Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    137s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    30/09/2024, 01:52

General

  • Target

    ffb6f5fdde6a26525326c82436e55593_JaffaCakes118.html

  • Size

    90KB

  • MD5

    ffb6f5fdde6a26525326c82436e55593

  • SHA1

    06ab6fde3a4d01b7db9a1ba3f31f265ecb3bc51d

  • SHA256

    00ec68fb900905d1ecd2b2064457daf33682916c7d3a77122545700765d8e97a

  • SHA512

    0c69fb2f5493780807e104d1af8fd61ba5b8ebc737a94274f67a9c5a88ff39e6f117ef74bc50598a24096e73185a1d89aae9f725a88d1be71583ab6eb1aaf0bf

  • SSDEEP

    1536:/60Op2NR8TY/DnSFb3RWCmZkSjL6uGOMuGre3LWwuj49GrehNMTnadfKKyrhClJd:62NR8TsDnSFzICWfc49uthinz3/r4uIW

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ffb6f5fdde6a26525326c82436e55593_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2384
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2384 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2536

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    1eacf9ce9ea81e327a3d81fad1a235f3

    SHA1

    8bd5a121df7e1fdab7d409971bdd4d0605093f8b

    SHA256

    5eace03a8f11c1aa6306b683f8f58d2f578f437c727fc60079381cf282e0a37c

    SHA512

    972d108def299e2c836e5c5567c1c2c4f45f2dd9d7d4f2af887c78d25ae0188db0c09c6ad024630958026ace2640f5137b17da39d4448dbe74d9fb40ba014030

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d76faa8bbdad754cfc64eeea300bc5ba

    SHA1

    301257559dfa293467e5cfcf89f4208ed48c7b9d

    SHA256

    e46fb90de12f4351d266918033e325c8ac494464c304bdf324714bcabc279a22

    SHA512

    ac3260eb3c9dfb8dd3b61b1bcdd86d585b8499298bbf09fffe372ae87737de1a6251d69f4c75cc67ccdad1afeb79b91763545083a49d5036e9becb93f04c07f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    08d4b070d33a23c165c3aaf5a2293f07

    SHA1

    254616f3aa69506108b55d6fc5fd19c896430cc4

    SHA256

    654e720fc9b739ec17d14a8e7486e2410da98e57ef9022f96f1a5f3462f0774b

    SHA512

    7995ae1d3287c00514a19d5580566fb4c105b749d1c076bd7b86f3615b3c3a940a218157a45d165d9853cebb1bd7e105eb0bb4fd4e2fdf9ab06526bc1276b3ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1489d074e0441ee99fd291d0b813abd6

    SHA1

    d0028ce320260e8aaedd06628ddd829b3d6e198f

    SHA256

    6b9e3e8a6e587755488903d445d7781b176d13e0b66df2f55eeabf1a6ce1649c

    SHA512

    f38a7a65242eab6ccacbfaf4f5a2d4f86617272037a57b0685626b9724a9a30afd9d51aeee1ead6b3463a166994a545b4fd3865168e3ba68c79e97c7d9c1b889

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc9803d85936ae66d76468ea7445868f

    SHA1

    9ba75214359e300357dee708026ced650de5b1d2

    SHA256

    2e21901231243bf016e838a2a8d54ebf07774adc5bd093f382d1d97c6daae801

    SHA512

    d27331c638f84450345e122efd7b4a4fe0c865fde3e0cad26f86b4128eb993e58e6df214cd666f253b7d4df32e2343d137884ecfc1122e8e5f3dff68a96bdb4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1eacc6d858af03479d80f23ede8bf97f

    SHA1

    25bb7cef44d60414a5a15b25a221d13f1e8750b7

    SHA256

    bedcfc71b9de2ddf34c73c3dc3f602852bfee252aa5b81b39419abb6d8ed4a5f

    SHA512

    fe3e942eccf76364cfb4cd4a8a27f17228d969561ac80fd0509db4d691d465b35403a232d1c6e48a102937c29c7a7589f8cdbf06eda0f5a15eab76d0250befca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bbe43f551d5379023a69cd105355344e

    SHA1

    cdcfda43f3e2150728c3314fc18bc3382ff89a09

    SHA256

    dddf73c57191533e2d5bab6308f31b8d2edfc768b836b2ac0d58bbd7363f353a

    SHA512

    025ff116a230889cffa8a9ef245c4afb3125f74d69a36cec559b6e0cf8f223572ee187652938a3b9f35e0c06613cfe7583ca4cc509522bd4978ebfa5af81c377

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    38482605ca0ecae9ae0d987bf2551350

    SHA1

    fa3590780421cf20b407bdcac6a2756fcd5031b3

    SHA256

    3d2cc5e510fb297d490bc97dc372592274e7c75f0821f10e9c4499340d63cc0f

    SHA512

    0ecef842f412c0c284b9fb23cfdd7bac612e1089bf0d7fe4df54914e0905dffe725616e26647f669650221de2eed3f9134158cb5957de73cbc54fe1199e71085

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98d0d8dbb40ce00e41d020df5b081020

    SHA1

    f790a76324996fea54f36f10ae6a4f220f1118f8

    SHA256

    e46c2099b9ce8f8ba5da5f9b559d0c73587061957c705a31b4a6454dbc7c59ff

    SHA512

    1b6747d31258e0ff7aa0715b464a58e312ad19bc10c08fd09af5b973b21ec3f1278d574eb8c27f9c3d16dc386c261e2486f314d1cfef7169fa5131f813a25002

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0c780f0ad524488c0ca8122924f06faf

    SHA1

    84b12935d0bee342aa1f5deb3773255288e56514

    SHA256

    969219902077b39b9b3756536ca1b4c55d87383b08ab7158fd37e3c13c986adc

    SHA512

    8d40861793833127af2aaba465a087ece9e9b7d3c01edf0f2ea2dc8812bdb73238122b66adaa6953d0f3895b322c5642eed076aff3eeded79aa768950914540d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a527d96faff0050582105829b767b62c

    SHA1

    aff2daae8b966bb50d1e8933d4f29132b0fc6c15

    SHA256

    10e566a4d44a59c71f3029ed61707f86fec092806550463a175b551643db85af

    SHA512

    c1f87399522ef742491d962a744e361c54976f161029ec1f7aa66ab4c92e0d85abcb5d68becc5f764df99ef3db76f5ab2f37eaf5d2c19d425e76043bd076e4c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45c92ebc9a600f616b7e1cbb4a266bd8

    SHA1

    8d5bc9630d071da66d865f3e8ce07ab8400961a8

    SHA256

    7d92265e14b1ad36dda276c45fcb25c95a428d0b13774f89c2e95c7f73348bdd

    SHA512

    615cb53bb758700edcd303eac5fa34dd31a14dbcc35a701b63531af70ef0a38bf55d16d4b532eb2f8408b8cdbf7459095e951be6e0be7ea3335775b57ca5ae2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    730c69da8ebf366c7da23da6a8a6ca52

    SHA1

    39e0c432c38e301ecad140e3cac7d6aa3850af60

    SHA256

    b0763298f8003f75b6cf6f16578e9e5a0aeeb127b9dd7395efb26e0ce1df03ba

    SHA512

    4db5e70b642974a5ca4158513c0801a7c4dd49ecc21eb7f60de71e77bfca83e274f70ed3677ba8cd1c72b6f925e2c46ac0748c812fe70f052f953e4efe32f430

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dddae124356a70a3fabaeeaacd748532

    SHA1

    9b75512f1e2e89dcd79730c4a094562c50f496a2

    SHA256

    0a4163cd118d1d14c04eacc347253bf301fd0d2b1211a1964fed75cd5cbd8cbe

    SHA512

    b79d0d15591951afa533acfc1273194f33e6e7bd0c5c5b87f17256de94c98b2625629ea00aadaeea728d2235a46e4ba8478ac64d2726495f0a2fb2e94dd8018e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2e2f2e7e7d434364021f9811b39c2ee

    SHA1

    eaf055bc75e8d0510cefad4f2df43fe9182d218f

    SHA256

    287e84ed3a80017e1a2fd337a8bec9b76ac8d87e7c18c8d167ea6ea1799124ed

    SHA512

    ac04b2df9c21cf66f44588a445349256fc9d06a6d1d20369a1a182ce62eccd2ef983e984774f9cd1e0a8ddb8f874620c4682e0efafaf1dd47a451c8ace5359ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    89a4498b6e70340a1f52995ed42da7d6

    SHA1

    3f54e6f943582b8de1dad8ec0fd7fe8ea646e4bb

    SHA256

    9f76460ec6bfbcd20174b8772a28c5ce6664d3a4c7965ca787d29d2e15ded46d

    SHA512

    b95c9c1dd01bee925069525f214a05e4266d2df6b1dbecbf1d529da87d8d3e42d7c9695620a8d59999bd1793720a4de3303a2af71cd3cfe1e56414aad38e45f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    2deb688d479d0ccd072fb1ab4689bb06

    SHA1

    f5eb7c237f5e7b82593e9e1eda8dffe2af104511

    SHA256

    46b99ca5ea3943d5aed100dc0da9989885079429ae0ec23a34ba44b86ccd386d

    SHA512

    bf3e1a314ca4f00b69eeb09588a50c483028151e85df1e78d4d98de631f9e1283dc65e62b09b1f0e2554f030e1a68bdbfb730efe5d892ff76a7ba3f036b0c806

  • C:\Users\Admin\AppData\Local\Temp\CabF326.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF348.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b