Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    27/09/2024, 03:11

General

  • Target

    f999c0f494347307af8b625292caa9d1_JaffaCakes118.html

  • Size

    23KB

  • MD5

    f999c0f494347307af8b625292caa9d1

  • SHA1

    c3f3c1de50b9a8ed7be3a5ddd98bdf268528e133

  • SHA256

    2559994dc3ee3a34a421b57a2cdeafcf1eecca4738b3f18666d4681f308c1489

  • SHA512

    bd6636ce045fe1da5dd1050c2839bf85265f6ed120d1df86cd6b00cf58a5c7b29ea6b6d1ef09cf68a24859e340e5c53c61d82d9bac06589ebcf706d174cb1e78

  • SSDEEP

    384:CCctZoCqNqb9BaW/dG3ejGru2+Q/l+cc9Gbb1q18SognZpSZV8oeBW5:Gok6

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f999c0f494347307af8b625292caa9d1_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2824
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2824 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2892

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85ec31fb3c991b18cf4c6b7b0cfd7d8f

    SHA1

    b4fff767e377a60415a76ba898cbda6dd27177be

    SHA256

    49cab7723f9e27fdd5963daf2a1dca606272d003f53b68a4a020bd59f805aa90

    SHA512

    1ce551bf52654ad348e1e76849f2daf29a9bb8fb0f1907d10f1f0186e5a1ffcf1ad10eabf4f24a0bd11091d3aa1c4ca6d1d47146405f247c9960b1637ab0ac7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    88690d1c625ab3dc7ee4afa465c5687d

    SHA1

    3339c750b9211de7235fa33be3f32c40f84b29b8

    SHA256

    689ccc83bbbcb16de5a4efbea2f7e4b34be7d5de88455d93440c64deb6490c31

    SHA512

    3c174dbc2c3243a7fcdde70134ef75d8e5e9dc88dcf1229986ed072918e1a4aed08d3225e23f48cd4431a710826dde4b36010ccd48883671e4acbaa91b47e960

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b5a245e334fc0e9c5d133ff90cec98b

    SHA1

    f65d95e7bae762903e5c37aad70c93180f0065a1

    SHA256

    9564e091cd784a506087707636555265c96468e96e14550a538eedcca9c63544

    SHA512

    4579bca896120820d35e3de029f0c28ae9d8caa47bc87e10863d378562ea58e92fb5f13694bf27973db327a8ffbb7dd0846847dbf9f1b9fbf82a00f1244f3698

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc6ce9c7d1c8fe98e1688251022f03b9

    SHA1

    63e4ea8e8e9dca2d77df01aecb72982fef6f3750

    SHA256

    9a3be658596b2b4c28afa8d79b51b9b0a053278b1e344bcd1f20fb23e3063253

    SHA512

    98bc34430161972b8d22b1d8e92058e8b01ce856eb163fee9015ca3bf4ded8ecbc9d1cd97a900f9ad36f3a508933984ab3e0c5ff838aafee2c8034faebb67b3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db7a39b7a7ff94b4a04a6fc66e8571fd

    SHA1

    40a525dd430de16d683a0ec170d62825109f06ee

    SHA256

    436aa56bf2827aa0ef4de0ac938019b45d4a7f45f27062af0fe08bd294f28d37

    SHA512

    add7ae5662e86f930d43e962d03c5e0abcfdac3d5d40897dcaefdb840775af38f604a84d844893ec75ea1ec05e1b2dcad38804c049c7e78f8ac022f4ca337c07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    edc909d7e33b3d5f9fbe3f7493d9ed52

    SHA1

    e04d134f51abcb6176c57fc5f3bebc36e3584ca0

    SHA256

    e49858e9efbda3b554fb74c48ba0f640787da4cbfbb400ff588cab68f87e14bb

    SHA512

    453c9de6f0d5c3c807db5db6e83fd8b07b34f392fe55b61563a9f2a8b3f1762029f74f86078f97c216d80cce5df8bc566d54d42a1fee0002954732c636615039

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1356a6ba9b620b99560b37d11d47d7e2

    SHA1

    35a25c24ebf96cdbb193dbb9d28b564d6beb6e37

    SHA256

    f4d820263e0b9976c6354479c635f57345c9ad51a398c688028c8fadb9614e7d

    SHA512

    6202db876577a8bfab4ecf101b6e451efbf8d7650378934bd981ca7bb4499b5d0b24f932a108be01060d3ce4a2cea038df333d737ffc821db36b34ed8ea7f7b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    84211c9036a629a79d9b7d0451e1bda7

    SHA1

    6ceea65a8df51136fc10eef27f13887567302332

    SHA256

    419178ea4f7779f2891817335f6f5ac8edd5309f5bb40ec0cfeffce1f149ef8f

    SHA512

    00eebd3ce92a1d422ed44b445d5423ba205a222aab6f72212310d7fb75f8a1a444df35d10dc0ee32c62e0e7d918875fc729e7e6e90ea303f6bf77d2986610630

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ef6e446710b2d0c79d24c8884db35ad

    SHA1

    be9337bd0e4c057db288b44bb9cb9f3e709a4885

    SHA256

    59eaccaeeba94bf95bb641658866e4d508277e73b306441c833c9e54936bf223

    SHA512

    425aa9468cb1dcf6a777ccdcfd56c7275d3ab5828b4d4054a19cc1ea3727bd94ed2c63d7913e32ebefdbec64d0e3845c5a884ac45061b10a5c81318a82b044bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d9d0fa6bbf6bf61432548c5ddbdac927

    SHA1

    f27dc8d1265a889d3113732b8388dcc4d42baec7

    SHA256

    585fe25e40b9d76bd601e1a29bc3814e2dc9ed54a49b78417d09f6962e6d4d10

    SHA512

    21c09da8ca8ffb6eb5f1e7c6d2aaea81f18a4b8195d0bccb8c3f1beaa65bc26ac913ac1a22c8d99e434e7318e6da087c57d7a96d54b4f8d5d052a8c77af03d14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ca03f1d735e08b7895058a2a1a352c2

    SHA1

    f92c5c19e502517b5a7f1c40be4e4a87d7ca3a4c

    SHA256

    beb4e2c50f1133304f7a0f362d703f950bdfa59e77ee412da3e548b5051ddd87

    SHA512

    a74349735f70ff02f93b9184d2b45b73d727d334fae89cf8df214796b56c8b98bd5dce81771e179a4d3d71c2728f1fe44a2c3d5fcbf0b11482f7b4ce1e2306cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d14b145b006e0b6d906d5d5ace68038

    SHA1

    019911b496c1f42c8ff7242a37e6522cbcf0305c

    SHA256

    efd04635b33623c86714078483299f33ce8edbb2654708e10c04bfe83bf78d35

    SHA512

    d49f4fe36e695672fbdf9b23132e8902c3f896f212141ad88e855c54ee98b5ab6343795f2ea27af3b1d1ec7ab34c157bd20cfe94d9b9130171174cbb7fa299e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5aa5c8e81ea4f1e613da4cafc7f1ae9a

    SHA1

    1ea62e7409c543baba7faa1a49d71ef704c4cf03

    SHA256

    41e8fd551cbb7c3e0d210ae10db3deb1b8d9f600f6208601203f7ce684e2a648

    SHA512

    3c3e52da91628bdd257fd41401cc1474b19a19ee81ae95634d7a0d8187e1992885ac2bc5e4361f0edb69484d56cbe40f60f9be594353e88d60de1046d6a7c6f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ca36479aa8dead7c7570dd4b6dbb09a

    SHA1

    42b083014f40f34ff7532997c3a3a801e9b6bfd8

    SHA256

    89c36a8b9f0fc4843d5a4405f37ab9129b7932b78d31a3ef2359266973de2ec2

    SHA512

    f7b1bb2c3c36bc9b0c89653729272d6848b9bf82dc1a09d229ffba09feb88dea23a486beab8d6837e546e36cec430e16191a6807c7f33bd5ee5646ae2abeeb60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b51f3d8222098848f722bae420d61ba

    SHA1

    630690cd644f87b88ec5def9d4841dacc25afe96

    SHA256

    1861715462b4e104ba252327f983c25a0b1bc50749dfe9ca62a41872bb38e85f

    SHA512

    3421480691bee6b09cb36dc1c6582162f1ac97f2d803b407a703ad95465e2b0dfb05cb0066f8440e2a18936f681a45e1a7a38c11e9e0bb34edbc39fce15b2d93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3a52c26d7b449b85be1bf215e419d34

    SHA1

    2290c9a561a8b775de80c60a7f1b5ce78c70cd73

    SHA256

    42b87b9b3b5aea4f970a8b438f8bc99ad7589fffde3216471e3434cc92e34bad

    SHA512

    fda83c2b63eea7fc9aea0fc70ab9f00867af39110fcd2f1642e55fbd44b0349bb173952bccba58fbf907db0833146695da7a938277fa7a08fbf3e60c0cf0f041

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1dc2c79f7f696a2c6417cefbccfb6db5

    SHA1

    26e4b519de2ee862fc090aeb982476ceda7b0eca

    SHA256

    aecd306e02e89d24b4b3d7a6105b124e8d00cc6c94bee18f80b59a7f1b10f569

    SHA512

    6bea5f4d67084275e1133bc50a713eaf561280feb84bec1c5aa622613f16eb0a9a5636d5445f179d345386786790ed4d8839952ff2b5f217653c26b62c56d229

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d3f13d23cf42b8e38c52ca8bc3f86e01

    SHA1

    9523add3cfc01ad7661b224d23247a91e548ae8c

    SHA256

    fd1584c06d67946ea4464b7784b5c6a085f010ddc4655dc4032c4a5710b4ac15

    SHA512

    b6a888d0e6d028f974f18f28e14c19f913fb84d4b6ee78a24f0745fbf208c242fbe80ac0360b6bd4d9856f25af335f5461333b1a1448c934fa81bbb1c7b4fb70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3de41a20cca92b3c3d7678b6b7ab10a4

    SHA1

    579e2082c255afc480bc12691e0eff11e1ca4fe3

    SHA256

    6acb26634106fe2a1bc68368c06ad8b4ea34887f7105895ca93f215b9f9cf719

    SHA512

    d0e9a324bac7cc98e072049229e591a0732e3ee5cc43461d582d7f5545260a9b8eeca4603886e2a7bac1b053f970ad49522a4a31d1a90d716a7dd71f32319325

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b9e2c1bb8f18a27e9ba3f31d4bb80f4

    SHA1

    9d9324d64d343bc6576d7436787943faef9203e2

    SHA256

    a0c88c2990aecae33e7ea7f0539a50af9120d3f37856048931a8faa0d33397f1

    SHA512

    c4beb212109e990c8f297963b1acdad3429cd0c57343760fc7ac85fdd07aad881772a624bace03370a47d118d022c6d870b2fd0d5ad92528b29026d9ea3a95e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b288a22c585cef81b8a6239026e73e8

    SHA1

    0f7d6bd900f3fc018247fd54e54331b4aa341101

    SHA256

    fd14ce1f5fb2bfc1f544bfda37f49a2fc2a98158811f274089f172e7bbdc7a76

    SHA512

    e64317d2829f56d9f34b777f5a2cb71ef897d889eb91affa2bbbf83af48e34a67d0f76f20b5fe76d44efcce16483a8ed1cf14bea15955f5e002eda16ee473ba7

  • C:\Users\Admin\AppData\Local\Temp\Cab8559.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar85E8.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b