Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    27/09/2024, 07:05

General

  • Target

    f9f477e7f01264834c6c593134f9fdfc_JaffaCakes118.html

  • Size

    31KB

  • MD5

    f9f477e7f01264834c6c593134f9fdfc

  • SHA1

    7ed0159de22839b5387525ade17daecd2f884b33

  • SHA256

    6fc59d9edcecfa0b493cabee926a9dd18dbad47f6fb9bee47540db1655475b80

  • SHA512

    1c0d5da6ae97dcabbc985804293e41b0f47e0fd9b74506d10445218c9147e7ef2443a469c6a437fd629dae37fcd04e71c0e846310ebf80e4a535218fc79ae324

  • SSDEEP

    768:Bd1bUZnv2dKD3aaUIaOvKb02KOnMsTQaLbasO61cEeWGrH:Bd1bUZnv2dKD3aaUIaOvKb0iMsTvLOse

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f9f477e7f01264834c6c593134f9fdfc_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2600
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2600 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2308

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    663191ebe1b225e531faec9a39c52f22

    SHA1

    8cb08664ec2845b7c4089997c6f9791e0a4402da

    SHA256

    e63767a2edc90dd625d588c033f0aa1681ead7c306c3674c98ee5910503a252d

    SHA512

    4bad9c2169a7b9d1e9ec19ee915fe6263782f27b69ec1a860408d43e0d5e3d929ce157b17b2207e0f8296e49a47c7e18ac0411763ecadd5a372a7601bf7cbb8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d2de2f065da4900c09cba0ecb4afb3fc

    SHA1

    561f88cbc3882cbce22d444f8d47b7c9a6b350a6

    SHA256

    c60513d1acf7d7babe0eef3b87e50602d734ac7b43be97d0d1a23b9093d0a7a5

    SHA512

    81df1402475076069e4a190d45ef26667c7cae18deb07b370dd32d6769ff7e6a08c599fe8e71ccfa25f29fb4ae54b8a544c72e07054f1abbd48e6137c2af58a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17aac02866ae19b39be7454a33002fe1

    SHA1

    a206013498f875c6bb818e0d8e86a6b4b299876d

    SHA256

    17bf604ce15e1072d32ab7904bb8b4198087a032cc5ba00d61b34fccd53fd9ec

    SHA512

    8b160076803d68b0a32ec63fd6354fd9e2e3a05ef45c9c161e21634db70e0acdaf2aebe2d7501736790733b62a6956ffada95465e71bfe5fc94227507ddba92f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eeb0b626fa88b02a199f24aea0629337

    SHA1

    c2d6f5b19f9483bbf92b1479090dd4d16864f568

    SHA256

    6fbc5bfcdb311e1abe215c7e5ff711b1dc55fa47b66b88bc856ade40906683b4

    SHA512

    d2584d52a6b2c6e9d12133597773096f405e5c4298c53d7a5141290caea95cb6a22af60c9bab323cfd13e76d3238e0f29b7e32a15c7a18a0921db993256cae4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2904b5686a2c3906d3df9805cc7249c9

    SHA1

    7f3c6fd0c3726c2a06670e480a627bdba1c73dfb

    SHA256

    715fc8d68712114296371491fe6995af1efbfcda42b1a1b6e54a250767ba65f5

    SHA512

    40f324ca435aadf0fe4b82d54e6ef7d3c0fb071878a42fe1be28994022ff32472ec7cf6c0b9cf9fc4451f06d2a06d0b35a19ea3f57fed47fd48ba85abaeb281f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a782eb8b97cb78fb7fc7e88d7c8126e4

    SHA1

    639d5ebabd34a30c9fb4f326e4c8b7e7dd83ed1b

    SHA256

    a48ac7f7037a93113c2fcb4b1f8d2ecac4f0c7dda4a724b967bf1cd5ef95fad7

    SHA512

    ce5b8ad72ac31ebfee8682208225a8d854d39dbe97ef2a7cf9fe8480ab68703e88f1007aec76ff38a552edb8c5262474be30d3e1330daf383b5c7265dfe17af5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75f874763f56fb6ccb129109a6f830d2

    SHA1

    8ce82b5dd55ed518e3249c1f85e179e52927c994

    SHA256

    fa1b5d0607479b27272a55b8f874ea39bb605c5aba10c5df4a746e97a2987081

    SHA512

    2242298fd93be5c5537940d7e11e7d93c1163b8c0747be0310556835ec239a19a832e8c70e0e8e01ce24750908ef02355a19590576749ef1c07ec94951629ea1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b53d00a735c675ef2dd32310d5ed1b99

    SHA1

    04f78e9509f4820806cf9bdedcfaa8818f72d341

    SHA256

    195a74c6675e1d85a083299f8709a755c1a0635d273efdb3f1d089665ea3bcb7

    SHA512

    1e6de20b3bdf41e94e678eae26130caba80bfc3f030c9afe9957ff9901d0e55d6ab8665189241430a939be3ca506025208f91a97fad58536f6acf7ba56d80ef7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49b08597cb0a733af7be30951db23c00

    SHA1

    5e46ba7fc8b31dc4bf3fd0d5ff405a60f811c685

    SHA256

    11ecc5dd444b3c6e556a6ea79ab03538ab756f01657e3f1b712ae49f096a2cd6

    SHA512

    9e3ac58b01d65fe7b70a3e58ba3c234e25ac781967ea1c962a8827deb6486d4d7457a34ab3c6d54a9334ff6d176a83d42442cb27431f54a04efc0128c83f3085

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b9ee1e591a38d80f84b862f2023e0a6

    SHA1

    36a3f94a2e3662caef9571061daf62aa31ece1fb

    SHA256

    76a76544b9e782fbfb5eee717f206d84bb5ac11b8504fc17345d9108e597167e

    SHA512

    8fb9ca82b6cd2fe9d7d12919d7a1fea0ade9797f34cd6a7521c0f1cc122440b4572b1c27da9ea1f5b5b728916341a9b3cbf2db27cfc0874a10c2323c3d0e6541

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ddb45736c2ed64d6ce7fdf1aa58f5a3

    SHA1

    5bca2e245ac0c975c37315bf73d253ef7a3eec25

    SHA256

    a043a83b07eff4140fe0076dcca3b0eee5122700b041b0fdaaf6fbc6f8b4830b

    SHA512

    302ad02d56a636eb54f9bec4b58eea3bc72ca5ebd66542eecb433b5c899155b5e1023e476b216874fb2b14060de25818f174239717a26bf227ecf80648456497

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    01fc49679be5e9967c0e90b7d937de67

    SHA1

    b1068e2eb101a8113006b7aba81b43ae5ae5804b

    SHA256

    47b3aa0ed309971bba47695bd692b8f6566de1aba2f9ce315afc197846db319b

    SHA512

    86c9e934a032c3a9cc95d057740bcd0835c8e79fbde435b612aeb3a8a151af607428e01c5b4f65410c7c155aa400ac6caef88d50d2e443d17b73c5e840ee69c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2e776ea7ce9553cc3cf5fa1e23f3fae

    SHA1

    7379ae0cc62739924e086e493b6436a6fc90bc62

    SHA256

    1dffe4daac0cfe229b267e499c1cb9e5bcd0efc884c786849d8fa94ce2c042b6

    SHA512

    acc6c95dd293b5cf9862c83a6fe3b6bbe1932314d02fdf6ac41fd3cb80d1f47c563532d642443557faab846e6f4347bef04d354780454eb7979f6ac9812ad7e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    02a928f57d03b35455d5b84bdb3ac683

    SHA1

    87774ca41499253816db6b2ff896e0532e838afa

    SHA256

    c9769721c992f86f506c1bd577fa6468156f85d55ed1de29a32d3934b384920a

    SHA512

    0300d1b66dd1d79488037c9933df86a63bf92ac3d32093b6f9e81dde52ef95f2b8236791b4893fb7622bfbdeb33169121f511a20bccdf29b6faa902a1a1b18e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae56296ab7484350d74e1bfbb6f55106

    SHA1

    5ab88e748ebe5567752cd4e133cb0544c11d9580

    SHA256

    08b4b7d7ab0e97f8e728766b353ecd65a63621ae6df1271bbadabbf45469b7ec

    SHA512

    6769d493e3e79614dfb28db7abf3c6cfb57d575097d01ba8958b98bb5d9502adcfcd95907cbef870965aed3871cd49b1b76fad60e67763a0bdb20bdaf46a8dd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98828b6a2648a615923276f6e06f3858

    SHA1

    04087960c027542735bf5dd043312c4041edd56b

    SHA256

    8503ace4d8a9ff343e18888430bd855ba7cb68232cf20c2f55993c4648e39c62

    SHA512

    2a6cc6c9abe5061d42ce348c7ddbf269d4e4ae0329d0dfcf090fd68c63dbb0357b159df41c1633172345cf28f89f8bf97793171d7ee2140bfe0230612850709c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e77155a541787eea24d2ae4017001957

    SHA1

    50c13b8fc0d741c58436e448257f4024db64dfb8

    SHA256

    1a43cdef542a31537a3f32c6e3189fceb2772adf1d3cc6d742a170c98a2a452f

    SHA512

    d4079482501f369673dc975cac09412319eb49c9b97d5be6feb03eb432f397c68ec86574f0c794dfbcb817fc7b8103e3ee5697d6a745e184fe4d1f6ed4539c44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ef595b2e0ac69f574ea703173a68b5a

    SHA1

    7aa9370f5b139bbd057a1571da4c74f06a97079c

    SHA256

    d5c8a831737bf46386c8b9db43599c2e2eaf288168f7d4fdbfe65d0f241a4ae2

    SHA512

    22e8ff65bd08ec16798ab97dff6e371d3bfd884da2370a88df522b5d3f5e556757f1a8f9588fe58b04592bac46eb422e0a3399c663352ef99b33163bf4fd19b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41b8e3722eb6dbb5d8db99ae491fe1e5

    SHA1

    e82b3d70ee5c16a5259ff6337964d62581d12237

    SHA256

    8d5c044cc9d93318807aa94aaee45b3f35ad778856e36a36bfd6d0ee93fa306c

    SHA512

    a32c1a33b25fd5120e39dade6e0eae99670587906fa296c0c566d74e2327ea4960b1ba85a5786bf8a561a9d54ffbfdb31e797fd41452ab86a76e0d79a12085e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cb6ae357966f3e04882d247a8c81fd20

    SHA1

    d92ad3ee9fb94b4436ec882159bc806466ed81de

    SHA256

    affd0ce43d619da0db53f1f92703e797f03e02f623ce8fb233199964a51a8843

    SHA512

    4eb8ec68c35d6286ac8b08f4df0b578d613102aefd98982549c0df193285e4d6a67bcc564f4ffc93942fb025a1901ab951ae90902095cb4d05e5a1584aca7953

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c6e445c809d0f66ded68c29e3f2f6368

    SHA1

    4b3c7de289cb2a1da1ed80fda2a916ce1c3269e8

    SHA256

    80735ed12e32e7494ccc7bcd1574e5fa3f4b641f0ec3d3650eb393c880669e3b

    SHA512

    d0bbb7c4dbb776d59dfae05a9e34678dd880a165ad9602a6b7bb81a63c0242fb0595b2af572fa111ea211d1bd2235fe9a7d3d9f48e2a5552ea444e8205286afe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78f552fd6448faa22ba0e7582b653421

    SHA1

    82670612ff9c2522f59e0c91d56c74f0256f3221

    SHA256

    7a725981af275f4a77fb7d442a462e01b8e0790f6c8030868c6ed7f9b9c12f1b

    SHA512

    7cd71dbc2a60fd4de829b68015f98f1c4c3f8b8e3f29ba622f6c3fc7723a7d2b094a2cf3856caa341156ce3e44441e210e24f82d4b13696e081b1fc6d93c3aaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf80d8b154efb244a9d5f6d03d1f743d

    SHA1

    f55dc7e7c337dde23afdaf417d91ae7857b11593

    SHA256

    d74a8711cf17ff62ff96f8ac5f5e76280753a503b57c6b08a70e1e5fece8c0c4

    SHA512

    c0064aa50141100845288e2aa71e1c83c0c5e8e6e05abb570170fb4202dc6e0c582553553a9142406a5a942c5ae2d0a56bc66b242308c8960724874975147660

  • C:\Users\Admin\AppData\Local\Temp\CabC3DD.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarC3F0.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b