Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09/09/2024, 12:26

General

  • Target

    d64efb7d7dfc376de0d9ea40745a9de8_JaffaCakes118.html

  • Size

    1KB

  • MD5

    d64efb7d7dfc376de0d9ea40745a9de8

  • SHA1

    708fdb614f45a3c39f7ea1a3460e7e6142b415b2

  • SHA256

    ece537fad3c95ece98f08491f0b8ae7996ffab719ae5211b9e2b3fede18129a1

  • SHA512

    6df7d020ba29fd5e0114332c6955f3970568fa428192f4f4a0a0ac19f3f7c5f891010f9aba342d0490b919d0f33a84414b6f2e23ec62670baf53ba953c61c374

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d64efb7d7dfc376de0d9ea40745a9de8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2888
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2888 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2996

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1acdb0a8053dafe200a53ec42a51e4a5

    SHA1

    6c41f98904855044047b320640cddc4248fb82c7

    SHA256

    3433aa2fdb9bae57b04fb2a2b37e556e760acf909a9a113e5c56a069102a5182

    SHA512

    37dd61a65b1e577b60cb3a5238b8f9c7d1c69c8c1e693b192ad468504438ca30ce230038a7bb90c6360464dd8c32eaf91df4f28d98a9f6f1bd13a5993a2cda3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e3c3895cf72f7e3fc103c3795753ff09

    SHA1

    d2d5250a4b055e986b2c84fb35efb545e6e453ce

    SHA256

    264afbc659255c47e8d37b132beb80a12980dda83cf057121feb2b4446ba0897

    SHA512

    12a07a8d1ef31909a5b744f813abbc4cd6eb73e4beda24ac804499737fe43cde7735b009478905a1e447a63cc54afef2af96d9615892b43b8bbe423198f50ee6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5614e909279248978674e14dabdbeb48

    SHA1

    f1b91c59ad354ef28a89c5de84815c180bdef9d2

    SHA256

    ce59552e0b556f862420a6ff15173c4b4fb710905ed53c959305a5250c8714b7

    SHA512

    ca73252b8876a8384864f40df81e25463d585c8b7ce3cbdad8400bf6a3847f4c70dc5b5fee89a53cff56bec8c240ffd40e1a1e78821848b6a2fdc45a4ac3243b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    663486a1171f40688c57744dd6811ad1

    SHA1

    a60da1e6c155013597de1f9cdda67547f27fab28

    SHA256

    808bca1a05df767f048dafb0a4e0c18f14adf2769a9c461bedf0ab95d996345d

    SHA512

    7837dafda68e469728a72adcb6d0cc3833c023d187099cde0fdd8e9639aabbcd179285f0a961994778ac41b8df449aa4f7993628a528313062a304de31064a63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    16cad7b99a8db14e076d8761b1a6ffae

    SHA1

    cb65296d94f1883218b270a43d66313cf129f7f0

    SHA256

    d4f83f9953fd84d87bec8c0ecbe1ae101f496d5fdf18037868aeef015d593627

    SHA512

    972d9ac522b246c08c74b2b64b60c44667e4f70b4e14ff05baf92b53e578d9517f08934a349bbc8f422eb290378f920bba404e6edf547dd36559bd4de87c46e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    264b14385aa46f2eef03b68f8e84bc24

    SHA1

    7447ae8dc4a6a9c46eb1f0fc038cbd1e1c2beecb

    SHA256

    0b00f72ffd7b3b2e85478fc7c756bc42fdb44469c5eef6baa95901865d8caff0

    SHA512

    7ab29eb8d3221e6c624ea9e72e16a47b4a4ffb44adc30a90a84192a41085fcbc6d7d34b25ecb349ff119843eda7d2b0e3d1094f2e68c6a7b9befd153c82a573d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    775af38e683e2b025f9cf4ca66fc6875

    SHA1

    4024546ceaab0cc70fadf4c9da0081f76dcceb0f

    SHA256

    1fd1262b68a6c006f3479b1aa8846f83fe5987b6fc3dae23bf939fde31334cd9

    SHA512

    c17c745be0c80fe3dfd1303192886002f8fe489933819832bbee7ffd1c07003605168807234e9f1d2abe45170118e55bd56602193d524fd70f696ba9b314b78d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d914a7c48672d87c4fe74c59f95e7d1

    SHA1

    654d938f36dacd197252899b9c892a3b4d7eb5fe

    SHA256

    cc3f9ce2ff513d08f47afcb9cf7cc3a37863c9c1a6cc749651258284b80335a5

    SHA512

    8d1f3d695ee68185ef58728000039523391679a56d050747cff4bb34a74027c13bbcf9b113feec33f47c402986dd7fb629b351088426819a3b8a8b5d5f6bb04d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca4e658efaa6fb56bc16b4bc21ab8ddf

    SHA1

    3bca3440385db9715dbe5724dbd096a8002e630d

    SHA256

    4877e4df96d3ad9c56788dfe9f132141cb881fc16a108f033a1de8d546615cc1

    SHA512

    6b224c8bd97cbf85025716fcc352efe93e7d9c46ac83453cae28e4e5b5975725d6ece3631253c777669b34fa99d2a4c64159026103ccd01017337314386d60ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7326c5f0426799432c7ab98c8ff0fcc

    SHA1

    e8558e6c5cadb3396936b71e5afea460263a8ac5

    SHA256

    08882e202e8899981e130dd273bd8e1598970930c6dec311bb916c7a71b3915a

    SHA512

    64c9cd08bced7d0c8dab1fa8de4036d4c65865b5209e1bac5ac3d22810380dc389d7cb808a51a335b1576b6e8590dd383d4f397d7f7a451e2602c69c218762df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da48aebd1dacac3ca5d0c703b1a13190

    SHA1

    bb5507f0aadeca644fa3b62c0bd7aa2e31097dba

    SHA256

    505a60ab237cbda0383486671c7fe58471d223fa4d0c1b67f666c91ebdf73941

    SHA512

    0c509a642b290aec30463fc2f035e5bd3401a46dcb4705507b264dc0905d5e0ce6bae84b65a220ae22401ddf40125ac85d4a3e796124563a76f083b5b817bdde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35cc37033fa41dabd89d16fd66290d3a

    SHA1

    937d06494025c005628fc5edc136bd8929a4d5ae

    SHA256

    703ff4f2a02f9536cb31ab74df793195b8d1d247bdd38160bb9a526f48921931

    SHA512

    4b9f09752901833114062632d511133ab0ec3f7039ff889ac37e5dd236312827f7a09b79e9108018bda9fb79cae7b383568da1f0e5e526a1d216117a7d553992

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb58a9ecb3942dca30ec114bb81c91ef

    SHA1

    49cb3db70242a7559965d4da0d05000309abcb3e

    SHA256

    2861f1bbb8a590ac77647308372c94b539ec742c0368d8f3db0e33219aeec2bc

    SHA512

    7abbd6e05405e46323192fa802c22da749aa9fa293d9a59b9762952a28f425dd115505714d137f82c287b6157b7c66daa177c192adafb54b4280d792f6c55476

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5078f7d02449a5ade5c1717ebc982b12

    SHA1

    329c61a6cf05734d2b389be47da66696e63b34c8

    SHA256

    de5d30963d2283cc3317f130fb9be48132df5c248388921551eb87a18e719c6b

    SHA512

    5af6d034555913cf5354633cc29e481f44ca38ec9e1c1da2c37db68110281762130dd158bc1ed0fc66acb4db529a0dd4b7be18784775c2f37ef10e062bfcb717

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8f684568ace4db2c0cec26cf2153fbe8

    SHA1

    230569515da22baf8125d5a7bb81593b08c1b25f

    SHA256

    6de75d6977af018a80eb93042c15814c30f1bc07b1ce520c0fb9c35787a0d962

    SHA512

    ff6f60e0d891f400516fd79cd868b44373b7646d50afb350e71043c11ede6d5052420b8e1a8052b6878852a0577e0b5df6b71adfa145ea96f61a1367267e5170

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    021450a9248d5729f274f9f648a89546

    SHA1

    aa6beb5837500d27fecc0180c7ae81c0ab5929c2

    SHA256

    78650efe950aa6860b3a43447eb9cd08d6afbe0df2fca3bcab60c4c6d194e9d8

    SHA512

    549d9ab335290f634b2dd82a6025ceb9dd473d76adaa10ba5f955a50cd3268da9506e45f5299b95dc973422335e10fb81e5493ab08291bcde95f4ef8dce55aaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7818ec6f08b44b6c47b307db2e3edc5b

    SHA1

    3bf05a088c027816d705a169d5641422fa3e0cd5

    SHA256

    86db688af0f2fd021daa2882ca88ebec0b087ac4f7c04c9e9477c48e7bf53142

    SHA512

    1da66e1e528618f44d62d2ce3a317c8abc13ea76b931b76829290773383bc2bf1d0e7706c71fc7539b2cad84b0fa537c13d5cfa0e4e78c4cd18e09fe3a3bc0e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7eb1d2386bbdaf7b057a94e861c310ca

    SHA1

    b56c84ed8b2c934c7d76246f3f99b3794cf7a096

    SHA256

    437dbd31ba4c5f205c936057e40f4580cd99420896163f181a9f63dd3b16213d

    SHA512

    b63b90bc224d517123b6bb3340171101d4d776843f29bdef8f4164e735a961559139515edbfc6021183886c4bc5d9d0a36a57a8d76d426f8bc6497cc95b4ad76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc2b3192d8db420f4cddb64b6c996bec

    SHA1

    3bdd112a7dececc026c5267b7222c1738167e852

    SHA256

    5ddb9adb11f6d8e96373452b527ba83d82e9fe1343535ff2abe53685c4ce6570

    SHA512

    5adc66a8216a2f77913a47ccfb30dba63c80f98ad18d5a63457682c3eaac56a7e3e07bb5dba62ddf055b2a9ebd913e5c7cc21e82982a2fb465149909b55edc48

  • C:\Users\Admin\AppData\Local\Temp\Cab6895.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar848D.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b