Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    25/09/2024, 06:22

General

  • Target

    f5631c5b463cc517dade414a0c7eb249_JaffaCakes118.html

  • Size

    69KB

  • MD5

    f5631c5b463cc517dade414a0c7eb249

  • SHA1

    c26d6e57388e71ca15d6997c1bc36635fa08fa78

  • SHA256

    6684460eae704cb492bcc369ad5de91e43c53ce4c945f9448ff0e18b98d75fc4

  • SHA512

    4f744fc212c348e9e195604a93ee9738a34f9d60bc6837826d411a8ae3640cd22bf0e1244b573f8787e3fd3b288aeb5dc0d66ec37dd9a7eaf60a15a541c6e1a7

  • SSDEEP

    768:JizgcMWR3sI2PDDnd0g6sAzC0oTye1wCZkoTyMdtbBnfBgN8/lboiGhcRoQFVG8o:JH7TvNen0tbrga90hcJNnspv

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f5631c5b463cc517dade414a0c7eb249_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2192
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2192 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2404

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28d7f0f8b4e2c2a6b469b19daa88c937

    SHA1

    d6565cebc2f1ccc167474f558e582bbe22fab2e3

    SHA256

    96a41d1ec20a5bf2cac30fde47a2ee7be420121588d3c9e456d5a0b0c78ca3f2

    SHA512

    4cbc4233cbea8a54afe474eea0a9648e0d689f7166525bdd2250deb801ce38ed583dd5bf1ee26b90b6d663c650d856f33d58b0416c8dc2f03236e0e5b165ae23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    334fb83cb647560262be1146f611152c

    SHA1

    ef3c3d8e0797d97c8cfe685363a19ab4aa7a0440

    SHA256

    8847f345b642a789d3b1f0c1126f0546e3e9fedc72fa0c9fb9afb6911790aec6

    SHA512

    31a3fc0f09cbd2ef28b338223870ec5c0415c2cf40d33173ab3977612c6e64caf23686694d79d50db4080dc862433dc63004e54d303ce2db636f9ac0fa1ec4f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dcaff17d969ad3d4cbc67e53c2c64679

    SHA1

    887e9fc663e2d010af5840f6d15fc048f9ff92ac

    SHA256

    0c151516b6048dc8a7b57b429603257772f53afb6c9ddd89ab5235b8293c5dc0

    SHA512

    85a99a60f2bdcb85536d20befcbbe0324e48aff2586ba04dbe0cc9d1923d5b578cd91c1db768ba145ae5911180d622b1565a8d6c9719a46a39063c3f92b655d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ebf2c4f359a471d05b0592b97d2b344e

    SHA1

    94b2328ce4d726be7763a8afb48a5a8b41ab7202

    SHA256

    b99deb35e472a9b637be4c4fdee07d1471967dd24d5e28bd9a75d0fb3e25e814

    SHA512

    3371d245b5f2816f5935e799ad4c3f5acaa5cd5bad42f08368481b568e9c3b479c967ebd215e65090e6465f84b13e74352982d862c0ea50d10c25a62cd36ba47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    81ae343ccf52ec8d426b47f7c6b89925

    SHA1

    2d69d03dd4109dd68997fdc333fb4edf5f9d0432

    SHA256

    68f27532ef1783b3513b076637c96887614099548bc9e24da1a37b786f66b3e5

    SHA512

    dac59665010772e4ecdbf4ad34368cc7aee49ebe02f71c6f70016328b26c4f714b3914e0e6169949f1e100a6cb79a6c9bda8d25dd12f402e4c282d033ec0cda0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb698f4f05ec0a39321af02516e12d9b

    SHA1

    15ba9077825e9a7903bcc8aaf914531d12d50620

    SHA256

    a39a06dea412e1f02eb4858515c8fd064e46cc722eb7299cca73a00df03d79be

    SHA512

    fd54db604ad098af1b54742f2ea126e903a1eb8784f687a90d69cccd113743cf500fbaeda6d96afae7fe8b1d6f14d0b4fc68a1a260d902070275736b8b0cee24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e01493b0c0b6e727303f55ba604d0293

    SHA1

    eae1f58805f9b32acc743b7a948d33cb96c0a119

    SHA256

    d08946ab1b142961aa206fc40f1f9c53bfa88bd788c041eed04927d568d2052e

    SHA512

    5b217dfb795e154c04eda4131dde78cf48a9cb17456e28fea3fc563411d7065187ff7b1fb0b18fee9cecb69670d21be0b1db1c93c208988c9448a42e83c3a44a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    69f51a6de7cadd8c1ba47603dee4d372

    SHA1

    07c008537ed9b4005333fa9d26b38a57761def39

    SHA256

    c40447a45ce8a7bd4812acfe34adc20ee8f46aaee2d81da0d544325740294356

    SHA512

    68c3f19e4315acefaa8ab6a1ca911a715725b3952e400c168820e463a39d7664dae83c6e9616c0d98480a0ee36eb20de49620cab68199a1fe4793c15ff10b729

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    203cc9aea7eeef2456f106c332bbecc7

    SHA1

    f82bbbf872903dc3b8765b1d5d163bdc319b27d3

    SHA256

    dea8cdced2a6f99c98482e736f290a18d195d897ed355035d78cf6f22a3ee449

    SHA512

    57f604f3449ac38d10937a9e5b00657290dae34bc9ce492b67faec6b2bd31db2c6874de9f47894881764036fefe3d8db8b16a45bca1a30c72130561664f1b365

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5731f790d03df0f104d71c932f281bf1

    SHA1

    b0afcc15ea1dc33a98068f087f32980438aa3133

    SHA256

    b331ca854872061514f13eefbf7e0a13a6541d48b66654c1882f8ee7cdbb9ca3

    SHA512

    ebada8a61f592c45b5b57644e426f93c95e390529c30dff1fd14e81e4446d7bdf85d4f337c2dd9665c00790f345e70fc52a4bb8a04c37f666918325ea5d7ba07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ffaa6ef19c7ccd3e623759f86f62773

    SHA1

    7378da99ed8ae4506afef2f06fdc822238f85279

    SHA256

    96c15f289679cda6eb242f313311cdf1b0950a8232b2f1c3782994d64041cd63

    SHA512

    fcd0a65fb49783c131aff7ee0d12a65176a0abdcc1a84429fdca9ae5c93a637ef49b396511d1152b9cf81ade381ec80ece033d6c999d207b85e5beeb1365ead5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    865e410a60be6b184456d6142c92bec5

    SHA1

    2a6c45e90e252abfe01c799fc93887143364f893

    SHA256

    441c7abccfe357337391038f67e6f609f7c29ab0821aaeff72b6942a601617e7

    SHA512

    47a8dd5116904c79997acc022252c56762ea398685bdf5487f13f662220f514c360f28439bb12844b1feb4ff62b273e84688aa0035124d1090acc7cb3a0af4f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87a83726b48d161d5528dc6f2e641f2a

    SHA1

    cf8cdd5d26848b9a45db7ccb20b9801770580d33

    SHA256

    3dd17ab8469cbe3897a372ab7827f1a3a90f60f59037691c284b1dfd25375679

    SHA512

    fe9137aeb03274776f1d6b5cb3e9ac2e0f98433ace2db0180e57916035c65e43de4a6a9de59cd1478a613c54b039764fdd71bd21139f4fcadbf6bd44e64a11b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de22d613fd7d5e00de6f9078bdf8a895

    SHA1

    8c9eb65d1f4acb5c366ad21cbddd42fefc5b1d3d

    SHA256

    d048fac27b0ff4bbe27d3cdfbb1aded02afddb81c26691bb2c41665096fbbf2b

    SHA512

    7e60840e9621fe3b828b60745f3503e13c1c6cd69783450427d76e870bd01346fd12fa0a2615b8a20c2cea87c5332155bd044b5cc042948294b6d59ee4e24ab5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b7634d4bfed08ab50ddb33288e84076

    SHA1

    f81088ce76a91085543b0f63b00b07bd75b5d57d

    SHA256

    8ea6679a05851a613a9f07990552360d241ae45778dca85581a1de800fc954b8

    SHA512

    da27d618dea47fa22937f7c3e506714b059d356da7fe4f3c64c12e90d0a2d983a2a7c5932494da5abff92359c30a96e709ee6bffcf73a5201cdf3e1a2428b96d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fee176c2d09cd48584fffb26fcc094a6

    SHA1

    4dd73176f36caf8d6e07d870befbbea0f1bf4365

    SHA256

    9496fa160ade3ae253e433d43ca048946b9387ae51821d31bd1ca9638cff1918

    SHA512

    409626c0dfd6b960e002e8d212b6985ad9a08254d66b2186dc6876950a7d330504301dd89cee4bd194b8a0f4ff607f68fd2b8431525988f660f4c37e55ab7609

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    984db023014a6945b56db508d74c6d2d

    SHA1

    2905cf818312734e351944540f72c0ef4ad71c56

    SHA256

    e29fdfc04c692353f7448f7824b9a8060ad9e321fcfdcb158879ec4ba9ebcb1d

    SHA512

    b30fb96f5547e6a225e94a235f601ba645215ff317c07cae7758e1060decabb53b6d9867b9f20113a851dbaeaeae5ccd2ef9c1c5e8bf3ae0fb4fdf201e12f5a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6fdf57a60fa5c9153be3392776b3bad7

    SHA1

    1e45f44c12a5868a06147266969a43a0c64c8e5b

    SHA256

    108638e08f99eb4de4b382f9eb87421b948cdfb705613ee78014e0cc4f366129

    SHA512

    45362a93602205d8f9d394476ed694687f2dce8fc803457c955d31112c81e952905c329a34fea32cecb296e7540538319e1ad3aa095286b6134a73f2dbe769e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c30b8fb5e18df05d7a22ca27efe9f080

    SHA1

    1aebd05d3fb2edfc199b9f142980d31a4e63ef7b

    SHA256

    bcdd7ba5fa05a46f8f6e367565e5be863085d3b99f8cd66ffcd6faaf1bda8d31

    SHA512

    420034aebbb867c3b6002be4c1dc64c1e63b4d00535f2d10cec303074bd34982ab098cf59b57644403ebfe972a38c284ac3e17e91d5e2d35330ba94fd04c3279

  • C:\Users\Admin\AppData\Local\Temp\CabAE88.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarAF1A.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b