Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2024, 04:36

General

  • Target

    ea98b4e4dc9dfc367c7b2d2c036f2265_JaffaCakes118.html

  • Size

    3KB

  • MD5

    ea98b4e4dc9dfc367c7b2d2c036f2265

  • SHA1

    75d319d98bec920fa98efa2659062e69d3b076e2

  • SHA256

    0c39f5aa7e793dda200bfca361890399bf684f349ec0c247a55e9a50697373aa

  • SHA512

    e1514493df94079206890b42fc4fc79bb20342cc824cb732cbe504969a76d4082e7756e4ab9ec40db7ece333f2d0a3b96f7a1b39608a70063bd9b1c041a0fa01

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ea98b4e4dc9dfc367c7b2d2c036f2265_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2512
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2512 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2628

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b77d42d0f2f776f89374a925d2571ef

    SHA1

    cfcf26e4f554071e2f0d9d22e3b96aac76a7dd8b

    SHA256

    4476947b5fd53ba1695ddce3a581bd1aa7d3b1c35879cb50a2af60b04b7bf009

    SHA512

    16f93d46168d191d6638fc649d9c491edc33aa4dd7e859a35b8928ffd9c55e755a003ef0e3c05884c83028a9cab681b395fb25dc60d8a52b89e9da2bb495342d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2d9d644561f2659f494e861726b62c05

    SHA1

    77960c2dcc5fbc26083b509bf3d64e125cb97a34

    SHA256

    588a21eb9107511a173a9ee60b01cdcd5c53a0cf8c349b3996f2dab21f33c393

    SHA512

    d6eb5c369448255188e8410cb6b98062f43cc727ac67723a0e56e8d13c45c521cd606d3c5e7d3575bd593e9ed8d910478b064991b271b3843c794499debda24c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f4ab8ceebb89cbae36bb2ad89083d4cb

    SHA1

    142860ab005ebcf7b1b627363f633ba565528c0d

    SHA256

    27779c4efff13a1679086c52f3386ecf61ce04a1b7e86703c9c6454afd0bd4d4

    SHA512

    63c76769bca577048601f3838a9f2af2e7024fb8f881673d6a9db0644bf61defd8cd81bfe53089d7bcc759236a7ab03975193a8226efaec53cff6184d2513428

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    40f98ac72fccf71554bb5723af1222f1

    SHA1

    51c4c0ffa9c6f78773d1727b41686442b10fee3f

    SHA256

    5881d900bd52ee844d2caecc5883f60a97472d523f7f26ed6978254ee08647ba

    SHA512

    b16dfdc2346627120205ce18008d5661d03df9c46b8a92c239d841151745f15ae4e938f0bbef5e130348839600c45ecca010257cc0f04e35ad3375c0616c7b26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    870f7a9735f9a3cd8b02e1cff50e20ad

    SHA1

    b116c7c0fc4c0118a3baa5b132d879e70243c929

    SHA256

    4f6a763a3b9d7fdbc2872b11456c5a58aad7c32b843da99dc2d41153875c1453

    SHA512

    255b14d9fecd15701257610bce1a4a534cb4cefc0d35ee4b87143b46ec85ec6220a4829be6c8ddc6d9f9810a93ac733b9cd33dc9ff974ba22ef3bea440d1244f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9d872203ba1a4a04a8d368bcf3d525a2

    SHA1

    1f78b3fc7f89306fccb8cd81de1d4cf136a6223e

    SHA256

    e263589bda526a8a06e6ba9f68ef6abd47d3cc519457d4e9b61a89e566233e7e

    SHA512

    93708e56cb7850bf736be5d13d9d59aa30986da669a6af5ecc5cd3c8471d3ad7ac642fb7baff78bd0e87ad8848632d1e11b03255172cfaded03bef08571e45af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7acdba4104d2b01bc8c1568fb85d813a

    SHA1

    34e6de171005a5359a80af69d84d34635232b6b7

    SHA256

    5c08feabc85269804d54a607c27cf98390be4d1cc8a4187b12a3bc02f01d70c8

    SHA512

    070dc07859e7ff4b4fecb47156f6f49d58c3104b81f185f3a3e108547fd0df9f07bdf99d5e7ad6ab4c8035f85c5299bbbc4481dd001b99d94cd137384db9fa0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd9c0c9d2b246cb96c82a392340eeed5

    SHA1

    ce55fd67525633b30d0541ad3859788e73b84740

    SHA256

    dc96cd31ccd923fb825ec3dfd699bb16b1ef7ae89894e7200bb5b03bec8f27bb

    SHA512

    2e0764134f262d4bbf79bc0d1a839de9142cc518fc535df0231329f0397e3ce1a598af2c4843e36320115c939d7e279b16d8f99699dbbd17c94e9cefd5510996

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c031bae14eb620ef3417afa909f2da2

    SHA1

    b2bd09e0b89e2baadf7f1e857d1d49cf1f0fa9b9

    SHA256

    62bc94a1fd895444a5a110b1bec991ccfbd58b4980c0bb63e0756ded29947d19

    SHA512

    2745cec2689b8b2748d57c60d20a33441b65161aaa898a5086f651406a8a3a7477b091ffbb80eee75c57726fb643dbe70e259dd7572d59fca3732ff56662a070

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    281721498291135c6830eda7ef072100

    SHA1

    2b4d8f2307356e709507a0fba278549643410867

    SHA256

    96a77dcdf7644d4a74858f12bc67d15eb4be64f9329efc29a96c35e7fbb24a41

    SHA512

    59be680df1024379877d5d7f855d266a5a9336f7708ec0708d6ba3414eea72fe1d2610bec39dd59e4f62252171e8cfab90aee4d2ab9c5a0bf82156a2aeb053ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bfb0440c4316fb0dd5360f92615c4d7a

    SHA1

    6d96bed5ca4b77f51afc73e8120538df28188303

    SHA256

    19c96f85af1d35e283635b8f89d12f7b208b2ae185872ec92dcb618c1368a6f4

    SHA512

    e25f046282b67c95178d98ec2a442d7fd9338a0226e6765dc0d130244caa52bc41caf13907dbbeb795e2a05abaf21b3b8546347afa4352af167acfb15d194089

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6059a4c6259f6b1790ba0c6c88ee1420

    SHA1

    2fec37d6959897ec49e72c5902fa4ed81d4906f5

    SHA256

    7d1d597e848622a8a8ace596df04c877e17b9ed0f0c1e036120b8ebbdd3b294f

    SHA512

    5aad8d773c38f6b517edf77eeaf53db02b6324b15b9c57ba75e8ce0a30ed55ad32c352e37621f2f8e7a271848c650f98513ef3d759f06bb7c631ff733246fff9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4f578e33103def878adbaac3b6969c81

    SHA1

    fc0614a892f471fd4c8b623fef26a8fd375044fc

    SHA256

    303c52b8a38bcbddc5e97ee2fa854003218685456ee57aefb248b4e1dfe545c3

    SHA512

    038923513e69480fc204fcaee254d7e48e8ece2e4654fcc3687cd44160586f66409a57dc5843eefb9391e734eaa85ae4df092b99f53093b4e2ae94b98370666d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    59526babac573857f8eabf15a62140fd

    SHA1

    74ded37818d6e577a5e64221ebc471d2153da9e3

    SHA256

    a1c4541eea765c6fda2a8bb6cc67f9f87dbd3145f50055a4523f12d172f385e4

    SHA512

    3bfde130fec2c71735cfa9643b0830afbaa0b3e550b8db8c936b8d993a9b96a7325b365e65349007fbfe7dd6128b546fc55d100bfa3e492412a406c631ff35d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7e9ebd1b2d542f0af57218395d791e3

    SHA1

    2e162fc981af5e5d0535f8c21dedcbde578f9f74

    SHA256

    f1439950a2a7e44eea43b9cf8f027cb72ca15c31048bae77369a6e63d584081a

    SHA512

    bd048332afb0bdb514c036fc342a1daa6936ae144307268b6c67f73355636112ca11641d97fe95e4bf4e75edac84f9808a59b6f28aa2bbf58cbdcfc4e2089e9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a273e4b9c27c0abc9e1be29a595cb85e

    SHA1

    59f7a511d1d7fbf423f9fd59a5c632c307626f1a

    SHA256

    e273e838f035f5f033599edfc47e8d167f2fdc76a0f156dd65211121f8b1ce4b

    SHA512

    fcff83cecaf39c65e4e587e2a922fb989b80871b133b7332b642a1fd5b86934c9514e100a9dc69b0fc94f5c6d3c07f8e4e8549d8fb09565d81fddb5f166eab72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce860d789f726a3e3ba4bb09158ca5d1

    SHA1

    0b3fe3cd355911685aecdb791490f2bf0cc3c35e

    SHA256

    6780402bce3fed46a64f5c1452d0ebe602800ad32a22effe0882a3b7cc074ff2

    SHA512

    f7dd625740f99a7a49fbaeb95d0be374c0e785e6e97323363f2287757bc820567ad1fa3f09c5b13feb545334bfb3d2aa43ef54316275029511b6fc8a1f5d1a6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb3dffbb7aa2309d6a4066ea672d6ddc

    SHA1

    fd945deb6ce0e8f6372a037885981cbd3ca998d5

    SHA256

    3aee7c91be9206341480b4eb50a4b1acc56210db77bd9732192acaeb1946ba1b

    SHA512

    e672b3f08bba7e9603fea8f7ce552a0f8995bbc808f0d7e4e5fe2c9a1879d39dcad95e43dcbef13ce9804c4ab1cec8cff9f7bf02ca0f79c730431edf17ebe72a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9990b71009e08f59030930662a93acf5

    SHA1

    6b03f42e04bc75c73c58c48e40c2fec0ff851fad

    SHA256

    141e16d764702f9a6382283ed68de31ca998c32d97ceb67f95e8525590dd039e

    SHA512

    158a8e39e49c2820adb2d6ec66fc1a5afe0ca1069f06936d5c080607bca35b78e5074edfbde203ab02da7faa4a336f907667c103becea8ff1c0e61f9d1862500

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b403b7d5191cd17e5f5ee5c426370a1

    SHA1

    4e3f85dbda5f63800822014c709af0c921842084

    SHA256

    f03b4ed870688b207ee46d2a2d792cf4582bed4c30d16e30b06d8ea3d8e36de8

    SHA512

    2dcce6f771c35dba1c1121e1f994c651f316c868d00a1a12c85402447beeb3d9a8ec37415754ca5c59386dd62a47df38851bf3a55f2569cfe29da723a2e3962b

  • C:\Users\Admin\AppData\Local\Temp\Cab4B5.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar566.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b