Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    30/09/2024, 07:27

General

  • Target

    0028f5e428dc5ce708626e757c9a23b4_JaffaCakes118.html

  • Size

    53KB

  • MD5

    0028f5e428dc5ce708626e757c9a23b4

  • SHA1

    d73e9315442a9d5c055757e2383b803248ae98ed

  • SHA256

    1f099127e7f4b1e612ee5e5c3b93399309d5d5abbdc12d86c49e1e19bdbffc15

  • SHA512

    ea4f5063fa8cc0524e8fb1ebe7ad7158886a1f803766919360426e90a17160f2b042cde45a73331c143e04cc9128bdf7f8f99b5e2ddb03f89c2b156233faa0d8

  • SSDEEP

    768:RBCdeRx1F0QiPpzLxNmC34N+FcSWeoh6HyklRXh/:RBCYRx1F0Q+pzVNmCS+fy8f/

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0028f5e428dc5ce708626e757c9a23b4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2640
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2640 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2876

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68177395c824769c68beeb8d958d58ee

    SHA1

    f2e0ec10969347fbbe7dd454fd4e79783926fcfb

    SHA256

    5f7263899c030773a3f962a906de64f2cdb230d1e66df49f968f1bb440ef1f02

    SHA512

    4821660227a82d868e28197e10c62ce6a5f34dc131968d3132cca11ee002ef1f9348c454dfb31702f6ce7301c111e11e29695e184dcb2a85159c43cfc8c5509f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7219d5b7c1a2a47124609c21ad84d5fb

    SHA1

    b61c7b92e15784f9e42d8db81372f4d0ceeb849e

    SHA256

    7465c6f8c763562bd3780fe6444f5dcba157f14b4a64d3d5ab5aace5bf127afe

    SHA512

    6f659bc20ea2a5dc6adf1a538521770f7f190db814290faebe31d0804d02b8a31d089c015a2b0e048c31ddcace595cc486b6c922835ac24ffd8e35ca55661a83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d36bd445684a0771d28ba883335fcfb9

    SHA1

    29a3dbf611d97ab2fb286413742f4640f09657dd

    SHA256

    a319ea8567cfb05ba8a77938c4815363b28811b1c1da15f0555dae562dbc87fc

    SHA512

    03f0d8e6d2531729c576deed1e1868147ca26fa9cc80525325367ca9780b565646765342c034a8e35c482208759c34c358a86d68f92e81f527197469be3988a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d7cb98c9f1eebfc21dcf93f40a2f616

    SHA1

    525389802ad50c512e1fe939c591f83cf9c46198

    SHA256

    cbb52e3faf9216767d01a0a629148de69d62ca4efd2412c201972978e114e14e

    SHA512

    e6455d1164fa384fa74d363f2fefd7d28ef904d863e49977f27d738de37baff398962bcd04eea735f52470659b1d117c05078516a43d7addc1f6163c6bdd5660

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    343cbd37e94c90cb6e6109b13e1fb277

    SHA1

    377422a2ba0357b4aa6c8a70df42e81525de7dcf

    SHA256

    f109c30c8a1c770606b704d8f06274f5b6d92a6b307548617be01e90b6d5e38b

    SHA512

    e632796b56c118c28b9ebcfd6f0b7b4b76f31007400625e82887e9e4101dfa63cfaa9bc1edc6f16ddfd560477ba2e6a870ad9956d70ea9693010d4f447e945dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    33967108de8aa97588e4dacde9fa0e22

    SHA1

    1f5416ac456b899ca067533da31152effbe9214e

    SHA256

    5a325dcbb6d75205f286ade028b6f95824dcc7393cdd641bed5959d76dfaf3ed

    SHA512

    05de04b8b2e6e73f10ca32c405f9287aef3ecbdbf8c2a10d3365ac93dd5010ff9422b4496ccdb18028edf65af51eb11ab88c42fc54103e5d466c086b3b8956b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7c794b060f4116acdc235f91a5ff696e

    SHA1

    ffccc5d35fcf86c123089c55c80609dee5bedaaf

    SHA256

    d6af069ab1966fdfb6d20a2fb8fdbe22a34e59793369907f0f254f2d2ae10e87

    SHA512

    5311bd5cc6d6bb923d28843ad02a5a4623d5bdec3b7c91f9e8f3e41ff99270d0b2b213120a959dd09ea34d860bcf7e124110b73a7fadd6961c4722d5f48f1d4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3ecd7d53d562a61b38017d6612971be

    SHA1

    c1dc20438956bded4acee60960683298f6378546

    SHA256

    f27c5d8a5e9c6c221361bc57b712ee98009b16a41a3be6b34f26f9f2a2684d22

    SHA512

    6de30c642015aa5af89d6d27f10f7cc2834df8191f4350b253f41c549ca741f60d38757f5c4fe9e9b2ed01a7e28344cd8050e8795364c3c3a833cb1ed51d04b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    96a5062d716111e2bca932ed418dbda2

    SHA1

    4b6208b9bcd6d8a80605adf904ac4e2038f5b919

    SHA256

    eb55b99f1fa1fdf6ede59441cb7d329e7009e951789a9f717a9f50679a7e416e

    SHA512

    9c98e8fcece23cbccd6b6ca857afcc3682c0155f92004a95676d12c137d01e1b673fadaa01af098003e2f61c25b765c03320dd53496928516479c769b6f4ecaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec6ed1478262b6016429990072ab3d1b

    SHA1

    e7716ba6ad80230e9c706cc084e94d9ef5eb0934

    SHA256

    e755d234536b11b57dbb5b34cdfead952cca728d98d5490c71511a42b8b9df23

    SHA512

    e5fb554ff75757d8044066ef2d9e07105e86fea64d39ea2a40a824d4aeb00272f2b1897f076e0dc8f888974624c389345b68bc045ba1d3171f3287db67641c53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d99708fafc00c5a12886099beb3205f1

    SHA1

    9e566fdf458aae2fdf9967bb0aa357c6f324071a

    SHA256

    8390768c8bb2966b71396cff2de12dade918ffdf0ac190ce0178f4c8ef147b92

    SHA512

    3323f1fddb302c897d97b5ac5e788f69347182f8d5a4df9378153324681d9b86116e1b0fad473d11b75bbf7e245d7c49549eec376eb3e4adbc53729433b43b01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    909504168080d9e3890464a9305f378b

    SHA1

    9bcdddc5a802a3e74e137211cd9456e0b290b73c

    SHA256

    4495dbdd40a7c5a562d653f5eb5fa16605779f8683f5e721f63db6f56ab66842

    SHA512

    e68ea75180c93a0d011931bf090075fadaf8468bc40dc5a476b93eec6c10674aa7919cbd0fb9f2cc10a66dcafb263e06d93a291f416cc1209402e0caa97b05a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    011893bddb15568ef8b8ceb6631172f0

    SHA1

    995135e6a33bbefc3ffabf237a0e358b733c2a4c

    SHA256

    697aecfe883ab46e796f9ed24a9ad29f5a95d4bc582ac1c20db4e13ecddf8c41

    SHA512

    b41b82ce499261a8c58d81dc005d3711555c188149cec0d6ad79e41e36469674d5c96f57b274a068d6d91b0e0afe28c090833d8e16d95ee0262eb383860e2ffe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8538d240b1170a266346a7f4801fb2a2

    SHA1

    30633f21c41b54bde63bfe8c6dbda196d98813c3

    SHA256

    3e39b1267998edd2148fef797fa7d2736bffb18462445d792ab1118196af42c4

    SHA512

    0970bc62d2c6e302975f468bb9b113b5814824c99a4a41b16516aad4da1abbc00886a207a8883e830b74e8aa77eeae413fb327c692b4130a27e850e3ffaa6207

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2cf6e7d7dd3367bf512ae6f028811d3

    SHA1

    7e61e7b94da8a628dd41c02af9b347007136b175

    SHA256

    9b9e4b874e0c3da98ce9dd620115292ec493b46226bde79c2f0744dfc394bf8f

    SHA512

    57495d2069823e99b116f082734f37cb8f0208a5fe3f02876aaf1b86a2abbf6279ec5bbe8c5c94f138c65a84ad2d6bb5edda8c5cf7bcd693fceb04c87b5feb11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a66f1f7b0c4ead5918ff5df667ae2027

    SHA1

    e975b6ab037570aa8def651a662443377abb3de1

    SHA256

    30b6ea30cfd37fae891d7e26e95a504ebb05dedaaba162a882e38f10ab140d4e

    SHA512

    6ca51aa59ce808b470fa925cc8c77cdb1dc600443ed7c19309758d124959c711e6eedc837aa728b73d78ca11ca39ff893414d5ff8b14e13b5307165969af1de1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b14aedebc71e77ed2a168f7781ee63b3

    SHA1

    727a9ff1d61de12161a38ddfa8c9c21bc0d7425e

    SHA256

    86454d2f8d4e7c086f1776d3208c01143bcaffdb7cc917b5d336c0f51a45f796

    SHA512

    0949b2ce01fe907bf99429e48a207d2aee54bcc74dcbb2a7ed6e9f7b55a2d2d78589430bf07f872faba3c1b712a10c8cfa4ede1178e410b9caac179b0a3553b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4b82cb84d932849ad3a0abc51733755

    SHA1

    ffe2862a28091f79572b949712630e658a9ecc37

    SHA256

    039f492f45ff6a43693b509a72c0c0c64dd585bf9aeed9f1ebf0fa8f8cf34ed0

    SHA512

    6f1b1bafe5949b2b9ccff8c8ad57f8fe3e12fee03bbdf5504808be47b8768a29ca7b0eb611de0a9c87747922ac8c74418d2bdef5def2617ddad9d5de6178320a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d54bf05e6cc4c0d70cb71b4ef804416

    SHA1

    b8c934bad9db2fbd5f5dc02ca7d30c85e3dfab49

    SHA256

    cfd999ab6a66f9a39ce2845115f1ff30d954067338c31c61534a8e7c9bfacc29

    SHA512

    bfc1ca9a9e97a6d6d24c1edb8c933c636d38c50ae1f3f17ef6f52bdff3f5e6cd8dd55e76299f195aa6d7dd23c89614e6f5711a897ab335b21cb9ac223eadd201

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fbf7095f0cf5205b4fd4bd9813f6ae12

    SHA1

    12a1382395e6204164b7a9d4a48da4c27d260cb5

    SHA256

    7522e959f7cde535f4c2ae82d32be0ed033d30dbd52d3bc6784d2a759f7f3a92

    SHA512

    a3fa7d55bb9b75c22d34490f888bba9e19a83282c3a859719c647ad9d8d7df9c5e2557bd214d8a3d29b38e6e7296a37af713fbf981dc34f41e68578d064e8b16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    83f353f83d5d36aefcf16982d46b3bb7

    SHA1

    304834f2a88287dc2a0dfb2445cfe6920560efcb

    SHA256

    fd7b7ac5d91f7fd2841d366c3093e7be7f0b769a15b58f96a87f76a0f5c4046e

    SHA512

    54fa7fb747587b216b5804eebcc5f4fb935ba946fc7b8f11383e5a1721c3f272f2eddc5af785910db13350ddefa9423341b8edffa3085877bbb961c263dd4a7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d3800144e8514c42e44770dac2d38074

    SHA1

    f5f1d40e202ab8e538e15b1b5afeded998a697df

    SHA256

    90fa4e3a6f6f0a9681479aa4d33221a4b90519d85f74f858acaea2d25847a722

    SHA512

    92a4c0ee39ce294cecd05ca9b357e92aba0962aecbd5fb16db6dcdabc7ddc7f50c0bfeca41df58f5629fdf2bcf32b81d129c4e517e3d087ddd4b921eca0e4cb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ca5f35ad2c29faa36466ef97f3ff6f9

    SHA1

    e46d79afb3fbb8da8893533fcda46ff0a563703b

    SHA256

    881c3bb4186df78eebf997ede0bfb66090e7e22c8f68a6c5583770f6ad0d9aa9

    SHA512

    6f6384676ee41c5a4e25728e6667bfa69c7e870b6ce685b0033495d193e37ec0cad37c62d7c67aea00529f1feea777b315cbe1b56cd87183b4f48567ea51bb28

  • C:\Users\Admin\AppData\Local\Temp\Cab4FC7.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar4FE9.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b