Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2024, 14:51

General

  • Target

    eb90f2fbce537226d29b271161b06fd0_JaffaCakes118.html

  • Size

    183KB

  • MD5

    eb90f2fbce537226d29b271161b06fd0

  • SHA1

    882861f4901059e2ad7f96b3388d1e4e41fd89ed

  • SHA256

    ee725d95ea548951b70915a733ff40d472e844e0e38e2e1b9052a9ce4fd81f1c

  • SHA512

    0732b2d7616ce276c974cba28e4f9f8370115c8afca25427b3b623b5ee1e6e5f669a85f6280d4c72ee5642e36a02a0c0651ddbc7ce60232dfeec3ec7662a9eb0

  • SSDEEP

    3072:4ryT3TSxgozYD2tGv2527PfHaMbBnLipKhppnAUj6geefR9Dt+J0:2wOf6v2527HHaMbRLipKV7tH

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\eb90f2fbce537226d29b271161b06fd0_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2780
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2780 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2680

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a54ed2628d26f9713f9f795d162d882

    SHA1

    baceafa39a17269e92066e345cc2a55473d0399a

    SHA256

    fb982f512df6c04e6fd513d7fbcded2f42293e3e13c3e7ebaafef944c52e8b05

    SHA512

    4767aee5997cfc003e6fce62f4290b1311326e67be1f2af368b34c42e6f4336492df97f14668b30ea7a2b730bc184c2d0c3b89f3a46c7ac4c5749a13f5822e23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0db7c49e337ecd16eecd4c4227d57596

    SHA1

    49afa75bfa7ffa1923d048373bde751d695e7373

    SHA256

    14471aa0cc21580a316c637edd83785873d3a313a4ff0003c0a40225c9b47fb3

    SHA512

    93e0e0819e23d99b73811342c4129742fcfc8d03b4f8ec618907df7a31c632809072fd500fdaa83eac9c136c3683dd46051340b4484a1f19edc45c2baa30bc5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a10dc5c4509e4adc7c8878783fb0d2f5

    SHA1

    6b81ceac3f962e99e33f86475cc474b046a06182

    SHA256

    beb07d8666922ed1a31d551efb477fef388ef4948d419869c446fc3324e787a9

    SHA512

    b523757a51e31b01b04d82d022d9ff54902284c2951ce26092fb4248299880cde1a2fb2831c6d4e87c23b8ffe2e9d76a0f5a3240b3e691a8fab58d3b837cec8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e3372f9dd6b5e0ac27a848920c1a6efa

    SHA1

    77a7a82b6e7f7c458a9501ec69b7954376fd1598

    SHA256

    f7a60937082b83f7174982b7e661de34011e9cc2698c992013f402515b83c3cc

    SHA512

    fa025aa7a45ccdae114faf389923f0382f6ed930fe9ad132142767484521d8305dd33f5e8616dc4ef5d564cb3557d415b261c8f16d773ab4cfbced2c3c9e06d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a597ed740c321455ced3687e2612c25

    SHA1

    c0c8e60cad196056f2c8fb77303c94c658412499

    SHA256

    c81ba34e9f8413cb4b9f65c395ab6dd562424eb53fc0e25f001304ce11b1d3dc

    SHA512

    5e3d94ed8221440691a1edb437f4afc614e951ed1b1e1bdf8e9147180e6c03a7d132aaaae4a282c2ee0b23808a323833a5124c24e4eaaad6f60512fd63ffe7cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8151bd3810f0a9bb3e94cdc07e2470cb

    SHA1

    93a8551cdd3ccc138b4058aef1a6727341863057

    SHA256

    d39eae02b0ee038c4b0aa99228c2a23ed7ee7650f7995df58788edef597cead8

    SHA512

    e2aade38c5634338e65aeeabbc296f4ee0fd8b39d347f3d8cdff6dfcdbcf64dbb920821b2fd9df4fb611e9b98570d4030bbf667a68fb42eb7ea287f74cca3c27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5843daa181780a7d7568508813b4d2db

    SHA1

    6b3f9a4e94aea912515f02063e86f526b9273b23

    SHA256

    5a3363baf35c8a084009b4289989c17800151889a51077c50d5bb8dacef63e08

    SHA512

    af4974c72368cf60a71860244a29f0b8e4f44d1a44eb2417495a1ac747eb5ddd9bc71da2c59bf5e2d29090758085a21b1f22295af8be8da55cc6a47145ffe31a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45903cf08e71ac86a4d6aaf257ed366b

    SHA1

    da51909e34714ed080f67e1fd637f12f1b8e4b0b

    SHA256

    00e88ab5601cdd7a7b0442b78cc8b0b06d23cfde099d100cfbf8ce977df46810

    SHA512

    aab1645a2ba6556394335e6c29f21be2493cf0a56c81008d61d85c3e29ee06433f94779016341204a206c58048857d2f3e873a4ec9a79adf9104cb6f1c52e583

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    07f7b39e3300e5940eeaaf6c5e33ef79

    SHA1

    3535b964b8935be829515cf9bb5d0b1913f44920

    SHA256

    6f93fd08c4e5be44d53f0ff58a6f926069b2f549212a08c44822c1a663b4b3a6

    SHA512

    c195b49e2d4db9a275f0d28bbbeb0cec946c54cdb31fc85f540aa4119871440c54bde62e23adce14ab9a38a5c0c4884bb7adbda4d16ecc857f794884ca14a921

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    16a5c0d871db61202c46ba7b0e4ebd40

    SHA1

    f22514e620569d5f31366ff3e5f30bd3b19dec8a

    SHA256

    1b862be304e7e6705b46fc2c42550e761214d23c6631a8020bd1f8513eca4329

    SHA512

    220682e0ac86bbf0b005b5757f3036357c27723f4b1f25604740a0f09c61ae063558cae8e397a57e3500ca973fa1d4d6ef8efc39725ce584c0794ce273a116bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed0deddd77a1e9c14de21dfd7c43a80d

    SHA1

    423b3ff2872d541cdcedd1afc7cbc155f52e2e5a

    SHA256

    2b23c4612b2a54aefb1024c7e5accba98778570aa9f4a49bb5c7a2c0ee05fc16

    SHA512

    83c7677803ec0771c656b4c93f4a24986c85c3b7aaac7b220642403283cf70d270109a35950375f1ff7e9db25e85add1783b0432e967719f2f9bc233a72c5cb3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1fadf3f285d43a76ef57264031745221

    SHA1

    5a6cd98b2b7759cc6f70dcc299ebce27d1f2cf55

    SHA256

    3011e895e7ca7b2c6ae66b1d10c4f93e87b85e8497af7b2fbc01a56dbc5b4a6d

    SHA512

    7da999c879f2a6e431ed22514480939d140fa0bbd3a3164d15b66b5468096568d7964e56a912f9eaef5e46ffdbe23c3a8065f063f04a6e98bd6c4d1748f3300b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b990d3acb1859983200bfad0e6c1cb2b

    SHA1

    2e1ae6f02a59a48466f8acb987ffc2ba4cf03061

    SHA256

    1f1d860a61570a770ca63dfae2128c63eca014966d70b9233fcb4743f99c02f2

    SHA512

    e12c2b64d0e30c766bb0bbb6230d6dd0eaa47b967c298d0f07bbf83f6060558fb6a6e935fa77c9af13ab48ec81c86dd2c6689c6c07f3bf2b9fafa2dcd0f7d79b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    295a5c206e22710af9e5d911dcd46d2d

    SHA1

    3a4f3e930f4f39954b76241a925e83299b1e3789

    SHA256

    cd6bb95182666ee34fed670245a0d9d03cc731af87fa8de78720814ad25f7753

    SHA512

    72301258f0b3ed87568f2c730b9e5e74f0d0fc7a145cf37f73e6c8da59a571bab3bfc16a3db27b3e62dafc30837ee2a21538d23e02177f6ae23be1ce00a637b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8399fe9d4acbfac7e5b0e4d0a066f635

    SHA1

    c1756df66cd8e6600066aac8a70275e2249a18de

    SHA256

    b530bb018c714cd5d6bf05eb1cc28748c2f495e415bf0c2ea6363682e913792e

    SHA512

    7893c5642a7352a4326a82f9e31a252bbd8f5acc3aa3173492db5126132519c45e86444678de6bc388d78303ae73565e358c5f828a52408dbf3d289f62f773c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    459fda42ab9b8ea0e655a612535fe0ea

    SHA1

    6587576f1f56710e270d51e12897e393e684dee2

    SHA256

    0b790e73295b9bc1050e95af67f710f9a17b190d74a576f93ee3be8ff2d3879b

    SHA512

    64a738d6e6151715e74499aef03dbc20545dd77eab643d7ff7f04a907fdf01d7432d5f3245a03556c6eceb4d2dcc963976ca3090bdd0d101d70a0f871850c7d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d0428448e1bc6f6a07b754340883ad7

    SHA1

    a421c20b0d3234213c0c1aaa775d2fadd74d76a3

    SHA256

    a09c4225fd528ee276da479abee4e1646eab38196d647ba4c270b8524e039d60

    SHA512

    d42908ae5d11463e1d047b14f51a1f89baed8a8c7109305e95093bfcc3d7af76d0d53b0a28b0d8d0c4a4458f4c1e1facf4a3a7e3b3ed23ae4c6e82b9aef00f80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b917efef413fbecfa027afe86abdc9e

    SHA1

    925bb0508ea7606717e506f92edb7fc95402d73c

    SHA256

    3550ed43b97bb636fd7deb009c03f19d906830206b6a9fcfd61a1165b96278a9

    SHA512

    241547adecbed55175e3637c49f0824a625d26c1f418525062b08e022c349eed3413dd5a1d934b5286bff80732661aa0e2cf0e54bfd33c729c26046bf6f6d6f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    74f9b543c42ac96d38158a8657fbe4ad

    SHA1

    5eb792670a7af81c25f95ae72fe4ad7a3b6d168b

    SHA256

    534992a23f9e3615bfe143b6a4e60199c0e5c91c2c676e27fea0af22489d411b

    SHA512

    2d48237a3d77b363e893c59021cee7c7316687fba555ca6c7ce3400b773cb88fab7f4b9bee6e47b64547bbb1c690334dd8a41de66ff7bd03e6c49d665bd51f68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a3d780e43420e0b2be33aad71d3baf6

    SHA1

    7f05bc18e449d6b32ed1b0a185f4ad8807de6fb3

    SHA256

    d8c02641c911dc2274bf6f62587da4c273e856ac57f03e7401a2ef91e7156fc8

    SHA512

    2e1135eb76d782baa50ee35f5f953af076e52a9ab06d00d4eeefbe42eaef18afa83c21e775c0ad38892bf8b359fb83e30edb75d458cd7b35696cc59ebb36e573

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    42f54c533c9c9f2a31e7d841236c4853

    SHA1

    fd3388d0329988b149de4f9476c6f6f1a8cba9d2

    SHA256

    4715c4aad839c669ae8e813968c0a4b2ab4ac7e0f725b328168975f8d20dbbf0

    SHA512

    12044c74b5e172e98b712214c5e55d13175c0689ffc3d9b3a9cc2a98184bd1f534152de7dcecadf9f6a69f04f4b557c5c48a276667339bfbe57b998b03eb493a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f8351b9988bc3b62eaa86e037aabed55

    SHA1

    182cce535a65a7afe4fff8fc95d1c1d79527c966

    SHA256

    7be33c5bfdbff7de05df7e032715966da86bb0cc69c296facdd1d789119f803c

    SHA512

    5953976c40401af90549bf1aa158c37a967258ae07c2b4d28f2f3a2ea9134122ffd016bf3921db0bd8bf832ca23a482f7db2a80e94ed816be05269bad99c0860

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    242c16591119d4342db2e3794192a2d1

    SHA1

    c10cb286273176ca9df57f1e7dbde9d1cf24b514

    SHA256

    d232ce0779142be6b7a8b1346f19002247fe686dfe2d6bf29e865cf0d9ea117d

    SHA512

    e9edfb110b7aa656be988295dadd146d9375eea4c0c1b8a4ca2319354a40cd66f10c4bfa3094a8545aa6d28e93eeebb7d04b049b9c52d692ee5e5690aee48f71

  • C:\Users\Admin\AppData\Local\Temp\CabF46F.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF50E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b