Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    11/09/2024, 11:11

General

  • Target

    da3777ff7f6a0a2fdfb6c511185d10fd_JaffaCakes118.html

  • Size

    23KB

  • MD5

    da3777ff7f6a0a2fdfb6c511185d10fd

  • SHA1

    61fa728cfbc8c32f3e18b967a0ec61e3450c790d

  • SHA256

    caa7802cca5ff8b0a4e732582493c9ddd2e6de7d0f3e74c955eacd6567e71207

  • SHA512

    fa3f959ad1068726a510d3ab76a6b5c0bb79713f0420c63c763a6864f3a375198e19c3f319be189872b67d462af8c435c8a971d20d510922c109c8f60b01ff83

  • SSDEEP

    192:uWzob5nit8A7nQjxn5Q/InQiejNnPnQOkEntUenQTbnhnQ9CnQtTwMBDqnYnQ7tK:eQ/xyI

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\da3777ff7f6a0a2fdfb6c511185d10fd_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2640
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2640 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2876

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41348e068cbd1d4a5dadcf50f47d8876

    SHA1

    dbb8e3e95f5eb6375ea700a5073472150c53ed7d

    SHA256

    62e032b2b897aa585a51091191063572a762d56f8dc1b68d08c0ad0030e38f81

    SHA512

    9d86fa2cf5e9796b1a3a29fa8828eb3325d3201bd48b8ff21787fa0821062bec28107e3a2f3cda7d2107f8754538283b83234f45ecec094571e04c6513a9ed29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1924fdb13cacf2905ac944f408961b5c

    SHA1

    b821765f72b9d3245f10826497ad0b9758caa7fb

    SHA256

    32079e83a08f3ed5ad9c376a01a9bdc0728c69b9c5188414c3142b00ed62ade7

    SHA512

    1aa9590a84c29b0bf6e977079955a67debb315d5f62012392e3f8f40941bb8474e5e7c7b65cacf97b23cdb3584e518a71ffb954aabb9a8ad5999abfda49d9a5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b44d5650cc9f4f198ad368234f4e1d10

    SHA1

    a01744ff021f3bc574aa95195912598a7a1e71ae

    SHA256

    4e79cc8ef003e27fce501dbc4f5bf8fe74d59c0657a85fc95a3f398e62cdd742

    SHA512

    b1884eaf707a6833b7c05501a9b3da0535b3d7c190f92c304dcc0a33aea827a4a5e7c3fb866dda7e13f9d732d9e40b1f219141a245924ca528c1fc31db5d9082

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d4d1b591c0715f9f861a4f39c81887c

    SHA1

    5da7f9adfd4f378dc0e717a8eacd884ad9ba1466

    SHA256

    a6738e6f0287b72d87f9d298c5faf2165bda0489cb8cd508bb418c8aa6d84fce

    SHA512

    19add86eac499faf286ce689afc9141652ccd5ff0f30bf7b3c8e2a3944805090b0107e086ad88546d17035f79f360746f4a8406b84b79a3c8dca9acea486997e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    534de406047c61182af6b334b702dda1

    SHA1

    e23e8c73be88acc0ee70a737b869361963bdcd23

    SHA256

    2a393fa9670b1524a0fb4f8f70bccf3d5080b0cf96c58e01bc948bdacea0f72a

    SHA512

    57d4aefc3e752890802a901a295c78364bb197c6f057142ff93a054e19f70a761a036c566d916c722cccea29bc187c0a349050081a856a490f5a14136b6a0515

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d1aa120677159779947879e54d5e943

    SHA1

    10cf4b9489bd6aa9c0a7a0264cb2b6f852b88122

    SHA256

    4fadbc49122f5e590ede29566c9bb058273d5ebcd726e2660c9dbc23ee880722

    SHA512

    2c0d01836544e508f2f61d0612a508cf0d3ad7816f7d41e7b78feb462176336d7a41f5319e7ff366f5b16281573a970360fe0fc5cda269992cae5d5d39743495

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f6255b01fc472fe590b61595a519da7

    SHA1

    1a3b90511e167984d3da17c2afe10d3daaab2f22

    SHA256

    0ccdf4a89ead91c401a79b03ed626c0ae885765fd91a1b5f6ac9c61ed9f7a128

    SHA512

    23884c4a1ba307d13e69e112a840a4bcbf02e47d96abd2d6bdd5497b4c25fceee35dfdda607509fc30cb4c51f0437f477162f460ba93fedef940eff67f9e778a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8412fc675c6a46c2e25c25e388a74056

    SHA1

    47abb1c18bdb6243fa0373aa61b9401f4715d3a3

    SHA256

    dcd291e4b6061b7ac0e0704f17e68033d494ee526e7367342d02860732dee07b

    SHA512

    cf98f6d16c655d7aa6992a151f43f76d9f7fe8dd31c55bfd78310da46057486a5fc4d1aa744260806da0b9beff2db35c37f777746a402ca9a70364ad72d06506

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa4cab22df780ac205dd487cc08ace57

    SHA1

    7b6a9c83f88864a734a31096041cb8627410e495

    SHA256

    9d671933afdd5492718021551e6bfa393f20c5d83348f4c052fef8d971b1e4f6

    SHA512

    dc3a333ff13e1c75afec6595910a53c8ddefd49548558b39ca0f43ccfdaedc8bacb785be9c1a1cd98b2e136a56b2ea950b33f0a273fe8dad8733116b9d4b0f72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad92df4667962e1fbd1ec950a4a5467b

    SHA1

    fd367dc03281d70988830f7e1dcd63ae42631b90

    SHA256

    9293084c741d2c45649f51933119e6446cb7f2e5e12dab6cc32cad3590e358d2

    SHA512

    946659e6079183fe7590cea56b49e65186a9f2430a86ef9b28b550091a97d764c3daced6c5bd9d5d2bf7114adba9d555f36158891ade3f5d5b9c418911ff9b1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    944326c04af29f5369182e989deb0408

    SHA1

    1b1ab92ce8dd9acf41f37713b6a7db18cafd8d28

    SHA256

    237b2ca862cc8c0c482ee7358cbfaba2f22f0bdb47688894bdb1546765471967

    SHA512

    a4563c01e4109b3089fc7e84143880c24d0f4d0657d8ca3643041ae815f5298768517c97a7e17f07b6bf03e06d72a191889b7c8cd1ee8c907a26e841fd42b309

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87b80a73e7982934dfa66920a4e87a57

    SHA1

    3b21ccc21409ff93fc784ca3e0a169e0a713ba7a

    SHA256

    d4ca4399bee850ea45b56d302f8ad8b9bdc20f95b8925c397da0ffb692cdc01f

    SHA512

    c2e83f10eee8b0253e35eab2dfcfdeaed133a7112e7095b4e8a131591ae10b599e3569d0f7d444e200054694476eb260cb141d04651900d9c504535f9b21ed8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fdf5a6b126314ef4da73e12c278a9443

    SHA1

    34edc40476eeec5330b24cd69e7686bdf178b07d

    SHA256

    28e0c569516c9a65fb77343c41bb308fd9a7ccef33abf87762d5c094069da1cf

    SHA512

    1a7905dfb2cf00a2ecd96322ec8048d73a01b35b0f653bd0676e24e3342cce64db68550ed7dc9b5cfbd6ff7339394e0093d4fa51fa9502f0f87907154a783200

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8ada47f5363cc7d33ca88c88d8b0b8a

    SHA1

    fc5c28a065d0e47d8eb6abe65fdd709d939bb0b9

    SHA256

    d905df934cc7544d9419da1bd9506885e8604d713a8a041f6000cfe2fd43c0fc

    SHA512

    fa68b1cc6a5c534e934e142cb8854e0e6f16ee9d579dd8409240e589aebfd5adccd62cdfd7166f72cafe31b2ca39641a55ef1dd52fa6bc4a5d550a020cd20487

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92cbf7293477d81f1616c26bb5a3674c

    SHA1

    c83ff91cb69f2d8a6a902e84786593ce96a51bd3

    SHA256

    034753ea802a1d638da95208c0e2f821a245fb0c6b757f60c454adfd926d81b0

    SHA512

    57920c75fb4335cce9b26ef1f4691c021cc9fb960aeacaa7f325f7cef2d40612b6d60f5507e4ff9017883464c8dbb71ce907a25d24d3bce54e9b795b2ad2aa20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80865a020d17f8fccda2528ba7002b8e

    SHA1

    cf02cc01da17819e0dfe3993642d27d9f25295b0

    SHA256

    c9b8503ddfbcd267ecff960eb63420aeeff659724510abf488808d1db1879361

    SHA512

    296f923490132f0b3c45fbae79db8b87c01b86fe8b54081d12a27820eef3314217ec3c0c3c3b6bbfd0c55545807a2df9457879a9a27b474b176f0fac2e0ee0d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d4b96036ac34478015e8f06d3784b602

    SHA1

    dece78a7c4d60ec8095b121985199e33218aebcc

    SHA256

    51d1d3e8811514869152d19f4d3e7c36582ea780e4bdb8c41c2e3365e0a9f398

    SHA512

    0cb7b6d437bd583ea7de5f96034435b6e0632ed083d28e35c8c7012ef9bffb4d056b56cb290007dab089e12e701c3ac103c1799505093d55524d339b0b576372

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    02e615bba1afe2587497caa0f31afafc

    SHA1

    c565158ff5fa28263e3a297315337eccc22ceab2

    SHA256

    b39a3d617f6f5f3fd621a6aa4aac192815fc56628605a53dc972eed5cde85c94

    SHA512

    c8d1ee61c8245282227cf539cd3ab659d97ae2e58abf25ea8d4ed738d98c141ce892d8522305163a8bd4c97bd0c1cb33219924b1979246fe092677afbb69ab73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c9ce679f6d7ed9e71089ab57cd9dbe99

    SHA1

    33e1bf62b6e6c15e6a4220c7b1f1263d9cf15d90

    SHA256

    aaa7ae5f458c3c0079bbb5c8ddc07c1b79f9cee5237cad285a804b1ca178b4b0

    SHA512

    1f7bb943a90133d717a0947777bf6b14de4a32882ff2688e171ef0f6e99e96d76e39431b4b6ea7bf42d1978123d26921d35672cb26415d7b3a2392a93628d198

  • C:\Users\Admin\AppData\Local\Temp\Cab5D8C.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar5FD2.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b