Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    21/09/2024, 03:49

General

  • Target

    ef0361a7ebca371312142d01fe185684_JaffaCakes118.html

  • Size

    70KB

  • MD5

    ef0361a7ebca371312142d01fe185684

  • SHA1

    76b91db2daf5d4616268839a0129c2019003f741

  • SHA256

    0e265c986088e98a0e4a3cf639f1172d851a074f17396d57b318da2e4cc3c56f

  • SHA512

    399125ca16ba7ff2436a0aaa3469483b215c269b645f15f46b9ad37999e222b66caa8ece810e75b1a614b476654cf975f04ffdd6fec467dc84edbc84f71461d4

  • SSDEEP

    768:JingcMWR3sI2PDDnd0g6kthezZ07JoT2e1wCZkoTyMdtbBnfBgN8/lboiGhcRfQv:JtdcKeTTNen0tbrga90hc+NnhVJ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ef0361a7ebca371312142d01fe185684_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2112
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2112 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2720

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    395d3863118783d7c40116358df300c1

    SHA1

    2b6bb965be408171145ddb39d96fa8fc0b9f7808

    SHA256

    33372118222bd114c82fcca8950f3c263a87c819136a9a332090626e876b9e33

    SHA512

    0567b2444881a7960a4d08cacfa4631c493d560b3b410c4e0a94085eafdc78f8953c479a4d3a74c83dc9449980164ade4dcbd90d83824cdb62b05815adba297a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a72e0d2bf6df5546a7cc740e3c1a793f

    SHA1

    d83f9240afd1349e6f219fb3d5543b2b7e6c371a

    SHA256

    714703c9a0b8d6bab29dfef8ff5acf8ae17ccc906df6c81e4749e7fb17cd621f

    SHA512

    3d0701938781a9c53971c6ab85ed2b44bafeaaf8c47f1a7a0eecc3118d63eabae690d4e0b1b5aeb0e36b04cc90ff6dd0e982cb7c410542ed1af043b9e803a002

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c762574a0dfe1788b22101b5d0a1f0e9

    SHA1

    352af333a383585dd69a8597c1ca6de2784c58e8

    SHA256

    a552f3e23fed23e169b1bbd7c4ed489cc0da3b45028cd14de7fd6d9b0865ee9a

    SHA512

    8849f300b2c3a312170ee8cf0160a07d4c207a3098fb859570c9f42a3f251ed3b8e6acf19998dea69f30fc3603cb572bbbb0ff87bf676c4584c91c0eb8e18f6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43b50ce874c8b191f71898d07b22f865

    SHA1

    689d887b06f974f8f4cbc140602927a8f5f6544a

    SHA256

    423913141e99c927986a7005fd68d1cd1a5b71a17b965f9984c3375e0d5dc170

    SHA512

    49a0b2f549a4e0431e2d6bbb63b6141a86301081c673c7fcac0a28beb8a1207f08f7b42da040fdc4d89d843839a1af65b98856a52dd47e9e1fdcfd9742c5f480

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d84ceedf232ae75a01407d4bc42e28aa

    SHA1

    93d2843ae10d640c2cb30e146fa94a038bb961c3

    SHA256

    1f3c85e2f7e189d2afde9fc3c4b0ecb54aa2ebc3f0ef9a93726c887eb3178406

    SHA512

    b2ac67fc307ad2252541fc08a964b0f9f12af6a2f46960f7bd6e13327bfbf05e0007c3af18332b2f16e6e64e37c7d1746a196ba8f10551c6a498cbc2349edc0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e16ed686a9f20fb91bbd73061e5938f

    SHA1

    8d2471c05288178ed77b5459eeaa9362f1fd4cf7

    SHA256

    02572e0c6bf47364c9e6b067f06aa0cae7d0f0a9bd5902750b4be113ea294de1

    SHA512

    0e528a7d6771f1f8368eed1bd5afe2f5a7ed8b079ff72d19437ff68185b84a8f096f30fe0d203a3768f0c62916180051cf59a29e0ed49360c50ef36172f8e23c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e4bcf9df6e3e337c28f421756b68e257

    SHA1

    d2c30a396911a3c4c5a6f49a8921487c055083e4

    SHA256

    c395a24d70903be2478ed9452349e70bdfd92b22d26b21a91787a987ea114f8f

    SHA512

    30f8efdf5df569986ef2143f01b04008226850011cc98eed9db10b8f7e5035634d4b76701141efb93bc8281efeb4430dd03c4121b42e6604aa990b5fc71ce36b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    25a0e84213caaeeb243ed91a9e50df2e

    SHA1

    ee68378d7cfd708e84b3290803376a17158e6da1

    SHA256

    8ffe8e839e05cfbfc8bf71ca0f4c862790e46d0d23c28566c76eb2e823b370df

    SHA512

    c134a594a14ef5ae9d514e1846112664ed09567a6aeee040f9a66b8a3039d68175d122f78e4bf9f5524194b454352a4822c4de40ebf88a7953121151e7aa7b41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f012552da7b41552971aa3ce74248d1

    SHA1

    d8f9f34bc783134ef6d350928287f8c667998b50

    SHA256

    a6c21a9a44f22e9827fe8ac75657751a9a7a6697f154d0421602c451be357cdb

    SHA512

    cf4eb9bc351b13f4f16395307c7a835f77cf4e39057006c0183283891a405b19a75131a3eaee29e1c27df9b0ad726d9f07e805bfbb5660f9da99a890cfdbebbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d1099aacb523a8f38f88dc957af73256

    SHA1

    b132bd1235ec66c41c07cdb91d3a9ec25de5c579

    SHA256

    a6ad75cb95a6622d76cc430a714a664775d1c32f1593af847d6ac6cbe168b0d5

    SHA512

    9988725c826e1bf18ec7c0698090cf95aaec2e8d3ebe3b08a59f6c78f706cd51de9ec1d1fc3f9de2b4f31aef405ea6abea6506e1769c295424e07809de008b05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e68bebf0d94388d1bfc8f3cce37b4d4f

    SHA1

    045810ae67b0b39529f7f2406a610c557cc45b11

    SHA256

    84b87a0f773a86c42422499dcdab4e10a4ddd0cea0db14797eaa3004e85c268d

    SHA512

    3cd4af294cf7506ce2d121544217a6831b60c673f34e874fd037aafed1e1f919f59ce7cb05134cec1abc23c079b848bc4e691e8b9069fa496d621119722d910f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e36f6f3c3325a2f47beefab0fef5a66

    SHA1

    58632ba7b17fbf7884236c244ddec51af70af138

    SHA256

    89ce930c9a5850331e16d73912895cf8318da84150e9d7eae6e61cbc1f04b445

    SHA512

    1af4fffb472527a4218ed3c371d55d3faffb850256db0945dd34d37e3efd589de974ad28a05f1d14062ee4a0b90c909aa388030a86addfaca252f3dc755d1e69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ac07867e811e71b9ec5627bff5bf271

    SHA1

    0226d857e40aceccc1e726f8dc6edce865f42203

    SHA256

    e44bbc38d166e5f69f32a56658857e89010f56ded9b173952f1a36ea12cd5ab5

    SHA512

    2b3ebdb6d540b53343e770d4b1255870881a902fa29e79d9cfa977019e5faf8c5e063ad490dc733697fd0ce18517fe7ebfe2af63bfb8af1ceec41e974355248d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    382215a2844923dcf00c171198ba0ec7

    SHA1

    453ccdf3b68ad6e099ea195d6f717927e0fc03b4

    SHA256

    2f5a21370a7ef689dd60183270d8e6d67284df5ce04ee021c67e561f289de4e8

    SHA512

    c6267a173f9c6f99c500a0116c91152e9372f90daf00487acd6c7dc3b960f8e650d9775a9aec16f9f22fe570f841000e0b9b4cfee996cc03d1d76b06934ad032

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da405fe2d197a30ad3e724c63af276ff

    SHA1

    f9c5c79a90c3b8d5cb136a08ed674457d9bbf1da

    SHA256

    c564c3fc54526aca51c5ca678004b2694010fa75afdd88643124725cfbf48462

    SHA512

    e7c02c29f412b215e3ccbc61cd0dc7967b0ba4a1dab18938eb0fd61c75e39fc3e3b5e5dbfc86ed9f6c48fe1572fad3f9ff609edb28f8bd41555f45ae807765bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f655e545898703779240d7932aeb2b7d

    SHA1

    1c6abb5dfddd5c51ff966a06400b1f0073a84b13

    SHA256

    470edf79dc1e77e4317d65093c1a721f9229d57e5630e168a1e6e45416b90d44

    SHA512

    2f275ffb31d4ade6bd14baa6101ddc7154ed3db3cbe339087e358acb15ffc2279f1824cd9f6535ed0fcae16f80996a71f6708b296aa09447b1a0b5f4e074095b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b82079ee6711798891c110d18f3c70db

    SHA1

    6ec2c15dcfa9182f0a1c01bbcb3287e025be4cdc

    SHA256

    4ca673ddc4b0f25393e3deeaf8d129aa38d418b41987fb40e8fb5763de4913ad

    SHA512

    3429272c05ff4d2429c7debda6c81e06232da62af07f92e92b251c9d0d23a1d98efd0f604375c97eb09f276d272b3823782562d32c7821dc71474ed80dd8ae08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f871c9e755135eb3f2344676434b43eb

    SHA1

    4e7c954a1b547a9b8aee1221e40ce3a15d71b764

    SHA256

    104801b729b827b8aeeb6d60d48ced613f4e70ba157c93f917c2c282a2be6c89

    SHA512

    68fe003af030e5f41484a1ba6771e1bb05994b25af0d4b01afb957a22618d3b47018c0e1ba65c02f019702554c7b66fba8d479dc7ea83bd66f4fd1a4276c4a25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ca98988626887cb9eb4f83ff174941f

    SHA1

    01cbda78bbf6384bc37b0967f4a17ce620a9049a

    SHA256

    12f683074e5aee4d4cd33f82c5903c90173378bc58c33e66aaf9c03dd9a64211

    SHA512

    332695b53bbda66694cac29ce6ad5302c9e7e7d19985632a90f6346dd7428dcb13a8e44b94b2da058d9278d4c5e87e50155390674905e6fa3d039f060c97ceb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    77d22c9cf0fd79c61344291bbf607274

    SHA1

    135716e07a2575d7c0765b319584687cfe650414

    SHA256

    29d11ecc64e87e2d67d10ac5b1e8a4ca999d4fca9505ab119064cbb239c964fe

    SHA512

    8621ae70b535d0ea9bd7662d59f67df4fb6da1c13f6233f74cd79f3afda3efb1f1a5f15c3a40ab2309c327318c09737d59e766a5c69c7b144f74456c61c14e8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f0126fab6e68d369957a6d2b60d4234

    SHA1

    2356c0e3e64572a2c3c6aeb79e4e0a03406f64bf

    SHA256

    9bd052d30623bd322a3afa9d230e68cde080682bf8b98471304efd8af7618fb3

    SHA512

    07de359ad7830266708c6c7a93f2b3f696a631b1e7475dd3723bece1c633a9db3451dbab9dc9af2ff68591b4da386d1581b9753e8ab1368f762a22767c0609d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2eb7ef1f35d1eb435410bde704f58e46

    SHA1

    5307e5e6523ff91d5125c4647d3d1942c4873705

    SHA256

    6703ea4a449efe311dc5539f1e61f15b3691eff06476c242d53cfb01ec749f7b

    SHA512

    6c727ce23d8c1fee90e7787172a56cb58e1bd153f848e9d0a8bc980f025f018e95962da9b8dd1d86f468ce4428b97dbaf8e657cb9550c82377ae7e8962e8d144

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b25aca15acd92c765acb9884e78de3d

    SHA1

    6a10f98a070a5898f53133f3ea0a4cc7cd1016d0

    SHA256

    3884db58470dbb74e5fea6c380a111e3112bd436f67b5b47a4cadec801541493

    SHA512

    1c9accbefc4794a9c771e00ea906e8d5dfe916fd42893f7bfbca47a2a400d14b478b1a679e00665781b7943b3bd88abcb2e7afeaaba97e299ea2ddb94ebe8dbc

  • C:\Users\Admin\AppData\Local\Temp\Cab8F67.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar9035.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b