Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    11/09/2024, 20:44

General

  • Target

    db2f002c1e4c3134052d0fe3f63f2903_JaffaCakes118.html

  • Size

    53KB

  • MD5

    db2f002c1e4c3134052d0fe3f63f2903

  • SHA1

    bd4cdbb53dd78d8cdf98ea7dbc08bcd6d5987a1a

  • SHA256

    178edf1a4771dc1b265399518629f72e6664fb6cf8fc3d633f5369b3b666011b

  • SHA512

    07824c2925567838066b64941982714314c070b133a664506619901a44c361302b8b2b61589d8d7db260fd46f4253a5f2bf91a27e4435e4c4e1e92394e639e56

  • SSDEEP

    768:GgOriWNcaSoagG5m7ZNeFLvDvhARQCBeDkDwSIBT2SiS:x/7m76zOFIBH

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\db2f002c1e4c3134052d0fe3f63f2903_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2532
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2532 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1992

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e6dea5960edf2a104f6faa6decea498

    SHA1

    b487a05a939c9828e89204c004ce35ca5ad042b9

    SHA256

    5d7336b265aa87a227a68e46c2bec5de038390a08f96a996067936d2e2ac8559

    SHA512

    f98ab99bcde8528ec8aa360ccbb27de193ee47b0878d9483f8eafd1ec8710d995fa134381498914b73ab5e3efa5ca4c8c77c9cc3dbfd1777ba7c1b1495be6ab1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da029e97fc595c278e6b560a0e6f7b6e

    SHA1

    7e84bacf6f6e2afd9e124df7cd02ed4d10cdd331

    SHA256

    7d3ecf59061fcf23d90a27012e5e67f55b0ab5fe742eadf8121eb70de347ed5f

    SHA512

    94dd3de4c77228b1496006f2587adadfe6f0b17e67c98292e76de9a0ec323a737b8c105bfa48012b3fa700af571dd75e568647112314b060c08a37512159eef6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2cddc979019038a7bedf3f88f4e35dc9

    SHA1

    11c12494f5adc4ee67440047533986cf36e24748

    SHA256

    0f7b2165a3396ecfdb147e4e1344f390d931b8e07ed6319d85407ae86aad9e29

    SHA512

    f436dfab42f645ff2f1ac7bea764897b3f1d8a05ca148077908251ae43d7862b79b269a78988a2e02ad04367cfe98cfd1af42851589747a6c9d2d5b2c70e3023

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    71d320472f63d58be5551f980d009320

    SHA1

    d57ef669ad4119d1cbc21f5a0eb62b21eaefae48

    SHA256

    f03e75113eed5202f67f7bc34358c62e1f1fa045db152223894c2aa2d42d65e3

    SHA512

    98c5c4512078aed2c1a30c5f2c4080396f48af37258829a730df2647865d151ec5ac19bbbeda37c5bde555b093a139964b948307e0020906f3bca88f1d3cb83f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f4c5bc58a99ade059dcb70f1b1a9fa73

    SHA1

    c38aaf4b89be0dea78d0286fb634fbd63e643bcd

    SHA256

    5fe9c598e87b9ea507484aff0680f28f8153bf276987e132860b374be6424e75

    SHA512

    77b6f87779aa3ae7a0c6e3b4dcfe16189ea43dc06b98af97057eb1fcd959cde99d1f187b88515774825d101cfc1f7b4fe3bfe135134659fe8e2e6a4cce247ac7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fe9a8dc19148c1578678aca9ccaceabf

    SHA1

    8f183cd303ea03cff3253adcd10673ef94f157b3

    SHA256

    687d6e6f858809f4ec6db1df5b1d04856432b9a09b2ceddb72baf3c79ce361ce

    SHA512

    055e430d05b07e1c23c778e9425e9b8af7b424531e1671bcb9398f3178f19022b542f20ec15fdc93776b264e982ef7b6eb153add41eeae26a519ff212309212c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    60234d506c14dc123d0b8676503f5c53

    SHA1

    b4a84ac77375ac5f83adb3b9451158ed15a4f884

    SHA256

    427116393b40ad5d500ca522c90070a6bb35baf4530cf2069b65378e5b5ae476

    SHA512

    b38d2caf37275443555f2d27129c7cbe8911de72e1f60273283fe1ea451ff23b689a2f69cd6dbeff9ebf7ac82c7a2296cc28d865727a5eacbe30fd3b6482ecaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac700c56080f1418b4f29dd36b4b5356

    SHA1

    92aed798eb0b091da0dda8a663b45be29031e545

    SHA256

    1c6bdc47c4a2448f3654129150a5ea65c34afdbb12408b2ab8bf8e69d2ba1c53

    SHA512

    26606fb531e059a26e7946ddc89379144d8819c2a3aa4ba3650a9aac2ea68fbcdbf714fa06680dd3fc55051e4f4c386bb0afb0ca901542a3711a49e1150d8aee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d72e8a71a65044f9bbb7359cbef11100

    SHA1

    59b8abe266cd7ff2349ad52bcfb572041321fcf8

    SHA256

    2863a03a47b9b0b8e9f439477f0a6ab3de68a61124f8ec81dece3dd1f9c80741

    SHA512

    6bbf103929582e938ec8a234e494931c0d1a7c7d973ad74feee32fd21e725b83c622a88bcae2ff36000a7ffbaf62e65ce914e58feeb07507f1654849fd88782f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    733181938321659950ad500fca375cd7

    SHA1

    de4f45a761e2c6fb145d7bbd541fec8d44a660b6

    SHA256

    ec1a66b7c75e93573b349cf42dd74bf38f3f53aa9b17ef6985f8d2f21479c3ae

    SHA512

    54ee2aa7882d3dc220ff19f7c80482e1665ec2ae0e78b9031243ecd861032013d9cc5e310b74f6ede114da2be83035f9cdc95444008a7de6f3fac40f4e537238

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6a31b84ba85ecdcd3248c2cc6b4864b

    SHA1

    7a400c7d8b535a5766a6097afe2298df85cc5537

    SHA256

    c36547b8d82ab17ada4a0178b31da68163cd91b370bbba65b665bde8d2d17091

    SHA512

    64d78425e363b6f710015487e78f67e8af12c4f409d8879c04290c43be8bf9e0d275800d5c5414074b4b8711bf88e97e69579342910bf86f9d4251faba7fecb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    897ddae32a69e66922bb932e104f1505

    SHA1

    2e1fd0e4e327f89f73a99e0435c53f665e40952e

    SHA256

    83e6857586ada156b627c010f27530e3474db8d06952f5a3e8afa401e1d31969

    SHA512

    1143a6d654a67e400f803ae5b4ce1a9013511651e9c270859a4adaa5d2f598ddf3ac15ce6337425aacfdc7baaa23cab92b9d00bd7a01bc8338f30fe501346b96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8241ab121a7e0b6fa0ee6bba616624d

    SHA1

    ec7eab14e89099e97488f7d2f26e646971e9f3cb

    SHA256

    31263dc2d7b4ccec5d408d2d97abdb5629178b29f6856002d3a86da7ea9f3b7e

    SHA512

    0f6f397f6441401f4da7105d357766e2cf20a7e4d9db6f6584a59a807883f0e536eeb10d8a8ec88ba8ff55b3f32e9adf202bfd73c8044fc22111c7e23408a62f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    250e053cd96f6c894c76790786b12196

    SHA1

    0a292e3c61c4dadae414b030e930e830f00e1406

    SHA256

    d2cbb0a3ac9cddaafc2f03b64a052a1438f3be0e1fa4dba72e4bbb9ad8ae55a7

    SHA512

    436e2dbe71861a7b1759ed6d14bc61a2dd75c7c6c88aa7e40b9ac7ba67207a3e39a9aa395ba6af71edcb0459c00b11a1db02e19273a9ef4a57c2dc28bc37b4fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bbf55b17babf2cc5b4be4b2c4a11b65c

    SHA1

    fbdb8d1f0d5def6ac855e6c792b3b4803f330ba8

    SHA256

    306758c6d9180aa6a2c3e4b20e04a106d428f30a5d598d52331b5c391e0dcfce

    SHA512

    7dfc4e684bb2882ae717ead6017e291556fb6b84da0b5e741e588954efec8da5519560885d6b36b415c0ef2e1f71573b506661d26666a18d607a5d417dd1c0e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f439dcebb58353e188e3265db0c7bc19

    SHA1

    e7c35435e95274b60beb0815726c2daf0eca70da

    SHA256

    bed6c4e73c6074d2ece36e9e4af8097dfa6f44df41d8662595e829b0546bdf34

    SHA512

    1aa4c92ca59a876d937306ca13040515e5fd7091c90e81490118b9cf0c3beef6d4768cbcaf8078f0be8d9c0a556a93e988b82f68791dca884be6e2e89181eaa9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6bc0d22691421092ba85cf27a6b78378

    SHA1

    adc6a31bd0eadd5dac473d0ced4a26543b5dbc34

    SHA256

    b76728d834f5e6a1b34e68e1df7162b276fe29f04234db88024d29e7c54b5ab5

    SHA512

    295ba3a21d7b4cb454f7c3b6a5865b2bc3905b5ab9a87157350688502e3f9be5251d011755cebb81b793d39ac217da4853fa2bf10e6c7b97774b61d6092176bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92010a469e5d3a27bb5b0c0e5d64b5ec

    SHA1

    7c032d12a8fa4e14b3ec35686b1497a6e28d10d2

    SHA256

    5156cc723cb6bc1ccba4cee090d4d238e38bbead285dcd587644bbe3ecc8927d

    SHA512

    8d7791634140fd39ba7fe846bf5a89b3e30affe998fa9ef3fc2302697c353c3f237c10c7ed9bae0f64d10600cbaef7d8bcb1dcd1abc4f4d37d9f59a3038ccdf1

  • C:\Users\Admin\AppData\Local\Temp\CabE523.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE525.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b