Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    12/09/2024, 14:12

General

  • Target

    dc64373c20011389a4d45ded00245a9f_JaffaCakes118.html

  • Size

    1KB

  • MD5

    dc64373c20011389a4d45ded00245a9f

  • SHA1

    68b9ca627243826c6642edc8fce1ca12140a7005

  • SHA256

    4b828e47a5d852d8a194a3d4e3c9bbaabadd8f9c48e3c51700f98abb412fc632

  • SHA512

    b659ff2bc02253178b1f8c7fe03b9165f9bbe78ae967dd43b4ab47bc85bca2698a74584a1cd88e03ce73c4ac496d17285a6f0449715b4a1e5aea73c2698e15f7

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\dc64373c20011389a4d45ded00245a9f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2540
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2540 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1764

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fbd310d48dbe9b6afb2e08cabe8fdc09

    SHA1

    0ec645b584effa6bf41a696277b49d64b314803c

    SHA256

    83f24e4308a2bdc31521e4d404662fb269e13ba23abef3ea9094a07d00fd20f5

    SHA512

    ffc7eb2b65b9c9b31704208f1fa088e1607976c37afca990c637fbd9aca7da05d908fd13f8fd1a94300deec70ae254194ebd6420f9ab5224d5d3dc83633f4744

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    823337627988a0bd97239a15bd6280c4

    SHA1

    c6c66b0dd3fd871a081ceedb7152362cd25d0b4b

    SHA256

    9dba141cb8e34a0f7d557d38247d94e8f2ce7e3d8b9a9b9d6962e89a6717a1f2

    SHA512

    96d8f79f71447193c769bd202d9fcdf336fe9b583252f31d002c5a8a0156d65f12a42ba996841e2e3a8dea68c7c910c1ad481de260d35d870ab114080bc2bd49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4968a87b49ffcff386145231fadfe686

    SHA1

    0976bebe7c239e6964ed3b3d417c7146d34e18be

    SHA256

    b38d7618382b900646809b2a144479ee90413d55e335b5e0fcdf0f348a4b602a

    SHA512

    95557d6bedff4485f287fed6006622176247ba364dbba8c7dd136255f69df45b0a30fd54cd06e4e79fdf360cea0d1310bcb0ff7e109011973dea9a893afdc8ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bcc76a7e4a301193a0f0d667c8cc07b7

    SHA1

    145d233c5dc1e8607e8e45d8e086ef4dd9b49553

    SHA256

    87dbb420f8de65aa828510866644282d55358866520f94a6f6cf2c4edfe4e000

    SHA512

    2a3f203ad49b0d5aa25ec94b6e31bd2075c0312d04578cc55ebbea66be4a38169565e1cb4626878633e4f7c9b25197f759a70c333829aa5364b87bc29fcf9a67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa50c0ec1bab09111c71acf0991892e0

    SHA1

    81e6e0c367ecd796ef63aa4cb9f6b2b64f951aaf

    SHA256

    733723cc0f4d98ecfaa71310ee202abed00c830e0844e6dcf07887d36a2cbf19

    SHA512

    0ad18dc19483706f65e5e0a478cca81adcf049cdaef610d72a364a7a47aaf57bc15628e6f3788c6801948a857b4c71e2b9a96c2c8a96f8187739b017274e2d8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    323f5bf09a7d3b2ad816397ce8150313

    SHA1

    e1df3ddb9964d841eb00893e029503c416aee3f6

    SHA256

    397c36125c3e3497a9519f9064ef05432f58c1b15cea3c60522bf547e21d2ff3

    SHA512

    596d21caf3101e033e2a347060111cb3408dcd93abadbfa6653b640331e4aa8fd2098fb6a4dcf820d87ec94ce595388cb88379d6b11f05e885fe16c6b76456d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b0b5fb05b1ae97e0d6685a7ea80f622b

    SHA1

    5048a67a161a958c6bdd4cc5fbdef10366847f96

    SHA256

    2bae0a5697f7d691239a6dea3dcdd996ca91170da7cf68cf44ccbfb96d1e356b

    SHA512

    c49df41e73b9f7c000251ebc5e87f204bc0a9eff4748c182f77d2e029eee4de1e6f53712fe9215424c71f42dd8030cc6e172117328e802accf9791b9b4301bf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28cfb556f3647bfc8d14f8c4e1cd5a5f

    SHA1

    2d4c5753d086c7437618ad356301f4a8297502cb

    SHA256

    b16527a6551bdc5f09cdb88b03973ad571242fe7770468da505d00430da43bc9

    SHA512

    85cd37c1996b2da817e0bfd6a639c8faee35e5b0d7ba37614d7f09738c2778c45384d45ea4392dca8ff3dee0915b2b9bcdf04299f32bc1c5b0ba0d0c3b06fcf1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be8db8a9e17f5627298bd6db08aed1da

    SHA1

    aedd17ca0ae6537082e108f6e840ff1478a78237

    SHA256

    76b4db1661371feddb0a2cd6538ccb24c3d9f834b0800ebc8d48d29f96cc84f8

    SHA512

    7b9c30c9ae6faab81e2b358716d5d3a7a8be5473b1d3234dbeea10eb506ab714f5b2eeef8836818904eedd56a4c8424ca22d2c3f89340b932589ea8ea182c7b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f38843ff890b87b46e2f2c4f7bde62f5

    SHA1

    fe5313c151e923a0521dbb22174e4160332901f6

    SHA256

    b724a2e9ea16dab4d28f188048a85f92ec7985abd7376e194d855892aef3e127

    SHA512

    9685cca07b815de28a36e8d35d906102c7610d6e07ce977c41c0bc67309f0416f63bc8666f8aa2de99cf683ff420a670516de34f9a70bce6223f15b729c5b08e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b710e3ef29de30deb69e71eeff1a966

    SHA1

    7e9c21b8784ad84600275efe932fc4298b06fada

    SHA256

    bd9bece82251b4155676d7c793d7a8ee147e8d1c24f0fc285e16a01d13b7e928

    SHA512

    484bc8ea66eb3b72489c60f73f2734ee3216ddf9567cf91b05f56f21f47d93488c5e7b096ace756e2ff89957d8ebacb5402513661d9a120a9dad7b4f0f64c507

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b016a586eb3874dad8278cda9b9362c9

    SHA1

    a9daf4f873c8597d63e84d01a09849152ade3438

    SHA256

    c5f70c369b5414fb2ff1845c134cb3e8164398df2be552a5057bae62a9e4fd53

    SHA512

    30c2edb88c1c27a81dc4fe82b602b024f9dc01a65b62bfd32846845a6b07c71961ae2fac28ba3d42dce3697ff91fd1c8da3ec4483dabec7586c53548547c1485

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    822badfe762188033c4bede57bd2eb8b

    SHA1

    8ef4d69dd9a9d81d34b2bf93390fa0554ecb419e

    SHA256

    4d167ee6a6a75374062bad99da9438fe631e233be92560fe7982c89c0e062167

    SHA512

    77f08b7e84185d28918d6cb13751ac475fb114267a1b3aa1e624350ee9bd476c7af89cdf98d10cc740cf0433497583aa12b1f1f754d2a1cd18aa29c5fa0fd5b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89b30024c188b4ff13a82b7b535d3e92

    SHA1

    2e34bf0f840f2809dc90f6aa4d6a475005aa98a6

    SHA256

    a99a4938e7aa75d683191d4b87e5bc26fc6e96e6c4b41af5b29a1179579c8617

    SHA512

    dbfd24a46e31e9da6ed7ce631d9702ed67f920277663346a82e92773db91089b0a03b13371639d24d4964265308dcff5f8d704a26b52eadfaa5df6438724fc8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8e353fbacb0a578c278dadc51f6ea28

    SHA1

    005d5574f4f8da52b6bd4e62ed87ab26f89a43f2

    SHA256

    063f9a951189ccb26d139028b248547d8d328740f57e2a66b081b62a899e8124

    SHA512

    0e07acc473c9aea0c45cb3a9e01a06b01435c2e8c9741921f7c666db613397e1d9d4a6eb72e76065356e1dbb5d3221360bd0158c958dd8e420c710cde8adc53a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b9ca7d0ddfc59962908ba3f24cf9986

    SHA1

    d0365c4765e35fa9003aa01f7a60fb72631848a2

    SHA256

    5b9f27f17c7bfddb231e1f2aa61bdedff917304a7e15a832374bec1421a92427

    SHA512

    f3203a4742dfb33f817d6163ddc7b3930a43cf9cb5aa51faa4a9d2ca242bee7c0c8164e823a9f5868af8cca4e701dba570946ed82c4c0ec6ada1e2f6997c804d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e4754c387b81a48f0f1c629cc56b0e4b

    SHA1

    5b9293dd4502f69cc5cf0e904ee57ffdec0fdc3c

    SHA256

    49d25268deeebd90f6c2c37ba175822f41512017cec4d9f8aa24d23101d4cf76

    SHA512

    86a492a0c1f9de2738315b2183166e3102ae06b584cd2307bee1460de4b73643d58fbb554132737b177d320afb9bbe29454ce7e63b85875e710426206d2befc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    154bf9bf90014d64827db11f87f2b24e

    SHA1

    3647391a8e703aedf594619616beea440d7d6704

    SHA256

    26b1ef454917df164831ef3997f4c1e85285401822ddac17792e86ae2a3ffa21

    SHA512

    46e38ea2609f5b2d80104f17b25cd260bf254c2ae9c74f7378aa079a718e3c2fadfa6c81652541ff94f8356d1e900307308be2bff85595cd4cbc683069d74444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed4dc2cf1661d15e0f6d7d914cfee3e1

    SHA1

    ca4ba2b1d52ef939535d7a71e1242ce385c82373

    SHA256

    06826003b722175def93fe222f39c9822f7a28f0d5c2614590f30fef28763b3d

    SHA512

    a7ebbf7cca5876a273fd46488cf82b3cec57e0991c3e246a052733f04f09567644e4dfbd11ef7fdf1a0467ff7b5419a9c69469c979f1c923aebd4c849be4620a

  • C:\Users\Admin\AppData\Local\Temp\CabA27A.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarA2FB.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b