Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    07/09/2024, 18:12

General

  • Target

    d28bf26fe103f4125ff990a3ace1e7f3_JaffaCakes118.html

  • Size

    34KB

  • MD5

    d28bf26fe103f4125ff990a3ace1e7f3

  • SHA1

    97c1dd64a39881b2dbebf196ecce19593aabb0b7

  • SHA256

    28bf2dc00c33a37780b2420262763748d96d6c03bc8c9fbec9994fbcbc3c9f99

  • SHA512

    ab4bee064e406895007e374164b15c4c90743ed9da47b3d618f013a3862d9a0c8a4ef5a5e97d06d8e65fd524029fad614de8f485eed3c63fde7bd4ee8ec5df5e

  • SSDEEP

    192:uwj7b5n7xinQjxn5Q/EnQienNnHnQOkEntkenQTbndnQOg+cwqYrcwqYHcwqYQvm:rQ/0ynB5vhxYVvoOa3Fq

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d28bf26fe103f4125ff990a3ace1e7f3_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1908
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1908 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3044

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    65a9e6a5821df006c629247b3863cf4d

    SHA1

    0d7e9c831eb33ed0e88f0e83951e6dba9a5dc774

    SHA256

    c863f18d01147f2dfd1ce3ea1998a23cf8a68fd0a81a4c8e567af3251148bb82

    SHA512

    096a0e4b7b6f0f887e5b9f80ffebb1c255d849cf980594042610a66e300a4c5f4d9f0db7c0f9e2e9ea23bd55746a28e387ac296a31020aead458520171c35f45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4fb6df531d1a1d4d286459bfbd56b95e

    SHA1

    ee141821c047ccc811b800125b9f3d6d4bc0c9ce

    SHA256

    a38e044916064d83c1f4ae29892ccfd88d50b71dfbdd244389f3c94ec54675c6

    SHA512

    4593324cc4b1f62ff598ce9584a84fe2b66f98c512cbbd230ac5be7841abd030b52bb542a4895902c9097213b898e9da27e5078ea80001bd383caa6f56e60c6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f82139ee317fdaa650d6cdb4a133a6ef

    SHA1

    eaf9736f840da2b79fd2e12635e36dc14a682684

    SHA256

    4923af248b3ff133170b0d3c915f7466a5c6b8134c2d4c4b505d11ac8de71bfa

    SHA512

    84e7cf814b88fd4eea518f1f962c5bf68191daaa31f3d8d64216e5f5266bd2d6e7cd6aaa6d2cc61b681dd587d67b595bd83342b79919d7373c6614e326a82dbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7953aacdb6b93aa40f41dbbb42b1ffee

    SHA1

    e29e1169a84c82ef5be6b63d79b370bb16831114

    SHA256

    42178420418433ce743db24ac40b04ce43d080ae115cd1a848d141b5869158c3

    SHA512

    8c433acbca22424f93cadf659f81d103cfaa367d33664d4642e24461579f0792ea49f685668b02e44935b5caaefead7bc45f9a56ecbb99a6839c8ae10a167610

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05b2ab29b8c64352d4e1efff4e741b6d

    SHA1

    7a7c110bc4eb30572ec8d8d933d82c618f9199a8

    SHA256

    eb3e4e74f8a9e3e8726243d58a09a43575511271df3a47920203f316ee53fb97

    SHA512

    4085fbc8d6873ed72d26c11b609ed68410abb3d90c67688a02ddbdefbb59b083b757a7272e2a3bf82f7a37460506d13dad9d1c58756d6aa6b212151777c6bb32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3aed436aaa6e744a9fe4d8d45cf21ac5

    SHA1

    8833fea03698c4a52f89d827f88e8912aab015d8

    SHA256

    7700349150e69da238447745a02a65cffe7a31b97c19673f76c26bf548ddb110

    SHA512

    9d86b7eb40675eb5a8c9b695fdc4061c0c35f650098d532649fec47973e5ca805fc762a88ddfdf6b1dd3a92fe673ca45d22cc004bfa69b3f93f03ba2c610ca58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85bd0b5910d943498d2e222bd93b1b11

    SHA1

    a81a2505eba0ccd6f26fa20acc04071f38c0ab8d

    SHA256

    b070246142a8bb68ab71378c16dab47b26db0b364d9dba1667c417eb0fdd52d5

    SHA512

    104a3ae8ac3ea66e5833eb9423df9402182697bbf80592a967d6e1b92fab451d01cce8c3e2b725b2e4d5f92ec5dbcd6f9fe2e02940910337776ea8efcdb52c4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26850c27853be0dc19be05b76dc57f87

    SHA1

    a012ebc6b27b7c80229d261dbc4aa3d588ac2d30

    SHA256

    1b5f99fae54f21b084e9aa55fab8dc5d65540ea4a765706282d88a939141721d

    SHA512

    77bdc9462d812734716651586cac8f55d67ba6afa5bbab5c00c27ef06c997de0e246f40f369c9eda98c16b38b8b2a7bebbddeb4c6d0b3876243bcd0b30f19c5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa5a557ac6aae2808913122c073e1f55

    SHA1

    9f386cc0d21f24b2d68eb19495510cf92d8579cc

    SHA256

    a8e4354a701399fba649fbb83d82e7c070d187df62b72f52c4e3ed24d4026335

    SHA512

    7ab898c2cd509007258b5d0c3895073d3eab0ce03ad98af2dc110990cbdcb68598565a6dfcef471f9c91d4c3bc41e51bdd1dfc3f36ba9ff57aac0706f356bdd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7045487b5ac2195e46144de9e15ff128

    SHA1

    47717e3dca139d10bf0fde4023c3ab71429f03ab

    SHA256

    6e2515d7792dea4baeb5570f4df4985e366b0e1d9fac38ca8f6f489651a3cc27

    SHA512

    3256aa461de0164be9d2408fb65624af25a8b8134b3d4f96283a210822e9761cfcacc0eb8271bd2bd3789f3c31c19788f217e5fc3a2eebf7d36e078ff242f190

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a632fa398f54e9b7b0866181389f0f5a

    SHA1

    8b42d9751114f80c54a2ba2e937997b4302f641e

    SHA256

    75bfa3e31b9e6b6e1657fd3b74af9a2f0c0c717af7b0c03893ae7e9cb93a1784

    SHA512

    6fd81953a23d70d77c58c17f0fdd61ad775a78e4b34eb81a38e231e93ba08faa20f02991631ca848eb3ef64c65fb82847d32631e3a635949a7f1e0b83ecb9713

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dad28b9ac74eddf75bfdd2f4b415634a

    SHA1

    1ca9136b625eb4ceccc50938aaa53f34dfab6fdf

    SHA256

    b741ad92745a7f7fe1d072183fa2cee5b07377e58176d174a6f337e324348b89

    SHA512

    de9beba8c87f839d444df7f983718f43f2bf0945882d8f54a7bf320bf5f80b37788f35c496e7db7a6dbe9dfd59653ad89868ec622a9914fb7f044467e0f45c86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc0b198466b132cba887edd4508b74ec

    SHA1

    be67bd73ece4da92f06fff4d8ed0ec17c672a3dc

    SHA256

    82f2735746834356daecc4672eb748568de7aedefa88742582985eb5f164602e

    SHA512

    c2686c92509b8af78ac92df05484804a45b54581f16f0a219c6a835712facfc1718178b78f30dc174d05edd94931a27f5737271f7868611307e240a49dfeea91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    29326daa54ab178195d698a2b4b18f11

    SHA1

    d094df4801f3ec14c41c3a46229684b73b9da40b

    SHA256

    053d7db2740442afaa94c748e8190bf2218c2c07dfb9e130acff75ccd9c45a17

    SHA512

    f4b82d795b17134835a2e10cf9aa81447b72a0a8e964d51edc4d1f502b94d32d006d2cb681131f291e3e84a3b1a43d4fec2012229c918c5eb0da9872c93430e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec765ea3572dfb53a702b20450de2478

    SHA1

    4473117d0cb1b846ef235d1c6e57a86a0237cbad

    SHA256

    98f721a4e9fd21d9394b1634ce0d75aa95467f357cea15466ef18a293f87e7ce

    SHA512

    3e4cf0cdcad9cc068af7a9cd8ad4730d94e306a6a39ebf5bb22e8b298a1078966a9b6634214cdfbb4d7da4a7142012e666144f6e23ca837f312853ef96ff0f0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba89c7fdeb1872ee934158674ac6f7b6

    SHA1

    75a0e46f9f50135e3806e3e848e3b21b5778abf8

    SHA256

    4ade51b052d118852c472ee44dcf8db7c11d7d13063125770d7e393ef8d910d2

    SHA512

    48f9e9aede8130d3ceefabed930cb3dd43689aa210555424a4237aeb3bcb26360f6c6b67c0f54ef6ad815abfd018f6e05d52d1cf8016cf44388754afd1f2c523

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41904230693298138f0876daaff8d164

    SHA1

    74314ee0919172430d8849e52c6d82056f3983d1

    SHA256

    4ca1facf7f0ac79802a842662a54d7ee096493e3e109606fc3118322b0127cc5

    SHA512

    7bd3b6fc7f92c79d36526de39d266cb797201d0884e4792940e0a0fe1199468a2346d1ffa81a9228f65564456b21e4b1a768b96834b74e2b1a7e55ab7df72f7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    298934a46b5745e2a66c138c86fce139

    SHA1

    4061f780f3af813fd440104d242c19dfc8ecd104

    SHA256

    b6cf4631870d5d4a7b0ea1a4f73d67b845e159ca18842fd38ea88db2be6ea97b

    SHA512

    883a9554a0be47b2fd97f7293b43ca8bbcac5c81689d889baa0c18b0827bc1e98fd74d61df6eb8f3129b3996813f3159b0056bd3add300b1567ddd64ef94c935

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f21cad5a604d2bee36a2701df68d8cd7

    SHA1

    43e229ca9c84a0f04a9097b93949b3edcad32abc

    SHA256

    530430c97a64581f20cc4219f557723cf1837a0fd509d21aa5135f607565a2bb

    SHA512

    416b452ad73c65710eb9b7b7bc73b4eba5dea80fa7a2e54c422b7f8be12025f20a1cfd2cd4f46e6e64899f9b723ecd070fd5dab652a250d063e5ad1c4d7ddfc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dcedb0833a07a38e4303a3b0c64dc003

    SHA1

    649e9a36a50be0faa5df5571e30871fd65fd592e

    SHA256

    03fa9cb3e739d626cba934a80e5389e811b34949bf59985f50bd5f8bbd054e49

    SHA512

    f876106b5dbbfc24a1114ed51f799bf42b3730c7af8fd9b431bd91c222ae368d603d890935e6fdf3a653d0d05c5815646b3fbcf5de2945203206d8d5c7d8b024

  • C:\Users\Admin\AppData\Local\Temp\CabD107.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD178.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b