Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    25/09/2024, 06:11

General

  • Target

    f55e1d69279900cddcb8b88c10d05c5c_JaffaCakes118.html

  • Size

    6KB

  • MD5

    f55e1d69279900cddcb8b88c10d05c5c

  • SHA1

    6a59a36d25756cf388d1f33e60305cf0b81652d2

  • SHA256

    2dfa1d65999ebb47b1847ae1a5be46dcd2d0e99b9adff2cef4b1c03fc2a92738

  • SHA512

    90102b2daaeb8ef43c8e6959b063fc525b1b487144f9c8ee8234e84615357e78085f39ba1a91c528b1e3f0690b1d2066393cdc7b28638dff09270e9f0cd24e92

  • SSDEEP

    96:ahM3sHfw/HsXoVrADGAoNeZ+/JiG2NWhWJ3Xt5Mg8L:ahM322M454Z+/gG2NWoBtT8L

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f55e1d69279900cddcb8b88c10d05c5c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1992
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1992 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2092

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab38b0098516622ff7ba6ddba75195bc

    SHA1

    36b30a954c7865eaffa7e72c6110303faa5bb9a2

    SHA256

    ad3c50306b718a4559ca8a4b4118e0dfec35647faa27fea901cbf9915f0dbd03

    SHA512

    cce60a9b1bb381b88bff39bbca12a4c31ae2bdc3a05a8bb9e5121d8c2d1141c936c614f0fdc145a0f2a3f47797a096ae5e38c2c72bdbf43c618bf7e89fbc5b2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c623df529f44413fc2be26fcf70562c

    SHA1

    d2896ff1f23f4ad9e59fb042c290e3e8af996b1c

    SHA256

    435e790044813f09c497c22803e0b9465366510c5bf96b35def13d8d60207eae

    SHA512

    c7040550153ecf0afb0caddf991ff49ec238cab14ed538280a201137872eb920c81ccc2b627c7de7d334b43a37ca7f2c565d27f8d40b3b351465e5ad184601f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    71d40bbc8b53b0e0f7c354ac99eb2308

    SHA1

    9e2f01e1391ac40681078ade4d0af17153bf822c

    SHA256

    ef62c323c1687caf64dd25758da1fc191aac81df68f2eba3c35f813b25111ab2

    SHA512

    40ca8e9cc528398ae1d146c1d5816eb42a30d1c6c6c4c41e195b3a376dab701498838a03d1058128e593d89337d9ec8fed4678d8ec2dbffad6af6dedc23218f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    183efbee0cf91a3937a7b4f284666473

    SHA1

    e92e565c93b2731a45242215f41de2c83013850a

    SHA256

    c37d7e0ca5661eba73ed9656d6c8fefc3307e8125584a2f962416e0d3ab39669

    SHA512

    ba22b194d0cb2798541d8b6f1c755e416c03cbfac17b5dc58d2e89c0ebb28a9c7f0aa097e899b470377d5410cf699e48954c2bbd10630dd084cb3e651611f7ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e3854ce5dbdc2eed6104ff60c1bfa118

    SHA1

    7b4939b4b91366cf99440d776eeea5d90305f58d

    SHA256

    26e51caecfdbed3fbbdb547090711ebfb163e74b10a0ba7db8132457b2b95026

    SHA512

    7bb231d9520a0398c960abc38dd2ae58189ecbfba7d429c7107eb701230b44f42ca4daa136663d238df98e08f2c444d47329eb64e7cc205f837e34e996daa3be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f88a5ba929d605fb1154848fe0fe2620

    SHA1

    9af8c01cf16662d1794e89a683f521a06561a58b

    SHA256

    4338a284df2c7448dddf5460052fdbab751f195aaf026346a78c449dc0ccac65

    SHA512

    1de706468669e1e20f67ebeb16b326c1450394ce1f7c326fbfe0df5bcbb92bb586ce45456558c64fdfcd7dc0cf4b991d12a403e0a1b34712a86554aa1f1b226c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f109c05d7b0b8f812eb705a8b6465be7

    SHA1

    2f3bebe094b26caa47ed0793dffc9c399d62f1fa

    SHA256

    01e0a66d70596116ca710b96fee82a20959df443d7ff845a215f0cfc85efa0a0

    SHA512

    327005558a0535611d44111bcea11d83768da49a47c194fc2aa57963158181c10f4019c7d5ba03ab23cb2dc1f04c2bf5b05aca09d97fbc72c681e306a023d392

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3cb30d9a58a27e5cec536ea2d444e3c3

    SHA1

    abdc0e467c7687fcc9108e683f6a4acfbb0de294

    SHA256

    89b04b6f6231133424f22ff26b77123f6eeb6aec958aaa30d8bc4f1db2ac1e5a

    SHA512

    402b7039aefe37f461e493b871617ecd19084d75e1aed2bf3a281f228d21fe6e104f035416d24c8ae3eff3ff1dae061b428a8067348a9647052316ac81e44531

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ef7ee727396c59e8f184c32863b3176

    SHA1

    3476b9baa571f395b740a6378484506898c14a26

    SHA256

    cde5aaa97dcd6cc43fc3623b1f7831733e0227cc6e503a0416ea55ff5bae8e8d

    SHA512

    094f6a9cbc55511b65d6c94085fde5e41f7ed7496757ef1a4f2372899f28e2628faa8cafd58e2e3788bd44bfd53a5bc2d99580a01443c29c5267391863df793e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a79ffc61f2413f369bff7f68f6865828

    SHA1

    bdfb63834e259f1e2679307a2f44d404c6e19d56

    SHA256

    15a7648479735a03ec3916ab1a7f691ad8cdfeecbd9af5f58bf35c4c0dbfe773

    SHA512

    16c93e29faa3bb2cab30418d181e14cd341df22f85016147bf66de3ee2791495c34da90435d8abf2a4ab21ace828e154e48a82ce17953c4b721e487b9122324f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e4c7937cb2bc9fd18f444a92b03792e

    SHA1

    1c7e04f3664a4ae5184dbacd7ce14a5e238d37de

    SHA256

    d1c97a9bfa6a2e7ed0eaa80ab1cfb7fd969298eb75f7cc8a4fef1937037884f6

    SHA512

    d77191241db6578167d3027feda94157b45432435f2d4f764e0c855862f30237cd2198dcc7fe1873db1eef77701365fd948565f8f727403d1a0abd2e2d54a801

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9980feb2c796a7ff3e60f6ceec4ab387

    SHA1

    d733be1925779e8c2b7281f904b0864b5e4f58f2

    SHA256

    821f4335c60efa97f4532feafb131d317383c21c3aefeba537128917a318bd50

    SHA512

    6c876a89f40b3d67493e999fb9897a7c3f9f0156cb95cc692c4f2760c1dd74a9a141dd3cae6c2d1301cfccd6e97c1c62031b8f843b5604824dec66120079792a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    193f0f857cf394c27eaa8613238d44ae

    SHA1

    f7befdefeadcbc2afcbabc9dc43f9c198bb0d7df

    SHA256

    20808fde777c44bdb3bb505dda214de9236f6ecd2e78cc1c8b225f38e75b7e90

    SHA512

    e73f9e6dbbe7ef148a35cc521f37f7e665432b556f20f32b99deda8b9e5fba4f7c9c5e5e5f672235ed863ba2e2d80ab7c25db8477b7cadd8ac3ca431d084261a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    947c6cb3c43000daac6032645b43391e

    SHA1

    0f39bf1d53ad7f4d239ff35038c59669c2d11439

    SHA256

    200c3fad2e50e69f8ac8bb81e9c792f08d71ecf58c89c4698bf65b755caa7150

    SHA512

    8c1adcb4695f8e313cfe94c45dcc2b29ea7a61822b43e7d634fc804cb074d106787f6abe2d2224dc53e2bdce8f8d00c596e16fc882e9b52abdb6f7bc3812e886

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6081d972472a7407eb9e0f6586e29fb6

    SHA1

    9ef80f253b89b0ec2adf856e484c0172b48aab7a

    SHA256

    3add6ad2279baf061e8701ffaf21e013845c61c4a205a9430bdc4b29adf9016d

    SHA512

    69f508d2a0f0f9ae20f4fdf82b7966506238f5da1aac59d4c218b37f57f2b0ccccdb85c5ceb8e7afaf278838d0da362e87c6aa2d812d853436f148adc705331c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c50ccd7e2715f42432e875a4ac448891

    SHA1

    8548a2f31554b6a15004c5f6b5c9d772f6e9471f

    SHA256

    fa57504684287b4a153f4e1c8a9344afda85358fb293769b4330cf8d01e0cf95

    SHA512

    7cd55376e953046526e2a59f3e19e807d830d463426aa14ec8731dba1698a4f79b1ab957ff343e0a567ac7dbaf4febf53efe71c09e2b6fd16bca72b02ae576b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0006e132943508b1bda823e881145aa1

    SHA1

    5007f166fceef0f49104c106cfa417e9e0ac7416

    SHA256

    90bc8dd001b2d7a9972cec89a04244d6ad59437dcd59de9678a7d20cb16c201d

    SHA512

    375a9c1518a8c27a32d2e618d664eaaa96861ebe5a7ce90f7107bc7cdab5abd7c479af8536d7d9db7aa86968fe702ddf419f9823b100909ff045b8e74d33230b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a75a65d536133f392da46fad6cb1ac51

    SHA1

    557f9fde875cdadb0748c8ea8ac074112ea56290

    SHA256

    95aa3766234db89f2847c24a8a32171259aa8b816992ace72ee1072826c86ffc

    SHA512

    3e7a8af05ffe73fc63d8ccc2ec3ce2b86069c515fd2ca8b969f59cdd79da4e6d5f880137799ab54d23dd64cd48fa01574a42be2a3a36a7547d6ca32c1fe06bb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98dd082da10bae019d387d8a5096f4a3

    SHA1

    7a9392bd9d78f0146881967a88bc7d215849fadc

    SHA256

    a5e1544fa757fbefd970f3d5cf043da75cc31cee934c8ef7f7a0692b1417d9ab

    SHA512

    a2aa3e1b301cc806b993b56af626869a2890a1b7b4dc0e5f4451c5fb919f74d0a76fcecbb4a28057cb896386d35f33de7743afa4594479560d311add91c6ff89

  • C:\Users\Admin\AppData\Local\Temp\CabA74A.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarA827.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b