f3ad5b8084f948b64dc79e63f1c85443c871288fcdf56c125dd0231

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e542323b0c44ca214f29a621a289b93f

    SHA1

    fffac63ce5f80764607e323020d1759805d51331

    SHA256

    3719cd19b9a7a00ce6a8c1b4c47cc9c8e09ce9e78dff1d3d94b191dbebb39afb

    SHA512

    f54b4a8d211ee83245247b45f23316eeea7189367c907c0a396ea5c5c39965091ce15563f33e8f78b5e8af36352d3f3a965206cf92f93b0fbad6c349d22150e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f5cf24bfc3d591c9becb08689c91bfeb

    SHA1

    65f17b9dc0c912575fbad07599e0b07888bf9fb7

    SHA256

    f787c184b01b98821e722069bb60ca73a9406a2aa7ec4e626039db482fa22f9a

    SHA512

    466281e55e304549eb8ae71dd045b8e24fd2cdc09e85094ce3988b489e06e01694dd0ef37de45b4b11b096a029152c19b64f6e2eb262ae73a53c5b3ace09f8e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    27a402252ae568c75323bee71de8d78d

    SHA1

    1d3c34485c3d780f07b52304ee15f1f7f7737a71

    SHA256

    c970fc9c945f00fea273cf8d93fb0ad14c4c5d5a3bea83eea65db02cec4df8dd

    SHA512

    89cbc6d6c5165141a5fb5d0d2aebd640cd0349c769877ef897466db855de6048d4cfeffce88c5ddd5726fa8c02e963579b0d31791359caf63c65eceed895435e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a41d1320a0b349bdcc3082bdcd95dd5

    SHA1

    a6397faa460699681571f4dd387fd5aacd4009a2

    SHA256

    22f71762f444d158ecac4df803a84dfe4c3fbe5e23536fefafae6b017e2da25d

    SHA512

    0947cbf5afc61796184576ed52f2afe9a3043821999fad16c218348febfcacb264f06fd28b0e194f77e2de79aad7c94117d7c384773a7716310e12526a040707

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a70ea1beaa865577b1f0d4e54f2f829

    SHA1

    35d819f299df95aa8850906ccb9c0a1b025f7f02

    SHA256

    ec0e28019b7ad5bd132ab88e2fabffdab04d629848e88ea7dc46ab0a16b5e237

    SHA512

    43fff119b9b48d40b0db9dbe6b2ef658fb7a8bef439557ecc7c9579e3c4578ff541e16752075418eb4acfe168e2818c06761bb4f17ca578542d9afd24ee3db62

  • C:\Users\Admin\AppData\Local\Temp\Cab6E40.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar6EB3.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b