Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    13/09/2024, 23:30

General

  • Target

    df17b0d4839cef1b810da94f0efddc5f_JaffaCakes118.html

  • Size

    69KB

  • MD5

    df17b0d4839cef1b810da94f0efddc5f

  • SHA1

    b06b63f2e975eb0f63aeedee04330ded8cf2e8b4

  • SHA256

    e92135b3b88e50f095aece5ac97f6568142de367bff5a9db313842e20b4bf13d

  • SHA512

    5f2e77565d03b8c6b60c185e1e589999f032dbf410951f2454e72fb83065d24fc868c3c83b7eb667b56e94bc5a019938a93c0fafbd76abd6f83d15f247b5d348

  • SSDEEP

    768:Ji7gcMiR3sI2PDDnX0g6smn6solMlboTyS1wCZkoTyMdtbBnfBgN8/lboi2hcpQV:J3SQaWTzNen0tbrga94hcuNnQC

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\df17b0d4839cef1b810da94f0efddc5f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2660
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2660 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2788

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3fe31982f3b067e9641f0e917e8cfd92

    SHA1

    e8b33e55c564b024ece3efe33f8cf44c15f976cd

    SHA256

    550470586c9006ef7725ef2c6edb6bd27d50deff5c78c01131c7b36ea0461428

    SHA512

    581091b4c06b561ff0a2422d37eea40f4e24c50a56c6175635ba5df87f4ca71bb8a5d2b06de2e64fd06146325c07d388085a0d71962ba440b7514364607c1ef0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4bdbed0f754d3f8a3ab4d3e8d46c5687

    SHA1

    9b670c1e6ad32a66365835137db84fa84de5cf4a

    SHA256

    e4d99f304ee353128a3c146e71962568fee7c287d80a9c6296b76174f69e8465

    SHA512

    558a0d0fd573050622aec88d870233269ea1894155087f25fd626388b64016e5e56698c3befce438967281ffb6ef9e54088af42a0fc64b6209556152fb4c09a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c9ee25f4b241bbe002e976867423ae7c

    SHA1

    d89f93fe1548800aa511cedb67ad850bcf311e4a

    SHA256

    b3a9e6e36a5cf7422304448dfc54afcb625144a3ed5e37e9ca4c643d451c3fdb

    SHA512

    9df3d898d70318cb516897cbd7b0ab9334e4fc1631648a08706181781f7f37ced64d39ea801ad794122a2d47e288908cc1c6de519f1489fbd176362078bb4aea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0957f47371072f5701c9d4ec21ee16c6

    SHA1

    3d82ca1654ff8317cb58209229107bad370d48c6

    SHA256

    086abb7f5951f8f008683eacc0940a8b7e841a83c20c6684b753dacab103ddcb

    SHA512

    0cd83013dee78ba970db09e0dbcac64beab2a1ea258c3a77b20c7290f2b06d1f9b0fb1ec2728817475df24f63a2250585671a3aa55bbde574457ba8a5d322605

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b00db50079c950e515ee4765228ee15c

    SHA1

    e7a75acefc904c49c61d9c2eff9946d9cd7d084f

    SHA256

    a248447f4c8f6dc1cb2d0cba6cb54eecaf6ad5e2c6b486ebf4387cde3a423da8

    SHA512

    453c180b5e8ad296f333e2e68ed9aa3a0aee88389a1db8fb19c98b533de518160faf2c0f97046bb010d04de458fa9442fa18053d77f84590fd2596f28e46ef8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    65ae4bce45191bac33de3eadfa08e5a8

    SHA1

    fd4bb851b5225ff12c90312d0a83b51feeb1cb0f

    SHA256

    33a38a75872462f3f9f09124dc44796d4d65201d0cf920eb90129345406294a6

    SHA512

    0faf74a642e5e4f8e447ea7aeb4edf41635fac91858921c067593af314991000c9138991ddee58c62138ff20419d68d4ff095e15c759fab516ae0f78b9a77de0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6fe12191f5164038873b380e6fdb632d

    SHA1

    23226a1b44aeb8fd6f9c9bf30d7f86bf46a04705

    SHA256

    da8c49216613275b49045da809aa34338c263d3a74542585cac6c5109c50214c

    SHA512

    fdc2dd66ce5680cdb7ee2ad62552349638bfad83420a7552ea3b3cbc1988a01e8a083b6b0c6aae560357345ddff4984ee9a601f50a3c1f9f78a578eab0251aa5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff03a16e78d3f5abbfeba85de0140ad9

    SHA1

    55b99b27e83350c7649e64b1f2b69f3b9130c443

    SHA256

    0d23113562e09706367fa173aab391a5c67f18079a8ecdacc9f766dade83c91b

    SHA512

    6e85604337fab1eafea4a2eecda99787a0109a84fcb3983e8d397ae25be8f61269a984f44f61e58328cf8e40dedbbeeebb2730d0a9bb01d5503c677d083740ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e515b226edd1da282d589df4dd9c47f

    SHA1

    09281f63276be0368b4b30659dbe92f7d7c7d481

    SHA256

    d261caf15d05a6a89f1e107fead180fc27f2ddbad951831ccaf0c16ab1ba3388

    SHA512

    87bcc09abc399c9b40a814587c3d3a112aeaf83600cc01948387a62fef92a56cecb00626eb3740f5221a5924e556caac9d5e2804db5ed4b1a8c1b5c168602f7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    acab46771a09b7532225ea92891413a6

    SHA1

    cce48a5a5c6c29f95c43931522315a196054ab7e

    SHA256

    c2eb32517e5be79ab4f0e0cec97c9d6550797e9adcc96bf463d2986e8c6672f9

    SHA512

    89a63b475001b9f355a71c84423ecb91ad9ac205c9c5a1abddb37b339dc497e44a5d3b5a6ae644c6cf1b55d15bf30992137ad54ca546ab415443d5ddb3292231

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    13e6e89a6f7231240ae4d6ebdd69a36f

    SHA1

    8607ba27df8ec0df008bbdc6ee24e3b3e5c1e1a7

    SHA256

    f7724f5e259254b72815d472595b216ee9596525adfab6ac2e458682a1c7612b

    SHA512

    7a9bd45e1dc5f6523ef72c02f5d904c75074956105ad2934dc0d6aa1494f178124ac864701f1dcd93731b244b06f2064867ae60a2d9c04fb6dde44d596d3cb80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f611144bf7698a340ef5e82fc5887a7

    SHA1

    bd0c69dad4cb0c01f570331ddc3f41644368d61b

    SHA256

    7d839c04bea1241b497eec2bc4520cf9fde38752b7313a23d689db982559abef

    SHA512

    d371c0f357feb9ef20d7349deb77e78caf12ef3e863f99f181f4043a769bd40e7022fc8aec07928d24c227cf02c40741cc166137bbfd80672d3addce2331dc36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ac46fab07284426b82622c9c2626601

    SHA1

    3d1f8796b71a5e67109d3dff7e0426eed4243bc9

    SHA256

    7dbbe8357840a86d32da78b66fe784c7997653f0942f840852dbeec8c2454591

    SHA512

    e715bc890fcea525926975251c2fa30859991533fc551056ce4acb6b12e7a5bb3341f895999ab607bed79cd3432ec6c3b347dd5f9d455b04576f8d0c901199d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b9e576b5a611415a09fbb27c207661d

    SHA1

    8cfcc52ca2bac7ed7b729297d808476e84f72d4c

    SHA256

    d4095f5e288057d891154281ef480c414adafe4352fe367c0ee1a63995110328

    SHA512

    219fced2f7d77ffaad357be2157c39a4bd7250b0e48b06936477f9bfa6b264ee7b17eab7a942a90140a39293b528caa7ef4e1302974838050971596f7ee8b79b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f46bf9383750cc43964ea1c9b22c3fc

    SHA1

    a149b6c545b4dc210cbc0619ccdde9f1af5e1470

    SHA256

    0f80e71fc8549e95be00b12bc422ebbb4e1b37847306f92de69a4c8191594813

    SHA512

    4fc23ae3ea92b2d45d2f012844d2b674f5044eb95065e7cced7762ec55d785d9653c9aed8cd2bb812ee6e474d15629de1d971f2e2c71c62d254b690c2c93c84a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0c2431de15811179670b4f8bb487aa69

    SHA1

    39c678f62e577264628849ea352c34100138ce2d

    SHA256

    35c1c5c97312e5f69cf762e5f73f0924ec3fc87d55bb936375e74138398a76ab

    SHA512

    166bfc0739e866a9034a258f11f5652a8b14e4ac99ac039a5caeef5e05ef9546614e010e9d7befd72280d0b29e2fded2e94e33a1a688dfc6bb97fcd754597ad5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2cc4f7109eeaf6ac1dbcc04d0aa6afe1

    SHA1

    88aa961caea5edc0b05d84ff31ec5adaf7f5b3fe

    SHA256

    776254b40d66fdd92e2142d404c7c5895a32248ed02d2b8bd6443d3e6272341c

    SHA512

    21763f8d127d4f9e6852c12601e60f8d938e4efca26dcf59ae52d9e331ee6e878e15f706b2b628d2083da3fe9cb7e2ca402ec6f8dc2f0db2659535ae173ea5e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e4a418e0e2bf6f5a166dc76621d172f

    SHA1

    51fb09c5755a2186c137658ae346fc7ec7914ba8

    SHA256

    7855aa4b30c0058475c4a57a81518112e1989c3594200dc504a64db64a2475df

    SHA512

    1f9f39bfa1a3c1c15d292987ce80de61657c3106aebd7c929c92cf8885bc9e370d097df596edb9b82b748859fde4b200e123db0796d323bcf3223a08d98d66a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6b618adfa0f0f14502e82945196b1f2

    SHA1

    c40a5d8237d6c09c99b2039a558a027d318c229c

    SHA256

    84a5702609b23535a58d0f4aed4df1ef6c59365bbb0e9a181a2cbcc9d367ea3f

    SHA512

    6261dca978c22aa4e3b31654426698d675d974d6d5139dc2994848b4eb4de793621f67b9ea627dd75945c93d03d510792bda576cfc15efb27e8bd831c23a3d13

  • C:\Users\Admin\AppData\Local\Temp\Cab42AD.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar431E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b