Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    27/09/2024, 06:49

General

  • Target

    f9ee7f56d3f0950d613deca2c7af9ceb_JaffaCakes118.html

  • Size

    6KB

  • MD5

    f9ee7f56d3f0950d613deca2c7af9ceb

  • SHA1

    0823020e37475fb4aa6780c7d291097daca39bbe

  • SHA256

    d88fe44f145a55eb1a2ab6e32c79f912e072d2867fe9b3db1dc4027c3f899b78

  • SHA512

    4a47f4a65998ed0453e84a4b27d89c89b0037e9d013ea92d5921d78a404dc30951c13909dcdb8a24a2cecf153614652282166d5895a2b774b382f72d368a693e

  • SSDEEP

    96:uzVs+ux7ka0LLY1k9o84d12ef7CSTUerHcEZ7ru7f:csz7ka0AYS/Hb76f

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f9ee7f56d3f0950d613deca2c7af9ceb_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2236
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2236 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2304

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2564cbf4f2f8d1e917e85032f247b68

    SHA1

    577cac6393f36137c166b2f6dd73e8eb425b4f71

    SHA256

    de410c900c89a35bfb8acaf4ff8d57a26f8808b31dad7f3c714b1ae970a75ee8

    SHA512

    1725e2511ff820c535e8880b094d0fa555a98a550d38b11b761e8f3f846202db3cc3ae1daa8d202eccd25fa7756f94aafcb1f9f60fc8eef4be2c1c598483661b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    881dd238a71f1d676a3fb2f6a010b329

    SHA1

    68c0fcd6ceefb883394e852495a5eae6c4bea4f6

    SHA256

    c1734e7acea757c6c1385af70fe3d269255daf397b50dcace27480f385f7b22b

    SHA512

    e82e1389b07ded6ea27bda16ee2398f47f8d1ecbe241d44f7f21d0e8f2d4e769a8504c804b1cd9c963459995f9c88f48df1c746a8ef62a7feb0aeadbb601b800

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d7106dc804826b0ce5ce495a0ec36f4

    SHA1

    a572d19b50ba6b2bd2e82e495699688ba764a2f6

    SHA256

    5375233c9e1b26bab74af235395038d7ea0bdbf5b283d42bfab2b66e7b51569a

    SHA512

    54fe0a5b74f2ed45e003797e6d619fd0c9d2a155ec65c95098964591f894f2e3cc633e52a038dd3c483a43f57f8f09b8534711604c8e56772651316bf0483f0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d3f61b3675bf3f8c6da2d13cd95dff48

    SHA1

    1a83b83970e73bf5a18e52c1e57cb050a443df3e

    SHA256

    e394511bc87d3befcd8da6ef21b900ff9308d2bb3533790d8a15d81b89231bbe

    SHA512

    7e50285eff061109d9b927aec7a88b2111624f6c71ef1d7f40a2ff4ea21787401b7541fa983db08abf385398e4ba1d93dcfc7d7d9c0512b3458e36715310eecc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a8d1c758f6dfde3d0bf8e5299185f185

    SHA1

    e3f33fb4b1caa303de9d9ed152219080a857fd94

    SHA256

    257a9c3530ba04c1b0640a5e3f4f38e6475d67ec594fad4e4100272c43e59714

    SHA512

    7f0de4de4438f591e25ef86147656e5499edab544d08f4f6f879e90fc5af30566c70f63ae4b4d2a2c7e31fe42c4509fe7e266c4e918fbc4d136c4b78cadd4423

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b92c3901fe7ebea34d41f95e233513ea

    SHA1

    08a4101818889d3aff895cf470ecaa21c252292a

    SHA256

    383db3932a5151a6e0540ad07dcbd4dc0bcf3849d2fb17d728042e1759c777d8

    SHA512

    d5f52f182fe89ea1a1044cc7cf72d791feb12622f7e3a1c39f8d963d405fff57dce098e2647e30244631860a065e1b1179c897d75348a4dbb973056e5f201cd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    930e17885780fb4e1271c9cf6eadafa0

    SHA1

    3ed37fa6d73646f614aa4e61020b902d4c056218

    SHA256

    b9375bfa3cf869a96174bdb64f5ea9eae1d9caa4396d40ebecf5d27619caa71a

    SHA512

    cb133b91e38131f8852a3ca02c93b2c27a39628af97c6a7712ebca5cc4918a29f474dd2d5c59f16de0ca6ce5d7329d18a507a587808389e9bbd3262b18817b69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff5670fc7e7bd72d92d861bb3e52b480

    SHA1

    9954a07c26135fd4b7a2db65673633c94d3ab37a

    SHA256

    8c75829621c491fd4af33661f86266ef3ca5e2988a26d45925c63e519d8e4246

    SHA512

    bb6025e16c1a8d88ff59bee4b9e7b470329ca104f0840976754fc147b7250c804746dfd1540299d59141978b24418b29209c366a0686ed30db303a4213ff04ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc59d6218a1521e3e8acf6c3ce50fdeb

    SHA1

    4d40d3bc4573dff051375e903f8e04110d49edcd

    SHA256

    e2c5032363f7e911bb6e6fd63424490c4f302b6e2aba92560e19b774c73be323

    SHA512

    79f6d06bf4d5a136c7f26819943a811ca16b495253da2e02a086eaab8dd973ccce4bfad4feda288bacc5017b7b725901c3ad18b235f2d784666810208b598ba8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4abf7b7de445d7c5d148bffa558fd809

    SHA1

    d7c6e9d5157f1830db7e1c645f5f1e0bdbe4bddd

    SHA256

    d953712b38f5908f9ca0aaff4a33d128d92f38f03e685fb24f658038659d640f

    SHA512

    f2725f5865c39d1312be95a205ed0fa5205be7be858e0983aed7ee9bfe776ed1d12bccc7224dd945c890df428e6ee0071974a8be1aadf48f6b0a0c3a651b2a47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    602e29f8b2f529122a0bde2ee75f0640

    SHA1

    499c3c5ca86e6be74c61f60bfbd533725903d4b1

    SHA256

    06017cef7f5976fa9f42d19f6daaebc3f6ad15c71cf43cbc767dedeef78026eb

    SHA512

    9706a75294dabe9903b7bc55e9d8b04c02069ab3cfa7583c7f6b718087437eb41bbe7bb380860d9215cc097c3d1da2a6a00e3f38be88b701358470b3c2fb109c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4998986f363b3895cfea13a0b57116f8

    SHA1

    8f62e65cc96eb4f529db1ce6ce5b237647073b50

    SHA256

    9d19df1b90946790cc0f4bee563d8fae105ad0154a85565660cca3b56ccec00f

    SHA512

    274723626523ee037f5ba2e397063f50e28e9aba362c97dd2a3b42257136a8528121067989444ff8d0baacde8be7c155a57a40c4abd2614c5189b3587fad3c32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d03291fffeaac0628a1cd6ab61d44fd

    SHA1

    c7703eddeae2a207da8424b1ed8c7e7a488b49d3

    SHA256

    520fda0bc59411d1233fd2b025f16ded282b08260b233eda38ac7264a987b794

    SHA512

    6f680acd084846b792a9825b80d572f7866068d29f1bb60b458fa93715adbe4a186a1cc61a20d4993bf9573c29c7bb4aa24c0e89b916d4c55d848b679ea90283

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da510e6d7824a72fabf1cde56f4c4288

    SHA1

    b59e9019b1f0af673b45e3c64358a332753566f7

    SHA256

    2c9d5687f323d1f12552cc09c948f4c5970eaa450947f6831fec5ddf27b8ae68

    SHA512

    9738a33669ba816a229bd00564ba0d75b09cfeadfed9606bf55962e63fb13f8dec2d583769953933f6762b8ee90491f627c95711cf15b0ed4854a5a9bc01647b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26a9c8a1c30273f997c14ee5d4bfb07c

    SHA1

    884c1fa17cb9393157ffa5a2bdf71c321571ee96

    SHA256

    9a13c8d0319f125d6db1f09464c5e3db21234bb03f4b77904e5b7ff184b55039

    SHA512

    f391d3b91a92c98997c279c9f12f5b6d9714525ae77f0e2215d8f78ae0183db65307baaaef81bf08d79e226e89d5273a2ae70973c51dc79b4381912dbee2cd20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11daea539559f1fc74e54a27da320676

    SHA1

    92c226eafc46012239a9803e6239d299026ccc80

    SHA256

    16080ca6399686abbbccd082a2ce3bee57cc190f0e51b1f9c92049ec7bca4cf1

    SHA512

    a587cef1b6c55f8b5a9fcda3ec587d2685b3c983dddf92240cbc31e1aabd464cc9aa69462c7e2f4fca50ccd4f333708b2c48e8a2dc0b1050fe0c797b3fa95817

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a642b0c91ba230318ea6469af10bb464

    SHA1

    c7f88c46722bb95866a1da4f46401145be6769ae

    SHA256

    97331fb9d2a00b3c18ae6102886d3b95b7d4d9f4d72f16393e4f32ddbc97262a

    SHA512

    e656a30dcfeca701a018a3f10d3d259a188b538968c0972a42492f461e1794b24f19c149458278ef0a8437771016727b3c067eeb8290c4efc08a38f3ea5f0682

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1dd25d36ecdfd169c783e2b373720eec

    SHA1

    e9006b9510f0388b7c4ab66ea96006293b4f1463

    SHA256

    fda4081d66b0fa026ea7b8e98a8d11126852c1d914eed84f43628131ccb18127

    SHA512

    84f97e7ec0875e75037a3704b0e2894e716d895dde848cc912517cad3e6c0195a4be8073139fa4428111d2ab027db63d85503f04f127fc0de44349d113dfa53b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c1300976ff81c66c7acc8f4886297c0c

    SHA1

    789bed8f090b678147e47d648cccb0736ea387c0

    SHA256

    a995390fa7d37ce1b586a5de97c0f257d6296b4183a3da505bfdc104ca5cee34

    SHA512

    7dc09911b8c299b2b302d85560a632bf65480ce3d62f6b461437bef9cf0eb39e9b0ea32138e8bf4356392a666978aeb293b9e686ff3f5e73d555dc17bde40f7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    58874c322b71f5ba4ab64d1748b201b4

    SHA1

    b68864bece02b070057e2448ab3d90ecf95e68aa

    SHA256

    38b8c8b7428760cc6745428575df51d870131dbdab1809800f952d14077dc1b4

    SHA512

    39d61df6bae64395e429b75ae42aa674e287e76884897122f463838078ec9dbd4d05a771630e99a12d1ba7e2a36eb341fcfb8da962cfa7ec2bbadade631c9d55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba8db03cd20ab1fea82409b144a89522

    SHA1

    641f4afa9a901e5a6055dd6f92582e7faeb33925

    SHA256

    962614a2e380ac2285991d3fc2ac0112491b2c256cc60ddd8f20b6ed8a73899a

    SHA512

    85e33ef3b6dea3707db2846cbf826984c8d85bb270704a695794dc84c6a87d04db55a217659233a7d223c0a21c6295a5c5ab4a9e7f94f2e2eecfab9c0e6908bb

  • C:\Users\Admin\AppData\Local\Temp\CabF356.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF3A8.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b