Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    07/09/2024, 17:40

General

  • Target

    d27ce55a47122ed7381abd11fe37def6_JaffaCakes118.html

  • Size

    23KB

  • MD5

    d27ce55a47122ed7381abd11fe37def6

  • SHA1

    45f6b41caeee5d718675567b71ebe765bd74ff8b

  • SHA256

    1cd2a5850b4ce02bf381fb97b2d585c249f78b41ce965a08a946b7ed14f8345a

  • SHA512

    42ec97a674488523be5128545ddd4395581614d125941c4ec14d0f7cff5b83cec55cc7b4e0ad2c46cbc853f82b7b3d69f8b3d55023a22285e0b0d9a635d29a32

  • SSDEEP

    384:wdL2GR7e0byRTR9078gFimaQ/oRNFcdowGcsnCf0ItK2gGxEDeHdrc:HT

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d27ce55a47122ed7381abd11fe37def6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1016
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1016 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2288

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7ac22ec8a56d6a01184b247d594803f

    SHA1

    9ae4463a66cca61b3285b3a6f0239a382ea3905a

    SHA256

    fc4cde361e399c8114030bfc680d5cb9b36dd3e491bb17ba9d66fcbf5be9c618

    SHA512

    670a4b214de802ac34cae84f6246c905c69b94ca8384927f6ab225d6e15fa402a505b488b40207928284525fe891977e5e0ec7d6076207e7f61f3a52ffc2890d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e048dc64d59ae5768c1ecbc9e5bf60c4

    SHA1

    9ee075f8a1f526a724489483e406202f081c4007

    SHA256

    39d883e8ebf984cb56335a8d9af94b9b616738110a1330cd9c020eafedc56a99

    SHA512

    33e0e2274ad22b3a0e92205df2d1d8cfea75717cc4c862891c938af1ba1ef940e4ef14a0d509e665ab28675d970e2f101c24cf2f8b1bd41596ec101969e755c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f2eec70128c603e1f7a8a5a5dc82fb9

    SHA1

    cbb165332676bcf141b891f038ef567e09bd8f4b

    SHA256

    6d9eabddf128eeefced09eeb8e735c0cad9b99dd0028668d1bb4dcf7ab3f44a0

    SHA512

    364d7268dbcae8423ee86d0354ddf9a50a6bd1c2932495a0235a99fcf5c4746c11db11e0bc5a0ca2e3ae2007b20c52a882daa72c56d193ab4b321920a8cc6a62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37af91062a36e427d8ee49758eededdf

    SHA1

    de4ea38bdc4f33773d50d8f3e7f9bda77878baa0

    SHA256

    6d74b2869399af885fb9de644d2f477d2fd5213f55255c6d2c741c9b009630d7

    SHA512

    0368ba1b49b9dc5736caf7d6d2d589141e92b6420841708f8da89a961f4007f2ed00b165c9dcb961c7d740d7a501826672129d1a728bfbd452bac260e3a413eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    73c9e2b417fcb2889e75397d189bd74a

    SHA1

    57af6fe4af206fdaf74ea948ad7beef6764bcb19

    SHA256

    438173592191976bbbf567fadcc101878fb151efdca42fde3f83e39dccfbab0d

    SHA512

    74be1d7172cef16b21515c6bac9481de801cdd654ff0acd6bd767161fa3a2ebb16856250b99e424046de90467d24c61a4de8b02d83106fefd8549e86731188a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    351ceadc2525995a61183197881414c0

    SHA1

    660e5a7f5cbafcf2862676024ce5f3f2ed743b7d

    SHA256

    72c5354bd576a03c8a7667e9aafae89c164ab7969eca78ca55ff77169692b0c1

    SHA512

    8c07eb6245a58b2c5dc8f907279c3471ef415c4198550af33c7238beba9dfc1f4900fd8f9ea0428e216b1e14481dd5e0124370a6a06b4882a36e9a4bf4f4bc7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    90b21606d36e7993bc93254c2d331c87

    SHA1

    d54f9c94da52c9a45c4c00039a8a4acd11c47bba

    SHA256

    a2fe71acaccb042a4528dd3bd38ef987f3ca6a0cb616f55c4531a6dbb80fa296

    SHA512

    92cf45eca1c07cf13e30b096dc099cbc1f4930d234309a8f217b990a7ea4533b45bd5717e13dd1ce9afd99fd784a553ba0900860bab8fb869a0fdc0b73980f5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76d9e1387f66a3c5509c9d880d9d74f6

    SHA1

    460c8baa9f4d56d0ebc9715296836de7ad265cdd

    SHA256

    c5475bc34d5f8ef1e1eb1eb4c4d9f49394ebfc4784b5f9ebf926a95783ef8ae7

    SHA512

    dc04ae79bcaa8067d8f9ba607fa254a4cd2d5d88be95e281df07e5278d3a1e0daeeb9a8e0aa1d6d39e9de7df1f88cbc1e761c82d6cc7bc57533ec7255331f159

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9eed76744b7febff6aa58e503fcfdff0

    SHA1

    21071cd4f4661faa9f3a9f00e62d6fb08c509c7e

    SHA256

    0d1ee185ad9c37a681b9ded25b696a0c2ef824aae7e608dbe0556215b73fc48c

    SHA512

    b7987c5067b853caa931e10ddd04804c975a864b6dde080a20efefdffdf039547cca8d8fd6872662141fbedffa1e5c0a718dd0fd1614e3d91ae864b44fcd063d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7bf2bda9a46b157218df5e168aba51e3

    SHA1

    64ffb86a00d3507fea05204f6142cd9b1dbca9cc

    SHA256

    6949a885f60af91a817b90f650c63922aed47d1584afa2f1e0700410163addb7

    SHA512

    853b98d2585c46ca1b186f8175449f6a65f82406fae84e1413e514c3c202441508143ec370ab872811eb3c7a3b41a40dc13d620687b39be61153057a5374c1ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7fbb3d8b36268f69807d8ac195f4a524

    SHA1

    c2aa159e48cc1bc604c1185dfa8effbea3cd21f3

    SHA256

    087b502fa2459b5bc42e38e2d09ea4f542e2036e679c0861784d7c33d29ac1b8

    SHA512

    9523d29339fe6195381c0b17d26920248907c13e8ec55bb20078fca2054eb351031da44eee32cadd3cc074e5939bf9688c19ab2b966a3d77e7919fb99de054bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5846d312caf9eebd816659fc7be6ef5

    SHA1

    d206aad1f0194b5e1d1745efbcda18f46dca5a01

    SHA256

    0355c08aded49fbc0d1965109ba4abb59afac801ce454fda5bd8c71498129785

    SHA512

    d72f6a0fdb427472dbb8ef10b5dc3b926294dbfb79e99fe9c05d345433e96a589ff0c650514d8892b397cdbb2550a1ebecf3c0909c0243aa4f4eee2eb52ba66b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    501a4343fbd15dc4602f21b8fa8ae47b

    SHA1

    121866661e36858ff9ac7004a5281515ed0413d0

    SHA256

    e14a48e73272a32b8086ed1ee08b3b0d68ddd75d23eedaf9de601f4313e74d1d

    SHA512

    56167c1dd957627dd2d0997d09cf77bde67c6284e19cc120fb708f6285184581ab07f3fe7b6fc5b8d48dbbe2f906529cc0dc55c8f16aeb536ca80a1b217b60a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c750c7fdb6676ba83bcbab1d6c2484dc

    SHA1

    0eb5e2c3e7555158681027b677906f1e3d72859e

    SHA256

    49f7ddc6cf27fbf97bd69ad5a2f55e182f46a826c18526f3cc39750e203624ac

    SHA512

    f0ebf269b0bd17cf774276c9d817b4f57807dc25ba57bc0eb608c9c0cef4156321f12e36f8054a89b2ee0ed0694ef66595b54f5e227a2d979102df82c28132fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8883143940fdc61be316389b00455b4

    SHA1

    1a722744fbdf0118c093e2dd912a41163c0d0c86

    SHA256

    eed8f7172f9f8e87dc0578c26ba7df84ade8d8871ae20dfc1bd9fdcaef8c2d0f

    SHA512

    429cd39028349f7106e7063fa3472b33d74c2abf5baff1bfd9b7d6dc459d9204d5c51afdfc82e7ac04b573bc051bb5b2becbd3f9e3d03b455236f5789950a8df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fe737372a1e0e25b11f650bdf9c852f5

    SHA1

    96d173090586f7fe3cabf1b751df6454b880af61

    SHA256

    ba3f8990ae1944248226605fa118998baf670e7179ea18859baac4b3399520a6

    SHA512

    b14c17294e79a4c7ceca2d709ee45a0cc112df14c1bdcb9510cfdeabdafbda490c92cced4e3cf9bd10d8521cb08b2d08dd34ec2594c47b1d2c45700e347718b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    874e15dc74de80438aebbf365c856558

    SHA1

    c09e8ea687dc00becf54e1e2a392a838294647c8

    SHA256

    d3dfb29d76604c2a2af01fe4cf9c4d80683c12a7916716e76d774766f8b2dd9e

    SHA512

    231cb9904bf28d5d1c754fee93ec64b51ce1ba07e1b74c379950efa13850135689ea18f74e0187f6657a2e492daa913a78327bfccca8d56f52622a8e91ef1a3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a6a6204998192e07fb2defb9cfb003d

    SHA1

    05337c60125fb19f138d82630106f4eafb2d3db4

    SHA256

    7ff239bcc2243f1d54e9bbb9dcbf44a249b6fbe071bf4c47f0d648d12d42e08d

    SHA512

    495deebd087214e4d479bd98550a408116929c0d77b0b189f67717c024e96fdacd9215e43791fabef4827afa25110217fbae27ab858d8e7e483ff3f90fb0d072

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2ee817f1e748146d021bf4ad7f018d3

    SHA1

    594481a6bcba523bca343088141e17cd2a602900

    SHA256

    ff642357ad3e470d7c27671c9a956f04ae002d2779ef0bd9f8fc7717b62bece3

    SHA512

    41c62313bb462fd872b3d5e24cecdc89db16092d68ce8ebd4bdafe7a7f8066eb72b5d6fa1dedcf29167579c25b780def52fe2d0324871ff5ad9540e70d815bef

  • C:\Users\Admin\AppData\Local\Temp\CabEF60.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarEFD1.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b