Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    13/09/2024, 17:41

General

  • Target

    de965136c4334586f3f9568c4673697a_JaffaCakes118.html

  • Size

    460KB

  • MD5

    de965136c4334586f3f9568c4673697a

  • SHA1

    8dde19380106ab378b0a1cc94ecfad862857b272

  • SHA256

    bf8166ca8fe5633c8841c447de01068eea6d0628281b6bb9ccfe123ba70523a3

  • SHA512

    6c63e14a54de3c13ce551a9545f17cdd553cf3d5f70774220dbd15de529e184e54929b9302272082c20079ad5fa05af08424b5b27ea6721aab43d6c866a0d0d6

  • SSDEEP

    6144:S2sMYod+X3oI+YrsMYod+X3oI+YEsMYod+X3oI+YLsMYod+X3oI+YQ:B5d+X3x5d+X3o5d+X315d+X3+

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\de965136c4334586f3f9568c4673697a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1980
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1980 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3016

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    839a36ed1c27991ec07b9f13cd6a3db4

    SHA1

    b8dc2433d0e405e60d24730e3f67c2fedd84baa5

    SHA256

    4d0b380bd482f502e532c0353c60c83393defc76bf4f895fa8723b24288fe584

    SHA512

    2bdf51f93c140362b050130c9b5041d957750d34b8e762259440a299bcfd24f356b5500f81ee8e7de46b3a0c641db57ae544f244e1157e0c3ce20b4ff860c9f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca28702774b5570b80355d42d8de99ab

    SHA1

    c6e521aabe14f272a1f0459184359268099fe10a

    SHA256

    3a9aa190c38acfd299cfad5c50f3fa0fe2c582e040ea398fba5bf2b34265d338

    SHA512

    d105f4461510886b6693dbb46bd2dca740c856a56fa857a1c7ecee2baa75ab8f3d34bb26907d48c14feb8ef7af7847639c45c560136407e38a26f7dc8f8dc76b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7bb762d7841c11e89debc536e821af50

    SHA1

    3e71f81417080c2e6b0ac636baaf03f8967bc1f5

    SHA256

    c87b266989462e3f10f643ff26cc77f32b69f0939e36ed4be2f38af6ce46d140

    SHA512

    e31e7ae056f32a3fc53782e4cd6cc24e648c4604c22cdd6dc92762a23934725d05cfa582b3e24cb9eed945f774554ab55966a3ea5d1b1b4965312a9911dfd25d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e92723d12ae8a65f626c30650cce2df8

    SHA1

    7c6f47714239ba6f5eda9ebd3b3f38101ee28934

    SHA256

    747817be10e7d1a0c6e1c5a7b3714bdfccc4497ab8d7436f55bd27b15947a473

    SHA512

    e18902ce297f55168e9c2177e9b3f153acc06c930603006570a2738f387447751cff44776fcf6ef70428d2d9661d25fa625256a1510e7d9d604feac8d7769c61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b55af5a6cc45fad92bf3a0e619c2ec8

    SHA1

    6bac60c81b79ca9d02bf989c08c5ff41d50acafa

    SHA256

    2f25f61e527bfd06dad3622cbbffb2059478e4394e6515de9a3c5711cf1db94a

    SHA512

    e1f4288b28f4515de78daf488518d7c0bdf70d2f10bb38c1b5e4c52dc76ebcec2a685011d68c6bd68e336b1da793147dc05ed9d485e98cab56842df8ed33fa99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac84b085fa551bd9244c8d2c098606fe

    SHA1

    477e40e3c774d31f22aa39f0a691858eea5eeda7

    SHA256

    4fe371d389f6c2613e2888b6e2a9c8f712c35b52b42b3b51e5e95181ed5c1f23

    SHA512

    1e1be67f1bbebfa6b70b6c560f8d9ceb97c47c101c30d0c81d41695cd7a5adc5151fd67a04d8106ce8db9d3e9c9cad80c7d4012cdd8f9fc1f84efd101decc999

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2e2a9494f6f5d8d86f9d3c8625645d2

    SHA1

    12569b3ff134a206e045076574d2fc1752bd2ba4

    SHA256

    0920f7de31f44ee5efdc6719834881d183437251e11e881e0df303c9a1265bb6

    SHA512

    b5817e0ec04f06b0044e65f225e229fad8764fae4782d52394b5bc517d53652701d8a7156fe11f695b5cec18eebbcf15f1dc39298ea3cf1b31840393b69be106

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    03c780d00915a9e180477c737b61d349

    SHA1

    6f1ec2a52d68b18cd31662982597b284b7e654fb

    SHA256

    c2652478d2207d8c9b9a10f8d0ebf973cf544fc5c5a7c066e78360f01acd759d

    SHA512

    e553f72fff69ce53f95dc510c8931dca61b6cab88181604ff1774541a36c8566063c2d88547299b3a1ce215bfd6836713eceead3d89905b8f04f8e33b5f94b56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c676b0874e0a21e1656bade10a4d3c5

    SHA1

    a3c8da8ae72c2096934af9f20dde02b88ff2cee7

    SHA256

    9f37728fd0ee5cffeb206f8e41d5074059e43f804a17de5f6d31d633c5883c6e

    SHA512

    646264ef75477c5cad9579bcb50212417cc9c8069662f56e42f2933bac2728e25787373198741eb651dbedce329dc56140505ed272ead5066e37de30c6fa9b31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed4e8759a963323045a17101123df603

    SHA1

    3fd636f31283086e436e8671dc9bfb7dee0a9ecf

    SHA256

    07dbfb6b545bbf62fd3153dc759bbe2784b282647953bba3ba494d02f535f89f

    SHA512

    4c92467c4b771e46f9e6055c9bdb3dbc894010b18d38f41b0b6656af906c00cbc85fe25ee33ff9c982309cd4e9b0215c160cdb2892b56c49fbeb45cf98479abb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff23ff242e310fcca687cc942b2077f7

    SHA1

    4a15a10c6a8ef0952f69ffeb4864725081e61977

    SHA256

    9fc5aa966f3bf69c814ebdd6f4dc415c716a28a93cd4e59f705dc4822004b5fb

    SHA512

    ea8ed6478fef2d60bad8d5b8f24314172405639b91ed722109cb5bbc9d7648c2b8d576724ab5997ac7f79d97c0cf7447401015e9b7660b86bfb072afa3b71514

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a3b4a9c5017bb0294bef7c919572de13

    SHA1

    9fdfd944b8fb32de14b5a49889eb2f17e597623d

    SHA256

    5f2e4a09a8d96a468f6cedc0f36d5b0706b3ce0c382fb15c12ce310780acf5ad

    SHA512

    501b16b247aa6eb94385cfd98a79d3419bc29e68415c83fa1d20c6003e95c2eced3fd417ff896d17fabc085a527bd233a49415ec37b9ec0cac3dd09a68c93737

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d8f242fccae62ede61d086953a79ebc

    SHA1

    f486c6fc8caa414589b3440362c1250ec40136f0

    SHA256

    57e58a40290385a972200f942456fc53526b68982ed579ca88f088a05ba30f25

    SHA512

    b48740188d36208d1de080d0907cf618e7b5df95fb80bc8d086ae09fe893eeb21575bd57f2a3e2f54048539f5b09f1e7807dfd96dfb0eda51833aa352fdb0716

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c8dc93766a11625cd73b711490d9fc66

    SHA1

    49c30ca4e93cf84de94a6c43175de57f6f6e1c33

    SHA256

    80685d31af5266d84a7bd5b1fc22c5051cfc8c2a971baa3f119d6ffa731dd3f7

    SHA512

    35677f6d09a2da65a318969f0ea71eafa0913a54d43dff91446e155e33f50e9cd5955d8b6a65a980bbb0d523efba80075557889fc9229765db1f4a9a52582f2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70b9b3e3c5a90f4e156438fb74e30f46

    SHA1

    15e7cfd4beb6043b7fe7792c8f161242b4445b34

    SHA256

    9120ea617de7dccfe763b86edf33f371fdc2e98b1fafaf5dc71b6f73b37a61f9

    SHA512

    e8032f643faf7491a60fd39e53a840f9f15591cafc1ef4f48a2dc231a8cac01f0a2ee290ee863bc272e9b098b7c1c6878b37946468a51c2e6c895efc9cb43432

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26293b99eaee6c1a05896b932dd01dab

    SHA1

    1f8a14fbbeff1c71d79a2851d9a5b50e74c9e43f

    SHA256

    3b68f73aa5fd0cbd39fcae05660e3cffa843650ad4a10a737979fb7e548109ce

    SHA512

    cad5728b84c30fb4fa7cb3e370913874e64e36d0e648741b39287cd55b11dfbe69924aa098e1b2c567b4f6c148be6bd3748b40c79e1b1b3fd5a1f990db58d7ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3407245f122111183bd4776dde395e23

    SHA1

    462f8da4200e647b383c61efa8a3636788d7c77a

    SHA256

    beb71f9c652cbfdbe03e3c6cc5e864506d9e8603ab1975bb96180a58b5715adb

    SHA512

    032a7d9e6680d73d42c5698ebe47a253ac370c61a2a1f8b212761477479ee9166ed3e5ae53481a7a5d33e27625e4b0eb24bb0d36bab94cc329acbedc3682d7f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7cf26c7debb9f5dcd15865e810941a5

    SHA1

    03f532a3a39ab540399bdb9cbdd638202046c318

    SHA256

    4ce65131c1bf7bc8129801a4f7ea3eb6f889d518806037b48aa2ecaaa037db20

    SHA512

    e1c2096e8cc2b27bce3c2b8ecbfb30b4390f695276cb076cbe6101332770b071552165d2dafbe60e98c7f9b9c6ce79abfa89917b809e24fdf085b9969e5f1f62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    93aca58c143062818e5677bae9356ae4

    SHA1

    2b949182f2907d2cb607b762a62369f3e132d0a1

    SHA256

    ba57c91e26364c67fef8fde8568a48c0013a9514c73bcb069b40da74b3f6737f

    SHA512

    f600ff5f07d1752faa28a6da074361fc459d13800bc63fadd88c6d0fafbfcbb2d509d796afd4fcc9d5dee5ce5cbb8444d34397efd189c455de81421da94ca59c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5b289916f0578d138e114209b920e6fd

    SHA1

    6e737d84f7a2f03923801ab9e95e5a58ce77d2fe

    SHA256

    3b2b1e82e88ddd30badbc5440a1aa837d1d511a4ea8c66f45b89d28355dc093e

    SHA512

    d74d466ae9563639071529504e25ed21ccb7273fb40b8b66aa5836515cb6c9f9d3525b591f607c2602f250318511f3ab5ec55cb62e279b94654eb24a65d357c1

  • C:\Users\Admin\AppData\Local\Temp\Cab19E8.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1A79.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b