Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2024, 18:22

General

  • Target

    ebeede32061ad4d4e42c0fa9b8216947_JaffaCakes118.html

  • Size

    27KB

  • MD5

    ebeede32061ad4d4e42c0fa9b8216947

  • SHA1

    9f219214c47263735eeb4b2ce2e271d88110f1ba

  • SHA256

    f8db30b34a2bb4d85df3a27418bb804eeb25c550b06603bbc3b887c0c498b666

  • SHA512

    9b31d19c26c38960b5d800ac8c20e74ce36542acfd4a1dda7e738f0960ee375cd70f978ece5a4bda10b5eee5376425423cb882b3a748514745e0f2f36a2e557d

  • SSDEEP

    192:uwHwb5nyenQjxn5Q/ZnQiesNngnQOkEnt3fnQTbn5nQ9em0m6AJ8SQl7MBMqnYnS:bQ/I3MS8lSmQ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ebeede32061ad4d4e42c0fa9b8216947_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1488
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1488 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2060

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d26320358bbd2968a95c75f43d33892a

    SHA1

    d11da03fb1657cb3cd92a1f145c0f5307447b39b

    SHA256

    125ed5f3caa5b4524df4d274722f9500ea6bf5739c73aca90b7130bc009fda9b

    SHA512

    a915f7635ce95a848c53305d08d9bb6e31672bf5b90db25dc93f958a7eb414178132a9adfd2b340bb118c73af499b23dabc12279e9d0586af066d70370cf041e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b888583e48fd0b482b0b7157a9c8982a

    SHA1

    c959e71241b5fc6787a083e0499dccee9261b6ec

    SHA256

    ff8b5832eaaea0f7cff03c978c29985ba0d34f3f7f5f03ef42331b9b155044e7

    SHA512

    3778a6b7d2146058858e8f1f398009591ac965b68987060632a192c177c5748208882308d95416724d545ebc7eefbcecf123a0797afc906e73654b7c47b59c15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1ff2442ca7de0c5842ee185edeb20fc

    SHA1

    2d1b9658244c539803ffae4c2d22bc53a82da6f7

    SHA256

    c961ec23789491a2d19102e72c61d43def57bb962eaec290022fa46da03c650e

    SHA512

    d15b54b7f42912058d44d86635bbbf2db0854f0fee0d04a9bd4b7eda20cdc867396b05bb45591dd217bbba17e38e763051b8022b60c416d78f121573631ed216

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c0625001b959ee7a49ff25ff26a0e50

    SHA1

    6d7418e6e769ea737bf4993da0e27844cd8957e3

    SHA256

    727fc7d7def79c5d04944f758303988946d4921f2e40407adc57faec20eb1187

    SHA512

    910d943daa52750c6a05c7987a07c2428a65e1271bb197d951df6bd63cac4eadad52d1918d3c3c439ae811fb81e889096363cb01416c8a0a4410ce754af4b755

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6bed268dc7b2c38fa5763298dfd144ed

    SHA1

    3f08a06e7b08fd9d1a5744de35e89c4feb9e0d70

    SHA256

    c60a901739936d4cb3d48bf214bf69d59586b7a67de9df6d05d82788d4cecc4e

    SHA512

    dea0ee44b87848cc82b5ac3c8c087b3d61de53c65ef99385fe6e04d9f7dfbd8377cc3caa97c0f71989932b94bf9e83939f61ea64ebcaa3a548f8bfe95ac942c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44452a90a50ffc2c4b74366cc0769187

    SHA1

    41bb3a1bf9ee33ee5ee9c3b4120972b4dce4d5a9

    SHA256

    f3267ec8e92ac00ca6cbc1421336ee03d0b45b57789f2454614bc43497798d7a

    SHA512

    e3a9dcb7140f82c492025f9013572e37679b999a538e7e1df0a60364c379d94d01ee445708447d4c2aa13ab6d4dde7ab0fa66ed5962114d89b3b7be7e1051198

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4c2e8b19bcbccfcb1736c7fdfca7c90

    SHA1

    3838adf7d0fb2585f31e7c38a5290c47bdcd48ce

    SHA256

    10ad6a94f0ac8a784b2df56e79d2c821ef6e94b8eacf32620127d23c5fe0b99e

    SHA512

    3b05b1cae676cd80fde488821e5347f826e53a94792e90f41d4585c42b8ac17f4d23360ca6b16bcf556c57dc8ef4e8e9eafc48fc528ee43fd2f00992c1e7fc52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f81c3adbd9fdf716fa9478630610632

    SHA1

    5070073fb810193902fefb09a789cef7f86b5229

    SHA256

    5a83f765b8a6df83f4de4cf0d57355ab3f82e8790cb32df027e178a2c309443a

    SHA512

    7e94e0b1c992326cde69c1da01e6a620ecccc3c14a4bfd45eb78c376185e1cee8457c6f766ed081c903ddfcbbb9921dcfe17e8f00b343588e487a88ff11c235e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0360dfc65d5777bfb14b66e4e3ad3d15

    SHA1

    9685afa49c5d34f5006d081103552dd5f7ad919f

    SHA256

    9f982559727a52fb1fb22767a466b3cb9da40a7454bbcdbd490239de8c6ad35e

    SHA512

    51dd3718bcf05766ac9bf2b2e89cd15b57448c8685ccffecc9c40096fe2dcdd7e0a3cebcd555075d6fffa4148a40ac8a97233f9acb5e17e6264d036cebbcb752

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    03a8e243968f56f632a74f932aaf1898

    SHA1

    9b4b30dc4d266333f8955807d2fd348660272c43

    SHA256

    fce859281a87249369125319ccfe74a24ad7a7dc35beda2e30430dd6fbca604f

    SHA512

    cb444fcc05e09f7c6583e87070fd8a82a8812ae31535f079d27336e3d0507eff608145aeaa29dff79ef3b151ac9c373777ba355660b626290f63323cc4425d8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6664ba001f1c6de552b0fe80cde0fdfc

    SHA1

    bfc02d743124a4bde826da0bb4773a623f3344c3

    SHA256

    e673c0dd119d243e3476197d5e56095dd690df2af96451e171e0ef98177fe190

    SHA512

    3f496a7b4bd648b517ffcb271eb938cb583d5b5b6f25734ef3fbacf37cbb334f9267c8c19099a842e5b34fbc984d7d04062bdeb36e4f4dc3a4a0a307c9a055cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6deb6563896611a3e0dc1cc31100a103

    SHA1

    162abe73693f15a341bd27bb97215bd8be165709

    SHA256

    5a3d47b6a474d5255c9d94d8310ea7e25c2ec3022657bba4c290afd55535c8a7

    SHA512

    c860e6fed2af5afc0b98073593c47f9a1f616ea734eaec20c289cb1da1d8f947bfbd8d4cad621947d3f2e99c49853cb293a2442611392adcacfd817027886def

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7259fc8e013eb39fa6b5d212e2689a08

    SHA1

    ed88b4112bbd7b5a7e9b0b7364a6d8a0648c7fc9

    SHA256

    a78392b312c226af1e1c5e5f72fff14863d1008096cff761aed940708f1438f7

    SHA512

    1880ebb83e014a1062b9d5e656487785f4f7ff94f5b20155200a0cf474a94deced5cc7a2326a0c6d3a0d320b6685e3246ebc93e45e6c4578df88a10a7faf8c1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67abd6fdc9bc9b240519861e48a34237

    SHA1

    1cc680bf1340d8d1b18e97e2996759728340e4aa

    SHA256

    9dee79f746173741f42d7500095d9b002933e8a775fc0842f0017ce0ea05a942

    SHA512

    3b889235eaa8be8476ba9d67d4a8397cf6cb7a3e01de39d654d230cf076625144ba36e71fb238f58ffa07a4731510f8bfefd7ec8a1baf5e2c83e9d0535a63f23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a6c9874265a2b238c51835c448b5cdc

    SHA1

    de19be9e69b0bdc71ccc2a29db078291cba4df6d

    SHA256

    0d47b2372a787ca2cb35d25ac46c83f53d81a4eb7e47aaac71a70deddce6fbbe

    SHA512

    abe28b4176af01859c2f9b81cd7b54e0e356745ab0dd7ca9cf8e2a7378d76284f4571e1a320e0e311d65ee5dd80e0b436c85e3205325ddb8740f2769a5ffe874

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    862a1d1def91c0bf0c4a1d57cf655502

    SHA1

    92c2d161efea3a51b07f1d5aa720ac4246b2ae91

    SHA256

    4c81428ce03d57ccb0d96c4a1b55008af767f4d24cc263948723dc599a59c5c4

    SHA512

    96ead21b7e2028dc932d732021c2dbd3f6933a8a4d856fa955b2df67304e8a565d088271327411399398628c74a4baf8224d13adb4053f45b58c9e7a9957b7b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b142f85e60c51ba6718ec9a80396d1b5

    SHA1

    161926ba29e00736e72c56cf9db525c0ab0b7d20

    SHA256

    13314433bd9c53292a5566828f1ec74baf8d3ba7b2220ea607297578d7d16d20

    SHA512

    f25678aab4e8a2286d3e18dc8be70a78ec262a27d02e8faa1f30e80cbceb4a6437d49eb4aef0cad52fb791dfd6565e098c6efc7d3e9ca427cc1911b2db9b4ac1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a13afc55dbe08db50b1678ddcee8d4b6

    SHA1

    92fcbe5f775270e7b712b2e0ec5d563ae00fbbbe

    SHA256

    6a08e282dc9802fdb57399b407ee4ba096500b3315bdb7be4ffdfcf01d769dd3

    SHA512

    21eb004f316b5ba1ae471d4c683b3f481debf53712ba614c51510d2624f7ac2bccd6a92e3bcc554e1032c907e0e330000674ee6c35d54aa850d679f2230d25da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ca4a87f054fa722616ff469504fd6e9

    SHA1

    c3b4e7c2b433e5d51017ad4678c27c6e7de81f5b

    SHA256

    173c6b0ddff6ab44ba5ac345efb5ea442bda73a7546795258f3a76cef8e1dd07

    SHA512

    6ae863f4a02087b5c84a730b814c268f1025f6e8e59c0ac4ce31f1be6647260e02f01c2c5669b0a7b9f487d15eba96d3664b66a59eb739683575c80f9850fd22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    728c7fe770dfdcc8f05032b4e8321181

    SHA1

    f3e062abfd5effc69788cb73e51cac5fd895337b

    SHA256

    dfc2c894aac5c3304f08c8f5b95eb3a3c7bc3936b6d09921e9aeba21285090b9

    SHA512

    e8bf7db1558fd416fc56edf2889996d422b6c5651e575378cde16111a4341494a338a5a8055eac66121a091389671f98d3e2ba65164ab64a0c89a3d42d0c5771

  • C:\Users\Admin\AppData\Local\Temp\CabE830.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE8FE.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b