Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    07/09/2024, 12:40

General

  • Target

    d1f475353fab98379eec829d6ae014f3_JaffaCakes118.html

  • Size

    138KB

  • MD5

    d1f475353fab98379eec829d6ae014f3

  • SHA1

    29d706c108544c2fa9a7a447308c877b09031399

  • SHA256

    8c76eb944472ed5d315e2359f59c69f1ce8f36b5537957d119433ba203a37c35

  • SHA512

    1ff64c79bc1043de03cda20c5cfcdf57e16b4cd473a4499248b20cf528febd40f409817b3c27e9658ccd4c4ac7272e9bde5ded3801e2a69c77250012e6be24fe

  • SSDEEP

    1536:SoP+0Tfl2UdyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBw:So5vdyfkMY+BES09JXAnyrZalI+YQ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d1f475353fab98379eec829d6ae014f3_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3056
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3056 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:316

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    172a237187d4872c01218f735f99bfcf

    SHA1

    29b0945a3f44aaa8a2255cb549d4e6d82f72aac4

    SHA256

    8209cff7d8877610aa1e92f4ff90e7ddc533e67c28217ba81bb5559594bcff21

    SHA512

    c0f4618ad2adea79cd544b0cb5235ff2447695b583d2bf1a165139e1b0af8c1450d49443e5d0e9e80a67889894f98b0e33e4c90def27aa7b3ef8f35918ee1d4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    996a867cf752d7711ee7f79349a9b5bf

    SHA1

    352f534c35561774e42e738ecbda3aa8f750c34b

    SHA256

    48990691e0ad2c5be8ce45cb1e362379aca387cf766b46845f1236b6f2d89fe6

    SHA512

    f0e2e84f0b9c336fafe2bdf22c018934c03be3fcfcade8f2b45fabc4c76c5ff7fd6d321597e548b4a9d55f9700083b10ffbc3c6d9895ecbfede19fb65993e846

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    607453b0268c579579aa5265a43726ff

    SHA1

    18393a7ab95f0e9c63ffe78f490d2cf5a59146bd

    SHA256

    6ba35b9ceecd7bbfbef8b00b77bbd9695f3420e09798e3ad2fafc5134378c41e

    SHA512

    0920e0832680e291f0b60559f87b515cff27d975aeb6f608c68fd8b11634bf9a8cd5c53754c6496b5277f7280b97ba411488649ffd063afd425fcd0a07ce93c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    36cc6bf34e45a3f17f836d757d03f132

    SHA1

    93a0fa655741d11a2c10f9ec33bc8d0873aafe65

    SHA256

    2e953e9e41dd70280a6d49dbe91cc5e455eed1086ed42ec6c237bf00f8e2d5a0

    SHA512

    9ce4cd0814a344eaf77549644c5caedc9db39b4e672c929f2df835844f885126a88cc1493cde61f3f50c16ccb59d435844b237c902b6161aedcf5a1326b0d022

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e453d6ae6a64a19d385eeeac666666aa

    SHA1

    2ef47b7aa2026eb1fc88ac898700b1ff1cf2af95

    SHA256

    459cbf1d3b4c2e7817fa9c9535c04de9f136f7a79282295f919a2b2b9268d97f

    SHA512

    c4720d6a1b366ff36ff7b4fb9ea418348b76af8fe6f6f793808dda4abf13a85e651e638aea1ad9729b4ce18aac6f6f22b3ac167988725accc38a020ba9ea1ea0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e1834dd0469552a66407dac14fcb28f

    SHA1

    ac1c04ee3f6a3d6802df60d8c491328dea79586a

    SHA256

    d797db7b333dee8defe1844fa9acd42ff78a153f1de271412ea63366be53f54e

    SHA512

    2172626cc690e6ff875084fa59852594044f883a2499ec531b61c6ea12717c541eb651b8a58b465d4a5a00e4a287b8f603b1a462d7876132a085f23760c5b863

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4ac0b61afaf895b699aa44c0f702694

    SHA1

    02dac846558fa8559845e9d882c246e4e8761026

    SHA256

    b0cb8706fd8263b1d887813f90c6fcef05e413528f3e370931b727e9dd272add

    SHA512

    430c9d1e083acf2f591dfb92423b6ec4b0807f9356898b7ca8f9b73662652555519b4d3a7a820b78be4e95b37fb83c0ed7a95aeae3df5bc1ed35097fdd9c457e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d0e92707c2ac1d93ae2dd598a1af068

    SHA1

    e6a1879135ed57d09bbcff1f8e25e530a824ddc8

    SHA256

    4ca1097886541d8021d48bf731059522b339fc17b9acfd1e4673984ce95f8092

    SHA512

    26aff68aeddded21c9220fd5da44602efbc940027be7abe55bd512253814df0807edf61f367dd7c7f9cd1657bd28ed3b81dfe7a04c51b6c65751d55f0b21eec7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3120399b11bf5a6700b2daef1b0b2a6

    SHA1

    421834483a539de66d2edcf6e850957827299862

    SHA256

    9fc9fb79410ff84f6a53d136c296088449d13c5c57616524e6716d3b8a3cc0d5

    SHA512

    135f0cbe40c47caf0097a65e9b03165797812b6f7e9fd978bb570c70c29259d8b57e45a0009e080c6227c14ae89715f4902dbc26a5f834539f171e419d27c473

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fe4ac77e00d916a8d18912b099c1542c

    SHA1

    cfce29f1245e70801af9331780b84065e2cbe4e1

    SHA256

    9a4d216a40329d1cae02981a971698d43829dfc0ab67276311c6a45f902ef00e

    SHA512

    285dcf7975346f8478ac30a38fbdd43db2ff5e03214c2281f7ccc0f7babf8f0db5e83cd599d90f04e801a8f67c3e415b8b6e767a0303e30d22bf6608ff8123c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    275cc2dde9e517ad391543b028abacfb

    SHA1

    97f3dead5da841810d45752e9340d89addca2ea3

    SHA256

    4c84a940fc0beb76d9b4269e55ce962b038e087ca2848268dae3fe3ab9e51b0d

    SHA512

    68c83a295c5ba2ef37074892acb454e1bd9d245ef0fd88053bab8a0b5c7bad17238fd0c715d196fe4c07b789eb30efc316ab6a68f19d003bfd482a529aa5fde7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5909baeb762d878927f929684c2370de

    SHA1

    e562cc325fbb4bfc9a4a38a0149a3d05be12acaf

    SHA256

    6ae95e6c30426e28178b8b10521a7f66e352b208f1db32e9476313994e4ef79d

    SHA512

    2364e930a50dda56503e07389c78b4c15fe007c9f31d8b37d72cc673b42787f99a32904601b04273c4848526e9d75a2e75ac5f9c797cc929a42f8af63f79c610

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9383728fdc43247592d90e0ffce434bd

    SHA1

    5a5024a6451921d21fbbbb8522e249b714578485

    SHA256

    9236f155cbd0400577230dff8ce6cf7969d73f873e7d32d782eaf5c6dad77b6a

    SHA512

    df87bdbc2e6c7d0fda99e5e08311a85cf491eaee052e2aee4532d889df1cb3b944d985a2e741a90d44b6c949fdefa3650871d3dcff04c5fbec8eda83232f423d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    54f0e7b6a39f0af065826d9f3620ce99

    SHA1

    aeb0acac72e928974b13a168ffaad579ec212680

    SHA256

    8377d8f9dda8bf04b674130bd511e66fbe535bce5b26c98bd4b3563dec7f6dd0

    SHA512

    bbdee9ea7c8a8689d09f768cc90a40c0ffd51f3d4595f3b4eefa7642e5dd55eed65d6f23bc07e96b9acc48edf253703c775598033c77dee1b1c30c4757780b74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a4a875b52cd4a8f15261e697d58bb3b

    SHA1

    7bb2559dc42be32659d6aa9a60078f15eeefd191

    SHA256

    6131603d2664d03ad9728db376b84f005d318c8df2aa8d1a5dc61cd283fd4409

    SHA512

    c9e998d68fc587ae8e47218b404d648695e93e64744bed843452e0bdc1c4854c6427e878a6c8b319727db93b9a796c05959c3810ecccc7acf5b6eaf90680941d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45535ce9231b1eb39ff191743603bf18

    SHA1

    bf158597a1b927d0038bcf75d006bf08cd441065

    SHA256

    5fb994bdd0db999186c7e3e908ab666702d85742637842eeed243a6a3f982a65

    SHA512

    d93ab1aa3368e6fd6ec1d1132ab5b8f2ebd528b1ab8a13bd8b5ce61a18d7d81a8512f38c65d9a5adc675165e75853e4825bd57b468409b2a3650487fbaf75708

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e15261f25eab175e25489faa202f3d8

    SHA1

    4d9e93dd007dbed24f209f21468104687b8c5d46

    SHA256

    6c558410850f9f9c768f0c3e906a18f5c6f17b5fec54f53339e6894f3a37be5a

    SHA512

    9275e7d3e34a3a82d6280376a3b5e135bb7cb8942956521c920c3a38e15ba75babbb8665354c7aeceecbb1e89ba097e498d9b9e41d1632b41b1b0784bc6b7310

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2ba14442707c6c161e263c772ad897c

    SHA1

    36a8801696e5eea5592b99ffa97e0202764245bd

    SHA256

    ba0f232172d2f0f53b13e1cb2b31cabde82fd3f04baff73562641a3a77e14df7

    SHA512

    7317b45a735f5b55a3502962e017f2558244f8c951b0f5cf989d693698113040dae7a08709d4ac6badf101e560ef0f509c2e332e20b0b5d4ad5c24ce8fa242c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    177998f0335723d2367a593aa8128cb5

    SHA1

    527789e447a8b1aec108b8326e338d856b95931a

    SHA256

    df3618976aa721026964b939a2e66e9493dcc531bb39953bcb01027b7ef48243

    SHA512

    1f890ff158a3c5742cbf6321ccfbcea4a8ce485dfc912b8a3216234f03e458198e37d215bfcbd087ee9b1a7e10f5ca891d7767e9c8bee8e95bb2dd41df0073da

  • C:\Users\Admin\AppData\Local\Temp\Cab93C9.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar9449.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b