Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    06/09/2024, 19:14

General

  • Target

    d046cd5afa220f9b3942321625733096_JaffaCakes118.html

  • Size

    7KB

  • MD5

    d046cd5afa220f9b3942321625733096

  • SHA1

    e8e973c01c6575820137baacc053fdcdaa8beee0

  • SHA256

    408e2f9d88e627af97d86030c7d76d7ef69fcc3f2137d286c57cb98b3ead0173

  • SHA512

    4eebb250c4dbf1ea10e2fbfe5edd1b4b5d135038a12573d83e107af4a6deb997406ab9da4de39daab8e6fc46044b2cb59af932a49b3b54f5d86fc8496779af76

  • SSDEEP

    96:IQ+lePdPP5yuXOdz4EE18hBQwtYM9D//wKW5m/1u4:t+lg5yuXEkQQq9DnW5W1/

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d046cd5afa220f9b3942321625733096_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2372
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2372 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2680

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0ff65a7cc71ce2df0ba867655272e8c

    SHA1

    c6656bf456e850745c5e6a36e6bec7b8c1c7b17f

    SHA256

    26b3a14377eb652584c6bc3dbffe260e5dc1ac5c1bbcb578237e323a1b3965ce

    SHA512

    0377e77dfc586d6addd1e3adf945b0175f1596bf3cf65f8f8eb9f7f3e500e401fc7b59043e331a1de484e7bc38ae4d3e3ff3ee74c2b6aca82984e0c90dea6df3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ded4efc7c937a3a6c7e78a8e1dc566b4

    SHA1

    590f74df2f6b08f37aadb897a3de152e3cd6e863

    SHA256

    6b60be6b8c28554b0ca738a91d6d931de14b3487a044a8539bace2e1fa5f1191

    SHA512

    662599314265d169587537b8b72e0e29f02e6d8d0ac040b66b9af22c4854d4d48c912e1adc69a37c42f7587d563787046335804a2ae354317f8a025f345d9eaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    390e4d50a59667c82f50593b17345c11

    SHA1

    85473f53f715ddbcff5ce7d98a98ab11f4f4a9f5

    SHA256

    0817abbbcca1eb86e4b8b28be271129b69f3e8b2d4b8a863fc7a656ad30576c9

    SHA512

    b3a5f1a08251a687c81f94c1de66fd4ad23fb57ddc469ee2658bb10ffeb34460aeeb7edf5b999ecf1915ae76671917260f9ba23b5c779dc1ba05ea2df844599f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aac69254c0b9853a203e9a6a75b9c881

    SHA1

    fa97234163ce737d2fda0f1047a9856c850f22f6

    SHA256

    36dbe74ba9f4297b8e0c036ca621b5a2b1589b71f9d236d30192c6d7842fba08

    SHA512

    153c6b0d4386c81fbfe5b4d6408ef1e169e249b865dbbae1eea942144a4fc7337b39945ff6dd8660199cc5da1ea2939dfc45e1c6d24ab93aaf560b4cc1f5c324

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    88b45f3a8267693543e79495150b0342

    SHA1

    c43a9edfb737098d6f39693def45de6c987134e6

    SHA256

    0a7f4826fe64893508fdb8089a30eb6925b417084bd6a06c70974bdee523594e

    SHA512

    0a7bb098010495f45261079906ca15c01757df214ee115ad2224cb7f082e413b6f935cd6bc1aa9f6099ed6e79088554461fe743a50b0bf8debdf9877d317f957

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a2909f2775573e17208fe75b286246f

    SHA1

    c243fc398c0c1625caf86dfa08b638c38a2623fb

    SHA256

    2bfe4527775e4dd10d85e5d36e4df975f18d3d68cf9075f3dead155e162c567a

    SHA512

    614c6f5be26109db7313769bfee793d909a8a9c94ca492819c9badcea32aee505e05ac0395e9cd57be7b72f8a0e8c68060b4c3e4551f8c519e82918cb11d0219

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b17e2c7aededa7f89bfa3082a39f5e18

    SHA1

    3f2c6ef081f7314c570d780088c374d34dcba06b

    SHA256

    6a767c8f63ecb231d63ba1a8f1012875210f617c72654d390ee736c713182140

    SHA512

    1d59d16869b3f9b687d6813fd432c1634ddd05c765bd48cb72dc148f5b838e29c8cd1b1f6406c959a59359a56013047d3bcf620bcb8b2fe05155ef6d179e005a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    18a7e455a5b488b467b825a8c92a6c8f

    SHA1

    0f95c31ee925f174226de660af3ade7fe82faa2a

    SHA256

    2c4c0186f684e91d0a56d280a6485e700367aea723261a080b1c43b5878883e9

    SHA512

    175e4bf1fbf5b3f1e975bad9e3c2ee180978139c8489af2407a09fa004292ea71e91ee2c83744b4468564d5da8f391cea025e9288e2f9f6791e4bc669faaf2ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aeeafdd7debf12837e00cffce4ac2d41

    SHA1

    ea3c12e7edcffb48043c3d47229dc557644759c0

    SHA256

    e2b5bbceacf7e75c4201b8158a4d13e21f8db293d9f5bc668884f785fd3cff90

    SHA512

    e3e9ee68fbf9700e5c2444234befeb9159a574d1661489729366dd60556bc0c759b6e54d9ddadc1cf7f0b169986ff3ea3d1a3c2801ed13d91741fc256c63cffe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    02dd2aef12da7a485a457b274f42a168

    SHA1

    592c7301e6b72227a9e1bb1bd70c2fd6b2a33afa

    SHA256

    8130ebb3db125aa4c5049798bf9938553f04eb6a3086744e86a5a094373bd4e0

    SHA512

    f68e2d41024b6851bca7884834f947f96bb6d44ad7911394d7ea5a61c396160a32734f83266042d048612ce63fa63069f0ec70e98359f3d9fed07eb0be23faff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    096aa58efc168384235dee92205515f6

    SHA1

    4bd87fb32b26735ed6c28f56b42ff60edc459bf4

    SHA256

    8412b79cc460d6c2efdf5505184bceadd679521f299a1b7a6cbcb49fbeaafa1b

    SHA512

    03f33b64e792d76412a6d1564e4ed539cab02789ca40d83ac4d201d60471a6f04ee8aa7136e82634394f972ef0ebbe26b8aaeb38ab31dd9b5ab4780228e25411

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b56791ce74d90e2c548201c4237743b5

    SHA1

    ee5fbc6ce5957e69062527ec5b4c30006fb0e274

    SHA256

    0d0610f9ebfce88ba3c64298d48a0980e411a5546daf1aee35d5a3d17dc85b41

    SHA512

    e6ddefdfe83dc2efe75ca9262ba17362ee5a619733bf6a742f20b86723abf79be9ee093192ba6b9bcce6ac3fd194d92874e180b991a17efcf359ec4412ecec08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    46b557a6d05c580de51355989374b777

    SHA1

    0c9ec7254df450271efec8eb14a7ccb44311f084

    SHA256

    67e35feab4b0fed7661c0869688f80f74becc7b7a8d727564e9d8ea5a67379a3

    SHA512

    acc4837507f1e357a5df183e0a097babe2577539795b3cb2d20e44a7f79138d4479a41ab753887f645d26d2e325faeb3d91c3d17e917015c2d32bdc3613a1510

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    73c02dc554672a3bb679ebd7065c5aa0

    SHA1

    ba8730cb170453deb42103720abe32f884dd307f

    SHA256

    9931893266b9fbcb23219cfcca2fee68b1b9537a25adb36a0902d609e94c7185

    SHA512

    eb6526097b5b51119c9c08fee1d69dd8f426fcc8717a0b833c5c50ff276cc1dcc2c3e7d3ab8d9d582d3060b8035b53efacab98102669c524645f473da38cd764

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa7ef0f2bb1dd5dca03ebdace6f7500d

    SHA1

    18462d681dd5aa7195f1cffeb575d7e57777ae39

    SHA256

    99a807aac57f56f8bcc5adf1308bf080372791048c6cb7fb8524c7e451af60fc

    SHA512

    38e870f8a61fa86755c1c777f47616f2d7f5233fe0eae606fa754374bb7b62d4e456acf9b5c3afbda94b39ea7d8e1e9bd5a977ac990c2743bd25d778e4727b7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de72742557a75e6429f140748c7fe17f

    SHA1

    e7a6030433dc95f47351ccf7fdfc43f47c6e1128

    SHA256

    64db15fccfc275e7f9f4ff78672ec2bd69f7503535151f0f5bfb79c26b24f437

    SHA512

    9371f8e0f7e45e5e810a90048b91caad67bbe10c89933f763abda3ea32848b50f1ef6d97d73e1213811b0c2c8fc2b81b823db73e21d9186d63a7c15605669f62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e980fabde8b4da4246b225c0feb33522

    SHA1

    d0e4a4fdacba73562c92a361bdbf4c86e4fdb7b8

    SHA256

    1f4fae415f6c9275cf34e5707043e24ddad9dc9277ffd73156c0ceb71e08043d

    SHA512

    92d8f66e2d8b938f2140ac913168ece4243f80885c052eb7492abdf7b70c40f2237812d133631e9190703b5b89f271e04aad781a755802990adb6d96f9859093

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa7a3b7d1e3938385b486bfa74837231

    SHA1

    b477f38513a856ee07f392147a552e74b5bdde50

    SHA256

    4acc52f4bd61f2d14ce2eeb9e45712c59d330367490ecaf81a4f78bd92b1fb36

    SHA512

    c136e2c95cdcb29859c11458f748256a8c72d724026ad2bf8024a617d5cfc62ab74205f4662847a618a8067da1ce18add3cfc8a2e2f4d0a3489e42b1a9659f9c

  • C:\Users\Admin\AppData\Local\Temp\Cab4C3.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar573.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b