Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    13/09/2024, 11:26

General

  • Target

    de3ff9c72012785b30fba6a20f18df9a_JaffaCakes118.html

  • Size

    9KB

  • MD5

    de3ff9c72012785b30fba6a20f18df9a

  • SHA1

    5a5f2d84374bd4978997d69d776f9293b4cb67f0

  • SHA256

    1edc859f3b073ea0674b9dd0b45047a1b098b175f9b82cc3125bc1e3170d6abd

  • SHA512

    4930b3398008be81987c3c5fef79792372e3659658352641e0d30917085406639e33e24d8630b38059ca31bc71d7cc35327645a6ba1b575c143fd6f4f14829ee

  • SSDEEP

    192:aHst3Oefcfdma1CTcFL397NdcAGRoOQiP8G:3fclma1CgFL397TcAmoOnh

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\de3ff9c72012785b30fba6a20f18df9a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2524
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2524 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:540

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    054149b8ceb9fba1266643521187b7db

    SHA1

    5725d7a4be43ac06d811d710c1cfc853cef4a440

    SHA256

    9b0ad68224b45b9ae14bba9e500b94f13d0487b57a623df8e9a80414322c5c8d

    SHA512

    98bb86e1cc3982de38c4a0e37b0e49ad019ec5d8b82bddb7ed413e20507978fdbda58f0e1309f7212633aa3f9bf319c96dee528937531e97ec2408533e287e7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aafb2ab257d8239755de000d077dec87

    SHA1

    5bc325996a78ca622af84742973e87fe096b819f

    SHA256

    75f179a632b5bc98fff5d07c4b138eed7e436aa5997f4e577f48a2989b829b10

    SHA512

    06a3addd3f4e647f6242785287fccff79775308c70f705ad5eb2ef33b483fa275d8b81e73e446b03c004160e09e1d79927f17a2dd153c9eea1906875eebb4c3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f5d7f9e2b723b52d649694c6d73a4d16

    SHA1

    e31bfd22fbc8c417a0908fe06f2ea7dc5d1ac669

    SHA256

    9dc8c04aae19dc355fb51dcd24b92ce1f1d578b8c4097fa6c1fd67e7dffed097

    SHA512

    7bd715bd909947f307afb7efd695c3e67bc9120c1c509ef5ad03321be91222e0385fa0f8e5cf3f2d14ec26b381c3511ca5ef988eb8cf010b011bae7160151795

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6dcfb22458c4363aeeb606d229fb2ff2

    SHA1

    f47dc4fc68403de4024821e54833e80c41235b1c

    SHA256

    67e39e1076d8c254586bb7227e586999e7e63756515819d596b1e0e357ca25e3

    SHA512

    8f4fa37c8777b0f7b687e4877ba0ff86b12fd1dcaea33e9a1a4c8d1ab1178360c2633cc23c5dfd38b07bf90f4466834f5fd9eb241f3be4290f0130bba8adb4d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63d867e64d6a45a5ae3116423dd9637e

    SHA1

    4aac51831c37879e8343dab4d5c9fd0957f0f476

    SHA256

    f3c03e50eecb924957c53a90e9bdfaac085b92d20755ce20c3a22e22f619aedb

    SHA512

    395fde52ed591926ff6d8eb485b2e99e17dbe33f9afda5c1434ebe1fbfbd76698af98926dadb324ea0bd22918aadd334bb72b3f5de9b8418c88b117b813a70d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    794532cefd93eef21736e25509206d91

    SHA1

    18a6a4f391c5cd6839f069496793aaf7508eaf31

    SHA256

    ee6f6fdfbb81b19813b1364bf3cd64a474cf762c82e1924e1d9bc3e082149d20

    SHA512

    a3ee1c7e9d8b95fc5c19fee619d8af3fe1c78749291c563467bdfe07e28f51618b7006272d8bc0eb315099b6c382ff0dc4a745c5c17862ef2f388a3eacc584af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9953992ed33f66a3cc40606207a70304

    SHA1

    d2a6ec51f1628cffe24bdc7443a5adcff781e063

    SHA256

    821a8e54aa8506888ee4f701d6d6c78c6c8fd9c358f69eb48266d4f79a888b4a

    SHA512

    b67815c8f8770fc091b1f8d20b820fb854682c893da8e79e6fce022bf84bea98ff82cbb12c50c36733c00ce86024241214553460e4593bb00df8ae38dcbfda43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f21da1ea3ed28212445358c130c5047

    SHA1

    1c9e1d24786644f915cc385603ef4f05f696925e

    SHA256

    876c12e5b07719ae512ca65975af47629163b232584b06ec5c1938a477c55fe5

    SHA512

    e483329b00b98fba7ecd22eb64ba7cfd1e6be59ccdf50a1a44934de3e2c9b82bfae735dd071da4d88647cf01a419d3aa6774a2b0df51dea03ee2766441d57813

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    674aab7d99a8fb828b04fa9e15139e11

    SHA1

    e7999843098e02e9860e49534ac1cc8ff494567a

    SHA256

    fed29f616d8928c6cab6b7024ad77e65007a12535b82b1bf116e028b9fb2e4e4

    SHA512

    55b27f0ff9e58fc78fb14ebea4aaa6379dbb4786eea38749645840747aa7e6c8f45269aea0a9e478ad89172d2773920c1cebc465d3eb04ac31e861fd00beb4d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0058b881130184e4566beff9ef39f4da

    SHA1

    820b59bec05a592ad21e209fa9d2b9aa61ac334c

    SHA256

    2881727a129aa7c0b5f1b034301e48b365b352d39d01f017cfdaf8e3d79b952e

    SHA512

    0aebd959109ed58e5c0f5b11c96de4fe7e8eb7ded07a914deb9990bf8f2184c8144aa63844cde6460a0e0aeb24145b21536849d201090640e1e7999f6abef39a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a842b6e4d7a0e2b9433b795708084faa

    SHA1

    23eee4f930d37d2ec4eda87fb531a04fd6c9e45f

    SHA256

    8500cd6f35227e295253f153cba7478bc83984280f853ee2b368377296037c62

    SHA512

    9fb4937de974c997393484f63f99e85332687bb59c6789d1db8989199e40f973c1dfb7a4ba6927abccbee1ca911e098b34c405ffa619e334d40e2a1b9f4a5b63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ce5b53d2aaab8929ba1d2d4f5a82c53

    SHA1

    c5a84a65a13511cc0a1052e8278be3f865e5b77c

    SHA256

    629ca539b2b51c613085752beb2222705abd029b494bc51296068718bb1b3983

    SHA512

    c3bc257522e6eff0a9a9f1db826b6cd73de64e10cf80a80accbffd7bf9b59169207a6b93ba6e6f7eadaedfeee4c4a4d784a5805538441815e17a86868eb974ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4561df87a4dd59573690b5b3969f367f

    SHA1

    24ebb64a511f994d1cf06acdf97cd407daecc123

    SHA256

    6ee69bf87515193ab92724d5ad36889bf1f4313131f940d1cdeaf7242be26970

    SHA512

    8f48793be5d98359aae8bfeb4738fd399fc688d075992a97642f4232080e4cff8a4764c49d42c3df6086fe46fcdb3a754e936583bded15c7832a333bf0fa9f4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    096987211d23e0505e2496ecf47af33c

    SHA1

    783a07cac6b792c824ee5163247b501b6ced1a37

    SHA256

    032941e2700e2f4af9e0026a1ee6f06574867fc6bd4f8d94da062a4a28a291d4

    SHA512

    63a34f76239950de40f2aa0264fa930b61da4feadf46432ed5d14e9be8654c1209788fff1ba53f902fe5118628067a1b7f5cfa030e820bf715032054039e3855

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f843b6d9ccb89281445d54eb423c406f

    SHA1

    56a210d1294e7f21c065c9536d18eb588b2d69ce

    SHA256

    cb0bb1299becd96e630474242746114b184ab530168e0e01ff507574abea6107

    SHA512

    4aa62235383d9dcc365ce77b173a94d3702d163e0cf57fffd810dbeecf5d8eb4ed78c24dcbba5067f93afd56804b53163a378d3c3a2a918f30acad303e82d9f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa5e0da0b94688a1324f04aa40ce7a7b

    SHA1

    261c37d1d6640443e2e74af8bf5a861fc246ddbc

    SHA256

    bd74402887555d33a76e5af57693cbf705a8bf6349bce1d63836dd5f9f5847a0

    SHA512

    b998b03fdc1428598493f893fa12006da1645df8a239bfe598240b568611200eed1684f6a76537193e80ce083a6765a5730c33dc92c87ed80d70aa065eb8df42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    27cef78d5f1cd93a03f471aa1efe81a8

    SHA1

    d5c295ac7090322ad36947ad7e9a894426a6816e

    SHA256

    60a0bb86e9f56660c658268a43820add01340fc557751c9f40c8a9c6bb4bbf7e

    SHA512

    877eb958535bdf6bb0c37bfc91f511d3d20e001adb061f355bc5d6260e54d91d56644eedca7a1a9ebd855f4817a3a4ecd50f84f2da8e0c17b27314b615554389

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    907c5f588765a87610e7501c05aca038

    SHA1

    3af5ef1e0f552f78df873d24ff4646cdccb081f2

    SHA256

    28f2fb7a44ae0f6662e3401ca5594eac941ebac23e6ffe87a4f3a071adf99709

    SHA512

    a2ffc08665d08ed8c68fb84936a273d86beca82fa7e4e0373e015edaea6b6dbb623dd80c249d579a80e082fa8fec777d37ad587ffd1a507171f9e153c062d33b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    79ebd02ebded9bcf15ecc4c3a9a2e6f7

    SHA1

    333b1972a7f458b6522ed33c2a5d98c8de9e29ae

    SHA256

    fb9c28e913ac6bdf23718b4af0d64493ac5f89dac3127c40f7c27b3bd5a8525b

    SHA512

    c9b6a11beb25b08ca11324b141f84e86275f25ca44fb9ed82a6d8fcbaafa6814ba42fa707fe5bf7f89aca5ed16478af59e5acf7eeedfbc8b5d03d2ca60ec4b06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be6d5d8cb13b6600a09edecf08b719fb

    SHA1

    57a6333285c4cb27b46651da0389d66ee1f5a657

    SHA256

    e56f07eeb498205dc9ac4bdd0f8ea115059003917c7249e36390051d11ddbcea

    SHA512

    4f0bf57fda2d18ac0dedfcd618f99371553f765949ba10e6cf59a5a2b52ee2fd60014db900db5f8be344083a5d94ed41b95eeda11f957b3aa15ec780c86ae91d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1941e9f3002af2a6f4d522bcb046807c

    SHA1

    d8c83ae4ef183a2106c89f87523810962c735781

    SHA256

    0ac9fd5f55eb6af14d6f530d718c93ad70fa7270e767495117c52b7588b63399

    SHA512

    49eea57a4d97ed11d09752048abe0b43e0f67e28340870c4d56813e12c12d3fb5233a27cc03dfc9ab382f35ae7719c5c2f8a940ce568ef4874a43a3ab2fe2951

  • C:\Users\Admin\AppData\Local\Temp\CabD349.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD3B9.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b