Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    20/09/2024, 22:03

General

  • Target

    ee82f33b140d71c206c47f975e18eee0_JaffaCakes118.html

  • Size

    14KB

  • MD5

    ee82f33b140d71c206c47f975e18eee0

  • SHA1

    a9b88f273f0648b0565d380f516b580d75702b90

  • SHA256

    2a9ff99adb58080d4843113dfba713972b881210f3a6a57268003f167a42e30b

  • SHA512

    1fba1df623b6deb2a533afef826a372a4415f89e7ee2b5481ff731cad22db9c161056dda37af87cc63c2d1215f83baf0e4989baf2eefbedfbc481f12de617f67

  • SSDEEP

    384:CyikbylU1B5cTW/+SQZS2qAi7zy1wVMSf2R3R0BR7Bs1TiTcQ6+:CyikbylU1fcTe+xzqAi7zIUMSU0Bj+Ts

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ee82f33b140d71c206c47f975e18eee0_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3048
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3048 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2776

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    77cfa8b1f2c518426a0be31a1228cd4b

    SHA1

    6cec46bd4f33b5a259fba3f8b367e55e07c34d1d

    SHA256

    a4d07412791222ebff49fd69c5f66581097e7f7bbfffdef8d98d5ace9c2db31d

    SHA512

    e88d5b09f34ff7b1deb1abe426b64d3bf82fcb48f786f7ef6d55b547de82c3f1a2bd1f8bce494e68504a287029a791334352cf33238d18a30eeb1a481fb228ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17aea9479c280c66dbcf0d39a377e3ab

    SHA1

    533548668010100a42e90bd6d7f0ee82cfa78317

    SHA256

    ee2cd74e2faf323834724fdbc69c4c6ded83c6173d373fa6dfe4ff3491d3a32f

    SHA512

    511418e155ad75533b826bbcc2a25db45c5f8b9911109d184564b4f7a1589b86fd2948d054bb59ca88dae05adaecabd824f304313f6ab242bbecfbad8d96056d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47d4b2d736e2d692369ba4127e570832

    SHA1

    284c62f2f3e702af67d23d6530695a325070d3f7

    SHA256

    7df3dc937e5dd24c2e690a0f7701068844b9d11b9ca15f837408aa5fe12362be

    SHA512

    f8ad1f5f5ec58dcd6a91561f719d9e42e8c4e7e5e488387faf7861de522fe72f00c85b2499163d4902b5432446e23b53b9e93cf63a359a4c1d13d9541b4dfaed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    39a9eaa50931adccc583969a2c536302

    SHA1

    c7fab51052f5b2e91b729c13fe88018aa0bff355

    SHA256

    a6da755858166aa84710c4bc5c4ef7ccfd599c782395807b073a9680a638adc7

    SHA512

    6bf5001cab04c9dc5b2340e0399f5f0ce8dde5260dde4ae750ad423d1aa8a9728225197c60e11a82eb6bab697ecd03b616f6452eb21b1a92b6a02b51af855b6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc226da4c39ab904a8f2dd7b05c1ccfb

    SHA1

    1bfb1aebb1777bc2b86d439e0c43f2eb1b8b2d47

    SHA256

    f85770ce6f2cda21422a2a3a4ec08e06a2810910ccbc67e134baa6aaad7eba60

    SHA512

    04b4bb45a54285ce804499ece8556938be6ceb8c241d47161ec5666a93c6c34119e1b885d3d8cf4d29eeb87a5376d4e0d25eb91d492f6fc1d5b76c834cd9ad72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ef347074756595b78fdbbaf8452f4e8

    SHA1

    3556822d549de3a38ad21402dc237b00b9cd0ae2

    SHA256

    77d641cb08e94f21c8c2d14d861d95e15ffaf04afc5a3e98c8990594079a0dd1

    SHA512

    7861553ac36a256099476d37774d8266c4683a309bf6c73449551c2b277ea17767beaab62c449b8dd70d540a4b6cdf9c9b540ccce40ee52ad1c138d8e88b135d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c952e0b78db4be0f2d7009e11c3b4514

    SHA1

    f5ac9ae0a3016b013df3ebe02c0f0ea480cd79ad

    SHA256

    9f8efedafa94a5a976c81e77e814cae2396f809fcb0fb19b902d462e1e7558ba

    SHA512

    791d45157578c90debf22a91172831bfe3a2b676749740c31e0ee48b4080f040519869ee1d7ff08dc2a9ae604d7dfb62b4280a03ccb428e14b22cc6f3d407fba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c01bfd2f62499af81390ea3293bd7d6b

    SHA1

    48ba76b3097cf094721ebcfd7a4d9cdf55cd9f6d

    SHA256

    cf5fbf247197816ec5aa99414e22f472d0c12f774af334397ddc4499d2c5808d

    SHA512

    de7908a077aca02f6398793db759e32966e56cf8135a771f8322609713d56e776163ad5eb97dee7f019777f3a80d2bca0224ae757957b8b7f18655814187256d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4f33bf9cd5e5ecdd801f4a811cb543dd

    SHA1

    1816fa8ee79e4fb07580d5927156ab41d9307c07

    SHA256

    e30e372a3ab8a81c308be18ad2b9cb657d62badd8077a486031191eb3e4de507

    SHA512

    6a2f89ea18c9d7d5ad1bf72b5a9fb4a67be76b4a59467f866526c8da8d9d4506abd50bdf016ab110e573141728804153f6db7ee361e4e059a8c70d2a562d6abc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a37b6fc8b6422ac114821d6245d8958

    SHA1

    f5f0a0d165e69b540024d4e0031a58994b42d9fe

    SHA256

    9096fd34dfd0fbe21c6224ae87b5bbb88d53003a36e1c108a0f2285f1caee19e

    SHA512

    b114c0372ddb5886e8d8d826193c23214e10d52d8cb0c6e53ae54f9a524ac10f1931033dec92094d32527c2405ed26c3d04bb690c3fdf8f0c2e8e1ae071970e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ea704e81f5a468aa11f72f905bf2c5a

    SHA1

    c8770af26e7ab1ade6205e6ec3ae635ace12ca39

    SHA256

    a9d373d0e4b24ba91fe62eacae382fd1afe974515b75dc2e5a597a1553974c8a

    SHA512

    b8affdad31ade311594d41bd8ec4673bde7168dac3bce33bc7660ff807da5540d099361c0dd173b739a1f5ba2824c96f86ad4cfe5cbf1ed5b620860c41d15dd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2658e8f7e6cef4f0568ec40779f937c0

    SHA1

    fdffa6976e266aabb7448926121f0227f5865b1e

    SHA256

    ad7df2d37f9bd84abda1bf09e12ece19f9281c0c5acaa319845f1ac0de3862e0

    SHA512

    43fff1a27f754116ed2a316cc3074c90cf2e665bb147e6d3280aefd7fc8f24bdb80498b6ed8a7369a524163600a7aefded7def380449799b58cbd59a4760e806

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d3a75cfb6c860bf793753debf7de33df

    SHA1

    1e1bd0ebab146961f8b7459162d35ab512b6f229

    SHA256

    697f312bfde7dc170ff1b559bb77ecf776dad5f008c8ad7813ad4489d5d133e7

    SHA512

    fcadc79405279285ebe5cf186916ae3b40463f9bb334d070febe0ffef46853765d2a9306a7001fcd6f4a988b203120550d796c598cedb86025ed013decb5fc49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    53e81fe1942d8a1ae4cb257de669c999

    SHA1

    b8caae3bc5236d3d4be260c16f52c0a9466c2212

    SHA256

    b6034a13b6c403a8f89f1ce5d07408ff38b6ebd3bd1d7610e4c0c68fe4fb66ca

    SHA512

    ed2db5c0ba95c50233e5948aaf254253e5e53acd41350ded822a53580ed78e18fdddf50077c9ab0c50960bb75194a99acdaa98fdfccd1fef7048e8cc14ff6a03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e05b1048d1618ec8177207b017cce8e

    SHA1

    58425bd21d47a99879c7cdddcbfbf304d5b06344

    SHA256

    42167f9331a06065b89f9134eec5e1d98671ec9b7265fa43776e39f7284275aa

    SHA512

    5ff014f1643836fc223c5ee16555fa9dff32ba6d879809076282062e64426bac2ab2cae4e36a838db944235e3dbd62025bd5e622e00f241310342cb8a900cd77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2410071135a3ab768a8cee654f6d08f1

    SHA1

    5bf390f115bc1ea32a42df47aac563a085496ef7

    SHA256

    f19e6340c9de67d697297a2b34ed9e3179b6373543d7dc105a96e84a57e63c8d

    SHA512

    c1381647a809f1f95f314498da56751b3de8c6a968200397eb683208c5ca41a9f9cdb42b5f4b414b8d7a974d1b26aac434f2c6e62bfa3a88e773c9da40455171

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a28cbf835c62b92220416843eae0fca0

    SHA1

    a1e4a5b7b590cb7930e0948027788b5dee19ea88

    SHA256

    a66fe4bf881bd35aa9d19fbc84ce0d2190a15e6bb4ab77ae2882f32738b416ff

    SHA512

    5f92168e613c22cd4b4d466faa2217cd58e7dd286c4474c9a2056310f80452ee1f77ae691f8ae660a023c3fee2135fe17d083cf2913b136c1ca715595ce3ae78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b33ea43d3ad38f9c29881296080b345

    SHA1

    f084892e186f4f578c6620d691fd6bd74183dffb

    SHA256

    de0ebd9759a4bd91cce1c8034b333f3ed75005cd21bdea3b3a5443abe56b1714

    SHA512

    f296ff55bee2b0081871efbaa225cfa1f99c797563ad95b43546d416f7fd6157d99127271ffc16be0e4ef7a5aadabba77168cf657ef7d6a7a3fb76c65b598cdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    83de90efbe4e1f2e06009ffc7ea4d909

    SHA1

    45806bc796fd7240a506d1d26756069e06e59603

    SHA256

    6a5eeeea0a2466fa6134c093d5e2ebd684a3ce1390a01b78a80f9702b19660d2

    SHA512

    81c75bd6e5ccd7fb65b6bcdf3487c1f637e284e83c69bef24562e61d54c7f396261075e90ee09cbcacc7baff318eb143f4eda648a5f1953d2abbb83dcf76dbf8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d5edaa890b1107c16abe1dffd8368b1

    SHA1

    994ab32053f3b98a417df7808046ed512f0e5d59

    SHA256

    b4e3fb007416c6a4f91a3c3edce9538bf1db600c00df3b10300b4014c5c4752b

    SHA512

    8efbb94b35e91d0272a8cbad9794abd470d856da4ff2bfa8be3e0695834057603e8f85d6435e85bb5920d33b89699f7e9ad8b00afee50c1dbd1894940543e1a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e8f3fa3d299d309642c86fdc8e1f898

    SHA1

    e7739f8d65ee8168f9f27c86fa40fba68bfd6f45

    SHA256

    2167b3ba5590bbe938abb488eac0953cec14abb9f7ea51ec986dfb64db36256c

    SHA512

    e84ab52ad0f4812c72adb82fb3671ec5cf3cbd143c7c370bd224bd66af7f7826b484e7bab5d1c4b9b47c46a2cd0f4054745364bb8586b612ce50b396e661589b

  • C:\Users\Admin\AppData\Local\Temp\Cab429.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar499.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b