Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    08/09/2024, 17:07

General

  • Target

    d4db67fb55b54dd969c6cbe4ee9b1bb4_JaffaCakes118.html

  • Size

    39KB

  • MD5

    d4db67fb55b54dd969c6cbe4ee9b1bb4

  • SHA1

    6c36a73bac092a7e704d4f7e7f565e1cd1631781

  • SHA256

    df1bbd9b19195e19b0a6002e65fa7957fbc828f4c9293378f1bab24033c21ab9

  • SHA512

    4ef2c0afb9a07a70d3f95d0e2e179828bc10bc446dcc9a6f15b3bdf135a944bfa3494131027bb9a15a03445bb87b2bcc19d146deb82953ca616df9101c46864e

  • SSDEEP

    768:HBT0EipBvvoGREPzZjib7O4J1NzmWtdHOa6ZdkLofb:hTupBvvoGREFjib7Os1NzjElZL

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d4db67fb55b54dd969c6cbe4ee9b1bb4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2384
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2384 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2052

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    d4b4535025ce328126a12102fcdbaa62

    SHA1

    e84e7884e629c888912916f066efc8d8cf4975de

    SHA256

    7d3ce833df55e3cef2e6f5d5f3aee70dcd64806867bca26e1aa26c4ed18acbe4

    SHA512

    388b66f76afe3d3b10ae9e26e3eaa287cdbedce34c7dc0e87fde4a17bbc88bc614eff2efbba80381a3583dfb5de4b25762b2ce57f6a1c3f1702c0cacd39706af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    efb0c3eb1cce00b38fddd0e6750ac86b

    SHA1

    f0d2f6db4c1f4d281fb8cc1202fd4ad28bf80f2b

    SHA256

    5c781a7348fdf03331326b27f4516f3f5a9d787dc922f4ba5673d03c40df9f23

    SHA512

    81a4cc5648054d4c39922d935e695664dc6a400ce5c709a0de97fca7291452295c8d94ef9c33d4194567bb9a9bd47072a751a8bab3a91afd79fd2bcb944153b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    82a27a4ec4075c05ecd8194f08911146

    SHA1

    b7680e94355e3fc40a09c00798d9eeb0977a2579

    SHA256

    c50637462054df59cbe36faddd1ef29e15d35fc4e554c67da474cc283b8d189a

    SHA512

    4fa052d3bc3dd830d7a914779c36256a456c255a8440bfba10ded89c52674d47373258bf93cdbf7c29541cc5b0f9200de22a640e3d246d3d6381dc9b0237debe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a7aea48afb4d703d38efff90d0cb4921

    SHA1

    a685c65f8cafc4e7da53c04c0e9761eb96a8c9d8

    SHA256

    9880c724ee026b48789bfa16ca410d943a01e5135c01fbf109e80e4c88736c5b

    SHA512

    ca30f2e7b2300643a0628501e4905fac498826f4142bdd52bdcf837048c2c81e50e1192d7a338402406b89427299c9d491c11755dd2483d08b131d7b27e590bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4f1d9b44090a6949906aa565971750bb

    SHA1

    255b70ee7035f146705e19ec439ab0645913f0fa

    SHA256

    89197c86903dcd609de6bfcb3f5183c19e6cf5e48cd1755146d782c7d57af5f6

    SHA512

    a46141ae0622715f61fdb94c9868eb6d1875a725e3c1a7502e8d7e10d67bab9ef08b815daa046cbea694cd65ae49ec8be7d7df706ea6206c8b7da7d8d3e4f1e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf88fd8507783d834b14320f9c4b9892

    SHA1

    b4de56c0822621185ce0b2a77cb54e13be430322

    SHA256

    2d3f6a7947790da7816a197ff7640be38f3beae52da9e679b2cb93574a64f681

    SHA512

    7cb0c01e826191cb66517135c371a211b8bdb08f52f00969f429e2803b02186cfd919578a03c530146e06b686bfa1b5fee1e9dc75e8f98e80ce6b8902a563442

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    968daeadf7f4b24b8259a5c6c5d548fa

    SHA1

    c87720e665b1d2cc141e1e8705f81521e9e2b256

    SHA256

    a19b42f5ea989a756f07cbcce711bb0e659c00abe49df4d5ba2bb35c1b3e1533

    SHA512

    dcf4f62f025fbb9bf27b831371e701f23aa26692764ba56cb8c638a12280673923166a3dda78a55d0dcf38bc423e0465f4b21503a1eabe694253929d261613cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19adda2b4d2acb1a2c56d9fae2df1ef4

    SHA1

    d37b1f542619679dfb90ac507d159efdaff4d339

    SHA256

    dad627b6bc6f831d5467eab8bd2fcafa6ea73260e41573062163a2851c8df398

    SHA512

    36911c1653ad1793082bff31f0397db11e48b91091498abe487f975cb8605d213847a60b7377d2340af18672a3a88ca7fe0cd51709cc730520757836c6f9f2ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    453ced0abda2a6a2ba097a13c7ce8684

    SHA1

    9e50301433dddf5eb28d72aeb64770db7d365d60

    SHA256

    03051399be37020a19178c9adfb2d5281908768e79633d2d484f79c71a6daf5a

    SHA512

    80b5567c5273889e4ec9807ea25a0f24f1769af0331550becee6886469dddb617f576630a96bd686fe181587f618e17d311f3d054f32d58be7e562b206fe081d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b8d6b1a3fcf0d9edbf705f1af2b91db1

    SHA1

    65ecd9a42f658864050c26eebfdd90771812b748

    SHA256

    2eb063d0d808803577ee0d4ea1d1385c48dc79dcfc78e89c9dad740dd212f376

    SHA512

    26841bf27ca13cd0b0d65a44c925acc36654dcf0f391eef80c321b7e38e6e381bca97eb6019fa48ee57a4d36571f26c1d7b8f8d78a21d04c6c607f1e211176cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    beea45312541c683d7f53b4c062a78cd

    SHA1

    31c13db255a487e9f0b2c95c99814343705d99a7

    SHA256

    87c7d9c871fba3d85cb788639392c7299e2296f3e7e0df26861a7ce2af835c38

    SHA512

    a056b80bf977677e15c987b59892f8acda84dd046f4a232f2e91e589bd8539136781321793a6d1b90bc9325346212c71edb5fc75bdbe8c46dd3e6e694924f9ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1ba926683fef39f7b93eb75d2a66e56

    SHA1

    2e429f3f577e91afcc8f52df40911c5671c4d4c6

    SHA256

    bbb7aebe6f47d493d2b1e8f5f5b4d4d3b1a90bd3809011c5a76c2f99f52dfd42

    SHA512

    288af297d0440d5813462bd4fb95a14e049e78de7b504dac0315171f022b7af59c3ee7ea0d186eb3b2cab501c67f91767a59f2b7beb77c5d555c417ad0fa4519

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78c0d07a108f6f9c6038d3d276ed9434

    SHA1

    68f35a083c02328731cf7a0d5cad4dd0c65c33d9

    SHA256

    626a88aad70fb2f48eeb9ba2c0eff99b447b15ea655e7da7d4508b53855d8f37

    SHA512

    4b15d7883f6de4d84f16f56917c19e17a9f1d889d992d0c8792a0f58fafe3199dc917ffcfaf8dc33bfc4ecf08c7a581312f5f9a7148bcd05c474e7d9a8632ee1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec88579ad9b6636372976efcf730083f

    SHA1

    a261e381f6daf4edd42f5caab8cacc18a82c7209

    SHA256

    93286b0e7ea2086bd1e9a160d7d7d16740d155db5c3771286f1d9f35bd560d89

    SHA512

    c5312057cd3a970716538148bec7338ffb86660ef864d26d6889ad62eec7c65dfeddb6441f7bacdb58e6d2cae9e6698420db384c664ee85c2b37a43a3fe6ec8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    01533485cf52f7cc13fc898853d631d4

    SHA1

    a6d84e2c67bb3b3cbd3f3aeb871d24825e2aaa0c

    SHA256

    3a4e7eccf57f4771edc338687cf3084557dd6adaead4fd15d1581c92911fb03e

    SHA512

    fdc7861798d3db0048d6025e723d7506b62fc9fd555c0206dc29112fa3c60adce8300fb86504454f289a392e2a8f0cbe7963f647f353b5b355573b3e078d9104

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a6acc9a1c8e8c2ee094f407daa2d9ae

    SHA1

    d8102a9d12b35b85f00757d82b9850ac57ba794b

    SHA256

    d60ed6d2e6305033b004c9c936951a0fd5650f7fd51e0c890ea0f9edb61275ca

    SHA512

    8e4c4ad2dd61dc79c682384fdb1bbaabc3ee6fec41489ba22b4560e07cf1893ae0b7d77ad81bcdb99daf07a064a962ed1901a13b3d47cf5630469cc3e42187a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    585cfbcf6534aa6fe19cc84fd4d0c788

    SHA1

    30ea39ec9587675aebd6c91f71c1ab1a0f37b14e

    SHA256

    a46d5ec3c19c2fc18a5bc7f7f0f8159572259757eb4bb99678168013b9bbafa2

    SHA512

    614dd5321fdd75d43dff071ae93e7a4eb2402f6bd14f7d578edd39fe918575149aa2c3bd7252e75454f18ed0399b029cd93a0bc892a776f8c065a6263f4a3e36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a33e7a5084ab4cad072e5a766437402a

    SHA1

    59117e2e45329d7dc2033136c80ca0f592fc0921

    SHA256

    cd6fe495c916efd2324578bd132f1a1af46373a63cbcaeb7ef7664996106575b

    SHA512

    74ec1379358e26980efa30a137051d61845bbb37c6a5bbc12c675bfc54da7ace19417fcc1d351cacd1eced6f9fd5b8b8f3531c3c9e4b66d6945049be170510e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2bec8a885d9854d309d29de08a89785d

    SHA1

    b3b3e7151adf4b1f66ddccf1f7e4e7d72bac5a28

    SHA256

    30a98b9750ebb66945554aa17c31bb90b536085ca90ea198c522eaf4adf837e0

    SHA512

    b276ba959171264034c7e7a376e112a3ef98f235d7668d83cadb9cd6578b6229943f7a65a8c5113fdd4b73f9b462b21f15e6aa77a2e660aa9f11a93ad0e4a896

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9eb5f86accaf8a66521e17a184c6c44c

    SHA1

    8f5b4e5b57414a8c8a24fff3c8154a633db9573d

    SHA256

    d461001456874cafd169c1290a65dd0a7b68d76e59b446ebf2cde365ead92102

    SHA512

    d84fd292eedb48b4e1e2f0c4566b7c6f1ff4b9f4f118a4fac77c0099f44defb458542349c1d16c2fa7b73839921988f80e08bd524a9935b695a1a74ea9425d15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e42c010688b5648a646de57badd0114a

    SHA1

    a35a0294c7f6febf07ca89221c84f308c7446c8b

    SHA256

    770aa98e8f0068ddc25f06f509f090a2d7222432d8beb95f6a1936107e5b2e1c

    SHA512

    6ea1825940c69ba6cf0963275ddfb206c81d59685e1978cb9a4d368644148df01800be4a376ba9f96789d2d91c74c26a4e10fbb95314fdee517ff334b783c4b9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AS91FDNI\plusone[1].js

    Filesize

    63KB

    MD5

    65d165a4d38bfc0c83b38d98e488f063

    SHA1

    1c4ed17c5598a07358f88018a4872aa37ae8bc07

    SHA256

    b1320e0dda0858c87971f7baa0d53063ad2a429d232fd06b0067bda8b9eeb0ec

    SHA512

    abf4c755d88193e7e05398b6f934fc561d8e2adbee7d2170af399e145e54a4a8a93988e4af4e28d6240c0bd1bda7035ae97f67a85a471088820baae8d89f3d41

  • C:\Users\Admin\AppData\Local\Temp\Cab58F.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar590.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b