Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    06/09/2024, 08:57

General

  • Target

    cf2a95a06f9574e071b6b3921107025a_JaffaCakes118.html

  • Size

    906KB

  • MD5

    cf2a95a06f9574e071b6b3921107025a

  • SHA1

    4014d212975bc33d60ea7b241744b0d6dafd759e

  • SHA256

    47f55f820473dc9b6f355102269a53976552547700a593d2f8c2f6ad4d2dcee5

  • SHA512

    912c6ee9c155ae57b9fc161825e9ff4df1a0bff4206468b8db0cdaa5abf4493a9eaccb26a3cfb17dab6a74595b67d01bb69b2535a5838bd0195f1e22a160d8d5

  • SSDEEP

    3072:JpRif2szA0N/Gd7ZXtjgrJldYyVeef0xOMQfw/df2szA0N/Gd7ZXtjgrJldYyVeW:51sM2ldYyYQM0sM2ldYyYQMpo

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\cf2a95a06f9574e071b6b3921107025a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1728
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1728 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2392

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b9a5b28a9412965685406a0ff246a241

    SHA1

    fbba33d8c4c2298246fec1fd8abf82244ab78a78

    SHA256

    a4817b05c7e826e958a0d949f3f9b988508d694b86bd9b004b0f77bffbf19dd2

    SHA512

    de83509e539415647a51096c3e1ded826f3ab2c7148e9c53072c7ce9ac0bc7ee31ab8ee62411c7cc8eac6428a0023198100251413f8af2f7eecd39517eb7fedc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63ddc1226269e3496341fa4cf9371c45

    SHA1

    c708caa3c127f8967263a2436dc678bde03b78a7

    SHA256

    58e3f6169e0baa1c0dccec32ed595c22732a559f1224d7ab2888a2392ece5ffa

    SHA512

    bdbf326bbb1b702f08fcc547df46340cfb1d26c687dac6af40556a9c3efb2ab68d249739abada58fb829b8596ca9a7beb7c7623b34d1e645cb7603b22312b27c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f14862a37e7cd063e721b51d9a050444

    SHA1

    f3253c2072ed282d797aa82aa4627675ea8e1a1f

    SHA256

    869b723d9e0244dafa1425997778f50720dbe6f9a103ef988c7cc59d3e4d7737

    SHA512

    c26ab90dd0ce4ca83b160ebe8de0e67dd1273ca45bf1e1445c47be559111eff489ac05154666122f22b3fda0e52bfc3efef7f3a23388531b644bf860f868887f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    77431748d006a0d6aea80fc1780fa940

    SHA1

    6c5497b957e34adb7f5bd394e2457ea467fdcfce

    SHA256

    25a52d5019a835e9a3b82683c481eff5259ba244b2a85489322d4b3560e95306

    SHA512

    de52b9a72245a32b4c8e8820d950ec5749425c4daf30b4328feb85449982c346f73b19e0129c7485fbf3d934d9a9cc7ee0c0de8e80d200cf2595953c2e882216

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc5410eeb0cadb019597b833266b7beb

    SHA1

    6ff7fdc4dc09424cfac21a11507461d0d71ac1c1

    SHA256

    cc4d25bfa8543bbb3e405681330c5913ea080b52d02fceaf8f5da96876b5a002

    SHA512

    b9b87d42a94e02e7151acc8cccfa425939bfd1974677b7bf5ded28f9571e40afe156ef301e0a1ab63f23590df77b0cdfa3eaed8aaa97779073b08794f6f80654

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e0f208ebcd550d7faf9f425a5e9a9fa7

    SHA1

    2b420f0c4e46419309eee0826792a98037ba199f

    SHA256

    862763dc5e78735b0c9d61b304f4e0682efb6026ade1d6d06e17a44f15e35a71

    SHA512

    f8e126a1bc381a90132fff840cf06b54a84328b7fc3d3c0690605e205274cbd06ae0a65f5e84715dd1edb75ae6a3d973db410390eaa99e6d0c2836400198a6a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    719e8bf6c6e060d5b55891ebf40d8e1a

    SHA1

    ec06ec095ea918057f3339c8b5453e2b8abad648

    SHA256

    6fd575dd9cd3f1e3abcae73331c4826c48b6dd0020751e94cfc6c3ea0efc59af

    SHA512

    f5fbbb62c558548bdb0636fe51d68c2c0273c2959ad58c7f2acc489c48ddd57195b294bc6af766c50a6f9d037b1c96adc1bbd1a32d19e5ae821abada24a6ff25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a168bc449963b2d9c3763eb09ffb55b5

    SHA1

    a10da1b6068a59dc94df63c13594f35b65840fcc

    SHA256

    8806fc6a0d435ee010e812439eb60b64d65133b605674f51fbe67c8f1d6fd473

    SHA512

    654a60fbc0e4177bf3f4e6b1be242854af83abada9326d70ff815c9988161ce515927e141091dbd8a4de148dbaf055b8fec7a2eb816c85af42e073eed62d91de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ddf956c3bed5aa806402f335cbc9d31

    SHA1

    e45dfd7c32d7cdd25d2494a71696a7cbcd9e8088

    SHA256

    dfe505ca7aab8fb7d4e5d55e9b649f9a58caa895f8af24ec7bc977323091fdf3

    SHA512

    b5bc31703f837a618e9e6b7d5f380f958811ab1921d42718b12507335c4106fcb6d0ebb5836c184f3c270571a2df894637e2b74812bf926d7cd43bcfadd9b1a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bcfb3df329a9887e4be4351bb53dbccd

    SHA1

    5e998f845cc76d67d8446fc6bfae528a39c04d05

    SHA256

    9d7c52f392bbb644a136a2de39e378c6a925c29c62929456c650a61cab6aa615

    SHA512

    b276734f8d489e8895d0dd11c015b19a195cc73e8e29d038c6106669773c10d85f27e0c1f8cda170c9da834adcc03bd921d532a514873db6a2aa5af710c7c492

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d23c5ebc4e772ac40a76ff8d15889c96

    SHA1

    4cb5ca54404d5ed05a88861f61b770f8e6cf5767

    SHA256

    4f62e3ea104fd37ad40914802bb1377cd14ae55601bbdac1d2355ecd06856315

    SHA512

    0f0329bbf84900245d41c08a8798bde6dcf907077bf7a711f5c0f6ea4b11e5812a2b6814bb153ce07994f3671830f258d6fc7f5bdab4b3f9bea26d13ebf1a656

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    477b57d575262c4b93c673431dcbc30d

    SHA1

    dd9f85bf75e46729038b4ca39b3e6c3887a249ad

    SHA256

    51c91b6a79046ffa7cf9985c8b2cf37c0988a7c9bc1d893d3031be6e38882f26

    SHA512

    205e2c41c4330efb01a6d2c7034b668d32669bc149a1f3a64f767e6490f0a37beb036818d37ef4e23f515b2fb696bef572acaff1294de5b6a59b1d9d118dbcd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf2ab35c7a87b497d5bc54db77d58bb4

    SHA1

    d7f2d3c7a618d13e73fc09762da6dafdc3c05db1

    SHA256

    c7ddd1281219dc81752372d43ab6a5ad80948bd95a80b4199696b100e76de2d3

    SHA512

    666499227588c494e4eb889ad0adb4909a9ac547dc97fc8edfc80f13934efa473a850986e842ffdddbe8c7c315c816b62095df98982cd1f78846ea9e93e7e6ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    56f04f80d364c521ce986c27fea71184

    SHA1

    515648108ef3803890da55cb9fb40edb5ec55d82

    SHA256

    1d0f161bc2c0c16812ad1d5b66b6e9dc1636dab0a427aea49ab5ea4f713e2a2a

    SHA512

    eaefe148436889944c12820ade7a6cacb44164ed511a99c93f3fcaf0a2f8cf8dd724efc91f4fb0ba1c128246a8c76dd31b7268ef275b21906faffeacc371c064

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e3167807f5d7645fba5bff22ba860b5d

    SHA1

    be3bc73d98f1b50f182ad1bbeddc77428b1ab8fa

    SHA256

    639d9a82bbf0bcabd90c9bcead755bae8c9bde4e60f22fc205b33ecb6a0e1a84

    SHA512

    0eea7aba3ed5b5661dac812b36530271b9e04b7972d62943fc55622917b2f27abc1658ca92ca7f395ffa658d8330bb79ae540f02e7a484dd0dede5751c6597fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37289859349b80ae23605ebd582e3c8f

    SHA1

    8d382b22dd1375e2fe5617f166a5b6b8e8cba56f

    SHA256

    6a830ccc522f12ac8999936782b178460db670295012a00e1610cce3be3ac871

    SHA512

    780d0695b79f1a06073cc16d9ced7fcef9b5661ad6b6a3c1f0881b7af3724b5d3bfafb3c33791940ffa546b54a5651004a9b06ca308ad53d72175ea95bee96af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5dd1aa9d2be4a849969117de6ca1d0a9

    SHA1

    23e0d75b77726e641803cbecd3b8dd5e0fb81c25

    SHA256

    274527098f75c3e4429ebfd1cf6116202897147a0f623d7807b485b411428382

    SHA512

    86b4cdb422f2f736f331899c00a602f2a08cd1e1081b5cbd8025806577e29f5e8900ca88f600b02ccca90097702c9f8099965ba00f11c926d213367fc578cd1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    853c448470ef838556cd85cbdb8a8652

    SHA1

    845d4acec600ace00c8fb0cc8a296013a0757430

    SHA256

    0f61ec4585edd71f56ca44cfa587d0e950a8aa52fdf4193ebf7032af3d978a3c

    SHA512

    68dabde4d4a49f2951090eb6b87bbcb2bcd1f3b25add96f743ce876504d894f2fba9ac03fad3413c6ddc730772b518b8fa84766384b7bfbe6999a68cdfe17728

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cb1181157a9819f064cdbf8e99203a09

    SHA1

    de46bd01a607ae5f2f338716c15d4edbd3509372

    SHA256

    6e3b9030846d3050b27dc6374ced6215ae144adc9843ce4e4f8be5656ba5adc5

    SHA512

    d8386cde90f85c0f950bba056e42c088df2b116e75016df302d7240d8170bdb4c9ea7ebff48615586c6e66cca272a8217a32b44320422f33d2131feac23c4349

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db05fc526a8b74d47a2e82b620d1e056

    SHA1

    376faec01e2e8eef9628f29383d42d7f625be928

    SHA256

    33ed4f842c47decc12d821858b1d15b3f353ccce3d22c974c328c005b1bb2a5c

    SHA512

    f4c858a61c4fc266f7d1ccbc83e91269c86a6c03645dc7c639952d6cf7ca28c75f335a6a0290f807c4311f6ff08fd7bf75c60fe11f2d2b78af84ffde1b33741c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d6eef4bb8d5700475ffb6a2bc3895db6

    SHA1

    60bdb13ccb4f903cbd2aa783c506e1490b5b9285

    SHA256

    944f9bda7813ba1a82a93678e68b1cc861fda72c78c70ea8a9e98fdfa77e0417

    SHA512

    7d0d47439500a6ab2224b1eb4fa525a5fa8f2ab3007a4c922d446004f1400f9da51d9b59e326e11f173891606f42a76ff7a8d11b314716f5b57783ec787428e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    02119cdf4eca6bb6376dfce2c8ac581f

    SHA1

    039c003552c57e12ef08e5f3ce1d66428195cd89

    SHA256

    567d045be7603e2b6c55cafae805104eef9b988bbd2c05041eb0e72d1696ef1f

    SHA512

    d2cb5e1aadc3e9e164d8bd60912dc9108bfc34dc362da0b4dd91428efdc1411ef964be1ecb110024485e70f29a49510348945ccf7cb7d84e1d381980b6c3c87c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    95f8f2f20442b7f995f5e23476826bf6

    SHA1

    60ffb2b6c0bffbec04ff4c3628f5d3d19c686838

    SHA256

    f5049aed01410252764f03c056bc7e590d7840e3c5246ad07834df963eaa9795

    SHA512

    a326ace1b1d07cd525daee6b8c24f67859158b28efc3a674f39ee6ac44045a19f463b82da0dad3b42fa4c5d7b8b31d7743433a5e1fd7197208b8e4acb492ac0a

  • C:\Users\Admin\AppData\Local\Temp\CabE13E.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE13F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b