Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    21/09/2024, 03:24

General

  • Target

    eefae69eb5a628cf5528de49cd3f767e_JaffaCakes118.html

  • Size

    28KB

  • MD5

    eefae69eb5a628cf5528de49cd3f767e

  • SHA1

    ab1524f6514e12815ba915c873625e77047fe582

  • SHA256

    03bcf2fc7ef54f99af47c5780d68279813ddf0e4db4bf685fd27d033f95130eb

  • SHA512

    511dce182a14cfe447e0ecbab86a1934a69e5d09698e4a2aa609346c933e6c0e56b98d203a754601fed558927f7441ca4651d4453ee7cc04941741c44af92d0c

  • SSDEEP

    768:SIzdsFqvfudlQVV1C5m1CCCcmzm3C/CnCQGtvz2:S+dsFqvfug1C5m1CCCcmzm3C/CnCQOvC

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\eefae69eb5a628cf5528de49cd3f767e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2120
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2120 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1708

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8102d70bd4b90e145dd1c153ab782869

    SHA1

    a32d44ec40c944a5eb283277de79b2ebb9a80b28

    SHA256

    f41abccd9074a21b08fdce2687edc685ba9c22ea403d5b55a3b7ede5d2c82818

    SHA512

    33aa7475eca14c239d76ee8627e428af3d2e5781df844f753721e7bf446405452da213e4b6112004025ef9e9844c4749d54f3b1a27763b3dffdf9f5d65251f45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b246dda4bccb7f3c93666eb433ccba7

    SHA1

    5ffd96291a1cc5c0cce64070e737f914845077f9

    SHA256

    5b92684f4c49987b6acf28cbb1dff9e2f6847cd4f2993b7ca220423c85517874

    SHA512

    2b8ebab19a346f8b24f07a2e70d606bf73b35e9382524f16177c1c520949288e304f2179518a9e10abab30ca8c2f54648e23eb59bad6684c575cfd9d5c6b074f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df32a7de4427f5666c18e6200807b12f

    SHA1

    ebaec7b38103c8e370a36ef44f7a1e15ef0f7e1b

    SHA256

    4cd54307b26695ebb5dedb6057a57dd4677370bbc0bf9fc2798323cffb2be234

    SHA512

    9dea689e5a4c22674478a3e8f0b8e9769ec28d24e810e1c7c3f45709b1a5d02cb874a018bb8555a275f3f998ac6ef33a794d12a426a6f9d8e621fc0d4f14b75b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    82e6d1d183f15d1370e41279c9a62a98

    SHA1

    0338a7081ef68e1d574de8b9f24acb4f1a600974

    SHA256

    faa5be74cbde33349d79f36c0e72c7c2cc05042f00752b5c8655d284b04e0929

    SHA512

    5c163ba3d3a3dd0c4db81890e2c32a5632562a63325fac3ac8f86ea23370303d82f8e40810dddaf5a61e9f7a2e911549559535ae23a353155e082916df11155e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    298795b10359308a8dfa08e184b3f248

    SHA1

    a7f246b664482e5ad1277e5058745ad8404642de

    SHA256

    d39bba8970eed53ccfbb2358a49625e3c0debcb8a0d9d6a2191858d3970da7e3

    SHA512

    ed4ab3d6f217fbeefa7746b4e1fabbc46bce32414bec70d1fea97f6ecb6e0c94e2d1a3e6fdb3d917c81a050f119f36e4a77693d2b8e303a3e52251c92aaef2ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    495ea2e19d9d23854bf048d7f2e3168f

    SHA1

    7bf442e0267f9b3744ab1e8ce7add077af68e182

    SHA256

    8890b0595c8e6f45d5fff9dda57ce9e3a6d5035c86b95253a037ad28e32fb5cd

    SHA512

    bf69b6c509c4409a68332adb8cb45f1ab3a9c2f4919b0e96e7ca9576796d8b8deb22349c0f45d053fcf95130713e98fd392ba161ea10ff3e80761bc78ebfa449

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b849fe158f63a8cbb32206d25089014

    SHA1

    e6616dac997fe3a461c4585f47f248ad8997e340

    SHA256

    2230c358223e492c3de158209b53eb4ec63242d218d8dca2a373bbc055ac3a0d

    SHA512

    66d8a668cd04475a5973aed4480a48cba002b874374140de8c56b5e7449f39532ccfd566cbca62391b78d82a9d8cb45d6eb660594828063034b6b8a86f5ea880

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3b212f00ced08f9087ba01a414feed1

    SHA1

    c68ed6147f53769ca4df298d02a3889a04e7c66f

    SHA256

    1115daa11755a92878a9794156242ed539818e8a1117d7564963853c8472846a

    SHA512

    a581124ea2ac02090b14a193d66e8d9604902fff6f71670b6cbd97ce9a31281716a723f6041e6eee3f5ac93ebd864ba6bd6263cc3e7b389fd2f0c7f28399c58e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    889dab95a479c4d3b97407c50c633e36

    SHA1

    e616c07c7a83ea6d087bcf1c915ea0e3864ddeeb

    SHA256

    2e354167d8c61e441745d11d521fb18b1ce0404310d5110738adaa1a7c5f130b

    SHA512

    1b693c09b1ab3fe0d952148bd8b3ce51976903eb0cc00ca7f32d3001d977cd9424160c266e29f1910290bcdca1647a50ed88b7f34eec0e0046a055debc8ef2ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    deeb14b36de0ec0768db973cddeb8d15

    SHA1

    2a41a8a8d59bb1e337d10e27232f5a88a0d6aaab

    SHA256

    747b53e111d15a2acb7ca902ac9387808bbd498742da1d3a449c1d167894dfb4

    SHA512

    78603b1b6406632d3425105c7ab2a5b3632eca617b9cc80580822a2d76a758142537935fdb4a0dfbd9ecc0f44683deeb00a4c6ec4b67213021f8813b179ef53a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    14d0daa3967da7a405b941cc79e7e080

    SHA1

    13ff3e1cb990207ab76733b96899aff589a3034d

    SHA256

    ee29a30fa7b9b8c3fc44dc335e6bf5c88a12984088743b8b83bc0df20e3f0bf7

    SHA512

    934a97e95d4fe9bec97fd4806c3e4f660557f20dce2a0c4d9de404e1f5cfabfefba1c3122aeb6165de989569045f6d03e741de6e64659a71f7a9240bd313aed2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cb246c5a435f35bac9cb40aa0d556bcf

    SHA1

    2060f120c6fd3ec86fc205f677726d45df3f9bb2

    SHA256

    5335e648a7a6dc3266e6c259ebb7fafb9c7f2afd51bfe24b54c04a37c4387b24

    SHA512

    537299f111182a9e16bf4c044da4ce46288f8a41bd59632f555a4121f1883dcd4d3bd47e61e4c0c0c1669e0b11bd80a083a4c37a2af5489041e54df3080c9634

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1b4a32ca05c5147fa30665b47083ce1

    SHA1

    fbc879834e69e8ef4c2fcb10a041d3934b236080

    SHA256

    75d46979e533352a5c229729859b28d2ad680d6b6b75ca1d31073ee15f3a9951

    SHA512

    0d71753cabedfee50db4b079655758a1e0d3d6fe2dfcf09cd7f5072aa668b66dc0e03d0a3cf45e73cb56be641ce3831a4e1fa94f75f0d2eb2f211c248ec93814

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    072b1fa0d50f865c260b61b70ea8e8b8

    SHA1

    4e967f867d511a918b06a01b30c097e754e41ef3

    SHA256

    69be304409281b5c408d117e0ed9668dbdb5223174ed74fe05118c25aab5a40a

    SHA512

    cbd7bbed76d1bd7b68f6cf545cba1fe7b9d6587e6027f7a10d569a20adefc2a6190ed0ed2277688760003578524c4165f1c4ff5847526dc5189d1f3a1b42018e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6610aa6021c36ca28a16cc67c41adaa2

    SHA1

    8d798be897159a84a2f03851a338b2ad3341a6bf

    SHA256

    e428010419066d976e4080c9836494baf96cbc2b08d2a60a3515ce797053e1e4

    SHA512

    9cfee01efa633d92563f97c6b354f4541b4da55459ec8f64eecd03975364f3494ded3774d4c66ee72a5049d918716e545a32a9e819987787410fce0ccffd1449

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    453ac9e505ee036efc9fc9840c3b847b

    SHA1

    dd115fe67bc6c4c50527b996c3d93d73b3948c3d

    SHA256

    e35d3cdb02c8605134bff9dca06f830b1085ffc6c8f8b90ed6a530894b275d57

    SHA512

    1fa4b4f693002f0094c9d82ecab4ecd8f7eeaee1bedc35addcfeaec9a59b28144982aee0c4b591f092d93e4eb5ad60b475a78c04fa8b4db3d7115c6f9303f6df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b852e945e1a485929199c6e919339b7

    SHA1

    bda52250b91af868e4e66f096e2162bf327725d8

    SHA256

    48714bb747b497ac419eb560a707dc7ed3fd97e1beae214f7b1972a6c9b6cfd5

    SHA512

    8e54accd863761ce2f6c746de9caf1f6cabe0aff6e0333f4ced3b8bc1dc05554e8ceb073287e39c679afaa802cd05935604ed1a43fb9dba18ea6e39ba1cc99f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f2d3935adbd82b9173d0a49610e7786a

    SHA1

    5a07c716daea71c3a3b05e38d988715a4503deb5

    SHA256

    6249a423e54ffdfed18106ad6742033cd2c23a91195de6bd6227f55db986a104

    SHA512

    f08c7728ce141159d6ef6b3c0e35e667e602769316012dfd4ef4b1b509a32069215e1b9b2362aff254dc2d56b2e1099ab4141f829f7b07d24c43928a6297ecf1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1ced799b3fd13919b5cedec44f5038b

    SHA1

    8ab6bfe3678b5d481d1a2a20f710a2d04d0d35df

    SHA256

    b7c1082007525dddfbcf99a05ca9c69ae01344d2e9e535003463b64f36d1cf22

    SHA512

    8d809232ced7074c80ab327e4e81c221f55911f419503cbde0f1b02c55800ee93be6cc43285c55fd1356271d62b0236b787cf48f702fe705d1a12199cb26b4b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a52431a81db8cd4b677f635a8c459895

    SHA1

    c3dd10216157ca9af1a9dea3e12dc592aa6b11ea

    SHA256

    170f18754dba780ee844c11808dace008de0c7d9999b52de3a8b7ad292a27d5e

    SHA512

    299b1be453e1a16a72f4a59d5cb49f75a16eccf78676dd607c08eb792cfef4b80867423c780f84bfa20ca6638317bf1944e363bd752b70aa408017fb17b589df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ceafc66eed8ded0b965ddc4919172465

    SHA1

    8df8b915c8588e7c11eabbf6b3eb723cdb94be63

    SHA256

    74fa213578b21ee1bb9e6988cef06ac1b65ce7d0e3eb7dab66b3044e1dde89e5

    SHA512

    01faa940ce4f6e9cee517e94d4f7ce52c37e5c513fa4fd3cf9fad1113fe6ee363dbcd8ee4e9d8547a41121461be8eb5de8575881fe32a3a772901d203b61a795

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F91VN88R\allskins.min[1].htm

    Filesize

    122B

    MD5

    00d64a82ba2d055e5facd3a30efac924

    SHA1

    308e275068e3bec5effca608fe9df2008c979650

    SHA256

    aaa3feed097fda6687c7c27860c24980f3ff105b6f326d10c98854145e9afa6b

    SHA512

    1151e227086964ec19c11eb388ace411a56a6e1da96409b2bfdb5313fb5df75223add437a653decf3afdfbd2be2cde421c512f9de423ad74f2ebbaf81119d8fc

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F91VN88R\prettyphoto[1].htm

    Filesize

    114B

    MD5

    e89f75f918dbdcee28604d4e09dd71d7

    SHA1

    f9d9055e9878723a12063b47d4a1a5f58c3eb1e9

    SHA256

    6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023

    SHA512

    8df0ab2e3679b64a6174deff4259ae5680f88e3ae307e0ea2dfff88ec4ba14f3477c9fe3a5aa5da3a8e857601170a5108ed75f6d6975958ac7a314e4a336aed0

  • C:\Users\Admin\AppData\Local\Temp\CabE15D.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE20C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b