Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    12/09/2024, 21:47

General

  • Target

    dd1c46efcb3a571e7388dfa76ecbddf3_JaffaCakes118.html

  • Size

    27KB

  • MD5

    dd1c46efcb3a571e7388dfa76ecbddf3

  • SHA1

    d99da0d349844b2560ee532a7f4ceb189247b96b

  • SHA256

    7fc4e11d0bd2bd9329bdc8fdea5fa248fc09036cc3368fe7d4d0851e11538003

  • SHA512

    9e266048057fd95ecad904a0164e358f4ec74b9d0b922bc61a9fe135a64bd8e49f39591e21a0fcc0ac9a5fb61b1e111d9f61db57e2ca9689c238e62b95143860

  • SSDEEP

    192:uw1n/Mm/9okKb5nwwHLTv0vFw6fgUOnQjxn5Q/eenQieCBNn42InQOkEntMobpnz:tQ/4xa3uDSUL

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\dd1c46efcb3a571e7388dfa76ecbddf3_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2232
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2232 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:1652

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df7cc4504333ee93279dff708cb73f80

    SHA1

    f5ea99a1684c674f896229e0a773b7017880fc8d

    SHA256

    5759f753721cdbf35ea2106834e5143f10a8c5adef7f07f505881a3bb2b55db5

    SHA512

    c84dd3922d799cbc7eadeca4c49f80a9baa629b6f221a35e31e683312d31294bb999d22bae1d50423b66962cf92a5d8d9ebce0e6a1bbde7bed5d536beaaa637f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    563031d16cc02e9d0f106e95a6af106b

    SHA1

    57796f7d9502f1ec8c768fd87a486230e1c776a8

    SHA256

    7d578d8c8128e1e2bfa6256929a8399e90022592722d2ef9283407d43719225f

    SHA512

    622514cc7b9bb1c3f6d36b40635c6a6a814a216ee8e7b27da354049bfaffeb0b6d02d37f464ac327d93dace565954edd65fdc2f045298abc8796761754cf5b54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7ff59f4cf75f64418d9ae50a9ca49d1

    SHA1

    974763f9c39b9adad149b79f61ef26e52d7f9273

    SHA256

    65cb55b6b0d0a02f0e8ebd243f6ff21948cb7fcb72918528901a8ab691bb6943

    SHA512

    2acd4403f2d892d8ccc8a3e6c8a83e98a4edfbfd4d5d921c9f00976b406f0dcb035f0116cabe67c8e0f70896ae58634eb9c3240ca46c83919ee01c2453950d5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c81968fed29231e6ff978ca3b2da98a9

    SHA1

    78cf4f32ea6c793c31ff46a9b17dd3a1a07f90a4

    SHA256

    b77f43be7dc28657379c3ec202e15f25b6c65a8d7f6b29fb22a8592358e1e45f

    SHA512

    29c76cb9205ecf41788fdcb03c68d9007869bee0c2584a09236c6bb33c794237ca90f30743787afeba5ec6f10ba6c4acb5879fc204a689cf1999b6fd2403bac0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    74cfd1d914c80986d9acb0a83b3bb029

    SHA1

    4dbb9b2763a8434ba2c283b1ca30a3bf060d9442

    SHA256

    c8a08f7e75a201b47b112066065f508c42ad983fed84885eac9dd04990ccab27

    SHA512

    beecee85f70f45d94c0cf0240e9a6099c08c2d4266b063190fd1951ecc15782515c0781afb7f9a7a17b40dcb9e79b0bcd12611d8d9b6af543939e3b7ab218fe3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e61c68aab30fa1d3637eeb2a4d4ecb6f

    SHA1

    5a56bfdfd2ac669ead4c90540fa8c650c72478cb

    SHA256

    362abeae7780d105f63b0ed77fa72a0c0a6302947b62d984ee35707ac8969b43

    SHA512

    cc8674ecb26d5dc91a62cb5fd1deb7b73b37a682e41a39902889cc81deac5337bdae29b989692a1493b14392d627d13af4955763cacef455a087105b45c9dd21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9140a221506c1446aa4bb532f24da840

    SHA1

    46f8bc2003220881b6418a5382da9b270b965722

    SHA256

    4ee78924e299cfcd2324c729c15df42640c22b9025724f6e64d69f6629a88686

    SHA512

    280d79c5afeae4f073d34e98a104363b7ae6cf287d226c807657e950d10bf7336d449cc7a6f5ea40626a6731ccc9303937755f8db43f280a316675bba8c13e9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    24c5f5b56e5831e13937519aa73365dd

    SHA1

    fb4b83d27aa78d0c6a386823316066ec165e24d4

    SHA256

    ba919b48fecc385f81474be9672ec39227c8bdc00260c777b8580ddec0bbe57e

    SHA512

    b8f915e77a5298e6783e72551766b543367e22b4ee10331dd1c0551d80314bf22be955d93b1afae53288bec05ff1dc8d344756061222d5f22a925ed1889bc837

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    33b3f82a659fef0fd8339aa8db91344d

    SHA1

    21d439ed3a5e1667e6954496fadc583d2de3a853

    SHA256

    8143feabf322f1d5539a2ed0e98d62cf149d9a432c7bf00cfe026cdf77cb838a

    SHA512

    6f67b19617235467e9023d846ef406bff2d407fe98e092617ceda17a65fadf6662aeea67024f16180c5cc7e07f15a42202174d173d7f0a8ffb1119c9269c41b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1457d385fbe4a1dbbb6e94a678cb88f2

    SHA1

    71f927340844e0fd155ddba7014542d888b17841

    SHA256

    1c35102567fe7d2b81642d5c22fb70f8f6d7f279f06d9a7962976c51e7b8d07a

    SHA512

    69b2d97895a83a0db59379e03383aea70789be47698736dd68b78574cb22c3f0420e9940e3dcbe140c9c8667f5ba30700cf8b5e56ab450dc9791405e066e7ca2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98657f5cc5f736c0e278914bf414eefc

    SHA1

    a94c29021ed2cdf610d8fa5bb241bdad0f945f66

    SHA256

    15e0b5928e518f8f38661c65afcccbd150a532382aeda54edcfb7e22f8e5d436

    SHA512

    d3b9b544066c9a5094dfea6c314171f24d70fa4c07a22b1a7007ceabea2119c78f99aa6317816737fc8e3c921579e28cb80c6466dde8687c7754483c72ac2543

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75abb15b995a35312c3063edfd6204ff

    SHA1

    47e7d6c49ca7ec555a9be61de498521d821b6b37

    SHA256

    99dc5f01a192ff32848e2d64b608f83f353a7908acbeb6f666db02fdeb1b9f7d

    SHA512

    c6c86435cad1eab4dbb066ae640b8162e851b5d97cdd9c2df61ac049930416cdff2f1c6f3be56e382628d8354533267b67c1d1d5188a872d0c624a1f3bd06bc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b56da77e596936fe3b4dc63861f2e43

    SHA1

    54434c1c2566eff2efaf7b61f3b855e85afbd1e8

    SHA256

    7a995af409ebb1609d0b2b57641ccba6e818e1535bd2db318f18250df4f63ee8

    SHA512

    b4c53af198c3c540bef4a70e3efdace77cee2ecea94b7a96ecb5f387a599d9f30ec467fcb5a5c338e70c9fd662bb91a6cb918c4b5f179d97cb1fa2c6cac15feb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fe4d97c9570b0e7fa3fae4b7a861aef8

    SHA1

    b367298fe6986cc96b5ce611d983c1bc2e21f7f9

    SHA256

    133deffa0db45fd6201ae58e0426121c40ccf8bd972945ed2b380488c5d9246c

    SHA512

    b898543df2da68fcc2f1516e22a1374f3072f1c520f5239753c5d5c1e6e49ace09cb7b989716c4ba4df5af846712e89a72cf007c1e7fa2c4a031533ecd95a79e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2094feb7859fc73a8bc6c198e2077761

    SHA1

    c5c39f2441b153a5840861116945d1e9db72c6dc

    SHA256

    a41dc525ec838bc20f2abd8e9c0735f012fc7b812af18d938dc9cdbd5181765e

    SHA512

    0237e2e03b6c4c359d942de62f4ab6ffbe9ac88dc32c5a53ddc72e5847c9b914af163464cc8c42709520d1909f1f046cb187ebd0bf819366f5e0da99238b13d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd3d92d258c5dbce61604c1dd95692a0

    SHA1

    a4ef7f719dd4bce478646d6652e760403b7f7e13

    SHA256

    d8faf8cb9686438582dd8f36798002f78217488f379c4f4865b0dd0e64380c5e

    SHA512

    d027b87fdcb17bf285afa06de54cf83a336d42de3080c2f6493c0bd28461e8ba6bf7f2346f412b102c0f2f01f6d66fa527c8848969dd5d580bb4cc9e262a58c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd0dad18ccf6cce048e389d7aed4b0a4

    SHA1

    13582c6f1d5533a81883aa50c8619fc8b1984bb5

    SHA256

    f5e5a2e6eeddd965380915fe1b52d93f32eac3a500a3526e8ef15f381c75d61a

    SHA512

    025120967da58a1793ad06f90fa6585ca2cf0add36a61b31d191f32477df9fc532ca110087a1a1d8a6b577d00ab7b397b6417533acb486be8cffbc83e808ef3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a52659abc58e48cec70440e23ad378c9

    SHA1

    5ce1c5b2fe1af3557b7bcd456fcab7c33459c1dd

    SHA256

    1941236c166236aeb0e8b3691ac8b46ebb46cbc8c5e32259f3e5d804042ceadb

    SHA512

    8157e4c5853fd3ed7a6234479aa6fa3f137ce61e11f316b08be4d3c53c3beaa0e7702408517acd5a9007149e36f8ee89a97766c523b5751b63ef2a21d13891a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    27fa1057a4acf6d80231dc3566a1527b

    SHA1

    48cc39d0fafca24d931eb9858a3afbbdd71ac21e

    SHA256

    44e5542ff52b3fb3de3ee08482a9fea8b39a6295048d0fbc45a44f8870e71108

    SHA512

    40c8ef2dc0ee94c1d2d431d9ed260dbbe1ba5f348ef1f12d08925f4999216162b9d0bf7d444626f185be2771a0ee7cdb6d91251f7474ea35aa4b291880124fb4

  • C:\Users\Admin\AppData\Local\Temp\CabCEC7.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarCF75.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b