Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    29/09/2024, 16:33

General

  • Target

    feed1247af4e56daa76dde8fe3ff776f_JaffaCakes118.html

  • Size

    76KB

  • MD5

    feed1247af4e56daa76dde8fe3ff776f

  • SHA1

    5f7fa1767a3a0dce01574e104217e4dfab9ab980

  • SHA256

    33ac186c21b88ad5ec69d2c144cf9c23020dbdcd6e87f94bccda20aac9e4a42c

  • SHA512

    81c807deda00e2ad30debb6d587fff034d5e2edb80262d1ef5030c98b0b4b6efdb99b1e01da0a35e2fd942803019b60d1b74ea335237dc61d35a6795c9295231

  • SSDEEP

    1536:cGb/BVChnFZPlWzx/aRe3YYqyxtmdPMXjuZoe:cGb/BVChnFZPlcx/dIEtmd/oe

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\feed1247af4e56daa76dde8fe3ff776f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1036
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1036 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2352

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    097b8abff1d0645b6855a118a5b96a11

    SHA1

    f6107cc99bf244b4d2b6abb729c123a164ebe565

    SHA256

    a17e2b4d065e7fa237702aeb1894ef8c763b5ac98029d727976093c2bc029437

    SHA512

    9e3a2740a7c7921b54fc661a4736624e55dc4df44248eefa76de7f3ed26337564b14bd7d10cc1a98bac2d45ef6c3ad5d22a2d944c01b50c6d9579ba18db6dec7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85c309d4d92036136ef40bf529f31e75

    SHA1

    33ff1bac84c66287f762c72eaf362505f0007670

    SHA256

    620260cb59cd5fba40b8a6b414a26e5d9ff86917c9f490c26f128ed6281fec69

    SHA512

    0bbd86aa64dfde34dbc8f5231f43bed696a51a9a68bfc0a1129ca79ca9307a3f29ca31c841dee016ca21eb36c5b5a3c4fb6f761ff86cb853a7992c808bf12f5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e91344b65d6d16f24736c9c98beb0f8e

    SHA1

    a7c58f92bc788b571749935541bbb044629ee395

    SHA256

    f3cfa14ca19ccde2991c96fa3325f3cba143ea4488f7eee7e2a26b315426a6aa

    SHA512

    22a8f53099594c6900644c01977e817906406eef737b454e6572845efb3d566b7656614d7cf6b6af7b88f5824e4b2c5cc3b9c9667316634c34d46c43c7682565

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ef4bb84199f276220b1e6c421abc15a

    SHA1

    b87ff199958b07afd3e0810faf885614a879eee8

    SHA256

    f0ddb29b2f805eeed42e950eb5f73c2c4942047b36d0a90d57c88c8f3e95e69a

    SHA512

    45d4b478cb7b190734cfb5dbbbbc2108e3c32bf0639a795a40443495ea902fa0ef7e21b985cdbc69443fa6e1aaf26aca6b74b5e2c2f63536d45290048818a5cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f1753159df075e57dc554d8c32951fc5

    SHA1

    8c4c29702f28c015536119d4c68a5eb6ae8eb708

    SHA256

    2d98f481f265ee2f10794c66dd46f5cc7a96a241f3c02883ef976cd12a549836

    SHA512

    a789e523614cd8762cb01fc10591cde25e5a4c6e30b844ad7fcdd9d5400738f592f38656e3a16e11f086ac0f1cb9ca8a78d601f57dd95e08d6c5389ace935074

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df6640e83424e751a0e0a3ae986fdcde

    SHA1

    83482b686c7652d4b689453664f33706d2403ffd

    SHA256

    053ee654a8d03c84b230be9178bb6d7aa04eed848b82192ceb8cb24f42c7ae68

    SHA512

    77d9b0af9d48db7b297ee8bcf401e158710d0b30f57ea702d5ea8824d2ee3dc70147e80e9d72aa3a226219565f7019ba132b6c15f654287ccb6ae674fab82770

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cb24e796b49c8db1b140b195e8469f56

    SHA1

    56f1c8dfb12c70a93fc99a82373b6fd1b35f0fef

    SHA256

    9f90a6b43fb21f4f378f2fd98f6318484d6c3d1cb2cacb2a42d25c9e8b7910e3

    SHA512

    1034105d843903871043f165ec793d3d1ec0b13720182f4b9593d3a57da8bfcf32cebb0a2d7bfcccce829b6c539545c8cb56c03d56f7ec2fed1985e9d9973aa1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5934b820ee5d49df072fa597027b9cc1

    SHA1

    824e0334ae8d4174583b070e08e735c6958f5492

    SHA256

    183ce42e4c95cb3880493e51f6ce97d16b97fc7cb0a5e4e929faad9b4962d0b1

    SHA512

    f8d5760304ff0312bc94fb8c69aecc32798771c5f5bff0ae71d29198decb1a6d0645a3a05484e7f1638a33e8b98e096b4d2d4a872e3048903743b67d69b50f7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b5c3ea6c84ac4f52621f67b0fec93984

    SHA1

    5b8aaf525a806d3f849b08c7697ef97bdf1f6c01

    SHA256

    9d6a85851e9607dd54455748e5aff7d2b4843636fbf4b882f38046bd6df7cbe7

    SHA512

    c4a48cef4cf3b43033823a4df95158103ae5453c179b95818bd0966d15aa802e0c51da4aa607d9089dbe68c4c9ddd6c9d74baef5e458c37fe6bdf21ee7ee7820

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e28a60d31cf004c6bdedfcb70ac63bb8

    SHA1

    ed7fe75a7081e4a30f75bd0951ee8f7c90663031

    SHA256

    0fbc8efdc0bdde59583ce2d1663c90c64c497c377eba99e1f7faebef7128e6a4

    SHA512

    e64a8e306a56ba54ff7980c3c0f74ab539f0c6ede6a98dd1d122eb04f2f2b350a9493155a336f2220d88d888be8209330d058fc14a7558df32064c670ab94104

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70cf413d2b6becd292cf2003e576e71e

    SHA1

    05d504e0da78a446e0a616f38abbe2f018ef9108

    SHA256

    f291c6f358d24046f1e350ab21bf676fbb004eef5c22aa8e001f36e3d062810a

    SHA512

    a9c2e183b38f371e6b6c70373a4601e4b0f9943ec8ec31fa1aa3be8b6616ed542516ff94439b7fa897d137dd3ab6d61f8699ee42feebfb8b27ab68324cba9307

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1641e047ace9b91c042203876414e92a

    SHA1

    189f4db3dc5affdc24d0c20e81441cd0fcd5a06b

    SHA256

    c82dc086c018bbd7d2ffb75241378897405612b9e2bea95cc94e0d38e4e7d38d

    SHA512

    3b590d92f589d38a0934062ce9f5315bf000c80cc292890d5f69506069aea16e42c118bfe23117ad3f66b973a2ab8ded6c11ec171b10ea7a8cf195c83bf01dc1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f31f5782c1ae5ce470a26422f2f2a6ca

    SHA1

    c96708ed19a4672fa544b6c7c96ccfcfeaa913b1

    SHA256

    c4640339a0938095ea03ec4ecbb903a8e2c3c7590726f2694e3761cbd4f14c81

    SHA512

    4a1c6f41de445d1eaec82700de0656c607b06f4de58356ed0f00af076a97443f75fdf4b4479367d6c91cc105d4459f53c3b2d3ac5ffd55830278dfcd05a62684

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    494b7af03ab3cd9e1968ce4271631790

    SHA1

    d0584b999ba806b3ae120599bb2233aa1acd5601

    SHA256

    888eb062e58ba3ad6f8f8e5e560e395c87ae2ce6ac4ae14f4b5555e124319a7e

    SHA512

    1616fec078bdb367dd35d575f03cfa9c4bc4da8a9d25ff1d24df7455c3f71934abd0fa621a7f7c2b729ece016b8fc2d577047a48f741cc30442d230a0bcdb5f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    474bec003f8e83f182acdba9f478be74

    SHA1

    8649518c0dcd26c95a8706f288821efe229334c1

    SHA256

    ab1c9ecea109cb8ff440658f9535ee9c0f0199240b0d68d536ad19495b0ea197

    SHA512

    785b666b02c8da7ddd5efcb53c7505b819baefc6a92c89a75550a04c263d81a22b1775e499ea3598393b96d638f64c61efac40a12ec1ae9106918917e53d6833

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e899d8b852ad2045df7b9e8f0310b128

    SHA1

    11f7e23dc393d7c95cde3f31970d9200c2880753

    SHA256

    50dc88882f37d1f80fc3ec7d1905c4cf07ee410976f8432f0c461bdfd0eec7d2

    SHA512

    9203cff30c9b92ed6b1d6f60031861bd01b3d049b06cc659a0a464d3c477be4b6dcf9654b404968c47debf5fc6d4d83de83c551faa2d57fc066df3326f59257d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    489b8e2e5e65cc3c1582b35124baa8d0

    SHA1

    633bd25f0af4dce65a57d0afcb9792d2fa6aeade

    SHA256

    a322076443aaff430f34feab8ff1a85aa98b2a7a4bd315f1dee670d1cd054af4

    SHA512

    8b8f0403e24d99a67a2d1210e07200010dc597a8d053534ffadf65e9e544de7af6639ee41a23a1e0a889f96dd2bfe4432056108df47984876038a77c4cfb462c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b5eed5ec3c69deffeb6cc5bb8bed48a

    SHA1

    8547cb23fe7b4dc241e50bbd437175410dac51fc

    SHA256

    139341c84240c4aa15a95449db5528229554024aaef30b3482b01a715a678159

    SHA512

    d61323038b4194a1ffb9ea2d45b48b4d48b067b84700b2dc15b9c1aae113957211540a8addd6d7fa11096b20582b83f82bb0703852db916b6fa792690f4c487a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    443aa8b13f69f000965a98b8cbb1c7cf

    SHA1

    c5fde4f7e8474674d64523b7158edbbfa5978e47

    SHA256

    f412acdb433af8641642f94eae937a7aaf24e0dce615d92e59e7c565cf909e2b

    SHA512

    34547fd821bd36a44d6a9a1ba2808dc81f4898a7f8503affb17f596fa1baea035cd05c9913ed2e0171156e5273e50b5b93d147f70f9e0b6fa150bd2303c0e1b1

  • C:\Users\Admin\AppData\Local\Temp\CabABE9.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarC38F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b