Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    12/09/2024, 14:34

General

  • Target

    dc6df09837d0edb8dc0fa3d9fd61bb7d_JaffaCakes118.html

  • Size

    121KB

  • MD5

    dc6df09837d0edb8dc0fa3d9fd61bb7d

  • SHA1

    9ab4beac7ad5e531a4abcfb2b274129b8f383b8e

  • SHA256

    79683a59289b04eb4b6a024e7207eed633c405dde8418ff2130443970cb88dce

  • SHA512

    e3aa81c54f0939368c04db01c320f27ea570e7f53defb31fa94a50468661a840dcc50125d17490b2f0ff20e42cb6b60dce96cb63576bab68f85cbba287c58e18

  • SSDEEP

    1536:xTKsSyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGL:V3SyfkMY+BES09JXAnyrZalI+YQ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\dc6df09837d0edb8dc0fa3d9fd61bb7d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1972
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1972 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2408

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    95a5b58d660e2f4783fd9496885b4618

    SHA1

    29b0f64fb9532616c777762f32b158e1b4e5002a

    SHA256

    efcb8c525bf384678b2d95977b9c413f11f4fea48a1824f3f341e98571bd9cd0

    SHA512

    d70fbeba09f9215b9a9e5aa239539b4b8b7c7ec5cf0c6c39e797a11b9d3d6e1f4181b81c9c3e46adf7bb66e3abeabc3422130475124a19ac7943f0ceb866c272

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    09fa4d7c1907c97732b1c41de258f844

    SHA1

    47481bf080d96c8e89c526899609ef713a9490d8

    SHA256

    cbeee053def0f3c3108f021ce7ea96fa60ddb7ca55dc6a1cc97fd53aeb4bbd56

    SHA512

    8f1007121aa5e2a83a411a10be97830635838dbe05b308e9c975f7aa81e4043f3455eebcac97a32f016b8fb5ccc2fb1b9ff40c2d3c9af3054a3a0e3463b80d42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc3334e0f107d3d213993a2fbd772303

    SHA1

    5f04d2b827d2cbdb03cb44e3dd46e0efc05f97f8

    SHA256

    a314f7df375cf8c057a3f999c8584ca8ec23da5acc40cccdb6811338002068c2

    SHA512

    5e50dd1f09a3844a8fe140339f345a69028f88ec87551e3160312d633ba70367edb4f3e0d73b0894dc653cd447b09db7ebdf30a1134d73db5df93dc20d198950

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    03f3efd4d7dcd15ffa7bd1853f3cf217

    SHA1

    e8b286bef50af5bfde72d4204980f73024f01ef6

    SHA256

    a52b1064752aab0663f56075894a1e90ac34dbd707c94bca75cf8436780cb0a6

    SHA512

    6a74e272fdf7dec0c4b5ef81bfb0dc04a6b6b3cf98fb833f1cbc300536d2dd98a0d5d47ccc53bd44e25eabfd5cf934c37d2c5b3f9b0e573f6250ed38fc7b111e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e889f8147f18d8d5b63373f1cdadd19f

    SHA1

    4fe1de61c8854869463ad29189e5d743c5cc2912

    SHA256

    b8f591b2885bbc7ceb63ed931593a5d2f10f33449f175b0ddb6bf63687749505

    SHA512

    f8a5e553c6c3b8b58e38ff04dbb0d420a424d205b1d0609de9e1b51a0370e0c19b0efea8c74ad95fc295a1cb54ec6f0c049afbce76f4ef3ca6529a12e1e1ea9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bdba0571fc3136f712346d5b2a814371

    SHA1

    4f1f7b68520a2f5319e29e3b7a2cbe566e793f88

    SHA256

    796aa35fd219c4bdda83e371c7b2d3cfcc906db77068fdfa290742419407da29

    SHA512

    b79faff11077dca561411bc907eb05d7415c5f606cf17b254cd4e90150d34ee522a67955113a1cc7df1e2d3a5d8411c212ffa6d100512652af66d82086cd747c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aedb654f529ebe39667335c98f41ad80

    SHA1

    744f301726988c83ed0b52bad5bc4cae6785c09c

    SHA256

    659677eac4efc80c12431cde9de1ae0233038c163e528a1db0c2ff90ef595a67

    SHA512

    938e45a893e0210b5f80cfd9337fc7b3cd05af45f388f0238382e27cf31d27bb7df66c3ee61524bf14b02154944dac36c83020d8ee0013013f57abdc9fc40f77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    13338f2639412b6dd524a68345aa2059

    SHA1

    56a116bb664c4f84996f5e733795c9089e440838

    SHA256

    6cc4de6aea250bf04f61070d936f0538fea80ff3279a1e39934bd96c1e74c392

    SHA512

    da956e79a8fa3dbfe1b084070fd09ea54632a43dc27c98a2018b1307da5032afed7ce030a065608a5aba5657bca23a99b909ab86ff3ca401daa1d0a5bd94b786

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2847666157d9f8c55eca07306914c776

    SHA1

    9cadf51d206768922d982dcc16f733c4983cc2e1

    SHA256

    08dc159759ff33f3b16af0d2e6b8d59b9c123a86d723ca9971f214606601a4b7

    SHA512

    632f8043cab102bee009b8a51fb1060f91cdd42892763834af8fe964f075c6ca0884bc3291cffbd7876ed511c17e26ba601497928f78e198e74fd10f19ccf8dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22a3913b66959207c7128f2be494fb85

    SHA1

    cd1a808221e3a51d67bde18eaa612b2daf686d72

    SHA256

    e57808e256e02e784b5f9f559c2c0674550b902f0b003c5524efd9b9b7386e7c

    SHA512

    1d71b88514ef745d77af058368fd6c75d5231f7aa84b7eec9d4e5cb17c00152ca91c172903e0fd61b3b17e1eb93313903dbcfe95722b6181c2c00079c60646eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    200d24323e614968fd73686229318e1b

    SHA1

    ec94cf63fd1dc9455439819a1de1d1394dbd5714

    SHA256

    f63d1993a72c8d7ad1dc5978495b0e3bb50e5215cab828caf0100b855641b9f7

    SHA512

    b7e6882f2f0fbd93e2379c18429899981266903466f41e44bb70634468097ea8e72f48c20f9b8b5e2f334cdb38fdf775879a035b8661f546f0bbe12cca257203

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1341a38e18514a38bcb236d1880f8141

    SHA1

    f32c27b465ea27c8a1e6421872381f0a6cceae17

    SHA256

    e45e62382036688121d9d81d3bbf89e2bcc3100461d673686b5f166b76023ef8

    SHA512

    2535bc453bf19525419cf376de6bb0c8ee5595df80c408bd2a2810a449eb0dce7750ac208b191ebd306bbf1f40ca568b6fe6f85a32d39d9af3d2fe14063c364e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    335ce24e7c479ae9da3f67a57a7801a7

    SHA1

    036bd8b0a7d4e8e8dacfd19e91370307be0c78c8

    SHA256

    bcf2c6a0785713a7bde645d7842d0b973a0752a6ccefda155d920cf1a674622b

    SHA512

    d91c589fe19e08de3cb611ab0cc1e37a0410e4aa567d2bc542659112fd7caaf8899b7c1bcf9a74754d98e8517606160af572880b4a41ee2ca91f7a0291d575bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    94074cd61602b6832c3b8aff82d4825d

    SHA1

    0a278b9751868073d9c074339512d2f9826a864a

    SHA256

    977c573c89448232b2a014d5be3e5c1abeff05ebaf8941ce5950ffc4cb41314c

    SHA512

    0111ee79b8ea2c99e1a5f06e3657ddb96bd9e3d57168ea385ae4c245ddb113d8912aa0c109fcfca4e2415ee49eb68556955ed32712b2f0a18219d80101a86ab8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ef84572100f0adf83c5245aacd01b9ca

    SHA1

    ee08f3f93b16a7b951fdb86a497815cc5577f407

    SHA256

    8e92181b3d628e22729d0422d478781d55f18be9daab28fc2c127c5ba9365ae2

    SHA512

    9e1b7cd58700195717aa5b7084e7ff9216f2360505dd566e0444b3e2107753d98fd7eb4940aa0742eb0140f4f632d1b1aae4fd5bc2fd27673975a58928eb91f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00d80771d7f44d6ad27644ee2fcb63cc

    SHA1

    f7e79c172753e992d94a3c5eeb5aa1f08bf7b690

    SHA256

    b8001ec54b3363472700e6a4250798b6f16919d686f16b153eed9a8ce96572e2

    SHA512

    17b75b95f8b83c04752ddf9caf16e34002f06dac7e572ee747602d2f9c63f82b88166cf266d5dcb0733ca6b15454b648b98d5170ca099a9fcc18252a7cd3d098

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    160f7f3c7d4b55738c33512c6326e267

    SHA1

    d47407357bb2b6094c29e283599cd358bdaed0d6

    SHA256

    5b391580dace3a6e5b4abbc460e4cd9489c72c15ade2d25c6262aa85a4bd2a8e

    SHA512

    c4ac181e1a27cf5db2169d40956b56b5a08c8c1b5596d3e27804c4af285d746d1b0756eb7695a0c5dbac6b1c24c6bba701cd7e766951c5db5a0173665464a6fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d5599989542c21bb977bb8c778a3767

    SHA1

    fd0cc469b218bf1c8e9a86ed29cbbd5f23c7d3e8

    SHA256

    342d4974808f07bd2cd8895386740d57f3655a6aa6d9e29fa3180cb68fb46f40

    SHA512

    cf05d7c09b3252f62cdff2c4a84c0bc4a91a3acf1a078789f26eb78c5a3c1ad05c9cc3c5e910715b8588d2ce6c591c48149c5cedc0a06ea81c483254a12f9a58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05ab667f09698f1437770ce4f5bc53c7

    SHA1

    5e529534282017eb1536b67957af43430c66801c

    SHA256

    cd2c742611da001601cb9441af4cdfce29abbbc439645dea6d6a25984b188d0f

    SHA512

    ce912831fb80e82e6977b6119d48ee4f887beec20888f399431521b38e5e206071520546c7ee50b2ee9989c05528a0650fac305b97b41d9601806845114abd56

  • C:\Users\Admin\AppData\Local\Temp\CabBA3E.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarBAEC.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b