Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    30/09/2024, 10:21

General

  • Target

    00d5566743bc5290eb7a28b6fe474da1_JaffaCakes118.html

  • Size

    6KB

  • MD5

    00d5566743bc5290eb7a28b6fe474da1

  • SHA1

    5f6b7f7cc4586f072a1d2f29d132b6d974de94eb

  • SHA256

    b45f6bf0a8c600f4e935bed57e708b23d22237ed1b10ad7367096b835863d81a

  • SHA512

    67f6c4ec1c8e9fe750929d8954813e7a2529eaaa23b6c23bdd96bffa938444090d018521522d6806f0ffc42c1539cab97c90fdd9b9d269d4a04f856c5b4ec41e

  • SSDEEP

    96:uzVs+ux76lXLLY1k9o84d12ef7CSTUJZcEZ7ru7f:csz76FAYS/Ub76f

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\00d5566743bc5290eb7a28b6fe474da1_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2984
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2984 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2820

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea53934325ce25299fca715455dd8a41

    SHA1

    dfa39ac2b4a0da493aebf5d3d08be61c35d1f67d

    SHA256

    c569f825dd87f93b73d1482b3d6f0e47edc58195e0f699523ef3c9600a4675e7

    SHA512

    7418c6e16c3ababc7bbfd6bdf415bde139e81079f6631d48aacccc37822a152ef11bc3d793fd1310ad5f356a5b36fc2f7bb76ae92df4b8e8219465f24717beca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a01db6976bf08873d0c27734e9db28c4

    SHA1

    34523579c91865b04f103f6c3c0255f216cdd620

    SHA256

    bac6dd82be90eff47abc52c4e8568fb526e9692c77c8c95c1c4620cbe546e0bb

    SHA512

    083daaf0314123486d5c7b53300acdb2b611c88a152c30a93fb07bf2f49ee93f96a5408300b599a000d0b8fc99596a2b1df77ecdd9309252a910b248b9965332

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    efd67447422707941db1e3a9d94e55a6

    SHA1

    a44d947bb9fe139af5cf3d518f8a9e1219a826ef

    SHA256

    78914970519cbc7c5f868489d5fced73275b01d4bc3364490942178e70a52b2d

    SHA512

    f11cdfa8410c5abac6b08aa958f6b38b82133ca6a231550bc439e4b7ac0bbffa7180dc576828a4edf87ec4c4e4d697808e94e36acecc2198ea8711cef51ac1ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c632f896d3e4d408bcf34e2fede72ce9

    SHA1

    6da39c404c5b63c53fced8ee68a417b67a137fc2

    SHA256

    a89765e3a7e5f46ffa6d3178cd47e8520fcad3cb846fb001804f5269506870b8

    SHA512

    c31bd6f9ad6732dfc8af5887063d1993052c2a88aaff041759684cc43f1e4b257d57665ea1395d09db287853e97ae0106202cc854ca572dcb5b353c5aeb989be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    638ee702cda718e7127e1754fc35871a

    SHA1

    52c54a97e4ccf8720b1dc5100d33404b14a7bebb

    SHA256

    a51c016fe9f9c04d013cee5efc453bfcdb4212e3cc08f8ca07425b3995746651

    SHA512

    3896cb1d926c91437ce843361321adce97bc78e72df7e9dfe7b096958ffe421487e23182b6be12d9131216793acebc91fc12663c83f682ea931b2160d73a2c8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    109415ea1c4ad83d9c7ddc526a39a81d

    SHA1

    40d6a4b4270f260ce27a8517b1973c380cb8ece8

    SHA256

    f04419eb156558690883dddeca699972438acc7d254aebe0bd9b5fe5f37667e9

    SHA512

    0413ffb63998be706635af44fed645384fd749a3f95ee2df094be649a3ca171f1b81742c2b105213de77a77a1a1800a31e13b42f6b7e3dec47ffaf098a286ac4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee824a66dce70786119e83e09b17d3e9

    SHA1

    2d7005c9861d4a677ccecf8b0d9a0f3ced06473a

    SHA256

    ef8abd26914d99347c0eca181f58baee1587effa2d30a8d79d009835a441a78e

    SHA512

    f6846ec23d3602e2890fb63dc57dc04b94d0aaed0591d75a052186333099b860be110a501d0b8b60354b3ea46f42e17bdc84f93b7d8c452dc573158f9fd53b8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc9b16af5bf354d26a3d0102b6985dd0

    SHA1

    5f65ff6a48696fbb9e569c5f7242e54e5762eff7

    SHA256

    ef27d2f11185f2ff382bd3bcd88d0b6d9ed29617d172a250f9535cf725724561

    SHA512

    bb2c9ec0a2aa3b23524ce24f8781b87303c1812a614ebb1be77edf8796e10bf2d35066bc9aea6f17900de89bee415739f3017033db75a92d86459771a34ff741

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9d15fe2981e7bf1f082a034bb50d37fb

    SHA1

    7995542f8ff16030db840eb2ffa5769cb0d6c9ff

    SHA256

    8b91183a60945b1ac864c75ac503420943561a0d5135f2eb2745450d98f42ef3

    SHA512

    0da92c0085b2fa71d86e28dda511fae00a5e9f8c2dd254d69d9ab8f0261d26bb6980d95b93e2086ee40479824a0679fe172b69c4ed444962f713948880ffaa73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    143a953fd5efc69733e73430cfe8cabb

    SHA1

    f151e480ffa1081116a0cb6e11975a583c93470b

    SHA256

    5e87bd612d22211e262ae48276379177896eb88d2bf1c9ab13048c213fbe3237

    SHA512

    3910228a77fc60b0139a0098ad051623cd8e00d0dcf18340cdc8ad3780ccb3f349dbb6fc2071c441d7cd2bf969b02b1b8006f7c4933bb00d0b471199cf0a4afc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d13fe6349b5c45be896f386e7e8b9a58

    SHA1

    ad2e24eaf1f573efd53c2d0783671150ca9dda93

    SHA256

    90abdfc27a6b8ec727624a8fe79a58f462013521fb4e45d10e2ee08acb734484

    SHA512

    fa7ac39d633aef7c841d5cea8f28a3932ef93786058e5c1887c41b03e5c0cd1391e7a4bdedc3969b126afc89eae1794d1489ca8932ef5427cc9266b1601e568d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    292523bad50a50509df60c435373e072

    SHA1

    ba5c85fbe2576096895ae9bfe2d87eff105490b7

    SHA256

    decced1ac63d97b52ae226c8b8695aa3bcbd2d2d0c1a1f489059342aa1915df9

    SHA512

    6da21bf49250850d226604b46edbabb945a572d225535b389348377d95949a1396385cce83763ad694370937d5eb42f512e2c21d0d0d962fa1e702e129e8f4ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0fe08e30f3db5010361dfe7b9592490

    SHA1

    bbe931acb313d1db297107206042ba94bbe5d21a

    SHA256

    e11a2a9af9175ee724b5a68955963ea40f0b8ee2b6df0f51d2b200bec39ae1ca

    SHA512

    b3638899bbbb309f1f2648ef3e790f25766adedb220a0acd49d06ea9ab1363e47d44be94bea9e9c93771c52f4b09c4f94e91f45c74472073bd2f8350ddc18428

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26878549aa0a2a15e09d652faeeca0bb

    SHA1

    75c08998c5756cf05f4c51ea6d8950c4771475c7

    SHA256

    3efba781a93ee84979c188a32afb1f9cb63c9076abcff670964ed7f2d5c38439

    SHA512

    cf1320acbf3c2c120a18c5e48384366a16b085071d80e65699ea82524f7da6f31fc5cc67d66fb46b22b586ac70ef1bc884315e6cb7e35e5c627605677ded9142

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    444bdcdfe03dc7061fb665f9ae6eec6b

    SHA1

    fe3a99eaef0eeb1d7b750e08e13770d6dfb64a61

    SHA256

    66dce9975e57e4197fda1226bd24db2c73bae8654be8e691a13054085b95af84

    SHA512

    11096fb0dedb64f2d415086603e7d0bdd61e0891c50dc807763cd1cef172f185a3c5afd1c6701ae734533b0df60b2b1c42f8e5a89918fbc40ae3dab2ae5e5ba6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e227d3ef845612b4bb3eefd782e69f97

    SHA1

    76358363b368d1f6de009380c60b41e914f2a56b

    SHA256

    7899c45c1306f782a9438095964272147c64989f1b92b497362e7725aec2b8dd

    SHA512

    68bdb899b51a449da4c845e5118c1758817f12909150016106104be150083b5de70d50fc5dc45c2c98fb078a15368cf02c3a603f8b1677099b4c5ad724d30a4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7728cea655fce4c0d5ce5fb1e565161e

    SHA1

    833309cb322fc2445e0fe2082bfcf5f846127203

    SHA256

    d390b80267be74c8f5eddf983348bf967bdc6d47f456a749356a58e9ab7ae221

    SHA512

    8b068b431f718b53c4d907d0ae9ded0016ecffb91da1947592cd3e90cecccca68a7db2c59f44c3e23663fecc5953fd7c8b0e03aa0056b35e35d5f4dc9bfaf389

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4901558aadb515d64934c4275c31a2c9

    SHA1

    db05734c75219db59b43fc3fda0e80b225ec9d2f

    SHA256

    c6957f267a7a89b618063eec643b677ea1ea862e0bb180fcfb72621f909dbdc3

    SHA512

    fff3eab7eb820e3a82340b8687a4ead93686153b8cab44d0a79abe040cd52789e91336a95066a4e64f4408ff21525282eda61a3d193d586a3e6238ee46e24d5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43ba8589de3be821762445e250ad650e

    SHA1

    e0e61eb33130f2d0b145259415487777c5adfbc4

    SHA256

    d4abbe041ed5a059c212fe50e7d08902e7e5fece7cdcb4daf156ec997b09e453

    SHA512

    db185d2a19e94b44733d9d8f42d6f06ddcb7e2c4313f1f6d960b3aad38e3dbb98da955f841b7b0c35b5ec732847e9396836b491e1a73cf08633fdf6e8e83572c

  • C:\Users\Admin\AppData\Local\Temp\Cab8ECB.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar8F2B.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b