Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    29/09/2024, 12:10

General

  • Target

    fe7f6923ba0cfea88c4cecd79385b318_JaffaCakes118.html

  • Size

    4KB

  • MD5

    fe7f6923ba0cfea88c4cecd79385b318

  • SHA1

    92f183e09485554fb6f595e3c1396a045bfc53a7

  • SHA256

    30186a3686158d269cc242fdd6d2fd64928a15c6dd75ad6b6ed32baa083088ca

  • SHA512

    8142985fc641af1dfb55256adf01ddb60a308c345fd5ffa17565e9c7330566a2c91d737b9655987c2e10732a6e08b278bbfe36255f42acb147df1da28c890cba

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8oBiGd:Pk7yY1aEFHVKtF37sNjtXATIQFM93pDE

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fe7f6923ba0cfea88c4cecd79385b318_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1980
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1980 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3016

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b0a4316f5434e4576d44eab3bd029be1

    SHA1

    ba9a7ff345659e5363b2fc11cefb2efa2e0ee052

    SHA256

    8e18168f736005baff4fb2c43c9b3e1dc4bc81bb8b620d1ffa79fc4c23a3dcdc

    SHA512

    8a9fa5c0fa5fd03f52fb07bdc0e4cfd37156ef2431bac7b159747c01f4797bc1d2a9fc4e0779d48fe5dfa87d8d4eeeb77b92a1e1bf6c2a619010ca32a2a72dd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc313d050fcbbf41bcf2f08626244a7f

    SHA1

    54d648923b98de25027969fbf872b557fa47aae1

    SHA256

    a0589b11495f320053e4231d25bfe6043be94e26510b6eaef277554eda4e0ba5

    SHA512

    68a1fb18840be99661da194256ed5f3edab2735c8a8f090b6a59d70930458bad3b21f63942788dfc475320cd67e6fbc326d9028e339fa96447b28b3066e7814e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52b33b1095df7c344e8e7cabe7954873

    SHA1

    ecbb99e41552ea4852715054831eab0c309395a7

    SHA256

    0a8a0e3508340a8effebed44c83b6c9cf898a8b0e943e39bd0be0a6652f63129

    SHA512

    60a856b97e362b3f039f366d5a8cb1c3f7218798e0403261d92ed328280b69892ca3a1f04820b1967fb67c9054d3309c2b1bfbc7afa72466599b40a834ea454b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1473e30b2972e6a58d04b2bc93164e57

    SHA1

    d043968c61a32ca67e7f20c45c549a770993f47e

    SHA256

    45eed9a14c870685f676143791ce170b9a6b7e9aa3f55472ea0fd88c8ed2c069

    SHA512

    4974e59a2a3461672d7f779ad3e16e1defdecfd8d798a5a06669b2a22f0aa3bb39262ee8c4d8c7e19a1a13bb2ab231ffe011801667cac490bce7ebc298afbdca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d474e079a330e208d7b0191f8b931ed9

    SHA1

    7099531a0b05978b8d8c3ae420a39b7b519cca96

    SHA256

    d032bdc73e2cea2f2a67058d363dafe266cbbe2cf701c678832a4a9644a03ea7

    SHA512

    e3c340c40f1ac605413e72748b2c6485dd9a69a3377c04086511d0ba1d1490ea022a3f3ba9b47eef8956502aceaefdcb19c3093efa8d0e4520a09596a3661fde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8aef3a3caf89cebdbbedb026c8e34b8d

    SHA1

    c6d9ef678fd77d857464147e22e1dde9948a03bb

    SHA256

    2c4ce59cf8f476baa29047fc8491c3ac54cf9799a32ef8d1d41ba263519b2568

    SHA512

    7b86c922391dc07c8fb16e2f617a60838f8892f680f29e45a62f9c4f531697b940f271df2377497fe4f28db6e078c941537cba4a86535b04ae9ec306a4ebadf7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a0fb66bea86e70c3645ded8ac5efc21

    SHA1

    8e735def7f7170f59904fe65c0844459951ac9ab

    SHA256

    a406f8e928e400dbc2088ff7bd7ba8bc8c4a4197c91dec671a695c3da2bdcd98

    SHA512

    ded747304ed3ee5e1ee047a88eb23a7c5c84882e5ae7db66647e9cc64e5df8b74a0449642a56b8694c40026d04187f650e991edb13d8e5f9d1d44112fe6ac983

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aef13acc05517a32b58e7cbc7dcced51

    SHA1

    c5b595a11826a9a03731e24d72be48ebdb88595c

    SHA256

    c73a6dfd07dffe3b6113d10609de77714e027d955f066071d9c9fc745442ddc3

    SHA512

    eb44618cb24d119a1a7e439114d79807e5b796b67919281e591698c61d435b530b40a38b35c70912aad947732c0326caa4fa86fcb5dba67f39e77adc6a9466b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cac3eff8224fa6252755d05543b66cc5

    SHA1

    b115986a14a1ca89ea3080cba720733f39c3b043

    SHA256

    f4ddd9b8a6bc3220310f8734d57b757590c36d3f5e285fea87bf2fa543c7873a

    SHA512

    699aef09c03659be2541d33bb8eb3ac7418057a07ea78bc4279b43fa63da10d4ce51b2e6c6f306e74a3a53d36180633ac0e503c54f388c69c69f305f9283853c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    351a70fa170152971c7733d64cddfd3a

    SHA1

    03f2a51cec65afc2c2d4a305ef8559ca1ccfa4e8

    SHA256

    2f414e56aaf46c4301a98823de2bae0b763b9589cad4876bd6bec967fcff56e9

    SHA512

    c5ae3b40b4b41c8be745a873dbceb7bd50f65dc726d2add29b14f9e623e37516d39abdd28efd4b60411ca18707ad70c54d1e57a6b7d00ecd57506a3c9e0c9cfe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4db607e00e2d4c8faaf319b6cbccd078

    SHA1

    b7cbe7834b97c02716674ca6243c88812b8d1bf0

    SHA256

    30c9ca416fc595f4b3a706a8683d68bab475986098db4e4ed3101b452ee5c0dd

    SHA512

    454d231c44e596e176b52681b4298e56142b9b151ac2c2578ec33b027aa14f2bac2a4ed4ef5ded310e216dfd9f8b004bcc1e4c7904be520da3c32394c305987a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7539dfab7ae35489dba647cca750460

    SHA1

    fe0e5d12566065bee7bf8e08eff51c011823e798

    SHA256

    061815689cb13111d772d64e8bf6d895e9dc73974c32af4adf2158ff972af9e1

    SHA512

    3fd792715fb39d896e5d217aa927f6da56327d42f3f60cdd4d658340597da4afb41e2abb0c718fe5af70524815072907154fc4c5f1d8460822fba663b79fd07d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    04df6db31a822d12e9e3cd65fbe26eb9

    SHA1

    6a8530bbaabb23fb27f932604b5069024e28977d

    SHA256

    7fb852ab79955a01cd2fca3aa7baf8d77fc7379554cc6bcd0bfa7b5dfc82b68b

    SHA512

    28e5bcc35d89ce1b4c4d74b0a8f66d26ef96e40c71ef1478ed19b82ded35b72c9a81d3ec62fb8e93c80492c3c3e1749419e7a05fc23162a330bd3b27b78e1225

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa05027aba3758950ba5cc1e639213f6

    SHA1

    6706bff88df5b13cca3aeb14b64f06e4d6669e1b

    SHA256

    d5ed8e3009dcacfd0c0c15138ed5a1c5cdc961caf9d0aeabb4ec377a4fde6f33

    SHA512

    938e2f4dcb9cc29d899f0c75b02a07228ea92d3f9534ab5f8336e561c159b24e92bbed56a6f6e83fea2a38d607c5121f85e0f008d6966a74734a675508e943a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    30e840e2d721787fe99b66c018c72b20

    SHA1

    27ae5a344e542e9e7c8a03e9d7199ca109bb4267

    SHA256

    7b2d044e781a6bbc8d94989656504e3c9675f9c399a077737fe66d1fe0f18428

    SHA512

    5f8d9db15814f1671fc28e730df0100195e8663e57c9e6d5ecd92dc7e72c213971b683096dbf484bee8f48d12405335942e60ccaeee86902d64178c9a3598002

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8bcc636ae91f1624e855ac304164531a

    SHA1

    2de06ac0ee19c04c1ea7dc3dc7eb37f1ba5a325c

    SHA256

    bf85ec9c2e06da007fd52954a2cf2dcc147d5e0e5aa0b0fccc0f2df1facfb99f

    SHA512

    8ea17c4e80bd882f5cecfb9e549cf2053c731e9a03f7bb524308c37d2794756a4c4c1f3f4083f9d22c009412edcd4c75451140a48641468ce53778312b951de0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c32d3dd1756a27f0b5df9f99992c166c

    SHA1

    2cc082e5836a43bd8a4c506e4c033cefcd9877a6

    SHA256

    d18ebdfba195803c815323bd55c7e1866b5ac995634a625a578334830df233ad

    SHA512

    b7a7a74eb1b57441b4d3994ad76a2dca5c036b824a1c81e7242567cfcd59de95f10c3cc135d1de0efcdf9bd41a137a83b2a5177eda708cabeaa2d45e246854af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78de688f63615902a4da900cc1552103

    SHA1

    7679f9bc46bac96abeabe1f874f8857ffbd6408a

    SHA256

    5973ca39b56963861f443815fc30ad444b2004f8f9776bcc6de3539a341e57cc

    SHA512

    cdbbaf500025ea94f18eeea515ea94b3807479f78a7cf798b8c5c8310de0ea11613d6098dfbb922ec2427caa04ef84cda068ea39005c8a76b3b9d55f13737eea

  • C:\Users\Admin\AppData\Local\Temp\Cab71.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar4D7.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b