Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    14/09/2024, 12:20

General

  • Target

    e02b87ae10de55189fe9bf5ae396721f_JaffaCakes118.html

  • Size

    185KB

  • MD5

    e02b87ae10de55189fe9bf5ae396721f

  • SHA1

    0cce6192f2e3cdd7eb3c0149a866a9b515abe1a4

  • SHA256

    1db613a4893e5a13ae2263b369bd77b31f5811592e06ce16fcd6aa4d3f797404

  • SHA512

    bbcfa7170d403c0c5a6d9e37f7c574dc7674d8daedd74151ea17009962dfb1455904480863fb11a78eaf22ccdff0617ee8908c4da1ae937a1d07443c449356d4

  • SSDEEP

    3072:NntkZMS6fukRqlD1aSYuZqnEsbMn7r+JI0q3ycCxn3dYS1zBVdKhhvmXwae4petl:NqYRqlxYnEsbveTWgvma

Score
6/10

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\e02b87ae10de55189fe9bf5ae396721f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3028
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3028 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2772

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    1ee3d66fa820a0948963c7f3e5bb2f77

    SHA1

    8fdb228357505860754ee289f8479b88f75a5c78

    SHA256

    e043787c9f25f86ca045ccb4bae9cb50fd21a51ba2ec9b4839abebced2727ab8

    SHA512

    ebce80f1c7e900eea7d987b66025de26b7c261c0f9b01e61030e5821693f0b656c0110c2fdf90321507624e562e09c3da1e051bc488eb30d5dd385d87c7f8184

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    b995cdad2eda18766616f242aaa75bf1

    SHA1

    b0876b8fc2cc4081ec0aa0298cab55fa76741a50

    SHA256

    c045b904fa83b469ccd5ff591cb682a6b39221e3cb76d6d7975b0e9589584c8f

    SHA512

    e66cc5693f78f9a35ec546ef26fc61e18d3f3360c571fe9f0b2ebffa79238b497a753fc23a9db830142e7a4a7d7ab25be0fd20dff69f86552ba0f0652662fe0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    263e8ac1167cbd300ff86d61aaad2b21

    SHA1

    654985aaddd3ca67fdfe70cce52b94b4ebed200c

    SHA256

    931525697a1c4dde4ad2b8d6f12c11a1c9d424452c2803f8a515094bb6cf38d3

    SHA512

    6fc05f867563f333ac2b73eaa3a5db2aef65b735ab17b7ec9074e45a292be849c0e852ad50e26f32b194f424e5fc041a7662385e57f2dded3f9464512d1a5f51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    32029d0e618c9647f7cc91d8932bb9d6

    SHA1

    17e65642ff4e48bc33ec6efc7d0d9203bb030f9c

    SHA256

    9fa056bdba531862538cb4a33fc6ecd0ad4f32cfcbc570177ad708b7ec63a4c6

    SHA512

    e79b72a1145117c443a6972985e3ab1d1e8b4f279647b66f6dad433e64ec9197e19589c1910eed14e64f289e5e715a934ecc85b5df631d4e475a183afde73178

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5ad3fe2e9cc60e45e86985d3e23aeea

    SHA1

    eeef46a6872d666e723330789c7a35438f1656da

    SHA256

    43563539434a6f2f24f27a48d9b01b3652124d13f42167cfdacc05fef85b25e3

    SHA512

    69b4f88ff5aa6727deaba5ca5ac49216faab91a8ff4f911c04a3426a5e2e0a74901a0113a7d0795a07762a9e186c500699df4f4d0aeb05b42456832f601d4d53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca86b32aa37eb4a554dbbe0d995e22f1

    SHA1

    21acbbc30e4bc8e481f3609799d89ee7e5faa385

    SHA256

    29774cee915a9d65829c22564877927f2fa6f04c5f9fcf689cd77085a3594d40

    SHA512

    bec446a0bcc89f6eb89f646e9bacae6af88347c0ccff0a035168ce8ca5edac51883e414707271bdbdab00f03929d3bddeec8c14e2016eb4456b74f58e6845437

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e0d650614f3892dcfcef02d3e2269bb7

    SHA1

    60768f34d239db99d69efc815eb249edcd5fdac1

    SHA256

    337aaf9e8f5fe0a2797ae2d90b805bb157772e2804c890ebd9a457ffa14f3b90

    SHA512

    2c0ce9a94da5f706ebab3288219de54a82528e9f8f010011603545251fc81dccbb8b8a47af1e4e3035403b73d3ef95030a82aed6db3e20b0cf1c6252ade9dbe2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    587e0ddfffeb03031fa7c148a1f9384f

    SHA1

    fbb32cf40003224eb63d3483b9a40e71badaa2e7

    SHA256

    7cd0226fe393186f46825f05775229dc3873c9c0245be3426a30f4d55bb631b6

    SHA512

    cb6d1912bb71610008f1398d0afeb47f4f3c26cdd2e8f1c08a5d614620671cd563b6b2f92396ea33db0eb957f451bbf2cee815647acc827dc5334169adfd2fb3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a3b3e43b78cdd2bc95d7addf20a3a91

    SHA1

    585bcd939c8691e240ac9343ca0b23ddb13ea400

    SHA256

    f9338bfcf91fbf219ca8d12a5e11852e37d6109bed0b1a227c4e5e534dd993c0

    SHA512

    680718e1490a8b14e018aeaefe377c4ee7a165f27cf17d8e24a373cb39ef075ab456ee5ae9b066b5b47d7cefda427760dd664e2edd77f8ec63fe90e2d8769a0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5bab1530369050161ba219c634dc2740

    SHA1

    f9afa3766d7d1fcbd2b3621a35f6b96858dfd9f8

    SHA256

    c856d79f9cae54d83dbc87c88a292a22ae057e4b65af32019911ef9baf7725aa

    SHA512

    8222d09d7627becbdea1c6ef255ef75b5c66e14d54f267495d6cd34c31d4d68d8477180c55717e5b84fba780cc3acec3eddeeda6f9ff7c275f4d27cc15b52771

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc98fc6edc8f9a4dc66d36333ba128c2

    SHA1

    efaa70eb322f3abb6f4fd2f45bb758bb904aa221

    SHA256

    f22f79eaba0c802a0bb14670a59e13923bbe484b4dd8f3bee11fa3c8be54649b

    SHA512

    35b35ddb48baad95eb62cfa93fa1df235e7a4d23a9eadc6a5d5777284598e3c57989c88f3c971027441f2bf022dc8323567a6fa85d7570f30a25a646f09dad59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1d6496216d5b840a2728f871e9085c5

    SHA1

    6458303f6a6851735f229cb9dfaa16bd990e7737

    SHA256

    fcee36fd371c5bd14779f973cbcbbc0253aee0c541dcf565e77c920626470c1c

    SHA512

    40a080ee15d231fe0fb7d1f988a2c82323b18070a5035e1e2012a09084aaa2b520bee35f92dc988c66e425bef3546616b7c6e5695c6db27346fb7f8cd5a81904

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c11d65074ce35b8ead147240ec483d1

    SHA1

    2c7db3d1ae7528dd98ecad7d2cba7978bf512231

    SHA256

    93815ae64845df73430802adf9b9d9c7d69cd5b5b5f76632d85b818ca960be62

    SHA512

    a9bd29c94509815b27ede03935784d6b95162f0279d144cccb4bde39f3f41add1568d48e2980b5df278054a4cb8570007f8e4aafdace12a68efefabe89ba2d25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e33a2697fe180e17d37eb2cf39b2cc57

    SHA1

    6aebfe0d8023be3f59d93085366228ebb534360a

    SHA256

    e991990a6e66c120b154ce3739d8810624279607bf44a60584ecaf4c99632946

    SHA512

    8a687cc620db35444580753738eeabf3ac98517a52f7b2d405fa336a1b8c4f495d3bcb99a8f1718399acd3b0bcf0e3d411ef1a93061b0ad00c754106dde948ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce4c5c9b5ea902b92ad192bfd3eca4f8

    SHA1

    9bc2111f154180f9a9aaa1a0871dc942386b4fd2

    SHA256

    00c50c81381503462dd9e02b92415748748ac2e9863387233464b070cdf5a683

    SHA512

    b5012a496c79399e9e106fc12d6e4f4039a0686e58aea49487e34df5ffc37200fb5f8e3bd6136f7783a92021ed1bd8cc8412ea50f157a50a6f474af913307304

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    244af9985ff4f1c7ad9f89c2b1d68f7e

    SHA1

    da0b449cda5f562f283074517358ad14dc18694f

    SHA256

    e9fe198023035eeece1b65d16910f1d7a6b4db822e4b28a24adc304537db3390

    SHA512

    80710bb2f6026a143c3691c696a06b202267c672a0e95901b9316ae683edc88e6b3ea1354bd5e608091afcb2e72de88c577d6ea9ea4338269010434453a54627

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e7373d01e910accb93f64cbbaf2a1ab

    SHA1

    ce280e7af455b311e17eb688c2a2b5a468219d44

    SHA256

    8dc415504b8a3a133aa392c1869830ce36e077bfba7c8681d61976ae0151e6b1

    SHA512

    f4e49f2241eee4bd0da30f2b0b8a27dd16dcd8d97570a501bd60f2c7c550820b419a778ac79a1b5bed78a998844ee620813eb21597ea20dcf1676b6c18a8fed9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2cfc826b953a4b8554f1f67987317f7d

    SHA1

    8f45a6669201ff889b065c62f67ead316c70e263

    SHA256

    c59c7d87bf39705418b3ccec3dcb8c8af25f4e4470f5417283fa771a52564133

    SHA512

    c6e8dbe7d5909e187c707a6451f7f81ae4fb1e640ef254364fa787ad163d1007c6e1f9e367e6a792a9a1aa3b767708b907d9fd0159085ad49aac099c946f1494

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fec0e3aae03d0c9078db72e602813a69

    SHA1

    5d28cf0badd39a39d3143d3be746ee9b0282c634

    SHA256

    d52c191484a19141c8ef0daf744a3476d6bde06645f259c4555e73058456cecd

    SHA512

    8dfd95f9d02e5b2465789f9045c9c5e9d0802e404bc3d4bb057f610006dbd2af0fe698b901ebd4eeaa2e08c0ead3580134a6142b360f5841429ead0b4f6fb216

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c239142a456642d34adc306da20ff30e

    SHA1

    9d3c54125cf0e96d79c541cbaa0d5a9b40e62ac9

    SHA256

    540843a74c4483256e364a915e49ab1281c13c2fef74fb4090b9b61233e59cbe

    SHA512

    30116c7642abf793669afabd78ad2c44840ecc6302a6b7887c9fa51e8819680d11fe64f7e3eae87df06f34523c57f0e28b51866c2eb815dca36f7eec423b9378

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ef2ad035d1387926faaf8cf34a48255

    SHA1

    d72241ccc71aec7396559aed0306bfdd0c857133

    SHA256

    527f84ad4549865a23cf238ceaaaec9a49803ee7f6b874ac3a28faed5818569b

    SHA512

    bf5baf0797341251112ccb41ce75421abc7f4df7426535ec8994b89e83bb449170c9573430a4512cff580e89b3bc6ca346987f8f7b17ec3a54e4329bbeadb8e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    876cc20fb217beff2ce9a93de57069f4

    SHA1

    252a8da395febdd34bb146fb276e55b274650e6a

    SHA256

    d4cbacbe3a17889b8635a14fa583041f4a5ee0f54d56f70fbe323fd962905e68

    SHA512

    67ac4f9f1c8f3498829de753964eb4f3847830d483c5db4106410c3581caaf40b89260190de41072bcd65f617f3e7ea8e0b644182eb183eaed05eb5538e45af0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    84ff6d2ced96e671b8d82391c8747788

    SHA1

    db47ac798c74743078d345e87db232b339be16ea

    SHA256

    7126f654990b0538254314a0e7b51b276416df9739754f946558f8082b692152

    SHA512

    e943f3fe0135e13395401e546d6f02b6f510fbd9d5c7f7e436342215a48763e86c833dfb70a968af80148dbc50226ccc8b27c4b1af5ad6ba3ca58014b16fbc54

  • C:\Users\Admin\AppData\Local\Temp\Cab4AB6.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar4FAB.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b