Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    25/09/2024, 19:19

General

  • Target

    f6b14501f397005014e2221b0c3a94f4_JaffaCakes118.html

  • Size

    177KB

  • MD5

    f6b14501f397005014e2221b0c3a94f4

  • SHA1

    cfba964805864b8994c6bac115fe098b89216aa1

  • SHA256

    7b20e85e009913ea4beac611566029b43b3f69dc0e9b1220aa818d6c79f3c50f

  • SHA512

    1a0b983c728a1b87101406d3040d583df502aa959f85bc5597b0a12969b1998d54be79e7521d3eb1d455ca0647bcc7a5689020e1604e95b809151634267e6a38

  • SSDEEP

    3072:U0Y2MYJ6rHfgaToXYCkmlDCv5C+zMHv3WL+AVbxhvC24c774Lg3AAcHBYAPs3:UvoaTo7/3WL+A424c7747AcO

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f6b14501f397005014e2221b0c3a94f4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3036
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3036 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2280

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    77cd386e206c668425cd6703c621008e

    SHA1

    d23e3b3b2b7bc6a52dcf9b0846115586b8a45190

    SHA256

    aae5612d41dac8d71cd98dde455a68653283c3bc0802110c239e8448f793477c

    SHA512

    4a1cc0b4026b705b9a7ca715ed87ebabf5bd96a554b1c6624702e86c0b58b625c28e3d862d959cc623f5fe464ccade67d52602bdc43045be2963d8447ff8979a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2366c7134c66226960b08795fe8be4c2

    SHA1

    a424518dceb82f787918a6a9937984c16c77046d

    SHA256

    330b7e1deddc90389bc4ff7b2fe031eee0f38f7e941a44bfa3505e9683e191fd

    SHA512

    eb18e1e9b739250d3be9c22b40ac2c75ff3b97400204ce81a5fa6d757a48b2bc8de829d3c117607a19acabc9c06c4c9948818738e1451fb0d4ebf7d36c1cd705

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    31fe604039779dd5575302776518b120

    SHA1

    2bb208141fb8bdce27e3f55b288e106ff4e2c9d7

    SHA256

    0373c6ceff2b4b469dbbb99ca3ab6909caad5c6f27331c16ebd21eb18e5e41dd

    SHA512

    85424fd8a02fee663f1cc1efd51da2c051d4e542c819bcbbfd6a4963de9dd6d96276d62468c0322c3b1ab875385b45cfd3b20bb60a5935930e41bb3518f32d99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    315a72721e0a8cb72342b8d4b2c92626

    SHA1

    084378ee15eccfcfcb1f1ddb23ade79dbc520eb4

    SHA256

    7e31d06ac6942698df5c87f7a6e32f35448b978c61d1dea7fee5700b7c10e059

    SHA512

    216d02e61e4e70ae3b26f18ee9346ed9cda969ef4088e535c95249c373eacca419a9c9bfef3eabc7a4a958b1393eab1e7e8ab5c85f74916daa3e589ecc5fdce6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d6e2f31916a6085036f0b5a1b3475fb

    SHA1

    7f263449d246e1b0146ac66829af67e38c4728f9

    SHA256

    ea95b7ff36c539b3e5b376358b3c91156c52ca43d15f0b5e6de8d64b4a0a2d15

    SHA512

    533138b1feab01c4baaacedd0b91cce10038dedae30317373114b730c54b6f4dcb98ccc41bbc791ab40a65ec95485b26c69c5464c60637b79489f45fecae73b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4261669282d8e75cd361b41c1d08af73

    SHA1

    a5782a6eaf4e4e2fb9b3620dc4960efd5e20323c

    SHA256

    242ef5206bfdd586e3b2fbbe38966b8e197e4884a90284a7d60b5cf0ec20be7b

    SHA512

    5e0d81cbf74025cfb6686147d32e0fc42d3db3729767d31ca310dc381f79acb8cfe6f8733b522a77560d6a2dde97469cae06bedcbb769afc15fb84769711c7a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b3d2c8ce67cb33e42f519ce2e874790

    SHA1

    2754d499255ac651c585f2fc8db2a75e3d5a42bd

    SHA256

    67b99409932551aca928e9a76063c49c96754f6dcdb5ad9ba4a2045938df795d

    SHA512

    58988917bc3ea42ace11d6d7b1e83e6e506994e8251aee589c882c60db04aa1ea0ecfe3179ad9a2bc80b1e5ddd78de2143229e35700f7f0fbf5e5a927f31acee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca1e10fb2afb8a9d53cb0bb7f76e7057

    SHA1

    e3fb13679714e5cfe3a3b84456c42242ead72dfd

    SHA256

    41c6f77087020106c6031779fa80389051b4195722965002a3bec85c254a5a68

    SHA512

    7b0f0b1260cf2cda246771f52802a361c372a0b62d2670bba8ec06894686c29ef226deb1409f914953d57de22fd078dfd520717f8cafa0aaf8557d7433510387

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a57609ab0442631f5103cb200aea0fd

    SHA1

    7aa1b37d83080ed4e4bf23acd42a1463a61232f8

    SHA256

    885cc406cb7413d8ecdc358a2ac215a602bc64655727fb3c799ad87ec6a38f52

    SHA512

    09b25db8e604965453593b556ed30d5797cbb42fd0185aa43d16dcc8b63326e8940340112863a38352cbf9823946bf2f35c1b7813bd1cdab0ce50774cc452279

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a5ab12105a6591a2feaa74a68d8ad08

    SHA1

    c0216137028f3e230bed7e36a302894c68019da1

    SHA256

    611a8a6cae557d10b2dbf6c2059da9b38a9e3c80802344e48a016c6dbc38c4bd

    SHA512

    3f43f60480ec36211bfc4e9686c790acbca4930700e7a699473fd5f02d4afd235211f3b961175638c97997991e40ad7b749aa29545ebfd1d52a34022f6df8f23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b1c23a6f5b12f9e3a120ef9e809b289

    SHA1

    9de2a1faec067123852b2daf6b3c53eeb2e241b5

    SHA256

    4670280f77b9266b7b2e785715a71c47c1ea4d6c4a578859f1f2aacee5abbd7d

    SHA512

    9cb85f29e88831ce07838e1c959f7324e65ab1619b1d583ca1f1fbb630699b36f811f513c9e3478472a6fc8100692678e569d27e031cc04a62ff511fd48a63ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e57177b512ec4230352e2dfc2cd3b860

    SHA1

    a51fe963111a351bed5710883be2e3963ba2c5be

    SHA256

    c9ebaf29327a6bbeb996b0ce9cc31a67f9767b597c1d0d46fe03a1afff20b4ad

    SHA512

    e51bd11aa6faa9e73685d3e9124cd44a89bb3b6fde45569146df4ff1070f2f140d5654e9b601c22a0688acd60f07d5a8ba208e740a72a3dca5b3265378dd2637

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ebfd4771f0d04de7322de0c55ef59cb

    SHA1

    c86d8a48876b0f0bdd2506de3705af8cb0f0e072

    SHA256

    46b5f908963a260676727db5cf692ca1c7dcda76c626d780c00d30464aa90017

    SHA512

    331c23d4c7ccad853314c328570810579f764ffdf646a70dd73e6dbec2c290fa4d6587ecfeecf468bc18cb1c343ed21a6d65ffd79381a3446c1f518723a5df13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cff59e9d4224685211f829fd7b34a0ad

    SHA1

    305ed661269194c5fc4991b6e088cdd0a38277ea

    SHA256

    8f221abca522369fc5763f450bd2d107a17af2482f541361d413a0ca72c9a04e

    SHA512

    04b5fbd656d191436bc2ed09670d55aec801b2787991abca66f9d72614f5bc54fad8e8a3c40c4249ef82d1e4f16f5fba2177a6d7dc578aa68975ecd526537764

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    785a50874c8276659ee138a33493221a

    SHA1

    2b302e08a6ba3d2012d4aeccf6cac07d1f6194b0

    SHA256

    d596a605641bea76785692ade2e803a437d069fae5bb59cea5998714073d2ee9

    SHA512

    618d4fe63178c9794f8e6b5ebbd0b93bf570039c9db2c36e11f7053208e7ccdbc057e8bfbc36d9343113d0dce1600670cf34836f94df1cbb8db365dbeb16336a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f9a2c09b7e02a59865e263cb09062f56

    SHA1

    b1dfc0fb4c68e47ee313a998b437db977338f4c5

    SHA256

    80450472e8fd11643b80d968ce425aa5d84a53bc62795d886b888fc1ddfd9ec0

    SHA512

    1ccc7230980f7b692c5133007bd88b070e8e220b315bceb32ee91613bdbce88fbead42a8932c93c01390e6f83856fe289caf995db2634373987b40899bc3fa26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ef413424ba7686daefef17e83893647

    SHA1

    c7a30a1a06d577e30e7528982176a13df72f37a4

    SHA256

    3f8763692b0dce6ea5ddb34f8c264f1bf9cd223f79afb11d66aa090736d8f579

    SHA512

    adc246ff9ee9a3806609c86ab9c8f6f0b2916bd5bdd5466e4e03badd647932329c1c846b83faef924eda18559d55b9023975c88781dc086e396628eb2c1bb16b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad83b73141dbc5c5382bfed9aa950369

    SHA1

    759b8f6ec3318df7b99ac33c3c856c985f07beab

    SHA256

    1972bc419362fbda6362115d264acb402b507059164e5c421f835234d624879f

    SHA512

    ffee557154b1bd068f8c64928b03f0d84212c7d7e0374eca3e5ba0d8098722fc8ddfba9f17f0a61697ce4f97b93f2be40968bc2cf4d02899e8e7ed03ce0f5bcd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d25cc16c62a2b656a19fc4f7d05b71d1

    SHA1

    8b79ad49bff0b22d2cd9cc87e8d761165fc035eb

    SHA256

    d323cddfab52dc067c99a5fa3b316f8b32dbe899bd996eb25fef5612501edafc

    SHA512

    7be92e0eddab75e21d2a26ccd3c5cefb8f3e321f90756ccc977863208b80ed075f976633abeef06dc8b948954678fb30d5443f13f3f385f51502d1e06d97b1cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e4b9b59747216ff4dc3da60107e83c8

    SHA1

    da04d10416d2310071c74e8b4793c272c8b66ac8

    SHA256

    68db2c648827e4f4f9e14a68aecb1c92da27e1049d36b7f6954ff32787b74ce2

    SHA512

    b22f445155fde6511edc7230041356ef3bca10b115560f712da41fb7d1237d0588a871cf37bef4475175b051089c1a4949124c760a357158bf3e3c63e695ba3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e0081e8a6ea0951b3984cbd14922d151

    SHA1

    ec8670d19e31b226611c790254b24b9bc622bdc2

    SHA256

    895d0e062811a171952d61ec2c57c03b17912acc9c004a934c7d21ba71420fae

    SHA512

    d2e557b8583d5c1ae90ef76cf9289b0b6bdf894015bad603409b03fdcb5b2354714a655bf5953d92e6e186bcfe69b66b65c515cdb482ec15e6d9a60c1b2c5135

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y1738IZL\halamanav[1].htm

    Filesize

    114B

    MD5

    e89f75f918dbdcee28604d4e09dd71d7

    SHA1

    f9d9055e9878723a12063b47d4a1a5f58c3eb1e9

    SHA256

    6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023

    SHA512

    8df0ab2e3679b64a6174deff4259ae5680f88e3ae307e0ea2dfff88ec4ba14f3477c9fe3a5aa5da3a8e857601170a5108ed75f6d6975958ac7a314e4a336aed0

  • C:\Users\Admin\AppData\Local\Temp\Cab83C2.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar8471.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b