Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    30/09/2024, 07:58

General

  • Target

    0045ce3c464a3103b7d0b2cea0264248_JaffaCakes118.html

  • Size

    139KB

  • MD5

    0045ce3c464a3103b7d0b2cea0264248

  • SHA1

    ffd7615dd5ec56212f651ed37d5c2f03008ad51a

  • SHA256

    6804678957b20311d029079fcd416589d8ada6d662044910c26f5d3bf63f0afd

  • SHA512

    57463de32d981f55acdffdc7c25df33a8ccdb44066ce3d65f6f26a999cdee03fc3b0fe3a6079efc040f70c4ec87acb4b602aca5c2383041e904fa2d026a824d3

  • SSDEEP

    1536:SEN0xCGMPEHBxbplxSTyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXu:SEsbsTyfkMY+BES09JXAnyrZalI+YQ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0045ce3c464a3103b7d0b2cea0264248_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1284
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1284 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2764

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f8a7c2d73516bed49a4acb60a8a35c41

    SHA1

    63a79aa8928b716041e277a44f1601531b2ea431

    SHA256

    e97321a5c30a9950111cf80f28b2055028f8c8ec14048c833121a874a4e03c4b

    SHA512

    7b606ee689d3a46d049a7e149f94e2414db407292a8af2277ce21c166d79b770ab29ee05ef33fc4ac64d2ce6d509e1eacb4eedd061d5027e97d6d75c7aeb07bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    294aa176594c886cf0da18c777356929

    SHA1

    fde975a058f140159828a74b6bc957f7783ce272

    SHA256

    78c47200978155c82dc407573599d224a4f3e8ad73736beab99c1a9b2740a12f

    SHA512

    d941175f5743c9a25f2beeea54359716fbc83cfaa30fd83cac575b481debf5cb3f25e79902bf6d9b8fcb14702de6e118aee555049219ed153f188f02b1db6218

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d4d38091723b44307f8414d14933f01b

    SHA1

    08c0df13e4db85cd60607a033122ff3f9a7bb3e9

    SHA256

    65d540a9c626a0997eaf72c202b0d64c813f9e3e9511bec2b3262b47db1f6681

    SHA512

    0f5772815ba156b5ce7e74bf9e67b67e1714b288d9953fcbfc4f289b2efec1fb4a73d8b6724b6f0d5970bfeb3658393ee6ce14034915f62c8f8ff71e5ee52a4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d98d630f9d5716cee0e07ee75002a4b

    SHA1

    7cbad33dd2dae40d9f08dcb420f95d949367dd64

    SHA256

    83812563c7597c9ba9ccc6f28c6259233ab8607cf285cfe2f9811a5b641cb3ab

    SHA512

    53ad22f46bab7f59a46732c147433df71686d3baae3732ec6d1ec5cc506f4c19cd44d007a931b4d3f9ab4e7a35d76376545c2df8b860b9688340ae52ebb70e06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df3881395ddeb7a96dbbe2a3633fbd8c

    SHA1

    1a296abe197294b755fc03af3c5a8e4d5dc965d1

    SHA256

    3cb734814feadcbd642e61be5a5daa944dee178e86212fa5ee8d6be7d98ec212

    SHA512

    d05084c1f4b05b8870ee21f8233231a4df820d18db19feebd324938252f79dbab4bda08703686c162544c20c4b1b14fa220e5b450b29d97463a94d75622f3b82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b58dd05d57ea2cd112c79edc5ef9e6dc

    SHA1

    5ad9e15084c9d853f8921abf10d576fd50184ecd

    SHA256

    992c7ec0c00de8571625f050fa9b71a712e7eb7141dc85e8dcb57123e4a316a8

    SHA512

    6df9dc2ada64fb42d634404c22339d489cfaa5381a28d6ee3771a758398f6293fad9bbabed8c9a5f45033bc6bd1cb2fc25fe6500170b7428f7a64b3c1ccc0452

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e16a06f072b4f459780bbb0abc6ec33

    SHA1

    6757894929cee4a54a3fe342ce0736c69e3f82d1

    SHA256

    158f146faa3b51ec12fcf8c8c4cc70af665adbd3750c9308e2b111b0f7709982

    SHA512

    f5d0beba19de3455548269b0501b8ef10d096f683d3c49a2f2db21c8df92dcff1f937bf42df93ebb54d1c3466e4131a6fc0476e729fb724bc1913fd50ed07955

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    79068ad3c977ade70dd9b005a5319e7b

    SHA1

    cea96a799159aa29b7d99f0760a518f47cb67caa

    SHA256

    7a59a33846b0fd5fa8b76ecd1eb087993c4feae043e3791eac8a3fbdf35aa960

    SHA512

    2a6ed22b853fe04e0b9e6f96962fd315e7057fba07e8a9cbe0de665a5c337b086018447a2f462a5ecf77a5008b6ebff2a2e26559aeee80c0cc9560b5a6bfd733

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d70a265c50bd15d5c7491760ecc32365

    SHA1

    5fa155a88b4fc9b03e2900968adb85103b3056d9

    SHA256

    e1aa3ae209c2c1207604b9b6d51acabef2b3caf4de8faacdd5e633ce32ab4c2e

    SHA512

    82f4e105ca857a73dc78fa2c65bdc702a11b245f7db3ae3f59f012bb79a518bee1067f4b1bdf5fea42e373c98e3a02dcf8efc75052a416a5a19a89a4a84dfe5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d92cddc93c4503f0d59e744ca536dc05

    SHA1

    48a00b63240ae564379f88fe9edca8bc98c29b77

    SHA256

    496242211f4b77c62868022440728e21033aa3dd0a09e9473c42aa368e0c6316

    SHA512

    3cb161d3c94fbd3cd6eeed9120d5165b69f3798a8d6d0cb28a0836b83399f820af23066855e74953fc8358b2f3c1451c29b0a82e0b3807865970854c80075775

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a8efe4e1dd554a99674231064d2cdca

    SHA1

    07069beaf621d978c95a75d4cb4306f8f9ffbbcd

    SHA256

    c4de560321a4d3e718093df06f2b3d817333998d06d824cc92550f8a0d87df70

    SHA512

    182ef33043de84c375086efbe829a2b380a3fd31c11784b0c1954e841412201e14c25df8b677a5d757e14e4dd142141005e25a27b202f20c6589b5afba7e0b8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1894223663888b79803ea4a1e0722843

    SHA1

    07604f3b59b3174b77ef0affa8d992ab4d8b4d0b

    SHA256

    370d5d535009b775f480decef3aac63dbfcd557ff1482ff6df84e25dafedd37b

    SHA512

    050f85d45e7d54a1923ec70ca7d9068be726df0c47217fce90797f14c11961c9ed5c565d48a4dcf5b981c5dbda978615e69c05d39d1df1e6fb97422a3cacc0d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ebf21eb32c8fc3bdafc1c7be5db35d4d

    SHA1

    4bcc22cf277641065d7b2dc45a6575a42c3a932d

    SHA256

    cc928b714596528e8fe42a978ddbb01a859277980cc5de28d4e60808ea262170

    SHA512

    1b12c7245635c4a3241cde7f5323e9d72f1e01a2ad8d85922037fec71aa7e527bb15ddafb8a342fc9f91b30683ab914f0ce3d539b7b0ba7c87f7a2d7cf48790d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7a0f9ef2328be5d7b37329b8a5d09a4

    SHA1

    c78d4c0029c2001954790b6637fdfc60c951385e

    SHA256

    d1da051ff98af300cf54ec192efbc3eddc20d274fee9f1b43932614febd444d6

    SHA512

    1bbfe3b7450b1886b65e1b6ddc167c5a1778c0af4f2056dc48ca27c488fa2187722595ffe83c5dc423e1352bd2fa33ad8893172b86fecd1a3a9bc6546deb9e6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    115ae77b7c2996e77bbfe165a2ded1dd

    SHA1

    3d53620eb36d03cca7626fa98e46d896f24f604b

    SHA256

    c018a0657409b790db1d65b257852c6f5db74588f5250333c967f74102b3d6c2

    SHA512

    a9696e296b4c42a385a1a209b9e9c6efbfdb6e534a9e9953fcd476f17fcc205cf5f0f954231af7efdf95310d5fe18d1313789ca702f7d3d4fe57a2457af21f9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    96f7e2c787e7badd5024def315b8623c

    SHA1

    d13ef266547e73572af58910c4e972a74b338418

    SHA256

    3867b7482c85fec602a4265f0711bf0a585632fa8aadd4d65c9928470f1c8ec4

    SHA512

    b7873729ce0ed77cf6f40c4e8703a8c4cd465323443c6ad859e5ea84ee37a2020f9d4d6d79fb406a7f9b17598ae3665db8f0a7ae99d8d4ab8d47c99ee91bf245

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    94a55a4373cdc83f12e7a5d6b9666826

    SHA1

    49a6f00c127347ccd8a4cb8dd137fe567d2f4c0e

    SHA256

    cabfdc2ecdeda75bccbf5ab945165ac3799192d507da3cc3f497350f19a52a75

    SHA512

    76c774e1f221e3e562bc9c515371e68507d1c8463df2382a08ba9fa66a4489241f9f6209bde6322046ee72d3bd412a8bd0d7589e7a28b4ac49b53c14bca4794c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d17ef19e8acf82aaf06ef5f1107f1d83

    SHA1

    3a11734b38e9f293479985c390d44e54c11436ce

    SHA256

    8316a33b537f1104392ff07c3f219bcf3a235455288371da2ad093c9fc7a7864

    SHA512

    63061aec92ebcbf461683bdf1e6d562e436e0c0fff5c312f2dcdc69596c721f3bc76880baf690c30870f686c0abe199d92347272d8c1b174cbccc2f2b9af5f5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d6633d7353c301932f88b43ea884fd6b

    SHA1

    8bb3c14df1a864590c1e743053417fa86775302f

    SHA256

    1e09fe98abef1ebbbe84dc330ba49b51bae66b162b7545391b1f3718880f1772

    SHA512

    d8d643dd72652480576baab664f83cbbe4ba892cdc47cc4cb1569ac8ecf5e9fe21d380de7b25daabc782b4fba680613910898c8a1fee4878b045de0156947ca3

  • C:\Users\Admin\AppData\Local\Temp\Cab90AB.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar916C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b