Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09/09/2024, 17:47

General

  • Target

    d6d1cd3f24c6caca6c94335d0a882f30_JaffaCakes118.html

  • Size

    33KB

  • MD5

    d6d1cd3f24c6caca6c94335d0a882f30

  • SHA1

    7d5eeab441bb252bac8cebbca73ca6eac3ed6199

  • SHA256

    deb4122e3b6927f7ba0e641ef7b40e472b238716120b3b0e0c67183b426c6bd4

  • SHA512

    11ab630e44dd9ba3db6da10a056e0277a25ae5e75d96a6ca5f6e11f0ec323e364e3bedd53313a13169e779042815a59066b7ee0495b45447cbdfefaf17b9d2d6

  • SSDEEP

    192:uWXrb5n2pIXnQjxn5Q/gnQiebNn2DknQOkEntA+nQTbnZnQKXCjA6pW+knaZUcF+:iQ/QDhOPsQpY4tHp/dz6LNtOI

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d6d1cd3f24c6caca6c94335d0a882f30_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2948
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2948 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2972

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    33c55ef8662f384d0ab1a87e4afe2e31

    SHA1

    3863ee63cdd0f727ed428473730873a527596820

    SHA256

    944e0a2992ff534345751be2b5148aec37d4ec97b0bcbfa01876de60ac443d1d

    SHA512

    410f409fc7030d92fb25297a61839f0cc8c63932f1050282c12fdd25e38845f7167800e8272b5e56f22d193a76f55c88bd68c418b0f9e7f082d7d1e4cb729aa8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b33a8d365df62e88ae3724d9ae321749

    SHA1

    f9a93342181d7a5dcb01ed87d23f255820e4de56

    SHA256

    18fa16e96e34ea9b99aa0c776b1647ca4e95119528b1771e7ca8dea8eb522f7d

    SHA512

    294c7210d30420f49851e521c1d30696a18b1c42f81b1244f830b2f1709fb744330d2a3a7d5b8731749144b97d7461e6fd376203f22dbcf9bb0081bc8fdc0d0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ca9ec068029873163c3b6b286e94877

    SHA1

    c9e71695dd0763479d8fdaea1c7cfb04b2aa8b24

    SHA256

    c20624ccf56bd3a1efc4ae15223cf61a237f9fafc2aed566a19b1e5eec0f3c93

    SHA512

    ec6a1587b194bff9a5adf797ea2b86bad1cecb40b2177e217b907bf32c99d555a9a5aed64543084a48ca25e2538d6d54e1caa5ead9ae34d321c33b0d96f99786

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e9edb155143b7eb4317495632f9c058

    SHA1

    45cae2e51d8d047adad8cf6d5a7f026dc0d43e01

    SHA256

    d404db866e6da9058364e3bd8b220051717b18f1fff11ec15359ae64589fc3a0

    SHA512

    ca4d87f449f979b0a47a4eb9d7bcf8bb8a62a918ce5af5e46108214a9a9c41cf5a6157d9b743ad95872c9d68fa640e9d4bb05388a44801776dc178fc03424d41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    60db2d01196b2ab1910e52fee3bbb0f5

    SHA1

    4481f2c648b652f0b25441e6290961735b1e371d

    SHA256

    f4aea4e83f0d2af33795828ef9e09d5e2b743bf5365dd092be005f9286c6ee9a

    SHA512

    c9c762c3f29403fc60bbecb4f938f2a79998e0e4a677c2e8b5662ed6222737b1e3cbe8cefb355574ba2829cda3d975adae9c8674992e310776907fab069b8e64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2bb165e0abf133b9e0deb0c17d64057a

    SHA1

    acdf0cfd6eb8c31ca011b7c5a88d6679b8f64280

    SHA256

    e28e4f39ecd2b3035f2d470e8c8acb2109ecae6752b9f8900b28a787fa0ee977

    SHA512

    dd14e9d6f7ad92b5185600dec27d52d315174e2fd5554bc4f2c6166a86e94087121d635897477bd5abc1302562246581eb9d3faad1f818918a36bd8511303865

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e2d9932e98701e74f9ca4ae3b43acdf

    SHA1

    6a5b8ab21d27822e95689e01e0863b6b2781637a

    SHA256

    eb8946d49ccb754c2ed47c7a63fc506fc20056541578ffe1631e7873e4231d53

    SHA512

    e6671868d177f8fc0cfe80e482d1920bf37c03efdfa8eb95ba99529ffad3867ad4f9ddb185a7b025ef3fe3907bc78ad661d2d41625062feba361c83860ae874e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    034d3212c064d4766769fa5942b19e7e

    SHA1

    736ee98c4775a0165be2095c3675d9bdb13b6935

    SHA256

    f26a46b2b23b90ca49453c04050b60ce749da7ad2dc90262f2de657b07ae7675

    SHA512

    41b4b630d607a1b883898d9c456e0a8d6e0dd9ca761955693e0aafdd98ffd1dcd7bb73a035c1c978337ecafbc7c4b60527bdec11d08f11a63e9f515cd5905a0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    84c81b619bbdac8f094d38fedb9abeb4

    SHA1

    d5150a8fd47ef20f0d9123bf686d826fb54dc012

    SHA256

    47abd262fa6a324a904dadaf4858d0596882754bf29ac020e1fa754528fb58c7

    SHA512

    ed709c1ff3d4b3ae4f9ae37a39be0eba0170fb5845c98c7eef615ba9af4574d64050f61964cef5b427011cb59b38b3b63b2675ce3e798b555235feeb717769fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1901dd5c0a54ce96de6c563fe166b0b7

    SHA1

    d89aaa2d1939c533998a82f8113e0810e3dea896

    SHA256

    91de6b3890d347de2b7dd3bf09ff8e5b1a7ab9af6cd2954e1b04c121eb70fb1b

    SHA512

    f391c0599c3ab1773f74e09b0d815d69cf58a56ad400f87d27803f4de35c985af539744afe91fc4a676bb390977c95648cbb5368b28cc3f950b30002ba93bef0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ecbbf85fa2263fef56654cc1a1202f56

    SHA1

    dda0b6a6c81749a7358d7da4112f1224b227659e

    SHA256

    e688906e1266514b11d32cda196ebca5a05e8f123e0e8aaebfe1a41ac9baabc4

    SHA512

    fff04631918ccafb0e697aec78a2bf3d2b0b0263c011b0e76762c95e6132dbd98cff464c044b6ac245b664a8c338a31813e574e5a6e218751c7cb3a102c5d05e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87a86f29a4652cb2ab2c2a2f422cfd45

    SHA1

    ea7e752b032b01887b669efb1a8b4d6e4a5d03f7

    SHA256

    edf5d49ae77ebb79812d6a1b89f20bbe569656bcba5e483f557f1cb46d210790

    SHA512

    0995de54661cfe5d45e0fc0b2c5bca532def0fb397d997ab9579a0a77006f9df76e2c2c63cce3fb44da253131e71ad3d00b248dc9d240068937540f5e27feeb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e809956f4351fbf5c7bc69c515c3eec9

    SHA1

    694cd9f2f4f7c5808ea9ec21a51271a182bf7ad0

    SHA256

    178ce5bfd4f3a97418439cbfa1e595333258d98e8368ea25d4524ea88ac5ebe9

    SHA512

    e4a7c68b230e41f8e8ed60c096012ac68f11188f3214ea7c2908b22881ea455367d1529a6074ce9371f7d9bf562266dbd7a4aa020020c0d1e4383e5c3670def3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eda082f3f924d6d649637c3865095fac

    SHA1

    4291f4ac338cea960bae1904e7f877d18f3bb202

    SHA256

    d11e68eb99d2d5eca8e80cb23bbdf8f81fec0c65cd76d25f230b80cd56e0645d

    SHA512

    72f06802103eddc241727e2e30ccdf700b2299c5ee40d0f2bf35129a6dd34d3709193a727d17a6074ad38fcb69d57e7fb1b93bd3410a83630fde2c2153110bbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d797ce18eaa6a26cb39dc2829fe5ff0e

    SHA1

    11e6fad0c0a50ca64e3f791f51faababf0176561

    SHA256

    60b65a4d8f560c621772ee0f2a496542f21ea7c2167c9183f7c7715bcb6c1e35

    SHA512

    2159462741120fb0384ad1bf61b1ad5f0909596e5dd2e3a0646be701bf154e92f0df515aa9d170c8e29a527a9db68e1540fb58024c697d142b09741d8d344200

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    950dde07aa98081af3c69e056f71d374

    SHA1

    124afcd8c09cc1fc787ff82a3c7960c8d9b4afa3

    SHA256

    c78968f1a0342acb8b1d1fa9e2ca23916ed4e91371edac1ef1752a22feeb6489

    SHA512

    be1ecf13fd7ac8c8630fd6a78652e0b63f9fc8b60d24ae3514346c49df21e56ed250d88bbb2597ca6767bd494a756c3830222cfa760965a8e556ede9ae116c8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7385cb2655ce6306b0886c79abe693d8

    SHA1

    1657716fd43e828939f135efe6aa9e4d38194dbd

    SHA256

    f365c02c09695f8e1b730035d284ed8b6a02831cef434c415008a698d31e3278

    SHA512

    2265a80102d2eea347e7f1a7f7aaf26f15932991d1edabe46ac0fe0d57a26a66db014c48b2e3644fe4e8e9a494c913cdfc0a899773b402a59ce95de5189ffdc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e15e6624d8d84d12d810a51cd552e5f7

    SHA1

    b54747c8150e1a64f36fc07517c1acc615712481

    SHA256

    841ce4823511faae45685cfa499d0ab38af1224a51dbbdca1ded641de4d323ed

    SHA512

    33d069c4d9091260c5c33ef27ab3b693bf076a276727baf53ed1e629f519252d144bc52a3de54d8c5e6d5ac369a5d85be75dfc088916034d893eaa2285f2b4e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    88888f10cb9cee0e0ecb2bb953bb3718

    SHA1

    e8ca5e51371c9e26e29bfe7cd46d775c0e92d05b

    SHA256

    094f741ae02a1e8e8db778633d4f77fc92313380048f9131f452adcb5a0b4bc7

    SHA512

    3f3a98c50183d2576c51d03e7ace2b34580decf5f408ea53e7951314de0ae65deaa8d4ba3b5122b8893a1f0b279ebac5b1896edbe364d94e417d299a7621c1c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4fdd79ca5d3bc5a1ea020c08389c51ad

    SHA1

    62a06c04b7a17bd74991889bb5e4c8b35ee18f88

    SHA256

    4291900ae1af16f2bef299fd9b717e78db77d59e5f2b7ead09483ab5883b4480

    SHA512

    be16a694098df6bee15d9dfc719e7d74e89bf0717c0f3700502e0cf2753753759e3990c835dac8d3cc18ffe3cd4458689fff2ea1a2e197acf6c0cd6584cfdcfa

  • C:\Users\Admin\AppData\Local\Temp\Cab224.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar2A6.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b