Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    08/09/2024, 14:42

General

  • Target

    d49793248b0a8e2009fcd3b5078ab4d3_JaffaCakes118.html

  • Size

    61KB

  • MD5

    d49793248b0a8e2009fcd3b5078ab4d3

  • SHA1

    bd764cb73c66dbccab1a4f2caa864c27212678cc

  • SHA256

    d3de960d9c419df7d64c62be2e99c6b8b047f7291de38c3ab6079f95be4c9e36

  • SHA512

    3713f0ee648b2d18bbb4caad3bce95fbbfefae59af5d7a86987fe8362a9059ee942687a6d7d4ed0cd58643c62452aaa398952d7d6d931147e6df9fdc447b6959

  • SSDEEP

    1536:qHPu3i9BbO35h4o0bgELCr93YXjGQPyUp9h8wOwOcS0K2+V6JTap38Un78+fgXkV:qHPu3i9BbO35h4o0bgELCr93YXjGQPy/

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d49793248b0a8e2009fcd3b5078ab4d3_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2188
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2188 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2804

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e9415ce3c8cd66d950fa403e07f91d7

    SHA1

    f25bbb8e37ad117173ceb3cf18720c87ef1f8e78

    SHA256

    b956eb9ad130f48192fe74ee288273000a77a675fa8d5041b13ae6db4d2a00f2

    SHA512

    dc5ed5016eca2808d692e3f7b16b0ed1216205bc06dc979120a909f12c0da1ff54f527f4958b80a871689a772160014457a121c34b620fed23761b937219d10e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c84af09e154177e8393a8ac88a145b00

    SHA1

    1937044a5a2558f95b3973f22a02c3316776a2cb

    SHA256

    71bc7b37e0c4b9a478179dfba78b92a8e27e3ea780682c1dda43486900968198

    SHA512

    b5970b0215443a659e47f86c0ba370043456927d8f2e0a1e3c98943ea20aa3dc7e0892362d7ed212d7475460c65c1d2cc1b1949dae8a38fcbdfa0c237a82c6d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cbe45d2ffd3c8c8a077b1c1cabcd9dc6

    SHA1

    3dc35b9af91df2f3df1e1d11359e0e898e973fb2

    SHA256

    28c38a67ba49b8495ba4e9b4932ae4a15f853d4d4bba387709503f8741ead17b

    SHA512

    481942e2746e7959a0b883c7a6a193561cbab904f610d83efed0a1b300d421366d69a041e5d8fc1a6dc24c8216fd5e7f6b0c9231b1d81cdae79e197782cf5bfd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    825e106aec3f329fbd101cfc69ec4664

    SHA1

    5d9f813a4f28861eb9aab6f629d20e696afe56ce

    SHA256

    d3cfcda411774623c41f3c3e570eeb6522f7512b9b8678ae9a7f70c61b087c88

    SHA512

    6e0a814b40652cae7541b7dc7ecce61ae41db0baf35b11fe8e4ca243492a2f9675f940c74054ec052530c577125c353d2e5f5b4da44aa2fe2428f14914e58e4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d3871f6d3007bb2c469f2d98fec612f

    SHA1

    0c5fce874bea0272986aae31108c0e4eef5f88aa

    SHA256

    f0ba6788ee2d0fb26629b80f53771ea7d23a698840e52473520d2d766c86c3cf

    SHA512

    ee8a92c4278ba8cf7ce75e55781e3787150d4cca71518c3ebd7da79cfeedaa0ed40d48880e154b71bf4aad28bd0723981004c4f4c4b3c6f748d3f2496c37199c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa462236aaa08b7543805843f55d66cf

    SHA1

    8e56fc452b53758ae378d61653bad55fd569a6df

    SHA256

    acb741b25f8e7f678fd400ab834ec1d507f2f1129a0b829d078e11b47a9d27d6

    SHA512

    41108983babd3b36cc3733a23931c9e9910f34442be0ed66afcf103d6d84348b810887e1c243d936fa13b56658d86b48fa3a77022435e47317e2e8eb6689dde6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5da079dabbdf4a79d79eeec68d42b35a

    SHA1

    482bc25b48c01e72643dd1d9a15ea77b7a4c89fc

    SHA256

    42c30b3bdcfc4bdec7dd87f55dc3f256e268ea12e35f3d26cd100a562d6d64a1

    SHA512

    98320e65080efa4461847d8e1e9e9890541d7b0e5529514414265e7260b7de575ddafdffa8169653e5fe5af17ea8ce1f05947f21752ab1424b333549e8eeac90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7568ea67e711d82e9bae153267d97332

    SHA1

    479fd07f75528059001b142ff6f4cc1b29806b3d

    SHA256

    44eba6b9488dc3475fff0d062e867fb0eddf4c9bd32f63fd51cc7a38335ef679

    SHA512

    3a2295437703cc073a41400530fcfcbe9d8ca917963008f3cdca70bee3cf33dd619290456a02456e7d816be9af4064be5a0bd451465a6f447cd8c2a03854cb45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    51d3d3693ef34c5874d7e6aa646becbc

    SHA1

    8eaa4001024defb398ac7149a4deb2ca55894f6f

    SHA256

    f1061196da81c7e030f8a95430c965c78cf5f2130839080ea00ea0d29a25d3d3

    SHA512

    796de15dd748727f11cc25e4090563dd4bbd47975b0aa2759e82ab62e6a16c75c56e490b9e2a879d32ee756a8c011c94d6fcb18d06d271efc6fa073df735d386

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57f6102ce742a83d8f88b61f00800717

    SHA1

    5bce5056f0a9c951d24d05c6412c6ddd1d7f25a8

    SHA256

    e1660a6d4d8b8881d1c6ecf5a4f73f4e8f2d6648ffaae0f88fac759a3e485888

    SHA512

    688560d3ca3ade6196ec5999631c7151c217f5b207ac3090fc25ade9de9ad4c19d99d7a2efe99c12571a07bd3dab085de0ede09093b025f43c33c0536522e83b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19fcece34c2c85593664efadb0830a1b

    SHA1

    c7925c62bebf555b0c8cd43026af1f3a980e5aa6

    SHA256

    0aa9fbfd97f0955b98826172cc112dba2f349b62852d9f29395ac28385f30246

    SHA512

    8459d993591799abce3899098cbdb130fdddedf4bcb497377e456e9b3bf7e19c103841689997862321173253e2b14f1e52c0aaf5e2b581e6c49a9dda67ccb108

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c2fa8e17c49026893e99d1eb440f384

    SHA1

    3211fdb9f0beb4b688011e15306147f15630fb4c

    SHA256

    0c372a2c975d2ac436084cb792bc2621ba8db5c2169a2a30eaf345f142e78c9d

    SHA512

    64a8fe7e6bf7aa40640fdb70c6bb14392f621f2c3258bbd4d4e641809c232a573ff57ca82b5a1e8cde7b90bfdb9f0cd0ec2ce01d8aac0f3b4dadd678522d6f63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c659f33e78465e8df68afaa83c942f54

    SHA1

    8427bbd9cf5d5c9cc7c395b7b57b37b17256ab74

    SHA256

    285e2be2d33060d42a963f3a11fa5e4ec3cd48c28e1e8295396e9ee5d93e303c

    SHA512

    9a0539cb8b6e5cc947020d0c9bd6ab4305b351f1f7e6390cb210e105782cc0abeafe077a8480fa2f2e676635ad4924715cc191fc381ad99ecd4662f3053657bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8518a5b2f7269c688dedef7c7420d688

    SHA1

    10703766919da9deb3281c033b95f8586f50dcea

    SHA256

    4f8b0965f275375cc8e2613d9854645c046798662dfa84f20b7c7569db32bcbf

    SHA512

    af1b52e933cfca9596949f8197be1f2a3e718c3cdc22226ebb876d6821b89e423e287d641b0cc0cc476ca23c5556923b4b0d136a94d34aaa5cd7a061b1c2364b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1cf4e8db8c95dc8b51939627fd37cc7

    SHA1

    9db9a4d313a1178d33160a874a5ca98766b582e3

    SHA256

    e9641b22301292bc5b21d538c6510329ae505e1fdc12f0ced02793d4a7135ec2

    SHA512

    320cb5072d5a34475f0f41bb8fcb68e57db69628e09e28393f1f6d0b7f69f31b99ab5f012855329552a9cda97665a2d123ab627c2e7150e8b92376b74641fec3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f2d90e12796779c641aea90083c3988

    SHA1

    8d2df60ffc637cc3cc3cc445a447a3e2f58bcf38

    SHA256

    9df5706725d3e9dd7ed1b187c21715eeb4fab711d1f4a3ab034705d24bd25890

    SHA512

    835dfb296a3099caebc9aa3865e55305c21ae25b90206786b47b89c7d0ca08ef3aa8d938f86462c7d54a7f45de3abd8eeb4fa8f8ec58b94ae64e61e18cf66014

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    23a981c8e3bd9fe390fce050f4499e8b

    SHA1

    40053f075e2c21d7eaa546cdc82f61cb4ead9d5f

    SHA256

    b2e6b2fd7c886e1c0dd01c3441bb0c6eb0656637aedc79de06f6a39e57df8039

    SHA512

    068cc347111c22e7a22ba3931462b324832dc9b6b4612878c5b6349ee5d8dddd2c52fa2e4abdeb2e78beae5a8fbcf21b7d20b56a5a3c64b2eaa34d6a2c160bd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6c2d7c381b08f28c2e9913b2c72e6d1

    SHA1

    7324674b62aa6108c05d3535c8c7cf48bc50523b

    SHA256

    99abfd240df08e95cb0cc4874780602aa4f36fac50f61749e14bd7e59e8a917f

    SHA512

    5264fb96578ee0c04a1f4b9aff4b010b378c6498d3d06ba15b9c91507a00840faefe941b90287f5b01aadebda23c889785b499b98aaee138c80174fff0e3e99b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    895daa69a1cc745ba560e29bbc91fd52

    SHA1

    39cabb98fb8d825767c890d72958b84539f24650

    SHA256

    ee3fcc34f9641bc80ea248ecbbbcc937de515f5cd49a850cec2d71844c0a0a3a

    SHA512

    61bd912f41da0919004185b07a31f788941d61a642b2236310d3c8a855ba1b8c5afc0e2d60464ed848107ce3af01091931059fb3b498c4949341a196a4052252

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22467866fd4e1c2f4c543b0f929204ad

    SHA1

    69dfa2a4e022b54df25ddf85b8456869f8fda2fa

    SHA256

    1d2361d68b26ed57362431a24e7f04cb59c70a28730c73120f840046d21d6838

    SHA512

    ae8706a91a0e13c8d124013ca92e8cbba934a3f54eebb8a90ac4edd4cf46b57e267b18ca8ac71fabfc35442ff2b6fb5ad962c7dd3558755bc7837c2c69cec329

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a187ae265d049f127cd92b5fd5ec6d5b

    SHA1

    9bd74d83e1c60cff170759578fa4b1b774d0c04f

    SHA256

    0eddd5bc0240be6ec634bebea81dfefd05f5c47f7f0bb77b53d5f449c6055269

    SHA512

    62df10a5c97bfd6cddc7d7fefa6324851585427c115e080054ec8f57fca7b9d641e53006d31901ebd501b184dfb74be97d2fcebac5d89968d04cc25115ed50e5

  • C:\Users\Admin\AppData\Local\Temp\Cab82E.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar82F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b