Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    29/09/2024, 22:55

General

  • Target

    ff715840e3c3a9924dcac6378f9d782c_JaffaCakes118.html

  • Size

    61KB

  • MD5

    ff715840e3c3a9924dcac6378f9d782c

  • SHA1

    ac36aa3202ffca4ecd41273e7c4709adef5ba6fc

  • SHA256

    bdeba62c942f21dc5b7f65fc4d7264b70496618b4ec25a52ff6d47292986adc3

  • SHA512

    c17d32ca3f3e42494a48fa1e85442a13d6a065ce18782c2e2f3599f9198c059fc85da811bde970d5e69145fac727cefeaacd20623dac3cda83f6023bc0241f5b

  • SSDEEP

    768:RGoRQ3o7mAcCu13uO0oU53i343CqVUZ+W0lkq3FSesUWA3QS:RAgmLuO0oIMeBVUAW0lkEhl

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ff715840e3c3a9924dcac6378f9d782c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2084
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2084 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2248

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b99cf0275a92d5bac393b130e458df5

    SHA1

    46a497481b6a27b3b37fdafb56add7b7d90325b0

    SHA256

    3db08af8f35ff126ff2661a7a3c0b6c9b1a739e924502cafb873777789508456

    SHA512

    c2c96a4c7f8fa6cf3730eca26fca8f3740ac0020307d1243e9269c9cc8e9c43a4c91b3138781f38d7cbe5451c34d52dbe24537d5cbacde48e1d92d41e1e26e83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    501274751f003dbe6ea26af501a8494f

    SHA1

    a8cfdc1f05c4b7de65c81c751dfa17e788395a95

    SHA256

    4f5ff3e9f2cce65da02ec5ddf757bfeef232a2660fb499dab53b695f8d6631f8

    SHA512

    39e51e31279f3023e27e6ea5885eb49745c2d41a29afaaa28a08e6977eab4ca416924cb306ad0607bb64915e6e8d63ff8a1d5302c2eff04e07367d3437dc23c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b0a82b488c0ae8c76c644e798ef50944

    SHA1

    ede65ea1ee7d2bf519f5056b9591cc278a2f393f

    SHA256

    4d6d96309acda2c9abba76b5159ea092edb48025170f0b073bec1c7c7ab1d9de

    SHA512

    22726709383cfe7b2022c29b867993a4e2726badeff03715c24d1e7d4ff1f68af3927db0e7c927ddeca0b1ddebbc14c0f44cdae23e8460e3072c7fdb26698a2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    206f0fc8f0141847e5b7702441dd522e

    SHA1

    f1e284515483a5df948384006572fc379c13b70d

    SHA256

    f90e464e1ac36f45d4838587edc958f0fd5fe65332ba5ea4108440498b1afaf6

    SHA512

    915988c850c6e1fb2b04ef675cf67d41584e2c09820fc6f442f584b4c8352b5cee5d63a6e909c43977c5cb6dd8db75b2dfe0158e849e5dd3b446b7f4b9933196

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    043b808a7d8dcdadb6e64447ffc0e1bb

    SHA1

    0ec6c330fabc9ac0d6683799e12fd895b9c6a660

    SHA256

    0553ae25d059cd9fd4c26b977e9af95a5a1e6921cfc3fefe508fbf6591d7a74a

    SHA512

    0de6c440153859a0a526f598d64064822545f9299a3cab64b933c2dd1afbc198dceae6f08b9dbfeb71b9de15a4fd46f92693f1d92e465d2211ab1587fae9a784

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    91659040fbc254d2b4595185a87c6b2f

    SHA1

    5e9d8f2ac9fc11c320053e29466204dfb1c702ba

    SHA256

    82f7ed42ad2696f49e800fffd3001795ebc8d51c030f28e6d6a277b5b21b23e1

    SHA512

    0b22c76e55011d81a8e1928aa98c4889fe281fc4ee22e079d5e022e67dbbb3e59ed921c441526155fa28f5461f83ce78962416de03a0ff23ac27d3bea62bb10c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0fc5530ad1e9f0c65e248dbb35f3341e

    SHA1

    f4a66b844700053ab040bddaa5d3ce844dff266c

    SHA256

    7fcc1ff504896966ede18a6935a90abd1b97b227b24fb56218cc73bf5cc920b5

    SHA512

    f67dba0f9fd389a425b1a6ed3b749de30725c283e8763c3f8679bd00b0bf451b58ef78460788254534d357da9e9d0d83465d6e16d625760fb8d0af5c47f8e27f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06fd2137727fae3c77c5e862b2852c73

    SHA1

    c3b02fb9412679c451afddf45d18f08712a5b4d8

    SHA256

    0f7cb7433356f78616c6b1d8c65dfbdad395d0e2b4cf298e9cb25757f0a81c65

    SHA512

    fc3890f6dd85b62947e52693d580d9c1c964ac306bfa22ff49c0b61d2c83303a9f6d252bb95de6dca074a0551f6dec186491dff8cf2e8c238ada07059ed56d1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a811619b9f4d67013f1a5765e97e456

    SHA1

    53336023aac49157683ddfc509bda23ef9d248e1

    SHA256

    3b95a2b4ca16eee2bfdb47d48dd66da2a3998b060ce7687c9c75f1ac737738d5

    SHA512

    6995b8d90a65c97a54e8a3dfd0e2c65ae2d5fc41a378c45c5c3fc530094811cad540c36a6d6121a8ffd28aa8c65498ae2a2b110d89a3b23e0bbb8d964a11d6ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b5057dab1a2988e3811ddeabde18cf5d

    SHA1

    78a4091f3e4e3d0ffdd2df8ec1d8d10721658f34

    SHA256

    4d5a7001402f95f3a8a4f8dd97fc0539b965dd0a93ac5d07f763ded527b14831

    SHA512

    ad431588664482d550ef59613cc721a394ee67e95a02832ba158a9705d965308e68eac80577bc2273a5d4fd90bf97579a0de350cfa8f72d257f788f34058a85e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f966aec52bc149a388dbdc5e2122e60c

    SHA1

    39e778c39cd24e0db85cbc3bcbe0c461ecfb4c3b

    SHA256

    5b731c2ea2aba5372abd16b4723f4aaa3fe2e17c09cfc8bf1e26a49c1ab80447

    SHA512

    d17a6524675c17177226630ff02fb2073f5b96429f4f53b82ead2504b85cda82bdcc059b721b0225ede9b4a392c144b19b751dccba75e2d740008a68f8efae42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fe519e57e1267f5c69a414556f0c1476

    SHA1

    f5caa6465d49d99c05d6f6bd4c7089ce98da9181

    SHA256

    4abb5746f5334090d76555b87b9c51a417729b7df3229c8d860af30d3e4bde98

    SHA512

    4965ef6a14ca7b6261d8468c50183381489343f1078211533d8066dad3c59542f940798ec51075f81373bfef18dd1ccfbf4e0a4598c92e1941a0b92a45be7ce7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2561a1d9afa97a0d7aeb1678bef85eb

    SHA1

    f92f0b72480351ac91f821708e64acf4fde4b3c8

    SHA256

    3c9bee6237350f2435d835e7fe8758867fd96db91ee85e8e7b7f69dae32d1bd1

    SHA512

    dc1b96f36647adcb3f1d2a4f273278ad0cce6e629ed312199a56ca0dad3be8ba3700666fcc5a3fb4d879c325126689e71e2858c386636ec9dd83362697295a35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4288ba108d12fd73698b37e06186fdec

    SHA1

    d2275b1a731aa61941820bdef36b263dcd598d31

    SHA256

    3fc35db5d2f6473caea49f4ab2604ed605c10c0583b26f27b4a2ef9277a75f45

    SHA512

    4269b44d0f8d6351a1b8691be1878bdbaa7deb1f95a4f5f79a0d53bc5f7c9e577d2924d1527579f7cc52a3964e83e11a50b714a8aed555d836907100d5fa5266

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd018378f93aa0a90340e3f62bc889d0

    SHA1

    456152870b78932ce8ea4b38c861f143cfb3d726

    SHA256

    7d1d8f39208f91c50850746276790a2036ea1563f790fa56647e20dc8572ab7c

    SHA512

    ec4fd371f77d477f13e888ff37dfe230f4e7287ee642bf804960c9fb1da220c0d3bececdf0777c70a8a5b5307b7217e123da32559b20a18e68e9b393b989ada4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ceba902cb813458c9b7f3b1cbdbaf28b

    SHA1

    f9b5c06c20f22c73ee9a9ee9d4975fcb7c3acd43

    SHA256

    c19dc5f377e1d2e9229a1cade1ea8d5495a28b8a98ae8f4f0e59eb816a166a36

    SHA512

    a7b2169920d96058ad12d56417574942beccea042a76e54771e0512c1a6725d3ab50d1137435643c71ec0b05f013f7d71fc1793df1d0b74333d97143689e18ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa1aca8951d39279cf23ef04b65c879c

    SHA1

    827f3c6ea0ec022f6dc94a71bc68f3f36854af4e

    SHA256

    4ff19f106c7056bba2ced9b1b3205ced879d16fc51e0bff1f7f3cc1c03cd8e4e

    SHA512

    6643ced0d66be6ccc63054610afe017eab3656ecfb8647f8215ee2da29322a5a71598d901e69694bf4d8d95717797a4164d42a3675e61dad38556f9fcfb85b04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc049af3f71d68f025bbb7cfd3d2b2dd

    SHA1

    28b34d9bdb9ef5b4200befd7fdd2b8e5f96ba182

    SHA256

    10f7a7bd7ea178e597ee92398d0366832567bc15a596759698fd9deb836335b5

    SHA512

    5b57dd05e98319a8d6a36d558bb1851ab4bc1b37ac70fb6771e37e5273e7f43b425f9129ca873588649839914b16e3e37325eef3715859eaa8ad4b1fc191ef8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    74a2a49a1cf7ac91b785dd94bac5ee51

    SHA1

    15cbab3c9d101aef290fb6b677cd68c22e2f7389

    SHA256

    0515451ea182e7eb61f50be3e046bc9f90662039f3b3dfadea1ce4219cf6263c

    SHA512

    25164c88f57ec4b0d83c77477c4a452ec0ca7c05a352ba2efe583a8c757993423121bd0c80f346fd122d0715eaa89358ee6b3d36ecbba0e8a3f12306dd9f590b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11dd75df6518c123680c4ba1d0ce332f

    SHA1

    144bb81d42cbcbd5fe9692a97cc002988a769ca0

    SHA256

    cbc4d58f0c0467b0a2b2676953ada0cf8248319291fc533afc307da78768f773

    SHA512

    e0d9d0d02412b12553f1dc4fc7ffc38f18d1ff9220ab914635653717fbe38be13f0f9376ac9f475a05c15f182d8083c3b69b11837939ab5a0bef3b330a539d17

  • C:\Users\Admin\AppData\Local\Temp\CabFEBB.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarFF3C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b