Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    128s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09/09/2024, 04:45

General

  • Target

    d5ac4aabbe3a3a0d527440396bed7a62_JaffaCakes118.html

  • Size

    54KB

  • MD5

    d5ac4aabbe3a3a0d527440396bed7a62

  • SHA1

    9eecb1c8b9e25aa86af70b1d8b9bad0a0fd765eb

  • SHA256

    95cf4320412b5928664701c420ba17c87c277746d5eaed4bd6551d241a40b01b

  • SHA512

    63f0494a7924dabe7062dfdec1fe6dba163ffac5aea7b02c25749dd3437c44e1ab8406b25a02481fa782826f9e664e2cf99df2aff757b9f96537231c1dc3a077

  • SSDEEP

    1536:NGC3HuBnMKfHAVfK87fGEemfjgVfzB5Vfdb+fcaDfyT/ffBBk6fUaXf5SgfTTMMw:NP3HuFVfsfemgr0gXqn2HBpj8

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d5ac4aabbe3a3a0d527440396bed7a62_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2892
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2892 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2736

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    859f65c5456b0ae474b2921c54060101

    SHA1

    443ba70cef1b70d38ee86860940ca6c66e4bfb05

    SHA256

    4a09e74d00dc9d28eb173448cb255eb66206428b866025a7eb30e2d69f5d3a1a

    SHA512

    61d0a9bd6985a63a45e6e2e3eba70c3c36e70cba150d428379d57c9d80ab5cd7c92a6c51c73b6e18706cfdde90d04433f2dfa75e33f9a168529a1f6ac765139f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    128bdd5235e846984e8737c83004bed1

    SHA1

    85a1d1ac16783fa11caeb3db27063103f7b28964

    SHA256

    4f0590e794980a3c765a0537ef549a3a51a1808577a8113756b2e99bf10c85f6

    SHA512

    b0ac29ac8ae139ea355464c21ad82c32b1514cea60775001c812202c4e46038cbb9c8270fe2266c4b56fea969652664d107ce6004b143c819c9c516f44f2e040

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    69ae2a5f719fe909f2521278747e5734

    SHA1

    6a4c8b9b2ba2b6c7f4ee5eef85b789005c047118

    SHA256

    eacce50ef4b03fa59157b87a04137b765caf8450dc0248995f749b8db95a4585

    SHA512

    f6abeb69b1c33ef52732a7fd0b813d969d19370e93ca964c9fc352633d0c8c1418abe1b98280a2f86da9d75364e06b781628047db0700bd80f0710347efbc06d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    855a0fc4085002f22420dc22b15982b7

    SHA1

    9c7d392d461950de4babe85bb487a9d5bd6755a2

    SHA256

    33c6d814255704cac4933b59f8a4940a8962bf1d69a82b7c5ed2e12c417b57c1

    SHA512

    1bcd40217b28b0c6bb1043bc32160cbb04e2db6405a9b32974b75c3b3be8636a1b378e95878fcc2244ed7bb919cacdb14f5764bf0ed70f878b61e7922115ce0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3933fc14fed4710ee900110e7c522b97

    SHA1

    f8a81167d45e3c4e0c927cbab027ecef6142aa91

    SHA256

    6e90a5fc8cb7c45d3ffe370fa951407f8257aaa653dafab87632af510dbc5625

    SHA512

    3c00743fbcfa1d379423cebbfc47cf4e37b3b029ae99ed99b2e30d6409b1513b4318093a10c6ca02401c5d412fb485fa14f602d1e9def2b93c412872c29cdfcb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba45e2b8f2d8346c62f108e1b9480d7a

    SHA1

    1daaf2cf25a61ad828286020bf48a7c52d2adff5

    SHA256

    6d0354def525d97a9f795bf024a108f0e5aea3ba3ceedc557b55a99a9bb9c879

    SHA512

    4f736bc397deb92dd81350c5a1aa01dcda63d1655ae8a20083fbc92781d11a94240f61d99afdbf496061adfbd953367f2c488535e89ef2da28cb14d77832aa8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    36169c1ed5ea7b72f7a5eb0408798767

    SHA1

    d0c257bf6f845050aa3b80445201dddfad182736

    SHA256

    b07082714301c8c3dfc599f00e26c4ca318e48d4ae4af603d735c0abef78fd9c

    SHA512

    c5470cec35891cb486631bdfcaa9e7409d2c0190780eca6944f9715da21f43cbd04f08dcdb6d70d3d7ba64194e5a07bde053d342a4e1615d045aeee5d98ea326

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c6344f854ddf48b137b690ec7b86b36d

    SHA1

    6bf653d4df51bfd1ff4008b5e37a35df32bf12a5

    SHA256

    d4fffb2616d53392ff03be47e28559b563de3dce2a2f1ef4eb1227f0eb69d5f7

    SHA512

    a621e2f996ee420326680fcf1c741eb54c4396a601802e3e7d4c38ab844a66cacedbc24976636477f34493f8d8315918e226c3f8d663ef06b9eb3fb502d55f75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    15cf25bcf6e2b1d47b81ffe5ee9f23e0

    SHA1

    04226c46a1b15fa7faf4384e445d92f926e4e048

    SHA256

    5a55d1bf542936e440ad0efcae57c5afb77bccd24b1a069e2cd30c0e9a7e5a41

    SHA512

    17ef729a8fa2b76f4a90ff178d942fdafebcaa3525e4c2b43a984abab14d91f1f7b73ee207591b51ca6a544cf8801b6f000f15faea6c8acf24b11e1815fcf77f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d718e8ffca27e827f8c25a056fcdd0a5

    SHA1

    ea6919e0b23a0baf70f54f5fd83fe47f8a493134

    SHA256

    deda2a3ef9d2ef6f5341eb2e27a3246329c01aa750592e152f818e0052a81a9e

    SHA512

    de1b702aa14b28637b52bfc0e25b4f3e0de763731a76603b7c6466942bb3a803d4775d9df979825c367b41f440417dd4bf735da3a0d8bd29a6a522e18b04d6ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2974b899c21b04cf5b6ba158686a6d0

    SHA1

    9a7b8ba08d3a99330ef823a99f78ec9901980e36

    SHA256

    d04f54470e3db7961584046793c2fe4640dbf6bf25f10eaaa4679616abc168ef

    SHA512

    4678855e08665240907faf63a8830eff1b2e2af262d1cc1098ad77e5034a1dd91b516e0b3041a4b3cfaa09bda583e47d605fc72d7b34c7bf4b84152e4ae632e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e6a9378dfc3a4f70bfd860001ab22c0

    SHA1

    0728ef09382546ac5d5b784b8f232f49da40d09e

    SHA256

    ea56ea7e1a913f64cce65ef1e8b8e7232e2fe9fca88c388d8feb03dc3e5d5552

    SHA512

    d5faecd6c7a927f661ad7208a26c1cf2de67d7850638dd5e1e85945f5e46cbfddca17e4656c906a0196c4c3718a8180d54a39837a6a65cd8318f1f6f36ed6d69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e7ed33f48779138bc87f41dcc850ade

    SHA1

    6a4f1626acb2e717ce6bf5cbda5d3744a96847f3

    SHA256

    5620414f3e0e7561c8b5b44950f2467a65bd5c53bf055215d8dcce0f656f1a15

    SHA512

    6963681759bc1a4fb703ede6ace963dbcd1130da2fe110500e83a3ee755b1004a6fbc272ee53486367c0e98ea6a67b206a65cfb6a7cd7b0d278659c1a596c74e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37c6dbc723db6583ffd55eeba3c00a85

    SHA1

    f104a1bd0ab828b539f1aaf88ac81d53bc83c431

    SHA256

    0e4ec3808ba082cfe99d2fb1a77be43801c36c71d7ee0e465f05e9955f284168

    SHA512

    857d06367c3e21b60acf2c4b5546d4d07b040650f8dd4d27600b009faa82ea4643dd1446bb6202ed4976db371dd3a6c67e43b36442dec00322ed89a9ed0b2dfe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8221baf351c1d4cda1dfb9ba4945661a

    SHA1

    fb402dcf3d6209480eaeee8694c02d6e262d36a4

    SHA256

    6e033eb49bdb316bf21bdf6bd2e4712f7aaa395bcbc2b1cf1aee80b5dd47a62c

    SHA512

    baab8cce3b32dec086b15b94972ef4d3d414a60ffe844bc130d77f561e3b79f924b6fc56f09f2366b49372f19865724413239e3bb4b0ca12380fd1432a28ae55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0fccff690b1e3a954fa4f2db76e9b83d

    SHA1

    ebef13e98ed3ec010d152da667b8427fcafee086

    SHA256

    3f9e09e4562bfbc3e23d729c440d21cdbbf4f6a9f09c73d4e9ff297e8e712c4e

    SHA512

    ca5d3cfa543d76d5e6792478fc40bac769f5808142ae836f0144ee5e734de573398c358c750f3b54bd6205dd9b598bbf6f53526a7fa547631a89027efff7ab90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e065c8f9f21cc38034b803df70cbd7db

    SHA1

    84d1269fd723f557ca9b02f6ce9f76867a354337

    SHA256

    e32641c0ad3cc3ba0ff0a0b33ca07a643ae7460052ecdf401b31ccbcfb83e0d2

    SHA512

    3e9446978816367369b4c7ea44db1ac9930d1f5c075d6982d2889a4e9be64ba6bb7fe27d8dbd3b26ca4329fe48fce4b9d796d3940cb202c3319e608691a3de27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb37114f4956928785145315a50bbdfd

    SHA1

    0624d303720c4bcd8ffc9a0bfaac4c65bc34a7b9

    SHA256

    b97e3742c5ea54e6c2af1a44e2e8c8f9e51a7f40fa31eeb79050d11d3d2c7ee9

    SHA512

    a39abe234e94cf15b891aa9309549a6dcc6fdfad9f975776eb5bf102b44692544530bf62effbfdfbb783ef1ba1092012a0d5e5c5d07382467c6e1892aaf7b338

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5a32c1c92f4350e2acf99dbdb233fcd

    SHA1

    5f015cc5ff9164009620afa83d1e8432162c7580

    SHA256

    6ec990b1e56140cc02bce9c7aaca75fdd042b74b35930565785cef192fefe556

    SHA512

    f4edc5619819a11d9c26eab6fb2ef9b501be5062c758795d67bf8d57ed00aa52195e6bc54cd37d4f97ea82cfff4cc7c2a8ea4108b1854f545df2bc02ca44cea2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b0217cc4f1a6585c6c58322308bc86d1

    SHA1

    fb6e0a3e10afb0cce1e8330190c64e6e79573216

    SHA256

    ab379c5987aa4704a003bc9a2f307d8e5ccdd5df173cec01c52f42b275524165

    SHA512

    35d1b9474e3bbbd2b21f5e7ac78430232322071c106b9f71a6f11bd16aa5ffdcbf6ebbf67d71b323c13315b2866af27b1da1c82c59c9b46fb2d42e257ad00d30

  • C:\Users\Admin\AppData\Local\Temp\Cab6144.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar6155.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b