Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    25/09/2024, 05:40

General

  • Target

    f54f7735d92f854ad132cd12b14267e9_JaffaCakes118.html

  • Size

    67KB

  • MD5

    f54f7735d92f854ad132cd12b14267e9

  • SHA1

    50bac436e4f2a4cf29e8274baa9a6e30273ba8d2

  • SHA256

    6be056b310447336b133279950a973845e5cb27871a81fd8ac221edd209e945c

  • SHA512

    e987b33cc93a0a47f86d7e1fac542229b29520af7b0c32e5c17e4d484fd267b6a5b5e4c63c5d20906992f1feff03e34d60e695059f07e0e13bd7d767e41e7079

  • SSDEEP

    1536:TXC9o/Y+NpEid8dzkHqAjM91IIISGJmowlt/TM94nhmFXSa9R19xfIionhQl1XnQ:TXzY+NpEid8dz2A9otw894nhmFXSa9RM

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f54f7735d92f854ad132cd12b14267e9_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2676
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2676 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2868

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0c7000778e6231013fb01e325b30b5fd

    SHA1

    01fafc5b7c2a79e95ab35c4a091fe2bfbae2c952

    SHA256

    978ef47e32626dbe2f4d5d53328bd03057edfa2c6ef3c8b24ea8eb7f85725e48

    SHA512

    7638b6237457a622b35660ce103b1865856f6e122866613d5232433c0c4465ddace7e2e1aa3dfd54bfaa7591d3e1a3808d1a3d3c8e7b47d25ab4f6d328b9d593

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    daddaf4b78d76b5d567a87fa20a72dc3

    SHA1

    de10d1101b1228c8fc8ff98d3919ab7ea72e6eb2

    SHA256

    e8c7322c6505147be5b798ef2d284bdef92a1143d78a0a950f132ef519d88af3

    SHA512

    21eb23b6226e92f78c8fa7072e7f7d4c50abaadfe49b794017463466146b6e86b68075ef8460d3b78216538f29a63628695ee1019a412732ffaf983938f4ed70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8425717bd2ec10e28dc0a2e4e85e5449

    SHA1

    9f67ad7c6a2b422a334148ca328e0539a9e70b49

    SHA256

    8189211be65519ccd99ba3de042ca431d2e8d32b59d5f2df0c8252c17b5b6f87

    SHA512

    8d4f59dcee1451a613345c005fa00577eef3b09f9be576860cf152ec89f32531e6f2d686327f6ad6725a2e12571f239fab3f79236b48dd483d44fceefb0c2500

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1366a08e18b80745ab683299ddd4e047

    SHA1

    12ba06eed9c169427ff0cf4f1fbb6685c623def6

    SHA256

    e74de2b2c00b79fa0e3e7db83614b9c92aa04746b779bf33f2b6043b6d993e81

    SHA512

    ad8df4766ebab1c35f2652cca7450764cf636d67cce0e1271d95d32e8242f37ffd89b53eae172df30899e378aeba0e73485dfe2c809f8005277ae28db02b52dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76fb3d72b74c3cb1966d36408ffaa926

    SHA1

    fbe51fa13fe9fd0f2fc708e352086e506ea91880

    SHA256

    edd7cf18c8924b6cc8839c7965dafc776df755445a5277cc4e83d4635882b1bd

    SHA512

    6a6877b86a3a20a1683d034cb950f33dd79308a58521fbc88ca7399f9c012d6179ef6b816e463b967e147214862cc06db6c806ce703a15bcf8acf7551d4afc13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b4e7e82d8bf421e6f7765be2569f70d

    SHA1

    6cd1b2dffedf21141907906cc0715e644b8c8f50

    SHA256

    6caf3a51fea32ffcea558f6229045879f1805aceaa2734d9853fca291f65cd3e

    SHA512

    e0dd9ff5a255e0fcd0198f8e6d84bc0361fb573682a83b16050e79e0ea0006c8d8586db3bd6bf6389cee2dd3c9efc4771065cb48af09a196cedb95d354c5a865

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    070fa50be83dae64597814a8b2f2dd63

    SHA1

    5b8eb915c6a0e33edf371e2c4cf485c01f307611

    SHA256

    a63a6f867bb9c8f8ef423956fe79d75b8ba126139db7919cf3886f8d990d1d12

    SHA512

    4d47eb56b05dfa781a25e76cf9ce799532322ab381283f597415a49dfadebc117c91def6f6d2454a043bbbe5348a4b66583cb3918df265237f0c4869f3268598

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be27ea91f307ea3c583b05067fba6382

    SHA1

    77192474e41c2d3220eb97a7a4d48948ca29f5b0

    SHA256

    0d6d95e36ab1a6efb35e4aca9b65faf6e1a291d1f8f6d92489e4b729515ab0e3

    SHA512

    3d630dcdef7937769ed7f412b8e8a7fc813acae92f414438804c17b5469750dadfd79d6d2bf9842c3d34f0f318a99abbdb7777c3391a7b5d8f15d47f294f347e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce13514d0f11663867d8a4802fff25b2

    SHA1

    2c63ae05afb79ef8146e33e921ff3996e433152f

    SHA256

    943fa2b725cfbd1935c9f67c0c7f27fe59f33776a4223aacd9d0fdf9c192b2c0

    SHA512

    f53bb58761a5a2ecc7abb0f9e13f6cf9a2f61dfb263bcb5de52bd5643b8f6c09d6bba4869a283dac3efaf1b6988d1f4ff29a6e81b30b510a3a0f15cf02d95882

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    978e28717b1ac48f56db2bd103c21173

    SHA1

    567b7092c3b05b11ed9d199ddbe429558c7ed385

    SHA256

    0457688d5f016ed7f0cf64e2433a3e8e580a2cebed84f5f47079febbec78c869

    SHA512

    ad7def40924c7e5d45367fd3e29c6ceade0f94fcec79460e5623eafbcb22a4c09e2250f62adf18229b5f016522f680bd4bf9b84c4eb07926a1372ddce66e50ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a89de006a9dbec5b904da6f02bea04ec

    SHA1

    ba242088d88e04b0103eab8f4be9c0114e14eb07

    SHA256

    d70efbc7fa518cdedb804f7ea281b5c5adb003f3ef10d045acbcfc1f613317ec

    SHA512

    d160caeea38acc1a16c62696dca99c76d8eb80739abcea171edf542bb8491cce160601c772223baa649205ee0a8d3c3e027a45812d16817810d43a91bebc7049

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3be14063da0b51507b5aa2b4bf842cb8

    SHA1

    0f39b1bd9535d2437d00b3c5ee1136070680e288

    SHA256

    ec3cbf08ab7cb50be5c968c2248cf300c4e4b25641c8bfceabdd1e05b95f802b

    SHA512

    46c6c1d37ccfe0d0ed43c27895a551c3085c55689a67b6c26e4458f8dff767ae23096944cc861b282d444bc9be863ac7b7ad7f8a6e97267a77e0e84f9599628e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9daf1f46cef91d29a9ca8045f9a6fd62

    SHA1

    76d1da6bc5f93d8912df306f927909e049cbb97f

    SHA256

    3001029dba82d5eedb07d951424a0a3b3fd12e1dd6ebf233149450942fe3ac7a

    SHA512

    57c50838a5ea6384612538421a60edc215b3de409b87de785204400c51b04653f40f95ad95580a64a31f022016b8b7d13ce6917054ccf65e1e51b78a4967e82a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c778a9b46c2d2c50b54a8c50d752459

    SHA1

    7d602b598c2fd229ee4b37bafaad33d0e1667da7

    SHA256

    6aef2aa16f4c66590f212d8935e92eff09003d0e25aa4b260996a198c1f9e516

    SHA512

    d6f83837e612ef3557841b4b2cd07c332283006a26eb8e9245e5a5509f0d76e84bac8da7fbeb5a5bfaba8a5efa116ababbc5bfb21ff44fc6e5b3c816f516651f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ad3f3da7acf27fc3269d09196c576ea

    SHA1

    61c791003986f82e0c9cbd1030ae1e163ffbedb2

    SHA256

    708cf06365293a7f754a3f4968041cc91d8cf46cb9a6f8833507fdbea2b5d2ed

    SHA512

    c42eeff5abe574700fc1d0bc94a24058a821dd4c6c2aa631a296cf837c04d0f13dbae78c8bc246f483969f79c90553596bc864baa2329a5b22d85f4283a0894d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af91d806f206242a89339f6d52ae9581

    SHA1

    827ad18ac4c68f4700cecf91c15d52cf3d895659

    SHA256

    301bc5dcab93916629ced2850f324586ea609e9169f18e8c9779fe3356852b5f

    SHA512

    e1c6f48dcc61b67b318aa247ccfb8848febdb47248aa6bcdc09c6f85f81e0aa177d4133ea19c87bdfdd059534190ec05fe9e551d4a8db68b3bcb785c5f4ab897

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    043197ee8b766194ec6bacee821edd67

    SHA1

    13c0ddac5d3536c53c08b971ef296489253168d2

    SHA256

    3ae873500e5c5892ab90015f8dfd3ee90237fd33409fece2a980aa2bdc85875e

    SHA512

    5eb8faff7f1d4f9baa2f6651b04651011cb7e739d0bc2c1d2c693631c01b5293308b9ea342afc4a586cb24e994300ad28b2a72c86a0e1ec7354e80bbdc250b2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bb3dfd81bd4f5b5283011314eae7ab5c

    SHA1

    ae34d91e73b6532c51e8f33913988d1b5e97f253

    SHA256

    2227b5186e7926a11f0d21592a51a9c389532c23b51791e1fba4fe02b8869f6a

    SHA512

    2f907ea9a210766863840c2bf85986970c6c60535b466b19262e46f9760f229df24a13fed32c71fc648f1ed84864b81716dac97a8baae7287e5a439381edc619

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    817df81bc3d90f21804fb8c63c26dfeb

    SHA1

    9cfbca04dd6987b4fe904b7fa34922c10b289756

    SHA256

    16c44119c06a24ab450036b3b90c9d41ba96e602238e4fdf6cabf05ac947a643

    SHA512

    c38845e8ab7f1c23ee3addc48a2a21c77096cae4e0c16a01c501491f6bd02e3e3bdef097e183bf18d2313d21d18a2bff577b6ade47c933eb120952d535cc214f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd8afbe695251dfb752e020994371b0a

    SHA1

    d2f18d8f2b912b2139d4b3085cc8eeeb3edf58ce

    SHA256

    b50ec5130f1ab65767e71dce3d24cb2587b11488a1d9f8303fad479307d923b0

    SHA512

    ef2aa79b3d11d88acf0b84163477efb898af0c5bec0336a53e19234e48d0b9d4cb581e7af685ec9a33022ac177b980ccb2b0897e634497e846a7e7c561f98d70

  • C:\Users\Admin\AppData\Local\Temp\CabFDB1.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarFDB4.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b