Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    147s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    12/09/2024, 22:19

General

  • Target

    dd2670a03eab377f1b982bd7847b323b_JaffaCakes118.html

  • Size

    201KB

  • MD5

    dd2670a03eab377f1b982bd7847b323b

  • SHA1

    e84a82a62b89e798c18f8bd0182147adafbde3e1

  • SHA256

    4870a86a44c4eb3f0088c5761b6ee294b930f643c86434483b37493b348291c8

  • SHA512

    1548d50572b3dae656ff709f8c88ed48a0c2125ce35aeb2c70b18740bfe0093cc1134be6f6d7a52aea77084003a11b7670c74fa6b361d7e9b2a611790de48a0e

  • SSDEEP

    1536:kauh8s4MOMqFKUEVwLSOoFjXgSOtVKZFuFF7KSL77mYGvM:du/jXPM9

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\dd2670a03eab377f1b982bd7847b323b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:468
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:468 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1392

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5617e4089eed70caf0afc8d66f84306e

    SHA1

    9a7223f1d2276f9c44186f691359396e09198cd8

    SHA256

    77d891d879a0e1702ac50d01ff8d1ee892200276c97b221d8e20f2bd04eb8890

    SHA512

    d5ad2ed2363b5caddb3b98fc1d10259306bb980ad7757d99922f65afbb9d07d2c3bad9dac8b14d12718341f147fded4f31260fc3ac67ea4c8d8fee0e650ec86a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    54916aee171366ff1757068e1dc80d7d

    SHA1

    b3aa5cee15ace20817d0d3264030142e35547588

    SHA256

    b2f9e6b847310ef97e05e72538830cf4f2357580bc5cacbe51a069116df8bb0c

    SHA512

    65eb77997c45823ab6c8d49275fa8b68d265fd74db021fcc9f53e618ec6e08e1c262992f2b166091489b071ed0343c13614349223ca4294a4ae1e87a85f51c67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    378aa071a105144b0f6da9871caa8c0c

    SHA1

    a70f8e212ff8eceec0a9d8bf8420d56395e60882

    SHA256

    a21c4986f060b8b1f64ba368b2b1abc9adfab85605b0046e2216fd59eeb2daa4

    SHA512

    cfcda0897a863d33f49605785256fa1c5a8dc28d56950b8082ccbb93e7d5746b8687910de3924a06469bb4118f07e6fb88c1555ba3271b442bfca6231721eca8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1bbb346ef12fda60915f7a598cceeb61

    SHA1

    625d71d75c69bf17839bf145c6152d0571b96d00

    SHA256

    0d8f81af1f680ed30925f9f4f496ff7904d00d5b21bb44334b7676691f922878

    SHA512

    d0c61146422463589b8ec3d1b44d9f85ba1e78b7955ecaafeb8f4f261361a4df0c41708172933a5f2cccddae31ad7c61842c44136ea16813cd0f0c7ba8525446

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa39f853404edf9ddca7ffacc8881b4c

    SHA1

    3c9d807cbc8361a71c7c896901cb9059a1a61af1

    SHA256

    2a2f6ae72ff1e280e8bce65e21084d3cbf074db4cfdb858f2dd6072e1713026b

    SHA512

    45956f274de07a6e31b5e67e6ab0458c9b5489586a4162bbb9b8e8e3f794282131f9e963d828e976626e937e590d908f537c981ada5b4c12a439028fe088a505

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b83bbff4ef7b720986647c0a079b6b22

    SHA1

    7b19f6e7712c5fe2b15fad88f6f9707351e12ca9

    SHA256

    1cda77ae2f44f1f69349da83f4f769d1067cc263c0409bf6fab9bbe71c668ec0

    SHA512

    9fd646e13de4c5143bc18c4c37b6f5aaf3d09f2032da212165b2b52d0268a0f557683d9dbcf3c232c69d69d6d61ea48e1d7131d49c0dc377c4cea4d8b6e7232b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae749e43800c432738dee5aac37f90f7

    SHA1

    be294a992a03cf9ec44f9a09e992d7371f787aa2

    SHA256

    00ab0d1a2efa81764e5025bbe993f3936f81ebe6209269f2a4be715f8e382634

    SHA512

    903ea1708f95c4fb11fa352d0ee9afeb74eec243cefef09ae0260cc4621f95c77522d9b19673bbd28fde5eca1222882edee3c8e7923fe9136bd3d3e663b3971b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    62c64e1ac4f6699409fec2a219abf177

    SHA1

    ff3129594ec52ce790556475aa45533304f3b439

    SHA256

    8984fddb9d5c9628349bedfab23c9c525ba8b6aec5879249ef74e5625bdf986e

    SHA512

    804ab896be5ef4d55760874f7b5a40ead1d3682b357d96fbf3c676856e0937f51cd8be9967dc5478629f4ac96e45ef8764800c594319ddf786529e1828b054f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e38c932e303a76e6fa5cd4bd70440a1

    SHA1

    addde060a9926a7bc3f789397a6e7703dfc15ca0

    SHA256

    ad3666957c8ac5b4b10c5769f5ed8954be4e22f4b49dc3d511f68a0c54d7c837

    SHA512

    f397524fa15c3381deb44b56d0d664e06e925baefab8fa4ae520d33755384dff88af8e79d4dc60026c221e107ddc6e12401862594c3904daaa4e0f307d25875d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    adf5988b704ac3281cc75b8fad7e5aad

    SHA1

    f111e5f7c544cddef0e6db181eb0fe9e26256980

    SHA256

    00fd849b6b8085748e1bde3db3ebf77415a245e5165fee86104d123faa886b66

    SHA512

    cf443a18f22ec6e402a2729976d473df71c5754ad440ac5b826d0f16cfeb9f2742eec615973c9e41be67599a7bf9792196237b046352294820f293840efdfe59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8a6c3efcdfbc958cf80306217aeb5c9

    SHA1

    cdd0f3a5f0fc830bc5cf0adf6a5f196eb401b0a3

    SHA256

    b828e1c49ad13e8f9b76aa2289293b767e8c0e087f6f07f51612ee6b9a1ceb40

    SHA512

    5b8019e20b9c73ca3f8d406aa38369389ec7560b63394a014bb8bacc65d8f174263326ccdcd00eb9feda67313c783ed8fa4211d38ef3ad7ebcb78921dff7afdf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67310f1289525b731be17c17e60434ad

    SHA1

    f2e1e8331ec2fbe3187c38ae11f93909f914ff38

    SHA256

    be097392a605bceae600766abf5ecb858dc7c25a0ef635f5da0e4163189bb2be

    SHA512

    408fb213c01d47efb347299cdab9c645dcf5e4104baf80e7710f254549157ab61b133551c22bbb87d5f1a2eea80eb241c6d7adab35c44e9d1824af1f098d3a54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    036fab4bf041916e030077eee9a5878f

    SHA1

    fa0cde558e429be90aa5b7070855c669f6a06b8a

    SHA256

    53dbb9f73e49f419dd96dd059b04955aedd893c86d21407070a8a2e99f371e7d

    SHA512

    ebaccc3fc0478b0080623054f11eb2b6afb2401ab736548dba98063887932acb19d6329a0ff7a884b54d1c1c019f2af5d7a04cf26e729b5e4a4008695e799f99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d1b75551f5f20431daa5620bd86aa9ef

    SHA1

    9a5be1305b6f900332f5b056a6d5ce8e325a869b

    SHA256

    313a5a6f5fa5830a29d569f6cccbbfb7ea786729abbdc7a1bca14a3bf3f29bd9

    SHA512

    936541882d1bfd55dbc457dfb227956f1185501ef8694f5790295f53269688c93dfe029dfa1e2c9543ef510d6f6e7382ea612e58d8b46f7c4b19cfa90f05303b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b32212cc0c2d18aa0d3b0e1bf1a7a23c

    SHA1

    06ecb3dcb9c5c9d1d42e300325a00d24ac7f80aa

    SHA256

    ed4c0e5172f079498a1cb68068a3987062369d1a7ae12e7fcb5521a239b39d21

    SHA512

    0cbb092e24555e7403cf26b803efe04a78316b498b0c36e79c101293ed9540069e4e43a50e74aceb8ae8623c810f69b71398f982fcc6fd730d74496846c57042

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d260b1e203cfe37e553c4320655170d

    SHA1

    a44922cf32a3026b4f1242ea577ded26feada585

    SHA256

    15b05db1b0c855fdaf97f85ae58fa9a43e0dcf4422fa6141dfb4eedb4b3561cb

    SHA512

    b9c9470b433b9eed7b6aebb3ae18d67e4d0db1dd0c992f9a7a08792d289ec7d815fffebb3ddf036dad3a632ee5bfd5b029f9897b63e137789ff54e332a016386

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87a9df9da2eb25d7f5787d4c65c0266a

    SHA1

    3855b58c4f942cf7c3302554a1749c98c7ea83b1

    SHA256

    edad92b43e22cc1ccde8f5b3d7a03fd9ec16dce93cabe9d18e6c0bda3e12552b

    SHA512

    17968c47d3b9b5174c486092550f27e2804a6f20db3aa8b455eb438a81cf76b131549fc6cd5219321a6052b134b9099bb0a2d4ca6dafd80ed5e7c1479a0f2036

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a6a71d837903b92b6548b4a0368890f

    SHA1

    5144fe2310990070c214680614d08227999975fe

    SHA256

    fc5a2f7f2671e999bbb6dd07ff811db9fea2710dda013a9b2bb397712e169f74

    SHA512

    7e645e88767c87dea68be2d9bd8f54b7cb30bec64ee799345e6ef02afcdd72f98b01cad625531c808280d27906971d1d934878cde07c966de45b1f000104fa7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f3bd45a9a1b1b1e3d83ec593a6dfcc3

    SHA1

    afa40c756d85680be35b68ba518015d82f562a3c

    SHA256

    8d995f0057d3a769a304be08e5785ac9d1c278204db8eb9a876bb26c18aad4aa

    SHA512

    f634e2e35456e29caa1410dd60cd966209ee4c0585fcab75fe5f03b8bdfc24931ada86b74e205e8373e84994fe835cf468d39a7dd239069fef512423c586673e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c23233fb7acc1476dcbbd14a4455c06b

    SHA1

    861446ace2ef81193a72e7783e4cd256e32be17d

    SHA256

    7dcbfbe2269afe9efd2e34bfb56309895664fa29a26769878d38dbc3558f1e46

    SHA512

    acd6892448fb2b482e44c2e5d497867cc1c5229264091838572e8fbce5e5eda93f153dc4bc761eecf61de81e00dd80a4ad957c2c920b70e4111c23b617429d96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cdde863f158b8a547c27693009180dbd

    SHA1

    a0d8eb147fe9061975c231c732da47ab3ab615ce

    SHA256

    728737a3c11fc6f15af26778ea2e17bf095781c987a77637f9810aa14bf4ab82

    SHA512

    9341d39cf8a994380bccc698c23b5de73e2c27e124b0d9bba2d9693fc20bdba65a41587a7fa374a22d2a808a27d7e8b6b58b795b177d052b76a66b167700e65f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5c38f20e9e63f26e58e36e28835cfb4a

    SHA1

    1c4263c64e720fb8eb22d055208c9bd0f556feec

    SHA256

    ebd70a156dcb8f15aabdb9efac62967bf3bbd3eebda15a62aa2f20d4cec1d366

    SHA512

    700b909fa8fd3aa4c085fc320863bbfcfbbb9946d6de3a0df81e8270a1e0ef5590dfae07e606c1955e706787b66860a17564db36dc2bd2b91c0d0b12a8f39115

  • C:\Users\Admin\AppData\Local\Temp\Cab8AD4.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar8B06.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b