Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    13/09/2024, 02:28

General

  • Target

    dd7c4807d5f6e7dc9f0c15f690dc69e4_JaffaCakes118.html

  • Size

    32KB

  • MD5

    dd7c4807d5f6e7dc9f0c15f690dc69e4

  • SHA1

    41764fb54e5403cacf4310b45716f397b0cc8c67

  • SHA256

    85adf13eda6366f7a4040f7d7504f8a181beafe581ae856a16691296902be436

  • SHA512

    25ade19f5b3923e3cacccbc96941865ef15e2abde812b5f73bae06217a1dd7622ed89b4d41579115a10bc5984b575455847bb2a835deb2896a4301dcf5679e96

  • SSDEEP

    768:kSC+/JRG3es45dFR1BbGccgP+MCYp6QuVB95ycAK0:R7PYQuP95ycAK0

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 39 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\dd7c4807d5f6e7dc9f0c15f690dc69e4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1924
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1924 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1808

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ed380068898848f6f5862638dade5fb

    SHA1

    a7d807539c18698d0d7f2b4d8ae3831da2b609df

    SHA256

    b779326ca0b4569c14d2f7825517406332a969a364ce2b9a93a8288f76a29af2

    SHA512

    56efa778c8e9e096bcf4ca2a3afb69f19a79c001076c68ba93614e5dd75b889093f4f71412b19e14425e46f30204b3fa36d1e40254a2385f924fe237b28723a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a4909edbf62648edf736085717126dd

    SHA1

    0434e0b74903b255406dcc5d1b0aa36d21128cd6

    SHA256

    f471795a8b0d8e1a2c0060226d86ce2957e63116567488fa35d1cf10fe320ece

    SHA512

    87237d915c0fb55586fcb5df3b2cc318cc0ea5c1b9020dca6012f853ee1a193236c6f1fab7aaea51d22b3e269c779895592ed777879bef866633bb3ccae9ea48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    412d5fc54684ec93d34ddd5fc0bf7bda

    SHA1

    507a655f3aa752649fd3a6be7bb7a18008da8f2f

    SHA256

    a112211319946b460fe398741ef582a645793f48d3c6ae34cc5883ad17494cc9

    SHA512

    767b0bbdc24169c90c46566944a07d5135bf8e2d2343f9209a61a46b0eb6042161de9a3b3dd6092979598cf3a646b9d40a8fc7bdc9eb76023a2c98558b1c23c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    32a41806c011be4f5be0225ffa95f2b8

    SHA1

    724e1d357604bd2d02fdbb43c07e6bc961db0f75

    SHA256

    a4d8d3636b27313910ce2c81dc2fb01730369a0669c58b84448baf62d7b54a60

    SHA512

    48f21967eff81a07e27ccc049dfce33fb910c8bde20850fa80fe8f590bc5e1c8f9b266efa19f8189ebab07105e042fddd3ccecf0603825c8c6c6087076706ad0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    207ed169ae9de5f6f90c5e66e7f3482d

    SHA1

    cdd95b801ab930bafe2faa8711b46538d61f541b

    SHA256

    a7a8a77260132563076970c577d6f10f2786eaa7a513c10629cdd4a50aa50cd9

    SHA512

    0d146bce1e86e745696bf10da46cc372337805fae059604088ef37a0514a986148cbeeb38402ffba9e274218447e79c3de90f4e7ec35897cbaa66bbaae8534c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    798df5811b654addb3ba6ddfaa804abb

    SHA1

    fc0c3231346ced95af14fd48cbf9c81bd9fe68a3

    SHA256

    3d44f05baca1d5ecd7fde70304c28b1c40e65f1267ebe1f3a44073ac5a595188

    SHA512

    35c0d4338ed2b5a150997feae40e0635ebaef1fdb07dfb2ed5185195411a97b0fedfb1ffc687c160d1d5a8867ecec79dceff640561d441effb83e59679d3f853

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    140e317d88f57cfcdf40e27f7984ced8

    SHA1

    7594d922e57b09f9f3ecfc2b15f0dad28c07355c

    SHA256

    73a49751c56ebae98ee5d45393d6954084adf2939581c4e2096737c93ed46595

    SHA512

    62a26a6cdaf9b6ee06c17068f92a88535c3b94fc4da122ec423223262dba3d3d2f1062e6ca1b24b62f0562321786346f1c90e9cb7f1bbcf8cc3db101a79f47d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c12d0fe733d7fab9119eca2e361198f6

    SHA1

    f85399942a8a6fdb0ffc34e95547700c74adf021

    SHA256

    5d0ae740e375cd9f6c79e17020c3533b32fdd6b79d9edb7456ee9c7438c2abf2

    SHA512

    7e2941b092cdaed047fed3447d0b1b9a3a515261940f224c269701cb6ff6d1f3f04ff62a94eede4348e1c1ca39bd74013436ce7a81996fa6a62cb693662fd0be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    120fabc8dcd161c33eb5f8d947071b15

    SHA1

    47fa56632cb6f6e67956d65864687b6f532382db

    SHA256

    9d4316e1c9dabb8250297ca26c14d07f1f7062af409c878368623b8856f0d903

    SHA512

    5738d580c7ff62bf2f9fef14181fb75483de5667ce0196aab5b64505a2a3dddec75858b6f906cb295ec041474325eac3eb556f1c42da4c6e15c42f58c217fd7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17db157878f6f1da72097774325a0269

    SHA1

    79f942adec21953a12aa7608a837e81a4a455544

    SHA256

    22860989a1a859537747de9ad76a82d3937d3d4b5598f50a6003f698dadd6bc7

    SHA512

    7bd21d2378609e0ed57d64abe8b457291e8ee1ef26177f65503eeef763cdee5ad6b35e847a34bbd3f6602aaea22141177d434d117765d66b33aab7305be4c27f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    58811e6ea839d8e498e22a5a4b77d2f2

    SHA1

    0ab7a82efd77c7461632d2554450ac1354c56461

    SHA256

    53c607f11927ba9eee3a70904f4624fc22d3af1fd64e7235590dffbf17cc0ac5

    SHA512

    f88b66d51b63b97f446f44e08370eb757b457fb4c7e187ba86a4ef54cb5ec1236314ee2cb68baf6ec1ca41bc69321f84905dd1444344b1ef1bccea65350f85ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c4767f7a88218343ee047116b0262ae

    SHA1

    2805782570e9c50a41cd4cb0453c30512f8f1d1d

    SHA256

    1f149864d46950941b7461bcbdb64662c20b8ffcc79f35d776d270370ed8e9a7

    SHA512

    8b99bc4c7385a9b962934b51f64ad9966a491eb7dac41f7df901ba7f0fabdef707b3550345498bd37e0f7bf26ad341a1c8943a0a8f843e339db49c9496114d23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c28895d232f7db031d57f86ec556d60a

    SHA1

    a0aeab805d0dd47c755c6789b484daf410b2ceee

    SHA256

    fc96726d0aa84668747a7b8d3acb2b94f001479fd934dd5231a66cc5b68ca2ba

    SHA512

    b7326d2f0c990236d7c986f50649d8de7dfe96dcb0624429c3deae61558a89ac8818f119aa533ef322a4f4ed807c6ff3077195ddffa1cbde74db40878a29a698

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8448cb982bfc71b4cc92b2689afb5ac7

    SHA1

    cc0c73ce81fbf1341011c497c8d077729c8facf9

    SHA256

    d543c2757220a90c3d73697b8b31024071f20e3dbf5c00c73541991210cc5d90

    SHA512

    a9d7428a98806561476b2daabe71eb8bec5a673d63b345d58baf7d2af7dd1a485d2b358958bf80e6cd5ad832bcaaeb2b45b44a7434bae2ddb513699fb34e245a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d9365014cbdea6f4406d24fda948a3b

    SHA1

    4a8547cacc6b0406d609c3e4563a6890c7431317

    SHA256

    3e7bb3ea602540c364f08e866eeac4c5d662f3b1fbd79c758a8ee4242756adad

    SHA512

    09772961467d98758193fdc79c37ce116400b47dd6378a455bddae7834833f85ed91bd7959a9a40153ad7edb3adb2fec177c2536d4cb3960914d22bd39f75268

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab82eb177f7b1fb6f8d307f4d3234801

    SHA1

    671aa1d474594b0574e74046470f2d1d05d4f111

    SHA256

    ca45d5118169357810961987dd755b611d24a0cd94574acacf32b89898ad7ddc

    SHA512

    f083cfe11f78aa94e8e6162e3afa615d550faa17b1c8149dc02569028ff1945f9784bc198004990192df742489a5cf505055f4d476b395e83a18a9d98932ff16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2841eb9ef4ea1d10d8f4c684bfc7c6c5

    SHA1

    13ffc4acae945d901f84ca8110f24f93c9d9a6e9

    SHA256

    060f431440bd74e38898bbc9bd9ca8bbd70596079a8083a6907cf17bccc4ee88

    SHA512

    e45ca0f68f5a9ad0e9ecde238422c5528d8cfe07baf8d3869a6a4438abce266d8a08a5465fdce198544c2387aceb6b4847733ae0fd7933bd02591f6fd860d2b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    560fb82264aed352bdf6fa3a6075ad11

    SHA1

    6cee0c2ad615a8ae8a7a514e8f1af54899b6fddc

    SHA256

    d4cc69a7b0f2a8393bdb11e9d54b5d46bcf99823c467ce2f50f923aa438720e0

    SHA512

    838459086cc9a2e56cbc6bacbe4008e5c9053fc4a557f53fa953fcb2e1578158f82f7dcf67ff73851d49618d51acb2aaef24813820c63f37c5e0d6977c9c1a32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b29b1b1ff24416f7b9cf69c414cfa4c

    SHA1

    0df225b17898afc5ac88cbf9ff84970e5cef2b18

    SHA256

    a0110f4c6be119a21614ed7dbfb39d5b6b4736547ad74d160e1393f7d0f1d6d5

    SHA512

    61c506c26ab0e5da5e764612ecbae67c8d6896083cdffc7a0d0ca96cd3e4adc3ae66364cb407e028eddfd2d69f01d3b2af35c1153d14cf013e35bd0f9b50b8bb

  • C:\Users\Admin\AppData\Local\Temp\CabED8D.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarED8C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b