Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    12/09/2024, 16:42

General

  • Target

    dca20d567572d79e5a9ab5cbbbe71cea_JaffaCakes118.html

  • Size

    23KB

  • MD5

    dca20d567572d79e5a9ab5cbbbe71cea

  • SHA1

    7afdb0f48d410ad00039b0907652854e289bbf73

  • SHA256

    a81c703f05dbce98ea0b590d0a890039dbcc4e9c3d4601df26364c3e5a1b6169

  • SHA512

    f9c3f7cf9772d5f3c1d371cc91aea0ea9049a717408d5e01b37e7b16b71cb895047cb75ff0de810e46b7afec43d1d482d584b75378b898f77448171322a78817

  • SSDEEP

    192:uW3Ub5nm5Y+nQjxn5Q/RGnQie3NnTnQOkEnt3wunQTbntnQLCnQtHwMBXqnYnQ7H:qQ/RnROF

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\dca20d567572d79e5a9ab5cbbbe71cea_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2888
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2888 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2996

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    40f6f110049dc28fcf956ba9097eef4a

    SHA1

    87135edd0d2c1d52fc0db2a8cc173eb8f6cba741

    SHA256

    6937b76842987e61a6ac106fbdd75cef75c53c17c1844dba183ffb92d74dec40

    SHA512

    1ae0e000014acfdc0c919f364324660518df1ac31d3c88b21e1224ba4033d7cbb992b13aa49aa2c745cad6791f42b398b6c96687b6d822d00a2bc6e264d15ac3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dbd9399a865bb4c13802f3a77772add3

    SHA1

    592f28076a83c17ae4459dd11b1ad356c2af2d97

    SHA256

    0bdce81e10319ff2577a9ce020ecb9698544974b6459b436bdb47740fd4af8c4

    SHA512

    119b9a7545866d4d92dd49b4cd905a95bbe2432bb89effeef54f2c5f5d73ed865569c59f706be13352867b50715488181553ed5a338b8888f14ad0dee7952a82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61c42437a8ce1e288d23f090d13a2689

    SHA1

    b35ec59c346889303d508cc3d082bb6306bcf809

    SHA256

    fcfc53021f49890dac70c6acfabbab1c0ae6035cf75e244da3a0fbe9304106d8

    SHA512

    f2e5c481be03cb5f552c8d13747cd9b10cfd9be3b5afea2cab4fa1dc4e1ecbfb0c3cd7c9e7c3021b6e888c33848b279d5d453b6e0996f86dff3479f3ae81cc72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    613e487a7c9a0cef5876799cce8eba4b

    SHA1

    2fadd9bbc765451284d0a77cbf6993f8ccc1d295

    SHA256

    db50b896f2345cc9ac04de6e23a36746f01bbf7cb3fb33df82351bf842fdf962

    SHA512

    718e3ae69021dea4f3507ee03f92933a27bb728f3320a8955780df155315e5311043763f7bc07b0173901c2c01eb57e5a040e2fbcfb18b9791a8a6f0f7d2bb5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41bc6da92570fa11ae34b1c321a3529a

    SHA1

    6fb7d7fac51e591d91ca9eaa766f3d925fbbb2e5

    SHA256

    1edcf1dfde0a1dc88c2ce1816a2903fa0de73d57e20b964ef80dbcbea154c127

    SHA512

    0170c1f639912cd8f7cc5d520c637a2c4642037692e31d03bd02b9f358bf2dc32a29aa80da559c628dd929ae5eae39f15f47162811c32bb7d387bea27b1e5095

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7769d59bf298cb558d822f7c246e70a6

    SHA1

    57d2872fdd70b1cdbac156d810105112733bc938

    SHA256

    29d12a0f435a43e55b22612f24d5c80219c01cabcd69d977072b102dec52a6e2

    SHA512

    ca7b185965f85d0f00bcf93483296be04f90808d233cbe7628f9ddc8b8dabb27ae9eacbc2de05d4e5faaf3e033e34a5e8416205e4f50e33878b4d0988720d096

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3cdd7c16662a82c663d3985d32fdfbe8

    SHA1

    1215a482ad17b1953c18b7f90574e00fe3584369

    SHA256

    42dcbfce0b242b4f50f92c1ba0c88040449070298fe10e9dfed050b4d7fe2e5b

    SHA512

    0de357af80d48108113683fe3b4d57bd8c64860befec06fd4d1305ffc36bcaafa3d73818566d207ab9a78e60fcfe4ca4dc5c328297a73a01784d1e6db96bc7ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc5cef816b2ab7de55d78ace740e47f5

    SHA1

    2b2bf3386e54f726c1d931475559a6a399ac762b

    SHA256

    274f2c64b579a4cd7e7f4ba74e8dcadf72dde50d8784c15de60db4d5e5f57513

    SHA512

    90238a824194739a3f333d949a52fe32361d5443528b4f7fa2d0e77fbea338943356fbfd078c24e7adda2ed716711a8142c1cdd6dcc21fc664deb3f4c0a1547c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f8bfd79bbf01d22ae588b73538c8f21

    SHA1

    f590877ba847fe3b7c3c65ce3dbc9eb490d77f89

    SHA256

    73db6e4eba06b44a07f4016e2f1c4775c93a9a25c05edcb06f79b502c3cbc2c0

    SHA512

    6e4ff8878825dc31aa0d2ca0e0e7bbc7d3b0a68399eed520abed80e3edbd1accb2af3b1fd3f606cb44a6b1f2a6bd8fd660d897906840cf7341fcf3b71cd340ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    18ed54ce88f4529013a23266cc78b4e3

    SHA1

    67559661c0182f995c0ca496128ace605a5ec768

    SHA256

    d709c602ae8344784c9c0e5ec5fca47c31e7108702a1a5b9625588d33918e0ef

    SHA512

    c3a2b739d16286c571aace31b0bea4ecbfa7d8c322df73ffb3d2231d4c904b05e5ea64aad097b5a3b27b1eac62361888dd625d3f45a1fa63ebfc4a7a3eeaac9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4fc9eb28378d234db910ca8cbee5ed55

    SHA1

    a3ac13dff04de077ecfadc75ee04a94993275eae

    SHA256

    224b2891a4a7decbdbf26bfe7a7ed3e6b9d9a2b16bea4c200a71c2cb20ec8bd0

    SHA512

    300fd9524093281b43a3f6309e226850e3998ed2b3478b920986c862946e08f5f1bdd3b95ec4782f938e5fe506413b306a753ba26825d3ca1ed736d66e909463

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    40596b5789df032919678bc96b2b6ce3

    SHA1

    520dce2549e138625b07f710a7b725d241bd1793

    SHA256

    7e1eee2523815eab73b6930f9d91760d2de8cfc366999e57dd80db49cb15ad36

    SHA512

    a217b8025986972ee15fb0a44bd448f61c1de5904a15e6d7370fedfe1ee91405adfb16b9d95c02713d1088040940276818ed61d9ae8cf3d16ab865e1e0d2bd27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    29bd56a7ea19c746df25d874aaa36df6

    SHA1

    7c2a9ace3742f66a619130017aec76fc1f430057

    SHA256

    bf4c260a5b02fce5f7cf542e82cfae69deace12aa91c35d2355e8104df7efb49

    SHA512

    8c05d09a72de4be24e0b89b98708e5d44585a9ba1b4af2f7c57fa7d7de3c0001d77b64f636c955e194c22fce6d122fc24387426e6fadef452b252b126c73a61f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e19c0c0f43c62787b29b01ee3e185098

    SHA1

    64575bc4103d04a1a2671ef922f4809e77d11bfd

    SHA256

    da1862e05057aa5438fd5a609149e882b076ad507df829a92cb8ffa2ddb752c3

    SHA512

    2fa4758b227de0dc9154eef631e9dd76a631e415579b569d01f406901439469d4dd62291e143c7377eaa6ada1fa9807689c00729d9768f72af9c4cd28848b6e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00fc488a0a4ffd72605335dd48adbae0

    SHA1

    38e3b3a7e1db2b2c8d90ab56e9bc30325903196d

    SHA256

    6b0265a2fa13d02449b153c4413878213a0be03c936ddd53b16ebeffcaea1746

    SHA512

    c7f3ab4cad5836f2a75e211550981cac0cdbd28d832e6531eda144b37a7720829fdb8e6e9dccb535d6bd73e464f3986e41addea5428d0e76071e679c5c171da2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df7a76fa35c26daba89089ee70a6fe5d

    SHA1

    0e3e13146c3d043f51d8d21a27b1e947fff68cbf

    SHA256

    ace8349104cbdeaf001859a4a0eb65c7110c34eef874d8c81cc9fcd99b2f4d96

    SHA512

    c3412473bdd8621a28f50db5c35dfbae0df3179af65208eab66aebf658f6754fd6f37ba16589b930b93f9a765470312dd09e9f0fe19d19adcbf8389c0fb1981a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92bb8bf94901f7acc9ae20f814a43ca9

    SHA1

    d0bca7905151c6d25adcb71d80f0a1887548f9ca

    SHA256

    b9b840f5b0a1a72c8dfbe3b9043221bb7a57ea8d4aeeb9088ef7562f04f83fb7

    SHA512

    7f60ae92daaffe9cf5efe6404e53f80412bafdb24c5f15499d5f5e8eb2994f3fce295a332d0ede5f0a9599ef03f69e5dac3f25f1c46497ec059b24251a297b12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a53845ff8dacbf34efa2430fd2302a64

    SHA1

    ff750ba244b19cbee67c16eac4d6db7c24b22aa6

    SHA256

    b81051fdcf2ea9e0d13ba06dd42904efd2ce7802de5cb80790a9af291e00f3af

    SHA512

    a5ee5de4a973891994403ab217ed6634c094e69ebd504e7da79b6c095a739cb8a1dccbfedb12871ecda14288865299736bdce40a560538339b6a6f67e3583d2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c36d0048297eddba259cf52acd301ec8

    SHA1

    e9175377842ef7c8cdbecb7aa896462aaa132c83

    SHA256

    4ac6adb5c31694caf5b823b227ea3fdf25c47593c443b4944f15a213c1341e64

    SHA512

    cf3917d9c968fa951243fce4f16fb31275fa4b72a5c344330d9367988390dbd0ed9767325f9a40908785c13700b981c5c04e51e57635c11ad0f5d3a3c1229753

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8946ab1610010a5476b0a92f14936a6

    SHA1

    5283145644341db217f9d429c793e208b6ed2ef5

    SHA256

    78014bce32181cf90a1c27d575be94f2e9dfa5933fa398db7a7355c6e6c9eb2b

    SHA512

    f44231172b8e90e5effb8073e555e2d7dc47a7830842d784bd18a9d2284f938529f5b2f1facde3bc8e7b90fcb60db978f2b5a394021021eadffcf91720bbcf36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9403920c4ffeed4fdb13d5b9457ba6db

    SHA1

    5339b477d1394fec3161ffdb58ccb37f5efe9022

    SHA256

    986b351df71d56b812c681da54ceca8ab05eb1fbe5f0f6bf5bb782fd423c7471

    SHA512

    e33fcabd42aeaea012f234aa18b570a8149ab2785f93d92703d1556b45c1efb4fdf5eb7afc4eca201991d30963cdb2de7c4bf2939c15623f9b26563ce753e52c

  • C:\Users\Admin\AppData\Local\Temp\Cab78BC.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar796A.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b