Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2024, 06:05

General

  • Target

    eab9a39d42f26ef51a1f47041b14d008_JaffaCakes118.html

  • Size

    53KB

  • MD5

    eab9a39d42f26ef51a1f47041b14d008

  • SHA1

    bc160eb205c1960ae1879e2671fd241c3d50b6a4

  • SHA256

    165c7ee905ead12be72edc08764a8dae874a31fd50e6a3915a862d742e9e226b

  • SHA512

    a14a5f8d9f9f711eb1cf6ca69c2fe6b0f609dd08b6b28d6a68752792b0fc1e71c51f6555a7068a1e428abc802d6e634c0ae5ee9ad2942117420df5a7762c56f0

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUC5runlYB63Nj+q5VyvR0w2AzTICbbBoK/t9M/dNwIUEDm1:CkgUiIakTqGivi+PyUQrunlYB63Nj+qe

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\eab9a39d42f26ef51a1f47041b14d008_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2388
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2388 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2372

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    318ff6a5392fc9c126fff00bfaf8111d

    SHA1

    7b900c8b7292e7f387d3d1dea749042556136aba

    SHA256

    33aa5110d8edc2fed094aac4f47f6527bc117fdc8c33c1da0b9ca443cb200dfd

    SHA512

    e275dce1988d0820de954d3005dd22fcb5c04aa084bcf77c82b8bf92418b2cb0bb571eeef5d1a6a7aa3d6a8fed92373c78e13ba970af34e588ffd5a153a0d96e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2892f7600329329d353a681f2f30feb2

    SHA1

    ea3851af6d74908ed5335fe3b6ff92515d3dd525

    SHA256

    ade88f34148ad706d478032a82d81143dea3536a77ca6ed22b4b60fc99b844ab

    SHA512

    4841c9fc97ff49acb07bb462e4638888876086f357d80edd28e15739c182f44a93316b13681a6049fbfa2b8ef556225d357103423de5a5f73eb129deccb4bcc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    daed4bb20be4578e0c7dee9f1a93d9db

    SHA1

    e47fc4eac620e6eea050ed88a6190ae2c5cb4c9e

    SHA256

    ecfc9cd01d798630371f962f5518adfa2f7098a6162ab926df2327394bc89ee1

    SHA512

    3099c5542520ec114a42c39ce590a8f52d94ec5dc1abd8badc9c747ba60d9b10ed5f4023ed5de1366368fdb0d03ef053e3cdb7ead083053c6a02487304406716

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    95b1c96df1887fb8a7d0ae6cd92f3ebc

    SHA1

    3bcc983186065c9bbb386e1990975f1440e178cf

    SHA256

    6a19149e6c35958f3850f3b8bbe372757fe1d109498040d80bfca430c78a2522

    SHA512

    f4e0fc0debc911d85e5921f375d9b49148a661bd649185bff7ac442398087f1f6f9b3498bc2ac654043dd5f05f2bfec4aba74d59f35978b779b366f802eecf7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    969220d231d6e531b6ab6003b0a5e79e

    SHA1

    26a76977d42985981211405ccf01b61ff7fe1ec1

    SHA256

    f16829bd3a6248b915cf8589cbe8f538c15404813714baf28810a963ab71512b

    SHA512

    33c834b26b5984b6cd5f39e032ed676225c1fc37f8af065734502136ef48ae538efd209fac75f9ea33b7c403556d2558f736e5971f84410e0b284238452ba055

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a22f2b5385c95ae3b7fa347e92ac172

    SHA1

    795a09b003ab6c60036520f5469a648910c5c1e6

    SHA256

    2affb630ea13fe2113e8cebffb90c0536096a1b7ab6f84d49e3a227f87efe4ef

    SHA512

    0425887f11a725c20966a94fe6aa57ccdd58cd85787e78daf00e85c9039c5816aba623f380f864db6b35efb4370a8939e6de7740e892e99d9408aaa44f4f054e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70c908b489cd93a62f56f1e2595a672d

    SHA1

    df29f5df44b58d1a8b572220664726c8ce8291ef

    SHA256

    b77f8d1fac144e16490bf1231f996d0d02dec55d562a8e8ad0737bdea8b342d3

    SHA512

    3603f3c88328f5ad70321807fb28c2cd0d2c0fb4c8cd6bd22a44f96a662a90c7fd87ee2ad3c779f81d4c973484efd1d9659e7daf94defabb663cca638f808715

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1726d1617c8d38f38142dcdb7cb3fad9

    SHA1

    bb56c403e5c27d1717b7766bcff398d5f5209544

    SHA256

    eee67d2a7d48fee2d05183a050dbcef173ff1ba909ff830597f3a00c29e6bedc

    SHA512

    ba2b97f8775de0f7c4e03471562ab69cf0343e51d3f8d036d2a27b7abae12f0f78bdb37e365f205b75cc3a214977d674cd68a77f49c351e97d2a505a3ec552f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa217bc436664494d43cec1939202b9c

    SHA1

    dfb260cbec16bba37a98e16aa64abd79b0019676

    SHA256

    8a180d1b7264cd99dce4b9ba8080b49636e92ebf8dd7567bd8cee29e346e77ae

    SHA512

    de57921b3770171d0b925285a10ab83fe591bf1f84433a88f12934307b941597344b8130d9609b2496a5e664b5863fd7554ffdb2721ab5df7918a3f34f6cc4a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd6d6168ce0e0065b225731c1b667d08

    SHA1

    783852f43a1ce084345dcd93abbd165a99ea3334

    SHA256

    34f00c69c96b4d9747d4b6dd4173f697cb275f66b143e87cf124446484698771

    SHA512

    ec46fc30c090384e73dfc993ecb8e8cde52bb02f265c52f6beb2dca255bf8ba66bab05f888c8a3aac125f018cffdf19e4f1808bf3df13fbd83e424f01a48dc02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ab2fb8ae1c1df01867b93c35ec1adab

    SHA1

    d3933e4966c140aaafa66896017df8a2436eca62

    SHA256

    d89066686f5f8ea6f4216139878f72078417ea1d6fab9f4e2e4e0c5c9b3b9246

    SHA512

    8868b1f3e0a8a6b0585ea56d442dfd8676e850cd1a53e8f0ad48362b9ba377af53fb72544b0c19592b2fbce5500514e1af08bc2434e3c23e9161c44514279022

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67cfdc1e8fea877597a072f3ccd28360

    SHA1

    5f18bc43835d64e272622dcd356233933a4f9611

    SHA256

    cb35fda82d819807f12e58d5bd9a76064118e7e3afb232bc7ff598f528216365

    SHA512

    209df0285670b79810ddd1694571aa16cea23860eb4b3a38411477a444c71148c5ef8fc2956de58013f23cc0561e848ed50efffd6f821d434f557a21b4cd7961

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8afef3ff3162740badded28446859024

    SHA1

    678c0c18cf954578e3af031f86334a476366688e

    SHA256

    730ae61ab22fb6729ca8059e014c6d039ab2cd62c31120b07ef4e9a27737ad41

    SHA512

    01f754c19168cb8503a31dde12b45a3d111507b433e115faa1e57271808ca98a5f2a7d2240245b35392aef3da4cf301381e3693cbd2906a1d67d9426a5193b2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a2a01fd174cb88503552d7d241d4a7b

    SHA1

    7d91be5c768b7ef28072517778512b864ac311ac

    SHA256

    5e252820bac7c796dd3cc5aac558f165bedec49f53b7350440ac9fffa04079e2

    SHA512

    c083b46910b70d6ab8dcb6b4b29fc8df71e61d29de73aaeb5dbd37863af44e1ee4d84433dbd0fae8cffd12d326fb3fd963033c7c889239b87d4589af5fe214da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0faa3f1b5cc88428a23d9a9f59516729

    SHA1

    f927abc7ec2f28733f629f2658a45820f12b3a1f

    SHA256

    e97801a5b3975c1d24a23749d328224f51d580fd30f3d42d7fc51647afdf1c59

    SHA512

    6485e823c4a0cc33b0aac4bffdd4d0fd99ca05ccfdaa95a3b469f84ce2efde3b1b6968c5d974a2d507beec7b6e582ad815d0cbbae9db1cd1b453f5ccfe471216

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5c88ad738dff1ccc86fbd468d69446da

    SHA1

    a2ed1ead0d798569b7b4a9b1de982493746bc18b

    SHA256

    eedc323c7e9795108ef2e74ce4a243b5bf00141c6a14028cd4612945443e1cf1

    SHA512

    a5938e0dab8df4fe5073685387750b0b3827c4e63d2288f20d660a6065f0adc870b771b61ad4e3b6a5ca0a78f58591b711122ab2fd20ebee744be96661065643

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    13b70a86184276849de53db90577eac9

    SHA1

    191e6a563b50781abdcb29b30fe409c609474d7e

    SHA256

    4a2e7595df575a9c7cf05544b1e41fc1151756380ac22f5a91db94e473a9fa9c

    SHA512

    60270f52ffd232e9de4d11f36251a5d94e517dc9958ca98b44f5a72ddcc802ce9336842c217fb662912faaaa0bc15cdb9c9b6c28448a664f67288305e324bb36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0591c23d5434bc4cf0216dd56d960ab4

    SHA1

    23163221b0a74fe4ff19ea4985248c5ba52a1f1a

    SHA256

    681df52ab9cca28a697e21d812b5038b03ad80ef700b9854d0bfcd4bf7153b52

    SHA512

    5a93f4cfcc9662ffa13ab98fd0d05e3a2428777cd039b571d518c47067464140f3c42ad8db23a00efdbee18290e59e30ce9f8c0226ba651cd7778e7db36b23f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0648b59c5396145b39230cd3c9c4855b

    SHA1

    48a691f07ffbc8bd517b73ec1b6eef22b2aa1069

    SHA256

    3f6adb78eb37f167face8c6818b98c662ab27db9635b796160af7b564695468a

    SHA512

    91ed928987a0df28c424e5f5b410ec51550904626ab50b64bf6b2192f27a8d468fe0063e912f669db39cc2cbeb06eeffbc2234491538e2a5c7b497f38a173df2

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\84EXSCRK\style[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\CabF579.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF618.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b