Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    137s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    14/09/2024, 05:56

General

  • Target

    df9c73e6d7baf8781b7bd67d05a6c2b6_JaffaCakes118.html

  • Size

    182KB

  • MD5

    df9c73e6d7baf8781b7bd67d05a6c2b6

  • SHA1

    222684909163eecd555a27db94f582c3b342a4aa

  • SHA256

    f98bf8b12a0d0a4917ab32bc6cc68e3db67cf3856544ec77d08c33ac098dddb1

  • SHA512

    8df1a500a8b008893ba24a14312ba17f967abd200f27b9256a66ae158bda15d256bf27d293b3f366cf63dfcbfc8ab70ae6101d9aa11c8f054826f15dc36c30e4

  • SSDEEP

    3072:79fyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFiM:79qsMYod+X3oI+Yn86/U9jFiM

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\df9c73e6d7baf8781b7bd67d05a6c2b6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1280
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1280 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3024

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c9d5e6e2272c9aefc78d3ba2b364c82

    SHA1

    f6d8697d2a081bb86f4274adababbecec09d99c2

    SHA256

    a714403cf84c8716b9c75b1ce738928bf04b6d41603a5d2b1d32dbc292a2ecc6

    SHA512

    4b52151d2e07336f949ad9a511de87cf7e0f3e04961c6ed596231e8e6f8a625e28bb235887f5905607deedb045f098823318b84be27486de05a7b9feccd9c433

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    16e5b2ca375e67300803d1e0e6ed637c

    SHA1

    426c55d5ab10a89f014e6d618cc9e392c5b19074

    SHA256

    d234f84c366d133e6f69c4f3f7929d59bdb114bc640f988f4f7115815c179ccd

    SHA512

    903935c498884a30a4c855185cb0253872760cdb40f36c7f436d04eb0b753d304f4f406988fd0fba0438a44f61fb85805c6cbb59dedf946de3c57b6e65c5e9d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ee89131f58bde1e2ddcf667c3f2200b

    SHA1

    6d482d8ba6f7d7e695e5cbafe3c59c57dc949678

    SHA256

    5b0f715f8a2415fb00af7b7158eb2624ca58bf989b319d5783c46686eff54e83

    SHA512

    27a7bbbbed97d14f365a645766623e7d53371b20872e41d8f8f30d6fefe3338751fb6b5ff0679f0c306e27aa528e414f8e3ea46ab9caf838950b5cd85e2aa8b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    376b09fa1265d6c9994b72faa6520104

    SHA1

    14cb1862fd8dbf6801c2997a884e04b2e38ce65f

    SHA256

    1ea597eb7f7cd4d38172099f516500308c6ea2ac68d2296e57987abfd722cc50

    SHA512

    ae9090d474c556628c71540283c839b992b2c0de24e2b2458f8cfe8e9cede11510da9c5fa53e88f8507816d4928b7ff22f0b2b24ee1c54844af2851eb4769955

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    69a7221e8d9acaa3d596c48204c92e91

    SHA1

    203c6c50166cac68629ae7369323c4fc9447dee4

    SHA256

    7f8555e39651151162548136e1b3bb2adb8c47031abcf1d018336ed079f94f02

    SHA512

    e7db72567d3dd09eaf6d648bb9e08232c2c39c4c7a81549d3a6cdfb3a3177f2b5090892dddd9442d95c3f1c60056fae68160c7973cf0678166bcd11b0e74b48e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    730509151a9d0a7629d86d6d18d2a2fb

    SHA1

    ae3cca10df2a73902b09dbc91d68b7b4480e0b36

    SHA256

    75ee0b2ba720702696af5b4fecfac9fe3f0e0085a7fcd6f7f944e4a4bdf3fb29

    SHA512

    645ea19d0cca3b62b06446cc3cc067f91e8601b54727250a25ec8de17aa9fff27377a74676f502f7b34dd7617571e0134779222918fa6096cdc3948f76e2599f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    84c460b26643b61976c9181bdd1b66d4

    SHA1

    7dd8d22e230bceb9bd92e1151ead8393727082f5

    SHA256

    0ac3f8549919c21e2a9dda1b0ba95d393f44eaf864172af7201b3f4adb63d93d

    SHA512

    73bb17349ac1af973041660db69728c977bc376815ff70f358dd13d90fde49c86bff6ee82b35252c16dd5b2fea9d89baee43f352fdaff390b298ff17393a8cdc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2ef999a4b385a076e0a8dfeec7eb1d7

    SHA1

    3f4cde0dfe37a869e64e02d8863eeb8a6673855b

    SHA256

    80d215241b940974ed33a7e35efdd519c445b422f8c1a1691d599930017a2783

    SHA512

    d78b5a06306ab521d8df6555f890901e7f38feacd26943a2115f9c7da8b67e986491851e30727f96cb7daadb42eab7f7557273506d585b91fb9bd0afaa81dd3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e0340a22edafd361f9c966d3011fc882

    SHA1

    bb0b6065ff9e03c0c5ee5957acd3dbffe763e691

    SHA256

    db5aa7f1c7a998d637930e907c34a19cd0276c6dadfe3235aecdd132c5c8abd2

    SHA512

    33f75d4c0b3e6442733640f49929e120f30a4cee1dd3bc8c6e826901045ac819261e52deed33b56d9b745cb000ca4948d6a49777367664679930c32ca295f77e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    910cd76283090243ae047edc17e147b6

    SHA1

    abdd3d3e27f1ef8493676bc8ebbdd5909d2e0682

    SHA256

    b8b42457bdee410e765da674c392b4f8fb580fed6d0769eea6910a268c20a599

    SHA512

    797ac8e0f3b3d5a029d20154bfa8a72459e4c8f9c3e731ffffe1a95cb35493886127f313d88602e3c37342bedcefc9d683fb92385dbb18b8313cd8a4d5549296

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1c16df2375e6f02eefabc20777b3d29

    SHA1

    03b2449ef4da4445f7f61c93e472e80cbf50bd58

    SHA256

    966d15c5877c240358b4b24d06640597ee44454d680371b41283e233dcc9fdc0

    SHA512

    c5448de39382b49bc746457a00ec309bf3361d10c5eb529cbe4f17eeae10d52648309d8f01d0498c8f2ec0a44b058ad5c9789fce35737a3bc3ee0f56443d5acc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a4f9c85b006f80d530fd8023c9424165

    SHA1

    557d5f337816ca275fff0e99b522bd47be3c65f8

    SHA256

    d3ba68cd687d37b0b1a48abd04a3efeaddc0022d76411e4d5ba05cc554ced4d3

    SHA512

    a516b4e247bc75681c1c3341143eba5c27ba1f2fc848f32fb736291bf44494009f68f7496f334b50709a1852539f0f750d3cb8de7531914b9c539a0caeaff257

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19e3b1bae448813168417bb3133e80e9

    SHA1

    27f6735371066cd9f89a89fad1bc830aecaa91bd

    SHA256

    0ebe1693dd514d31e44769dd073f72cc9095421d33e8232425fba475b7573b49

    SHA512

    23e9f4f8337c8daa86f8f75c5e34cb0c9ce49ff744eb75d6b8758693e43b0f3430e0ff6adc48ce2dd9fa0bccbd844c02274e80158eb85c430b83cfdbd788e078

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec9cd16e3dc8d76d0f97d8514b390fa8

    SHA1

    98fe0391c12908e5045d4f98fcc1435ef460328e

    SHA256

    e1f3e38a866e4f306bc9a862ab2e71e2530a1944ca3f6b7d30e779114490103a

    SHA512

    0999df49eebf8a21155ec83b1fabd20eec7ed3dc8feea0fc3352dab98a1820b3684a40281e3e21e0c72f1de3c8ee1d1505a9dcf5b630452b694226c6b45c5349

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    534fffdb28d3f28742b7ae0a6bb420a5

    SHA1

    07fc299f06aa0a28d84e138d1881fa41db4e0aa3

    SHA256

    59e2b82df43714b69607dcf546acc0411b5f01881e9d372bd3a845f9d7253d1a

    SHA512

    62f610e8eafaa8f6f99840489f53f65bf234619f13e4026aad4cc459cb73c4aa19e84a9c1bf26d7ca04c02cb5958302aa4936815a1499d55bb3b1faec4f3c4f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3786db5d012636756baddf727b66dee8

    SHA1

    38bba4c7894f9169570262043762e2f00a45391d

    SHA256

    d1c17139cb56948d84274a6a55657cf0411d139740da118e885f2b89163aa0ea

    SHA512

    644aee66341f48b508c341becf3fde71c02301ff7ab6794c98bdfa0f39005e9cdab0edccbd20c02d96eeb8a680c6654b5dc1030b14ebb687a3f7881fe029b41e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc4dc4c9d5f98739a4813a88070f0c81

    SHA1

    d36901ce9bcd1ee961462f0cbe2055249eed7a29

    SHA256

    14f8c7e157bc54743534dc597ca96f6ea2950e6629c253d892e7a095368579ab

    SHA512

    3644ca93643f2aa1cba7e0ed0f706cd59f30a28ac38854170e82dc68a02b38c36c49aff7c772e94d4d75cb0584fb1b73689d90e87ab1d960864b218c461e88f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4773b9cbf3830c931f21dece60ef8b4c

    SHA1

    7f84db5c8b920f0ff697407e6c8b525c2921a9c7

    SHA256

    8113726fb3b6c3b8540578b3d28abe7c056e89d7e1974c89e0e41cd0a1f5ecbc

    SHA512

    4e5d2a530c3c10e4feb94996b1ef6c56e43c9cc8c4a5d4c59852538b0429ed1de0c68cbbce7511bcda7330f89a16434cdfef6294fa799b22104d8136b566f620

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5149ad5d341280a5b83f78d94c8d7bd9

    SHA1

    c0a3258206c1a50010b926b32e64987d82681978

    SHA256

    953f86916c38383b3199b2fb3f28e3bcc5056ae36a7dccadcec4f5f7b40334f9

    SHA512

    a8fd940f7f06531dca136a68e08d841ba319f2e6b94eb54b33f91887040a065e49615b6258bb37edaff90cac28c2f85d4af7042569914df9d84fc2a652cd5c2f

  • C:\Users\Admin\AppData\Local\Temp\CabE38E.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE44C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b