Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    30/09/2024, 13:01

General

  • Target

    017678a664c22fc228f4f1b1e8c2389d_JaffaCakes118.html

  • Size

    139KB

  • MD5

    017678a664c22fc228f4f1b1e8c2389d

  • SHA1

    da91d9224cf02384907305016772defc5a129c54

  • SHA256

    aa7dda317a9b19fca18d3698a86d729869041c01a929ffa737e8550b86b222c0

  • SHA512

    79d1c15ca4d6e1c35af4a7b30ccce4fcc43e321970dc71d68d11b685fb71dfba1d2934f208133d5d817aaa25ab1f1358279b189e1a01aa86428c63f669db7621

  • SSDEEP

    1536:SMuvaygueIl2yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusG:SMuQXyfkMY+BES09JXAnyrZalI+YQ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\017678a664c22fc228f4f1b1e8c2389d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2060
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2060 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2492

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12

    Filesize

    174B

    MD5

    f450fa03fda0791afc7b62aabe82ac77

    SHA1

    6e80714ceb3ac14be7760b6892acf8b9918dfd92

    SHA256

    1614fb5a183f9a0feb0abd1b41f808e4e6aeadf9058dce4be308570af911fbda

    SHA512

    31ca0f5ada90e2c01bfddc1d8bde1c01ae927395a7440d0a33fbf2742720d3e788765f91acea95b05089539242f446ff4059085007a0fc122d7a7d2cdbf47edb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    48e3eaac3881c450701ccfabe22fc878

    SHA1

    5d4a856c198bc47e5209555950a1237fac49ce21

    SHA256

    3af9f3671683b1437035295b181c79e925e3d1387763655d6589b0099711e818

    SHA512

    e045fd273b0ec26c8a54b9e78f769b0f0fbba74e7f7b4320634d8b5e882a2945dc726ccc730c0b0f5fab09de927a2cf3c869fcab7e3a94adc552b095d6ed7d4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a84a1e398eabe11f97814a4bc82ddaf

    SHA1

    98c9a2aab2e56883bec152c824340b8dfe984616

    SHA256

    86731bc6511e0ef75f3a08e00ac20f248796ae9033854749eebf74c5326baa9d

    SHA512

    6ffddda6fd2c9ed8894cd4fbf9c8161d0c3bba4c146ef2da342047de4262e87d7fe5deca06e220e7e86f9af7c6c1beaeefde6db748f1eaae77335a5daa29de72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8fdc9ef0a42b758c9bed68c25d8611ed

    SHA1

    5b0fe52aa8a97f1ab8a13d469d781301c57030b8

    SHA256

    a5d52334a0f9a232b84b903e12f87abb5ba6815c217970f0b1ddc71f1dd70ee1

    SHA512

    fe652aa1c46974779b2c196496e33f9ac156e32b4fb99dd1665ace5ecda1a44813a756dbfe13bb17545c5ab1a08947f03a0d65b6d1428c9e69a8cea97bdb6e3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7fd326d09802bef3b8313a4d066d127e

    SHA1

    d198f94ad0856dd32e6781fdb6519fcec1849463

    SHA256

    2faac84d8f6f5146027408fcfc46984535e9f5d48daa62081548847d4ab0a99f

    SHA512

    3f65b4f6f9f0fb5edeac9d5d6d5d2b4f4a64f16b7bf2592189c94d15209fe8efc0ec42a98df953c0bb6aa770c85556669d67350b8522a247a213c3fbea7b4219

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4bb04b6618e34e1f7ffcd22ff4370642

    SHA1

    fd5c54e462a52782f2ebde588c5cac7e64d30f51

    SHA256

    68a1354394cce693d4e1b7c58d0d0972c8d9eae8460c400e0481d03810a02015

    SHA512

    18ee54b245d8ab3a9232ae3a936cb5a198f24a4a13fad5435220e8376fa23c5fc34c0812ea0451c7091ea5963839f6f9c7f4fde840626f7f8429757a04a9049d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ecffd0b9c9e80471ca459ace61eeffd1

    SHA1

    66d8e968e382c1bbfcf240680c2c5232271cea5a

    SHA256

    e721e2b353ae7a399e2b712457568655a47ec0dd356a6d5d364d6c94e294002a

    SHA512

    33cadef3c958d7dee18ce12021f26e1ca0653329df5678df4a0625ea22e95fdbc9454282187e8272ac828a619ef0ecd097a3dbd291ba9b6a0e4c083983f20247

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dbc64c590306a166705192afadc259b1

    SHA1

    1949cc0c754f00803155918ee9e40ff24c53c5a7

    SHA256

    eb56d6a15f6bb5c2d37b7d2cbb060930c1976d6cc71e1adccd795f35480222dc

    SHA512

    471db111858eff58b46919c540e6b5f9309ea93a5070a56ba37292b355303bfc42faa0760733a81e233bc53ea3afa0ae7f7f2e4bc72b21715ca42879ec1d0d69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67bf0dc6715508ad0cdb89322cbaebcb

    SHA1

    fe3e67af56e51bcdccbc21567541e2eee5b8728e

    SHA256

    99a681b618110c49743eca164ee424cd37114b89e3ea76a9640eff14704cfddf

    SHA512

    7283e56fc849c54446dd65d376a7872019a792e61cc1b6305e75c89e28387c5af0a8c517e4b43c6cb56e99e6018eb8e35fde492893a3504fd893207c9e497031

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c0b5a135955f13f3bd210f75978f7f2d

    SHA1

    decbe6b888c03c602a6cfb9cd11ceaea072080c8

    SHA256

    4323f47a132dc243e62cada9b65817e806a6a0716b8d2b55f89127aae91e3c74

    SHA512

    c0d21d766f999c959fee63f78c625a9cbf14816c6cf4dec2e9efc7f094cb4c57d28ea2c0fdf869f6257501e216880b9ee39f143764361e058ef1dbe3a1ea9b27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    91e41433d0a349f2e6e0526cf9c74d47

    SHA1

    20df35adcd7221079244ba66197098a58fa3f585

    SHA256

    2900e81ad90e744d480ea09b5c1a6eb388cfcbd0121e1dda425224d5d75298d8

    SHA512

    545ae72d96acec1d0241e6a4d1e5ea70a40be528dc924255d088fade9a146285d7d77c8fcf0ff2ce24e4fae9a1221bec5b768bafd7c3149e2580cc7d934dddc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3940a26e4ffac18cb07b049527bb689f

    SHA1

    ee202937d8d08a3930161d72e8f444d5881751d2

    SHA256

    ec77e8f09868d32f30a8f0662e6b45896d458e52cb56213f1942ec85b10f5223

    SHA512

    af017afc1124ded6127da32aeda51d6bef48a35dda6cad3636fe3ee0b7113203b7825caa897ed1cb26064d6c15bbc49700b54325a3b6149526d8162e2d3650c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c87ec2542b16fd6eee54652bb78d1ca3

    SHA1

    97ff596e447a3c8a8cad523c2fca58dac146199b

    SHA256

    6737d72ebb84deafcf7548aa75089c3b063676cbb83ef5d07257979a27fe301a

    SHA512

    1057aa48f946a37c004a63aa1c52f7628ad6f7adbaf5c24436210490e1cdf349c181bdf91fbd6707e40a1a1e28b05e00c0f5ceba49086f58728fa9c0ed2a5074

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f9d880026361003af5db032924ccefb5

    SHA1

    245163063ba017d7556900eb23539f5583b2958b

    SHA256

    2811e6999927e9185fdcc510c7f10cf08b1dfc555a6fa89790d71d5e34d9c219

    SHA512

    fb23993e552621e41ee2081852ae54a99ecd918c09e8dc00e825c6d01bdc439b48fbc1c31cb4bbb33e76aeef90e433a20255067477221139d499f1830f9c5508

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b147d6d1f91425d3a8d4a40bdc3f926

    SHA1

    ea2463f7d64ef32442772b205348bcb9436dd498

    SHA256

    1959343b329274e0de590ba01b6d99453e2bcad71d08d323ea6a742cf874d4af

    SHA512

    a7c201a2bdbf1a9816ce650e1f5e2a29b252fd79f74edd2598b1a956abb16e0a91ccb48ee6596db48175cf3ff2880d4b5f5d2b1ea9acfc31abf1b7deca9b52ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d711ebb81a50280fa89f39d92a1bd41a

    SHA1

    f4780b55fb8bba8930b510ba98b037fb8ee71a0c

    SHA256

    0dfe4c9d72939e3442402fbecfa5f5c87bddc216e3d2a60ba374c1641cf404f1

    SHA512

    52860ce51adbbe8be3efc8130bfa47a96259f48be7858f706dc7b10cb285db1aeac2b148f7c6eb604e1bc821a2b6704b3c4267336728a032382ff1a09fc9ac70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cfb01ca99caa23bedc298c08b62929ab

    SHA1

    caff0d18014059062fe3040fb2a705753cf89edc

    SHA256

    be58d87545d77dcb8bf3a04fedf57428d8efda882d2648db6a30471adbe430d5

    SHA512

    15e6e1e724de8bfabf52325a9816e10347df2ba9146082d5e3c66774acb76650ee66652f2cb5b424bc1dc7e1970e4f168c1a0dfbb4aadb28cd284c6f3d4fa17a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9d281a485023305f3b50c32e33fe57f3

    SHA1

    540a3cc8c44cef964e7936db5d77f9f08d92f46b

    SHA256

    64989efb30440393c75ba09492663b17dab95c450ebe83dff83c8eafee0c4943

    SHA512

    9dc81d7ed1c659284070f6f9c1966cd062fd6ce32f629bbeed1cb685c9ccc91810971f5aaf469697aec345f4b5c89a77dc813dbd0293e236430c9ff4a62480be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7299c909700c74123ca9368fea14c53c

    SHA1

    e51f7928b1a8e4d657a8a899873aa253146f7c86

    SHA256

    ce8bc371fadb45ec1ba076d3d6c3cc9d74cd31786042e427642c3fca13faca8f

    SHA512

    b09d04d067e7a07404e90c6293519ef44ae5cda12701c637668158cb21356b843ac02ffb6727625d52c5cc0e10314648cf08816fc04106b75947c948e73210e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e9eb154bf43ede6d8c9732952fbd728

    SHA1

    879c54507c9bb93c307d678afe2e90860e0e8553

    SHA256

    a4c88e3e562f1fb02e9c801f4fed12b190248002d1eb19c47f471708fd128d9a

    SHA512

    b034dc6e4dbf2321079d5dba3c6fd9f7cd461ddfe895258f5d18e41f623bb98e006bb1a73a4f4e5a87f949d78347be7ebceb204f1ff20364edbf0f30de9ed90a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8

    Filesize

    170B

    MD5

    db676a4ce2e0fbfd5bc6c3f1fb0cc71a

    SHA1

    480b743041b7a78772196a2c9cd0450308c49c63

    SHA256

    c78451513ba6fdf6e43de85e0e6252a1d7312df15aa1c0c3925a119ab8ac8f27

    SHA512

    50ab064fc584edd6515900bb9f50b6a8576ba86ee8cf5ca336c4de0fb2de99462f9166b5fdf9785d8c0f840ca15f7efadb38884bd7ceebcd3ea0b851d4b097fc

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y8UFEBH5\domain_profile[2].htm

    Filesize

    40KB

    MD5

    7bef4bfaa697c24e6c8d71135e861124

    SHA1

    6b341c25c01deee2d10fa765973941f73b09d1b7

    SHA256

    5b9e5b908b0caa1c27ad58c0a6f8aef0b48c41a519be9440def30eaf9b4090cc

    SHA512

    1af12a25ff25bce2e1d15b975ba11dec1a707ec1dcf0bc86633531beb2741d0104ae410c51e684925463d6ce586c0000ce7caa4485e9ce4914e1f28595a64506

  • C:\Users\Admin\AppData\Local\Temp\CabB80B.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarB80E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b