Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    30/09/2024, 20:26

General

  • Target

    0323681fcf82a17e64619343aadf6666_JaffaCakes118.html

  • Size

    732B

  • MD5

    0323681fcf82a17e64619343aadf6666

  • SHA1

    02e9841aa202eb24ffce814cf043706f3fa54d26

  • SHA256

    7e6e0eb3249a6449d479175f38de0aa21c9da785a8da9f03425b9c4e3b6aca49

  • SHA512

    c4393dff563889b14315afe2b89b81d5d0f771875c83466b0709681ea3810631eec263f30850297abf40114029ec9dc5f792b3366d663297059ae814b9f2d50f

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0323681fcf82a17e64619343aadf6666_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2156
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2156 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2380

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    40add32d5088ec059ebc263620e0d90c

    SHA1

    b7c361f0464aee38a83bcb78fe66cc21940bba37

    SHA256

    de43d71a3933a8bd451a759c55eee8eb10b2480d4d403e498e94dd256c4e38e5

    SHA512

    06c6cd67c94d7bc9b5aa41ce6d3d9ea0582ca7017e62002fa71f5b3753859efcd1fe5bdadda09efbf217a9cd552f3853c611dcfa0447d722f48727e540c8f0b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    526cff0735b7897246ad4ecbf06b8b9b

    SHA1

    182bbac30e6a3f4e5d51baef21e69c03db4288d2

    SHA256

    ee2098b322cbcab225b4b8bb9f04e680bffcd599d4d67390bb05cb0662c85c61

    SHA512

    b839d9e5fa0194c98aecfb5bfe76180d25e730ac5cac6a3920d63c83033bf13216a3c571efc9e5320b04b79339696d55c3a43ff5bdf8fd5a5573349f8a65ce49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d9b42840da38a207c4893d6d5399100

    SHA1

    19062b3fd745d1354cff985d4cfdacf1bef94eef

    SHA256

    25a5f8dfd52bab911fde778415170b4795fa3e196c73b244951bebc8b3e62510

    SHA512

    1e20240c398a8b3e1a5ef7c8bcf2010208477e3f993415236600a61b071a36bb42743aacf1974403a7a2111d3e6c122bfedefa7af0641cf3fc61c393cf53380d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5336aa2e784198b25a90e419d2e6870

    SHA1

    8870b67c21e06f1740c133044df7bee458d1d704

    SHA256

    a10674854b28a270e61a703908c76c0d38435d1e7ff28b7e001c9d3dc4ddc5de

    SHA512

    b601e5b0d3434cd9ed055c807d62e18eb401852da7ddc15a1a4f7fd333d65e9a5e1a2cb6744eff674e85cb5b3e57aa0f4a38accd5fcd8839d193cf1bc2fb3a99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e363745346f649bd03278db9f5873c8e

    SHA1

    65e14ab94f53e5d8329fdf996afeef4fc8c08e69

    SHA256

    695eeba19c16a5eff338e292d028dda55ff4918800b5c1a91bc371891703d4f4

    SHA512

    171c0b3e05521c6ec846c0fb88e255df733690022c7813718eebe249f31c6995a84596700dc394cfed5f38bad2ad2dc4f425253349743c41a572b9829a8a3af2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7acee511ad735437e36c2fcd4fd59f6

    SHA1

    b2d82a3b5a4725f000057f2dea6534b8fc11ab74

    SHA256

    0584fcc5387b662f0251807d48e5577b12d5d2ed5ef3cb53cbc80d466e92a93b

    SHA512

    add4784e45b844f4a0468d7e7d2f6883adf45084c906c3f14dc20700859470838167b725796afd3baf37314d8f65abcd66e0cfb4928b45cf9ebade0687f958ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f33e7c6c41290e4cc5075c5049b5ba6

    SHA1

    636d178f96cdd970821b4f70335c7841a4a452d9

    SHA256

    82becde5d01bff45448914ee1a14d7d14173d6b0044bc143a98b72a30913136d

    SHA512

    c045e790359eea87844e211413ac662adbf66a14dc4e151d7a91543d2f015c33d25d8314452bce05ae17b7d98826996bf078e63c611c4e7294b97565c317a06d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ebc2d8ebe096ec660992ca74325ab20a

    SHA1

    1bb6a684760bc7b5bb0dd42257ebad5de6ac9190

    SHA256

    48190da45d857865530aaea2c832ff91d6dbc5c2b181486b49ef15ca9647ffb0

    SHA512

    7f3a52c933af9a12e3560f1b80bac68ba0ba4bbc468f9a56388b6a5034491fbccd340e890cc472ea760f4026eb6689d491a254b2cca026355621ba8b972a9892

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6eca4bb7875df0e5d16cfc6baf1360b1

    SHA1

    1b16ef0e00b9156d0bf9310c7ebd55dd384b47fe

    SHA256

    bed39b09fb3a4d023c1a337259da5939c9527e208ba508272ba138bfdd5fceae

    SHA512

    e850a2ec3bb0ac09a77f267fb089661f43621bfa91af5169894725ab05fc7c37e017ae54d0a079f86ef19e6d4e90af560c6d537ad5a1ed9d5d560fd9747bb270

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ccc87107e446fadfcbc97bc79b08bc1

    SHA1

    0698e0fd3ccc4c6cf7de537999dcc62635c4734a

    SHA256

    60912b8ed41b8a966d67adfe28b327ae244a0d7f8e3cccb63e54f0b3dcec213a

    SHA512

    3cf86602a4a7cdc0ad9a83ac01a1ad904e378b197c90a4b13a04fab974389e989344ff30302fba821d2ac4821e00d7e5ebab1553ca48f7b4f706a02a55b2a15d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dafcfd7d6a4e3297c97d81e9f3bd7256

    SHA1

    1e5866930f804aeeb50cfc0b6b8815d47d05a67a

    SHA256

    783f02904083094040e13c00af22945b87ae1ea2c51bd14d0c09e6272801db20

    SHA512

    d2164d41b6f32f5070fdc9eca82ffa5d664020b6e445cc53aa9782da983c94d041e49509e695fbc35f176046367cff06605c400e40c107d3071127f902e3e096

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    27d5e6a9e0a29dcdd7459359001eecf8

    SHA1

    4129c4745be11df02ec50d89478be273ab4b5493

    SHA256

    af8ade016e7e08c9731d2ff2f6d4f8d21c4af546456936b4222ba82e7530fb8b

    SHA512

    5e3f56188e520fe79dd98505c71b13fc642686cc3d58831bd341cefda41a2064d302c395b477bc674dadabe2ae2997d34346685f6115d349124141893c49fb8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    65375df566b00d0dbd9cc75aef521ee7

    SHA1

    f19fc7cdf6d2ef907f761f73f8a88b03004af41c

    SHA256

    a34737d5c87d5ea9f068a506a95a3767e2da1df293ca25b879a5c39aa95a1510

    SHA512

    4daec1cd8411c417a6a4fd66c8b9acafa3ddd2077facc1a24e45b697dc984b740c5b452720e4210ada348aba565c2f1e27aeff24bd9b8657b811cace523d94dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c9634321e9185ffc0c6e31b47b4b2cec

    SHA1

    120706c8c8c956b69d9e77e903cef85bd5387107

    SHA256

    97e958ef1a75f6cb3e5790de0455dd75261103e63723afdfa74a0aa03f01b637

    SHA512

    b37ac6d4ead705035a40812b73094cc0716abc4dc9274edb86001ded4835439f10c91cc74eed2e08953eba40e4f92090aeb0fce840af6e12f37a14f714e2e108

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7c2c8d59c1c8ff7c597812f8ff997514

    SHA1

    30c9c140ef2c436cd459664e5d20b11d389813b9

    SHA256

    c19b92120780da329f83e7693d2650e2c6fa0e98727f5c5eb67cbd7c2dc345bf

    SHA512

    8cb7f6d1e232d1c10a29f9d87fdb899a99716cfb9f862e6c3e9deefad61a8427ae35a8dcbe119d12da4ebc1727480635a6c6e3d1121602206067cbd72d4cba15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    62b9ffab6fa90eb0843f09cecf73f90e

    SHA1

    08dfffe8cd593e6237476ee486ca72214a752d0f

    SHA256

    3ce6162066803a9ab7c75d1d3312a164b6dc853a4909e0acfbf406074710d238

    SHA512

    94394caa8be6120cc52bd72bd9dcc2d74a4d0cca6e13effe4e96f2ccfe1143448c31e3cf978fba9b18d73c4083f1cf946d993c850e2ef18d6af5ce8ce50d3ca3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    203244dc6a602343c1a4979885152960

    SHA1

    1f46cd8ed0308982bc0e6a45af4c3ed5e8b9672f

    SHA256

    9e7b1faaa1b684b938fea5c6bbffd26ebff030ea572307c67ce6b82cac3b6d5d

    SHA512

    05acf33eeab9a70d559736c75b40adc9cda2bd48cb363c15cbf3b65bc35285fa10c1cbbe96b1885380094af2abafe52ac312bfb76014805494318d7db1e75929

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7637b228952078c03ff584a9fec9ff81

    SHA1

    dc5061ede5fb8e837450718a2e0b7affe5dc4e04

    SHA256

    a7dda8db52aa45516ef0bdea268d19f28550782c9972bb656f1636dffeca69f8

    SHA512

    42d7ab2d937daa0d8b03a2154ac3f2ba4b2f526304393b0e8baf22c6405bb0f947a903d3b6ea0726ea0b5d27a66faeafcbda61ddac2f76fcb4359114fea0d884

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e3722917816bd662ba25eaa0f3973104

    SHA1

    7c86d240a70deae21f6b8923a123a9392ec5127d

    SHA256

    6e54b67d090fac6e5b9d44a69fd4f021fd9895800134fe2f4e15d198f9eec9af

    SHA512

    ae82f995aeff8c4fa331a92e190b723ef3195933741b5e7aaae0d83f7b2491924cf4a94d8106488bc95e8c1f5f0b96b6764925ddcf2d3c09bc082ff30ff4a7df

  • C:\Users\Admin\AppData\Local\Temp\CabDB43.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarDBE4.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b