Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    06/09/2024, 20:03

General

  • Target

    d05b25e85a1242fb9fcaac47de773e9d_JaffaCakes118.html

  • Size

    51KB

  • MD5

    d05b25e85a1242fb9fcaac47de773e9d

  • SHA1

    f27c47dbef198e6abbefa475c230744529a7deeb

  • SHA256

    20d2f2a3f2f6f62d37acde6aa7c18d0c105d3426bca843e1c7702d6ea39d0106

  • SHA512

    f0ef69f1fc630911b30ca67b99f4413e3af7f6d750f717462313b242bf0277d119b568208b1c833b67dc6db9f34b90f4faaa3c36add216983932a004e9f1e835

  • SSDEEP

    1536:Llz+4bbbbvvvvqqaa006bV8NmL3uw8NmjJmn8NmiHfCDUaUPUz:LlzM/CDUaUPUz

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d05b25e85a1242fb9fcaac47de773e9d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2232
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2232 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1580

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    632c8f29ea9d34adacfc6e53cd24e6ac

    SHA1

    3f65445c6a98b491ea80ed96aa2f359a55b89345

    SHA256

    630a34202785b1a81c1328d00a21022a80ea10ade5305e244f8aa7cdafb01979

    SHA512

    0d9401aa060432747568553f757bb46e797524f50c754dfad8cbf97321a5b4b9f95d6adea3ce00e412890ac7cac30dd4b0164b99ca2fcb646cb7909c99e7b739

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f40315bbe9b19ecb0d144eeb80c75483

    SHA1

    b6d531bba3839e722b4ab0bfab9bbb49d390f852

    SHA256

    830f927a2af3fd7e6b87bcacdafacfd0a2185096d9357fe1d4d8b35ac78a3186

    SHA512

    e3671c80cd3884b9b5a7793a860d63dc2e81996157e353f75ab8a112e26d15c62f2c6c99d2e5bcf919ad5ac7758badfc3d741d77dbfba607e61972b3d29a92ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d929b566268d5b0c2ae29a2166905e3b

    SHA1

    4bd8e331b59ad6ce960548673526cd96f754dd60

    SHA256

    c7cb1b92c84962b942556b510553eb41e0881687da259a031eff6236e6d3214a

    SHA512

    465a5b42934fe1a3ea23b767300af5a8b791b8e5bdfc238a94a0f4bf4c9d73e2c90d6483d04e4006085e7deca4935a1b61ab80d26f5959bc5d3a8fb006bfbf0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    13b52153c255de92be6cedbf2b1d6b56

    SHA1

    4ba2db9a65bf511075566d5232b7eb224910eaea

    SHA256

    da0655928ab420e903bfc3eac80403e93ab5c981187350e1fac5b9a5e36deb5e

    SHA512

    f2ae942e73617a2ce8654e5fce798ab5891ead28f6a874fdac6aaad8034fbd83120d28db2ca041e59925e630814759682530a4f3499df9e8bdb9d686a1e36bb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e4a77b3b14f073c6fe038e0e37db7da8

    SHA1

    e568a7249632f480c638f84f356a9eb1593b7699

    SHA256

    f8c19102a46559350009a89d37cf02cbad75c83e0d5b9fcbae0d1327dbfa5104

    SHA512

    427dae120bc6b1d0b5a3f797512bc66537fe011d258b04184a9288e93f08021945ef5f1824dcfc4ea278785962a16015bb5d0b297a867f48ef2397f606fac394

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb8a310f064953c3c80e93aaba45312a

    SHA1

    9dfdc844da3d33278f6c2de81579c3800e34706a

    SHA256

    0f9a4f59ec185b47ac373a4e5a3635930ac6b8d7de98216cafe6b15f9e09c184

    SHA512

    a8bbf9f2eebeb4b3aa39ec822a6b02445617edba3218c01530516824857b6735e6752496520bafce241ce538ff84e821d4fbd103953c8f64b94bf43a7d136903

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d4dfb1f470ba36aa12ca9170302c9ef

    SHA1

    a329f3f52c29a4f7e62295b0a849b9c174275f1f

    SHA256

    dbe621c9433c4cc6de8cf1465317b37c2c78c92c279d3cc15f4701004a33d926

    SHA512

    c0df22cd8d66b0b27247cc68eaeddeb5dd16d09ab1c9ab8537ccf4fbf97830fb7d654bfc659f4ebcb807cda420c4aa841a59a09e4447d854eba0878f4ba77e97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3dd030ae67af7dd8a78742fa118200d9

    SHA1

    aa78f8272bf9ad2ed82f1700a66a76e770b4e4e4

    SHA256

    07a22175ede930ead1d6914109fab699817d96a54e134a79170bf746acee7662

    SHA512

    3f8ffc408503630afb1b3952b0a41fb42c5e0285e0962d03d840a4997f3a534307fc6baa2ec25fb6e8cc0240edcfa4969cd17d532db86cef3d3551b525bab7bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8905ef2df10be4b3ed5b860d39fd476

    SHA1

    d68b107aac0522582e1dcd21043ffab70eb637e7

    SHA256

    59a6100a4d6fef35b92d7698f13889f6d3c74949ada4d6d958ddcac8c77105d5

    SHA512

    05f703f6908f2598b21b741be939d21dcce071263078d6cdfec10085ce794b0793c66aae87565cd73740ecec323d447bfc082d924a7c66183c75065e91773309

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4dd22476b48c82da2b17a074e4450b52

    SHA1

    aaba111e3a7c2e8f46116976f296382198ffe185

    SHA256

    8854ff282deee43bd818cc4a9036289ff654c42f28b40910711a1e4c6bdcabce

    SHA512

    1363edc1f299501ed5795b7bdbffa3a00263cf8962b8b0c239f0dafad8c6da36409ffee69adb4af71f5a86aa021af226d35eb07d25c1482e31f3ef0f03cf108e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e69ef0b874cade13144c69a39634c4cf

    SHA1

    ad9eb166c1dee057c39548ecb254270b2c4c2b45

    SHA256

    5a2147c35c3ff3175da45b26b82b833a6f989e28a7608ad64923598e106038cf

    SHA512

    6de97fb8e0f9b941c29ac27aaf71b1113253088856217ffa87fbe376b4ff7e3743f9432c04e13770ba396a75f3c9cbb78009527d2818ee749bb43e8e662b4eb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    004b56d144f1b1a5affa736508520b4c

    SHA1

    bfce3016678fc3633be4d6b97a376f21d25b8522

    SHA256

    6b0d3381979809a30de854a42b10c867b816943ab3bc812aad2f6ea57bd05042

    SHA512

    56ae0c3d325ad5114429799eb75d2e63e0fefa0c9b10f62c2dd1b86089ba609327029697d6b5f1e685d2ca66b965851df40ce4b5ee50be9e6c44b7fca3c723ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    79f7cf9818c2da432362cd21df946b18

    SHA1

    5ea2f3667d6c5c5a517fa43967c871a3a5d337ce

    SHA256

    203c5afd02181c672f0c4122cf0324c7a75ef071a471a7cd3147ec307e80f323

    SHA512

    c0e0d025a97000e581b63070a59d0ea77ac12e7e2a6d96e884c40b1b573182a8d36a105e9d78934c22d4e7e4c6f9f912540a63aa62ca527b19a7189ca72fcce5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6213f18cc5cfbfa42b0b9fb4baa643fb

    SHA1

    bf3a958148277e139078b2fc4640fd57c99cdc39

    SHA256

    2c92eb39bac1f979268f03e01cd9ab63923a64b442c45d7ac65e42c5a70d90fe

    SHA512

    de742b2919bc0d4f918e00dd98f976959de5559324924892102398fcb6613f27533ac2817d25e4cf99f410f23a592992a239a5674681213bf359554f29c508a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e32c5fad02cfdfaec9c6556ab02905b1

    SHA1

    10a442c6b71bb3fa270f590111465c9a8ec94c48

    SHA256

    1a9fc95e622e4f9d9a451bdb77aa6ad5042810778db0178b02eba4c726925a2d

    SHA512

    b308e5ede790e0b57c731ea92181d4286a4364dc617ccd1334e7ed2b6e0897a4a606f1d5ef820f500e5c635bc62d9ee3c9856ae27fcc5469c01d43961d81a72f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e5c2dddd14536510f5c40975b053e8a

    SHA1

    bc2b1bae275452692cbd1182cf6c95be52087d18

    SHA256

    d7852876b7383818a2bc6fbf8df4a466a53b894a859011a1be0a9de7a0578132

    SHA512

    eea354dfa4e21264539938fe461f2ffa3439dc8bee241f958eeefafb654fb0e46f7aba61d75d578685309a30e2a7b4333d30875b6f4b5c0036bf7a3d7711fa6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    2efd76ea5e5b35beaa7ceafabd0b2e4b

    SHA1

    7dcddc118b07e980445e90d3c7cf5938a4748ea4

    SHA256

    3bc600e237cfbcc9de16a91c183b9c005c5af545f64d194c46f552c8470be32f

    SHA512

    019c5bb7e2da9697a559b804f3f318003b46c947443ba619b6d9271556ce839a171dede3ad8bce5846b48b92e84fd84d9a098c410c68de01e477a5f917d9361a

  • C:\Users\Admin\AppData\Local\Temp\CabE59F.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE5A2.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b