Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    18/09/2024, 21:36

General

  • Target

    ea035fd00a24b0dc265965668a9ecf70_JaffaCakes118.html

  • Size

    139KB

  • MD5

    ea035fd00a24b0dc265965668a9ecf70

  • SHA1

    5f4d793cef47f9bfd186282e3197c2560508c201

  • SHA256

    e98f7b1ef956f58bae722f259d88d207209801e5d3d784fb07d222a2ffaa5166

  • SHA512

    ff86f9ee7dfb15635b23b6215fbf696dc9a1f90331e5019851426bdb3f5dd5513a16b13b57b76f3e50f31a4cd0bd0d244c507b613bde1eb4aab7f1f57eca2d9e

  • SSDEEP

    1536:S0iva1lExCil0yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJruH:S0iK5yfkMY+BES09JXAnyrZalI+YQ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ea035fd00a24b0dc265965668a9ecf70_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3024
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3024 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2736

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ebe15837dc24341921e8bba62f2336c

    SHA1

    6271a8eb83f6c407929791bc3fd0286498e18a98

    SHA256

    1b54e0c2e9ffe21dbc43622fddf5b97fb97ac766585c20a85239a67cf877461f

    SHA512

    7e1dd5621209acf0ccb7fd9879e848c5af6e157b87972e3af15c84827d4470b5bd7c2f89eb49f13543ad4ad7d3351603acbf4a9f1713c8decbf7340952859a48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bfde61104acfac3bb55ca59db96b9eb9

    SHA1

    864363182f1a56b412a56595279081ba9c300a29

    SHA256

    dc11186101de290577711ce0034073585ffc3b2ff137b480579a1955af37f3e1

    SHA512

    115bbfea7e5b5763921d362fcce2ca699371ad7519887f87bee731d6bfdadd0afef0ffd3cd09d67b9972c0c9828096ad27e4dfefacd784d1e39e9ab6e3750633

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1601a1cd1db0d53e661f4777e14c7b91

    SHA1

    43c1526aa6d7bc98bcf03dbbd29e640ea0e12640

    SHA256

    fed3966afe078ac762918c9b16cf8d016c5f990202971d120ed1622cc93c6618

    SHA512

    cd44d233aad733b0cc55ec72b5c9a72dd55bbaa5a38f98546582e49f85ea3d1b06ce735dbe5c3f13e72ebdaab5016216f352a1a7408afdef89c771eb0415d4d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be86b9b87ef5f6836fc67f9fd0498c37

    SHA1

    301483ba12b90b01d476dfb2330004e3d384fc19

    SHA256

    5949ee7abfa284364df46b7f18f0a442979ffbf468362e789a67f8ed0892b07f

    SHA512

    9de777550130a3cbe61b13c16b8caf48bea5a2564e41f9e47ce3550dbbd1ac874afe3aa011f6f3dfe6cee08015fc08249362cfd3d0dc272e8bb617bb81884d05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a08843961b6c925564558ed60b02d4ee

    SHA1

    9c482f86d3be736156939c9a77e83cfb85afff90

    SHA256

    1069509dcf44c0deda0479e894281af6626fc0aced9f115e2f622a7b24c3c86c

    SHA512

    3add34506e4e6d28ee6f4f2380bc177812a0d9be15a0da94dcdd97ab47030f3dce21c4335aeaf1d9ea98e6434ffff0b4ea5418fb5d9bd26b75db2e6c7e6081fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4bfec2fa202959515eecb92d83ffd4a

    SHA1

    7ed0608928df3b4feee55ddd5c24a7de71c45e44

    SHA256

    2a855b71cab82167fbd6352a15d14ce69f438b0eff81c2e2e37c3284fe0f15cd

    SHA512

    b9a163038419a9fa2859fa98df15c989ca19eb1e1754d33b331c9760a70ddfc3263bb6709a45fb06d8c5609d754f4efb2de099578ad35e7d929c743956e75cc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5efa000a355258f5eee0c768eb5f852

    SHA1

    33907c366f034bea6be5b1e4c421525f938b02c5

    SHA256

    dc28acc9024c5c81a6e2ed3fcc169a10ff11869b65c4a9d0501b256403a19477

    SHA512

    fdaf05ffd0b1f2af3719d08b7282cc9d37a5d6dd71e1ba15fd8206b079a985055ee3505c781e5e49c2373a2e160589da47ff7226a9a5091aa1505a89ab4bc1cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    224474b81653bc25cbdd54d16479c35d

    SHA1

    374fafc561ca5817b4c03f61b7e298c8adbefdc9

    SHA256

    c19069d2f1367d680f7abcd7c1e5e6670ed569942cf1e571f6d7c0164e49d713

    SHA512

    65829a79b78545917eac2aa87e05a816ed6e988a51b2ab071a10b3b81caebf5f656731924008f09a08034bcbfd700a9df901b2d21f0c39e0cbc7ce8e21bb054c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3819f7d85f73a5a9fb1b254154e5d35

    SHA1

    ef608d19430b814fee8837da0627fd4c31a3bcd8

    SHA256

    236fd4e3d5ac24fb6ae5e025b2f5c95371b2d69353bdd5d3d57ae29b586abd5b

    SHA512

    d12f41851b22967862456cd0c8f53cabfad89879ff2dd6dedf1b5e8b0fc6a42699e843fa78c509c98789111fdf6fd127184f74da8e18f2b589498b1ccdf3254c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ad46dca336ec419565f4f1e4a94d48d

    SHA1

    ac7b6eb9f5a4f3547f5fcb72753300a07b6e42a6

    SHA256

    6b2c3871b4d23ca0ebae9086ce2bdb73b89dae92b54854b5cfb5369948ec557d

    SHA512

    0a9b7974c6af491c2c14573c6b3210d243a457dd30a1fe1e26220ac3cf86dfb9ce42cd205a71147f5fd2c2e08e55c27b9757aee6ee29da567e54a2279cdf4c25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de0826449716780c6a4f145d6b4ec490

    SHA1

    4cf450b967bc3d032f62b596d96cddddda67de5a

    SHA256

    cdd673a885b665ac9799d440d11ed2ba2e9b9010ce704f85cf1509eb93970c33

    SHA512

    239412458fe15b284172a7cfaa533d9ac672c23a8c38bca9aa160cde8d8397e3d6df7747909a8b6eb715df889ee64da8082319e05a4b5ddfb325a2a1690bbc63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bb307ab1df3a6f7a390d552cb4a1e777

    SHA1

    947fc0e1efa7b7b75121ee7f7b33f33d662ac06d

    SHA256

    0c1b1e941f4612c228e768d270c86675008e0b17d9107466554d5866793d2797

    SHA512

    e156f42f606c1cc3c76e621a1fe45fe1d2c7d5b2906f9894e41b89abb59906d75d566a9fcb2f1cb3ba0dd2804eecc24c4ad88fc3c4f2b62f3c47d9e81e21a34c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    057c8254443385732b71fdcde1577be3

    SHA1

    4d837ac31b757dc730989ce447064aa659bc1fa5

    SHA256

    df3e179f9d49c863e93d474af9318c02830e3cafe3511b2b54af710d063467a6

    SHA512

    f776169f679df37526ff872911a98ddf8a6e6bfaaf835ce85c3276eefdb5b81809e23dc31e40aff1a80f556eee18477d164c787bbf45820ceb607836ef96f883

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7108aa130ea7abcbd198d449e34b5aa8

    SHA1

    f0e87d0a29ab746310bc77ce13c0a8cc89acd930

    SHA256

    3f8915f3e75e3a1e9d9205227152cc76dc6b5996329cb5767ba232f85c51b7de

    SHA512

    14c93d18eddfb841ff43b08876983afd536f79b939904d7ee26416a543605defb815bd4ac64a70663163d298352f3ab410f67febcbe30d98059d8910376f183c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0b8791db41cc8f8d596020f51cf6926

    SHA1

    42306f177b1554e268e5c69b227ba38b7624b164

    SHA256

    00a7e2a6e975884744a34e5a12d58390b0221872682bafdd95cd234023191428

    SHA512

    eafc51e4a90da52c0b003a848a3114bf2e06f15d9f2ae74781062b3d30e03ff76c6f612c4e8247df056b976f675e0241f60dcf3321b3890b4881e666d296bc97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b93130d328167a60a88ea2f0c571dbcc

    SHA1

    740ab9931f39395c39d2121500d369fefc5d525c

    SHA256

    d224c13d5236a0b57219b3f7c949fc66ef2f40ec4bdab481ff9f10565d6daa82

    SHA512

    4a25e251a3cb792e98852bd1d035375467c2e2be654be6ee1d4d6a4ec26a4fe85f485a7147a0d73c04a414627998d2e37e5c9e70f8b328854b4a0815c0ec5533

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b2c05809d6cdfa0e0ddcebc8f9f3134

    SHA1

    47d8380ea51972fb5eabfefe4771fbaee7764268

    SHA256

    5db6cd2f550a3ea073cc1dade0adc5de71d5334493efa3ca79bd1e7e51dd196b

    SHA512

    c5d4e7575d6e8659b98d713f06382d288a351572a046a437783c1637ba9c77d4e715add43ab6b942b7bc1de10c732d08dbef64e842eb7484c9d84d722bdba14c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8fb2481ef0a90df046ee629bc4c89bf6

    SHA1

    5c73aa173588938b57678cea244fb664f78a78ab

    SHA256

    6da0c8249d1f69332ec160008b915777596be221431b8a8e0d8f0b8e71101aa2

    SHA512

    5a07f111ca06afc52b3b2371f2a46c838d2c81ef4f55b11a1f60d14e64fce50acc8e199643f4c72feb5835ae7dad7dea8af0cb02d8f273caf6ce98b34ab50d07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    48a70f3415f8ad3975bf26202dd20a02

    SHA1

    75fefcff9e31cc118a8db46b8968b8096c3d2a15

    SHA256

    6fee19f74d905bdb00a02f4d20f3cbecbc524ca778cae2e9844f765a6fc3f6b2

    SHA512

    c3f145edfb16f15f8b8b1b3c83be72b6faa5eef5719191a87bb5f3bca11ce5ad29aaaafe55cc4397c2484b1510d840d286b5a57a9744912cf76d68f7c5a635f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f367ff5b17412f1c455506e761bb36ac

    SHA1

    6c9b31ba62cbf593b8eda068897844f1b3b40036

    SHA256

    498cd61eaafb9953c7252a7649127af7248425cb995e4b7915238c533ef635d1

    SHA512

    d5d1f5bc74431bc0a25983abdf26277880fa79d9b08cafcb8d65a8f979af5f083755ae2ea273edfc0eca364b00c8eb0e62fe15634556df8030269e5178140cf0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    514db037a8892b5e4d9139dec59abbe4

    SHA1

    d62f2bbc2b63593e033509cd94c01dba51500a67

    SHA256

    69249cf670181402a8803e9339a9a6d543583137bfacb0e1a2a4b0b5cae96155

    SHA512

    16498728923aabef0d6c56167552add5b68389943d6ae4657aadc322b00de9b19011b6424648da8089bc3d428bcb0536bbee0fae440afd0ca8de9b66069b41b5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S8GI6B9B\domain_profile[1].htm

    Filesize

    6KB

    MD5

    f3a443fed233fb4d745726c45a6c4e74

    SHA1

    e3fc0dfd4de049d4fab58a9ebfbad21c6c843e45

    SHA256

    894f99c65b3383a0155dd01d3af97d753ee3cfd6f1773ecd5f530d8f9a7ac0be

    SHA512

    047f5ccecf6b7a04ef90b88c21631e3f8398f1ddf812fff05c36ebcf44154349829e9c8ef4a62a30b4e765d94a64eca679e0252fe8c2f16384e415dda7102558

  • C:\Users\Admin\AppData\Local\Temp\CabFB7E.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarFB81.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b