Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    12/09/2024, 18:25

General

  • Target

    dccd66cb93d07c9f3f1e611faf0d6184_JaffaCakes118.html

  • Size

    235KB

  • MD5

    dccd66cb93d07c9f3f1e611faf0d6184

  • SHA1

    6d1e6c24262d17aa12b167da1aaea0a6363fc0ad

  • SHA256

    c56e2592117d7f0a1039c8ce890a876f433ccab05c1c598e2ef03dcb491bb17b

  • SHA512

    be9f94579f9680c672b294f3eead27c3cd006b7fd1975a76adc6fc6110d5abeae0dd74360670434050b9e1db3c4eca85f8ffae3dee0a68da788f6a9ff447c7cf

  • SSDEEP

    3072:SorhB9CyHxX7Be7iAvtLPbAwuBNKifXTJM:Swz9VxLY7iAVLTBQJlM

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\dccd66cb93d07c9f3f1e611faf0d6184_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3052
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3052 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2696

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b98987532b2b1608d8e1c820ce8edab

    SHA1

    afb46d14f26ed5e4d189b3fc6cd541b724b39e5c

    SHA256

    af9a200cfb4746a5f9f4b5b0fe5b4d61b191c7ec7053b14434d85c0330b4a801

    SHA512

    7eea35ddec8cc9ca4933322f1b4c5e8d47c009912acb451a028875b4db81ec5de2b234f6442ef664cd27f12919820f7473f2a457c6aa9736c45b83d5b2b9b33e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    410f76afbc23664465a77326879402ab

    SHA1

    366e54304f4b388d95d7711c97f9298c4ec5722e

    SHA256

    78cb50e796c767bd278e272b0d0c72fa081450b92be71179880460c7d5662d69

    SHA512

    6efefd74134f3d6092e2dde0ee7fdbd3f808eff70df48725c9d46b9d71af334e086b567702b852aa21c867fa7c5b2db09c8d0428bde22018f0d97fa582df7aeb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    10e98a4f85040d6f1d7d99ae3614f268

    SHA1

    10270f34d9ae29c3c81696f7e360700dc621b544

    SHA256

    47ab2ea227585f13f5fdf4be9e5e785d7b300cce5fca73fe31c49551472022fa

    SHA512

    684d89e6b9c7c82711d5a2afa99972684652ffaf2d0b9b93c19d3c52c825cdbc7ad64509755ad92c6079b37c6bf29c9fc3ab3a37062b666e7e3290981763680a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b14d801ed7ce9aeb63fb03f3a941608

    SHA1

    8265ac1152bfd4417f0def7784588bbf703c0c33

    SHA256

    e96f19f2107a652afa70bde0d2f424483b0d2f83b6068e43d2d4dea938e5c48e

    SHA512

    d1817c6e28fc11197cc55ad57873c14c36474bf0a8438386e2f85b2fe7fc718a23f536c62afa04671b224390bf2439ac1c347a2ff689ef5b470b88b365dd7a79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a5451c3966a84fdc76e9d0f9c5e75ce

    SHA1

    65f00fd8921273bbbbcc16cd5e8ce895ca394a0a

    SHA256

    c10a9776a45d5680308c81512644972d3d0ef8360426f745d1787962167a70bd

    SHA512

    3bcae09e99ee0bffa233207fa23f64810433f50f819acdd96b7061e9326646d97728c9460dd0190685f5cc6c56c98838151931e1b4c9d87ad6b2c73c98d8b49f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    561d321e574e9da49475485addbcf2e0

    SHA1

    e40497bc4b036726d258d4fa11f44f6edc330bc3

    SHA256

    3c8e2069bed133c3491aa8bd7a29d1f9308318e2285f2463e49281568e905dc0

    SHA512

    52432029a91840c310fe437fe6d923efea0885d45fecf6d134732120f06b3cf8d014cc76dde896922d4537c5874983b1b80e9dc6d14a6f077300a074056745d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7273c5615fd33f973137114b23730e1f

    SHA1

    92ad60be56b6e90ede6dc664834ccb7ad445fd27

    SHA256

    5d3f455defe5e1a043dc4ea61cbb102cdc45b756dd459a88542dafeee99ff252

    SHA512

    6642f03e1e6a4e4bd1350af40bf49924f3948dabb499ae5362e1a33a95d1f5b257159cb0a0a72a142a378d908647b52a7bb10fd81b6b4a493e3b4abb74ef3184

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06f18507ff900e5478c0dcd00e1bed3b

    SHA1

    de99db0d229c1eea6a903f0d970dac2b6ee64590

    SHA256

    8cc5ed525c43e621d5ea9a001143e963ec73dbc95ac9a54650f24975639f7f7a

    SHA512

    688e271e8c493c388493d6eb2f202d4c921f44bc6889233bf87f695b059a3013d004011f73da3bbd4a8a53319e5f2db084e5b2fca086d4e3bf19f33c288ccbca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76cba31d0205cd0ac47b1f69c3852a03

    SHA1

    e541a47ab72846074aca28a2ee3338db92bc074d

    SHA256

    dfe1c52f41ead1c41fb31642ef09355075ee8d7d5d1192be9824049254307c51

    SHA512

    3c98693558a3d5bc202dfb7318203e7fc82df083590a42fd0b9d232bb87b6f0b19fcf3e56ce410cf3563840dc7325999724b88033b9a77e7bbd881b52fc3c79f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52615caf29cc690122a3a45ae23f34a8

    SHA1

    7a2456749cc0577957b9fbdb67ee5f4c1fc660e4

    SHA256

    a60ca688570d7a9a850d71496a604f3b99486398ebdf11b86e781efa631529b1

    SHA512

    a3eec162d7f9c2240671a1fcd3d3bd79cc842c9eadb57955cd522936650e65bedf0f4e00feaff1d7141692698bb2710392d8c8a13443610a85f44b7015d5ccb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc211fe555db6dcb716dbb1ab008e396

    SHA1

    f1857151bb607ceaf757bb56e7d505e0f5528250

    SHA256

    c65b899d899637e0fc0a4ba77ae173cdba2f0d28716dfc7eea4f8736f6b606e4

    SHA512

    f872724a41a369bc7df3a24d45ee13a3bcf0d99757145cc29d555e128600a0ebfea8460f1382e28b8eb255e9031d7a62df6e30ec2194a9d282e044b8043b08a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cdf3b26e8a5210fb07c922c4dca28ac6

    SHA1

    a326eaeda8c0eff9e93c961b47b67fc80493b41c

    SHA256

    bbb29b72ed4fbd4ab07eafc8f9041bdf7f9095dffbe7795cbd6953523d0e09b3

    SHA512

    a2e84000645d75f898817819ddd26173129028ae1f669a8c5afade5d367bdb37a5a03c2c5ebe2bdcb0ff40f73e0b3509919f7f269d5c86fe8b80355b3670a1ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d9d93b48f8c05fb96193731283ab582

    SHA1

    d721fc1bd17b6236bac7787595c451d95640adf8

    SHA256

    e308236320fbfd2002b60e9461a6c5282fd81bb3d3a7462d8ef174ff513b2ca2

    SHA512

    85a484ca57fad9d3cf450262d825cf137b3d2770cfc18a1df0c0421b857be939e95b00b806a19a4e2c530332fc98650ee8a04ca9f3492b95dec1ec19444605dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    71c5a8bb135e79347dac516a5c5d2e37

    SHA1

    9cf46c476726682448a7e334d823c5bb332e6a9c

    SHA256

    445b8a2f65fa1f8c6e86f5883670722bcd3017eb0b72d1bf53d03016cdb034f8

    SHA512

    9cd72141e5d56ca1b342e710c4e60b2075c81f02594c05c8b5ff3eef69cba9cf79ebac65052d7333bf686afecbc2423ae9dd67a6c4798834cd793c7e154202df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    330c7d2dc383bcc7f56eb792a8ccaf23

    SHA1

    19a7717b1ebc8c8b1017672b39057ef50c58d224

    SHA256

    25c9dc798cd2c9c1d4ecf67f037b73ed6b0944072d18faf6ac4601d58889ec1b

    SHA512

    3ae059db15112e3561aa7a2ec944df98ad6da4d270219a0d384db34ec8a87bd32765fcfafdfb41469d476c7ffee8e682ccb1b9afdc416c9750509b264f92b678

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b810f86a752609947a524d5eaedd6ab4

    SHA1

    881ec0ba789b625c6f3d632033c32ae21e4bd2a0

    SHA256

    fad0bddda21afd4a1775555089442011760d112411441c6827ed87d2ec8f3cef

    SHA512

    ee377cecd821901721d12b36b8ef5d0b5db30aaba0772fb1b97fc4ba0f308b06fd098b940397670cf17550c3c435188c14b3a9181a8d5654175b91674d889380

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    32ec07ae7cc61e35b3f9c0d505a561ab

    SHA1

    e21e813403b5d69e8fce448a536209f550cef884

    SHA256

    dbfbe3573ebec76bd280eb89ebbab3a0be40466b0ee2f5ba74fb8c82bf64b8d2

    SHA512

    7667f1586f36add112ebb04ba109f9e14319a74448ef36bcfdca19b2bbeb95b26275ce7623b8fb9319e856379a918ea38c7f231ac82a54ea008a760d5ff8103a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ac704f3ecaae6fed7a3d55cf5c79d26

    SHA1

    142356ddaf05831f98ec9b84ce1ff68e218ed8ba

    SHA256

    4373ca1b1cf2ce3b2474a4971d52d476d4b5206a4f2bd78126033bd92e1e71a9

    SHA512

    99f4c8ba18a24ec4b553a3ffb4bb6e13a69bc818ece49a3f7e5345c45d21f7de61b59875018f5911623c0d15716aa8e1403f75e1e116c91abf7e56c4fe168c57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e06c3608340df72ae0701d3a9233b4e

    SHA1

    abb9af2169e65509c29f38770c6a3abd62d99fdc

    SHA256

    1defffafec76108754d69d157a6bcf9ffbecba2ca0e5166990cb9db8d941f36f

    SHA512

    e1ce897a111fff848c0507a2b015f6cbba766d54df800e5dedb0fbe06f4c94125168edb454a6840213b9bd3c910afb85756a4f09c544433453934dc2eb3a2e21

  • C:\Users\Admin\AppData\Local\Temp\CabA566.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarA5D7.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b