Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    21/09/2024, 15:12

General

  • Target

    f0112816da7cb9490943620b4e07c8b3_JaffaCakes118.html

  • Size

    46KB

  • MD5

    f0112816da7cb9490943620b4e07c8b3

  • SHA1

    48d4011c4e7e0037c2ec022bc3c81b6af9d1b6d0

  • SHA256

    4fdb519e12f4ec434281815a9a7a78dbb3f78c9734024bf5970e3b9c04d038a9

  • SHA512

    a6b66ad3deb49e65a102eccab2c47075a346b0394946f7e572879de92b51c2cc46d506f95eed84a8d66387c0d95dc61d1607c118f079d87de51230ee02611180

  • SSDEEP

    768:z0z9qXWplUCn1m4zeGCMel7JxjjIpl5Cxlgec3ZpzRgbrBD+51DjyYTuY2TmDIBK:QhYWplUCn1m4zeGCMel7J5jIHcxJc39V

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f0112816da7cb9490943620b4e07c8b3_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2112
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2112 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2840

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41cacb12e27dd7e5639796b2b98b61f4

    SHA1

    8c989fe38fbc55c2a9755d02e1d959fb8b9631cf

    SHA256

    31763f6ae528145ae43b6d943ae0eb571ef19e854c37b6944740e1d01cba7393

    SHA512

    1e67ae4ad889cfc7b3b9afcfb1d27d6c59bf319d5ab56a8b4dad8cce69e37fc7e1f41c4e759ad1d7bd3c94a3fcb4967888328d9a90d3f32d79c0e3085887b7ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a7d19c0569ef05312d6b1d33896405c

    SHA1

    c531b34624b60c3825a74e195128efc348064cdd

    SHA256

    30bb15c73a39e2b28dc723e22f236b89d30c322c9c695917895dfab9f52a8637

    SHA512

    c07a2b5ef11071a81ee4df1d9d03e0cdba44694f8a826bb3cf9ef90a485835dd7506b4c791976ffa587f7a495facdad9eb694e43c4f8f0867f87ef38002dccca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    81df5ae983ac00352379553c9199278f

    SHA1

    a8d6db33cf7d0476dde39b315f9eccc2e6cdd57a

    SHA256

    9d70bafcb41e6da9d0ae5a5e68dfb1b9a57455c3416f582a874de3cec2a90d3c

    SHA512

    731bc4b1ec71ebd16dd9efdf67bda036efbc17ffc27c31d5f0dcc5ede2bad6601b600e598bc603b2b48bd28aae71f3bcf097de93a68327835aff422c1667d1fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d132a45d5eec460e1216ce2ebccd67f

    SHA1

    20cf99e7d6131fd41e326772aaf204c7c57eb286

    SHA256

    868a663499204dda569536fe1bccc772c8ce3e34b1b453eb792e6a9a7a65b48c

    SHA512

    798ef086108f4ac9e5c192bee6ec687c486a3e1f0db5cf740b09d8c5a45138f561eefdc16f15de4e401bfd7b95f83004c8550f07e9dc8fdea4bd428a44761590

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1fc1b5b4f3c197412c485e5e2ae24b5

    SHA1

    4895395ff8ce91bfcf60bb68f06edc34cf413931

    SHA256

    17c68bace3030de0e780c1774567c28bb67f04fbfed0e70e494fb28e7b879d1a

    SHA512

    4f4baa4d83aa305562c48d44143a15e5d1f93817f66e3d5d0bede74b69e67ff86aceef3f8bdc71cb427679e0693554d8a10323885feeae52d4fad10f289601f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    40c13cb6e0b95275fb70378558b0dedf

    SHA1

    f0a74b50ad92506bae38c69f7759618c6fd1cd3d

    SHA256

    710148650b373fd197124cfebaab07453bbc6dccd1e03188af196c5c12b44b33

    SHA512

    d04d3127880b4ccfb25e203e7fe2981fce92daca21af329479ff791d2d19f2de747f6ac5dd92ac2be8556d31b6c5de4ec3efe20732fef9f308d599700bd45a70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1ad685d4ca3123f597265c7de2b4f9a

    SHA1

    736c1d5a16ddd4855c7747c5c4549c9eff5c72c4

    SHA256

    09a918f417cfcb8dd7aaa7eee8fd9e631b739c67e5344975614ee5a0e691532b

    SHA512

    abcab10bd18f68fe45a76ab27b0dc8a660794ae1a8684845c750f95f68af6011563f3c8ca89024ac66f9e564643ac10e29fadd5b5d12b164f08a9595ea063b61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    51a8f916ba830523aad45f6cc253ba73

    SHA1

    0375f246b44e95dccd1c975fa0d624da71dfc91e

    SHA256

    aebb9c218ed7c2e5584c5f80d99c9538b41b76cfe992ba9140b98ae76ec439ba

    SHA512

    0e18b9f05ab98c809d77e58afabefe4f47bd4c64eb5a4547863e44d89cddc1fe47edf674ed49d549f15e70d4c83d1f4e3cf9169f091863e008473ed80fb3af0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    20cb644bf183989d108e04973bccdc82

    SHA1

    a96cafb2ee03ddc7a2cd8b31092ac298f30354f4

    SHA256

    98a6f04cfa32022470571ef4d23ec7ecac2224b3526dccdefd7f1f6d1ce6870d

    SHA512

    2e96f664d8b6c24121c6443f30242e2f4966fee571b7ffb9c0c40d96aade7f2a9c8151c30430c6afd4da209c8c96834804dc462e7227ff198aadf9d1efa8ee59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3cfb0016f676b8af32dca05bdae5c4d

    SHA1

    2cb7281dea1ae0004b77c65a8f18b4180e6fcf32

    SHA256

    73b34d869f67b996f365914cb420af4d26c8185b4ca24cc29d470c630264d6cd

    SHA512

    47d655cb685c46e7dcb9135a0f9726806a7223d698dc7591077eb0756eb7b6b2b143150f9c94b862662f431b3777f2d389176991e80f866aa0622488abb4c5a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    113e30298a5c96cef7f6b46bfde7f56b

    SHA1

    69da8a0b5c838c74d3bd69613b0875afa93b75bc

    SHA256

    0891fa63a0f70fc2a3d33ed19d9bd2eaa2e2f8203360befd604f577de9d63745

    SHA512

    c6f1249fe62191a4091c5dec1ac318e6f4308bf4b1af7dbfba0c4a569cbc8ebde8f505dcdb84a9dfb989f266453d0038b0b7be0f0e91f44bbfea81dd8f219af5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49dd6b1feacc6d3cceb803c4dcc8b4c0

    SHA1

    e60c6fbdb84583e8fdbd88ca2c9df7117076d312

    SHA256

    61081bbae5b96a85ee9bdc3b5df68b3c030735406f5df1128cf775bde225c322

    SHA512

    46f923d52f9644acccb3e0e1db4985e844250da396b5113855bf1026959bcd9764fb37e2c8b33abf168e7dd926befba1bfcf84d7852ced4ec16e9656176708ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b93d9917f1ff3ecfc052073d58a5f4b

    SHA1

    5ae1171128eb35a00365eb233706b41b882bbe87

    SHA256

    7db3a22c0fb6f406724bd4d938405177cc29080389dae160ed583a52cf7c26df

    SHA512

    a550e8c42b29c65c725f227c7c97cf7c779c6027f7a4aaac656f37af1db5f12483d30644588c622e3f7773f49b6b44521714810388909c7ca0054b17310ab54c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b217613ee8698e547e921ec41179332e

    SHA1

    b2c1ecda592d7606451e5d1166bd5bb577347128

    SHA256

    29fb9f8bfeda39efe08817195abc77313fea06ffda9d12b778762095ab9d5cac

    SHA512

    21e0c5e44722524a4891678003355b7a49fa47470c090311cdabcf761f219abb12f2c2d0b49dbf68307d4204d72851d94acc66ba91712cf0e8ea311c3c260e3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f27af07a59519996710705773ab60653

    SHA1

    18ced46b2f3a1f910db7bac4cd6ba2b6afc08497

    SHA256

    921c63dfa180390cbe184fd84a6d2b0dac2121fa4544000983d24a4f783986d2

    SHA512

    8d201b4a6d80279dcc283af80c73f51d153e1fd9b436983f974406a9376243dda02e9359e000d62a548dc1c201b54b41bdd885a473f60b788ed5b9f8fe2233ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    30ed3b56537458098a831cb84b802ae3

    SHA1

    dd26da2e21a9cf0c0a4617ca10a5d8aa9ee9df6a

    SHA256

    29170b76273c0dd2ebc33623edbc1ed1804b74bc1d7b25fed5f068add0a9e95f

    SHA512

    7f3a32b65095167509eec1088362ec896b1f68f21a1c5ae6c3f7b49ea5c273a5e0317aed1b9f73a944d4caf49f3627ed84ddc155f06d94e89ed88aa17663115c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4cab53d31404904042ed0d87ecd8d8f9

    SHA1

    cfb92f65363c36a7d1e3220eb31fe813f4994610

    SHA256

    502291085c480079cda769b41030e4e1facbc247dccac2efecd3863fcafe47ec

    SHA512

    9a241972e8a0979a9a01169ef8030b1f00ea32d4a2ce1efe8aedbc51b205a25aa6cb82c88398210860fa0d4bf1d9141a42c92d69331d73b3a14adf897da03bf5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5ad39e259c431c45b28b798af6c1f6b

    SHA1

    ee884199cc77706a24f3ae095476ea3736654018

    SHA256

    3666b54bf7f66c7763df7a3a58a2701e2706e558f1f6b22a105b1da213286b42

    SHA512

    af5ede870973c0a0d3c28c63e4f7fa44295b44072733605161ae51936278c1d521822f02cd82d8d9e08bed9261e8d28028d0e1b9b043c69b4051787b5c21e0c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3565140aeff5cb33acf76e9910e82f9

    SHA1

    c1c160b1f75c680638ab32ecbd0a51b0b3b3bd09

    SHA256

    396c1bc4c4566bf643d78226c8e52ca8fdc41db2c4c98900cdf009a35f48fd80

    SHA512

    594c0ac38ffb02df37dd16be798fa018ff77554f2d43910b2f7cd13efbfb501b6f2d50a3e1b80c34610960f489ef2e9627cf863fe875b026ee953e771920971b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f630072318fe1daae8f8f658cddae85

    SHA1

    b5ab6d2a13157f920aed8dec509d6fea39fe3dbe

    SHA256

    02bc9c313bae81f101003effddfd93fce47bf2c48eda122ab243d93cabc25422

    SHA512

    fe502b0fab7b55b349176bd95c4ae12f510cd5971fb2f2447f5334e1305e8f15c749935f855e56275aaa79ce65e1e291d8572ebd8d1365502d0c1fbdc0e3409e

  • C:\Users\Admin\AppData\Local\Temp\Cab2751.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar2752.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b