Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    137s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    12/09/2024, 20:26

General

  • Target

    dcfe1b930e4092329a72430dbafbff59_JaffaCakes118.html

  • Size

    67KB

  • MD5

    dcfe1b930e4092329a72430dbafbff59

  • SHA1

    65023f0cbb3374f211df171b8f60d7cd775a55d0

  • SHA256

    50755772ef6e4f1da106e022d721fceb58db3e7fa108e8ecdb0f8195250f4117

  • SHA512

    c6b7ccf1f98d1f6e3983dd9d4742e882c2c0db8a9c6e316b42d77a8616eab09588cb76248ffb15a5d958f00f124434d6643a5bfb3c7b164374cf5c06025fbe94

  • SSDEEP

    768:JitgcMiR3sI2PDDnX0g6ulnXQp+pEoTyS1wCZkoTyMdtbBnfBgN8/lboi2hcpQFf:JTzXfZTzNen0tbrga94hcuNnQC

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\dcfe1b930e4092329a72430dbafbff59_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1812
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1812 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2172

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c830f44c868cdd06bff116146a3758a8

    SHA1

    c7989e12eb316572c18f6d80bb14b73bc0877292

    SHA256

    9bd0f339bd599591fe1905ba353c3aa039777989f088a063ac1dc3b469737d8a

    SHA512

    a1e80e0fb5a044f6ba5eb4b971077aac595d1ede1c3b8bc90ebd1d066c1bff5373fba98d7e4dead1062008b6271fd987f6b04107406d92db7dc00225e3288625

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b74d9f7ccc0d811cdfff4a95fd8a6fd

    SHA1

    0261e017881b3353f5e608685c694de1e0e068b2

    SHA256

    cb5a1bd1d4ecef55cad0bcd45cdefa57dd129993fe2bb4249b0ed8d181295898

    SHA512

    a63f842c1d78719d8d6b51f79bdc07860387e05c6f7eaba4ff9b659e041c83887a602aada183d9f2f09fcff62255ed3f6a39083f6b6d3c22cccedd1a82ffb882

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e7b9796d61848eb370d60651b2a5df9

    SHA1

    8f783f4336ecbb94aa6b96ea36bf24686606a4d5

    SHA256

    24ea6a3a327761c56365bcc78522d910d7db65897d14a1474a04cc8354c69372

    SHA512

    e583e274fbf508f48a7c23099c32792ad2ff8ea525eae12c83cae20f14a802afb5aff25d971533b76c66b1a84d510d5f8a258d0f3e0e50cc2f3cc61991e0bd29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab3cea43997e72aae2cf6a79fb17bd9b

    SHA1

    80fcf745bf4ee310bded1eda3c2b99fa786c80b6

    SHA256

    a8440463e30022d1d516e2c205ecc55fad7e86f9c42424a87fcfa595a0949215

    SHA512

    eb5f8bcfd2e54b7e718f123cbf767a61c4097d3e3c6eecbe14b2824345074974af332218135c03ddb3637b8cc060aec98f7571f16e03ffcbb2f89ea0a73ee945

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5571e312075e677ef427e9aac64a23d

    SHA1

    395bfa5d55e343a3d456e91d22d2a1a5249595a1

    SHA256

    de9adf7ab1f6eabba2b26fdb845e5f0704c701cda7079fc6bd30994936e9275c

    SHA512

    2d6d21306da2332f08c1b1663f1b8143cfb0cbfa2fc89d61c8f891e3ca1ba2b28e4c6f307ad5e8fe9a4073ce7fbe117480811b4ceba48331af108de355f551ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f08610071a5253b60bb8e9468c59dab

    SHA1

    960298877504e1052463214c9e1ab062e957e574

    SHA256

    d20561ea3e1323f786a4549515a7f00553054e54ae273e7943e47fce2de2acc7

    SHA512

    578be147b4854803257cedb5dc9e690b62e3e4ba41a57a6ad80f31afa3e165670c6f51521084a99c28fdc2a1d653f44905121f644a6b86c4ad8c29e2ee0b20ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    58cdd682e5abe5c12a2b83042297aa03

    SHA1

    f69530e85756580c719347817e36ab1b813b2738

    SHA256

    22012df73cac419ea9ecffaf5e3f175a64d12a5e7fd1862fb29e400457fc5b10

    SHA512

    55ffda3f1383daabc84e012a4fc8a03b1ef91282527fbf66a21cd5fe04337d4cfc514ff6e437e7fa3f0ec3d00a684b04aa526e9b8b6aa5ccfb10414bb4d703e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fbfebd6431cfd99da879a5176c2cc4d9

    SHA1

    b3d51d0ca9bde7c9f98d04bdfe3af4fd1f1c9992

    SHA256

    281e8efc80439300fcb30ce48a2b6e02d7e7ee1e4072df38ee219b0ec47ba908

    SHA512

    bf1077fb9bc1041fdd03cd6dd600e5e484f9d6427625a77d4b4c4fb069a1bc7fbbd51aecefa18cb4a85f77a0b13ab01e3223cf8717a6e5d2be196f4319394ab5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b98791ae0186c46eb89d8894b9094e2

    SHA1

    4e079a177e455142643c99ef86ec2a0ccd71827c

    SHA256

    301d63268e392ef57c1e9a3496cf9dd93a44c1ab7c807b27385e1e79da631f96

    SHA512

    c3e8ab47fc45d269b1e1c393453d8e0ac00e982be15e038221008aa18821774746f8c50d0340d765b1bec2c01a491b98c2725d48d835eb8febd1b0f2818274e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    082346fded64a011b0677899fdfb4f60

    SHA1

    fba91e2ec1a948ff571dbaa4add08a0e41d1439e

    SHA256

    f2990448c1893e645a0cc4a45d2d0eefb2689414ae7791055a6f79529f18278f

    SHA512

    c4e4503b388a33f630796b390c2e8ab9ca671e110e37a87694672f5e56ec8ea3b997fb43768edc81d2b0f1b21be8d16b1cf59176e887b86b22049448c91e1b0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad2fbe1ec68564e47cf7943216c30d6a

    SHA1

    23ed9c60fd40b887628507f19bfcbb9982177ce6

    SHA256

    b38b9fa6374b1e82bf74f6d022b6249080a1ab0148cbe9cf9abe351152ef364e

    SHA512

    6fd9f9e2b92b01472569dc341c5c29ec006fa817f4ddf71b18da2fa7e1c4ac55a5250d345e90d304f00717a293d4bbac3c63cfcf0adc85df007295d88a5989d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8007bdc7d9b14e79c589599e31de2162

    SHA1

    80a2903334889df1b581e5d3876b85422d62943b

    SHA256

    18aacaafe0f52a8faddb0d4291e20d3be334ef9d99ccc326634fec4c69e870cd

    SHA512

    19640e176c35b5ca2b539ae57bfaa503e3bc674c90626e70a4bbb09d80eb54dcc10db449556c2dfb39970eb77557182067c9c9d33136890d8afa2185333afe0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e414a29f9e5ba8e9b3568b266413aa98

    SHA1

    62c0cc05aff830608e7ad05705f978c00de3bacd

    SHA256

    0bb5c74659dda1a29ba1004f0591ecfba500975337122801d5ea312ac6ac4d96

    SHA512

    edb9883fd623b4679408e1977126a407146f4355f2747d68529a898bb046ad208e08bd41e3452a6026d0d069efbc249f056b3c95fe2fb3b812637fc47aab0879

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8195c5c9b96a6917590af2018b1225b3

    SHA1

    4fa30d2cabfecfa3953ed1ae25a9431ca40c45c4

    SHA256

    86d9331a4e61caea1873ab56d8e20b9b2da52a14bda05e6b5901995f12c73099

    SHA512

    0abe6bbd54d18f87ae5eac0372aba2aa398580d7e576cc9787f5d2319870dd7798b7417172efe52e6b510750babe3ba2f8b7a675a9d103b20462869e2673f804

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2bd3a4e90d5159f0c04d570bb1d602f4

    SHA1

    5976735d34c8c2607c54e57e09cc1719cb3402d9

    SHA256

    baf3c4e8377289f445dae1af838adbb347ab06f2a63bc923cc1b26d136da1b76

    SHA512

    b36adf2e699e4f576145c3b8d92bb7a60a0acc22a7d0475b75f24a5fab69c2a86e282f76b9974268265a26f8ddefa26cd14b60aa4909e244a866025a6156cd2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4940c6a2776c532b862f72fc8764fa02

    SHA1

    e83aa68beeacae3c95a479a5543b188df078bbab

    SHA256

    a17c1bae75a4b6ce0b8531390e92f0bcc7384529b7f312f6b9a529d2be247ec7

    SHA512

    17d15ddb6244d87d5c97be9070609c008a0738fe35b9046ab5eeedc2a8d75e3ac9fb3a732a7f4d7a3c9ec61181f2273aa63f556cdaca085fbb97929b23083e18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb712590c42c9d18f2cba347b0a3d3ce

    SHA1

    43676e33c453a4c09ccd569dafab2c098f4ecbf8

    SHA256

    caab40b11f6c4e914aa40b401e08e30087bc2c60dbbbe3eb37be3fe62083c270

    SHA512

    4f4b364079d77597bdc81242ce9f5254c72cb4573b65718d5fa5778822c12a46e524af6217996119e67e23d7cacb9d9f1771f8c50e2fa602bd38c01568d69798

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    13e49154b469858e32aac6a2c36b1835

    SHA1

    bc46413a254bf5b4c32b97f539c78860ec41a01c

    SHA256

    69361c4f04b60116d660bda645247bf3704cd0f820bd3e45d8eb28e7321dc4e0

    SHA512

    f2c9e70bff9cb614ef1da379ecd6bc72e6c56f6404429eb55a255066561676029be422d3708a006bef8859ad1d5a2b6b8a10e4e6f912151f858fd231c40446fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7db6fe0fafea9d6e8faa6e76395ba359

    SHA1

    119773cedaf7af1ff6d79974055daba77f1a87d0

    SHA256

    e0be26a39b15bc3e80ff960bcdac5d6c1e9cc65f2e8572f5d3527c7beb64a8e4

    SHA512

    e49942651a442d23c15158e8cf6b3888dc070a7a22ea7d513173c7ddb340e4d10114e3c3514ad61a16654eb371714d3116c6260304718fa21ad1db37d88ed1c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eff7e267916cd6b6cabf1bfbeae0f4c6

    SHA1

    4b83297ca5ff5c8e26d2a5e58d8ba9eaafb934db

    SHA256

    2b631f70c1265143080f89cd88fc39efb0dcf8b6c1c6880b0eb18e4296d3c3e8

    SHA512

    f4642335f22934674de632485b09df77720385dea0397648c7a9e936eb6ccaa6a9446f8d56e9fbb0c3679b598841e7573bd2bd6041b703bb7d81c7932917e25d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8573a5bc0cb7784fe511a3c90ef7079

    SHA1

    04b2fdc944bc4f53439b73109133d7fd1a243b55

    SHA256

    5180d50f1d7b9bdde8d3cf195e9b9554ab3d3e4b9898e602a3e6ac6f43da5b42

    SHA512

    2f7bf388076238f4a5fbf71aeb0dfb152e26b4160e117cd939408d2059d5012903d87728dfb3ba52c12da20f9deef0301d1d2ed78a027dac77774d6f2baa2e39

  • C:\Users\Admin\AppData\Local\Temp\CabDAE5.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarDB67.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b