Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    13/09/2024, 07:40

General

  • Target

    ddf9b51395a14d23b0b6063e74567b82_JaffaCakes118.html

  • Size

    41KB

  • MD5

    ddf9b51395a14d23b0b6063e74567b82

  • SHA1

    ec3ff7da5029aabfdecf10e575897ce2bb3c7b13

  • SHA256

    a105eee0b07ef3a455624e21ecd6ee4f45d379b8df0f42d4b54ff061c9f40ec0

  • SHA512

    513147042912f724fa5197a8baf8e59f1686799a91ad16f53732737537d6e0ae9e2c9396955e24b2b2d73488b6ffa3220f67b240014aec744bb00a4101b5c46d

  • SSDEEP

    768:/LKgv3ELWk8F02dptWoF1rfmwucGwTNyws1lvNn+KA9vCDWemCQE:rRk8F0ugoFdAFnlD0E

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ddf9b51395a14d23b0b6063e74567b82_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2368
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2368 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2688

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6addc3fb9d6fda96097e24486cdfb44d

    SHA1

    46753206d4814646543ee2a22114b4396d6f9d82

    SHA256

    d8f07aef2bc9c6d65b146702778888c69f99b1ada4249f89a26f61fe73014251

    SHA512

    4e3eb6f0ad463f93cc23ec7cd6147734ee9bd8bf87654463a7c22c0145aa459675dea9ac2b441a1f9a616c8012756105ed235799cb84b19b46713d026bc53f74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b38c9fa6f63709122a8977cbe2f1dd16

    SHA1

    fa5c83a8c2b4feea20acf9be2f49f92f90a4ba1c

    SHA256

    54bfffd9ab0986f3542b3b398cce73758b3e8ec7003997c7cb685c9d1a98523b

    SHA512

    b2c292be6f3f85a97abdb2f553739537f1c4239420f63f81b8f58991f95d4a40a44988c9c9d0b7bc5189bb2b9f2d76d955424a8226fb9f521d13d5b0f2a220ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    475d364e3801c556459f757549616876

    SHA1

    aa0cd7283f1b8c641d7828e9f323a8de2d0dc5a7

    SHA256

    e78b115423e2dbd97fe4e0d1ea8473816aec3ed9191139a81f72cd807f709cec

    SHA512

    0f6aadfb0832e3823030fddaa56b98ae3b70c9bd521e3c721532b51f2910feed9a9e58975c5658930eb68d399ddbf28fd7b416b31fc519cfdc1ce43107b0ffaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c993ac60277f57e854eaace73892142e

    SHA1

    7029fea467482c6a37003635868378414286948c

    SHA256

    dd2e6721f9481cc8fa4b9d6ea0efab208e227c0f8f4c65be47be5f5e6e9210a5

    SHA512

    d75af08aa74aeae144696ff21e29857a5c6f03074514b505ba9a2681ac38cbd6fb3c6ee6f1bccb74ecb9954a5fa596d6ffe4d46138559cf628a3b016c8a9d2f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1f3f9236bc55cee5c64c0155c887053

    SHA1

    809c29fd6dada25f3af90c6e7949ebc4fb9ddd27

    SHA256

    11f1f9cfd7aab53198e2241076e2bdf512732d5ebcd43dfe066d11ee2d7e1851

    SHA512

    eedfb77184784f9048b4c7643a79befe29805729bdec067ebac40a9e32b2a0de19b111ac199a1d7c6aea4789825d74272533b87f263c404b73490de4d2ea8b71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    42574441c449041a5455933721e90358

    SHA1

    efb2f11574d02f54dfe45eb52e0ddee4cadc52e3

    SHA256

    14fde1c7c1e3808a9380ae174193f7c48a6f81b8611a83ecf7a813a007410eee

    SHA512

    dc208eba4caf0766bab5e2ac57b474d249c820cdb1eacee5f57f5291e2eb0aa7971206a2add597a0eddf4c48db60572d81e47e15704e95744ddbe23ca09a3b09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d30c168e560569acc178ea16570a18f0

    SHA1

    3c2f8b2ecaa35e304dbef050a568dbef17bea79d

    SHA256

    5202b9522db7b9a2546f137d37c78176a0497aef47c91dd394062880fb2deb08

    SHA512

    eec362c84982b521e19bcb4acc8bcb2f9cdd6b796a46de57d22289b534058ed4f94a19243f94bf6ecd6db5f14cacf0204736f04d326cfcfc06f4772e30b4649a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    02c5f942b582e8bee3e24d158f7ed27a

    SHA1

    8d16218f89482f347a8c76c178d668b9d8d68fd0

    SHA256

    0cc20ef93f828bcf3f285cc12f9952d56299bde87e00cabaaaed22ef26fa5c17

    SHA512

    bc85b74a19277ad3ca0d9f4523fa7c6a2016e38d6adb3655571a01838e343b64f1c2fa00032bdfb354ac4e2fdfccb1fc6f25d511ec2be174271ea4d61264b75d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0eea5f20323cd188733fd0b4f5e77db3

    SHA1

    1f5d411d1161dacaa1f1d9ce5e02aaf3602a4db9

    SHA256

    2bd72f8a97d775880612e16b58b85a82f1c37669f4a1467afa7d39ea522d8f99

    SHA512

    8cba486c86c0ec4bcf6821b60b15743d69c405ee1eb774c68f47bc33cd9ae8e99ea44d8dcfcf12abc78fea46ad0d3c0a4554516c6bd0be935e5e1eaa071867a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6cc0abf5892a9098a4f37f3320f81202

    SHA1

    3ebc11f1408a9c042913210e9724534ec38b9b56

    SHA256

    e378cd84bf6616be9474a5f29bc22d76fbd244be716ecf4a1b9a474a1016988d

    SHA512

    4143220fd59d4ce62d58caa26b3678939aa8c50ec2a92f4594854efccd59be99facf7dc595d95e263de6bbaa2759cbf457c662e01e22824d0c9c4600008021c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8f1a4cc1b7afe58ee7eb1a7d18c88519

    SHA1

    33a36d22fbfad07365067cc5f697ed24331fc6d6

    SHA256

    52ff1b379430d9cb28fe9c4b6af75acca30e8a2f2dcd1b7124ed6abf290a2094

    SHA512

    da87c459afb0d15c8797e43d82ff3b24bea224cbc9870d46a62cc84449871abae54ed88dec0fecccb8a1f0707dfbe9d474e42b88d48d9d192af1cb1184245d56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    099de318a12b76b93c1873b805a50116

    SHA1

    36a66d0daf81cd0c690d89e7cc401f4d92f16230

    SHA256

    a3399e4028cfab7985cb48002e7705aa2df5934100d9adb2a8f2d5ee07fa5e0e

    SHA512

    455acac4342d4a4d5b50ec58eeeb60a621b2b839a851b9c883b0946aff40f86314cbd7e72798c0f86eaee978aee230e0665225d90e848c544d4c97e628bcdc5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a6ea596b4a49ce7621a93871090b28d

    SHA1

    7660dfa3b580cf270261fc153ef720f5c18533be

    SHA256

    2c6739d529c1cafda4e0c29ec38d4dc94f4d6a46f79b42028df451380f8136a3

    SHA512

    e9692e8e0ffb0e47584ed5b456dbcd66cc6a56b63c2cb570deb5490fa8b23268413600129b16784f181cfd5ba06127a66e3d3c61084b311cc9aac4fac4ec0db4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d42904b2285d541e5a39413f18830e51

    SHA1

    518ee25e70093ff79a7e33736f22a2005b405230

    SHA256

    98512fd48ddacb0f2d1174f6744c190169e7e8f2e92e85577c6dc87c92741606

    SHA512

    cd4d631e0f2460882e43bf957a93c09766e3ebf78086ba50baca13abe69bb44ac4f6fd9a93e053bea9f06656ce5d8ceb8ce7f3fe07f95041f44e034556abce4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d54265dabea526b12cd92eae5b163a18

    SHA1

    7980109eec80321bfe0840115b7c275fcd8f1b87

    SHA256

    5daa69a32d824b924521316cd9571e18dbccfb385cee43c22835946559667592

    SHA512

    7e98003c2c807cc1d9d3837e0d9d20b24fde8155f59435832c3cde96247138b047df9cfdb944a9c35f95f0191e3134224df6b67724a0dfdcaf902521f77fd842

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    720ff76bfb39e34e356c70357d1233d4

    SHA1

    eaecc994a59d853a4c2af0720d8a2b399ab281e8

    SHA256

    f7c062265b9083233f6fabd34489c94f62cffdf077f18373c97b9f008855eeb5

    SHA512

    274e1e07b7ecbd29b75516f4752974d30d5d66d07f5afd51ec7400f76a829068f8853acd207cc0d2fab8118bca6323be6e41da773cde4e3b09d39b6bbd00b312

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f901f9ec6bc4d75513334e6fd49d037e

    SHA1

    fd2df340a2faaf07a156b51c19972da61806cb18

    SHA256

    d92fca5373f078d819cf71e7a36c3a8a4ace3881c77c6cff7e1a37a22af3b1d4

    SHA512

    985f3985c03c7066001288c1c4ece54ccefea44f73043605554facdbb534b4cfa4f50199d08fcf0af8c1c56847491c3ea4be1af1d34943e8f9130b1402668080

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af868951ac79734e1217a110613c66a6

    SHA1

    8ff60f65697fe90ed5a08b5cae442110d84a53aa

    SHA256

    12a296701cb0e83bbf0b41b9546d751eb90fb4c708cfdc4e0b50f6445a8f8735

    SHA512

    61793f777e845f1eb0b7f6f393db99bdc33122796f81af2db710b0e534459a2c77ab7a7ac1ee0902425f2cccae6fd7249202775ece4c6e406f4f21504bf5d947

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c96449e1b2c710e4f90df5bd48c3c49

    SHA1

    560676e2897ef17d866c60793ec0499c209a863f

    SHA256

    39eecc74c8b49284e15541749915de402ca04920c38b119da4fa9cbdaad2b12b

    SHA512

    ff671499e02316ef26afa8c5df5d7450d5e3dc715436ecdddc13a9db03938c7bf714e4b638b71ecbbc3d84adb292896fab51d6f0137dddfcda048433bf9dd25c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b882360e366cae685dc1142746753708

    SHA1

    1a35f6d967ad8da7ad26bea739c49b19e69082db

    SHA256

    1e2ef5ca909b6992aa591854d8f85c4c5fae9613087987f2d9d4e08fdc580813

    SHA512

    98019f941db7edda49b59dd82b64685d7a1e26e4e9e6f53a9272ba7d866adcd2cdf3479fc03fb43e943babf40fa5344cc351d5758bf4a498085b90eee406155d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DJB1KT77\2254111616-postmessagerelay[1].js

    Filesize

    10KB

    MD5

    c264799bac4a96a4cd63eb09f0476a74

    SHA1

    d8a1077bf625dac9611a37bfb4e6c0cd07978f4c

    SHA256

    17dce4003e6a3d958bb8307bffa9c195694881f549943a7bdb2769b082f9326d

    SHA512

    6acd83dfd3db93f1f999d524b8828b64c8c0731567c3c0b8a77c6ddcf03d0e74ee20d23171e6ceac0c9f099dce03f8e5d68e78c374da2c055973f6ac2db4e4f9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F91VN88R\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    9e5f0b21584389dc1c7b5da4a900879f

    SHA1

    191b84e0f5644398ba99e0aa141a6778c14b83bf

    SHA256

    3e21bdafa913fa25276358db1269238db3012ffd8748626cdad442f838e890e3

    SHA512

    c1720a420df680bcc46625355ed6d5c35ae280a813692a0fa293f3ba113a023808a781f1b8c9dfeb3ffba29606e1f4bb4be4233983089602e2d2c20786fb0427

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MPUI9R2R\cb=gapi[1].js

    Filesize

    66KB

    MD5

    aa012028297a26c039c37ab25a4bd17a

    SHA1

    25f23d01b5f580c00778e1c010225e5b8c73b66c

    SHA256

    55cd2316edf7159b623e4ec2c9e3a334027c01e2d1cc386f833ebcd35ed87b38

    SHA512

    d346eb082674fc26d562da9a12f36ad2cc7db1f1b35c891a8734284cf1bd052a967137c1281982070688b2bb2e06c7f4967d1c9397311a31a11a8560b9c45fd5

  • C:\Users\Admin\AppData\Local\Temp\Cab907E.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarA25C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b