Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    25/09/2024, 14:05

General

  • Target

    f62c97dabed986d12d370db2b36ebceb_JaffaCakes118.html

  • Size

    2KB

  • MD5

    f62c97dabed986d12d370db2b36ebceb

  • SHA1

    2c60c3ebe422300e2b69ff4b2c4ea0158aa75a9b

  • SHA256

    d3f5d50ff53a1ccdd4f25556e449b191bc05fe048af102570ed4b239abd09e36

  • SHA512

    dfece8cc157ca1d7d53cf4f2e6648b9413da957676edd745f24e6e3e0aac7cece3c34650a7ec5f3a774379257715e03d0889e7cd964001aeacb7d6d5174a9e72

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f62c97dabed986d12d370db2b36ebceb_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1800
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1800 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2544

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    04778a776d1bb0cf8b02bf92f9dafb57

    SHA1

    7212e0bb1687d8cae083af8b26653932e4319aba

    SHA256

    4478ccbe227027f229253f5352608f04737a157fd23176d5d6c6c410b7f5fd65

    SHA512

    6e4e6c7d9e3a3d399b23f187794b9eb110ed620f0f0fbdcc0c2d4e5635c9f2a97f5766dde4e20b3cdab60bbe6b633d4ccb7c1d45406b58412d5fbebee2e8ae72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    77d8190636170a75d367f70f4f110d31

    SHA1

    0e64ef957fe8064fd8214cae6a92579a0ec8254a

    SHA256

    f1a8115bbc2b1b44e6b44a62dd1c04edd9dc8fac2a910854546efcff5b9fdb3b

    SHA512

    8e0f39ce03df50851f59d72c7eddaf3508ce23352b67dc8c0c17f513092cc6074f00ea65a18588bd05bfce4827a3d9dfdc153f413d77120e52520ba34c3f8d52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a148bc576f50718ac62db8d6f652b5f8

    SHA1

    33adee644fedaa8b5844d6d734b306b0b6fc652a

    SHA256

    376f6015244eac0d16a015fac52f08e4dce5e50a989acbf1d2cc3ea54c1d4f0c

    SHA512

    7f0db38789d8c8932e9ac346c4ecd831d0384eda9e32b672f75f6ea291e867dc2875395846511d23b6f4e011a240602c71c06ed08524a5fc7b733ed08548aecb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9cd5a5ebc03b34f9734cc58aaf8e97d6

    SHA1

    8637d64543532c14216c413816a9f0f95b4f54d9

    SHA256

    1ada57cf515f92dca0219e91181dae077cc5d93e9c0130c6cf22dec86acfe0a4

    SHA512

    ea13e89f5da4bb00cafbd7a6b06cf42830c5aebd7b55473c01fb7559d89246a17d4cf88b82936e9340b40b11ce8c66c527cf76f89094b18fcfc862e71dc4d638

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d1057d9327cc33b81ccc9c56f2809604

    SHA1

    4034584da003d2837eac05cf46cd10b830415447

    SHA256

    70ff581e9e8fe303fe58e2bde42b20a15c71b28ea8a5051022bbacae63d49b47

    SHA512

    78d95323754d73d43ebf09b19413f611c2329ece3793ecfda78ed163c2d11d960e55c29c14df59a5906c3c9c86d42dc688a45dfebb2df9ae5ba08df555f91014

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9523d1b8539911e7f05d508732518e4c

    SHA1

    efb96da6a3c8abbf429d24811e37e5282eeea0a2

    SHA256

    fd32a6aa349d4046b6a6918eb6a58091e12268ff197363aa29abec5e0ca6010e

    SHA512

    5d350cedab915b86aa1b950b785404aeb6645d1c8a1c67878b542d4671a5fcd7190f52c9759d8d01745ccb49ff0225fe811a449a9c1e438989d80367dcc27fff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b278d48473861a7d033c15b3e108584e

    SHA1

    4817c18d9e83be714fcb4936e3dd111e3b1b7ef0

    SHA256

    038932c4bdf1ba993a0b924f2515abbb55711c592f65dc72aa3042270ba53996

    SHA512

    c5e6ba80e5b4243921b65cee86ac8ad5f621829ec56f76bad569ac32e845bc05f14dfcb081e3f84208e31ad079f0d3e7bddbe0aa292acba3af3945e456c8c3dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    58333a0ee1c3a5fb99048b1ca931252c

    SHA1

    9e35d8b7a02a94dff7366809389bff3ca4c9ae36

    SHA256

    ac2f32ebe4cfd65e25f1432cd772f200867f41c61301c52fb0952bfa787234a8

    SHA512

    74e4a92a244b67b728eaf3e5316692baee62c1b60380f1307ccd7008796f9f7f94f2c1d978c0c4d9fbf8a9f43042c54df9f6a27adcbd481ed222c5409fa4fcf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a88802562f986b918825f1140631f20e

    SHA1

    7f2ec159fbddb7f73c194105f3f998be1e58e50f

    SHA256

    6dab501bd3ec5589ee75b9eac2b9a3ad98f001d3af423175095dae37a4514a5d

    SHA512

    75413728d4fdd51fe331958931e4a24bcc7a85120757273129e05789a60ab1e7f4907782655a8e01b5dbed58f252c2fac014f0622f7fcee7d7dc178cea26942f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e452cdd22dc01d3007853152051c0530

    SHA1

    23acbf334cc38d0154e7a87c91673044e2ba52ee

    SHA256

    5baddbe873417e12276c3ade2833d8d1984a74e017df47d61dd7cea66404954c

    SHA512

    80ce9e36e1a79a33b0692c22637bb4d65af484debb9d47a13c530bcdba52f229b99418031434e717438b05228f1f6fe6406f64c2670b32e5cfd6864a82b31bf0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5b87f2cd36dcb67748c7e1ec586fc763

    SHA1

    cd6b05fec6718433adadbf8cf3aa938d4110d6f7

    SHA256

    1a66492d39b972bf2af3561aab7bcced8525baec5cf0d774e7656cbb5e658fbc

    SHA512

    453e858decb866fef88b2db22de3c2a804beb400233b606801096704c473661a06357577b9bc754994018894a1d4d347524ea2bd58fa83e74aa8b6fe842d5676

  • C:\Users\Admin\AppData\Local\Temp\CabD7EA.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE047.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b