Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    28/09/2024, 09:46

General

  • Target

    fc076b36e4fae04404f2fb6b55174c2f_JaffaCakes118.html

  • Size

    14KB

  • MD5

    fc076b36e4fae04404f2fb6b55174c2f

  • SHA1

    53810145c72a625030e7ed80f98af9719b6f7964

  • SHA256

    5d9f1c6acf0988ee905e39b1623e6e757ea3ae3805d13d8a223b7c39b96fbfde

  • SHA512

    d1601bbdc948190c8c6e6123d901d36825499998ad2aaf9e9bf94188b27d1158fa399deea8234e1b909fddc21555e627f2bf26b24022791346f3f3422f9e76be

  • SSDEEP

    384:CyiRN5Hym/D9tJQ9t1j6Ai7zy1wD6Ma2AP2tJXWo9t4tJdhZV:CyiRjHyOxtwt1j6Ai7zIo6MVtJG+t4tB

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fc076b36e4fae04404f2fb6b55174c2f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2328
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2328 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2132

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb2652baaa6f1692215673f219ca2b4b

    SHA1

    f1aec60105c01bb9a4039c2699e4984e48d6439a

    SHA256

    0bbed0ced5b0e6ce0e6c62467204f44fef6e48379a93e9ac628ee49a1fca5317

    SHA512

    33dc78025a21c1cf1556f6c92c0d6ea40ff2ff75f51ace71e9d38e90111d0357b1a876133f8f8bc21f64578cdeaa2f144237f72ab0f27c02afcb7a822fcc709d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d09b3fa0371ab33acf8701b0726be28c

    SHA1

    9b2c6d77427b023c1ed54268053f9cc52e4895b6

    SHA256

    c9a93bc64d227cf5ce4086c732c2a0cf3893bf8b393e3136757b96cdcb500dd5

    SHA512

    fd5009ef1864112dea5b01a9833772a1e09ffd532c1c56620c30aa8e378992deca3fc30512f2f16a42fe1fe64a8a4a7dcd6282767f2f7e05a71bb35db45f6434

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    10cb144a8783638d9d3d313a644cad8c

    SHA1

    ba91639f485e4b772d2d0252131a60a321d50ea6

    SHA256

    55801a5d675dfec01d3195fc2d11f41eda691bbfc4a2cf1dab187363c51ab7c6

    SHA512

    61631692e59f7552fb4cbc8c557f4d7a38ecc3d92a648fe98ad96148ddebdf536c7c73b7b10039fe1c3bd1e1f4e1f1b8505fca1626697862f3fc3250e9467bc9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22a23f538e4cb29f129e02032601a7f8

    SHA1

    b7138aca1e686e8a3ff34d65dd80a302086cb447

    SHA256

    a6e3f3ab381edb21d482ff1791ce87dd421adce12192e26d621be5857a23a7ce

    SHA512

    ce96df98bc859603baa2ebf9299ef03f09d7118dc67cdeff8985075b6510d6659145f3146598334b1f20b18d081cfbbae1dc499251acbd8f586a437b83ce49bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    90f9fbe522ff9c481f09eba6400ea00e

    SHA1

    cd8316976973315b21606b05e738983dd177a9ca

    SHA256

    7f0606ad4b51af5af55ee20bc786d6dc54bd2b2b39a5f0209b04d9f13655a411

    SHA512

    02affadfb4f0c50cf48d7aa0c1168b6cbd6414e479a97eb11c112c368d91800f06047cac82f35b01235ef5d991a598a7fa40c97772ad68dd5be9981d475147f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c26d3e17d78d116d6d9175a76baa79dd

    SHA1

    9efe1fd5540a01d445c907fec2b156d0a7daf713

    SHA256

    a02421dfebb89886267862c3d39fb8e13f756edfd4ef82101e8fa7e9459080e1

    SHA512

    f2adc3df46c0ec23c17d75face0b5ca4fbe34db397e6b204134917f64fbb33bb61effb49c2a05256fc43b0dea3643dcb8b22fc5cd3f584755a294c5066a9a06a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0cdc4d34b584f0c5324e17857d586702

    SHA1

    9a868f2bb1d4c69d4bacd71dd0ce2cd7a108478a

    SHA256

    4fb36b4b2c105a6aaaf169602438944a526922be0fd5c830893ecb112e3d32f7

    SHA512

    1f8e2a4de81b0a2c583516c6aa6c55c6221792be1227470249b0e55e517b03a9897249164bef6c2909e06729e2841c02dfe097557097a5d0a61503cbdf32b931

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3744518b7693c196aac962622c834216

    SHA1

    8e76e6a68efe69c4d6da331e5c2511c65888129c

    SHA256

    d17f627e04891da16df49d29fb00797ee7ea147098f210e0cb28dacdaab781fe

    SHA512

    2b1bad5237643bfb300e6c54eaaed008a122cd97230c66d4ac4eb7b01e9a8a97f2f195397cbf1bec09c9a5118f5f4c3fa0f43f6868091b28032c974619aeb35f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    07a170c7b1fb566afa83dad01f7b54e5

    SHA1

    96e934f401cf86d23a1e1c72a01baa07e39be195

    SHA256

    a2b4bc6baaf9481b562dc18cba8c127674366b07c18bc22392faedf1c78b7691

    SHA512

    7d0e00d44544516dc2f6995ab5f4f1b6f2fd9c894a4cacc288e044e6b5fd3e3972c5f65e578170698a891607c53c628cc7a319d0691e7b9eaa94377d3028d0c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a73bc39adeae4be0a6b35e390010ddf

    SHA1

    939deda620196cfd823483ad834ef618d4ba709e

    SHA256

    32034b080273b5fd0a723f344adcf62c2cf93d97dfe8cce88b1da30bb3f28e0f

    SHA512

    696c42d9d4fe6570208a4674b78d263f0c9cc26991ec44316dc0a62afa4b753e8efe5d3ff2381edac4169220e68569fb31a51615349194160cf13ee80adac56f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    adbe7e5bf6d6fb53690677b50d30c8c7

    SHA1

    e3eb9859d967e808b8779f2d10fce84e0a1db420

    SHA256

    150032f01d0b30ff5264cab313875a31148a0e682dd530012220309a577530dc

    SHA512

    a310931a64cb1d356654b9130c021b953a4ab7e6a242bfad36650b8c35b82efd5fb6149abc6a8f11165ceff8454ea7a6016b0c084b1c2be52cabba118f68b33b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af467d1cf5456e483619a54d0655f287

    SHA1

    1add6b579659c055b5b50eb177a50452a99b81cc

    SHA256

    06c39367ec131ce51e79e2aa031e986fc076bd7bf3880911341ae3f5d7eca3e3

    SHA512

    ec42a5179da327c16882ec4a69b82207093840929ddc82f58da971835bcafa23a6324471c34d5e9bd1e9e988a1f2896bca0434fdaad8509239bd7aadc7cb4f47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f476257af9f10c3ed4ea244779818739

    SHA1

    245a8aa213109f45853e66562a66ce35350c5f33

    SHA256

    7d9fa891c085897caca569530bb901137b7dcbe34c31ace73872fef29f82bf54

    SHA512

    c78d6308d2fb9c244e928721aabd8ed42651d99e9897d8b718549a1adefe0805e404cb2e7c067ce29134defa869ea7e5430a447a0582a9468ab0757799b6561d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a407129cf1ae7fc60906cafcd15f15e

    SHA1

    858446831ee0dda45fd00f1e61c76a04e14b1cc8

    SHA256

    1c8f85d8ca43f51242d8a9c24545d63d8294603d18480d559a62abdf4175581f

    SHA512

    c129d0dce52761c2605eb43f93ddf57e70ae4a8a95800f82cbe668e93e02efedcdd5aef7af33a364912abbc548c7a4ab9e69ccff89ab2652fc0109c0a666ad3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    331f674d251ea7ef0de39e4460152a63

    SHA1

    c2d4805d9beb67174898c0e68053037f5ab03e34

    SHA256

    198dae5e4feb52b9190ee66d2bb0f72795d5917c4e4e652ceada1fc50420f4a8

    SHA512

    3eeea928212df52d72106dbc9793f39e5f4065a623805f69a3cd2af6ca10ba3b2d53b324fbae87f2b903182d8cd5a8796975767cbc49be652194a8096fedf073

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e00d4963a6cecbb57c372d9d2254c65a

    SHA1

    deb8267c9f6f92579442ad939968295f6f5b9b59

    SHA256

    98b53031fbfcc4ef53c1f4789652396c8778c91b0929688cb77ac7d822cf8611

    SHA512

    3c1314bb8fa336b2f4efe4adc818a39cd0872b298fcc70b3155e4a268a4bd9ce36faf079ee7c74ee5b61dba40c190c96091d1e78105db46dcd40e77f616f7231

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    72598fb69f7f9555f0a7bb86c520e2ef

    SHA1

    fa37d5b2bf57ab9b7e1d8cb0465b57377718f58f

    SHA256

    643b7ac1a6aacbbacb1476373a3139173ddc4b7fb8c5273f929869c197dd63b5

    SHA512

    34f69596bbbb9a93d44ca28877b0ecd5f867b2dd8ce1cc9146a09c3b238e206e7ef4d8bffd47086a1ff4a3cd2398c6b2dde29c7fb54372b8d18f78d15d9929c1

  • C:\Users\Admin\AppData\Local\Temp\CabF9DA.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF9DD.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b