Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    25/09/2024, 07:39

General

  • Target

    f5842f70653264a79c0b295183e151db_JaffaCakes118.html

  • Size

    2KB

  • MD5

    f5842f70653264a79c0b295183e151db

  • SHA1

    c791834d072e2bb0bb4a51c8126280c608587071

  • SHA256

    9f7f7a03cce4fe8296c8e889fe170a264534fbf427d273dcb2e0feeb46466c12

  • SHA512

    6e38289f1ac1bb696be267ebfd765e912bc0386c61e77de80f2697b2edc05948cb9884fea319dedb486d3410768b5339b417d28f909179e36888587932678c5a

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f5842f70653264a79c0b295183e151db_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1892
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1892 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2700

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f1475861d2db3259fc3b0e1b65631ac

    SHA1

    9f9cd2deefb2099b08ff283dbe3588436aeda27e

    SHA256

    634f7859afb9c5c9b14fee822ea0bc59ed1f99e092efee5df5754d6db16264b2

    SHA512

    63cf92fee2f11db087b2693f71f1dea575a012f3cbbc280a2f678303bd7954cf8749069dd087726880d53209881b586417801d8a41f556713f2ba2b84cb55321

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1540d9c36bd2d5579230fcbbd2c9ae99

    SHA1

    5541c0508cad1a32407f8da3b15750094f2a76a4

    SHA256

    da18c5c892ccb75d6e4fef21471f311cfb3e3fcc3391feb59094f3f81b4716bc

    SHA512

    51643cae525bd408c3ba336461bdc7f6c8dad4725148f1bfc336e230cee5cea59d476ebcd343e3f1da9d90a4033d29a8329eb36b707d6fbc0af1269993e14ddd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4afa12ae6dcf832f2a06f957a45cb1f

    SHA1

    79697fac279d8e90e151f21ce4f045696530cd7e

    SHA256

    cf153604774030ce296da49d4410fa9e2a19760f5daae24ed6244de12daa1450

    SHA512

    bedf105c4e5d9f7aef75a0539480b57ec8aedaf62d8681269ec27ff1f06b6e26a3e61847086420b54a7a59d917ab800b431b96d95261fee18ab7244bb6ccabca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff50ccda7b5046a3033204c76bcb2548

    SHA1

    bd1ee93da4ec0bbe85886ffb1119779a78f6c227

    SHA256

    fc2ca664a26158d2580361927af81d970cfec830b6c247d236d0038551f05ff2

    SHA512

    1a5f28e42235aafeedf5f0209ecad962ceaf1c3b18e038e51d2650e90eb7fe5686ae637c3e0c0d29c0cc7af2f7fce411db23bbc876afd90c7697565d5b650302

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    88096d4172d311033438158c4d98dd95

    SHA1

    8773f1cec193a2935b9e89337cc139388e37d44f

    SHA256

    feac69812b9bdccd8299e9eb80cae7ae6cebde00bc5d47542627d3ba148a38ac

    SHA512

    a8a2af3cd30c8a135dd42fae336e1f39aeecc55c1709c88d93ee3af35889130ea69e072d75e0b47feb3f3ad5256f8910a593b200efa0b2780d5abfcc032e1763

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    34b9b8dc0331bf43b76866b718f2627d

    SHA1

    1da6af6471b53895dee86136a2c4e5bb21db493d

    SHA256

    72f5a595f6827a7d39f5b4a5f59afe3e30f6672d582673488b7b6e2c931fb41b

    SHA512

    ad6db1593e3bc990d73297d81e618b63720ff8ca8c0ea19616e5dfd65f0f0f28b4000e0086d0cfdd80d41be78b1d1cec90e657907681de4d7981d0a9f3acf0d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d076039946d1593bf44367f510547f76

    SHA1

    79ed81b205515c2b1e8dd0059bc8e813df8596a2

    SHA256

    52fa32a35710c420230a68dd5d3ab7083ced1f044ba11e54093f662d692db29d

    SHA512

    cbffec6d603269ca3cbb888d67fecb52c047bc9479f6d973390ad469cc748afd4fefa7b2306b85735d8f1b77ba544b68ed9cae8be433843d566f11a00548a7c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e0fcbe6f74743cae7f03005e968683b

    SHA1

    73e3b4dca72e820ff96670e79440a9579a51281e

    SHA256

    73bcd3094196a08e05ef509027276e6060a21edba55fa40b81bb2fb919016897

    SHA512

    9be4e63e724981b304c4c9abbf948aa464aebc58d0c49407cd26f5214847fa7266e781678421773ee47e247904ce84b045f3604e32b813a4a1a211427b0e0fbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a8b8dc99d5b09850acfe7e87180ab5f5

    SHA1

    c9d2517f084de62ba4f1a0c4f4bc2b2d32de0085

    SHA256

    1026ce1a9043328c822d626fd4b0248239c78ba926617461084fe46881cc7cb7

    SHA512

    b9600e1a74b94efcef3ce271e85becfbf5169619849a885325fd767f211ca1adb42cd9c722fdb707e19aba596500e7922f673d93d888bf2ad2b7c98b3d61bee6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    74f8d60bfeffa68f372c52cac2a8b2ee

    SHA1

    10de316360fb313afaa7e2af939a42eba47a87d3

    SHA256

    acaa2ed311569fca1205ff42c371945730dcc67cf6ab0a8129c98f0d4a8b21ed

    SHA512

    7a189d7e9080b578848ec162d274f4ca6e7a31d244fbdc948ffe9b4bd68d5acd9b713fe5d216e7fa319f2fb4bca87937401971428a1396a71fc2f2cebb67e33e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2c01d14ddbe09dd166ea2f4b385668b

    SHA1

    2f91c2aa12fc8f12a7fa369691674dc1ff1dc80b

    SHA256

    6a04ea4cad08b588a8eb48fb32a46cb63f2c4df1512aac3777eab886d4af2328

    SHA512

    83451cf92b9cd07b2adc9c6dd7931fc56d819ebe81f10897327ea31876c9c1ac3b8a43b897fcd55b50cfcbecb58089d6833b391b75c0d83d14120a216a14f98e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    40db7d220cbcdfb1ea2b33696428f515

    SHA1

    0eba18eb2cc184b613fb589df0679837873b26d9

    SHA256

    11bcaa7c30246b85db409faa9c7423e00771ccade80d7eef177b0873146ef902

    SHA512

    ae6dfa061035184edef1d70ebdebbfd1e23111520c211c030976abf7ad05a1854dd29d4e2ce26249d2599911fdac277cd58a65953ff5870905205b6e5608c599

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a5c5fa30013a062a9bc6326769e802c

    SHA1

    dd48661d64e0dc2c324039cfbf7c29ecc5131569

    SHA256

    937b3144643b99249e903e9449324242a7bc756ba5786f7364f239debf2f5f55

    SHA512

    148ab851d512b6f5d5ea0a138daf01ce212e83057d9071874147a3e2e7868e063b11dcc897e48f0b0f6cfc2ec26edd65d250a8342d9369581d07bd7914952f77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c947b9c1064f873817cf0bc26466c265

    SHA1

    7cf26856515c75e932e89ba0a9f273da4828fb63

    SHA256

    994a2db47c058e5d8ea17094e324b05cbd609947ed29bc8c7ec1b6b7b341552e

    SHA512

    2a2bc86ead9927d64b7833ae87ecf9185a1a4642726f2d89a76fe96c12580cbb57ad6c9d40e68ef4d20246fca55ed05a230323bacd15dafaa8c2a130d3e9dc8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d49f4819e21a048977070fe9077f02a2

    SHA1

    c46ed3342bccbd439a7de2e7c35100480e50e46a

    SHA256

    3f5376b0090a000894954552d9159389920835768c073879c33787fad79ba440

    SHA512

    5fd916c96c7ddb74691d51e70a3a969c470f9da86f5f83099f5792f9a0e4ff06a93811e0d1dc382ce62727fdd2e5f77f23ab61109796be059bf081d72b4d5964

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b91c698efb18ca7441d4ea236fc87a2

    SHA1

    35a9231460189962ad3c47ee30871bd4db281b6f

    SHA256

    3adf526b7eea637f7db50c5436ea890eedf25ddcaad6d1118ee30c162a11ca7e

    SHA512

    2b709fa5c89af09e2103e9c3d5d5575e86d1a37ab98ab36e782e569f1cbd9f151497fda1b95c4fdfa5beb691a6c1922dd13952c1ec435837f2e1ce768e1c926f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2eb10d6a0ff132d5e9f4d66e5cd17544

    SHA1

    2db8bbccd4cea17ed9492bdce539c6d39e3d800c

    SHA256

    0b10f4114df31e3177e6ad941662452f5651a46ec1c4dd1a22aa74c2ae498b8e

    SHA512

    d06d0ffd04ef0b15f5836006e8a08de105cb5a709b7626f8de848b3647e05d6ed57ce4257b3bfe869a36ea86c2da179fb348570f5e05eafdcaa4d113cfb56497

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    acf6a57399f7ead36db01c609c55e787

    SHA1

    79d4cce3ac48d9bc25ae9a28f3ef538bd7261c9c

    SHA256

    67c0e4f5520e7cc1cd6ace03369fce5ba8ea7326e3fc1706b1b376fd0ba25f1e

    SHA512

    f70a073edd973efc37402d9a1bf71158dea5e6a73e360e470d4f7d9b9042ddc0f7d7045d309e1cd9e58f3a7cfd715a108b90049bbf3f839b700cb0a19ed7947a

  • C:\Users\Admin\AppData\Local\Temp\CabFE8D.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarFEEE.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b