Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    68s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09/09/2024, 10:36

General

  • Target

    d623e42a09b9adb36b204e4d495ad72a_JaffaCakes118.html

  • Size

    27KB

  • MD5

    d623e42a09b9adb36b204e4d495ad72a

  • SHA1

    53fc33fd77f5057fe9a2d58ec8a7ee8c1051c723

  • SHA256

    5ccb7333cbb7c2ff62052d9ed3f7ed1e7da57649fcec37912e4d5df41bd1aacf

  • SHA512

    7f6f63ca5e63ccd21cbc6a55b2dff3ab458273aa49173c407e34664c0c676216c0cb2a69be0990e9850c578a1e3fe299ead8125fc8489d2f48ffbefc7dbc97f6

  • SSDEEP

    192:Nb53Hb78YvIYb53Hb78YvIYb53Hb78YvIZPN0Gfxh2UU1qtv3pSpaYp4pnbpkp25:x53H8mf53H8mf53H8mKZfQIkjXPDUTZ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d623e42a09b9adb36b204e4d495ad72a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1348
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1348 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2420

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b0c21b53194ab1bd6da39c784ed6f871

    SHA1

    1983d4a945f7d8dd76e9fc0e529cbcc3f6ebf1d4

    SHA256

    06bd96bf1a95abae5fc6a2081c5a96b677488e32532942b4d42230ff4c34ee0a

    SHA512

    ca9a445b3c369194fcaaca4b4c1749b5c8a3ec99049105e2f1e17cd7bc09375b19d3e62e45b6be242da071b7970df47cbd9be7d0ac280243f99939feac8117d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92cff497b2a245f17d92c4db2511f217

    SHA1

    5cc4564fd688c357589f09266d7b348b61047470

    SHA256

    66ab2907f34847ca3a1dfb49a7c82ea81378654883d0993b85b69403b0ad4fb5

    SHA512

    b98847a880c74f7fbc0d4d4e230943c15c6911ed2ab8a66ba6b8ca08a4661d08ffde5b3b481553a247074b45d3db4d0a8ccabe4aeb355b18583451258347bc9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    97819e7e934f4acd04111ed4231fc77a

    SHA1

    57aa028134c740f1da5b4406667a5f2da4367a3d

    SHA256

    427ac2ce423df1dcb30309f36987b5c3e3019fc7525f944f2cbd37375d33b7f5

    SHA512

    c5b001ed034497c02c3b2d6f022f2b2721c34930913923ed2a113108aa780a6627317a62f023f032f132e248252cb2d7342dfc816591736db59646869ac52e66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d53a43e02146cddc03032ff0311d574

    SHA1

    770ab58d8f9ad79918af9171ae6f724c92b128a3

    SHA256

    f2479f025b31dc8fb29c87473889f638b684197cd0ea59854c8d940fd6928a65

    SHA512

    f7d206229937cf089cd916214331b5f74b8ae3b8d336934e5f7f7426e78fe5c892d628a6dada8edd4e444a9e70da8a5a00d52b7bb7abf0243f1089250db572a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f919d03b1e2b0285d6685ac652850ede

    SHA1

    e4c2c8fedfdf29151c3c1cb0ed6b2262566b9a37

    SHA256

    17a7ec750e00b3924f689163a43c809b2db1dd84be36b35525fc6211c75d9161

    SHA512

    51a67eaf556fcf378c4295ba5748954ca5ef5e7188359628400e5d606bb059688a772c757c24311ea48909f9e5e8ab5280899113f174035ece8a095d94f5b897

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a85712b50f8ff8d87053faead72bc0ca

    SHA1

    9fb2a9fca098d6e86ab864c4f8765dedeb3a8989

    SHA256

    c4c0fc462bf2ab104f6661ba9c1d358a1e74ee82a2247b692a4234aac523c49f

    SHA512

    7d5067d8dbc96be1f4f02728c97778baa5ee24d56249aa435911ffd9cdb5c86b3d28138e47e8e8ba66661b8f1dee6f08d330fb0aac95a697193a5376fd3944d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    77007c536efdc9b38e1fd3ab1775c588

    SHA1

    d44e122de66205197907c547af69cb6b4e7be4b9

    SHA256

    2ef427f25b3a843749911aee19b7a97fd88073b735b75c7ba2f4dab34f2e9a5d

    SHA512

    3641e0e2364860ac99f6768175419025d7106928e21d5a18deb8ae3423e9af886bb05efcadbdc1bcf0c05dbc5235ca0cf0be37f4a9969ac3cbfb1ca8f6a0af40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd8c55e9866a52963b8f3449e0d0c0e0

    SHA1

    a06bf315e748d1853d38221c9701607415b4938c

    SHA256

    e09c595334ea41acd864100daff98133d9e2c974d5ff413400d9dd378fc9ba46

    SHA512

    12047cfcf4e51182edc38d250c89e8d79f5daebf4bd80f09e221dea0d6141a772bac6dc4762c28230af3671e175848b4d5572f84c49e5184bbcdc64cee764b49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af3113ec1ef4187bcda7ce871a131a54

    SHA1

    933431117400060b01c292b7286b9714f0937608

    SHA256

    f43120c8a97eea2061c062ff0d3ebeba8c73e7d19a82143a27c3c33e9f6a5e14

    SHA512

    be23e54a059689f93001b53fa791ef8d34d458647bd2d51dd1598022376d9c9591613e0997f31d239711bdeb1eca4e4d734417b3988814e923714deda7b2ba87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d88ed0f24916e4b1a4cd57ae7ba7c78b

    SHA1

    ccf2f9a58254cc9bfac7676dc6d928d654f17e36

    SHA256

    d2e9ec9f527c2899826fd1fcf326ed7b2639ece0e68a4d28c171f9f778fd11ae

    SHA512

    a4019d9bf685196bbb2b3f0cbbef0b179bcb626ee4fc7ac9fb39d1e222eb60030de75e4a373c5d8fcee221b4c8ac0de02f7d061074a3ac3a794ac3e14baff37d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0566bc2c0959ac84032fa1ba54b0515d

    SHA1

    4f806ada8108d717ef4c3188e1d1f29d25b3d19a

    SHA256

    0c2ab2fcd98d3f012a9429b26292b13e521a070c075f3d92f54ab13fa859914d

    SHA512

    75a2dc1e80884c160c23c4fae304bd9dfa8cd08294513b9549c1192ee4c23b8a21094188d67e511ce80aa79b301313e80d386df982b5c89c72803277497b69e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    10208c43713c4b0f5d4d3127a7ef61c6

    SHA1

    e8df59b3200a40ae245120e0528819fb98598077

    SHA256

    f61ef3705014516677308e3681b60d175b7d1968bfaa728ece1d3faca63d48fb

    SHA512

    acb04bd16ca66eccca2eee16bf014eb7bc58146141ca0eb4847a0efa0df9908adf6a95449071f85ea9d272f97f40860999e3afba403744a221a3f12430324182

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b9c08c4da85b9a3ccf7b88cc0478a0a1

    SHA1

    1e93bd3ae7a458c89710deb31a2144817333fdd2

    SHA256

    0a513021aa83ac08c469a660894281d3f50fd7853b683682b62da464258401fe

    SHA512

    b30a305d8f585a5f38ee50132b40fbaeaefe09021a816c6818ca1db033e77467849383b2a9018270860ddc06e06f6c9dd100f8e2add6e5ad3450ad7e3aeaa34b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8732474e76a14be99320c91421b7686e

    SHA1

    7c1695f3b5bd2ab4ede1c9b0eb2aae5f3a4882c7

    SHA256

    26fb3940d1e12a78e1930994acbea1b94fe4106330c25a15b1975338880ca1c8

    SHA512

    036c9d3388422e35160e0b1699f7391ecca4a1ba24cd1f1d3987ea98f52244d0d2c8adbfc28a8f158db2edde2eeb76ada7b25fb359357f95bda3b43e280d8447

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b448b488a657789d62a24f9d1c2bb5a2

    SHA1

    68b6f010fd3525758d13f98474e5a00f8e2ca529

    SHA256

    771dbe9bc525ad90daff2ae2d8e7e816acf2d9dae709d08958da80f83a8e5dbf

    SHA512

    11cdc64351dfe3245a3dbc5a1a72ad685d901833abf61f12b48d73727cef450056974d9b30bc41cafeb1b717c9c80f70698d57eed5be5da6d4a2c42aa52a4692

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a1a474357d8da2e3524bf9697f301a5

    SHA1

    e7f6f68c64d8851fd844de5fad8eb7d82355aa95

    SHA256

    606b03f83bb6aba9a4559a651a9dc02459afa6cb8d9816f1602cccf96fab43d4

    SHA512

    04d0b24c1a785cb81e742ed273d52f9bba12a6bc21a1fb6015949cd4f75386c40d7f17e5227a4d1dbd401917f0087573ccf290a0ad57adeb5932cf3986d43388

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c5289ec866b88286ce035894243366d

    SHA1

    766237d3094e7528a86163ac77cca942ea3645a7

    SHA256

    678f8c961915ee9fe6f299ab6f0cf035ace18fc2ce67736f4f948b86d28f97cf

    SHA512

    09d1eb512a6bf72fdf3f36e5efb762dc9097e3ee1b4b13e4f6ce23c689fa6eee47081eee7f3e0849159cbefb5cd2ea1da16b89a5a554b09e78b5cd13c127a7d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b312d705c99779c383dbe12f9b761e6d

    SHA1

    7a46d5dde84d362ba1efbb2eacbe62520f55c2d7

    SHA256

    8b4914a164d88f211aadeebd7933bdb407c57388eaf42c1a59dca222c0293db7

    SHA512

    655d6029a86c992e6ff65d15db336f9fde5201c3983275fcbbc35990a1b81ad22f3a1f8d73ad0c63ad448c704e995054b94bff7c1c3176bfb50ff1ac847e2d4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6853b4f22a3c1f6093720353ca137dc5

    SHA1

    db3cd5558edd8d50c5e5dfdb7869c751ec75addb

    SHA256

    570cd4e0871e1252d731aea8151964572f5ed560fd575c406d5fbb5a8edce95a

    SHA512

    1d7d3584fc48618e702d716d870a0b35b8f4c38904479bac6453602c3653b99bbc1660f8ec3467129deb80a2d18644ba60cf6c39aad43c2c10747467233589d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be26f52c2e2867ed788bd4d639326aea

    SHA1

    7e58f6255c77ab12759d69676b1e7e3a6da3ccca

    SHA256

    d5a2d3fd28171db050863b71b1cb4fb38ad7aa96f96c1004acdecde45f084707

    SHA512

    2ab6e4228a1dcc89c9d8067e9288a09d83f29c40455fdfd7409fa47a8ac1258de2035614be31c920b7e902e705d9e59b13f200db5c8c007502f812216c9677d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ca93c3b78efdd005a30621bdf971e98

    SHA1

    8f4b76aa337b4e693377df6e428d0c047e772d54

    SHA256

    52b617af9f77596c56bc81261fa5657ea351b3d8d96612f6d777001099db8fef

    SHA512

    f96733a4cae602bb03ed325cc6176c04956a954fb8804cd3f36d4420aaa4d4ab631d6acadc602d0878499cf3c4754444bc3f125ee7ae17f06318d34d0fdb411b

  • C:\Users\Admin\AppData\Local\Temp\CabF9FB.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarFB08.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b