Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    28/09/2024, 08:01

General

  • Target

    fbd94c677e552a7067fc3434b7102412_JaffaCakes118.html

  • Size

    27KB

  • MD5

    fbd94c677e552a7067fc3434b7102412

  • SHA1

    989b4aee54aaffb3204c898c079c18b0a9081a43

  • SHA256

    2724ebdf035077207572bb4b6da094ebd9e9e51f23257873507441a2e6dc6cb5

  • SHA512

    ee337c228e4810744f5f302662e3e67a17b656d24f5355b5ac0ee1bb279182d72a0fed9ee70036e3512edc09b2b1f5de0d05e1460bca07906848635c70d054cc

  • SSDEEP

    192:uqZLvNb5nnynQjxn5Q/GnQiedNn7nQOkEnt6UnQTbndnQlCJVevo7Nt0Fo+NzQ4A:nNQ/3ygcDrLB

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fbd94c677e552a7067fc3434b7102412_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2436
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2436 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2116

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d6b73d2a432cae7478f429eedf0c152

    SHA1

    71d45abc73b4cd329bc2bca31f5740a312d9d1bf

    SHA256

    0b41cba68f3f634be2914c00cb7a423af5b88c6a0f53f5afd02aaf8e7a8cdeda

    SHA512

    0f4d28099314f9800c16bcef1ecde7b60d73709ebcddebee0bb9e4cfcb945807489ce38becd9f11b699fa10388af32dc8c3bdce7f14645661a8ca97759966461

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    81e2292ebcd8b990e29c6e8455f85d37

    SHA1

    7e69c77e28f0b9723f0870b435f1248ea9ec24a9

    SHA256

    6a68afda9e217f26e7bdc287433af30b028de55a01d2e4b85738378c112838c9

    SHA512

    c484bc839b3b82024ee98c5d9a9ea539707a2c41aa3e6f9c12479c1bb001c44569ece876301262b445bb56cb7938e610a356750e9fe3facecd9bb5c71b6bc41f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0695aaac72654f3e41fc8fc80b69f302

    SHA1

    07aec0559e9b3b0b62468d818080aa7555ecece1

    SHA256

    1d3edb6ef97e9f3b9b9eadda83a7f5d64c36b7e8e8bc42bee6cceeffc8e97868

    SHA512

    9ec923ffea2beaaecf5b86c9eb10fe230cf5001f33224b562f89e18e06882d3aa50a9bf88edf57dda893fdb28ae319c4b7b24c392b588fdadb91a8cf7a75c57b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ee5a96804147e753409a9745ff8ec0c

    SHA1

    f00f51de055d44aa6f004cb9510b5c173e884186

    SHA256

    f7eb73adb86a2a3a504d4893037283fca1ec571fc31c913cb2892ce0f892d559

    SHA512

    31e094f8987c295b1dcc39243f6c6916ffcba858cceb9aa425e434b2502b712f719e615a71e2f1dca163896efb8f296a3117a1e05417972d4a2f2b1b593ece91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    212078f50570917c3800b721a5bb6f14

    SHA1

    cf514f607d756639e192b6974d4416922f6b8a2c

    SHA256

    c8fe948d6c9bbed5e80879e476bcb3a93c02dbdb5eff7b27331b3f420979e16d

    SHA512

    c5aa13b98d36e9d7c6a823744f6a83c2d336cb9add1eb47cd9348bf9e4f646364b8ba2ff20a09c406acd97098f43699a5890de396e3b83a38173c7dff746a377

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41e127ae2ad5c7d2cd3b46e398000e39

    SHA1

    9dda682e1fb9bbd62acc4c24176689b4deb71980

    SHA256

    6b41edb677b94920712e38ae198f0956909ebd97f623505212713758282f8de8

    SHA512

    014071eaf70aa78ff465970c4c580f51bdd932dfa5c97941118a19134ec07a5c2c25b31bdb6e31d2b35261e8d3bb6bd4e17d243f0e7518f09efa3129cec7e50a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a15840fa646ce83b578d9e30db8fcb28

    SHA1

    5484a41d4bdc8da252477b9c20f2b3e6119bd2d2

    SHA256

    c2e06d062924844fb73592aeaa97df3cc39220891e0d7d76bae33b09076f5e50

    SHA512

    f4235b7ceeba3bd984c2307450ff3166378f33afc5c6efbbbe68d14cb43022004dfdb6cd7b91cd541a84dd0c542165eebbf88f174b5d66c201497facbf014519

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    15a571bdff241532320b52459c4e0e27

    SHA1

    fd8abedb1ac941ad71d0c7f6841ec351c59ccfe5

    SHA256

    dab6ba78ed53831fa97860ec09ce8c9f80a4b670fa51826babafd0ee6ef8b85d

    SHA512

    63874c073dc4b3af72c02c7cb29b0e2d31ffa086c477e2d1399c068a41d58bd448f69431606bd3ddca845767400e8dcdd86d2c060f6426e3789935cfe17ab403

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c8551b8797dd81b7a9258029e7115061

    SHA1

    d8cd6327ba2fe9c2412c66fbf0d4130a6da984da

    SHA256

    5be055b49f2c76aa43fb0e87ebe289f5141cf26d50680507a77e4e6b01095814

    SHA512

    9a126d25b943e49c492122d146869277219a6d5588d9ebf84089506b396235c9e1c79699c3863898f63c5a3db1d926d722f940018db2192cc048e9fc8cf3ed2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9de5a137de4ed1613f454134c7ba44d1

    SHA1

    be1e86b171d4b80a342d8b5a403d13750de3d0f3

    SHA256

    250c241ddbf0582b5248abb48d8456f1201195e64ac873f1d3703a305e96be6f

    SHA512

    62a8b6e82c5d226cf1c54815b6e5c30c729c01a4432fe40a54e647e71f39573cd4823f129bbe3905a4d8f084f2d8aabda5d713990d9ec1dc266e6c466528bceb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    38ee4aa987ed3e5174d63b5176a82fd6

    SHA1

    02ae21252ce91d24403262cecf98dd5e91f076c4

    SHA256

    35c100c42da36b378e212a35891c704d1919e3b754b44b4ebf7e4cb61cc3cf5e

    SHA512

    e6e8bed35e01f6244aecb79638813e868327ff225453b121169da3dd1cb6f4374676691ec0ed69f5cf41a0a8c48e4de3651b14f4dc4995d8b02205afa65c1ae4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    71293837a0309d603fb6073720e20f2e

    SHA1

    563919539dcfabca047385172e08456cb13fc974

    SHA256

    454d2cb587d0b79f463d18fe25ca986de0922ae82635030da95138ed74dd85c5

    SHA512

    3fa7bde0e845e3ef429c4ae2011ace94586ca0162bdb6dc576335954a5f017ff449c764b4e2c96c031996a5e8042965ac97e2a2d74f35d085cb2db095ca8345e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a375b328e48e2797fe32ee4e20c59ea5

    SHA1

    968f4f5df5018dbc1b2af66845c28f630b71c122

    SHA256

    af75e02822d5ed272ba51c405945cd4d3f4ca6e3b4a290e84b54982a54fe0419

    SHA512

    386a4f6e039aa587a97b2b133d1f779bdda70b42774964ef8b667be5263330ec6378e39e7579eacbc04c1238631b29e9a61f1639a8fa8b09bde6e84b2171eb49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    135932db8935ba87b8be616147ab154b

    SHA1

    b2d939ef5a5c49ee71486a693750218d270c83ef

    SHA256

    658bddfb63825c99834c46e2d110715cc975f264a816e15f968d05f23e6e7e21

    SHA512

    9bdc30c09ff666ccf9fdc41899bf917581a73831cc5f2c28142ffa80f41bbff39ce6bf58e0616ff0e844350dff845315fc7a62f5a8ebd9b75c336fa38e4c822f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    38d0e82c72929646bc155a0cbceac6f4

    SHA1

    7d681853da6f11c7e79ae40b8f55166977d6a18b

    SHA256

    e179ff4d707ddae22a6f9c08ae7e3da29891e38878eb68d2db49dd961fbd7ae4

    SHA512

    8037cfe5c762619e9ea4b81b70596df0cd98b2899d4deb77a42c3fd10127c57b64501199fbd995351309987768bb725b9743d3e0c46cf2a8dada9f6b4098ea64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d82956b658b378f5eefb47f68aa358f

    SHA1

    6b485f35f357339b5f922331957318c63503871d

    SHA256

    a80fd0c813df2e5624de77cc5113ae4c0ca94aa61949bf5db9506401a13f0ef1

    SHA512

    82438249df9a24f3ee8ef8019b032830de161c4a11823c01e1504a83242537a52a26aea4ddd1e97ee333b21981f18ad0b913c89af61dcaf4ca70929a8312a1d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e7e0cc47abbf8f379375e72fdd4215e

    SHA1

    c516bb6148719a47774b674fa2df6dd0a7de23fd

    SHA256

    6939da0c6664ebf75f586e3cfbbdfbfa163e7c1684a923c900dacfa41334b1c7

    SHA512

    6904885f1f23199dbe7c50a0225a06bb7a34e4c42f3ef8d07021ad6e8d5d9598298139b60a4f2f4c7600b77e75dd0b1a1ad173f7cfadaae2fda056583e63c805

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b702e6051cd43a162a3dafd83ae1bfb1

    SHA1

    b78ccfe9646ccb2529c95fd767295b71795fe222

    SHA256

    cd89d01b7a0ddc8aacde5c6d2aec81c0b5584116cb1da4b523043aaa52bc4169

    SHA512

    64197d4d9e4e28fa05e434739eb1141dc72473b0ecfc247e99fb8655ceb5f8ed9216c2a5b8bd26e19c0f0426831b17ae8156b9cc72604df48d446fe1aef00112

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d40f9af82932e7dde3fba3abcc32c84

    SHA1

    aedb13738699598b4743b318027768383d78696a

    SHA256

    324ab8900882241653b972f19e53875de6e0e461a8a4223d354f868b0b2af956

    SHA512

    523bccf7330760d741e267b95533145012e87d7ba6ed4b21891605db5f3e06c015647fd0e92d42794be368fdee6b9b2c5c84c3623b1aa311e712990557b6956b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b681346504b90704dc033253a101258

    SHA1

    02f39f3057785ec8c499be5760b89135ca9774c3

    SHA256

    25f5860babf231c6fefa755a02b26c3c287c877f784895c8eaf09617ae8ae60b

    SHA512

    53d54fb8768edfbe0c73b0f93c18c6caa852b9c30f68a69af2647834515f1ab38abd0f3e4e4da601a05b32f7bd9bcb81b0022870f7eba674556e59450ebe8110

  • C:\Users\Admin\AppData\Local\Temp\Cab5ED.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar63E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b