Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    18/09/2024, 22:00

General

  • Target

    ea0bda745e4e64d13f6c79559b7aebcd_JaffaCakes118.html

  • Size

    131KB

  • MD5

    ea0bda745e4e64d13f6c79559b7aebcd

  • SHA1

    b1cd9ff1b8fdb4141a3b8d0c4ba3714163c8b0bc

  • SHA256

    ebfbe461afc614cc1bee6ac2cfe1fcc7c5eebe206e42707c5028b4968d4a58e6

  • SHA512

    781ffa945b78766d5d3123d4a576a601a5849014af2ae5e95f68fc3af73e99eaf11979e9db76998678ba628762691e116847d608f3d19b6e59289c31dd8dda3d

  • SSDEEP

    1536:sFMuyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCW:sVyfkMY+BES09JXAnyrZalI+YQ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ea0bda745e4e64d13f6c79559b7aebcd_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2664
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2664 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1404

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc77564c1b9cd0a88bc42dc7424dbf56

    SHA1

    9498c400d37be50a2bcde574f63e799255967694

    SHA256

    0344dab696fd9185d524e590d5bbcf412ccd7406ebf3da91428e1f01d939528d

    SHA512

    0e2a0719ab9cfaa33cbda9ce4b41e66b40c7324c85d2f360e7a119ab00fd40d6ab9acfacdb8552e5d545c7c79397bdd21ce86d3c11a8f87f49fb2168fadb5c98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    30e91e4f63bdf39866e08a141da7d50d

    SHA1

    11e81a3d6f7acd281ba118f897d20562bd45b7e7

    SHA256

    be1c82716e6eb27ffc3df1d93f865cd86eda30aeb6ca5e49a367596d5a2a9065

    SHA512

    3bd896b42f19c28b51e2ad4139345674676c60938ea97f19a957f68c4fb778f664d1e98a83c4fbf36788368e188074cf439499318bf3e36bee40c2e89bc2b71d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a2b0e92d89fb6e55171c80135a1437c

    SHA1

    a3856938b694a9ef478809af01115725728a38dc

    SHA256

    c4851fd3eaa70d447f952b72c700e54729ebb1d3b5b6fb77b4904d9b7311714d

    SHA512

    b24710509c0207711f67486df2aa73bb644ca20ab02d49c294cdbb708758c2dbf428de6bc538c90230815f762aa4e91b61a471b89c11ed578f8de85625452be5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1db3226f14790df8e0380e27812735fb

    SHA1

    510a630c0f14301d3273ab704a4ce779c60979d2

    SHA256

    8aeb6edc7f363383163fb57b84c8f20433cfcf79c7cd15bb1de6508779f9098f

    SHA512

    e9c936526a5aef07cccddcc5e1ca31a0ad0655236eec3aff562bbfaf333b17e438be68e1050bbf897c5f1fec805e1af49e7a4da30762be85e630bc4445da0bec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ae9a76dcc764668d4e10d490b6a8d17

    SHA1

    df8b865fcd21022349fea6d0ec458ed7ffb51f6c

    SHA256

    180868949907e8ce31f80f92fbeb7dd1924c189137b1c29148ec8beb0bc7dc1f

    SHA512

    cfff46c0207193e601bfd26f74bb3975fff2cbbdab9593a094cfa4946a3c507b69aef39ee3f1c948a7af404752c3ec901d94c85e2bc4e260643b2c95ae746959

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc62b65a4be6a4920de1d0be9807135d

    SHA1

    5e3823701d401972649d11f6da4cfa55644747b7

    SHA256

    0f2d3b3025241c9e99f69fa3180ec8edf51e390711c627a55e4472ba962039ad

    SHA512

    04bfef97fbbd6acd5eae0319d33027fd267bd53b4eeeb5fcd81f8bd733ec57a5bd8c141da9eb60e1d90c6ab523d3d7722902a0740d565059210ef8bc99ed8c4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b041f284b33e6ff5d9b3479302bdffc8

    SHA1

    e00e86ff9730e4dc3f573c557fc1a0b818aaa7d7

    SHA256

    c5d78c0d7a72b97dd06afa85a10bc3f3d22e37f9f2d6a3564c7e2b1f6b70719e

    SHA512

    776bbb680d4b4e09a4482c55eb3f2a2fa4af9535935d35acbe8964968cf539d5a728c588e63878f60c6ffa7ba4ae67883e63c60fe7818c34ccb0be616c7a90d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37af3c6377aeb902ba094edf19c4b8ad

    SHA1

    c7ba4095e1101cd9474fe2e965ca2d2ea7ee1085

    SHA256

    e8fab81b59f9bf113347d9267dffa5b0ecaccb95239cf2e87df23c7348cbf6d1

    SHA512

    851055c396e95a8a7aebd39835703f08196652cde8b50cd9e80c99d6c1415c3eeacea0243dde5b1e4d2049828af6c342b6586b85a459ffe766587f65135f4c07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98c05dd9149c6e8c7dd774ce02039fa2

    SHA1

    d9caefd3007f74c7ea97f8de707331bc2778f8d0

    SHA256

    d3841d389686cb27ed7322c91e94158c940748cb53f2db25b93514a05dc1fabd

    SHA512

    d610641c08d725c7f6928134dc6b7eb45cee14c11b24e2ab5fa080fde54c570c45ac8294d7d953c77a5f307b9dcbccb9ba45f00c8df7e07e05c1260650f91575

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5dcf2d0b42320300c0e030085695deee

    SHA1

    ddb62628d4830224d1e9f46bfd2c640bbbf6958c

    SHA256

    668c8c80ce403f763ad47bf81bf8b799589a6e9925b19e77b7587b2fbb0c0ffe

    SHA512

    9ccd48ce59c77cb749d0cb974557d79a01b39223fcc44d06723dd0936267aa3574c75f4b9cf8c51c29e5bff81e6fe665a3fc75030373de3f6d26434e3eccee41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ffd32b2b55d73898aed8be5d6b9be6bf

    SHA1

    dc893097cdb2d318817b68f0195950a9a8b08d18

    SHA256

    661171194c9546dc3f6471c4d537e8b9b5e062b8e5022f2cc446448bd9819ba2

    SHA512

    707c3be7e4ad7e32eaaef1f90615cb71797ef0dc42b6ddfe8162e984f845a3c4fef4933c5aa529f4173f1f419bcd7574d7c9f99c097f6f672b5bfa5c01aafa84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    367ac0a01f9fdfb4441967d962eb52ab

    SHA1

    b4657a76d48e3be1bb7179afd0a6513b3d2451ef

    SHA256

    521b4f79eb608be458cc97197ea1d9468dfd25bfc0c272e3b00ca33473c16fd6

    SHA512

    cbf41cbd32ced096d5ce330ae8c6157ab243ea1bb05e6d330a6dd678fec6de4facb89707ae77171d2a73ad7b63ed2aca519cf252e4370c8f3817a6988093ba91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    138ca8e359fd6392169c45592899151c

    SHA1

    afcfa8e20b3d6cd64bc57cf99f522cc0db66bbb2

    SHA256

    0183de52a25a984befbff6e3ae3178018b823e1fe7555b61def1449149d3e597

    SHA512

    2cef8e6fca0ef13835c18c793e5713f6f766a29bb0c86d112751fd8e6559fc323b9697654b6d55b0bca30e45ee37d8ea823b52ae8cff19fa18c07163f91f4802

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63bfccc457c07231a5cff4a9e8324d36

    SHA1

    d4766ec03a102d2d6438b95964ee3b8c431c8692

    SHA256

    a8094e9ae6c7fccb90b1d58e78efdd79d599413b3f51c0a12fd3bad5f7053406

    SHA512

    051d8a58ea3406fd62b29cb100b37453645aa9d588de44a584e633967d9757a4985bd47378fe3f9a01f34a9a5d685e150c5add155f3bf4069cda81c0d8d13112

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2fcfbd8468b4b5295cb271ebdc51636

    SHA1

    be474b36200989d34ca7e974a532e344c46a3b0b

    SHA256

    a9fb37bf092f04349a419a1b87259c47f6af0eff942c0ede87e21bb74db0ca54

    SHA512

    f96e59cfad98d59f0d5d0f8a64109e73b3fb51ffeacb7bcefc3cb3aa9e088d1ba344c943d1fcb66247872cccc8756c2c25872596a92c48a5f951d1ebf93d730e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43524bf8fe6e2619457dd216777924d9

    SHA1

    5e0a2fd9e804f18ffda80cf6e9c3d2fad3d0b68d

    SHA256

    8914319204d54a79b0f86d6e1c653d12bd1ed4edeef03fb66f97fbd3b7fd0be3

    SHA512

    c61c0bb5d1106be2d84f348b3fee47ba17698d57b0a72ab60ed3f5712b03d7cd16f85431af58df86790ea601d08497564834a2bcaf63de5fe3ebaa1f02398634

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7bbf63e12ca967164a4c9fb4adec421f

    SHA1

    4d92493c7678ecfe7068c2b69d5f3ff31594a9df

    SHA256

    235e6b45ed5e9516bc74c38fe7cdc158c4d1bfe7beb9c03f1036780db26590d4

    SHA512

    ab3c810370543f697bcbd238b6bd8704851e852b42a90395a274a3f23d58245d0fc50800e910254da5cae37eb602709f010d64df8b6bb1078070987258d5e053

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f193475bb3eea99cbd396ea4c886fcfc

    SHA1

    e8ba1372a97e8d8eb17124b0b0bf3399c749bc2a

    SHA256

    39b19f59b914fe363e93710042d5da59028a03ed586d788652c8f418d91abdaf

    SHA512

    12e7b23d4be20bd1e289cc4a35f2c552d269e7be4ffa1aa0998efe507c3a40be4a43dc4baf1a97afd96b7707cf3a499f2cac5899e6f3c3c86bebbb0df8637536

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d012f75e49f0591004c5b32e49052e1

    SHA1

    6f65b2936d5e11ef59784a4393f1de4c0c607d95

    SHA256

    0c5705cbc88182b328387c806ead696040610b580083d68fdb6c03db4c2b7ae0

    SHA512

    4e21637ba15d03a9a34ce68ff4029e682a6f1a9ddf8078abdb4407e5789f536ed9ee0533408bf504eb0ec6f035390dde98921bde64f26f52fbcb447ffbab23a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c6ea2fcc4e97951bf0a71d915346bfc

    SHA1

    7784acc6933361be71c3ea35e13d4cde9e24b69b

    SHA256

    2eb5acc32d2eb28a64bb204adfe381fb54ac7734659550d4210101d5f5c97512

    SHA512

    f3e6a7620c301923ff8db5ce25fe3f45978d8e09ebb858924ab84a57b524ce8185411a720a9b97729830bd097b4cae2e69c890a4fd9d88f1395404b5110092c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a7867e59aa9cc8a95c1f932d9ebf72d

    SHA1

    65089b5dd11d83f65f1914ca1cef55a3cf6e84c5

    SHA256

    ee20055a06c967dbc5cc89c197bd69329d58fc827e61112bfe546ee2b930044c

    SHA512

    c3e698d300097b99c6ea8945bc7f453fa8055377f38ad5282f6d465158d264475c97e006d2848a459933da92b67cc8cb6bde0fa5c4a26b707fa9dacc354b3081

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a9331e19ca789627aa2e11bfd662cb1

    SHA1

    073d939c79c9e79851eca7a20e19bc480649af45

    SHA256

    7638577581018974e66b8e8b347571910ffd865fd57339fdae087a5898d880d7

    SHA512

    20437fc49105f9e3d97ff9ef3cd927d984c3e03ee4629e8536a51a60832a0ea8258e83f95d5653dad70d133f9d3eb97040bc5fcd9d3fbbb6887ff7feedddaefc

  • C:\Users\Admin\AppData\Local\Temp\CabF347.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF3C7.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b