Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    28/09/2024, 11:22

General

  • Target

    fc3297d728f731f4607a614cb79aa9cc_JaffaCakes118.html

  • Size

    30KB

  • MD5

    fc3297d728f731f4607a614cb79aa9cc

  • SHA1

    140c8062fc016a6e077a2cc66b79d392dcdb7e16

  • SHA256

    4fda37021eca768f5672e34e4ef07111a891effac0a1bd8e8ce0bc6db6fd0c10

  • SHA512

    c4bc0a79de424793c2ee25fab19ff989f70fd331579793a75d5a7ace893af70a87d1e9c4c168932c221bef2aaf3e33c57431300a3f135f496f23839b019ca78e

  • SSDEEP

    768:ihzJD2pBHzBY/kuRbXUqWuGeHhqg1Zf9hLd29HmV:iz2pBHzBYVRzYfeHhqg1ZFhL5

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fc3297d728f731f4607a614cb79aa9cc_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2756
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2756 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2688

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    0140aa5c98f3f97871f084b2816e6798

    SHA1

    a8f70ad85359e9f96724147320d3d3cff7f3f435

    SHA256

    db6433beddd0641b74d03def44f290a637d6412f9ec91b63bc92a0d7e5a83857

    SHA512

    353892f5c144be39d413401ba538bc3258f846ac77f93b2731690ca410a00ebde16884dfc7445780b430032a19fe6a8c2ad7fbc63529d5dcf70710a5cc479d06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C02877841121CC45139CB51404116B25_0BE30C8E6128C0BC8455FF6A9904D7CF

    Filesize

    471B

    MD5

    29d9d2336e72779e0e11c40e02aba9f0

    SHA1

    0deab76218eed4108fb9ed2f5cb66d0b94028e6d

    SHA256

    ad9a43c1a8ec628e2f03ded9f10ebb971f3816d164df1391b3419fa27966b242

    SHA512

    2fd640ca3a6abe0d46e8956cc4d20d203c2a81d930f9568defb1b0ebb6525b624330d28a7af4154b286377ccb68f7aadb85a8c4798e780df78ceaeffee00fc1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    1e0ee26b288b05cda9bb7929df5c91a4

    SHA1

    90220cbf22b4a070b550e1b0c6db02b1b6d55193

    SHA256

    a8434a80216efd8cbc8c799aac7c97bf485b4c33a94cdc18f512ec38b447446e

    SHA512

    e3c917b6d9c7c14e20c5283f336d8cb5cdf2a033eb21928286614c0b38ded892d84558f65814a17c727fa8abd24ef6e9315253f5925ff0ee2262a2383d628cd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea7fb5a4e8d7b362f559252b780c62b5

    SHA1

    4d8a647513feb755ea5bc198a7d29a0dbe9c347e

    SHA256

    47ff8330b30891d6a17da126413475b9def25b35e019ac68ba267c07eddef253

    SHA512

    92d3d913fcbaef45e93ff1094481e893f03cb853d51f06a1f617bf8f2c7b52217bc59c9e3a661731adf98c89e9e70806f3ce34b06dfdc9d7de549b72d0e3c4da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc2e4bb2fcc9ab2d6591a3e6cc43f169

    SHA1

    2249d0e8b92602dc1c1f3e6458ee99a16213fd0a

    SHA256

    1b226812d1fcf71b873f1f858b66e346c214e2bf6dccf9388c3f31c12fb83e1d

    SHA512

    662bd18604d25e4d111de1d1158ecfe8d9ff650f103fc91082dfa68acb8e78ced93fdd26abd1ffc76faefe9dcb8e7c7e4fb93d4cc92598b66acaedd792e825e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    09fc4857a24c3ec8e284a0d4218e15ea

    SHA1

    a320489067760bd0c33764155c63e3d76e5dcb29

    SHA256

    94074939c36d3f457d5ed9a208305442c5c7cbd370c2c319a6b3ecd752e66fa7

    SHA512

    7ce0146d5c3214f4b905ea394ca6470dc6ca9eab42b477a274888278eb2483f802c2f504e705a6bd44f37646f9b6d3dd087f4f58cb718cacad0eca780d58c2e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d5e1f6f524c99a70a22ae1914f6785c

    SHA1

    a0b6586ca824455ea42cce121cd36737f8d939ae

    SHA256

    23978e906cee99cf4343c5457cb475542741520c6d3500d2872c0d8d998227ab

    SHA512

    ad0018442afd8308aea13660c8362ee3a8d046bd932798c1ebd6c9a95c177e51991fbd5c11905d3f6777cbed4ad47db47a357f2cba98d65f46b98bd2237d6abd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd445ace1ee3848fcb26deef3514048b

    SHA1

    1e467b202e60b3b9067b5735caa32499f8a834af

    SHA256

    438d6e4f907b10e0c342f7460781dd1b55171918c0b2677daf2ca3a37654d866

    SHA512

    377b00608663f98d8f2591df4651fa5fee8390c8c794ec8dd28d5c53ee982fbba5079b0c3c9bde4361ea4d0a9a2c57e4147ea69d993f9f789164452d39739e5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d61af85bd2ebf4cba6ec13dbb23938e4

    SHA1

    e308bdfc91a57c40149fe76b8578e0df945d2bb2

    SHA256

    62f8de42d73a5d447a32e04c24e73af21a1e8e01bf5e9f1a923648ab018e7045

    SHA512

    52a1336078d7e4b4fc7f1e31c4247a38a5f3158610d25bd4d464a562b98ae7946b0bc0d901b1731cf779cc72dbe36983ded427d0056bace8c3509f51fe23ad6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    042833ede51ef7c3e4d3230b227ebda0

    SHA1

    3e0b0aa90f8a096a16e06b4082359b521fe91504

    SHA256

    0f9992f0ce996461a23f973c111bb959d1bcd9eb3f3e911311c5837b5252c87e

    SHA512

    0573c20fb0af999264c8b799422562f7c20c37153d687a6718e6deb8b7ceede946104b1bf181cfb8d96cad0eb42534ce4dc94a57d3a263f09b0e5c8201deea9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5228d9ed701404bd1cacb788e4a7e8c3

    SHA1

    c734fbeb6f75932833de9734a9405c258312403a

    SHA256

    e3e64f52ab0e5f70e42c494c6360bb8c54460222e40824061e7bbf66dddbdca1

    SHA512

    297fbdc6d6ca95e06ed9fc8ceb58c772464f5523663316ea0e1b938233cc95a348a40b658b26d608e0b19b72a7b605ab5d7c146a6c7b462b92f1a754ec8ed609

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    408422bace86f37efb36455a18142286

    SHA1

    7cc1aefb8b0f9d7340a4acf75081fe61002ae3f7

    SHA256

    bad164ffbd4201b851d2c30f775d7aaca609d9edd2363e76644706002aed6cd8

    SHA512

    7a8e8d4f65d127eb8ca6ea9905c8a6538a17764a39b036b0242fe68a52f0f28955de446890e0d6991cc3996cfae82fe1d3531320a0b6ad8d97d87b934b61143c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a6bc7a95709092e0eefe5de3e76b7f4

    SHA1

    7762211f0727593046e5db27a3d6014d3367010e

    SHA256

    338e84312cd509e9e17fd76b7726e3cae115fdd6fcfaef2350b96606c30c470c

    SHA512

    b2ac71fbb71a8e579f57d67feb5578e7feff7fffa8cb13ec0841a5db60190ebece4873d9cd90438d7fea9defdc6717b9093047da4278339de1b24e4c46a4dfed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4061cdaed74684cf157ce5a4be725764

    SHA1

    d3546f1937594d6c07c508576634e43ac46b0044

    SHA256

    818bcf32f61eccc38d37d854a1b8f7ab945c932a540c001ede07246a14351131

    SHA512

    0c8ac98e91345393cc49e5b203510c63326d9673fdcd229d9f4cb2217f4782ffb6464f9959a58788db7f4500adbb51d838a03c02658d9bcadb590170e5932ebe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    954bfb28f57f6e5c1f8c49109b81cafb

    SHA1

    848c2ddadb6a893f16dfd25a112be74fd3edb8d9

    SHA256

    9a56b23458f7ab92d0a74f8d4a9eec2671f59c2269e6d55f6c9642f30a3a2219

    SHA512

    5532f0a04154583cd2b0c8631d6bfc9117766945d4e511449b1ee6e2425efc939137323f03d265711a248cd87df67e7fb61f3f614ebbca5216d700653d9372ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e25560a65bdb875084c545c56913692

    SHA1

    d7fba4d54ef2b1a812f2e5488632d83a39265f8b

    SHA256

    f24e342d0e232bfdc6f1b241120034c20bd850262ae1c6769907bbc15ab5e723

    SHA512

    bfc41a50c4a9505bf392e23969fd2efb4b2f089533b8d5ee64f735600ac609a63637fa7f21c9bfa9521ae815e84b7602528557e127403664fc7ebd9c567d7979

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f6981710177d387a06296dad12ca618b

    SHA1

    05b19e44b8a9e2e23b48e869ea5fa2e13770ce19

    SHA256

    7f238045de2465560c85775cfa458f4ffc98d346e939782c94dc61a7a3212d8e

    SHA512

    4531718aef4356b10b3c00a78b1e86049246a598ea1870096c09485a3d657fcc405b3ddaeeb57bdb4db6899042a726e01a042b18f4b8675c4b283750289581e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f8f2f97b367eadbf38e5c81a58a65f7d

    SHA1

    a23d11d86057accd89202984e2522c6906136d12

    SHA256

    43fe28ed227407f166eac766c71d489f7854eb20d5ea7235bc59d5d6bddb975f

    SHA512

    92ec77a18328d4258854609185a69ce5474846eec45fce7df68976a2d3cf7bcb09455ee59d0582acbe9e8399a68fb51eaa6d2fe83bce6eaef983f08fa84c2980

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    83c0be53ef99ca3fef8357f039e1baa9

    SHA1

    de305a2d7f6195b4564746f93d819084059ea4df

    SHA256

    5612e61627308fb5aac5502b6af971930d5d1f27cdb859ccd56e365035348355

    SHA512

    d9018e0e1d08e0e11bc14df3f4f77a30a6f3771d1647b01aa7111ee32cb56fc0a8e79279b408bcf320fd54b1379f9bdfc9d76cd0fb677738e202ec378470e628

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    72749f1348bb1354824a8f39e0a5ef68

    SHA1

    cb96b008f415026a49b58a2db2d09fb93a7f77da

    SHA256

    54339728d5f2f37c177d63eaca31d14950d3aabe1b1095c364f20693acd10c34

    SHA512

    b668c7e45994d9eceff6152932f7e78a43fc76bf597cf217a2e6d2bbad76ab3ddbbb9d733493b2b2ca9b970aab159d1369870fc678745bee4d343bb8c2313b54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    724c376e99fc714084b728aa925f4064

    SHA1

    0f244e6f4c983a740554b30a145ddc21be3888e0

    SHA256

    be62c632977b18a6e09130675c9e310cd42e6d6a6897c8dd31b5d8778f8f5ca6

    SHA512

    9a336d0794da909245c552dc93eda9caa29a66c59fd02336e547fd1d716e3f0e17e6b997d6dbadd216b4f6d38d6d2ae4289c2c00236a793f8e8d899e38737417

  • C:\Users\Admin\AppData\Local\Temp\Cab6E6E.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar6E6F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b