Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    66s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    07/09/2024, 00:18

General

  • Target

    d0b5fe5a0011ac79158732236abc8039_JaffaCakes118.html

  • Size

    10KB

  • MD5

    d0b5fe5a0011ac79158732236abc8039

  • SHA1

    b041c920a4139b34e06ad1eedb0a0f889cd732db

  • SHA256

    7025f479d71eb9c08467defaa300ab1ce73dafd35f3a75644f7105e230a0329e

  • SHA512

    2d1d3e122751685ea5f7a75443e35530af47328e0c1bfc006b8cd290e97300dcaf7b28dc7248dedfdb32d3200164f7adc98f4863ad6dad99e907a5f02107538b

  • SSDEEP

    96:+y7D5wAkNpDZ4F659t0YwxT272WQR4JcPtI7mvjcdPSlScSutVgJabjFo4fRLVhU:RDU14F6GxT2SW1cP/gOjLHy

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d0b5fe5a0011ac79158732236abc8039_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1456
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1456 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2804

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    2b8afc23c29ca804681b90472fb1c15a

    SHA1

    21690d808b7dc056548276a3219f6eb27c68567e

    SHA256

    3f98c51c1b04910570f1d26a15cc4844516a1bac4e6e4ee8a12d8ccc74918508

    SHA512

    167b34f0560a5c446e6697d572afb77fe87dbe75b4fbd740c0154c51d7d5a084a1976045dd1216fce08c45ad26cf178b05c3373c1ea1db4f786385744f95a221

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba58c6e1df042d7e92e44a6ba446a129

    SHA1

    503ae33905f3c7eec0c0e8bd032cf29b46b3ac09

    SHA256

    2bbaa858bdcecf0bf3c1290881ea28f4fdf85a7c264b685436f5850fd300f0d7

    SHA512

    4d28881a63c96d1cdf46b2b9e39eac395bcf539f12aa7c408d06d777935f251fb6ab09554132e3a974f44cd763974db9b584cf30e3f38f5419aed7217b7c5ad4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61564397ba0ca307eccc4a7e16e719c3

    SHA1

    cb1d6c0cfcaba3d6ba053ca4f174b63f9c0e4a3c

    SHA256

    7f32d6188ead1e3694cbdb5cbb0fadb17ae83b8f18b3b43e8786bb5fd5cba969

    SHA512

    81ee8ba95b24263ef0b978559dd4bfbde0e5aade2d4108b3f83eeeaf6ba379162da0c0a7364994e7a432a63bee3375324167218b15ff05af4f3e4da5d6a08651

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    068f82feaa3a409fe1415255dfd8e499

    SHA1

    b756973172342224bc4ff9f28937122c04f03271

    SHA256

    a49c2bbe5b712c670573c7b916bdad6b5aa56860b622294411008b0bed24b9bd

    SHA512

    4a8f5a1f7d19b0a99050e163b10ece8b4e8aca18c0fae1380b0c7b1d71a5ad1bb8cc51908c5341fd87f76f0d72a03f5d84b04728e686e94d0c1e494b2a29a18b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ac951e8600c5730e42ee42a4d1cfe0d

    SHA1

    3ff9046ae0ea40f6e563d89d075e6959df3ca8a7

    SHA256

    497c2592dc60c2ba5d38a41cc787acb132f1fc9a80731d546eac2ebefb90416e

    SHA512

    8750a0efa0706fdc9a9dc3e3c8bcc4d7a8e9c48244dce0f9e5be77a500f72ea87fde7aa5b1aae56d334cc0e12957ecb99084a66f89e806d5e9b6e20606d7b27c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6eb836cd335c05ed5f22642155c4ca97

    SHA1

    439356a3316a9c51a55170315fb4d0720f24c24c

    SHA256

    276f533d894d47a963618a104f479a68aed6a154c13866ebaf744f79c79f56f5

    SHA512

    d1a96ee09cc06cdbcbac168127fad10c5f0f81a66bf1180bb25a060937970cd6b806b65851225e694aae5c838e836a7ec5010cc172fe4f7c574bef7b4f4b29e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7aad4df19373be3dcacf531f462f106a

    SHA1

    b82e8c70c47e1b2bd0107d16b8574fcf4afb418d

    SHA256

    9ecffc631b58ebbd37c8e918c082c86b3e1d01248a5a2e3bd4ca64f124da801d

    SHA512

    e7069449ea65cf97f288a5ce828c8d95d7da472e4ba584990a5a187f27e746b44ff80c8f865d65134101aebec7b2d4cc16e70b051c67017b432457e51cb7664a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    295b6c34cccafbe794d9650482b7493d

    SHA1

    47da6947c7a09353cc2e1ddf075ff006c00b7e62

    SHA256

    455cf76fea6f9484d52bd07ec80276e608136a0b16521c1e73591f17e46303ef

    SHA512

    0be43ea7d72c10d6c4891edd39e423add93ba2a62aedbf516c077f4d60d06d031822f916c0f2bded4c47357acedfcbb70babbe40063a413822cdba1275efd73b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    66eff17aa40be702c57dee9814198d92

    SHA1

    4f0dafea9f41c2ae699f2c1cb89cde624f2f9b26

    SHA256

    ba5df330cb917df49acb3cc6f80744ca825cf97b26ad44a7f36711798e9975e9

    SHA512

    fb2ead1b7518114b74630c8df8d58a3480a2618b02f0798932bae67ec286c6733408e11da5658f5615115100d53321e2790b6e5de10e5ea8f6789c841dca4383

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d8091b0d290e4a4fbc3b814ae9f01a9

    SHA1

    608b590efd95d290168ca76d7bb30b4e6809dafd

    SHA256

    10adc9741ef026086c1684ca020ca2437f2256f1638782088aabc145aa3a8ec5

    SHA512

    d3c0f214778a37c9fe631708e2f2c69444c7bf56402ceb7b4e8e379d845d41d6eb34d2c749942c7940407a27f41057a852d063033142b39178e7c1ff00d16395

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c23c3f39088ced1fe835b263084b705

    SHA1

    6060ab40d258e2812e317bc3413568d1f0a3b9bb

    SHA256

    62bbd41c18725e276c819c477389b867159a8f2a2cbcc658651d5443b4996e61

    SHA512

    0be5863c8ca65bb41e71ddc6f27bfcc75e88d366c4fe4dd8eb7b35902b799c0aeb10e0df5a507c438ee623fa867593d8a1029f11cccb1f38323c0a7ea9d1189d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e6762f7eca682e2e8f060b89963273e2

    SHA1

    360eb61df0a5eab00c02f9a695e24a562f9ff119

    SHA256

    ae46bb65f065a2edc57e2d5771662b01d4e8df15eb655560decf5085f3e0a441

    SHA512

    4745fa8c521374ce47b116f11e78671697648cac30e63452bae3e1ba7d12ea1d675880fef92f9a2de08482680217448b7639fc8ee1275b65bf6c1ef019a17859

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fde52e3db86eb70841311ae8e3721ea6

    SHA1

    4c08909c2fb232e9bd4ef573694fb8cef7972d94

    SHA256

    1ee62227826af49e1d9b43d3cbac5378e070ec88dad509961a22fcf2cd43bd17

    SHA512

    a786d8df30047df68007c4e6c6c3615d1176cabe74bad23f7b6d4212d1f267247f1dfa916998243f0606536c664ac6d3210d1abfc56fcc3d42b488e3ac64061e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3387a58433918a73c2dd57c31b3a3d40

    SHA1

    9d52872dc4d887d055d757f025d73b58636a2d32

    SHA256

    691cd2dfe4c2274bddd7aab78a1c7940ad0838856464cf9a9735b65225258912

    SHA512

    adcdf3c9b5d29776f2ae94000b879328bda6c5d55c053bd381c2c6b55f8746f311f4fd0a589f583eab79b0483aeb39e95d9883dcf0f0c2b82b8986f6eeb5e8e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b9d5e3869de61d1fecea26c5d12b8c1b

    SHA1

    bc450cedaa910eae70afbdbbffaea14a539cf2b6

    SHA256

    493be8499c3fa0a81e06913a7649cd586c7c4e2e84d97658ffd15f90cc5d80de

    SHA512

    e9448dcaa47bc3f044e3e70166dec05e958c31f1ac8ebd1ff8dfeae689afb64ad200ecea0d64242b72aa5c8de83c3da134e7764505e7c836f6f0aaca4c46919d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bdc0d625c2ed4e9fe1d106c1d5156b16

    SHA1

    e6b72793ff2ed4e086b1937236e725e9484ec2f5

    SHA256

    7e5f2c0b806a5c343249d51873a4009b4e22262861952242bd25454edd13b148

    SHA512

    7131144da607a59d7a749eb0c36a19cc590d6acd8edbe78829cbef57707877125b390dc7a094213dc2bdcc629fb6f5d928700a6888f853fbc7811a2c848b8128

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4517cb0a3bca71eb1e242cc7f77f2ccf

    SHA1

    481fcf16170540ff4aae1fa2548e947798b5e070

    SHA256

    941ef98bd08d4d84170a56b1e5519ccd82ace66654fb0af0045cb5fd3f9df788

    SHA512

    44c401ffaf58722bd8aefafc26d3117604d1a23b5640e0b7f311fa273991cc1c58ee280ac7f5646e53ecf77e55e30966f0934d10f0f87ae51c06d25ad1461de0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f93bb98893cfb2571bca2b4d3a3066c

    SHA1

    214349dae2b51a59df235616e407a33b1cb7bcf7

    SHA256

    fb17dac58f9751f86ce3be0d1fbc2aec4008e7277c8a8af8fd4d9a971962671e

    SHA512

    34732f3e045b8cb06ba0f1d711d1a813fbfa19919c2d95665aff944585e4180c17f2a1797caaee2c618aab60a540666fb7c16350418c24b8c4315bf7b0eef668

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    69823b24b16a95c7dc77c6dde4ce4b21

    SHA1

    d24ef7c88d4b52c50f83d8b00eac6ab92eebd114

    SHA256

    7691f1239b839561e501b36248334ddffcbf0a59b99860e8d6eeadbb0cd121cd

    SHA512

    c11f668ef9d59e3697677c0174113c50f0bfa162f88ca233560599726ffc44f511ef28ad87935753deecbc2b8cb0123775dea76d38bab99676070b1d4a71150b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    34e32a73c416763f552a0faefa21f0cb

    SHA1

    faef62332a8fb2aa870dc14481b80a51404aa139

    SHA256

    0dbca76e7f80c116b296542590c3f031afa6d5a3547d05e4376bff953af99ee7

    SHA512

    ef6e575b55f545eadf9cbd9ba125eadf28d63e0ec46e34fe5ced1c6f111e7a7c9285e7204e68fa9a0e7cab65612b693deb2fd7dfe0e54d20f4f5671ac5b1b2f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    8b79648bb4fe179df6d3eb9ae7b277c3

    SHA1

    6de4ba12663431d1e57fe6aa080a6a9dceac8f1d

    SHA256

    f07192b0061d4f0d0afe967165426baad8859719856ada48206f1ef0a8818008

    SHA512

    3881c8a65ab38dd8b945b4283d113096652eb94415b3a4ff72f29a164db2dd03f5f17f10ae65da9016e44ef044f046e8ea0414b30a8818689e85ce0b638577b5

  • C:\Users\Admin\AppData\Local\Temp\Cab5005.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar5008.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b