Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    21/09/2024, 21:23

General

  • Target

    f0a378ac471a4a0c90b2df100d17c439_JaffaCakes118.html

  • Size

    3KB

  • MD5

    f0a378ac471a4a0c90b2df100d17c439

  • SHA1

    b495ce12c3b56a558ef4e167cf7c932105142afa

  • SHA256

    5eb1c44d0fd234622e6bfd9dcdeda61f4f1fcfc9c3528e3f62d382a5a3c8d255

  • SHA512

    3d7e9747018ab39176154dd414636892978ecfbc87f81802af45c96236795228405fb593f7abf057eabbbb1c806bfbd298a61dca560a6fc6536b8936163d99dd

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f0a378ac471a4a0c90b2df100d17c439_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1792
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1792 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2384

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0672430c3f3cc0f692f3ffd361fc8709

    SHA1

    874e4d1fc3fcba803b90c87bc6e0e05b8afb9e1a

    SHA256

    607f66000a3dd15dcb6d5f36cbd84d50c294e4c3a09e794c2dcb0a28d956879d

    SHA512

    0bd261c87d02e838287cd2992fcbea2e2d781ec9b6de828785641cda15bce18c02659ad79c5a5fd79d3d77a1d929faabb4369b4960ad1e63c637284ff8c32786

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c5fb5935c9079db08359ab97c9aa2e0

    SHA1

    fc046814e0d669998e48a8b0fdfa2d54b8f4fe68

    SHA256

    58d0fa796bbc69f9bc04a7335650308dde0a339420e7bc5bfc9e50275f80b27c

    SHA512

    bba7b39090ce29aa0646f7249679a64b9b00422493df6a859cd72738a11f6e04410421650bf496a34d1e3c71660a9e2b8bfdb267745a52f2132b7e5dc32444ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e0ff290322edf05d56561c1c3db4eb1

    SHA1

    7d1a16395511482ad0fc0aa57541290ae2795a48

    SHA256

    87936db18a33efaaec9eaa29865a85078d8299fa45671ec1d9bc02a2a2a2670c

    SHA512

    7a395bcff6ed75d4dc616df2b7f3e0fc1220c946c8ce218629906bb5a0479fe3b0482bd672343d6a4d66db4ede69081d7c48fc9bba6764cb8bc50d6ded63907b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b9a15ad03c5c789c42630f7cceae4ac6

    SHA1

    1e210a034dff7b7162d2ecf77025d34def6f21f1

    SHA256

    35ecb3acea8f4f414e6e7f4e3db809e7d33c5f38f80f38562a8c1cbd7341745d

    SHA512

    c32fb0623a81390a43a8cd03a4ffbd5a1518a61d2696801ebcf9f051453dcc88ad7c28cf61940a621a577a31ce3666813038ce1423712c327425a262488a1e19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    efbae09fdb481f2d8e9c48d199e258e4

    SHA1

    0be8433706a96c7143a762ae1fb805dd1e3a17bc

    SHA256

    b15de2cf2a602acafb685a98dc026f3179b3a1b0c9b8d64c2fe9f733bf0cf844

    SHA512

    8a4a27e29443b343a4ce0fa9c82a375531e2fbbf0e8dcc2c5944ed867c6dad72620e57c0f9c9dbb6f8d8becaef30e75717a33049021568ced87adb73e4fd28b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dedaa033a6987bf24448b53d09321474

    SHA1

    2c673bfa922dd06771913b10fd711450f0c38ec4

    SHA256

    0a508b4701d16a9bb0a614e9d2852ba41748f74be701cf090eef28e537f64419

    SHA512

    d360f098659b385342cca51b20d5aaae554510c5d6c6e301f2d2d0ad053317ec9bc9fa0556c6c2babb79468c18f5cd246439d14908c694b500ea0ed834893995

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea80a21b68ca39ff186e6c1c1320a5df

    SHA1

    58cf51963cc6995ad8fcc8a4ae7f353cde13404c

    SHA256

    e8d5bbf97741ca08ad261c46e446dfb28041d9cbee9585de848233562e7e96da

    SHA512

    33f3745a6073329c69b7e6a5bec090bddbd575a60192078289f3b3962d8930fe04757d7ebff504b79a12e8790983cb5e8a6221373a7a41cb39d92e95c731576e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c467eb40fdffcc5f483ea9141624a796

    SHA1

    37db85d43fb44b7776c3dd53b93b370649eb78e7

    SHA256

    6b907daaf335c6aa8409eb094840988b00a363e09000629c7a56fdb46d182239

    SHA512

    60c3f0551fbaa2fee01388ed56b2fb4259c19c93bc47689bfc0c541e7ba2ff0789027e96017b50427b304965be0b76de23fbde30ad542f5f92a2d943e65a3c1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c751f778d33b1bbddf4f5f6e8fb87b7c

    SHA1

    58fe11cfd913fb84e08f35ff2609056decbb075c

    SHA256

    7fa31f1bf789ddf07b4f7d842c9fe289d18eecfd4d49596e88a73d5ad59b6c03

    SHA512

    f340f35bfdddb640b87c271d59261d20c9ae778361a76b7ada0c1a14656dbb8f4cc49d47bf6a0ef8b5776e4a0788e2c8e91592940b4e91ea1f1106736590a715

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    332eaf84bee2106c200af34688c85f41

    SHA1

    c5501109d501b41e968204251eb5359c2e6c2f70

    SHA256

    f764cf7123ee24a2bf5f0d881fd0ec3a6c97b0ea7495e69014d317d61109c631

    SHA512

    8cec0932f093b3fe88957c26f4d9870dfa2cd2668e1c583ee6df8d349a4f6e12a4d99e016068903bba185a0a970b3bd9c897e57c78adb5a3961ccce8a2b835d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ff2ef74e2003b5e09a4d09511656551

    SHA1

    9a435374314279bf75742cace143f07c9c705340

    SHA256

    6d7f54a1c75499ce314f7a7e600570ea2f129432350d238088f042aa61b1c944

    SHA512

    c06e03c0b5159354879056902af7fbff98ae7d629aca0de9283514cc8ec4e60cacc0a87ba0a8ffbe8e822700551806808788af1a480f7443b9a61ea8b1aa3f56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a99bdf965e4c377eb3b5fe1b4ba8978

    SHA1

    399782eae3b7e5c71362086d77dcf3836c664747

    SHA256

    2bec41a63c52b17b6082401108b67c7b21210b0cc3dc73895ea567c0b99a58b6

    SHA512

    faaea003b1230ef72ee5ab453a006c34c47a70a828487638b51c7d468b1a2a136baf0e3d03ce5b4ccc58a824ed9338c4033e4bdf1f94c0dd80a80d80cb90c45c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37754b872a7eca1f33be5dde8b934e14

    SHA1

    bac6e8e5aa108cd9c54a952d6ab778fac2bf6694

    SHA256

    09c1fb30029d074a4447d144615949db3eeda46884dacfe546ccd7b7a5db904b

    SHA512

    38c6f059beabf262e7345415bdaf0facb8c7ccfe0874d86e111e1bf7784fadda054b74ff2a0b325a2ae568cdae7b7efb8ae2f03d4787fc2884c237d7dd2525b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    59217c1a66603c7768c79dc3c33380f6

    SHA1

    badfeeaef62568ef3c42a9b85d6a997986a7e09c

    SHA256

    9c8f9fef9ebd37cc076a155d2e17b572dd5776e029a979a81e2ef9a018ce5b10

    SHA512

    9467c0482da77d94d97f223f5c8f7938c0db2439c0184919178695d624d9e8a512bcf744dd9f4f0e02559cea748771b94b12a2db49b875b12816046af5e435b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f6f93dca3e6768afef31e8de6d27ba08

    SHA1

    b8ac85a16369f8c438ab625677218d4861b79fcf

    SHA256

    b3e4351356976d8253cf7be1de66284efa2316197fa7ccb690540e06ac33c4cb

    SHA512

    88ce196a28d9972fac281b7477d42985e4b745977ca724ff55a72f4143e1fda33d7c02af5c7325e4f9bfa532d94f495f0690c7d2a448372ce18e738e505d3192

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c1bd574f1bb2cdfb2f2afb79677e7d79

    SHA1

    cd9fb7dfdfffafdad7b30199cada159c8b64adda

    SHA256

    02c2555a44056241f4ae802aca0951246cee14be34503a85523dca51a039d4e8

    SHA512

    2c9465622c1cce19a942c7ea948d68c0e31460298db9e56cad25cab22a281c7ebc1e42e3992734c3f54c309cc3b9e990dd9b74bdc7ae0d3ebdc94fa457919511

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a55063e719f8e350cf08b56b03bba472

    SHA1

    849f775bed3ff3924b68d88c09d5fdb69b40afc8

    SHA256

    ff5a8c59a91c21e74b7eee5bf4364b8d2492125c7bb45f2c1a832d0ccb518c28

    SHA512

    3cf16cd5791d9e99d02e92219e020b87c046f68539ba948c63e986b0778bdac019b43922824ab1d962c6d2992e89310eb92b5bca84df7011d00fe0ece187b3c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f3ee27637a9ca67182eb8453f3f7460

    SHA1

    d2e2158278ae314fa74074045f3d18c12a99e8b8

    SHA256

    9b7efbfb50c0ff55cea208d6b6ab1668febd0586208df7a5781271b5a315b63d

    SHA512

    5f05b090bc1440bb99edb6824b28f75b459d69db6c3acea042b764cdb8f4d780a3a8906c3a82c636eb2667bf40feb56a317203a6bc84a16f4323fa101d3dd1a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    64cdf77ec5e4437e633b4b648e5054f3

    SHA1

    13316f63bfbdec250fced9992791ae2c0a940fe6

    SHA256

    421116f0300c6940babd46cf35479120e6b4be4c5d905da9c6d1654cf4b1f770

    SHA512

    fc347d47fc48ccb16c21c175562adfb0d92c0dc3b45cfb899b430bb4fb42304766b2f8f7608453b3653279d625cdc47515283ea407e60cd3877f81d2ddf738e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    77572eb9c48dc6741047e32bceaf9a96

    SHA1

    8048532a78431fd3bfa9a16b630e75f428f40114

    SHA256

    9b7b337b2aca7123d72ccd0ba4b1c355cb8add401f1d6bc90ca625731bd47a40

    SHA512

    b4611215f427466abdac41842c2aed70a3515fb65aff41bbf8f0c72d19fab97406b387d7b6c41b992373ce5dd5a8b9a7b0b001108735ed5dbfd2f4a7fdc1cae4

  • C:\Users\Admin\AppData\Local\Temp\CabC738.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarC7E7.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b