Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2024, 01:32

General

  • Target

    ea5892de6a42dd451b2c145e645e8f9d_JaffaCakes118.html

  • Size

    3KB

  • MD5

    ea5892de6a42dd451b2c145e645e8f9d

  • SHA1

    4334560a7b0a75373b1c080e5e20f6acd0b47bf3

  • SHA256

    8b96e33810f705cac02e2bcdeddad030ee6829cccdc0686eeac8e46a63969570

  • SHA512

    4f5d42947e81311e0f9bec891f8ae7bd5d5d6b54a64cf800f4b845eb0b8172c28253e8a9fa870870240cb45f9cca24aef92a63149c0594520e48d1fe62604127

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ea5892de6a42dd451b2c145e645e8f9d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1728
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1728 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2148

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6739ff20c1f2ea0191e63a41d20c3d5e

    SHA1

    059aeee18efe33652cc56f1b848790f390104392

    SHA256

    2c6cb1caab3ccd2ea24aef2e61b78815fdaabc1c716247a825fe5a1f1ca986b9

    SHA512

    0ba9e5e2085d053c528e0ce7bfe597028a4fa0f736c5bb0f9d98e1021038ecc72d8779126b65d543a3bbce0724da15424f9269ef5b89f277348055e32a771ec2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b3ee0f5fcc9d8bcc6cc97853b93fe80

    SHA1

    43969ae82fa2be86f36fc6327c388248c2d0092a

    SHA256

    b95010bf6f93831c1e28be7325f2a7c03a9c77eddc901f30e7e20ee718072974

    SHA512

    92dd4947b736fd90c360d5a9fd8efeaf71f6b05d8547e4c918a391e3b7eeb8a95256bcb92ef88e278ca7595fd1ae6bcaa2474e1ddddc381fc264b81354c812af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    672e26f02d2decb9f7a556ef90601059

    SHA1

    8d4eb93675d7ee0f5e5895c939d6cf0041f0c298

    SHA256

    288586be96f8e21af486835ad3a145604e38a0de95694e40475a9f91a33203ec

    SHA512

    fecc79e06c36cc17ff0f26b91654978d24808008ee90f7a32457d35eec840d28846b6bf9488e90e7ee108fde14eb455af931d9ec8014110442de6c7799118edf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ce41fd22285da2ffa8c12adb465d9f3

    SHA1

    55d242771913fcb4899c79a6198ae480c485a0e7

    SHA256

    812795d9de887fe51f2b83b639a9bb4470c21a70f5fae05274dad184cd112a60

    SHA512

    1bc52ad834d214b84054c9795cd4b13c169bbb4daf8d5bcdf528839448d29a8cde3473e26d3f54e042d6a85036f29be0e8e4f2a01239b9107a5fbed067657a96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c0078256957e26e83c116c30df9b78d

    SHA1

    c3e726bf62baabf13f9f3886850606cd3c28c591

    SHA256

    33f2a8ea928a6cec88323858858e6ce98bd26af57f3261b3be38d9c4133a267f

    SHA512

    b03278fbd3035ae76780e8f95bb20356dfa0757e5b6b74f6a3bf45c546d969f86db3ffb2159b8874307b029c78bfd9d2feb8c68936f3901cf3669cbc8051f319

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc19e4ed927b94ff77a5330676e51e17

    SHA1

    ffda26b3ac7508ba312ca4d08fc82057bb26a798

    SHA256

    ade4270fa66c7d40e832a9b70244c0a88cd7b87103b4df8e37f9b1b902b5c2df

    SHA512

    f9b7231a047daf2e6d93b48e70d422160a7c4b0ffd268f0cf47adccff079d85fa75ff42736412112cc28f514f166e6147104b058db99154414a8aeece07635d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    77928f0beb330790874b5b1354e3a2a0

    SHA1

    9740acccb1d4486b1f03a2a967d516c7e46733ab

    SHA256

    7efd12c9355a7a03f5e464f2f692e9390464b3a376a4ab81a435aaa6f1890397

    SHA512

    4a3135842d5cd653b889fe90c0429a2defc99d74e7841a8723b3549fdf3d849d399b7a292bbf24bb30ab31ba1d1bfe610f72955687941f26cd6ba5ddcef61762

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    337c28b907fd2bcc156db133536275c7

    SHA1

    80707e038b0bdba29dcc31623fea52fa28663412

    SHA256

    4473dc01de639386c2795591d16520ed09136b883e62dc752f9304601d64ed53

    SHA512

    e00fe18a1b7cbf80c52abd7f7130110f8bb7a58c950c2e02ea96d6e69445aa5a6955e7436fcb0ad76102327fccd1ad3d13d6304926ffe1783517d9c86e7772d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c78fc6ee9ef55ae14973536f3c84adc2

    SHA1

    ec3d701681ee3c7d6d1e8bfd728c8529884c470a

    SHA256

    8965c412a919c9ad2fe4b8e84e0b5be6969169d336d176eff0ac209147c6977c

    SHA512

    55de875c39a0d196527585c041a486f11e5bfff1615cb6d5eef5dfa10fee55f2149185dc3ca5beb0ccb173f533328ae71286d5fa0a78d5b14abca23e8ae87758

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba455baed0d65258ccf75cba6f3cb8d7

    SHA1

    75243ca18bc62ece8270c50eddcc78534678aca8

    SHA256

    fb0fe40d66bdb67481c270a071370d77fb943dadc417a39facc7ae9cee1fa3d8

    SHA512

    480445422046ef075f1084dea81465e282c96694b060bf754a499f537079bdf2117e9ebefac8b9a9989d7d7ff09451b6f0cc2b92ea36488c483b3f87d13fc57d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e782100676ffc5a39ae3bc3d7c26ab0

    SHA1

    a98de835a814280b1dadd99214dfbfd166031668

    SHA256

    cac8947a36dfa45ece7f64b78ce810005b446164481d1d40eb2eafc6b41a3800

    SHA512

    fc3a1e735642e9a2d7fbdf6d7b389d7880621c8676c9b5ae30d622748984a9baf990f5e71a1df904c9053205a96177df8cff61ca393088047d372b01c414ccbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd68d2e1fb7a2abb459f9ff79763afb2

    SHA1

    6b53c94df8fd09c622e63a72e205ea52c9304961

    SHA256

    3479647e3230391590f1edbcced206626ecfd5270cdc07d4318c3665386b6b36

    SHA512

    8c0f0839a7b58e98bd99658e2288d8798e0b02fe41d9eeb9af2946df94a84b4421c3c19f6bc59e788d168bbc78fd1bc8315d7f4b06262113e12b58cdc98ebaa2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a45b34febbdcc46eb2f631d23e17417

    SHA1

    6436b4ca254392c1d58c97de493166a2f510a2b5

    SHA256

    1c5730715e0de31c32ac888b3f2a6474f31dc06fdbbbf2f8bc93938f11a60a4a

    SHA512

    d1ad38f95f4c27d8bf372d7a29391cc130d8d5184be5e6a1ec10fa874c02a933950ef1867296d2cc439a86d6b77af5f7fa3b4baec7bcedd4f1f3d3537e80c744

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    90c737689066c3356a9e7edf02cd2c53

    SHA1

    e04004cc045cb680912b9be330b0d651412eb10a

    SHA256

    6d2f040e7395b2d6cb4687aef83394253363df44e5374a79187a71ad44099a88

    SHA512

    5fe3a2773d3823e24df2e1aa8778bc2288cfb1e96bcd2a9d71fb09caeaba530793174f1aeead6d634b4bbad0fcd997947c5b107ee02a859475874c9363d81844

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    82357ce2905a5d68cdf9b65ef9c810ac

    SHA1

    16681b5d4393547216576e6575449354d58ea047

    SHA256

    5c5d6f46fb4d702c30933dda8e92fa89211d9862a4519844f1775e4269d9a9e0

    SHA512

    0b79de712e13b8daf9779c72827ad0876e24a1ff6c3d948473009810c7b5fb66d3ecf5e84b0944448fedad1c028f9498b2c3225c8f10f196ade210a3cea24572

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0088e551f35d87678810abbed8b0ae1c

    SHA1

    ddc8e10fddf988e634e26f2f5e62f11743bf6b23

    SHA256

    2e495ea970aa97dc8f15501dfae1b6affa5a91b97d90a8624ec0f01e7ac44787

    SHA512

    a81ef3016143b4c1274e2bc3836e22be31e74302027805ad4f380b39f64411f86f16c0305194b8f4f9837c3ba4c9ee3c9080ca5c16d7d21db8b520fdfa789445

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f3192a8333e6b15de906699e037db063

    SHA1

    39729d45063739a0d175576a01398b32245cae6e

    SHA256

    43a5825fd127c054c60e240745653e2ef4bf7c32b8f021c0c7feaea33cf9d123

    SHA512

    5265466db1b2f75ca443929bb41e25b783ea8bb3455375ba46a1cdc3934b9bb76ee87555de4f21e346a04cd6ee29acbf732b904b8ee164d6f37572efcfb969bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dae85186052a12db528f4b62e479d1be

    SHA1

    cecfff03a47c9bc8dc60ea19938629a2d4a5776d

    SHA256

    f5f73448913e9812532316bc5449b80921409568b4683e41c415ec02166862ed

    SHA512

    0304885523c33bce285f1ce8dc4cce584a236b178e9b8378b9f400ed0f0fa9f2c10dc6eccef57c23cb1d4c2dc0b6f0a1b37b2b4f9b4411e9b4d7b638a4862eb7

  • C:\Users\Admin\AppData\Local\Temp\CabD818.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD8C8.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b