Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    154s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    06/09/2024, 15:58

General

  • Target

    cfe8c3a51b793e586a9237fe6cf4f1b6_JaffaCakes118.html

  • Size

    300KB

  • MD5

    cfe8c3a51b793e586a9237fe6cf4f1b6

  • SHA1

    1b0c7f105d220b3304c3f85385491afd68baddce

  • SHA256

    c33b5adc770d7e7aeb6709d6decc79a0be334eeb6fe64d55ab5772deba0bb062

  • SHA512

    aafb2bf97365898f7a238ef415147b80484ff2cef059230f491d5c7d88e6295a626a09999e294c522040d3250d58b0c325dc83124ce72c7a726dd9e1b6a5c9c6

  • SSDEEP

    1536:91+SbTTFZSjTPNNkltM/jVII3IbIre02X9mD6o6Oo1Hxon0O+JLnvIW+cHUo3Y9W:v+SbTTFiNItCVI2z9cQIiTCh

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\cfe8c3a51b793e586a9237fe6cf4f1b6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2052
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2052 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2164

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c793faabe5c56a1452870c048a1e390

    SHA1

    21e63af84c3f97a1d55cd9db6916e1921fa2f13a

    SHA256

    e2cb53932e6768e7fb1601b2131da30868b33c65c03a178dd7edbed7f1296102

    SHA512

    fd6b0564eed82a60d9ecd0a02cde090a90d3a7010465f1f02ba7ef1ce7394fca697ae8a59d7914afa56828cb56f029b4cf7b08ec8c7f9809c7f5914486719120

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4f826fc78afd2800ce02400da91761a5

    SHA1

    1e7282e122b809d985af3e306ffad6c492130432

    SHA256

    cdd23cf0aedf8ece4375b92d83546d321d533fc6b2613be156fa4caffeb59c57

    SHA512

    28a81a42858200afae9c638da8e8b04d8445ff867712979f72691c48ac6402e981df4ea370b6fcb8fede371742ba73a924446f98e7163119e72dc3ca409aaa27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eeaaaa06aad84deee42bb75720497585

    SHA1

    25435fec3b051be38c1d19549c49940c2f3627d3

    SHA256

    6bd3270693e3cc488130d6c83f12516e934a7795507154e40a38431df2333e8e

    SHA512

    7a8da2247c69e68df6268faa713946a4bb7c7e4c2a671577859e7aaac39dd65fbae8855f26008e04fcb95c1d41b0f773d5c367f643f2cf37207969ef5d2a5dc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1db2945825bbeb7c317af51e0c42dbe9

    SHA1

    3153817d45642c4609f1e8a1c561e7d3df7b8583

    SHA256

    732efba754ff28fa13b9ddd6e354633af502103d3f0ef45c945bdf95dd49b6f0

    SHA512

    66d7d2d7e4022ce557e2fcab13097efdcdf8f10a1caba13460730e6c07ffebe1c7556c0eaf9046140830fda84ee0e9a5cc062fad071d5e53938846bd117ca719

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f5b57ce8bec45fc6af2e09610ccbf99

    SHA1

    b48c59ba63867fc4b57613d4388e3c6f08847ab7

    SHA256

    47d78f8cc08fb84043595be69a539bd8320159aac60da3054a136aa58d43b930

    SHA512

    cc3792f4a0aef70cc5aa27b3ec43c402dbfad83bbbe9c62703384c5a77b85c29fa8b67e4da1b480e26c53cf5cfe3fb3f139bb54f1817956e67e25e5b70153d16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d33a8fe8ea5d48cd8c56f07f0657be40

    SHA1

    14790f2c62d5493fbb536a41fa344035d052d69b

    SHA256

    24008c2f101aaeb08b89bb84e61bddf9fbe6e586ef2f79e3c19ea889cf191b55

    SHA512

    d1625235feb8489fb8965497c4d1bf4066e405ff25a28d02c7e0971bec23b97cebb609a8d8c0fd1a29dfc44b50d15296e43cfba5a280da2fff8ae38bddeb4b92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d582dace50d0cc257381e4d4ab5f643

    SHA1

    14715e7d75ce362ea47d1b83d0bd6745ef04a123

    SHA256

    2c3f71623480cf53c3b9f9dc7e9d19b15ac33e3a9cabbac28fae3489ad5f1487

    SHA512

    63f16bdee340afade234c7a7a528ede5398407cf8488cce1bc3fcbdc956bdfeb205e86cb949aa4562da6907f20e15859b86a5fc6b54ef9cc5b11d7cdd2edaf89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63c58e4872a7dd22843ba6aa650d2f4a

    SHA1

    ca6a0a92b51c3ad44f1d410d6d5d164df84d068e

    SHA256

    01dcfa3064715a85550297242f4ec8743219119c39fb8e0cd0fcd1f4238c6868

    SHA512

    c170a36fd42505fc1a415c4d8744873acd716fd0ace759d2ae217f147cb9806cc822b6bb26fdb8d301ddb27dd78130412817e960142e908a04f69a0dc85a7631

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3022a84d26cfa5c07b333e24b37a53b6

    SHA1

    b292cc6b659644246a5cf23d381a1e0e24dae534

    SHA256

    ddf96b589a093c82e9df6964710d45e1170f2113e3991f237991e7352bf6283e

    SHA512

    2232668071702620b789901d5980393e89822278d88cb15aebf050181d55e456683b5918b66f827b446370f0aafbd4d4d9b997ce7c0fdc21f12a8bfe804bfe15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c6c5eec511ed547e568870dc92f2f4b0

    SHA1

    9f3c6d3339d001a83147d1502bb636f6c4aea87e

    SHA256

    041bab747db1185bf83de59cf9dad0d3a96b99b18f4d2ddee952dfc54c334ce3

    SHA512

    6a1f15ca7d29bd47def8f997cbc3ddcde541991061aa6f9cd068f57e1942080b38f6155c59f53d3195a26f99279d062688b8041f8d185c40fd76e05c95f90111

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d23f435da2deed29dd90d08972b7624

    SHA1

    0270a18a8a77003f9849070932d58c353467a9b1

    SHA256

    5a190f0452f54cf4a2d98670d41b18e993fb70b47e38a4c9c62e0c12ab1ad684

    SHA512

    89913035c3ec47e928c81dfb3a29fc3a1c4b07a12faa22b7e487ac70e6a8e8135b96bd7d96b7e2605f4268a8686f145aeff1de50dacd6d263579f2641a9047c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    811df9ae8d0451caf5d57e6241b5aa25

    SHA1

    7c3bf504e39e150a75710247f7d89ffacebac075

    SHA256

    506d8e1df00e113d334536f998950a41d363d1bf363f73de2bdc6e0792afe4ef

    SHA512

    798ad5a5abe74a3d0142c7646f291014178d1f55fe2e3020a6c12cc238de8082235f324b5cd6ce5119e7adeead2da89200e195213974b0fd63fb7c907e8ca8c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c199e3f53f43f00ad1796a456dcfc55

    SHA1

    b9b7a254573144abec770e31177a6c54da654b7c

    SHA256

    a1fef81e2e450a5bc594001e393a5e158afef856b2547f9a1a6733bd7dc0be4f

    SHA512

    cb2037f5b4271fb9c6d86abbb774fb0c8fc83ae16e4b1cb83deddea8e7acf20d44412b6174b82a6c16dce836955637dacca952344e9cc6fe7ffaa051e23d2f57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28a3819b0a2ffc16f9b77e45a65543f1

    SHA1

    6c5342cf17fe677955f32f3003be91337e5fd900

    SHA256

    ff7088fcb21727519de5cc7d30a3b720cde4f7690c5e932e09319609df8d798b

    SHA512

    9307a1db86d9304a1969f4f77985090bf9548a7fd914dc5bcf32431975e8114f6f69b18bc03e86911341b24db3b457b703f203930d4aadd1759412b733699683

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1bcd2820d163861da9e44e3bd77dd8a4

    SHA1

    9785da7aeb87cbfd02d9973bb51f83a1885df275

    SHA256

    0f4ee78555efd11cb406122e3e6a77d928e3c21f477945feb42197524ce4417f

    SHA512

    5d4df2a50d4e3a8b82e8352f9144cce8546ff4eb6720d08d672455dab18802ee232b777deebbb8163e2d2de46a8f6950654025b6f3e1a6df47843885a4650f20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11e25678099e535342ad13ceb6329f74

    SHA1

    6b9da9ce7441063b31579dc9328990caf000a991

    SHA256

    5128dd44aa990a67dc226d673034b9ab6c29c6e9e5d9a510c2ea7303693b9924

    SHA512

    b6734011f8722d4a1c7c977b8263d834bec9eaf1d42d92c92554d40589c1c8d209b7a4c56b9bba1a83dfe8ee0dcd65f3dd2256b87805e536d9c3de97c213ef71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd76d4d91c3072b7ab4b80bf8a462f60

    SHA1

    0f309ae9781f578ca43596b4fe68b24b6cd27b33

    SHA256

    dd7200d0e24a635328e4378ea68eee9a78535ff976059732fe74c55a89b8ea4e

    SHA512

    81f7fb1dabf02f11df81475d750beffd4d13f550d8b69a1d91d04513b36043e63baa9548f2b7db85577fe4f59a5fdc5786f3cb5ff02bef48af564a0ecedf0b8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0cfd98254aae722b55e624533a38497a

    SHA1

    28380b3750006bc75df7cf19b70f3031ca375c12

    SHA256

    583930f935d6491ab07baa5d30f7dbf326ca1cd24eddf3f36eca67893b89c7a2

    SHA512

    55d42c50c9742d077b25c287eb49fb31def2e8817d935dc0c0f00e2fd03e00f9beb9b313fdbcea124791ac95e632ec7b5271e772ef27b23701184184473298d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2cd1cb1b64a7dca60baac35c701ea1e4

    SHA1

    08049c8d12ae82d22e28e29418eea7edb71e057c

    SHA256

    0db344dd2e2786defbe85af9fd655b0feb8bf352f7912bfe1f7804595b5ff543

    SHA512

    7a095d108b7a8f03869f76a6a8a0892b1c2c0855a94e2453dec97582c4326af61bb1bcc7eca513683137301b88ef7c9d020bb3fe067a4f2fd3deeea30d75a477

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\56KJ964X\1380534674-postmessagerelay[1].js

    Filesize

    10KB

    MD5

    c1d4d816ecb8889abf691542c9c69f6a

    SHA1

    27907b46be6f9fe5886a75ee3c97f020f8365e20

    SHA256

    01a956fa0b3ea8cb90d7032608512bc289c4170bf92759352e40062d5be2946f

    SHA512

    f534f057e46998bd1ff2c423ad2cf04a880c4a5259e95aee5c6ae34ce7121ccd07ad1bce5d4c3a51ad04f7411b0625da78808326b13d2aeefec502988e113113

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8H7UVK5L\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    9e5f0b21584389dc1c7b5da4a900879f

    SHA1

    191b84e0f5644398ba99e0aa141a6778c14b83bf

    SHA256

    3e21bdafa913fa25276358db1269238db3012ffd8748626cdad442f838e890e3

    SHA512

    c1720a420df680bcc46625355ed6d5c35ae280a813692a0fa293f3ba113a023808a781f1b8c9dfeb3ffba29606e1f4bb4be4233983089602e2d2c20786fb0427

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YTZJPBOG\cb=gapi[1].js

    Filesize

    67KB

    MD5

    ed72d618fe48f6fc42c19a4b58511e72

    SHA1

    80a2da4af91d56ec81c7b672afaaaa72c83a4414

    SHA256

    5bfd37a756bc7772aa6c520102870dafe2d3b808c562412e30f122a7908f8ad0

    SHA512

    5378b71a33f67309f788b9fce32daea44051e7e9a6aa326bdd783456ee9eb2f4817aec2ad1e837afc1853acba59080b0114d32c040ea731ebd703f0a84dd7ae1

  • C:\Users\Admin\AppData\Local\Temp\Cab9782.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar9783.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b