Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    06/09/2024, 14:46

General

  • Target

    cfc8cd41ed3dd079e2075a4165266ff6_JaffaCakes118.html

  • Size

    23KB

  • MD5

    cfc8cd41ed3dd079e2075a4165266ff6

  • SHA1

    b47f6701ee9a62284ee54bc341a9bc24b496186f

  • SHA256

    990fd3ec333f78c173f8c749b0035618ff8240f5d75004d9601cb4bd00ae80c1

  • SHA512

    46e1159131507dfb74ddca099d8d17315b39dae7a18cff02552fb3eec4358b2e4c5502ef16cdef69e44cdf9bf65ae8d7f6076e924752157a00adae3028bae2ff

  • SSDEEP

    384:wG6GyGnG9GoGLG/GAGTGaGmGOGCGvGoGTGVGSGjGPGfQ/hGfGVG+GmGjG9G4G0Gp:gG

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\cfc8cd41ed3dd079e2075a4165266ff6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2664
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2664 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2692

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b993e7d2308a29d1775dd49705b81c51

    SHA1

    9b2bc9311d546f7397af7b235037efe6a752eb2b

    SHA256

    fb9706e91651dace6256e514195a842f430289b55e3f7a143bb85ac32fe140b2

    SHA512

    b36c5106eb4a57a265bf7f4e9b79c87957646e119c86beaad1a9b47c646bab3911765252a8a72e259ad70403f08edef7dece33375e23d003cc1b1bba3f67b1a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9d915ebc4bffda77f4677b55d115de21

    SHA1

    b7b26a56a2c416cec073eb75fef95a3eac3e59ff

    SHA256

    1a83c02360e76a639b5ce0109b1221ee6361e1c05f6a29e604cc4e9dd6c90411

    SHA512

    5ce7fb74fdd94cf9178e9f0b54684b41bf6214eb49638962ffc3c4ac79b793306be0e015d4a2ba45d32d0685f708cb3561268eb3f33334c923fe2bf0e8aaa798

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    029fc9fe1e0471d9b47fbd82c1adfcdf

    SHA1

    c51c61f1d48ac42e06745b19b278bea1b68c42bc

    SHA256

    829aca6a3686546120e4c29591d6e1acf9a4c6358b9729acf69c87a3a5c7ea17

    SHA512

    1bc03e1e52696ab5eb0a6ebfd53653c233d58d621ec574c18ba142f68dd5f3fb2a3f0644e6166f58c57f8f4a787933f1c01fc7f77ad221f9dc2ba6a103f6ea33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7079a91379155bf85689ce92ef5adcd3

    SHA1

    c2c37a5c60addc98d58986934dc80da105e43833

    SHA256

    08a4f2bd6fcf230028c2261d14bbea1f094339b52637c5f1d2a95ce44e55a81d

    SHA512

    b2b56e77bf3696744c60dcade35f4ff18802f75d1ec0da789c0ab9f4f8173e511e7e2c455104015522758f4baa84cf14fa960ed8c124e455bdd0399a339eceee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf159dfd847775398525993b783ed16d

    SHA1

    4827529e1c92d70d336b1f22a6327e38c293696f

    SHA256

    fe5785063aa894ad5c213f3795694468ab51d0dfb29ba20cb0321872a1df6742

    SHA512

    5142b22059ae13a416bdee251d6a70d7aeae0c0432910933a45734668aee2aaa10226d300fbbcfd531420ce6450b85dacc55f4d12540ede4d5f775ddcf6aeabb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8697a572fa34c77514da5aebc61609b

    SHA1

    42154b8f3cf4bfabbf17b456b9f8764cd1830ca5

    SHA256

    bb0eeb38ff1d271096f05db412145d6e3e5dfe3dcc294be70f471e2e324b5166

    SHA512

    4bbff8a27ffd79fe5fc5b09c459c77918f118f0ddb7c61b8b0476fd64ba33597af0a670f169e2ed2439fa256525348a4a493e4e7f29077735ea5ab996a25eb9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ee451993d0decdab38f734322d49e30

    SHA1

    dfce7435caa3253e4b616f5ebb65f87cbb87e7bf

    SHA256

    34e714f59ccf77eabb19d5f461238334a8b99860a993b9974ee0473f2ab5812d

    SHA512

    470c03988af7e102ad1364994e4d7d4cb8ab1d9615ef9c51512a8ac615c9302c7e1c9a1e8edec54e93efecee3a39009bd38e50eec8a98ad7ef710a03ef33072a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41398b76d55a6ae57eb1fb9f9cfcffc7

    SHA1

    9fdf25a52d8bddca45df1c0a255644811c201455

    SHA256

    e2e3518a4fa35c580f35c3f9de69760024c0e1920d491ccd9cadcd27982cd508

    SHA512

    eefc0eb4947b7e908a84a8bc7f3d098e9a3dbfe3b94aa03e75244db92c126802a66407f1f8a3a9375db03649d1e33795f8a63873af444c086212340d81ad6842

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f3b30e1b6fb2e8320200194d56230f37

    SHA1

    f29c6b2a0d82c02565ed307459af63459c91adcb

    SHA256

    689ccde646c80527b00e7a199b14604a6a4f2f93548bf2b7246aa82e6030b6b4

    SHA512

    fe4e46e5f4957c754d3182fda448d26e6ccecc904d63143203560598607b1d1d0a55e14b18ddf45d6a7cdfca178c434be8eda18e0bce91a08084a568606c11ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    409d6ee51ac88ab6566207054644b825

    SHA1

    6aedb26d1c68efcc58179b2a0208de601d3ab973

    SHA256

    64e38e477508d43fd0a6caf2eb1d965a0d01fd66110fa6df6ddf9eb2668cb777

    SHA512

    8213ffa6ccc57a9a12f41baa8440afab78c9c43ccd3a681adebf84ea8c87eabdb891f754b4ce9ce116ba02b20e027c244eb17d51d00736ea40c6d3e6a02f49be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    82d15b95479c6a4e9bd820aff9346182

    SHA1

    df0767ffd38dec8369a4c3e13457a23f6ea4fe1f

    SHA256

    17a09e3c91cd3194253b7305f4455680ac798a2413957fafd4f555323e294591

    SHA512

    8cc1e9dea50043df37f27cb3e8366d4b78acd76926d3e8df5b5edaec0279489eef25b9cd6da0c581f94b60a5487ff586d7e8e6cc3d21d12c80653cb633dc6491

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    598db0cc847a21c56a69e9c2c5657cb6

    SHA1

    c3295751f98227f1d19c7e980441fe40f2cfad2d

    SHA256

    bb5a3219fbf65ed62b9ca1ac8443394c59bf93463430c0333a8e21225e758acc

    SHA512

    1a6e29c9cfc16e20fc853b708f2d8b81e7f4924560053108baa40cba742e976bbb987850be2a5c96672ba8252c96555e6d4ac7586acf4112d5f46aeefe2a2f12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be2ee8cd9fdbe5703bf1fcc8c9a9ac8f

    SHA1

    857655850bb9032c2367c7a8f06eb7804fa7670e

    SHA256

    3eb07d06371d681cafa6edb095cc184e8511da29ecf8cff7acf91cca5eeba878

    SHA512

    d5fae6fe67d2243298e93086388762e7ed9d213ae1c957fa0282340c39a34b1d63e30002600e171671daad834d84b81cb183d26fff4e3d7192683510e4fb93b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf545727d82894c2f58ca049af58fef7

    SHA1

    9d77907cbf3a12cdb0b314f7878df3f05c590e19

    SHA256

    b078d811e73e6c61e496ce855d988ba38ba4608e4af5b8e4e1bbea54d3bf1c05

    SHA512

    6af820aa8f268a950c61e9fd6f16208b3dc2ded216045159670a908132a02fec09e6f241db8abcfb57b0e32869cc9737f109e45201361f7c0e9b8adf3ed574fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    79a5e1c15594389567c96bfb84f85295

    SHA1

    0462cff2843e6d6614c92290f9973249f6ec9d75

    SHA256

    2ae7f8bfe611df74040220b27f0ec7202cbf4970a26db9002c907d5e4f0eedf2

    SHA512

    9b3a11ab8769c1d033c8337373332baeeba46311211b4b611cffa5903a5af322a15d8d29e46f69be253ef560d2450e573671bc89e778357fd1b9fe25b9e87887

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c73e793eea7557879797d1178d0a3048

    SHA1

    26cc0799b051e63f939a3e8e8a5d07f8f2f77f90

    SHA256

    31f365d2df6d3b8d267e1fdf3e621f7d0be5e331f354f941f5c5cc41fc1b1116

    SHA512

    c7f17d984b1dedf85fecb135fd0e01a61d3d8d2bb6a89c0ad18553501aa2e482461cb2f5e12c3a11569fc1f56eb3a86fb9fbfb26381282bd0cb16fc568716b9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f73a2db335de64df506c31509040b04

    SHA1

    3afac9a05b22f370839dbc16b7b5be0259306995

    SHA256

    533facf5dba5afa8c666a2c98b1b49107de9ccd0e50fd593799079a85d3c6e63

    SHA512

    6dc4a6007475a3793fb5646e5d771f6958868a6775dd93e0d6577c719b161c3360e775f097a05e96a21e992ddee21c74c07f6f4e0ae387025984c5030b40bbf3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2261f452174bb1ec55ab832deab9e1cf

    SHA1

    214c27052bf861568a8d360f6446407745aa0350

    SHA256

    15fc328b8e124013fdabbb0d9984724523357d58e10319db829b600994ed5562

    SHA512

    2db11e5f67aea5dec3ac4b1969ac5a3f141f3721e69c126a284447ea6a65b1bd8b1bf573b7755f7f91975b234db9bbb211ae6fae17e9ec3c19c539d5cd653896

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a49cf9279b853170b71569c088cb04e

    SHA1

    b82d4f308eb749b08e2dd10b0c9850cb8a8f127d

    SHA256

    5160d726ed08ce2f9f4f2a7620c2bdf6dbb70fff5f2124ea891e55c7f7f0dde7

    SHA512

    b709f61a95e9e06f09ca07c1a9a6f7b18d80d2ea558aa86c880cf658027ae7da0fb0eef645ecf60630e584bf6f6dcdd51800e9bfc6943df8ba36ee27660934d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19458b3c06e77274e2bcf2db8d1e5b2e

    SHA1

    4a13f477adae186827e2012585f8209053f7d2eb

    SHA256

    7c2e1a340959b1fa5fb3e7ea2783d1cf1d560459dd1b050b2a9781ebe605e68c

    SHA512

    92a5944ea76cfc900546685ed99c0177043ce69845201b696947d45bf53d9e4de7cd966b0ab72cd15b96a28611ccffb40a807df2e9e888568e126d5772714a4a

  • C:\Users\Admin\AppData\Local\Temp\Cab1D9F.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1E50.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b