Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    14/09/2024, 14:34

General

  • Target

    e062594036a6f9e586be5f8e37c1bfdc_JaffaCakes118.html

  • Size

    57KB

  • MD5

    e062594036a6f9e586be5f8e37c1bfdc

  • SHA1

    4064be43d0ca74f2f8d79af68444d5b5f45b043a

  • SHA256

    53ce115e45a2bb5c9446254f65b96b3d177ace6339c2dc2f76bcc0f94f2f2478

  • SHA512

    3c32e2e4d498db018b216eda509aa00034f8adcc5c23cfefce80aab7ea2e7fabb3695b18495891a58dba1c4c877597406542b6c0e8896fcc1a569d654cb57947

  • SSDEEP

    768:KedU9z4ys47kM9qw0rlv55YF4ISY4yoPPF6gLm0Qp:K4gS6h4ycaj

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\e062594036a6f9e586be5f8e37c1bfdc_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2408
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2408 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:320

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a215bcac98829174c1bc1cdf11298bab

    SHA1

    8d5b448e06b14746c5b06c5de8db87d91ddaea05

    SHA256

    18dfa7ae36ed910ea9b24d94f9d1ea7c445ec3d6acad20e014d60a011dee01b8

    SHA512

    46375e0ab86a437f30324a90ffa0a85aa016f31e3ccbfa674ee49cd124fcaad3b026a17bb1d5844e070f9cd41bfcfbf347460f7225a1c1f9fdd65e5312285a53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c24749e269d89f25914f2aec83a145b4

    SHA1

    e605e52c375283b3f73e6113d7446de67c12316f

    SHA256

    4bf432b19b3943a6fcba59fd3eea7dc74de98a87c803b2f817e7fcae6302d0f4

    SHA512

    37ca8b09d9e84309bb102ea396b3d4ad82f9c6473142350e8db55a6a476088b24328e833b7ec7bd8b40d87cc3c82a7f7cf74f2b4f667348219248b03a175e7f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d1a1cd0f0866a123cfd97382047a127d

    SHA1

    9dc60770865e0a8b5dd40cbba918b066f002dbf0

    SHA256

    98af8376514facf891f762eebbfdd18584a94197120d860f24d6790ed718bf9f

    SHA512

    aa3a82dedb382b9063c2acd60ec7d88a424d83c2040127d7a8e2e17b078250ed6c01a2efed01c89331e5538d4c51236dfb9c4daf63932577fcd454b4ce84baf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e365702f8b968c942e2af59ecafbeaa

    SHA1

    4cd18b6fb021db0d74fb5a3d98a03e4092ca8766

    SHA256

    4470490d6fab0132be1be9c5460358f6dae82f603af707f6dff9fbd8ea7e2af0

    SHA512

    eaddce110ee4421bbbf84865d73397b9fa614da435328c89c8a624bffc4cd0ad8a2fb315b60e7c66956c425a617fb80a0b01e62e76550d22f3af528faecb5e93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    deca262b873451bcb4742509794de9b9

    SHA1

    26a26ff39d478fb8f2b73567326bfbe3eb2b4831

    SHA256

    407054e58a87a35c641ac6fc4fc860631b84e28abf58d583010adbc097295f1f

    SHA512

    bd4afaea6f343f01fc9e6340c2fb61db75e5f96af39cb1ad22191e147f2b7ad03ec8dd91c8ff3282eb30f38dbd8fb82be560195b534ac4cdff0467cb2ddd68d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1525f7d54dceede6c56208a3f32001e9

    SHA1

    b95456a9d3f236e8a7773016cdece31c1d916f31

    SHA256

    da5311fb9aa3a080043d784f3ecd4de7196f6a41ff1f7eae48c11d28f4fdf1d8

    SHA512

    ff507fa73df43b22ea1217bea301e7469c06b329414de88d4fcfca89fca7038a39ac2f306ace68a6e59286a913b073d10c5f0f9f208470409e5b7067fed3ab16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c61eefa8626706e1249f12cefdd9fcfa

    SHA1

    a5944502c1b316d29ae508bc73cef99d7666c174

    SHA256

    53262d3c724490fe035b11304e06c923ff57211f0072d00146fe22da2ca120d5

    SHA512

    7d052ca00fd2e078db63630dcea54de6f7fbed1437322d717e50060dcd6af824570af4fc7cc8f5d2baf37abfa10c29873ea9e6c7cfc8233cd252522a31c84d1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    81757056a73352f4a24ba02640dd927e

    SHA1

    3578098885a17435b62b6d2e5f5461562bb977e3

    SHA256

    1fee9d2424f21c57d2ea7c6cb402c2994dcb11682cab7f508482305d094fc8ed

    SHA512

    e4e866b8b996850db52818260e2becfb4be475376a15debe044c286cff1dbff86ac2871720f9baf2d5b6e1e878af6383cff91e3c57765af019fdadcdb7dc6898

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    165ef9e2eb06ac693dbca3f557f0f1b1

    SHA1

    a366ffb7e28fa0e890f04955740990a43584ee52

    SHA256

    5b57c03059d3697ddea46910d136f3eb17e54ff3fdb3c628f295870a7ba8a232

    SHA512

    c9c718eb1c6416af42c6de85a910f801ed207aab66c960e4cecdddeb2b1945dc452a297c9d267370f6c9bbc8aa331084a65c3e19da4ceee9ea65cf996dcc6f64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b21d5ee1febcaa5c6b66435b6e5f759

    SHA1

    5999b228704a62ac8f9c6250516873c8f74bb17c

    SHA256

    9a4422165d3f3e8bdc28a15bb71de11e70fa939bd09a45e3d36200d4428b7097

    SHA512

    bf275d1c94ee95bbc96a05de692845b9316385a863da9ded8a99be65a24ab14f69c1046f833f1ac0ec72f899d5dfd6477114b3219de0717c2f9eb9c75c132927

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4610ac3befdd68fe5cf920894ab14ba7

    SHA1

    75c59f6eda8f38b71f9c8b1c6f8a184019571f55

    SHA256

    c2b014a91716251a7f6cc5c53388519c2515168f29b2237c26cbb22b43784f22

    SHA512

    8be7a20f774699e8d10448df2066a56284644c259c9e5b89e2d2c1d53ff7c262fa4b3a3e4afcd663ed6cca27e714ef2df765a402812344e5d966d73094a709ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a4bac41e12e0e67ef6ae7943f3519e8b

    SHA1

    c05352ba719120d05c01f0ebba5bcc72435b0fc6

    SHA256

    5ee7d8e9d888377d30d07d6abe2f3e3cdc78d8cb321078deab7c982fd0db39a9

    SHA512

    c3fe01a07319a59f102fb27ce9f3be7f21fbc0c0b2b97a3f2402912f1d69fbfe0dddcb32af33f19add20ea41266438cc05ff0b4537bbbb06f2ecf559e021db96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c7f3d3eab62287fc4dd8cdf3cf99a24b

    SHA1

    230d902f12b5e39ecc6d16edac6f78c54bb42549

    SHA256

    da500cc04c931616e04604658b5dc15fd6d5e6afadc652c41ce3a7aead50368a

    SHA512

    c772ba22e9b41c4a16a483d3ae355e4fd4a14556a6b1c819a13dacd4e7c72d65cfabed0f29ce86b984e7bfc38a26ba3e73be01ddbbf0e1d34465e16ea9f827a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8252d39009fe043cc6c2fa1b9ee9fb88

    SHA1

    4cb21a7a12b832c7c1418489dfb7951090e5b7a0

    SHA256

    a66b949a93c537ba4126046236bb45d7ddd94586e49d5c893ba133fe2a8000b5

    SHA512

    13e94296d61fff1106b30696ee416592e80e11e85487f3ed01cf22e43370344eb8aabcfeba28f319d5768b6fa7c3a2ee1578a479ba83edf81629e6ae6f92a331

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47ae58e1b03d8867c2ebda77d46b9f5c

    SHA1

    66cca8840b7ec01ba9c71a2d5773817571761e47

    SHA256

    bcec00507c7b180d0d9049ad38cfe56fb4af3343088b88cdcbf842e18a970b7a

    SHA512

    75eaa237257ef5ac34e3b0967d889dfdb948a61b97ad57a27a7a4227cce4e1211700775a9cee9e8048458dcf944cc7f5e42d777a1094a7e68d6a9545033c9b89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    344c11ce0cd464cfaa1cca44a3e2cee3

    SHA1

    ea704e52ba9b3b85577a1109950c7b3527ddd1f6

    SHA256

    bc52d083014d62684fcbb5bc61c67e4fa0cc33383d4479c619182e17ff020f7d

    SHA512

    c750e4d8691025b986c07158cc264a20f07929f67ea163efec973b649a716b169446a9d220d7deb64a687b1226395d664ca286301040dd4defb545ab00c6e175

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a681eaa1f781ea177c9a859be85e430e

    SHA1

    0cdb04c0ed4e4e02b438bc2d2045d0a11d95547a

    SHA256

    92ea814dd3e79b94d9af772c40f24eba884df4e6f08c3926558d2f2bf465d147

    SHA512

    3d7d9d8de5815d4965045f60a1c3f8330aef861c194457d97e98cf4b690869e08fb114a8c2fab30fae54be77cdab31e360e10e0fc53e6e2a9204bfd0fb7c057e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    669b6b8be27171251f837c22b0cd0e63

    SHA1

    4c27061825e177a87ba05a86c74ea02c1300da8a

    SHA256

    95cb4d84df36c26dac607237e940693c845716adaad5dc5fa423e85d07dc9705

    SHA512

    b65099505cd0f9bd3d347efebfeff44f007d6f75f59fc9b13056da99a171581a6c1d97de66fc8129123008edf05c4f67afe88f819c0b5e2062ab442e61cfc737

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cec0ffecce1c4044512ad796f670b8fc

    SHA1

    1612d537b5b85fd154c0457198f914ac995a936d

    SHA256

    348662857a071f0141010551db90194effa393c6220ce238995e76d67a555c02

    SHA512

    598fca94b8167ce2ba7edfedc8d0906e9b9764a67130c7552ab0410fadd2bc568d48c17b57ae7114e50d06c46ebc983688c6234a8979c25dba479eaaec7b37b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da81855407759030d0f9fe7c82f3188d

    SHA1

    a0dfa9e8aba5032db6771736f11ccbf81813cac1

    SHA256

    438a412be041540703a3c3e6590e50f65e506dc9a91b374bc300147b701960b6

    SHA512

    b067f51d2e0eaafc6d90d0fdb9e9f84f3201b0b62473ff949ed407677342efc7d9020c3ccd79eb2dd41631c32960991fd2fa267f7f4702c6afbe5eee61383733

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45569caf39c5a04b4e83475603d02414

    SHA1

    aadd2709dd3de87204611ca336a19c50c06f4ba3

    SHA256

    60b5d6b7d7bf2207b272f9b68df543f2a18eb5f29e27335c0b40697fd710f2bf

    SHA512

    78604c39de7e60010297208b286e987d0b186902ce4bbedf27d3ef5b50802ea89721c141d0921cc7c398b8663d97573569630ac34ca8d4b6858ef88ef99ac8ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6549e4bc578aeb5b98bca8bd539cbbed

    SHA1

    f4bc357c4e44b554efa23ad017e81195d1474ca7

    SHA256

    c23be3e61a25571e0f7e7efbffe5eb6473aa2ab76d551efe7b0660ae11ab737e

    SHA512

    1563de5208b70dd8ab506d655a7aa01c0766a7c079d7de00eb92576c3f0d5e1ddd67cebb2da127c04ba1d485a04b73e17d87a7f3a854482fbc090084c9fe0cec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    425d11fc3b194bc744f5142fb6f66809

    SHA1

    b77fb449d6a1535140c4189540239a84fd9bbb05

    SHA256

    852dc135e9072a41d181a2c3d7b6088e83b42f0201424ba12ac959912748eb97

    SHA512

    3f2d9452eb53e54a6a5d3613b39cb829b7bad2df09e5e0cc636179f676ec9af0523880ad2f295a08b719b5eade4e519ee8107e9ef88ac33994271f894384f5c7

  • C:\Users\Admin\AppData\Local\Temp\CabE34F.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE352.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b