Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    01/10/2024, 00:30

General

  • Target

    03c3ca45b638d7734cc4915530896775_JaffaCakes118.html

  • Size

    6KB

  • MD5

    03c3ca45b638d7734cc4915530896775

  • SHA1

    6205f9c2836057d0250b4efcc5be6ef24d2dacd8

  • SHA256

    abe1ad3828c9f939b1b1ecc83bbf082655b6c3d59264e76fb92a4c86b198c6ab

  • SHA512

    6d24934c914d4825dd282bdeea6a4d4cbdb80322140a49d2c1b20e4769288d7d885bb6adead865f863ca56268312acf75abe6a4fcc47dd83d72b2b0e03d5aaf7

  • SSDEEP

    96:uzVs+ux7+ELLY1k9o84d12ef7CSTUrccEZ7ru7f:csz7+EAYS/9b76f

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\03c3ca45b638d7734cc4915530896775_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1272
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1272 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2508

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d3847b8e52884234e3e4e7f8cb3d889

    SHA1

    fae86f089b5b0d47493a4d479b55a2d46dda0c77

    SHA256

    78da53cee7734c74d4675b44d1eede01da85c1278d31b79b3dd9bc0c24490143

    SHA512

    3de942ee6459f4cd92bc51489b853f06a0d9291ecda206b7177388d926ad833442be98d6186034c3d55f9551e84df052970411f3d4f6ebb159a5f89e183cde9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    005e14fbf92fc531fd26960937fc1618

    SHA1

    a0fcc956fcfb00d72f785a5c67ee3d6720e71e64

    SHA256

    7e4a8b4e121eca8de3f040447dd1d5ebb9f91b3b28f2ec3c33982747c4ebb6d0

    SHA512

    0ca4ba9da0869011c643e3348316f13954a7f073a753fa065f0354930bddf112e2509c7cce09702e95401445c08440c0a79a1302759015b5deb2e18444a39f05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    428dd319496c4b0339b29009a50547d3

    SHA1

    abb7ff983b522b5d0ed1c52ec61e504085881131

    SHA256

    6d9fadfb2d6758653ffae1d041e08b4111c3f26414f316f9073979e4c724f1de

    SHA512

    bb4f9dd38a3724a5cdf0f654d2238e21921b0b7d4ffb0f8cc127c054272d38efb176b6c84bc834e7ea09f16807e0d10c8a465585a6b81b20eaad93eb22776b18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3bc6317b0f143351bdbfea74860591a2

    SHA1

    decdc20beba3e1e862676d155544f86297fc4a69

    SHA256

    aa76a5347b9a942aefc73a6700cd3581bd43ba497f900307b3e9fe8080096ea4

    SHA512

    dd240cbe831e2adb40aec6c840d91bb8f99d6907634cbaed31591b2c9e6adf3133631034917dedcea52081afd087d2c1e4f1bba120a7dc560b168f8c3e208f6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c9d7ed6179fb7386a9e4d5e07cc136c

    SHA1

    e1e6d16f1c13ac271bed93c9650c95b50f0f3000

    SHA256

    81639bd052dcb4f5f3a290037ea74ee479ea82bc5145efd4e9142a917b28825b

    SHA512

    30e14dad45a4356304f0db576acb88d1729a0645572dd0994fde68019db4592fb4a70425648248a643a9e48e7114bc238cdab24388802524e922189257591b76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57213cdfd35b5c1bff3be3355062ed13

    SHA1

    46bda817dc4fa7dab81fc60eb1b17ce97e1c7b7b

    SHA256

    0f3139e1ff2d66fdf2f4fa7aef75fc37a1ef38c95a2beb928e43217a61b64148

    SHA512

    d5ef95fcf882d2db3190cbd1d3fe6d98b8254667d01304c1b013a235ba73fbae2343fad15148a79d2562646e60f2947dda4c9c4c3cd7e83d41066784095dbb0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e8b63432a5d8b52e0bcb5b32c1001bb

    SHA1

    591de797ba82a8466f2016e5f7ed9e766e391ed7

    SHA256

    b179b02b43c2b315c039d5c59871373267232b241e871d5c7be36fee1fd37b7a

    SHA512

    8846d940b3d8bb0e3173b553218f7610925a67d2ab830070423d1ca82dd6a2e5bee9c5812ed050f807baae1f321367205185ff7546cf1f0fae21b6a5dff6da54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b921588c9ee3945d373032f30328036

    SHA1

    da96474084fda23fff4ea6ccaf0b6771bbca6d9f

    SHA256

    835f86edb12528fb0ae60d0a40d9afce988cd7399ab8395c09fa20d9d935c8be

    SHA512

    6ef2ed9781ee7159bc562dc62c244a263f20c4805499ff806af9efe2181ce657874e02eefaf5823c390c752769da54f203eda495a9f194cbc8d1e439931a2062

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e1a4ce23910c547e1996b5f7dac1a33

    SHA1

    61438cd8307a2eaf1f6d569a07cd2e48487b1b1b

    SHA256

    c37569d115f4d9b75e87057426245c285f799ea5450086e20ca4db6e472569e2

    SHA512

    674354f89743f8d47070a7e2e4f8fb474ead0202f17385a41175c1161c2a1868dd0a5ad3fdc3992206a352c8daa5baf8d35216cca49039b2cb7d2b5424a6b2b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    33077e7ec65094a75648b663fc64c31e

    SHA1

    80bf5c62e8669b0941eda8407b7f9e8eac026588

    SHA256

    b350aa525e769551333e2c22c08f5c283eb9a47daffff11735532473fd77834f

    SHA512

    01c88f7332aa8bb589963cae12d75721bf14a55f2f2c20b406e3b0b0b21f55408bccc07c4ec4f725624aca2abbb0880d423c65d02a88ec24798cf3bc829d56fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8fa6cfbb8be1334fb9dea8fdfe35adf7

    SHA1

    7e821fcec14e5a5629b027108e0ce706120965fb

    SHA256

    f951f5afff1f814a8112b53048f0d21c5b68a20acf214300a72760d9a0ba3b75

    SHA512

    b65aacdbf4accbf9fdb9a75b9300b57306df448c39a8b1421bd234e96231642e04f610a36598f69ac18a68588df385026f3dd09469b9d7ae04bca290e068c96a

  • C:\Users\Admin\AppData\Local\Temp\CabE7B2.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE862.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b